Uber sharing travel trends and new making airport travel a breeze with new features

Posted in Commentary with tags on March 7, 2023 by itnerd

Canadians everywhere are flying out of their seats at the opportunity to travel and get out to see the world again. And with spring and March Break just around the corner, many Canadians are looking for easier ways to plan their travel and navigate buzzing airports across the country.

As Uber trips to the airport are outpacing pre-pandemic levels, today, Uber is launching new in-app products and features as well as sharing Canadian travel trends to take stress and guesswork out of travel planning and, ultimately, help get Canadians to and from, and even around, the airport as quickly and efficiently as possible.

NEW IN-APP PRODUCTS AND FEATURES

  • Be ready to roll from the get-go: With Uber Travel, you can reserve rides for each leg of your itinerary in one fell swoop. Just connect your Gmail account and Uber will do the rest, organizing your hotel, flight, and restaurant reservations all in one place for a stress-free travel experience. With Uber Reserve, you can choose the ride that best fits your budget, luggage, and group size needs. Plus, you can also book your ride up to 90 days in advance, enabling you to lock in your ride at the same time as your flight and hotel, leaving no part of your trip to chance.
  • Minimize airport wandering to maximize your time for adventure: Seamlessly make your way through the airport with the new step-by-step wayfinding feature on our app. With detailed directions to get from the gate to the rideshare pick-up area, their new wayfinding product will help you navigate through airports with ease. Available at 30+ airports across the globe including Toronto YYZ and Calgary YYC in Canada.
  • Every minute counts: We all know the feeling of waiting to deboard a plane and wondering how long it’ll take to get from the gate to your ride. That’s why Uber is rolling out a new feature to help you plan how long it will take to walk from your gate to baggage claim, so you can accurately request your Uber ride. Available soon at more than 400 airports around the world including airports in the following Canadian cities: Montreal, London, Vancouver, Kitchener-Waterloo, Regina, Winnipeg, Calgary, Hamilton, Halifax, Ottawa, Quebec City, Toronto, Windsor, Kingston, Edmonton, Niagara Region, and Saskatoon.
  • Business Travel: Soon Uber for Business will be rolling out Business Comfort in select cities, an exclusive ride option for those traveling for work with a unique business-class experience. 

CANADIAN TRAVEL TRENDS 

Heading into one of the year’s busiest travel seasons, Uber looked at Uber Rides data to share new trends and insights highlighting how Canadians like to travel—from the busiest time and day of the week for travel to and from the airport to their favourite pre-flight eats!

Whether it’s arriving at the airport with enough time to grab a bite or looking for a quick and easy ride home after your travels, check out how these Canadian travel habits might help you plan your next trip.

Hello beauty sleep and goodbye to the red-eye

  • We’re a nation of early risers that want to be home by the end of the workday. On average, Canadians travel the most to the airport at 6:00 a.m. and back home at 5:00 p.m. Toronto is full of keeners, with the earliest travel time to the airport at 5:00 a.m. and Vancouverites want to be home by lunch, precisely at noon. 

We’d rather celebrate TGIF in the sky

  • What better way to kick off travel plans than with a weekend to play? Canadians would rather travel to the airport on Fridays and give themselves a three-day weekend by travelling back home from the airport on Mondays. If one thing is for sure, it’s that we know how to live it up.

We take our pre-flight culinary pre-gaming seriously

  • Many of us resort to snacking while waiting to board our flights—”treat yourself” is a way of life in our great nation. Canadians’ favourite way to do this? With breakfast sandwiches and muffins. As expected, we also have city-specific tastes. Toronto and Calgary have a penchant for spice with orders like pad thai, chicken shawarmas, butter chicken, and naan. Montréal loves tried, tested, and true comfort foods—think dumplings, fried chicken, and burgers. And Vancouver? With a (very specific) popular order of half chicken, fries, and soup, we’ll let you decide for yourself.

PROMO 

To help Canadians prepare for takeoff with these new airport features, Uber One members who use Uber Reserve in March 2023 will earn $20 in Uber Cash to put towards their next Reserve ride with the code GORESERVE. Canadians can rely on Uber to help them get where they need to go and back again safely, stress-free, and on time.

The full news release on the Uber website here.

Salesforce Makes Several AI Related Announcements Today

Posted in Commentary with tags on March 7, 2023 by itnerd

Today, Salesforce put out a number of announcements. Each announcement leans into building responsible generative AI tools and ensuring they’re accessible to all scales of business. 

Einstein GPT

  • EinsteinGPT is the next generation of Einstein, Salesforce’s AI technology which currently delivers more than 200 billion AI-powered predictions across Customer 360 per day. 
  • With the combination of proprietary Einstein AI models with leading large language models, customers can use natural-language prompts on CRM data to trigger powerful, time-saving automations, and create personalized, AI-generated content.
  • At hyperscale, the technology delivers AI-created content across every sales, service, marketing, commerce and IT interaction.

ChatGPT for Slack

  • As part of an ongoing partnership, Salesforce and OpenAI introduced the ChatGPT app for Slack, built by OpenAI on the Slack platform, available immediately to all users. 
  • The app taps ChatGPT’s powerful AI technology to bring instant conversation summaries, research tools, and writing assistance directly into Slack. With the new integration, customers can:
    • Get up to speed faster on channels or thread: AI-powered conversation summaries help users quickly catch up on what’s happening.
    • Instantly find answers on any project or topic: AI-powered research tools, users can learn and build expertise faster right from Slack — whether they’re researching best practices, prospecting a new account, and more.
  • Draft messages in seconds to communicate with customers and teams: AI-powered writing assistance, users can spend less time crafting replies, status updates, and meeting notes — and more time putting the plan in action.

Salesforce Ventures Generative AI Fund

  • Salesforce Ventures launched a $250 million generative AI fund to bolster the startup ecosystem and spark the development of responsible generative AI. 
  • The fund will initially invest in four companies, AnthropicHearthYou.com and Toronto-based  Cohere.ai. Each organization has demonstrated an ability to meaningfully transform application software and impact end users’ workflows using responsible and trusted development processes.

You can click the links above to learn more about each announcement.

Cradlepoint Unveils New Global MSP Program

Posted in Commentary with tags on March 7, 2023 by itnerd

Cradlepoint, the global leader in cloud-delivered LTE and 5G wireless network solutions, today announced significant updates for Managed Service Providers (MSPs) at this year’s North American Partner Summit in Austin, Texas, March 7-8. To bolster the managed service provider (MSP) experience, Cradlepoint will expand its current offerings as part of the existing Cradlepoint Partner Program, including enhancing NetCloud functionality and licensing benefits, specialized support, and the development of an “MSP Playbook.”

Organizations across industries increasingly turn to wireless solutions, such as 5G, to deliver agile, secure, and reliable wide-area network (WAN) connectivity. Gartner believes that the year of “wireless value realization” is upon us, with 50 per cent of enterprise wireless endpointsexpected to use networking services that deliver additional capabilities beyond communication by 2025. This rapidly growing market underscores a significant opportunity for Cradlepoint and its partners to expand their Wireless WAN leadership, particularly regarding MSPs leveraging Cradlepoint’s NetCloud Service and portfolio of fixed sites, mobile, and IoT cellular routers.

Customers leverage managed services to cut IT costs and stay current with new technologies. In response, MSP customers rely on Cradlepoint solutions, managed by NetCloud Manager, to meet growing needs. Cradlepoint is introducing a new flexible subscription model, allowing MSPs to control their customer lifecycle and bolstering profitability while rewarding partners for their performance and loyalty through future lead generation capabilities.

Specific new enhancements include: 

●  Updated Benefits and Requirements that align with the MSP practice 

●  Cradlepoint University Training targeted specifically for the MSP practice

●  New MSP-only subscription model and pricelist

●  Planned NetCloud Manager enhancements exclusively for MSPs

●  “White glove” logistics support

In addition to these enhancements, Cradlepoint will develop an “MSP Playbook,” set to launch in the second half of this year. As part of the playbook, partners will receive guidance on their market opportunity, use cases & success stories, marketing, sales, training support, and a full program review. The Playbook is designed to support MSPs further as they work with Cradlepoint to create and deliver managed networking and cloud-based services as key components in their offerings.

To learn more about the Cradlepoint Partner Program with the new MSP entitlements that will launch in Q3 2023, please visit Cascade or https://cradlepoint.com/partners/for-partners/resell-partners/.

BidenCash Market Posts 2Mill Credit Cards Online In Birthday Blitz 

Posted in Commentary with tags on March 7, 2023 by itnerd

First reported by Cyble researchers last week, this story continues to get lot of buzz from Fox News and others this week. A web site that goes by the name of Biden Cash Market has posted 2 million credit cards online as a promotional blitz to attract customers. The site operates on both on the dark and clear web, offering credit card data for sale to the public.

The leaked information includes cardholders’ full names, card numbers, bank details, expiration dates, CVV codes, home addresses, and over 500,000 email addresses. According to D3Lab’s Head of Threat Intelligence, Andrea Draghetti, while tens of thousands the numbers are duplicates, over two million of the entries are unique.

Last fall the same BidenCash Market released a free dump of over a million credit cards in a similar promotional gimmick. 

Baber Amin, COO of Veridium had this to say:

   “Even the most security aware can have their credit card information compromised and made available. This can happen due to no fault of the individual.

   “The data dump is not just about credit card information but contains valuable information that can be used for Identity theft. This second part should be a more serious concern, as it can lead to damage to credit score, reputation, and possibly legal issues. The damage from identity theft is long lasting.

On the financial side, the two main points of credit card compromise are:

  1. Point of sale and
  2. magecart or online skimming.

   “EMV or chip cards were supposed to stop point of sale skimming. But because all EMV cards also have a mag stripe, if someone compromises the POS terminal where users are putting in their card, they can skim the information from the magstripe bypassing chip security.

   “Contactless cards aka “Touch and Pay” is thus more secure than even EMV, as the card never needs to be inserted into any device and never leaves the user.

  • As a merchant, make sure your POS terminals are up to date, especially for areas that are publicly visible, e.g. gas pumps, vending machines, ticket kiosks, etc.
  • As an end user, always opt to use contactless payment at the point of sale.

   “Magecart or online skimming is the compromise of online shopping carts and checkout process.  Bad actors can inject malware into ill maintained ecommerce sites. 

   “Additionally, all the security offered by EMV and contactless cards is nullified, when the user voluntarily enters the CC information at checkout. Not only that, but they also enter information that can be used for Identity Theft, e.g. email address, shipping address, possibly a username and a password, etc.

  • It is important for website administrators to stay up-to-date with their content management system’s patches and plugins. 
  • Buying from reputable online vendors is the best option for end users:
    • If possible, use virtual cards online
    • Use unique usernames and passwords on each site if you must create an account
    • If they offer PayPal during checkout, use it, as it creates an indirect level of payment
    • A better solution is to use services like Apple Pay and Google Pay, which replace sensitive information with arbitrary tokens (Tokenization). These services provide a more secure and convenient experience, as they use tokenization to protect sensitive information. Since these tokens disappear after each authorization, they cannot be reused if stolen. The other advantage of these services is that they work both in person and for online shopping. EMV or chip cards are reduced to the security of the older non chip card when paying online, as there is no chip reader available.”

These are all good tips that I hope become the norm so that scams like this become a thing of the past.

EPA To Require States To Report Public Water System Cyber Threats 

Posted in Commentary with tags on March 6, 2023 by itnerd

On Friday the White House said it would require states to report on cyber threats noted in their audit reports of public water systems. This comes a day after they released their new cybersecurity strategy:

The Environmental Protection Agency said public water systems are increasingly at risk from cyberattacks that amount to a threat to public health. 

“Cyberattacks against critical infrastructure facilities, including drinking water systems, are increasing, and public water systems are vulnerable,” said EPA Assistant Administrator Radhika Fox. “Cyberattacks have the potential to contaminate drinking water.” 

Fox said the EPA would assist states and water systems in building out cybersecurity programs, adding that states could begin using EPA’s guidance in their audits right away. The agency did not respond immediately to questions about enforcement deadlines.

Public water systems could be easy targets for hackers and with minimal security attention/funding might act as a front door to ransomware attacks not unlike the recent attack on Oakland, CA.

Jan Lovmand, CTO of BullWall had this to say:

   “Often forgotten in the battle to prevent cyber attacks, physical municipal infrastructure such as public water supplies can provide an open attack surface for hackers, as evidenced by 2021 attack on a Florida water supply. The EPA Assistant Administrator, Radhika Fox, noted that a threat to public water systems is also a threat to public health, as cyber-attacks have the potential to contaminate drinking water and said that it is essential to address the cybersecurity of these systems as a top priority to protect public health.

   “The cyber risk to public water systems is not just due to their connectivity to government networks, as it could be just as easy to shut down a city by controlling their water supply as any other aspect of their infrastructure. Municipalities that do not prioritize cybersecurity and do not have robust protections in place are at higher risk of falling victim to these types of attacks.

   “The White House is proposing that states report on cyber threats noted in their audit reports of public water systems and the EPA is offering guidance to states to assist them in building out their water supply cybersecurity programs. However, given the critical importance of these systems to public health and safety, municipalities had best prioritize cybersecurity investments now, to prevent cyber-attacks and safeguard their water supplies.”


David Brunsdon, Threat Intelligence, Security Engineer at Hyas follows up with this comment:

   “Water systems utilize a significant amount of automation and are monitored simultaneously by the control systems, and human operators. Like in Florida, 2021, threat actors could misuse the system to introduce chemicals to the water. A more sophisticated attack would be covert and would obfuscate the changes from both the plant operators and automated monitoring systems.

   “Municipal governments and water treatment plants are vulnerable to well-funded nation-state actors, and so protecting water systems should be considered a national security concern.”

This is a good move by the EPA and I hope this leads to an improvement in terms of the security of these facilities. Because really bad things could happen if these facilities don’t up their game.

Twitter Took A Dirt Nap Today Because Of A Single Engineer

Posted in Commentary with tags on March 6, 2023 by itnerd

Once again, Platformer has got to scoop on what’s happening inside Elon Musk’s Twitter. In today’s episode, the have details about today’s Twitter’s latest dirt nap. And it illustrates the effects of Elon’s cost cutting measures:

But in a sign of just how deep Elon Musk’s cuts to the company have been, only one site reliability engineer has been staffed on the project, we’re told. On Monday, the engineer made a “bad configuration change” that “basically broke the Twitter API,” according to a current employee.

The change had cascading consequences inside the company, bringing down much of Twitter’s internal tools along with the public-facing APIs. On Slack, engineers responded with variations of “crap” and “Twitter is down – the entire thing” as they scrambled to fix the problem. 

Elon Musk was furious, we’re told.

“A small API change had massive ramifications,” Musk tweeted later in the day, after Twitter investor Marc Andreessen posted a screenshot showing that the company’s API failures were trending on the site. “The code stack is extremely brittle for no good reason. Will ultimately need a complete rewrite.”

Some current employees are sympathetic to that view, which places at least part of the blame for Twitter’s problems on technical failures that predate Musk’s ownership of the company. The fail whale became an icon of the old Twitter for a reason.

“There’s so much tech debt from Twitter 1.0 that if you make a change right now, everything breaks,” one current employee says. 

Still, when Musk took over the company, he promised to dramatically improve the speed and stability of the site. His associates screened the existing staff for their technical prowess, ultimately cutting thousands of workers who were deemed not “technical” enough to succeed under Musk’s leadership.

But nonstop layoffs have left the company with under 550 full-time engineers, we’re told. And just as former employees have predicted from the start, the losses have made Twitter increasingly vulnerable to catastrophic outages.

Yeah. Elon’s got a major problem on his hands. He’s basically backed himself into a corner where he doesn’t have the resources to run Twitter and keep it stable. And there’s no clear path for him to exit that corner. Which basically means that we need to buckle up as things are about to get even more turbulent than they already are in the Twitterverse.

Asigra to Protect the World’s Catalog of SaaS Apps with SaaSBACKUP

Posted in Commentary with tags on March 6, 2023 by itnerd

 Asigra Inc., a leader in ultra-secure backup and recovery, today announced SaaSBACKUPSM a powerful new SaaS-based backup platform designed to provide comprehensive backup and recovery capabilities to SaaS applications that include Salesforce, Microsoft 365, Google Workspace and far beyond. Through innovative API connectivity, SaaSBACKUP is able to support a large macrocosm of SaaS applications with enterprise-class data protection that ensures business continuity.

According to Fortune Business Insights, “The global Software as a Service (SaaS) market size was valued at USD $215.10 billion in 2021 and is expected to grow from USD $251.17 in 2022 to USD $883.34 billion by 2029, exhibiting a CAGR of 19.7% during the forecast period.”

Because of the surge in SaaS adoption, it has become increasingly important to protect the mission critical data in these applications. However, many businesses and IT users do not realize that most of these applications offer weak or in many cases, basic data protection capabilities or guarantees of data recovery. Depending on the SaaS application, data recovery may be the sole responsibility of the user. This puts the burden on the user organization to deploy a backup platform capable of providing the required level of protection.

Asigra SaaSBACKUP was developed to deliver protection for business users across the widest range of SaaS applications, including apps in the areas of Customer Relationship Management (CRM), Enterprise Resource Planning (ERP), Content Management System (CMS), Project Management, sales, marketing, eCommerce solutions and much more.

The new SaaSBACKUP platform provides the following advanced features:

  • Multi-SaaS Support – SaaSBACKUP is designed to protect data across a multitude of SaaS environments, ensuring 24x7x365 protection of business data.
  • Fast, Simple Deployment – SaaSBACKUP provides mass deployment across hundreds or thousands of SaaS application users simultaneously for immediate and consistent protection. 
  • Bring your Own Storage – Store data in your own storage repository, own the data and if you don’t have one, leverage our relationship with select partners.
  • Simple Pay Per Use Model – pay for what you use. Per user, per app, per month.
  • Unique Multi-person Approvals – Configure the software to require multiple people to approve potentially destructive actions to protect against credential theft, user error or insider threat. Designed to require multiple people to approve within a set period of time for key functions such as deleting a data set.
  • SaaSBACKUP Marketplace – A future addition to our platform will be a marketplace enabling a simple revenue share opportunity for partners who build connectors to new SaaS applications.

Unique in the data protection space, SaaSBACKUP is a True Platform as a Service that is turnkey and requires no infrastructure installation. Additionally, all maintenance is updated by Asigra and managed in the cloud. The platform is secure by design, built from the ground up with integrated security, including MFA (multifactor authentication) and MPA (Multi-person Approval) to protect against unauthorized acts due to credential theft, user error or insider threat. The platform features military-grade encryption with FIPS 140-2 certification to protect data at the highest security and compliance levels.

Developed for Managed Service Providers (MSPs), Asigra partners will ultimately have access to a software development kit (SDK). The SDK enables rapid SaaS application connector growth, allowing partners to continually add new SaaS app connectors as needs arise. Regarding the backup repository, MSPs will select their own storage environment, including AWS or any other S3-compatible cloud storage platform. Complementary to traditional on-premise backup solutions, there is no need to rip and replace existing software as the solution is additive, bringing new revenue to partners.

Availability

Asigra SaaSBACKUP will be available in North America in Q3–2023 and Europe/UK in Q4–2023. Managed service providers may register to receive updates or to become a Launch Partner at https://www.asigra.com/saasbackup

US Federal Reserve Becomes A Zoombombing Victim

Posted in Commentary on March 6, 2023 by itnerd

I haven’t heard of this happening for a long time. But apparently a Zoom call hosted by the US Federal Reserve got Zoombombed according to Reuters:

A virtual event with Federal Reserve Governor Christopher Waller was canceled on Thursday after the Zoom video conference was “hijacked” by a participant who displayed pornographic images.

“We were a victim of a teleconference or Zoom hijacking and we are trying to understand what we need to do going forward to prevent this from ever happening again. It is an incident we deeply regret,” said Brent Tjarks, executive director of the Mid-Size Bank Coalition of America (MBCA), which hosted the event via a Zoom link. “We have had various programs and this is something that we have never had happen to us.”

He said that he suspects one of the security switches that mutes those watching an event was set incorrectly, but he was not sure of the details. The decision to cancel was made in consultation with the Fed after the intrusion.

Zoombombing was a huge problem a few years ago. But after Zoom did some changes and a lot of education, I stopped hearing about this. Thus this Zoombombing instance is a bit of a surprise to me. I for one will be very interested to find out how this happened and what they, along with Zoom are going to do to make sure that this doesn’t happen again. Because this was a high profile Zoombombing incident. Which means that this will spur other incidents in the coming days and weeks ahead.

CybSafe Appoints Hylton Southey and Geraint Owen as VPs of Sales and Finance

Posted in Commentary with tags on March 6, 2023 by itnerd

CybSafe, the human risk management platform helping organizations change behaviour to reduce security risk, today announced the appointment of Hylton Southey and Geraint Owen as VPs of Sales and Finance, respectively. These new executives will be crucial to the company’s continued growth and momentum.

Hylton and Geraint will play an integral part in expanding the company’s global reach with entrance into the North American market by increasing its presence in the United States and leading CybSafe’s financial, operational, and cultural development at a time of significant opportunity for the company. These new appointments prove CybSafe’s commitment to further growth in 2023 and beyond.

Hylton joins CybSafe as the VP of Sales and brings over two decades of experience in sales leadership, corporate development, and business strategy within the information technology and services industry. He has an extensive background in SaaS, enterprise software, and growing early-stage companies.

Prior, Hylton was Managing Director at LeanIX, responsible for accelerating the company’s growth. He was also the VP of North American Sales at MailControl. Hylton was at Mimecast for over nine years. He started off as an account executive and sales director. He then worked his way up to VP of Sales in North America, and global VP of Corp Development. Hylton’s leadership presence in Boston, MA, reinforces CybSafe’s expansion into North America and supports the company’s intent to increase the size of the team to strengthen customer support, sales and partnerships in the United States.

Geraint, as the VP of Finance, will lead CybSafe’s financial strategy and operations. He has over 15 years of experience as a finance leader, focusing on scaling SaaS companies. His background includes leading finance functions in fast-growing technology companies. Geraint was the CFO at Grip, an AI-powered event, matchmaking, and networking platform.

He was also the Finance Director at Questback, and Manager at Deloitte, working with businesses on funding rounds and IPOs. Geraint enjoys working with all aspects of the company to help drive the business forward. Geraint understands how to execute strategic financial growth plans and operational excellence. He will play an essential role as the company accelerates and scales.

Twitter Has Once Again Taken A Dirt Nap… And This Time It’s Big

Posted in Commentary with tags on March 6, 2023 by itnerd

Another day, another outage with Twitter. This outage has broken all links on Twitter because of errors with the t.co link shortener redirect API. When you click on a link, you get this or something like it:

But that’s not all. Elon has managed to break more stuff. Images on Twitter are also completely broken for many users. The entire Tweetdeck web experience is also broken. And there’s still more than that. Specifically:

  • Twitter subdomains are broken for things like Developers, Ads, etc. are broken
  • The ability to report an account or a Tweet is broken

Of all the recent Twitter outages, this has been the worst by far. Thus confirming what I have been predicting for a while. Twitter’s reliability is on the decline and there’s nothing that Elon can do to stop the inevitable demise of Twitter. That’s really not going to help Elon make money from the platform because advertisers aren’t going to want to advertise on a platform that has one foot in the grave. Never mind people signing up for Twitter Blue. Because in either case, you’d just be throwing away your money.

Happy Monday Elon.

UPDATE: Speaking of Elon, he actually had something to say about this:

The platform wasn’t anywhere this “brittle” before he took over. Just an observation.

UPDATE #2: Twitter appears to be working…. For now.