The Rising Importance of Open-Source Governance

As Teja Kummarikuntla, Developer Relations Engineer at Harness, explains, “Your software might utilize a lot of open-source components, and when it comes to their usage, you definitely want to avoid using certain libraries or specific versions of those libraries that could be malicious or against your organization’s policies or legal compliance.” The challenge lies in governing the use of these components, especially at scale, where thousands of libraries and dependencies might be in use across various teams and projects.

Harness’s Software Supply Chain Assurance (SSCA) module offers a comprehensive solution to this challenge, enabling organizations to govern the usage of open-source components effectively through tools like SBOM (Software Bill of Materials) Policy Enforcement.

Understanding SBOM and Its Role in Governance

A Software Bill of Materials (SBOM) is a detailed inventory of all the components—both proprietary and open-source—used to build a software application. It includes essential information like component names, versions, licenses, and suppliers. An SBOM provides visibility into the software’s composition, making it easier to manage potential vulnerabilities and compliance risks.

Kummarikuntla highlights the importance of SBOM in governance: “The SBOM not only brings transparency but also opens up the opportunity to improve security and ensure compliance. It enables organizations to define and implement specific rules governing the use of open-source components, including criteria to allow or deny components.”

Steps to Implementing Governance Over Open-Source Components

Implementing governance over open-source components involves several key steps, which can be effectively managed through the Harness SSCA module. Here’s how organizations can leverage this technology to govern their software delivery process:

1. Generate or Ingest SBOMs

The first step in the process is to generate or ingest SBOMs for your software artifacts. Harness SSCA allows you to generate SBOMs using integrated tools like Syft and cdxgen, or ingest SBOMs created by third-party tools. This flexibility ensures that organizations can maintain a comprehensive and up-to-date inventory of all software components.

Kummarikuntla notes, “The SSCA module can generate SBOMs in popular standard formats, such as SPDX and CycloneDX. This normalization process ensures that your SBOM data is consistent, easy to manage, and ready for policy enforcement and further analysis.”

2. Create and Define OPA Policies

Once the SBOM is generated, the next step is to define policies that govern the use of open-source components. These policies are created using Open Policy Agent (OPA), a policy-as-code approach that allows for granular control over what components are permitted in your software.

“This is where Harness SSCA’s SBOM Policy Enforcement comes into play,” says Kummarikuntla. “You can define the rules with an allow list and deny list using the Rego language, specifying details about the components, versions, licenses, and even suppliers that are allowed or denied.”

3. Attestation Verification

Before enforcing policies on the SBOM, it’s crucial to verify the attestation generated during the SBOM orchestration process. This step ensures the integrity and authenticity of the SBOM, adding an additional layer of security to the process.

“The attestation verification requires a public key and is performed before the policy enforcement takes place on the SBOM,” Kummarikuntla explains. This step is essential for ensuring that the SBOM has not been tampered with, providing confidence that the policies are being enforced on a valid and trusted artifact.

4. Enforce Policies on SBOM

With the policies defined and the attestation verified, the next step is to enforce these policies on the SBOM. The SSCA module evaluates each component in the SBOM against the policy sets, identifying any violations.

Kummarikuntla describes the enforcement process: “Based on the evaluation criteria, if violations are detected, the pipeline can either issue a warning and proceed or generate an error and terminate the process. This flexibility allows organizations to choose how strict they want their enforcement to be, depending on the severity of the violation.”

5. Review Violations and Take Action

Finally, a detailed list of all policy violations is generated. This list provides a clear overview of any issues that need to be addressed, allowing developers and security teams to take corrective action before the software is released.

“Governance is not just about enforcing policies but also about continuous monitoring and improvement,” says Kummarikuntla. “The ability to track and review violations ensures that organizations can refine their policies over time, adapting to new risks and compliance requirements as they arise.”

The Future of Open-Source Governance

As software development evolves, the need for effective governance over open-source components will only grow. With the increasing complexity of software supply chains and the rise of new security threats, organizations must proactively manage the risks associated with open-source usage.

Harness’s SSCA module provides a robust solution for implementing this governance, offering the tools and capabilities to secure the software delivery process from end to end. As Kummarikuntla concludes, “By integrating SBOMs, OPA policies, and continuous enforcement, organizations can achieve a higher level of security, compliance, and reliability in their software development lifecycle.”

In a world where open-source components are ubiquitous, a strong governance framework is not just a best practice but a necessity. Organizations that embrace this approach will be better equipped to navigate the complexities of modern software development, ensuring that their applications are innovative but also secure and compliant.

Google has been emphasizing mobile-first design for years, even utilizing the mobile version of its Gooblebot web crawler for the majority of the sites it indexes. However, there was a small percentage of sites that were still being crawled by the desktop version of Googlebot.

According to John Mueller, Search Advocate, Google Switzerland, the company will move fully to the mobile version after July 5, 2024:

We’re embarking on our final last step (that’s the plan!) of our migration to a mobile-first index for Google Search: the small set of sites we’ve still been crawling with desktop Googlebot will be crawled with mobile Googlebot after July 5, 2024. Don’t worry, most websites don’t need to do anything!

As we mentioned in our last update on mobile indexing, Google crawls and indexes almost all websites using a smartphone crawler. Over the years, the number of sites that aren’t accessible on mobile has continued to shrink. To simplify our systems, and to make it easier for sites to debug issues related to device types, we’ll soon crawl all sites for Search with the Googlebot Smartphone crawler.

Mueller makes clear it clear that sites that are not accessible via smartphone will no longer be indexed after the deadline:

The largest part of the web is already being crawled like this, and there is no change in crawling for these sites. After July 5, 2024, we’ll crawl and index these sites with only Googlebot Smartphone. If your site’s content is not accessible at all with a mobile device, it will no longer be indexable.

There are a number of things site owners can do to ensure their site is prepared for the change:

1) Use a responsive design or layout. A responsive layout is designed to adapt to the size of the screen it is being viewed on. This means the site will look good and function correctly on everything from a cramped smartphone screen to a 4K desktop monitor.

2) Ditch the popups. Popups may have been the thing to do in the 20th century, but it’s time to get with the program and ditch the archaic—not to mention annoying—design element. In the context of mobile-first, getting rid of popups is important since they don’t play nice with smartphone real estate.

3) Focus on speed. Not all smartphone users have 5G internet access, and even the ones that do don’t have it all the time. Countless surveys and studies have shown that smartphone users have little patience for slow-loading sites, with ones that load fast converting far more users.

4) Test finger-based navigation. Given that smartphone users often use their devices one-handed, a mobile-first design must adapt to allow easy one-handed navigation. Even if visitors use both hands to navigate, menus, buttons, and other interface elements must be placed in a way that is conducive to finger-based navigation, instead of keyboard and mouse.

5) Use Google’s Lighthouse tool on your website. Google’s Lighthouse tool can help identify issues with a site, giving developers a clear path to address them.

YouTube’s new deign first started showing up in mid-April, but the company assured disgruntled users that it was just testing the design, and quickly dropped it as a result of complaints. Much of the issue comes from the comments being moved up beside the video, rather than below it.

“There is no way a human could have thought this was a good idea….” wrote MisterMotion on Reddit.

Popular YouTuber Sully broke down exactly why the new layout is so bad.

Some users who have tweeted about the layout are receiving the standard YouTube response that it is simply conducting an “experiment.” Nonetheless, it’s a little concerning the company is continuing to experiment with a design that has been so universally panned.

Such statistics make us believe that if so many people have trouble navigating through a website, many more developers and testers would have made their web applications compatible. Unfortunately, this is not the case. 96% of the top 1 million web pages still had accessibility issues in 2023. However, things are changing for good. 

Today, people with disabilities take responsibility for filing lawsuits against websites that are not accessible (including the infamous Dominos case). This shift has made developers and testers move towards accessibility, which usually means modifying their existing pages according to WCAG accessibility principles. 

Whatever the cases be, LambdaTest Accessibility DevTools Chrome extension can prove to be a game changer in this process reducing the time of debugging and modification for accessibility issues and bringing quality to the web application. 

But how do we achieve that? Let’s understand the problem first.

What is Web Accessibility?

The Internet was built to remove the communication barrier between everyone. Anyone can communicate with anyone without any discrimination. This includes people with disabilities of all kinds, including sight, hearing, neurological, speech, or physical. However, the definition of web accessibility goes beyond disability.

Accessibility is not just being “accessible” to people with disability but also to people of various ages and groups and those viewing the web in different conditions. For instance, someone walking on a bright sunny day, someone walking in a location with poor network reception, or someone who is a senior citizen should be able to access and preferably have the same experience navigating through the website.

Is Web Accessibility That Important?

The short answer to this question is “Yes, extremely important.” There are many reasons to support this argument:

• Accessibility is a human right: Access to the web and the Internet is a basic human right declared by the United Nations Convention and a fundamental right in many countries protected by law.

• Provides equal opportunities: If your website is web accessible, there is always a feeling of providing equal opportunities to everyone regardless of their condition. This becomes even more important when we see that 21% of undergraduate students have reported disabilities. 

• Widens the audience: A web-accessible website will have a broader audience, eventually reflected in revenue numbers.

• Provides enhanced user experience: Since the website is web-accessible, the user can navigate through it in various conditions, enhancing the user experience and bringing user satisfaction.

• Promotes social inclusion: A web-accessible website is socially significant as it can reach people in underprivileged areas, including rural areas of a country where a significant portion of the people cannot read English.

• Generates higher revenue: Talking purely on economic grounds, a web-accessible website will have the potential to cater to a larger audience than a website that is not accessible. This will eventually generate higher revenue and build trust among the audience so they return frequently.

The summary of the importance of a web-accessible website reflects on social responsibilities and the provision of equal opportunities to all. If our website can be a medium for that, our small contribution can also help others in the transformation.

Ensuring Web Accessibility With LambdaTest Accessibility DevTools Chrome Extension

Considering the importance of web accessibility and facilitating its inclusion in applications, many tools have made their way on the internet, ready to be installed and contributing to the process. 

One such endeavor has been the LambdaTest Accessibility DevTools Chrome extension, a tool for accessibility testing on Chrome that can be downloaded and added to Chromium-based browsers like Brave and Google Chrome. The main motive of this extension is to evaluate the website for accessibility issues and point them out to the developers and testers for quick resolution. 

LambdaTest Accessibility DevTools Chrome extension can be downloaded from the Chrome Store and boasts the following features:

• Full page scan: The Chrome extension can scan the entire page and detect accessibility issues.

• Partial page scan: A full page scan may not always be required. For such scenarios, the testers can select the area on the page to initiate a partial scan instead. 

• Multi-page scan: An advanced version of a full-page scan is a multi-page scan where multiple pages can be fed to the extensions, and a collective report can be fetched for all of them, pointing out their accessibility issues.

• Workflow scans: The workflow scan will check the accessibility issues across the user actions and page redirections.

• Integrated dashboard: The extension provides an integrated dashboard into the LambdaTest platform where all issues can be reported, tracked, and analyzed in a single place.
• Enhances quality and user satisfaction: When used in web app development and testing, LambdaTest Accessibility DevTools Chrome extension enhances the website’s quality and user satisfaction with an accessible and inclusive website.

• Free to use: The extension is free for everyone, so no small business, individual developer, or enterprise should lose the opportunity to make an inclusive and accessible website.

Naturally, having all these features attached to the browser where the website will eventually run will give confidence to the developers before their release and help their already published website to be converted to an accessible one quickly.

How to Use LambdaTest Accessibility DevTools Chrome Extension?

LambdaTest Accessibility DevTools Chrome extension can be downloaded similarly to other extensions. To do this, follow the below steps:

1. Visit the Chrome Webstore page where the extension is hosted. 

2. Next, select Add to Chrome on the page.

This will add the extension to the browser. This step will be similar in other Chromium browsers, such as Brave.

3. Select Add extension in the prompt.

Once the extension is downloaded, installed, and added to the browser, you will be notified by the prompt:

The installation can also be confirmed by navigating through the Extensions on the browsers and finding the tool in the list of installed extensions. 

LambdaTest Accessibility DevTools Chrome extension works in the Web Inspector section. Therefore, the developer or the tester must navigate to the web inspector panel by right-clicking->Inspect after opening the website. For this demonstration, we are using the Wikipedia website, as it is most commonly used throughout the globe.

On Wikipedia, open any page. For instance, here is the link to John Dalton’s page. 

4. Right-click on this page and select inspect.

5. Select Accessibility DevTools from the top navigation list.

6. Dock the toolbar to the bottom for the best experience, if not already. The extension’s main page will appear at the bottom in full view:

7. Login to your LambdaTest account using the Login button. Once done, click Full Page Scan to scan the complete page for accessibility issues. The results will appear soon after the scan:

The result shows 182 issues on the page, out of which 12 are critical. The right screen also displays the issues listed with a summary. For instance, the first issue is “Images must have alternate text 12,” meaning that 12 images do not have alternate texts. This issue is critical as images must have alternate texts per WCAG guidelines. 

8. Click on the issue to find its detailed summary:

The right section also shows the How to fix section, which will chalk out the steps to fix the issue:

This would be of extreme help as the developers need not navigate or Google out the resolution of the issue, but they can quickly fix it to make the page accessible.

What we did here is considered a test execution. Naturally, a tester will scan a page in multiple ways multiple times in a single sitting. Later on, they will want to analyze their execution patterns, results, and the progress they made in the accessibility journey. For this, LambdaTest saves all the test executions in your account, which you or your teammates can view at any point in the future.

Returning to the extension’s home screen, you will notice that the Login button has changed to Dashboard here. 

9. Click on the Dashboard, and the tests conducted in the previous section will be visible on the platform:

These tests will be automatically saved to your account without any explicit action being taken. Hence, they will be seen when we click Saved Tests from the extension’s home screen. 

Notice the three options are available at the right end of each test denoting three options:

• Share the tests with other team members.
• Download the test as CSV, PDF, or JSON, which can be input to other tools.
• More options to Rename or Delete the tests.

As one can see, the LambdaTest Accessibility DevTools Chrome extension provides a complete solution to the tester. Testers must select one option; a single click can perform all the actions.

Tips To Create a Web-Accessible Website

While everything LambdaTest Accessibility DevTools Chrome extension points out should be corrected for web accessibility, we should also do our part and eliminate such issues in the development phase. For this, there are a few tips to consider:

• Alt text: The alternate text attached to images helps screen readers easily assess the image reference and read it to the users facing challenges.

• Contrasting colors: Color theory plays a big part in web design. One of the elements that hurts web accessibility the most is using contrasting colors, which makes it harder to focus on a single element, especially those that are either out in the sun or have visual challenges. 

• Ambiguous link text: A lot of the websites use ambiguous link texts like “click here”, “this link”, “the link”, etc. While it may not challenge a normal user, it will confuse a visually challenged person when the screen reader reads “this link” without context.

• Making use of correct typography: The typography of the web app includes using a normal-sized font that is readable by all the users and a font type that does not confuse the letters among themselves. It enhances readability for people with disabilities as well as normal users.

• Make use of text with images: A web page with just images will not be of much use to someone who faces challenges in viewing the images. Reading out alt text will also not make much sense in this case. Hence, a web developer should use images and text to serve their audience.

• Transcript in audio/video: For the same reasons described above, it is also important that audio/video files are not challenging to people with visual and auditory challenges. A transcript will help them understand the file much better.

• Perform cross-browser testing: To reach out to the audience working on multiple devices, it is important to conduct browser testing and ensure that the website is presented as intended on all devices.

If these tips are followed, we can significantly improve the critical issues post-production and reduce the additional work we would have to do later.

Conclusion

Web accessibility is not an optional element of a website. While some countries have it protected under law, it is a matter of social responsibility and providing an inclusive environment to everyone for which the internet was originally invented. Any person with any disability should be able to operate and navigate the website easily. However, the list of accessibility checkpoints is large, so developers and testers often need a helping hand to point out these issues. Thankfully, LambdaTest has developed one such free tool to do this task with a single click.

LambdaTest Accessibility DevTools Chrome extension is a Chromium-based browser that can scan the complete page and list accessibility issues within a minute. It also provides an option to scan multiple pages and workflows for a complete scrutiny of the application. These tests can be saved and analyzed later on a single dashboard screen. Such tools are a blessing for developers, testers, and people who face various challenges across the web. Using such tools helps social upliftment, and until the rules become stricter, we can be happy that we have been doing our part for a long time.

Squarespace is a company specializing in helping individuals and small businesses easily build websites, without requiring technical expertise. The company went public in early 2021, but is now going private in an all-cash deal with Permira. Shareholders will receive $44.00 per share in cash, a 29% premium over the past 90-day average price of $34.09.

Anthony Casalena, founder and CEO, will remain one of the largest shareholders post-transaction and will remain CEO and Board Chairman. Permira says the existing leadership team will continue to lead the company after the deal is closed.

“Squarespace has been at the forefront of providing services to businesses looking to establish themselves online for more than two decades. We are excited to continue building on that foundation, and expanding our offerings, for years to come,” said Anthony Casalena, Founder and CEO of Squarespace. “We are thrilled to be partnering with Permira on this new leg of our journey, alongside our existing long-term investors General Atlantic and Accel, who strongly believe in the future of Squarespace.”

“Squarespace has built a distinct and globally recognized creative brand and an incredible, design-driven platform of tools that empower entrepreneurs and small businesses to establish and scale their online presence,” said David Erlong, Partner at Permira. “As a firm with a long history of backing leading internet platforms and technologies that enable SMBs to compete globally, we are excited to partner with Anthony and his team to support the company in unlocking its full potential.”

Taking Squarespace private could give the company more latitude to innovate and take risks that a publicly traded company is not always free to do. Based on the company’s statements, it appears Permira is happy with Squarespace’s existing leadership and is not keen to rock the boat, something that should help make a smooth transition and reassure Squarespace customers.

not gpt-5, not a search engine, but we’ve been hard at work on some new stuff we think people will love! feels like magic to me.

monday 10am PT. https://t.co/nqftf6lRL1

— Sam Altman (@sama) May 10, 2024

The announcement has the tech community abuzz with speculation and excitement. Rumors had swirled about potential revolutionary updates, including an advanced AI-powered search engine that could rival Google’s dominance or the release of a next-generation GPT-5 model. However, Altman’s recent posts have effectively set the record straight, indicating that while the updates will not include these speculated features, what will be revealed could be just as groundbreaking.

This forthcoming event highlights OpenAI’s commitment to advancing artificial intelligence’s capabilities and strategy of steady, impactful innovation. By choosing to unveil these updates on the eve of Google’s I/O conference, OpenAI cleverly positions itself in the global spotlight, demonstrating its role as a leader in AI development and application. This strategic timing underscores the competitive nature of the tech industry, where major players continually strive to outpace each other with technological enhancements that captivate and revolutionize market and consumer landscapes.

Anticipation Builds Around Potential Voice Assistant Capabilities

As the tech world eagerly anticipates OpenAI’s upcoming announcement, there is growing speculation that the company might introduce a significant leap forward in voice assistant technology. The potential for OpenAI to integrate real-time, direct audio interaction with its language models could significantly advance how users engage with AI systems. Such a development would enhance the functionality of devices like smartphones and smart speakers and expand the possibilities for accessibility, making technology more intuitive and responsive for a broader audience.

We’ll be streaming live on https://t.co/OcO6MLUYGH at 10AM PT Monday, May 13 to demo some ChatGPT and GPT-4 updates.

— OpenAI (@OpenAI) May 10, 2024

A Game-Changer in AI Interaction

Industry experts suggest that if OpenAI introduces a voice assistant with minimal latency and the ability to directly process and respond to audio inputs, it could set a new industry standard. “This would be a game-changer in AI interaction,” a leading AI researcher noted. “By reducing the steps involved in voice communication with AI, OpenAI could drastically reduce response times, making the interaction almost indistinguishable from conversing with a human.”

The implications of such technology extend beyond mere convenience. For example, a more responsive AI voice assistant could assist with patient monitoring and care, providing real-time updates and alerts. It could offer more engaging and interactive learning experiences in education, responding dynamically to students’ queries and educational needs.

Pressuring Tech Giants like Amazon, Google, and Apple

Furthermore, the introduction of advanced voice technology by OpenAI could intensify the competitive pressures on other tech giants like Amazon, Google, and Apple, who have heavily invested in their voice assistant technologies. “If OpenAI can deliver on this, it will push the entire industry to accelerate improvements to their systems,” added a tech industry analyst. “We could see a significant shift in consumer expectations and brand loyalties.”

The anticipation for Monday’s event underscores the rapid pace of innovation within the AI field and highlights OpenAI’s role in pushing the boundaries of what these technologies can achieve. As stakeholders from various sectors—from tech enthusiasts to enterprise clients—tune in to the live stream, the potential unveiling of a new voice assistant capability could mark a significant moment in the evolution of human-AI interaction.

The Impact of Advanced Voice Technologies

OpenAI’s potential unveiling of advanced voice technologies could dramatically reshape the landscape of AI interactions, offering new capabilities that could extend far beyond current market offerings. This development would redefine user experiences and enhance the efficiency of AI applications across various industries, creating more natural and engaging interactions.

In the realm of customer service, for instance, an advanced voice assistant capable of understanding and responding with reduced latency could revolutionize how businesses interact with customers. Such technology would enable more complex and nuanced conversations, allowing for better problem-solving capabilities and higher customer satisfaction. “The ability to integrate these advanced voice systems into customer service could transform call centers, reducing wait times and improving the overall quality of service,” explained a customer experience strategist.

OpenAI Getting Into the Smart Home Business?

Moreover, in the field of accessibility, such advancements could significantly empower individuals with disabilities. An AI voice assistant that can process and respond to spoken commands more intuitively would make technology more accessible to people with visual impairments or those who rely on voice navigation for various applications. “Improving voice technology means opening up a world of possibilities for those who need it most, offering greater independence and integration,” highlighted an advocate from a disability rights organization.

The impact on home automation and personal devices would also be substantial. As smart homes become increasingly common, an AI voice assistant with enhanced capabilities could manage more complex tasks, control smart devices with greater precision, and provide personalized experiences based on voice recognition. “The potential for creating truly smart homes, where your environment responds accurately to voice commands, could significantly enhance how we interact with our living spaces,” noted a home automation expert.

Pushing the Boundaries of What’s Possible

Lastly, developing such technologies could significantly advance language learning applications. Users could practice speaking and listening in real time by interacting with an AI that processes language more effectively, receiving immediate feedback and corrections. This could greatly enhance the learning process and provide a more immersive educational experience.

As OpenAI continues to push the boundaries of what’s possible with artificial intelligence, the potential introduction of advanced voice technologies represents a pivotal step forward. This could improve existing applications and unlock new opportunities for innovation across multiple sectors, marking a significant milestone in the evolution of AI.

Strategic Timing Ahead of Google I/O

The strategic timing of OpenAI’s announcement, scheduled just one day before Google’s annual I/O conference, is a tactical move that underscores the intensifying competition within the AI industry. By positioning its unveiling ahead of one of the tech world’s most significant events, OpenAI captures early media attention and sets a benchmark that might shape discussions and expectations around Google’s subsequent presentations.

This preemptive timing is particularly poignant in the ongoing rivalry between OpenAI and Google, especially in artificial intelligence. As Google prepares to showcase its advancements in AI, OpenAI’s updates could potentially steal some of the spotlight, compelling Google to respond to innovations it may not have anticipated. “OpenAI’s announcement could very well set the tone for Google I/O, influencing how Google’s new products are received and forcing them to highlight their distinctiveness and superiority,” noted a tech industry analyst.

OpenAI: A Direct Competitor to Google

Moreover, by making significant announcements just before Google I/O, OpenAI asserts its presence in the industry and demonstrates confidence in its products. This strategy can heighten interest and expectations, setting a high standard for Google to meet or exceed, thereby intensifying the competitive atmosphere. “This is a clear signal that OpenAI views itself as a direct competitor to Google, ready to challenge the status quo in the AI space,” a market strategist explained.

The timing also reflects OpenAI’s understanding of the media cycle and its ability to maximize exposure to new technologies. By scheduling its announcements just before a major industry event like Google I/O, OpenAI ensures that its updates are part of the broader conversation throughout the conference, maintaining visibility and relevance amid numerous technological unveilings.

Ultimately, the decision to precede Google I/O highlights OpenAI’s strategic approach to marketing and public relations within the fiercely competitive tech landscape. It showcases OpenAI’s innovations and cleverly positions the company as a frontrunner in the AI domain, challenging industry giants and asserting its role as a key player in shaping the future of technology.

Exploring Beyond Traditional Search

While initial speculations pointed towards OpenAI launching an AI-powered search engine, the firm’s clarification shifts focus to other potential innovations that could redefine how information is accessed and utilized. The evolution of ChatGPT and its integration with internet data sources hint at new ways of interacting with information far beyond the traditional search engine model. “We’re looking at ways to make information retrieval faster but more intuitive,” said an OpenAI spokesperson. This approach could lead to developments where AI assists users not by merely searching for information but by understanding context, synthesizing data, and offering solutions based on a deep understanding of the user’s intent and past interactions.

Enhancing User Experience with AI Integration

OpenAI’s potential innovations may focus on creating a more seamless and interactive user experience. This could involve integrating more sophisticated natural language processing tools that understand and predict user needs more effectively. For instance, integrating AI-driven predictive analytics could provide users with information and services before fully articulating their needs. “Imagine an AI that begins to compile data relevant to your project based on your initial queries and continues to refine its responses as your work progresses,” suggested a tech industry futurist.

The Future of AI in Everyday Applications

OpenAI’s exploration of new AI functionalities could significantly impact everyday technology applications, from smartphones and personal assistants to enterprise software solutions. These advancements might include more dynamic and responsive AI systems that can manage complex tasks, adapt to user behavior, and provide more personalized interactions. “The next step for AI is to move from performing predefined tasks to taking initiative based on user behavior and preferences,” noted a developer involved in AI technology.

These development sections signify OpenAI’s commitment to pushing the boundaries of what AI can achieve in a user-focused context. By moving beyond traditional search, OpenAI is poised to lead a shift towards more integrated and intuitive AI systems that enhance users’ interactions with digital technology and information management in their personal and professional lives.

The Broader AI Landscape

OpenAI’s forthcoming announcements promise not only to advance the capabilities of their existing AI models but also to catalyze broader technological and economic shifts across various industries. The ripple effects of enhanced AI functionalities could transform sectors such as healthcare, where AI could streamline diagnostics and personalized treatment plans, or in finance, where more sophisticated AI could manage complex transactions and risk assessments with greater accuracy and speed. “Every significant improvement in AI technology opens up new possibilities for innovation across all sectors,” observed a technology consultant specializing in digital transformation.

Global Impact on Workforce and Employment

The global workforce could see significant changes as AI tools become more integrated into daily operations. While AI can enhance productivity and creativity, there is an ongoing debate about how it will affect employment. The potential for AI to automate routine tasks presents a challenge and opportunity to redefine job roles and focus human efforts on more strategic and creative tasks. “The key will be in leveraging AI to augment human capabilities rather than replace them, ensuring it acts as a partner in the workplace rather than a substitute,” said a labor economist during a recent webinar on AI and the future of work.

Ethical Considerations and AI Governance

With great power comes great responsibility, and as AI technologies grow more powerful, their ethical implications become more complex and pressing. Data privacy, algorithmic bias, and the need for transparent AI decision-making processes are at the forefront of discussions within tech communities and beyond. “As we develop these advanced AI systems, we must also strengthen our frameworks for AI governance to ensure they are used responsibly and ethically,” stressed an ethicist at a recent international conference on AI.

Fostering International Collaboration

Finally, the advancements in AI highlighted by OpenAI underscore the importance of international collaboration in technology development and regulation. As AI technologies do not recognize national boundaries, their impacts are global. This necessitates a collaborative approach to regulation and ethical standards that transcends individual countries and involves international bodies. “Building a global consensus on AI usage and safety standards is crucial as these technologies become central to our lives,” noted a diplomat involved in technology policy at the United Nations.

OpenAI’s developments thus reflect broader trends in the AI landscape, signaling shifts towards more integrated, ethical, and collaboratively governed implementations. As the company continues to innovate, it contributes not just to technological advancements but also to shaping the discussions and policies that will guide the future of AI globally.

Google has been working on a replacement mechanism for third-party cookies, but critics are understandably worried about any solution created by Google, a company that makes billions off of internet advertising. As expected, there have been multiple issues with all of Google’s proposed solutions, with experts saying user privacy would take a significant hit.

In view of the feedback it has received, especially from the UK’s Competition and Markets Authority (CMA), Google has once again pushed back plans to deprecate third-party cookies in Chrome. The company made the announcement on a blog post on The Privacy Sandbox.

We are providing an update on the plan for third-party cookie deprecation on Chrome.

We recognize that there are ongoing challenges related to reconciling divergent feedback from the industry, regulators and developers, and will continue to engage closely with the entire ecosystem. It’s also critical that the CMA has sufficient time to review all evidence including results from industry tests, which the CMA has asked market participants to provide by the end of June. Given both of these significant considerations, we will not complete third-party cookie deprecation during the second half of Q4.

We remain committed to engaging closely with the CMA and ICO and we hope to conclude that process this year. Assuming we can reach an agreement, we envision proceeding with third-party cookie deprecation starting early next year.

Hopefully, the CMA’s involvement will help result in a solution that doesn’t completely sell out user privacy.

As a seasoned industry veteran with a wealth of experience guiding businesses through the intricacies of technological adoption, Mason is well-versed in AI’s transformative power. In a recent discourse, he delved into the intricacies of AI adoption, shedding light on its potential to revolutionize business operations and drive tangible outcomes.

“At IBM, we help our clients navigate the complex landscape of emerging technologies, guiding them towards solutions that deliver real value for their business,” explains Mason. “And when it comes to AI, value is the name of the game.”

For Mason and his team, the journey toward AI adoption begins with a careful assessment of feasibility and value – two critical axes that shape the decision-making process for businesses exploring AI solutions.

“When we engage with clients, we evaluate potential AI projects based on two key factors: feasibility and value,” says Mason. “Feasibility assesses how easy or difficult it is to implement a particular AI solution, while value examines its potential impact on the business.”

But what exactly constitutes value in the context of AI adoption? According to Mason, the answer lies in three core areas: operational efficiency, risk mitigation, and revenue generation.

“AI has the potential to drive value across multiple dimensions,” explains Mason. “From streamlining operations and enhancing productivity to mitigating risk and uncovering new revenue opportunities, AI can unlock a world of business possibilities.”

In operational efficiency, AI is a powerful tool for automating mundane tasks and optimizing workflows, enabling organizations to achieve more with less.

“By leveraging AI-powered automation, businesses can streamline their operations, reduce manual effort, and improve overall efficiency,” says Mason. “This drives cost savings and frees up valuable time and resources for more strategic initiatives.”

But AI’s value proposition extends beyond mere operational gains. As Mason highlights, AI’s ability to mitigate risk represents a compelling incentive for businesses navigating an increasingly complex and uncertain business landscape.

“Whether it’s identifying potential risks or predicting future challenges, AI can help businesses proactively mitigate risk and stay ahead of the curve,” explains Mason. “From legal and compliance issues to technical challenges and strategic threats, AI empowers businesses to make informed decisions and safeguard their interests.”

Yet, perhaps the most exciting aspect of AI lies in its capacity to drive revenue growth and unlock new business opportunities. By harnessing the power of AI-driven insights and predictive analytics, businesses can identify new market trends, uncover hidden customer insights, and capitalize on emerging opportunities.

“AI enables businesses to tap into new revenue streams, identify untapped market opportunities, and gain a competitive edge in today’s fast-paced business landscape,” says Mason. “Whether through personalized marketing campaigns, targeted product recommendations, or predictive analytics, AI empowers businesses to deliver exceptional value to their customers and drive sustainable growth.”

Mason’s insights underscore AI’s transformative potential to revolutionize business operations and drive tangible outcomes. As businesses continue to navigate the complexities of technological adoption, AI’s value as a strategic enabler for growth and innovation has never been more apparent. By embracing AI-driven solutions, businesses can unlock new levels of efficiency, mitigate risk, and capitalize on emerging opportunities, paving the way for a future defined by innovation and success.

Note: Scroll down for the complete How-To, or watch the video below.

In a recent announcement, Tipene, a member of Zendesk’s Developer Advocacy team, highlighted the transformative potential of Zendesk Messaging, introduced in 2020. With its ability to facilitate persistent, cross-platform conversations and maintain full conversation history, Zendesk Messaging marks a paradigm shift in customer support strategies.

“At Zendesk, we’re thrilled to introduce Zendesk Messaging, a game-changer in customer service. This innovative platform enables organizations to connect with their customers in real-time, fostering deeper, more meaningful interactions,” remarked Tipene.

Central to Zendesk Messaging’s effectiveness is its capability for end-user authentication, a critical component in ensuring personalized and secure customer interactions. Tipene elucidated the implementation process, emphasizing the significance of seamlessly and securely confirming customers’ identities.

“End-user authentication is the cornerstone of effective customer service. By leveraging signing secrets and JSON web tokens (JWTs), organizations can authenticate users with precision and reliability,” explained Tipene.

Tipene provided a comprehensive overview of the workflow for implementing end-user authentication within the messaging experience. From generating signing keys to developing backend services and utilizing Zendesk SDKs for verification, the process was demystified for developers and CX professionals.

The integration of authentication mechanisms enhances security and enables organizations to tailor support experiences based on individual user profiles. Tipene underscored the importance of merging new conversations with existing user interactions, ensuring continuity and context across engagements.

“With Zendesk Messaging, businesses can seamlessly authenticate users, creating personalized experiences while maintaining the integrity of customer data. Whether it’s a first-time interaction or a returning customer, Zendesk ensures a cohesive support journey,” Tipene affirmed.

Ensuring secure and seamless interactions with end-users in the ever-evolving landscape of customer experience (CX) development is paramount. Zendesk Messaging offers developers a powerful platform to achieve this goal, with robust authentication mechanisms. In this step-by-step guide, we’ll walk you through implementing end-user authentication in Zendesk Messaging, empowering you to deliver personalized and secure CX solutions.

Looking ahead, Zendesk remains committed to innovation, with plans to explore advanced authentication capabilities, including authentication via signed email addresses. Tipene teased future deep dives into these functionalities, promising continued evolution and enhancement of Zendesk’s CX ecosystem.

How to Implement End-User Authentication in Zendesk Messaging:

1. Obtain Signing Keys:

• Begin by accessing Zendesk’s admin center to generate signing keys.
• Signing keys consist of a key ID and a shared secret, serving as credentials for authentication.

2. Set Up Backend Service:

• Upon user authentication, create a backend service for generating JSON web tokens (JWTs).
• Use frameworks like Express.js for Node.js applications to efficiently handle HTTP requests and responses.

3. Handle Client-Side Authentication:

• Develop a client-side login form where users input their credentials.
• Upon form submission, initiate an HTTP request to your backend service to authenticate the user.

4. Authenticate User:

• In the backend service, retrieve the user’s credentials from the request body.
• Verify the user’s credentials against your authentication database or system.
• If authentication is successful, generate a JWT using the signing keys obtained earlier.

5. Generate JSON Web Token (JWT):

• Define the payload for the JWT, including user information such as name, email, and external ID.
• Set the expiration time for the token to ensure security.
• Use the signing secret to sign the JWT to ensure its authenticity.

6. Send JWT to Client:

• Upon successful JWT generation, send the token back to the client-side application as part of the response.
• Ensure secure transmission of the JWT to prevent unauthorized access.

7. Integrate with Zendesk Web Widget:

• Utilize Zendesk’s Web Widget SDK to integrate JWT-based authentication into your messaging interface.
• Pass the JWT to the Zendesk Web Widget using appropriate methods for user verification.

8. Test and Iterate:

• Thoroughly test the authentication workflow in both development and production environments.
• Address any issues or bugs encountered during testing and iterate on the implementation as needed.

9. Ensure Compliance and Security:

• Adhere to best data security and compliance practices, such as encrypting sensitive information and implementing secure transmission protocols.
• Regularly review and update authentication mechanisms to mitigate security risks and comply with industry standards.

By following these steps, developers can seamlessly implement end-user authentication in Zendesk Messaging, enhancing the security and personalization of customer interactions. With authentication as a cornerstone of their CX solutions, developers can unlock new possibilities for engaging and delighting users in the digital age.

Understanding Progressive Web Applications

Progressive Web Applications (PWAs) represent a new approach to web development, combining the best features of traditional web pages and mobile applications. Unlike native apps, PWAs are built using web technologies (HTML, CSS, and JavaScript) but offer a seamless app-like experience to users. They are designed to work on any device or browser and can be accessed directly from the web without the need for installation.

Key Features of PWAs

• Offline Functionality: One of the most significant advantages of PWAs is their ability to work offline or in areas with poor connectivity. Through service workers, PWAs cache essential resources, allowing users to access content even when they’re offline.
• Fast Loading Speeds: PWAs leverage caching and other optimization techniques to deliver blazing-fast loading speeds. This instant responsiveness enhances user satisfaction and reduces bounce rates.
• App-Like Experience: PWAs mimic the look and feel of native mobile apps, offering immersive experiences with smooth animations, gestures, and transitions. Users can add PWAs to their home screens for quick access, just like traditional apps.
• Push Notifications: PWAs with UI/UX design support push notifications, enabling businesses to re-engage users with timely updates, promotions, and reminders. This feature fosters ongoing interaction and encourages repeat visits.
• Security: PWAs are served over HTTPS, ensuring secure communication between the user’s device and the server. This helps protect sensitive data and build trust among users.

Benefits of PWAs for User Experience

• Seamless Accessibility: PWAs eliminate the friction associated with app downloads and installations, making content readily accessible to users with a simple URL. This accessibility fosters greater engagement and encourages more frequent interactions.
• Enhanced Performance: By leveraging caching and other optimization techniques, PWAs deliver superior performance compared to traditional websites or even native apps. Faster loading speeds, smoother navigation, and offline capabilities contribute to an optimal user experience.
• Cross-Platform Compatibility: PWAs are platform-agnostic, meaning they can run on any device or browser without the need for separate development efforts. This versatility ensures a consistent user experience across different platforms, reducing development costs and complexity.
• Lower Data Consumption: PWAs consume less data compared to native apps, making them more cost-effective for users, particularly those in regions with limited data plans. This lower data consumption contributes to improved user satisfaction and retention.

Real-World Applications of PWAs

• eCommerce: Many eCommerce businesses are leveraging PWAs to provide a seamless shopping experience across devices. PWAs enable features like offline browsing, fast-loading product pages, and push notifications for order updates, enhancing customer satisfaction and driving conversions.
• Media and Publishing: News websites and media platforms are adopting PWAs to deliver content quickly and efficiently to users. PWAs enable offline reading, instant loading of articles, and personalized recommendations, keeping users engaged and coming back for more.
• Travel and Hospitality: The travel industry is embracing PWAs to streamline booking processes and enhance the travel experience. PWAs allow users to search for flights, hotels, and activities offline, receive real-time updates on travel itineraries, and access booking details on the go.
• Financial Services: Banks and financial institutions are turning to PWAs to provide secure and convenient banking experiences. PWAs enable users to check account balances, transfer funds, and receive account alerts offline, improving accessibility and user satisfaction.

Conclusion

Progressive Web Applications (PWAs) have emerged as a game-changer in the realm of user experience, offering a perfect blend of accessibility, performance, and functionality. By harnessing the power of PWAs, businesses can elevate engagement and satisfaction levels, driving user loyalty and business growth. As the digital landscape continues to evolve, PWAs are poised to play an increasingly vital role in shaping the future of web development and user experience.

Meet Vlad Magdalin, the innovative co-founder and CEO of Webflow. He has navigated the company to remarkable heights, with a valuation of $4 billion and revenues hitting $100 million. Starting from the humble beginnings of a failed startup, Vlad’s relentless pursuit of his vision transformed Webflow into a leading visual web development platform, democratizing the creation of websites and applications for designers worldwide. His journey underscores the essence of resilience and the impact of visionary leadership in the tech industry.

Magdalin’s path to entrepreneurship was anything but conventional. Arriving in the United States as a refugee with his parents, he initially had no aspirations of becoming a designer or visual artist. However, fate had other plans. His foray into graphic design, spurred by his father’s entrepreneurial endeavors, set him on a path that would ultimately lead to the creation of Webflow.

His early experiences in graphic design and 3D animation laid the foundation for his unconventional approach to web development. Drawing inspiration from the sophistication of 3D animation tools, Magdalin envisioned a platform that would empower users to create professional websites without the need for complex coding. It was a bold vision, one that many believed to be unattainable, especially considering the past failures of major players like Adobe and Macromedia.

Undeterred by skepticism and doubt, Magdalin remained steadfast in his conviction that the current paradigm of web development was flawed and needed to be disrupted. Despite facing numerous setbacks and failed attempts to launch his idea, he remained resolute in believing that a better solution was possible.

The turning point came in 2011 when Magdalin received approval to use the trademark for Webflow, a name that would come to symbolize the culmination of his vision. Armed with renewed determination, he embarked on his fourth attempt to bring his idea to life. With limited resources and a sense of urgency, Magdalin and his team worked tirelessly to build a demo that would showcase the potential of Webflow.

The initial response was underwhelming, with only a handful of users showing interest in the platform. However, a pivotal moment came when Webflow was launched on Hacker News, a community known for its discerning audience of developers. To their surprise, Webflow resonated strongly with developers who saw its potential to streamline the web development process and generate clean, performant code.

From there, Webflow began to gain momentum, attracting attention from designers, developers, and entrepreneurs alike. What started as a passion project born out of frustration with the status quo has evolved into a full-fledged movement to democratize web development.

Central to Webflow’s success was its customer-centric approach and unwavering commitment to its mission. Magdalin understood the importance of listening to users and addressing their needs, even if it meant revisiting their product roadmap or rethinking their business strategy. By prioritizing people over profit and advancing a just mission, Webflow built a loyal community of users who shared its vision for a better, more accessible web.

Today, Webflow stands as a testament to the power of perseverance and the transformative potential of technology. With over 200,000 customers and over $100 million in revenue, it has solidified its position as a leading platform for web development. Yet, for Magdalin and his team, the journey is far from over. Their commitment to innovation and dedication to empowering users continue to drive them forward, fueling their passion for transforming the web one site at a time.

In the annals of technology history, the story of Webflow will undoubtedly be remembered as a triumph of ingenuity and determination. It serves as a reminder that no dream is too big, no obstacle too daunting, and that anything is possible with unwavering faith in one’s vision. As Magdalin once said, “If you build it, they will come”—a sentiment that encapsulates the essence of Webflow’s remarkable journey from idea to reality.

1. Kubernetes Service Meshes: Service meshes such as Istio, Linkerd, and Consul are gaining popularity for managing microservices communication within Kubernetes clusters. These tools provide features like traffic management, observability, and security without requiring changes to application code.
2. Serverless Kubernetes: Serverless frameworks like Knative and KEDA (Kubernetes-based Event-Driven Autoscaling) enable auto-scaling of containerized workloads and provide a serverless experience on Kubernetes, allowing developers to focus on writing code without worrying about infrastructure management.
3. GitOps: GitOps practices are becoming more prevalent for managing Kubernetes clusters and applications. GitOps leverages Git repositories as the single source of truth for declarative infrastructure and application definitions, allowing for automated deployments, rollbacks, and versioning.
4. Multi-Cluster Management: As organizations adopt Kubernetes at scale, managing multiple clusters across different environments (e.g., on-premises, cloud, edge) becomes crucial. Tools like Rancher, VMware Tanzu, and Google Anthos enable centralized management, monitoring, and governance of distributed Kubernetes deployments.
5. Kubernetes-native Continuous Delivery: Continuous Delivery (CD) platforms like Argo CD and Flux CD are designed specifically for Kubernetes environments. They automate the deployment of application changes based on Git repository updates, ensuring consistent and auditable application deployments.
6. Kubernetes Operators: Operators extend Kubernetes’ capabilities to manage complex, stateful applications. They encapsulate operational knowledge into software, automating tasks like provisioning, scaling, and maintenance. The Operator Framework and Operator Hub provide a framework and repository for sharing and discovering Kubernetes Operators.
7. Container Runtime Innovation: While Docker remains a popular container runtime, alternatives like containerd, CRI-O, and Kata Containers are gaining traction for their lightweight footprint, improved security, and better integration with Kubernetes.
8. Edge Computing with Kubernetes: Kubernetes is increasingly being used for edge computing scenarios where resources are distributed across geographically dispersed locations. Projects like K3s, OpenYurt, and KubeEdge provide lightweight Kubernetes distributions optimized for edge deployments, enabling consistent application management across edge and cloud environments.
9. Security Enhancements: Kubernetes security continues to evolve with features like PodSecurityPolicies, Network Policies, and Runtime Security. Projects such as Falco and OPA (Open Policy Agent) help enforce security policies and detect anomalous behavior within Kubernetes clusters.
10. Ecosystem Growth: The Kubernetes ecosystem continues to expand with a rich ecosystem of third-party tools, libraries, and integrations aimed at simplifying Kubernetes adoption, enhancing developer productivity, and addressing various operational challenges.

These are just a few examples of the latest innovations and trends in the Kubernetes ecosystem. As Kubernetes adoption continues to grow, we can expect further advancements and enhancements in various areas of container orchestration, management, and deployment.

Actual is a unique finance app, one that focuses on privacy and giving users control over their own data. The app is available for Linux, macOS, Windows, iOS, Android, and the web.

Actual is a super fast privacy-focused app for managing your finances. You own your data, and we will sync it across all devices with optional end-to-end encryption.

Unfortunately, despite positive reviews and significant paid subscriptions, Long says the challenges involved have made it nearly impossible to continue developing the project alone.

Building products is hard, building a business is even harder. I told myself that I was going to push through and make it happen no matter what. Even if it took years, I would slowly build my vision. When I stopped working full-time on Actual and started working at Stripe, I told everyone it wasn’t going anywhere. And I meant it.

But the fact is this project is way bigger than me. I have to come to accept that. Even I were completely full-time, I need to hire at least 2 other people to properly sustain it. It’s time to call it for what it is and open it up as a community project.

Long’s challenges were exacerbated by his focus on making Actual privacy-respecting, instead of going the cloud-first route that so many other apps and services choose.

Actual is a very different product. It’s not a normal SaaS app. It’s a local-first app using a fancy technology called CRDTs that syncs changes across devices.

This has a lot of benefits, but one drawback is I can’t use off-the-shelf solutions anymore. Hiring and getting help is harder. I’m super proud of being so ambitious, but ultimately doing something so different made it hard to iterate quickly. I can’t simply make a quick database schema change. Every feature needs to be rolled out very thoughfully and maintain backwards compatibility.

I’m hopeful that open-source will make this easier; with lots of people involved it offsets the difficulty added. And I’m hopeful there will a lot of people involved because I get asked if I’m going to open-source at least once a month.

Long’s challenges are a sad commentary on the state of the current tech and software industry, where innovative products struggle to gain traction because the rest of the industry is geared toward a cloud-first approach where users give up control over their data.

Hopefully, Actual will receive the backing it needs from the open-source community to continue evolving.

According to Ars Technica, Google was sued over claims the company continued to track users even when Chrome’s Incognito mode was active. The company had previously tried for a summary judgment, but Judge Yvonne Gonzalez Rogers shot the company down.

“Google’s motion hinges on the idea that plaintiffs consented to Google collecting their data while they were browsing in private mode,” Judge Rogers ruled. “Because Google never explicitly told users that it does so, the Court cannot find as a matter of law that users explicitly consented to the at-issue data collection.” 

In the wake of that ruling, Google wants to settle the case, according to a court filing (PDF).

The Parties are presently preparing a final and definitive settlement agreement, which they anticipate executing within 30 days of this filing and then presenting for this Court’s approval within 30 days thereafter (i.e., within 60 days of this filing). To avoid any unnecessary waste of judicial resources and to allow the Parties to focus their efforts entirely on finalizing the settlement, the Parties jointly and respectfully request that the Court stay this litigation in its entirety and vacate the trial date. The Parties thank the Court for its attention to this matter.

Selig created the popular Apollo Reddit client, widely considered to be one of the best third-party Reddit apps available. Unfortunately, Selig had to shut Apollo down after Reddit’s controversial API pricing made it impossible to carry on.

Selig has taken to X to announce his latest endeavor, Language Pal, an iOS widget to help users learn a language.

Introducing Language Pal, easily learn languages right on your iOS Home Screen, no opening apps needed! Available now (for free!) in Pixel Pals!

Christian Selig (@Christian Selig) — October 18, 2023

KrebsOnSecurity first reported on an issue that was discovered by security researcher Charan Akiri, who wrote a program to find vulnerable Salesforce sites.

Salesforce Community is a product that makes it easy for companies to set up a website. As Krebs points out, websites can be set up to require authentication or allow guest access. In many cases, however, administrators are mistakenly giving guest users access to information that should require authorization.

“My team is frustrated by the permissive nature of the platform,” said Scott Carbee, Vermont’s Chief Information Security Officer.

Carbee says the pandemic, and the hurried nature of suddenly setting up plethora of online services, exacerbated the problem.

“During the pandemic, we were largely standing up tons of applications, and let’s just say a lot of them didn’t have the full benefit of our dev/ops process,” Carbee said. “In our case, we didn’t have any native Salesforce developers when we had to suddenly stand up all these sites.”

Unfortunately, Vermont is not alone in dealing with the issue. Akiri told Krebs that he found hundreds of organizations with misconfigured Salesforce Community sites that were leaking data. That number is by no means the full scope of the problem, as Akira has been reluctant to delve further as a result of the response he has received.

“In January and February 2023, I contacted government organizations and several companies, but I did not receive any response from these organizations,” Akiri said. “To address the issue further, I reached out to several CISOs on LinkedIn and Twitter. As a result, five companies eventually fixed the problem. Unfortunately, I did not receive any responses from government organizations.”

Salesforce says the issue is not a vulnerability but the result of a misconfiguration.

“As previously communicated to all Experience Site and Sites customers, we recommend utilizing the Guest User Access Report Package to assist in reviewing access control permissions for unauthenticated users,” reads a Salesforce advisory that was released in September 2022. “Additionally, we suggest reviewing the following Help article, Best Practices and Considerations When Configuring the Guest User Profile.”

Administrators responsible for Salesforce Community sites should read Krebs’ report in its entirety and ensure their sites are configured properly.

Web browsers identify themselves to websites via User Agent or Client Hints features. With the majority of browsers based on the engines used by Google Chrome, Mozilla Firefox, or Apple Safari — all of which are standards-compliant — all websites should work with all browsers.

Unfortunately, many web developers take the lazy way out and code their website to only work if it detects the browser of their choice. Other companies take such action specifically to promote the browser of their choice at the expense of the overall health of the web and web browser markets.

Vivaldi has already had to change its user agent to masquerade as Google Chrome since some websites would not work with it otherwise — despite it using the exact same engine that Google Chrome uses.

According to co-founder and CEO Jon von Tetzchner, the company is once again making an adjustment to its user agent, this time to help users access Bing Chat.

There are people who would like to try Bing Chat but have been unable to do so as they would need to use Microsoft Edge for that. Now, we have taken additional steps to ensure that you get to use Bing Chat.

Vivaldi masquerades as Microsoft Edge when visiting Bing. This means that you can access Bing Chat on your phone when using Vivaldi.

Read More: Welcome to 2001 As Microsoft Returns to Old Habits to Push Edge

To be clear, Microsoft Edge uses the same engine as Google Chrome, just as Vivaldi does. As a result, there is absolutely no excuse or valid technical reason for Bing Chat not to work with Vivaldi by default. The fact that configuring Vivaldi to simply masquerade as Edge allows it to work is proof of this.

Unfortunately, this is simply the latest example of how the web is increasingly returning to the bad practices that defined the browser wars between Internet Explorer and Netscape Navigator. In those early days of the web, before web standards created a level playing field, web developers would code their websites to take advantage of special features offered by the browser of their choice, locking users into using that specific browser if they wanted access to all of the site’s features.

Today’s modern web standards are designed to eliminate this issue, ensuring all browsers are able to provide the same fundamental features and abilities. Unfortunately, companies like Microsoft are trying to artificially create customer lock-in by “requiring” their browser be used, even when it’s not really necessary.

This is simply the latest example of Microsoft returning to its roots, resorting to strong-arm tactics to push its own software. Kudos to Vivaldi for putting its customers first, taking a step that should not be necessary to give its customers the experience they want.

Google angered critics and privacy advocates when it was discovered that the company was working on an API that would give websites the ability to block “unverified” browsers and users. Critics warned the tech could be used to collect information and profile users, as well as block users from accessing websites if they had “undesirable” features enabled, such as ad-blockers.

After significant push back, it appears Google has killed the feature, according to a company blog post:

We’ve heard your feedback, and the Web Environment Integrity proposal is no longer being considered by the Chrome team. In contrast, the Android WebView Media Integrity API is narrowly scoped, and only targets WebViews embedded in apps. It simply extends existing functionality on Android devices that have Google Mobile Services (GMS) and there are no plans to offer it beyond embedded media, such as streaming video and audio, or beyond Android WebViews.

The announcement is good news for all users concerned about their privacy.

Gmail is one of the most widely used email platforms in the world, making it a prime target for spammers, scammers, and bad actors. Google says Gmail already stops 99.9% of spam, phishing, and malware emails, but the company is rolling out additional protections.

Google announced the improvements in a blog post:

Many bulk senders don’t appropriately secure and configure their systems, allowing attackers to easily hide in their midst. To help fix that, we’ve focused on a crucial aspect of email security: the validation that a sender is who they claim to be. As basic as it sounds, it’s still sometimes impossible to verify who an email is from given the web of antiquated and inconsistent systems on the internet.

Last year we started requiring that emails sent to a Gmail address must have some form of authentication. And we’ve seen the number of unauthenticated messages Gmail users receive plummet by 75%, which has helped declutter inboxes while blocking billions of malicious messages with higher precision.

The company says it is not the only one taking these steps:

We aren’t the only ones pushing for these changes. Our industry partners also see the pressing need to institute them: “No matter who their email provider is, all users deserve the safest, most secure experience possible,” says Marcel Becker, Sr. Dir. Product at Yahoo. “In the interconnected world of email, that takes all of us working together. Yahoo looks forward to working with Google and the rest of the email community to make these common sense, high-impact changes the new industry standard.”

Google will begin enforcing its new rules in February 2024.

Gmail’s Basic HTML view has been a popular option, providing a simpler interface that is reminiscent of the email platform’s early days. Unfortunately, Google is killing off the feature, effective January 2024.

The company made the announcement in a support page:

Important: You can display Gmail on your browser in Basic HTML view until January 2024. After this date, Gmail automatically changes to Standard view.

If your browser is supported, Gmail automatically opens in Standard view. In Standard view, you can use the latest features and security in Gmail.