At UI-licious, we are passionate about quality, and we are looking for people who take pride in their craft to join our team

Uilicious

uilicious

As more and more people use different devices to access the web, website accessibility is becoming increasingly important. And with the release of WCAG 2.0, it's more important than ever to ensure your website is accessible to everyone. That's why we've compiled a list of the eleven best website accessibility testing tools for 2022. These tools will help you identify any accessibility issues on your website so you can make the necessary changes to ensure everyone can use your site. Axe is a free, open-source tool that helps you test the accessibility of your website. It's available as a , and it can be used to test static and dynamic websites. Axe browser extension for Chrome, Firefox, and Edge Axe is created by the developers at . Deque is a leading provider of accessibility software and services, and Axe is one of the most popular accessibility tools on the web. Deque Systems Axe's accessibility testing features Axe has several features that make it an excellent accessibility testing tool, including: A robust review panel that displays all of the accessibility issues on a webpage; The ability to test for specific accessibility criteria, such as ; WCAG 2.0 Detailed reports that show how well your website fares against each accessibility criterion; An audit mode that can be used to test multiple pages at once. Pros: Axe is free and open-source; It's easy to use and provides detailed reports; It can be used to test for specific accessibility criteria. Cons: It can only be used to test for a limited number of accessibility issues. How to use Axe? To use Axe, you must install the Axe extension on your browser. Then, you can either run Axe on an entire webpage or on a specific element on a webpage. For instance, you can test the accessibility of a form by running Axe on the form element. Axe will provide you with a report that details any accessibility issues that it found on the page. The report will also include suggestions on how to fix the issues. WAVE is a free accessibility testing tool that's available as a . It's also available as a stand-alone web application. WAVE browser extension for Chrome and Firefox WAVE was created by . WebAIM is a non-profit organization dedicated to improving the accessibility of the web for people with disabilities. WebAIM WAVE was created to make it easier for people to test the accessibility of their websites. It's easy to use, and it provides detailed reports on the accessibility of your website. WAVE's accessibility testing features WAVE has several features that make it a great accessibility testing tool, including: A detailed report that shows all of the accessibility issues on a webpage; The ability to test for specific accessibility criteria, such as WCAG 2.0; An audit mode that can be used to test multiple pages at once. Pros and cons of WAVEPros: WAVE is free to use; It has a wide range of features; The "Repair" feature can automatically fix some accessibility issues. Cons: It can be difficult to interpret the results of the WAVE reports. The WAVE extension can slow down browser performance making it difficult to navigate the website. How to use WAVE? Installing the WAVE extension on your browser will allow you to test any webpage or element for accessibility. For instance, running WAVE over an entire page of content could help ensure that all buttons are visible and function properly with no inaccessible elements hiding in wait! WAVE provides you with a detailed report to help fix any accessibility issues it finds on the page. The recommendations are tailored for your specific needs, and can be implemented quickly so that people who visit your website don't encounter problems using it! Tenon.io is a paid accessibility testing tool that offers a free trial. It's available as a stand-alone web application, and it can also be used as a . Tenon.io WordPress plugin Tenon.io was created by a team of developers led by Dr. Jason Kiss. It was launched in 2014 to make it easier for people to test the accessibility of their websites. The team at Tenon.io is committed to making their tool the best possible accessibility testing tool available. They continue to update and improve Tenon.io regularly. Tenon's accessibility testing features Tenon has several features that make it a great accessibility testing tool, including: The ability to test for a wide range of accessibility issues, such as WCAG 2.0; Detailed reports that show which accessibility criteria your website fails to meet; A "Test History" feature that lets you track your progress over time; Integrations with popular web development tools, such as Slack and JIRA. Pros and cons of Tenon.ioPros: Tenon offers a free trial; It has a wide range of features; The "Test History" feature is a great way to track your progress. Cons: Tenon is a paid tool, so it may not be affordable for everyone; The reports can be difficult to interpret. How to use Tenon.io? Signing up for a free trial is easy and can be done in just five minutes. Once you've created your account, enter the URL of any website that should undergo accessibility testing through Tenon's online tool to get started! Google Lighthouse is a free, open-source tool that's available as a Chrome extension. It can be used to test the accessibility of your website, as well as the performance, SEO, and Progressive Web App (PWA) features. Google Lighthouse This tool was created in September 2016 by Google. It's since been updated and improved regularly. Google Lighthouse's accessibility testing features Google Lighthouse has several features that make it a great accessibility testing tool, including: The ability to test for a wide range of accessibility issues; Detailed reports that show which accessibility criteria your website fails to meet; The ability to generate screenshots of your website so you can see how it looks to different users; Integrations with popular web development tools, such as and Lighthouse CI. WebPageTest Pros: Google Lighthouse is free, open-source, and already in your browser; It has a wide range of features; The reports are easy to interpret; It can be used to generate screenshots of your website. Cons: It can only be used to test for a limited number of accessibility issues. How to use Google Lighthouse? Google Lighthouse is already installed in the web browser you're using to read this article! To use it, just open the extension and click on the "Audits" tab of Google Chrome. From there, you can select which accessibility criteria you want to test for. Once you've done that, Lighthouse will analyze your website and provide you with a report detailing any accessibility issues it finds. To use Google Lighthouse, you can also install the Chrome extension. Once you've done that, you can start testing your website for accessibility. Just enter the URL of your website into the Lighthouse test tool, and it will provide you with a report detailing any accessibility issues it finds. WebAIM Contrast Checker The is a free tool that's available as a web application. It can be used to test the color contrast of your website and make sure it meets the WCAG 2.0 guidelines. WebAIM Contrast Checker This tool was created in March 2007 by the WebAIM team. Webaim Contrast Checker was created to help web designers and developers create websites that are accessible to people with visual impairments. WebAIM Contrast Checker's accessibility testing features The WebAIM Contrast Checker has several features that make it a great accessibility testing tool, including: The ability to test the color contrast of your website; Detailed reports that show which accessibility criteria your website fails to meet; Integrations with popular web development tools, such as WebAIM's WAVE tool. Pros and cons of WebAIM Contrast CheckerPros: WebAIM Contrast Checker is free to use; It provides detailed reports; It can be used to test the color contrast of your website. Cons: It can only be used to test for a limited number of accessibility issues. How to use WebAIM Contrast Checker? You can use the WebAIM Contrast Checker to see if your website is accessible. All you need to do it sign up for a free trial and enter the URL of where this will happen on an internet device, like a PC or phone browser! It provides reports with any issues that might be preventing people from viewing content as well as ways they could fix them easily themselves without having professional help which many times costs more than just fixing everything up front instead. Chromevox is a free extension that's available for the Google Chrome browser. It can be used to test the accessibility of your website and make sure it meets the WCAG 2.0 guidelines. Chromevox This tool was created in 2008 by Google. Chromevox is a screen reader that's designed for people who are blind or have low vision. Chromevox's accessibility testing features The Chromevox extension has several features that make it a great accessibility testing tool, including: The ability to test for a wide range of accessibility issues; A "ChromeVox Dashboard" that lets you customize the way Chromevox works; Integrations with popular web development tools, such as Google Chrome DevTools. Pros and cons of ChromevoxPros: Chromevox is a free extension; It has a wide range of features; The "ChromeVox Dashboard" lets you customize the way Chromevox works. Cons: It can only be used to test for a limited number of accessibility issues. For example, it doesn’t test for color contrast or text size. NVDA is a free screen reader that's available for the Windows operating system. It can be used to test the accessibility of your website and make sure it meets the WCAG 2.0 guidelines. NVDA This tool was created in 2006 by NV Access, a nonprofit organization that's dedicated to making technology accessible for everyone. NVDA is one of the most popular screen readers available and is used by millions of people around the world. NVDA's accessibility testing features The NVDA screen reader has several features that make it a great accessibility testing tool, including: The ability to test for a wide range of accessibility issues; A "Silent Mode" that lets you disable all sounds; Integrations with popular web development tools, such as the Firefox web browser. Pros and cons of NVDAPros: NVDA is a free screen reader; It has a wide range of features; The "Silent Mode" lets you disable all sounds. Cons: It can only be used to test for a limited number of accessibility issues. The tool tends to use a lot of computing resources. How to use NVDA? To use NVDA, you'll need to install the screen reader from the NV Access website. Once you've done that, you can start testing your website for accessibility. Just enter the URL of your website into the NVDA test tool, and it will provide you with a report detailing any accessibility issues it finds. Accessibility Inspector for Safari is a free extension that's available for the Safari web browser. It can be used to test the accessibility of your website and make sure it meets the WCAG 2.0 guidelines. Accessibility Inspector This tool was created by Apple. Accessibility Inspector is a built-in feature of the Safari web browser that lets you test for a wide range of accessibility issues. Accessibility Inspector for Safari's features The Accessibility Inspector extension has several features that make it a great accessibility testing tool, including: The ability to test for a wide range of accessibility issues; A "Show WebKit Accessibility Tree" feature that lets you see the structure of your website's code; Integrations with popular web development tools, such as the . Safari web browser Pros and cons of Safari's Accessibility InspectorPros: Accessibility Inspector is a free extension; It has a wide range of features such as the "Show WebKit Accessibility Tree" feature; Integrations with popular web development tools. Cons: It can only be used to test for a limited number of accessibility issues. How to use the Accessibility Inspector for Safari? To use the Accessibility Inspector, you'll need to install the extension from the Apple website. Once you've done that, you can start testing your website for accessibility. Just enter the URL of your website into the Accessibility Inspector test tool, and it will provide you with a report detailing any accessibility issues it finds. Developer Tools for Firefox is a free extension that's available for the Firefox web browser. It can be used to test the accessibility of your website and make sure it meets the WCAG 2.0 guidelines. Developer Tools This tool was created by Mozilla. Developer Tools is a built-in feature of the Firefox web browser that lets you test for a wide range of accessibility issues. Accessibility testing features of Developer Tools for Firefox The Developer Tools extension has several features that make it a great accessibility testing tool, including: The ability to test for a wide range of accessibility issues; A "Show Accessibility Tree" feature that lets you see the structure of your website's code; Integrations with popular web development tools, such as the Firefox web browser. Pros and cons of Firefox's Developer ToolsPros: Developer Tools is a free extension; It has a wide range of features; The "Show Accessibility Tree" feature lets you see the structure of your website's code. Cons: It can only be used to test for a limited number of accessibility issues. How to use Developer Tools for Firefox? To use Developer Tools, you'll need to install the extension from the Mozilla website. Once you've done that, you can start testing your website for accessibility. Just enter the URL of your website into the Developer Tools test tool, and it will provide you with a report detailing any accessibility issues it finds. Siteimprove Accessibility Checker is a free online tool that can be used to test the accessibility of your website and make sure it meets the WCAG 2.0 guidelines. Siteimprove Accessibility Checker This tool was created by Site Improve, a software company that's dedicated to making the web a better place for everyone. Site Improve Accessibility Checker is a free online tool that's been designed to test for a wide range of accessibility issues. Site Improve Accessibility Checker's accessibility testing features The Site Improve Accessibility Checker has several features that make it a great accessibility testing tool, including: The ability to test for a wide range of accessibility issues, namely those that are listed in the WCAG 2.0 guidelines; A "Site Scan" feature that lets you scan your entire website for accessibility issues; Integrations with popular web development tools, such as the Site Improve software. Pros and cons of Site Improve Accessibility CheckerPros: Site Improve Accessibility Checker is a free online tool that can be used to test the accessibility of your website and make sure it meets the WCAG 2.0 guidelines. The Site Improve Accessibility Checker has several features that make it a great accessibility testing tool, including: The ability to test for a wide range of accessibility issues; An "Advanced Settings" feature that lets you customize your accessibility tests; Integrations with popular web development tools, such as the Site Improve CMS. Cons: The tool can only be used to test for a limited number of accessibility issues. It can only be used to test websites that are built-in HTML and CSS. Conclusion The first step to accessibility testing will always be finding the right tools for the job. With one or more of these tools in your toolbox, your website will be more ADA Compliant. Utilizing the best tools will help find unwanted issues related to design and accessibility. Are there additional tools that work for your team that was not mentioned here? or ! Check out and receive 10% off! Drop us a Tweet a note on LinkedIn UIlicious

Here are the best 11 Website Accessibility Testing Tools for 2022

How much would you pay for a bug? The logical answer to this question is nothing. No one wants a bug in their software or website. Therefore, it is imperative to have countermeasures in place to prevent such issues from reaching production environments and wreaking havoc with users. Some countermeasures include having a QA team in place. Still, many companies can go further by implementing additional tools such as automated testing, security testing, and an overall better process. But what happens when there are no countermeasures in place? What is the financial impact behind having such issues make their way to production environments and affect consumers? 1.7 Trillion Dollars According to a study from 2016, software failures cost the worldwide economy ! Six years later, that amount has most likely increased due to inflation and other factors, including the increase in overall technology and Internet users. $1.7 trillion Aside from the cost, the number of users affected can also have a large impact on the user experience. Over and unexpected glitches resulting in poor user experience. Many industries are constantly at risk for issues, including financial companies, public services, and transportation industries. 3 billion people have been affected by random software bugs The culprit is bad software quality due to companies reluctant to adopt testing strategies or even a dedicated testing team. Quality assurance is still a department that many companies are hesitant to invest in. With the industry growing more dependent on technology, having a QA team is more important now than it was over ten years ago. More Than Just Money Aside from the monetary impact, bugs can also cause further damage to people, including personal injury and even loss of life! This will result in a loss of interest in both the product and the website. One example of this happened to Fiat Chrysler when errors were discovered in the code that resulted in temporarily r. Unfortunately, there were two crashes, one fatal, that resulted uncovered this error. The end result was a recall of over one million trucks in order to resolve the issue. disabling airbags and seat belt functionality during a rollove Every day there is a new data breach that occurs with large and small companies. Its impact can destroy people’s lives, such as in the . Hackers managed to steal personal data, including social security numbers and credit card information from 145 million users. People were outraged further after finding out the company did not reveal that over 50% of Americans were at risk of identity theft. Equifax 2017 data breach How to Prevent Such Issues With the risk of bugs and glitches, this only enforces the need for having a QA team in place to prevent such financial impacts. With a dedicated QA team in place, the risk of having bugs and other issues find their way into the production environment and affecting consumers is reduced rapidly. In addition to having a dedicated team, it is also important to have a strong testing strategy in place. This will help the team define and target the critical features and functionality for testing. The testing plan will give more visibility and ensure everyone is aligned with both the project and testing efforts. One final piece to the testing arsenal is automation. Having an automated testing tool in place will further reinforce the team’s ability to catch issues throughout the various stages of the development lifecycle process. There are many different tools to choose from and it all depends on the overall team size, structure, and budget plan. I highly recommend using a low-code-based tool that is simple to use and fast to set up, such as UIlicious. With UIlicious, the team can create automated test cases without having to learn and know complex code languages. Plus, the test scripts can be scheduled to run at different times throughout the day and week. This further makes the testing process and efforts stronger. For more information, check out UIlicious and receive 10% off! today Also Published here

Counting The Cost of Software Bugs

Did you know when a company website is not ADA Compliant, a lawsuit can be filed? , including Domino’s Pizza, Fox News Network, Burger King, and even Nike. Lawsuits have been filed against several companies A website must be designed to meet ADA Compliance requirements. In this article, I will discuss what ADA Compliance is and why it is necessary to be compliant. Moreover, I will also offer guidelines on and the best tools to use to take that same concept and apply it to a web application or website. Accessibility Testing What Is ADA Compliance? ADA Compliance stands for . It was passed in 1990 to ensure that people with disabilities have the same opportunities as everyone else. This includes access to employment, education, transportation, and other aspects of daily life. Part of the ADA requires businesses to provide equal access to their goods and services, including online. Americans with Disabilities Act for Standards and Design This means that businesses need to make sure that their websites are accessible to people with disabilities. This can include adding alt text to images, providing captions for videos, and using clear and concise language. By making your website accessible, you are ensuring that everyone has the same opportunity to access your goods and services. This is not only the right thing to do, but it is also the law. Not being compliant means a website may not have all the functionality or features available to a user with disabilities. The website may meet all requirements according to the planned project. But the requirements for accessibility are a bit different because this involves implementing additional features. These features include a closed video caption, color contrast, Aria labels for screen readers, and text font size. The purpose of compliance is that every website is accessible to all users, including those with disabilities. Why Is It Necessary to Be ADA Compliant? ADA Compliance means the website meets all requirements for accessibility, and users can access the website, including those with disabilities. Having an ADA Compliant website avoids issues with users who may not be able to access all of the features on the website. It also allows businesses to have happy customers and avoid possible lawsuits. Since the website meets ADA Compliance means that the company will have a broader outreach to customers. What Are the Benefits of Making a Website ADA Compliant? There are many benefits to making your website ADA compliant. Not only will you be ensuring that everyone has the same opportunity to access your goods and services, but you will also be improving your . Search Engine Optimization (SEO) Search engines like Google are increasingly taking accessibility into account when ranking websites. This means that by making your website more accessible, you could see a boost in your search engine rankings. In addition, making your website ADA compliant will show your customers that you are committed to inclusion and providing a great user experience for everyone. How Much Does It Cost to Make a Website ADA Compliant? The cost of making your website ADA compliant will vary depending on the size and complexity of your site. However, there are many resources available to help you make your website more accessible, including the . Web Content Accessibility Guidelines (WCAG) 2.0 The WCAG 2.0 is a set of guidelines that businesses can use to make their websites more accessible. There are three levels of compliance: A, AA, and AAA as we will see hereafter. The cost of making your website compliant will vary depending on which level you are aiming for. However, it is important to note that even Level A compliance can make a huge difference for people with disabilities. Guidelines for Accessibility Testing There are different types of ADA compliance, such as A, AA, and AAA, but knowing which compliance type works best for your company varies with the kind of project and company. The different compliance types depend on the type of company and application you are working on. The best way to break down the different accessibility types is by defining the overall compliance guidelines. Here is an example of the different types of compliance regarding visual elements and features on a website. Level A Level A is the most basic level of compliance and requires some basic accessibility features to be in place. The website must not use color as the only method of providing information to its users. This includes visual features such as images, and call-to-action functional image links and buttons. The colors need to be distinguishable for visually impaired users or have color blindness since it is essential for differentiating between colors. A is considered the basic guideline for ADA compliance. Consider A as a must-have for your website. Level AA Level AA is the next level up and requires more advanced accessibility features to be in place. This is one step ahead of A by ensuring that the font size is below certain guidelines such as 18 font size. The user also needs to be able to adjust the size of the website to 200% without losing the ability to access features such as links and buttons. The text needs to be given a higher priority over the usage of only text formatted images including jpg and png. AA provides better compliance in comparison to A because of the font size guidelines. AA is the ideal level to be at for your website since as mentioned, takes A and optimizes the visual compliance one step further. Level AAA Level AAA is the highest level of compliance and requires all accessibility features to be in place. This is similar to the previous two levels regarding visual standards but AAA takes it one step further. Not only must the website meet the noted criteria for A and AA, but the visual guidelines must be free of any issues that could cause visual impairments. This includes avoiding the usage of contrast colors for the visually impaired and the overall text must be a specific contrast ratio of 7:1. This level also includes meeting additional requirements such as visual interpretation for live events including American Sign Language (ASL). Consider this as a difficult compliance level to achieve, but this ensures all users will be able to access the website and any live events and videos. Further Reading About ADA Compliance Making your website ADA compliant doesn't have to be a daunting task. There are many resources available to help you get started, including the Web Content Accessibility Guidelines (WCAG) 2.0. If you would like to read more about ADA Compliance, I am including additional resources for you. Here is an article from Forbes providing even more information on the topic: ADA Compliance For Websites: Getting It Right I also recommend reading more about ADA Compliance here from the ADA.gov website: ADA Tool Kit: Website Accessibility Under Title II of the ADA Source link regarding lawsuits: Top 10 Notable ADA Website Compliance Lawsuits (Updated for 2019) In addition, the Department of Justice has published a that outlines the steps businesses need to take to make their websites more accessible. helpful guide There are also many companies that offer web accessibility services, such as audits, training, and consulting. These companies can help you assess your website's accessibility and make recommendations on how to improve it. Final words Making your website accessible is important for a number of reasons. Not only is it the right thing to do, but it is also now the law. Making your website ADA compliant ensures that people with disabilities can access all of the same information and services that everyone else can. There are many benefits to making your website ADA compliant, including improved search engine rankings and showing your commitment to inclusion. The cost of making your website ADA compliant will vary depending on the size and complexity of your site, but there are many resources available to help you get started. Making your website accessible is not only the right thing to do, but it is also good for business. About Me My name is Andrew and I have been in QA for over fifteen years. I love writing about topics related to QA and testing in general. Currently writing blogs for UIlicious, an automation testing tool that is easy to use thanks its simplified code-based framework.

Why Websites Need To Be ADA Compliant

And say goodbye to keyword-based search While GPT 3+ or ChatGPT, prompt engineering is easier to understand intuitively. With many guides and examples available on the web, and social media. Such as OpenAI best practices to prompt engineering List of ChatGPT prompts Embeddings, require programming, and are less understood, due to various counter intuitive behaviour on how it works. But, is an extremely powerful tool for search, or to be used together with existing text-based models, for various other possible use cases. Embeddings are arguably an equally powerful tool, within the AI toolkit, for instruction models. Due to its ability to handle searches across different words and sentences, or even entire languages. Focusing on searching for the relevant document, for any query. For example, it can be used to power searching and answer from an English-based documentation. In English ... Or Japanese ... Or any other languages that the AI model supports. Vector embedding can be used for search, or other tasks such as question-answering, text classification, and generating text. Note that this article focuses on the search aspect, the answering process is in a follow-up article. What is a vector embedding? To generate a vector embedding, one will use an embedding AI model, which converts any text (a large document, a sentence, or even a word), into an "N dimension array", called a vector. For example a sentence like How do I write a UI test script with Uilicious? Can be converted into an array (called a vector) via : OpenAI text-embedding-ada-002 model [0.010046141, -0.009800113, 0.014761676, -0.022538893, ... an a 1000+ numbers] This vector represents the AI model's summarized understanding of the text. This can be thought of as an "N-word summary" written in a language that only the AI can understand. Where related documents will have a close distance from each other, based on the AI's understanding of the document (and not just its text). This is a major leap beyond the simple keyword searches of classic search engines, as it can handle variations in sentence structure and language (provided the AI model is trained to understand said language). Take the following as a hypothetical example, oversimplified inaccurately into 2 dimension space so that it is easier to understand: Which can be visually presented as the following in 2D space. For example, D1,2,3 are all documents related to how to use Uilicious in various ways and are grouped together in one cluster D4 and D5, being simply links and having no inherent value beyond that, are grouped separately in another cluster. Furthermore, D1 & D2 are further grouped together, as they are about Uilicious testing commands, using our very own JavaScript-based testing language. While D3 is grouped separately, as it is regarding using the web driver protocol on our infrastructure directly, which is intended for a different use case and audiences. Similarly, for Q1 and Q2, despite the drastic differences in sentence structure and language, because it is essentially the same question, the two questions are grouped together. Additionally, while the question could technically be interpreted both ways (using Uilicious test script, or webdriver protocol), because the question implies the usage of Uilicious test scripting over webdriver, its location is "closer" to D1 & D2, and further away from D3. As such, despite having huge overlaps in keywords, these nuances in groupings are captured by the AI encoded within the embeddings. Highlighting its distinctive difference to keyword search In reality, however, instead of an oversimplified 2 dimension array which is easy for humans to understand, an embedding can easily be a 1,000+ dimension array. This array is unique to the specific AI model used, and cannot be mixed with another AI model's embeddings. Math notes: N-dimension math is not compatible with 2/3D math While the oversimplified 2 dimension examples, are good for understanding the high-level concept of grouping relatively to one question (or one point of view), it does not accurately represent an N-dimensions. Due to complicated N dimension math, you can have situations, where A can be close to B, B can be close to C, but A and C can be considered far from each other. Which is an extremely counter-intuitive gotcha. Such distances are only useful when used relative to the same point, and the formulas used. Which can be calculated either using also known as Pythagorean Theorem on steroids, it is the most common distance metric used and is the straight line distance between two points in N-sphere. : Euclidean distance it is a measure of angular distance between two points in an N-sphere, and is useful for measuring the similarity of documents or other vectors. : Cosine Similarity these two metrics are used to measure the differences between two vectors, and are useful for measuring the "edit distance" between two strings. Manhattan or Hamming Distance: While the effectiveness of each formula has their respective pros and cons, for different use cases. For textual search, it is generally accepted that Euclidean distance "works better" in most cases, and "good enough" for cases where other methods edge out. All of which, is used in effect to reduce N-Dimensions, to a single dimension (distance), relative to a single point. This as a result, would mean groupings can / may change drastically depending on the question asked. This "relativity" nature of distances, makes classic database search indexes ineffective. If that makes no sense, this is how 4 dimension space is visualized properly with math N-Spheres. Now imagine 1,000 dimensions? Yea it makes no sense. So without derailing this topic with a PHD paper, I will summarise this as just trusting the math professors. All we need to understand is that in general, the closer the distance is between two vector embedding points, the increased likelihood they are relevant to each other. From a practical implementation standpoint. Start with using Euclidean distance first. Before considering using the other formulas which are fine-tuned for better results through trial and error for your use case (not recommended). Searching embeddings with a vector database So given that we can convert various documents into embeddings, we can now store in within a database and perform a search with it. However, unlike an SQL database searching with text, both the search and the data being searched is the vector embedding itself. This means that traditional database search indexes are ineffective when it comes to searching for embeddings. We can have all your documents embeddings, precomputed, and stored into a vector search database. Which can then be used to provide a list of matches, ranked by the closest distance. This can be done using existing vector databases such as : a popular open-source database that can be used to store vector embeddings and search them efficiently. REDIS : a library created by Spotify which uses an optimized algorithm to search embeddings quickly. Annoy : a library created by Facebook which provides efficient search algorithms for large datasets. FAISS One major thing to note, vector search "database tech" is relatively new. Where a large majority of the vector search databases were designed for use cases found in companies like Facebook, Spotify or Google, with record sets in the size of millions or billions. And may not be optimised for small datasets. This is going to be a constantly changing field in the next few years, here is a github 'awesome-list' to help track and find future vector search databases As such, in general, we found for small datasets of (<10,000 ~ 100,000 embeddings), keeping the embedding dataset in memory and brute-forcing euclidean-distance-squared is "good enough" for many use cases, and will sometime outperform formal database solutions (which will have disk/network overheads) with something like the following. The obvious downside to this approach is that the entire dataset must be small enough to fit into memory without the overhead. Regardless if you are using local in-memory embedding search, or a formal vector search database. That's it! Embedding search is just a sort and rank algorithm that works flexibly with various languages, and scenarios. The question for you as the reader is how you can use it. It can be used as it is as a possible google search replacement, or together with other tools, from chat, to games. The possibilities are endless and open to exploration. ~ Until next time 🖖 live long and prosper Eugene Cheah @ tech-talk-cto.com Originally posted on: https://substack.tech-talk-cto.com/p/introducing-ai-embeddings-and-how All Images used, with their proper attribution by on Man in magnifying glass Marten Newhall Unsplash Zach Galifianakis Math meme by on File drawers Jan Antonin Kolar Unsplash by on Dream big wallpaper Randy Tarampi Unsplash

Understanding Vector Embeddings for AI-Powered Search

এআই-চালিত অনুসন্ধানের জন্য ভেক্টর এম্বেডিং বোঝা

Vektoreinbettungen für die KI-gestützte Suche verstehen

Comprender las incrustaciones de vectores para la búsqueda impulsada por IA

Comprendre les vecteurs incorporés pour la recherche basée sur l'IA

एआई-पावर्ड सर्च के लिए वेक्टर एंबेडिंग को समझना

AI を利用した検索のベクトル埋め込みについて

AI 기반 검색을 위한 벡터 임베딩 이해

Compreendendo incorporações de vetores para pesquisa com tecnologia de IA

Yapay Zeka Destekli Arama için Vektör Yerleştirmelerini Anlamak

Hiểu các nhúng Vector cho tìm kiếm do AI cung cấp

了解用于人工智能搜索的向量嵌入

The idea of a 10x developer, or a rockstar developer, being better than every other developer at everything, is a myth. Instead, you should strive to be a 100x developer in very specific situations, a 10x developer in some, and a 1x developer in as many as possible. It's important to be aware of the areas you excel at and the areas that you may need to work on. Unless you work for a large tech company, it's likely you'll be wearing multiple hats. On a daily basis, you'll need to be able to switch between front-end, back-end, and language-specific development, such as Java or TypeScript. This is due to the ever-changing nature of our industry and the sheer number of ways to achieve the same tasks - like printing “Hello World” in over 400 different programming languages. It's impossible to be good at everything, but it is possible to be great at something. To elaborate, I'd like to share a story from over a decade ago which was a life-changing moment that had a huge impact on my career. How I Became a 100x Developer - as a Junior I worked with a large MNC and was part of a team that was struggling to keep up with demand. They had built a custom Java web application that thousands of employees were using daily, but as the number of records going in and out of the SQL servers scaled up. Things were slowing down. They had already upgraded the SQL server to its limits and needed new solutions. An obvious one was to use memcache to cache some of the results. Unfortunately, memcache had been banned due to some security incidents in the past and the lack of HA. The managers had been trying to get approval for memcache for over a year but failed. Meanwhile, the devs fought an uphill battle as every 10% improvement was negated by double that in user growth. This is where I came in, and joined. I had no idea about their past 1 year of struggle and had been brought on board as a junior developer to help make some minor improvements to the UI, while the seniors focused on performance. However because, I was very annoyed by the slow performance of the dev server. And I had been playing with Hazelcast - a brand new Java-based server clustering and caching library. I used it as an alternative to memcache. And was able to get it running on the application, which had no special restrictions or special approval requirements, that killed all previous solutions. And had a working prototype with a demo ready within the same week. For one page in the platform, the API calls went from more than 10 seconds to under a second. It was a game-changer. The whole team jumped on board, and within a month, we had a "clustering solution which is definitely not memcache" in production. As my team manager and his boss treated everyone to a banquet, my manager said to me, that when he brought me on board as a smart kid, he had never expected me to be a 10x or 100x programmer who could solve their problems overnight. And that statement struck me hard. Because I was an imposter – nothing but a lucky imposter. The Lucky Imposter – Who Was a 0.1x Developer Technically, I was not a 1x or even a 10x developer. I knew less than my teammates, and I was learning on the job. My peers could do the front end better than me and the team knew how to optimize SQL (and taught me, thank you!). My biggest credit was that I was able to do the equivalent of “npm install miracle” and read its manual on how to configure it. In hindsight, there were many issues I had dodged by luck. Politics (which blocked memcache in the first place) Use case (we had no write contention safety, meaning if 2 edits happen in the same ms, the cache will be badly updated. Thankfully, this rarely ever happens) Stability (v1 of hazelcast crashes like crazy, thankfully the API server was designed to be deployed in HA mode, so this was an annoyance to the infra team at worst) Security (Having an open port to all data on the API server in a cluster, was a bad idea on my part, and a very junior mistake until another senior thankfully read the docs on how to secure it) Language stack (if the server was in Python, .NET, C# or Ruby, I would have no idea how to even include a local cluster cache) I was lucky to have a handful of one-trick ponies, which made me 100x in the right situations. Which were only possible because of the foundational work put in place by the rest of the team. I was also lucky that my managers and bosses allowed me to choose the problems I wanted to fix, as they fast-tracked me, and threw me across multiple teams to "fix their problems". While allowing me to maximise my luck-to-impact ratio and repeat the “miracles”. With experience, I also realised the opposite – I am slow at front-end development. This was what I was originally supposed to be doing before I was fast-tracked as a 10x engineer and it made me reflect a lot over the years. As it could have been the path I would have been stuck on. It also struck me that in hindsight, having "mastered" hazelcast, and various other technologies. How much it would have failed for other teams, even in the same organisation, were it not for the unique situation, and safeguards, which should have been credited to the rest of the team. I struck lucky, as a junior, if anything else. https://twitter.com/CenturiiC/status/1566060367825883136?embedable=true This is why Senior Developers Tend to be 10x Junior Developers Once we look beyond the generalisations of engineering, it becomes clear that everyone has their skills, which can range from 100x to 0.1x. Over the years, as I moved across many teams and projects, I eventually became a “senior” developer. During this time, I realised that seniors generally have more skills, and know what they are good and bad at. They can proactively inform their managers, and prioritise tasks accordingly. This doesn’t mean they know how to do everything, but it means they know what not to do. Juniors, on the other hand, struggle with this as they lack the experience to know what they are good at or bad at. There isn’t an easy way to find this out other than to just “try”. Once this is understood, it becomes apparent that it’s all about maximising the number of things you know you can do reliably and well. It’s also about maximising your luck factor when it comes to being assigned tasks, and ensuring you’re not stuck with things you’re bad at. In a way for juniors, their progress will depend heavily on the alignment of their luck and skillset. Seniors, had more (but not full) control, over how to steer their progress. In this case: Luck isn’t binary. You can increase the number of situations that align with you. How to Maximise Your Situation Luck at 100x and 10x For everyone, but especially for juniors and those just starting out, the best thing to do is to keep trying new things in technology and exploring. This will help you figure out what you’re good at and what you’re bad at. For those who have a better idea of what they are good at, the next step is to expand the number of situations where they can perform their best. This involves some practice and research into adjacent technologies to the ones they already know. Once you become great at something, make sure to own it so your managers and bosses know that this is what they should give you. This will increase the chances of hitting those 10x or 100x situations more frequently. Find at least one thing you’re good at, even if it’s a very small and narrow thing. Build up from there. (Some notable examples include regex and configuring webpack.) For seniors, if you haven’t done so already, start looking beyond the technical aspects of development. This doesn’t mean you have to move into management. But with your unique technical knowledge, you can play a more active role in understanding the user or business use case. This will allow you to optimize with your managers to ensure 10x or 100x success rates for you and your team. For those who are job hunting, if you know you’re good at something, even if it’s 10x, do some research and dig deeper into your job hunt. Try to find a well-funded startup or MNC that is facing difficulty in the exact thing you’re good at. While this can be difficult to pull off and does involve some networking, if you place yourself in the right place and time, it will maximize the impact for both you and the company involved. These are all things, you can do slowly over time, to improve the luck factor. And deliver that 10x experience more consistently. Special shout out to read article on how to create luck: swyx swyx.io/create-luck As a CTO and Team Leader Today, This Still Holds - 10x Is a Myth - Everyone Is Both 100x and 0.1x Some may think that the CTO of a UI testing tool such as would be good with front-end technologies. However, this is far from the truth. Our average fresh hire or junior in the company is typically faster than me the CTO when it comes to writing front-end components with modern front-end frameworks such as Vue.js or React. Uilicious.com This has changed my perspective as a team leader/manager. It showed me how toxic and bad the 10x engineer myth is. It’s an oversimplification of labels and generalization of very unique situations. It’s a toxic misconception that needs to be fixed. Almost every startup 10x engineer myth, when looked into deeper, turns out to have an individual with unique knowledge in the right place and time. And was able to avoid the tasks they were 0.1x at. In my case, it was focusing on infrastructure over front-end development. Where instead, I have other team members who are 1000x times better at doing frontend development. This is an important realization as a manager because, for every individual who is 100x at one task, there’s a task that makes them 0.1x as they get stuck in a time sink. It’s about understanding and recognizing what each individual is 100x at, and what they’re 0.1x at. While this sounds very straightforward, this is significantly harder in practice. There are many things a team leader or developer will not know till they have tried it before. Or are given the time and opportunity, to hone and master the skillsets involved in those specific situations. There are also many things, especially new technologies, that no one is good at it, and is all about taking risks and a chances. It’s the team leader’s job to organize tasks accordingly to best suit everyone’s needs. And if that is not possible, it's also about understanding that even if someone can’t be 100x in your situation now, they can potentially be elsewhere in other teams. And is on every individual developer, to figure out what they are good and bad at, and to communicate that to their team accordingly. So to death with the 10x Engineer Myth, Long live the 100x Engineer in specific situations PS: If you have not made any new year's resolutions. Perhaps increasing your luck surface area could be it! ~ 🖖 live long and prosper Eugene Cheah: CTO of uilicious.com Originally posted on: https://substack.tech-talk-cto.com/p/dev-to-cto-how-do-i-become-a-10x Image credits Austin Neill - rockstar image: unsplash.com/photos/sxxnM-tRlVg XKCD - comic on standards: xkcd.com/927 CenturiiC - Comic on experienced engineers: twitter.com/CenturiiC/status/15660603678258.. Lucas Santos - Dice picture: unsplash.com/photos/XIIsv6AshJY Vlad Hilitanu - Lego figs: unsplash.com/photos/1FI2QAYPa-Y

How I Became a 100x Developer - As a Junior

Cómo me convertí en un desarrollador 100x: como junior

Comment je suis devenu développeur 100x - En tant que junior

मैं 100x डेवलपर कैसे बना - एक जूनियर के रूप में

私が 100x 開発者になった経緯 - ジュニア時代

Como me tornei um desenvolvedor 100x - como júnior

Tôi đã trở thành Nhà phát triển 100x như thế nào - Khi còn là một Junior

我是如何成为一名 100 倍开发人员的 - 作为一名大三学生

VCs & Founders Note: ChatGPT/LLM Is a Huge Step Forward - Here's Why

Nota para capitalistas de riesgo y fundadores: ChatGPT/LLM es un gran paso adelante: este es el motivo

Note des VC et des fondateurs : ChatGPT/LLM est un énorme pas en avant - Voici pourquoi

वीसी और संस्थापक नोट: चैटजीपीटी/एलएलएम एक बड़ा कदम है - यहां जानिए क्यों

VC と創業者の皆様へ: ChatGPT/LLM は大きな前進です。その理由は次のとおりです。

VCs e fundadores Nota: ChatGPT/LLM é um grande passo à frente - aqui está o porquê

Các nhà đầu tư mạo hiểm & nhà sáng lập Lưu ý: ChatGPT/LLM là một bước tiến lớn - Đây là lý do tại sao

风投和创始人注：ChatGPT/LLM 是向前迈出的一大步——原因如下

SAINE is Mathematically One of the Best WORDLE Starting Words - Here's Why

SAINE es matemáticamente una de las mejores palabras iniciales de WORDLE: he aquí por qué

SAINE est mathématiquement l'un des meilleurs mots de départ WORDLE - Voici pourquoi

SAINE गणितीय रूप से सबसे अच्छे शुरुआती शब्दों में से एक है - यहाँ पर क्यों

SAINE は、数学的に最高の WORDLE 開始単語の 1 つです。その理由は次のとおりです。

SAINE é matematicamente uma das melhores palavras iniciais do WORDLE - aqui está o porquê

SAINE về mặt toán học là một trong những từ bắt đầu WORDLE Tốt nhất - Đây là lý do tại sao

SAINE 在数学上是最好的 WORDLE 起始词之一 - 这就是为什么

TLDR: I wrote a Wordle solver bot with Javascript and UIlicious. You can any day to get your daily Wordle solution. Try and see if you can get a better score than the bot! rerun or edit this snippet Feel free to edit it and optimize the solver algorithm! Full Disclosure: I am the co-founder and CTO of Uilicious.com (featured in this article) The wordler solver is covered in 3 parts, which covers the UI interaction code (this article) Wordle Statistical model, and the math behind it (link here) Unit testing and benchmarking of the wordle solver (@TODO) If you haven't already heard of Wordle, it's a fun puzzle game that challenges you to guess a valid five-letter word in six tries or less. My wife is really addicted to Wordle, and she's been bugging me to try it every day. I suppose for her, there's a thrill in getting the right word in the least amount of tries. And because we're both gamers and math-nerds, naturally we talk about strategies to solve Wordle in the least number of guesses. But when it comes to actually putting those theories to use and trying my hand at Wordle, I came to realize... I suck at Wordle! English isn't my strong suit per se... I speak Javascript better. So what better way to solve Wordle, than to write a program to solve it for me. HA! After a weekend of hacking, I finished coding up my Wordle solver bot using JS and UIlicious, and I would say it works pretty well and has managed to make the correct guess mostly within 3-4 tries so far. It has mostly stirred up my wife's competitive spirit and annoyed her since the bot does better than her on most days. But at least she's not bugging me every day to play Wordle anymore. Curious about how the Wordle solver works? Let me explain! Basic setup We're going to use to interact with the Wordle website, fill in our guesses, and evaluate the hints. While UIlicious is primarily a cross-browser UI testing tool, nobody said that's all you can use it for, so why not solve some Wordles with it. UIlicious Let's set up our solver bot on - think of it as Codepen, but for UI testing, and it's entirely free to use for executing tests on Chrome. UIlicious lets you run Javascript, so I'm going to be writing the solver in JS. UIlicious Snippets The first thing we'll have to do is get the bot to navigate to the Wordle site. We use the command to go to the official Worldle site ( ). I.goTo https://www.powerlanguage.co.uk/wordle/ I.goTo("https://www.powerlanguage.co.uk/wordle/") Since the acquisition of Wordle by NY Times, there's now a cookie banner, which we need to either accept or dismiss, using the command. I.click I.click("Reject") // to reject cookies and close the cookie banner Let's just make sure the app has loaded, with quick check for the phrase "Guess the Wordle" using the command: I.see I.see("Guess the Wordle") Finally, let's dismiss the tutorial popup by using with a pixel offset to click outside the popup: I.click // clicks 40px down and 80px right from the top-left corner of the webpage
I.click('/html/body', 40, 80) Now, we'll just hit that "Run" button to run the browser automation script, and make sure this brings us to an empty Wordle board to play with. Next steps Ok, now let's dive into writing more complex parts of the solver. The bot will need to be able to: Enter letters into Wordle Read the hints from Wordle Find the solution based on the hints (I'll explain this in a follow-up post) 1. Entering letters into Wordle We've only got up to six tries to guess the Wordle, so we'll start with a simple loop to make 6 attempts to guess the word: for for(let r=0 ; r<6 ; ++r) {
  // solver code will go in here
} Now we're going to generate a couple of words and enter our guesses into the game. I'm not going to dive into how works at the moment, but what it basically does is suggest a word based on the previous guesses and the revealed hints. I'll explain how the solver works in a follow-up post, stay tuned! solver.suggestWord(gameState) let guessWord = null
for(let r=0 ; r<6 ; ++r) {

  // guess the next word
  guessWord = solver.suggestWord(gameState)
  
} After computing the , I need the bot to enter the word into the game board, which is pretty straightforward. I use the command to enter the guess word, and to submit the guess. I've also added a small wait for the game board to finish its animation and allow input for the next guess because the solver can be too fast sometimes and might attempt its next guess before the game board is ready. guessWord I.type I.pressEnter let guessWord = null
for(let r=0 ; r<6 ; ++r) {
  // ... 
  // Does some stuff to get gameState

  // guess the next word
  guessWord = solver.suggestWord(gameState)
  
  // enter and submit the guess word into the Wordle game board
  I.type(guessWord);
  I.pressEnter();

  // add a small wait for the animation to finish before entering the next guess
  I.wait(2)
  
} And that's it! 2. Reading the hints from Wordle The next important step is after each guess, we need to evaluate the hints to make our next guess. This is a bit trickier, as we'll need to do a bit of scraping to get our hints from the HTML. First, let’s grab each row of the game board. The Wordle app is entirely written using Web Components (impressive!), so we'll need to make use of and to dive into the element and grab each of the element which stores important information about the revealed hints. document.querySelector .shadowRoot <game-app> <game-row> let rowList = document.querySelector("game-app").shadowRoot. //
		querySelector("game-theme-manager"). //
		querySelector("#board").querySelectorAll("game-row"); Here's what we'll get when we run this query in the browser console: Each of these element has two very useful data attributes that we want: game-row : tells you guess that you've made for this row, e.g. _letters "hello" : an array of hints for each letter, e.g. . if the letter is in the correct position. if the letter is in the word, but is in the wrong position. And if the letter isn't in the word. _evaluation ["absent", "present", "correct", "absent", "absent"] "correct" "present" "absent" Now we're going to build a object to store all of this information and pass it to our solver. The code below is nothing too fancy. We'll wrap this in a function because we want to run it after each guess to get the updated hints. state function() {

    // We prepare the state object which we would want to return
    let state = { history: [], pos:[
        { hintSet:[] },{ hintSet:[] },{ hintSet:[] },{ hintSet:[] },{ hintSet:[] }
    ] };

    // Lets get the list of result rows from the UI DOM
    // unfortunately this is more complicated then needed due to shadowDoms
    let rowList = document.querySelector("game-app").shadowRoot. //
    querySelector("game-theme-manager"). //
    querySelector("#board").querySelectorAll("game-row"); //

    // Lets build the state by reading each row
    for(let r=0; r<rowList.length; ++r) {
        let row = rowList[r];
        // a row can be blank, if there was no guess made
        if( row._letters && row._letters.length > 0 ) {
            let word = row._letters;
            // Add it to history list
            state.history.push( word );

            // Iterate each char in the word
            let allCorrect = true;
            for(let i=0; i<5; ++i) {
                let c = word[i];
                if( row._evaluation[i] == "absent" ) {
                    // does nothing
                    allCorrect = false;
                } else if( row._evaluation[i] == "present" ) {
                    state.pos[i].hintSet.push( c );
                    allCorrect = false;
                } else if( row._evaluation[i] == "correct" ) {
                    state.pos[i].foundChar = c;
                } else {
                    throw "Unexpected row evaluation : "+row._evaluation[i];
                }
            }

            // Configure the final "allCorrect" state
            state.allCorrect = allCorrect;
        }
    }

    // And return the state obj
    return state;
} This piece of code above needs to be executed in the browser, so I need to tell the Wordle bot (which runs on a sandboxed NodeJS instance) to run the function in the browser using . UI.execute function getWordleStateFromUI(){
  return UI.execute(function(){
    // put the above code snippet in here to get the game state
  })
} Okay, now we want to use this function to get the game state after each guess, so let's go back to our loop and update it: for let guessWord = null;
for(let r=0; r<6; ++r) {

    // get the game state
    let gameState = getWordleStateFromUI();

    // if we got all the letters correct, we've won, hurray!
    // exit the loop in that case
    if( gameState.allCorrect ) {
        break;
    }

    // guess the next word
    guessWord = solver.suggestWord(gameState);

    // enter and submit the guess word into the Wordle game board
    I.type(guessWord);
    I.pressEnter();

    // add a small wait for the animation to finish before entering the next guess
    I.wait(2);
} Whew! Now that the bot can enter its guesses into the board and get the revealed hints, we can work on writing the algorithm to solve the Wordle in six attempts or less! 3. Finding the solution based on the hints... in a follow-up post! Writing the solver algorithm is the biggest challenge and a whole lot of fun. I spent quite a bit of time reading up on optimal strategies (there are even papers written about this) and tweaking the algorithm. But this deserves a post of its own, so I'm going to write a follow-up post after, stay tuned! Putting Everything Together Finally, let's put together the wordle solver: Before the start of the loop, we'll initialise the solver with: for const solver = new WordleSolvingAlgo(fullWordList, filteredWordList); And after we exit the the loop, we want to query the game state again. At this point, we've either guessed the correct word in less than 6 attempts, or have made 6 guesses but don't know what's the final outcome. We'll get the final game state one more time, and report the outcome using if the bot won, or if the bot lost the game. for TEST.log.pass TEST.log.fail // this comes after exiting the for loop...

// get the final game state
let gameState = getWordleStateFromUI();

// is it all correct? 
if( gameState.allCorrect ) {
    // CONGRATS!!!
    I.see("NEXT WORDLE");
    TEST.log.pass("==== END OF GAME ====")
    TEST.log.pass("## The wordle is : "+guessWord.toUpperCase())
} else {
    // DARN! Try better next time!
    TEST.log.fail("==== END OF GAME ====")
    TEST.log.fail("## The last guess was : "+guessWord.toUpperCase())
} Here's what everything looks like altogether (except for the solver algo part!) // Open Wordle!
I.goTo("https://www.powerlanguage.co.uk/wordle/")

// to reject cookies and close the cookie banner
I.click("Reject") 

// Is Wordle loaded?
I.see("Guess the Wordle")

// Solve Wordle!
runTheWordleSolver()

//----------------------------------
// This function runs the wordle solver,
// which will make up to 6 attempts to guess the word
function runTheWordleSolver() {
	
    // initialise the solver
    // stay tune for more about the solving algorithm!
	const solver = new WordleSolvingAlgo(fullWordList, filteredWordList)
	
	let guessWord = null;
	
	// make up to 6 guesses
	for(let r=0; r<6; ++r) {
		
        // get the game state (includes the revealed hints)
		let gameState = getWordleStateFromUI();
		
		// if we got all the letters correct, we've won, hurray!
        // exit the loop in that case
		if( gameState.allCorrect ) {
			break;
		}
		
		// guess the next word
		guessWord = solver.suggestWord(gameState);
		
        // enter and submit the guess word into the Wordle game board
		I.type(guessWord);
		I.pressEnter();
		
		// add a small wait for the animation to finish before entering the next guess
		I.wait(2);
	}
	
	// at this point, we either guessed the correct word in less than 6 attempts, or have made 6 guesses and don't know what's the outcome yet.
	
	// get the final game state
	let gameState = getWordleStateFromUI();

	// is it all correct? 
	if( gameState.allCorrect ) {
        // CONGRATS!!!
		I.see("NEXT WORDLE");
		TEST.log.pass("==== END OF GAME ====")
		TEST.log.pass("## The wordle is : "+guessWord.toUpperCase())
	} else {
        // DARN! Try better next time!
		TEST.log.fail("==== END OF GAME ====")
		TEST.log.fail("## The last guess was : "+guessWord.toUpperCase())
	}

} Drumroll... The Moment of Truth! Let's smash the "Run" button and see how our Wordle bot does! : I'll explain how the solver engine works, and the math behind it. Or if you want to dive into the full code yourself, you can check it out over here, and maybe even replace with your own algorithm to solve Wordle: Stay tuned for part 2. In part 2 (linked here) WordleSolvingAlgo https://snippet.uilicious.com/test/public/N5qZKraAaBsAgFuSN8wxCL In the meantime…. Happy Wordling! 🖖🏼🚀 First published here

I Created a Bot to Solve Wordle so I Never Have to Ever Again

My Data! My Rules! How True is That?

The makers and entrepreneurs all around the world are building exciting products. These products aim to make our life easier. The is a great place to see what exciting products are going to launch soon. In hundreds of upcoming products, there are lots of interesting products for developers and software engineers. These products range from APIs, analytics platforms, mobile app developments, , and more. Check out and get early access of the products that can be useful for developers. Product Hunt upcoming blockchain learning Coursesity It is a place to discover the best online courses to learn programming and coding. Browse top rated and highly recommended courses for web development, mobile apps development, machine learning, front-end development from thousands of online courses available on the internet. _Discover best online courses to learn anything you want. Browse best rated and highly recommended courses from…_www.producthunt.com Coursesity - Discover Best Online Courses and Tutorials grid.studio Basically, it is an intuitive editor that lets you create modern websites that can behave like apps (PWA). All without coding! Built by Stefan Rasmussen _grid.studio - Drag'n'drop PWA website-builder! on Product Hunt_www.producthunt.com grid.studio | Next-gen PWA builder Coinvision API It is a new all-in-one API for 1,000 Crypto market data sources. Get deep data feeds, such as on-chain transactions, dynamic rich list tracking and non-exchange OTC movements. Built by Tiago Martins _Coinvision API — One API. 1,000 Crypto Market Data Sources. on Product Hunt_www.producthunt.com Coinvision API Codeq Natural Language API This API contains all the necessary functions you would expect from an NLP/DL platform in addition to some unique capabilities focused on questions, emotions, sarcasm, and more. Built by . Russ Smith _Our forthcoming API contains all the necessary functions you would expect from an NLP/DL platform in addition to some…_www.producthunt.com Unlock meaning like never before with Codeq OpenNode OpenNode is a lightning enabled Bitcoin payments platform. Focusing on simplicity, it aims to create a frictionless experience for anyone looking to monetize their creative output. It wants to help create a world where bitcoin payments are the preferred medium for everyday transactions. Built by Rui Gomes _OpenNode - The simple way to accept bitcoin on Product Hunt_www.producthunt.com OpenNode Manifold OS Manifold OS gives you everything you need to launch and monetize your API or dev tool. Things like: billing and payments, accounts, RBACs, audit logging and more all OOTB with easy setup. Built by . Jevon _Manifold OS - Everything you need to sell your API to developers on Product Hunt_www.producthunt.com Manifold OS SprintHub SprintHub automagically arranges your kanban board while you are working with GitHub. Don’t manage yet another tool. Built by Daniel Heitz _SprintHub - Manage your GitHub issues automagically_www.producthunt.com SprintHub DataDrivenJS DataDrivenJS is like web analytics, but without charts. Like a database, but without backend. Just a simple JavaScript API to track and read data at scale directly from your website’s frontend. _DataDrivenJS - Access Your Web Analytics Data with JavaScript on Product Hunt_www.producthunt.com DataDrivenJS Draftbit With Draftbit you can design your app visually, assembled from our deep library of components, and then export app-store ready binaries or clean, well-documented code that give you full control. _With Draftbit you can design and configure your app visually, assembled from our deep library of components, and then…_www.producthunt.com Draftbit - Build apps in minutes instead of months. Apptics Apptics lets you connect all the services you use to track how your business is performing. You can ask questions about your metrics and create beautiful reports that are easy to share. _Connect all of the services you use and find all the metrics that matter to you in one place. Share and create reports._www.producthunt.com Come try out Apptics! RapidPro We’ve built a tool that lets you prototype real, interactive features, and let your users test them using their real data, direct from your database. All without a line of code. Built by Michael Skelly www.producthunt.com RapidPro RapidPro - Create prototypes using your users' real data, without code Metomic It is a slick API and beautiful UX to make GDPR compliance and granular opt-in as easy as pie. _Metomic for GDPR - Zero effort GDPR consent API with beautiful frontend widgets on Product Hunt_www.producthunt.com Metomic for GDPR - Product Hunt Uilicious Snippet Write readable and clean test scripts to emulate your entire user journey on websites! With Uilicious Snippet, you can even share your bug findings of websites and verify resolved bugs on your favorite issue tracking tools like Jira for free! www.producthunt.com Uilicious Snippet Uilicious Snippet - Free automated website user journey testing platform InboxKitten Inboxkitten is an open-source disposable email service (powered by serverless kittens) that you can freely deploy / adopt on your own! Built by Eugene Cheah www.producthunt.com InboxKitten InboxKitten - Open-source private disposal email server ItsAlive It’s a Facebook chatbot builder with lot more User-friendly, impressively faster, and has a lot more exciting features. By Benjamin Merritt _The easiest builder to create a Facebook chatbot Enjoy making your bot with our user-friendly interface. No coding…_www.producthunt.com The brand new Facebook Chatbot Builder by ItsAlive Codicle Codicle combines the best coding and design tutorials into complete real project guides you can follow along. By Tiago Martins _Codicle - Practice Projects for Coding Students_www.producthunt.com Codicle SpotSense SpotSense is building geofencing tools for developers, not marketers. Say goodbye to geofencing being used to send spammy notifications. _Add geofencing + location analytics to your mobile app in 10 minutes or less. We mean it._www.producthunt.com SpotSense: Location for Mobile Apps - Product Hunt

ProductHunt’s 17 Most Exciting Upcoming Products For Developers

The Evolution of Modern Medicine: Chapter I - ASSYRIAN AND BABYLONIAN MEDICINE

Advancing net worth is as easy as a click. Democratized online trading platforms have expanded portfolios while increasing the chances of cybersecurity breaches. These websites are more popular and accessible than ever — and threat actors know this. Techies and investors with accounts on these sites must acknowledge the threat landscape. Hackers grow their skills and creativity daily, so cyber hygiene equates to financial stability. Overview of Cybersecurity Risks in Online Trading Moderators, administrators, and users alike must remain alert for signs of security compromises. Their frequency dictates the reputation of all trading platforms, reducing trust in investors. What are the most prominent cyberattack variants on online trading sites? Server Misconfigurations Most online traders are in service thanks to third-party cloud providers. External hosts own data centers, which are equally vulnerable to cyberattacks if unprotected. While outsourcing provides boons, trusting public vendors to maintain security standards is tricky. One recent incident occurred on the Forex trading site, FBS. One server was left without encryption or passwords, leaving 20 terabytes of data open for the taking. Hackers may not need advanced techniques to compromise billions of users' information. They merely need to look around for negligent trading companies. Social Engineering and Insider Threats This is one of the most stealthy cyber intrusions because cybercriminals manipulate real people instead of digital assets. Brokers inside the firm may work alongside criminal outfits and be bribed or blackmailed into helping them. Alternatively, the insider threat may have been a double agent from the beginning of their employment. It gives immediate ingress behind cyber defenses that are hard to catch. This allows those under the influence of social engineering to manipulate the market or commit fraud from within. Phishing It is common for hackers to resemble trusted sources, such as emails or websites. Transferring funds from a trading account is as simple as investors handing over the information. Spear phishing is prevalent in high-profile environments. This tactic targets specific individuals or small groups. It could coincide with whaling, which jeopardizes individuals with high net worth or a lot to lose. People who don’t develop a risk management plan for their portfolio may feel the brunt of spear phishing more than others. Malware and Ransomware Threat actors will stop at nothing to take over trading software, records, servers, and systems. They do this with malware and ransomware because hackers know the people they are attacking have the funds on hand. The likelihood that criminals will receive payment for stolen information is high in fintech. Impulsive, emotional investing is already a risk for online trading volatility, and this phenomenon is worse with cyberthreats. Vulnerabilities in Online Trading Platforms Online trading organizations suffer from cyberattacks because of security oversights. Users and staff must recognize these solutions to the most notable red flags. The repercussions are drained funds and stolen identities, to name a few. Inadequate Authentication Measures These sites may not have as comprehensive verification as they could. This goes past login strategies, such as two-factor authentication or using biometrics. Authentication measures must occur while traders explore the platform. Is it set up to identify unusual account access attempts or allow transactions and communications to occur without encryption? Poor Compliance Adherence Many websites do not follow agency best practices. They need to adhere to cybersecurity frameworks, among others. This includes data protection policies and anti-money laundering legislation, and trading platforms must practice due diligence to prevent it. Spontaneous withdrawals of specific varieties should not be allowed in a secure program. Insecure APIs If communication between multiple components in online trading software is insecure, then the rest of the platform is, too. Compliance expert OWASP provides many suggestions for protecting APIs, such as reviewing unrestricted resource consumption or server-side request forgery. Best Practices for Securing Online Trading Accounts Everyone involved in online trading must adopt industry-leading habits to lessen attack severity. Easy-to-implement suggestions include: Establishing two- or multifactor authentication with text, email, and biometric options
Using strong password guidelines
Automating updates for trading software to the most recent versions
Securing internet connections and servers
Updating firewalls
Setting up alerts for suspected malicious activity
Getting to know a reputable broker
Writing a cybersecurity incident response plan However, the most beneficial way to secure websites is to educate and motivate employees for these trading sites. Disengagement and alert fatigue are rampant in cybersecurity circles. It makes most breaches a result of human error instead of a system fault. Regulatory Frameworks and Compliance Standards Protecting Traders Regulatory agencies work tirelessly to update and innovate on existing security standards. Fintech is vulnerable, so it requires special attention. Organizations and laws overseeing financial services and preventing brokerage fraud concerns include: U.S. Securities and Exchange Commission (SEC)
Securities Investor Protection Corporation (SIPC)
Financial Industry Regulatory Authority (FINRA)
General Data Protection Regulation (GDPR)
Payment Card Industry Data Security Standard (PCI DSS)
International Organization for Standardization (ISO) 27001
Open Worldwide Application Security Project (OWASP)
Hypertext Transfer Protocol Secure (HTTPS) The implications of noncompliance are severe for sites and traders, yet many are underperforming. Few requirements for transparency exist, and despite guidelines, not every platform is overseen by authorities. Emerging Technologies for Enhancing Online Trading Security Several strategies cybersecurity analysts employ to fight hackers have become antiquated. Advanced technologies are necessary to adapt to sneaky revolutions in the hacking world. Blockchain is one of the most competitive options for increasing defenses. Its use of hashes and ledgers makes it one of digital spaces' most substantial verification measures. Tracking transactions has never been more transparent and certifiable. Blockchain is not a perfect technology, but enhancements are developing it into the cybersecurity behemoth the industry is begging for. AI-driven solutions have the most growth potential. The technology still needs refining, but it could be the most versatile and effective at stopping cybercriminals from entering online trading sites. It would use machine and deep learning to understand the most prominent risk variants on the site.  Designing isolation and remediation tactics with minimal human intervention would make it more proficient. Wiser Online Trading to Beat Hackers Breaches in any industry could be destructive, but online trading platforms have access to countless dollars and data points. They are enticing targets for experienced cybercriminals. Enforcing strict cybersecurity regulations is vital, regardless of upfront investments and complexity. Fintech cannot afford the losses, and neither can its customers. Private and governmental collaboration is necessary to combat threats in digital landscapes. Advancing net worth is as easy as a click . Democratized online trading platforms have expanded portfolios while increasing the chances of cybersecurity breaches. These websites are more popular and accessible than ever — and threat actors know this. Advancing net worth is as easy as a click Techies and investors with accounts on these sites must acknowledge the threat landscape. Hackers grow their skills and creativity daily, so cyber hygiene equates to financial stability. Overview of Cybersecurity Risks in Online Trading Moderators, administrators, and users alike must remain alert for signs of security compromises. Their frequency dictates the reputation of all trading platforms, reducing trust in investors. What are the most prominent cyberattack variants on online trading sites? Server Misconfigurations Most online traders are in service thanks to third-party cloud providers. External hosts own data centers, which are equally vulnerable to cyberattacks if unprotected. While outsourcing provides boons, trusting public vendors to maintain security standards is tricky. One recent incident occurred on the Forex trading site, FBS. One server was left without encryption or passwords, leaving 20 terabytes of data open for the taking. Hackers may not need advanced techniques to compromise billions of users' information. They merely need to look around for negligent trading companies. 20 terabytes of data open 20 terabytes of data open Social Engineering and Insider Threats This is one of the most stealthy cyber intrusions because cybercriminals manipulate real people instead of digital assets. Brokers inside the firm may work alongside criminal outfits and be bribed or blackmailed into helping them. Alternatively, the insider threat may have been a double agent from the beginning of their employment. It gives immediate ingress behind cyber defenses that are hard to catch. This allows those under the influence of social engineering to manipulate the market or commit fraud from within. immediate ingress behind cyber defenses immediate ingress behind cyber defenses Phishing It is common for hackers to resemble trusted sources, such as emails or websites. Transferring funds from a trading account is as simple as investors handing over the information. Spear phishing is prevalent in high-profile environments. This tactic targets specific individuals or small groups. It could coincide with whaling, which jeopardizes individuals with high net worth or a lot to lose. People who don’t develop a risk management plan for their portfolio may feel the brunt of spear phishing more than others. develop a risk management plan develop a risk management plan Malware and Ransomware Threat actors will stop at nothing to take over trading software, records, servers, and systems. They do this with malware and ransomware because hackers know the people they are attacking have the funds on hand. The likelihood that criminals will receive payment for stolen information is high in fintech. Impulsive, emotional investing is already a risk for online trading volatility, and this phenomenon is worse with cyberthreats. Vulnerabilities in Online Trading Platforms Online trading organizations suffer from cyberattacks because of security oversights. Users and staff must recognize these solutions to the most notable red flags. The repercussions are drained funds and stolen identities, to name a few. Inadequate Authentication Measures These sites may not have as comprehensive verification as they could. This goes past login strategies, such as two-factor authentication or using biometrics. Authentication measures must occur while traders explore the platform. Is it set up to identify unusual account access attempts or allow transactions and communications to occur without encryption? Poor Compliance Adherence Many websites do not follow agency best practices. They need to adhere to cybersecurity frameworks, among others. This includes data protection policies and anti-money laundering legislation, and trading platforms must practice due diligence to prevent it. Spontaneous withdrawals of specific varieties should not be allowed in a secure program. Insecure APIs If communication between multiple components in online trading software is insecure, then the rest of the platform is, too. Compliance expert OWASP provides many suggestions for protecting APIs, such as reviewing unrestricted resource consumption or server-side request forgery. reviewing unrestricted resource consumption reviewing unrestricted resource consumption Best Practices for Securing Online Trading Accounts Everyone involved in online trading must adopt industry-leading habits to lessen attack severity. Easy-to-implement suggestions include: Establishing two- or multifactor authentication with text, email, and biometric options Using strong password guidelines Automating updates for trading software to the most recent versions Securing internet connections and servers Updating firewalls Setting up alerts for suspected malicious activity Getting to know a reputable broker Writing a cybersecurity incident response plan Establishing two- or multifactor authentication with text, email, and biometric options Using strong password guidelines Automating updates for trading software to the most recent versions Securing internet connections and servers Updating firewalls Setting up alerts for suspected malicious activity Getting to know a reputable broker Writing a cybersecurity incident response plan However, the most beneficial way to secure websites is to educate and motivate employees for these trading sites. Disengagement and alert fatigue are rampant in cybersecurity circles. It makes most breaches a result of human error instead of a system fault. Regulatory Frameworks and Compliance Standards Protecting Traders Regulatory agencies work tirelessly to update and innovate on existing security standards. Fintech is vulnerable, so it requires special attention. Organizations and laws overseeing financial services and preventing brokerage fraud concerns include: preventing brokerage fraud concerns preventing brokerage fraud concerns U.S. Securities and Exchange Commission (SEC) Securities Investor Protection Corporation (SIPC) Financial Industry Regulatory Authority (FINRA) General Data Protection Regulation (GDPR) Payment Card Industry Data Security Standard (PCI DSS) International Organization for Standardization (ISO) 27001 Open Worldwide Application Security Project (OWASP) Hypertext Transfer Protocol Secure (HTTPS) U.S. Securities and Exchange Commission (SEC) Securities Investor Protection Corporation (SIPC) Financial Industry Regulatory Authority (FINRA) General Data Protection Regulation (GDPR) Payment Card Industry Data Security Standard (PCI DSS) International Organization for Standardization (ISO) 27001 Open Worldwide Application Security Project (OWASP) Hypertext Transfer Protocol Secure (HTTPS) The implications of noncompliance are severe for sites and traders, yet many are underperforming. Few requirements for transparency exist, and despite guidelines, not every platform is overseen by authorities. Emerging Technologies for Enhancing Online Trading Security Several strategies cybersecurity analysts employ to fight hackers have become antiquated. Advanced technologies are necessary to adapt to sneaky revolutions in the hacking world. are necessary to adapt are necessary to adapt Blockchain is one of the most competitive options for increasing defenses. Its use of hashes and ledgers makes it one of digital spaces' most substantial verification measures. Tracking transactions has never been more transparent and certifiable. Blockchain is not a perfect technology, but enhancements are developing it into the cybersecurity behemoth the industry is begging for. AI-driven solutions have the most growth potential. The technology still needs refining, but it could be the most versatile and effective at stopping cybercriminals from entering online trading sites. It would use machine and deep learning to understand the most prominent risk variants on the site.  Designing isolation and remediation tactics with minimal human intervention would make it more proficient. Wiser Online Trading to Beat Hackers Breaches in any industry could be destructive, but online trading platforms have access to countless dollars and data points. They are enticing targets for experienced cybercriminals. Enforcing strict cybersecurity regulations is vital, regardless of upfront investments and complexity. Fintech cannot afford the losses, and neither can its customers. Private and governmental collaboration is necessary to combat threats in digital landscapes.

Cybersecurity Risks Worth Considering in Online Trading

অনলাইন ট্রেডিংয়ে সাইবার নিরাপত্তার ঝুঁকি বিবেচনা করা উচিত

Cybersicherheitsrisiken, die beim Online-Handel zu berücksichtigen sind

Riesgos de ciberseguridad que vale la pena considerar en el comercio en línea

Risques de cybersécurité à prendre en compte dans le trading en ligne

ऑनलाइन ट्रेडिंग में साइबर सुरक्षा जोखिम पर विचार करना उचित है

オンライン取引で考慮すべきサイバーセキュリティリスク

온라인 거래에서 고려해야 할 사이버 보안 위험

Riscos de segurança cibernética que valem a pena considerar no comércio online

Риски кибербезопасности, которые стоит учитывать при онлайн-торговле

Çevrimiçi Ticarette Dikkate Alınması Gereken Siber Güvenlik Riskleri

Rủi ro an ninh mạng đáng xem xét trong giao dịch trực tuyến

在线交易中值得考虑的网络安全风险

Intro In today's world, where cybercrimes are becoming increasingly widespread, it is important to have access to effective tools for investigation and counteraction against these threats. One such tool is the CSI Linux operating system, specially designed for the needs of cybersecurity and cyber investigations. CSI Linux aims to provide users with tools for fast and accurate detection of digital traces and evidence that can be used for criminal investigations or for ensuring cybersecurity in organizations. The developers of this operating system claim that it simplifies the process of collecting, analyzing, and interpreting digital data, making it an important tool for professionals in the field of cybersecurity and cyber investigations. But is it really so? Let's find out... Basic information To begin with, I would like to provide some basic information about this distribution. Official website: https://csilinux.com/ As of the writing of this article, CSI Linux uses Ubuntu 22.04 LTS as its base platform. CSI Linux is an open-source project, so anyone interested can contribute to making it better. The installation process is quite simple, and there are many videos on this topic, such as this one. Although the process has changed slightly now, after downloading the disk image, you simply need to add (Machine -> Add) the virtual disk file in Vbox format to VirtualBox for it to run. To log into the system by default, use the username "CSI" and the password "CSI." There is also a whole book dedicated to working with CSI Linux, which can be purchased here. The terminology, list of all available software in CSI Linux, and other documentation are available at this link. Previously, CSI Linux had three separate packages on the CSI Linux Investigator platform, but now CSI Linux Gateway and CSI Linux Analyst are merged into one package, while CSI Linux SIEM is available as a separate image on the official website. All distributions can also be downloaded from the official website. For a better understanding, let me describe the three components of CSI Linux mentioned above: CSI Linux SIEM: This is a virtual machine included in the CSI Linux Investigator distribution. In fact, it is an Ubuntu distribution that includes a configured Zeek IDS and ELK Stack (Elasticsearch, Logstash, and Kibana). It is used as an intrusion detection system to protect other virtual machines (CSI Linux Analyst and CSI Linux Gateway), process logs, and display data on the management panels of CSI Linux Analyst. CSI Linux Gateway: This is a TOR user gateway that operates in a "sandbox" using utilities such as AppArmor, Jailbreak, and Shorewall Firewall. When using CSI Linux Analyst + CSI Linux Gateway, all traffic will pass through the TOR node. CSI Linux Analyst: This is the "core" of this distribution. It is a virtual machine running Ubuntu with a large amount of pre-installed software grouped by categories. We will discuss the list of categories later. It's worth noting that in the Incident Response menu, there is a section for CSI SIEM, but it is not active and displays "CSI SIEM Installer and Launch utility coming soon…" indicating a likely intention to integrate it with the third distribution. However, in any case, you can install and run SIEM separately using virtualization in VirtualBox, allowing you to have the full set of packages on the same server. Functionality review Now, let's get a bit closer to the mentioned operating system. To start working, we create a case (click on the "Start a Case" icon on the desktop or go to Menu -> CSI Linux Tools -> Start a Case). Then, all subsequent operations can be performed within the created case, where the results will be stored. Upon creation, you are immediately prompted to start work, and there are several options in the CSI Case Management Menu. It's important to know that most of the software is not pre-installed, and an automatic installation script is launched when selecting a program. Now, let's quickly go through the list of programs (both pre-installed and not) in each available category: CSI Linux Tools: A set of programs for system updates, management of CSI Tor VPN and Whonix Gateway for traffic routing, working with API resources used in CSI Linux, downloading videos, creating screenshots from various online resources, and much more. Secure Comms: This category includes "secure" online messengers. Encryption: Everything for decrypting hashes, password cracking, storing passwords, and personal data. OSINT/Online Investigations: A fairly large category where everyone can find the necessary tools for OSINT tasks. Among the most interesting are social media searches, phone and email searches. Dark Web: If the investigator encounters connection problems, this category is suitable. 'TOR > VPN,’ 'WHONIX'’ and so on, all for pleasant surfing. Incident Response: Everything for incident investigation, malware scanners, network analysis (Wireshark), and more. Computer Forensics: Computer forensics (data recovery and file analysis). Mobile Forensics: Mobile forensics tools for analysis and work with mobile phones. Vehicle Forensics: A set of utilities for working with the CAN (Controller Area Network) protocol. CAN is a network technology widely used in automation, embedded devices, and the automotive industry. Malware Analysis and Reverse Engineering: For the analysis of malicious scripts and programs, reverse engineering. SIGINT: A set of programs for radio channel analysis, hacking, and programming (FM, WiFi, etc.). Virtualization: A set of managers for virtualization. Threat Intelligence: Threat reconnaissance, cybercrime maps worldwide, and more. Practice Below are some screenshots of CSI Linux in action, demonstrating several tools and functionalities. You'll find attempts to search for individuals by username and email, showcasing the system's capabilities in gathering information from various sources. Conclusion After a basic introduction to the system and conducting several tests searching by phone, email, and username, I can say that CSI Linux partially works out of the box, but in most cases, you need to configure the software you're trying to investigate. There's an issue with blocking bots, through which criminalization occurs, as Tor VPN IP addresses have a poor reputation, or maybe sites identify it as bot activity and quickly block connections. The system is noticeably geared towards working with the world's most famous resources and social networks, but it lacks "out-of-the-box" support for local ones, which may be the most significant in a particular country. The set of programs is quite interesting, although not everything works right away, as already noted. For example, when I searched for data using my email, Buster found an article from 15 years ago on "Economic Truth" mentioning my address and Skype account. However, a simple Google search can find the same and even more. Furthermore, a search by username produced a bunch of irrelevant and unreliable information, which theoretically could be useful if filtered manually. Now I would like to add a little comparison with a competing system to CSI Linux and a more well-known operating system. Kali Linux, a Linux distribution, is popular in the cybersecurity community and is a basic tool for many cybersecurity specialists. However, comparing these two systems, we can say that the software offered by default in each of them is quite different. It's essential to understand that all the software presented in CSI Linux can be installed on Kali Linux and vice versa, as both are based on Ubuntu/Debian and are essentially extensions of the base. As the developers themselves claim, Kali Linux, with its set of programs, is more geared towards tasks such as penetration testing, security research, computer forensics, and reverse engineering. As soon as you log in and look at the main menu, you'll find mostly software for testing websites, social networks, or servers for vulnerabilities or hacking. There are many different bots, attackers, network analysis programs, and so on. So, these two systems are based on the same foundation but are created and configured for different tasks, although they can replace each other. CSI Linux has the right to exist, and it is definitely improving, but much needs to be "fine-tuned" to fit its needs, and one should be prepared for that. The "breakthrough" through the set of programs exists, but it lacks a wow effect and has quite a few inconsistencies. I hope you found this article interesting. By the way, I should mention that the CSI community has its own academy where you can take a course on various aspects of the project. Details are available at the CSI Linux Academy. Intro In today's world, where cybercrimes are becoming increasingly widespread, it is important to have access to effective tools for investigation and counteraction against these threats. One such tool is the CSI Linux operating system, specially designed for the needs of cybersecurity and cyber investigations. CSI Linux aims to provide users with tools for fast and accurate detection of digital traces and evidence that can be used for criminal investigations or for ensuring cybersecurity in organizations. The developers of this operating system claim that it simplifies the process of collecting, analyzing, and interpreting digital data, making it an important tool for professionals in the field of cybersecurity and cyber investigations. But is it really so? Let's find out... Basic information To begin with, I would like to provide some basic information about this distribution. Official website: https://csilinux.com/ As of the writing of this article, CSI Linux uses Ubuntu 22.04 LTS as its base platform. CSI Linux is an open-source project, so anyone interested can contribute to making it better. The installation process is quite simple, and there are many videos on this topic, such as this one. this Although the process has changed slightly now, after downloading the disk image, you simply need to add (Machine -> Add) the virtual disk file in Vbox format to VirtualBox for it to run. To log into the system by default, use the username "CSI" and the password "CSI." There is also a whole book dedicated to working with CSI Linux, which can be purchased here . here The terminology, list of all available software in CSI Linux, and other documentation are available at this link . link Previously, CSI Linux had three separate packages on the CSI Linux Investigator platform, but now CSI Linux Gateway and CSI Linux Analyst are merged into one package, while CSI Linux SIEM is available as a separate image on the official website. All distributions can also be downloaded from the official website. For a better understanding, let me describe the three components of CSI Linux mentioned above: CSI Linux SIEM: This is a virtual machine included in the CSI Linux Investigator distribution. In fact, it is an Ubuntu distribution that includes a configured Zeek IDS and ELK Stack (Elasticsearch, Logstash, and Kibana). It is used as an intrusion detection system to protect other virtual machines (CSI Linux Analyst and CSI Linux Gateway), process logs, and display data on the management panels of CSI Linux Analyst. CSI Linux SIEM: CSI Linux Gateway: This is a TOR user gateway that operates in a "sandbox" using utilities such as AppArmor, Jailbreak, and Shorewall Firewall. When using CSI Linux Analyst + CSI Linux Gateway, all traffic will pass through the TOR node. CSI Linux Gateway: CSI Linux Analyst: This is the "core" of this distribution. It is a virtual machine running Ubuntu with a large amount of pre-installed software grouped by categories. We will discuss the list of categories later. CSI Linux Analyst: It's worth noting that in the Incident Response menu, there is a section for CSI SIEM, but it is not active and displays "CSI SIEM Installer and Launch utility coming soon…" indicating a likely intention to integrate it with the third distribution. However, in any case, you can install and run SIEM separately using virtualization in VirtualBox, allowing you to have the full set of packages on the same server. Functionality review Now, let's get a bit closer to the mentioned operating system. To start working, we create a case (click on the "Start a Case" icon on the desktop or go to Menu -> CSI Linux Tools -> Start a Case). Then, all subsequent operations can be performed within the created case, where the results will be stored. Upon creation, you are immediately prompted to start work, and there are several options in the CSI Case Management Menu. It's important to know that most of the software is not pre-installed, and an automatic installation script is launched when selecting a program. Now, let's quickly go through the list of programs (both pre-installed and not) in each available category: CSI Linux Tools: CSI Linux Tools: CSI Linux Tools: A set of programs for system updates, management of CSI Tor VPN and Whonix Gateway for traffic routing, working with API resources used in CSI Linux, downloading videos, creating screenshots from various online resources, and much more. Secure Comms: Secure Comms: Secure Comms: This category includes "secure" online messengers. Encryption: Encryption: Encryption: Everything for decrypting hashes, password cracking, storing passwords, and personal data. OSINT/Online Investigations: OSINT/Online Investigations: OSINT/Online Investigations: A fairly large category where everyone can find the necessary tools for OSINT tasks. Among the most interesting are social media searches, phone and email searches. Dark Web: Dark Web: Dark Web: If the investigator encounters connection problems, this category is suitable. 'TOR > VPN,’ 'WHONIX'’ and so on, all for pleasant surfing. Incident Response: Incident Response: Incident Response: Everything for incident investigation, malware scanners, network analysis (Wireshark), and more. Computer Forensics: Computer Forensics: Computer Forensics: Computer forensics (data recovery and file analysis). Mobile Forensics: Mobile Forensics: Mobile Forensics: Mobile forensics tools for analysis and work with mobile phones. Vehicle Forensics: Vehicle Forensics: Vehicle Forensics: A set of utilities for working with the CAN (Controller Area Network) protocol. CAN is a network technology widely used in automation, embedded devices, and the automotive industry. Malware Analysis and Reverse Engineering: Malware Analysis and Reverse Engineering: Malware Analysis and Reverse Engineering: For the analysis of malicious scripts and programs, reverse engineering. SIGINT: SIGINT: SIGINT: A set of programs for radio channel analysis, hacking, and programming (FM, WiFi, etc.). Virtualization: Virtualization: Virtualization: A set of managers for virtualization. Threat Intelligence: Threat Intelligence: Threat Intelligence: Threat reconnaissance, cybercrime maps worldwide, and more. Practice Below are some screenshots of CSI Linux in action, demonstrating several tools and functionalities. You'll find attempts to search for individuals by username and email, showcasing the system's capabilities in gathering information from various sources. Conclusion After a basic introduction to the system and conducting several tests searching by phone, email, and username, I can say that CSI Linux partially works out of the box, but in most cases, you need to configure the software you're trying to investigate. There's an issue with blocking bots, through which criminalization occurs, as Tor VPN IP addresses have a poor reputation, or maybe sites identify it as bot activity and quickly block connections. The system is noticeably geared towards working with the world's most famous resources and social networks, but it lacks "out-of-the-box" support for local ones, which may be the most significant in a particular country. The set of programs is quite interesting, although not everything works right away, as already noted. For example, when I searched for data using my email, Buster found an article from 15 years ago on "Economic Truth" mentioning my address and Skype account. However, a simple Google search can find the same and even more. Furthermore, a search by username produced a bunch of irrelevant and unreliable information, which theoretically could be useful if filtered manually. Now I would like to add a little comparison with a competing system to CSI Linux and a more well-known operating system. Kali Linux , a Linux distribution, is popular in the cybersecurity community and is a basic tool for many cybersecurity specialists. However, comparing these two systems, we can say that the software offered by default in each of them is quite different. It's essential to understand that all the software presented in CSI Linux can be installed on Kali Linux and vice versa, as both are based on Ubuntu/Debian and are essentially extensions of the base. As the developers themselves claim, Kali Linux, with its set of programs, is more geared towards tasks such as penetration testing, security research, computer forensics, and reverse engineering. As soon as you log in and look at the main menu, you'll find mostly software for testing websites, social networks, or servers for vulnerabilities or hacking. There are many different bots, attackers, network analysis programs, and so on. Kali Linux So, these two systems are based on the same foundation but are created and configured for different tasks, although they can replace each other. CSI Linux has the right to exist, and it is definitely improving, but much needs to be "fine-tuned" to fit its needs, and one should be prepared for that. The "breakthrough" through the set of programs exists, but it lacks a wow effect and has quite a few inconsistencies. I hope you found this article interesting. By the way, I should mention that the CSI community has its own academy where you can take a course on various aspects of the project. Details are available at the CSI Linux Academy . CSI Linux Academy

CSI Linux: Linux Distribution for Cyber and OSINT Investigation

You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here. This part is 19 of 38. Line of Effort 2: Promote Common Understandings of Trust, Interoperable Standards, and Shared Values and Governance Principles for Critical and Emerging Technologies One of the most pressing challenges for digital solidarity is developing common approaches to governing critical and emerging technologies such as AI. The speed of innovation, the scale of the competition, and the stakes for our values, security, and prosperity demand concerted action. With AI technologies, we will not have the luxury of time or of pursuing narrow interests that have often slowed our ability to develop shared principles and interoperable regulatory approaches in other parts of the digital economy. Shaping shared values and governance principles on the development, deployment, and use of AI is increasingly central to American digital diplomacy. The United States is engaging allies, partners, the private sector, civil society, the technical community, and other stakeholders in discussions at the G7, Global Partnership on Artificial Intelligence, the Council of Europe, OECD, UN, UNESCO, and other fora to manage the risks of AI and ensure its benefits are widely distributed. In addition, we will need to work together to invest in the science research and infrastructure necessary to measure, evaluate, and verify advanced AI technology systems. In July 2023, President Biden announced voluntary commitments from seven leading AI companies to advance the safe, secure, and transparent development of AI technology. Eight more companies (including one foreign-based company) signed on to the commitments in September. The United States internationalized and expanded on the voluntary commitments through the G7 Hiroshima AI process led by Japan to tackle generative AI, with leaders releasing an International Code of Conduct for Organizations Developing Advanced AI systems in October 2023. We continue to work on broadening acceptance of the Code of Conduct by more countries and companies beyond G7 member countries. The United States joined twenty-seven other countries at the UK AI Safety Summit and signed the Bletchley Declaration, which encourages transparency and accountability from actors developing frontier AI technology. The United States and the United Kingdom have also signed a memorandum of understanding between their respective AI Safety Institutes advancing the science of measuring, evaluating, and addressing AI risks as a first step toward a global consensus on the scientific underpinnings of AI safety. These efforts outline a role for national governments, promote international cooperation, and encourage innovation by providing technically rigorous guidelines for introducing safe, secure, and trustworthy AI technology. At the same time, USAID and several other international development donors entered into a partnership to promote safe, secure, and trustworthy AI development in low- and middle-income countries in Africa and other parts of the world. In October 2023, President Biden issued an Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence. This Order establishes a process to develop new standards for AI safety and security and seeks to protect citizens’ privacy, promote innovation and competition, and advance equity and human rights. The Order tasked the Department of State with strengthening U.S. leadership abroad on AI issues. The Department of State and USAID, in collaboration with the Department of Commerce, are leading an effort to establish an AI in Global Development Playbook to harness AI’s benefits and manage its risks. Relatedly, the Department of State plans to lead an interagency task force on detecting, authenticating, and labeling synthetic content, which aims to facilitate information sharing and mobilize global commitments to both label authentic government-produced content and detect synthetic content. In addition, working with the Department of Homeland Security (DHS), the Department of State is engaging international partners to help prevent, respond to, and recover from potential critical infrastructure disruptions resulting from the incorporation of AI into critical infrastructure systems or the malicious use of AI against those systems. The Department of State and USAID are also working with interagency partners, including the National Institute of Standards and Technology (NIST), National Science Foundation (NSF), and Department of Energy, to develop a human rights risk management framework for AI and a global AI research agenda. The Department of State is also building broad-based support for the Political Declaration on Responsible Military Use of AI and Autonomy. While there are important discussions ongoing in Geneva under the framework of the Convention on Certain Conventional Weapons (CCW) – which the United States will continue to support – the scope of those discussions only covers one possible military use of AI, namely autonomous weapon systems. The Political Declaration is the first effort to articulate principles and best practices covering all military applications of AI technologies. Continue Reading Here. This post was originally published on May 6, 2024, by the U.S Department of State You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here. This part is 19 of 38. You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here . This part is 19 of 38. here Line of Effort 2: Promote Common Understandings of Trust, Interoperable Standards, and Shared Values and Governance Principles for Critical and Emerging Technologies One of the most pressing challenges for digital solidarity is developing common approaches to governing critical and emerging technologies such as AI. The speed of innovation, the scale of the competition, and the stakes for our values, security, and prosperity demand concerted action. With AI technologies, we will not have the luxury of time or of pursuing narrow interests that have often slowed our ability to develop shared principles and interoperable regulatory approaches in other parts of the digital economy. Shaping shared values and governance principles on the development, deployment, and use of AI is increasingly central to American digital diplomacy. The United States is engaging allies, partners, the private sector, civil society, the technical community, and other stakeholders in discussions at the G7, Global Partnership on Artificial Intelligence, the Council of Europe, OECD, UN, UNESCO, and other fora to manage the risks of AI and ensure its benefits are widely distributed. In addition, we will need to work together to invest in the science research and infrastructure necessary to measure, evaluate, and verify advanced AI technology systems. In July 2023, President Biden announced voluntary commitments from seven leading AI companies to advance the safe, secure, and transparent development of AI technology. Eight more companies (including one foreign-based company) signed on to the commitments in September. The United States internationalized and expanded on the voluntary commitments through the G7 Hiroshima AI process led by Japan to tackle generative AI, with leaders releasing an International Code of Conduct for Organizations Developing Advanced AI systems in October 2023. We continue to work on broadening acceptance of the Code of Conduct by more countries and companies beyond G7 member countries. The United States joined twenty-seven other countries at the UK AI Safety Summit and signed the Bletchley Declaration, which encourages transparency and accountability from actors developing frontier AI technology. The United States and the United Kingdom have also signed a memorandum of understanding between their respective AI Safety Institutes advancing the science of measuring, evaluating, and addressing AI risks as a first step toward a global consensus on the scientific underpinnings of AI safety. These efforts outline a role for national governments, promote international cooperation, and encourage innovation by providing technically rigorous guidelines for introducing safe, secure, and trustworthy AI technology. At the same time, USAID and several other international development donors entered into a partnership to promote safe, secure, and trustworthy AI development in low- and middle-income countries in Africa and other parts of the world. In October 2023, President Biden issued an Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence. This Order establishes a process to develop new standards for AI safety and security and seeks to protect citizens’ privacy, promote innovation and competition, and advance equity and human rights. The Order tasked the Department of State with strengthening U.S. leadership abroad on AI issues. The Department of State and USAID, in collaboration with the Department of Commerce, are leading an effort to establish an AI in Global Development Playbook to harness AI’s benefits and manage its risks. Relatedly, the Department of State plans to lead an interagency task force on detecting, authenticating, and labeling synthetic content, which aims to facilitate information sharing and mobilize global commitments to both label authentic government-produced content and detect synthetic content. In addition, working with the Department of Homeland Security (DHS), the Department of State is engaging international partners to help prevent, respond to, and recover from potential critical infrastructure disruptions resulting from the incorporation of AI into critical infrastructure systems or the malicious use of AI against those systems. The Department of State and USAID are also working with interagency partners, including the National Institute of Standards and Technology (NIST), National Science Foundation (NSF), and Department of Energy, to develop a human rights risk management framework for AI and a global AI research agenda. The Department of State is also building broad-based support for the Political Declaration on Responsible Military Use of AI and Autonomy. While there are important discussions ongoing in Geneva under the framework of the Convention on Certain Conventional Weapons (CCW) – which the United States will continue to support – the scope of those discussions only covers one possible military use of AI, namely autonomous weapon systems. The Political Declaration is the first effort to articulate principles and best practices covering all military applications of AI technologies. Continue Reading Here. Continue Reading Here . Here This post was originally published on May 6, 2024, by the U.S Department of State This post was originally published on May 6, 2024, by the U.S Department of State by the U.S Department of State

U.S. Leads Global Efforts in AI Governance and Trust, Unveils International Code of Conduct

ইউএস এআই গভর্নেন্স এবং ট্রাস্টে বিশ্বব্যাপী প্রচেষ্টার নেতৃত্ব দেয়, আন্তর্জাতিক আচরণবিধি উন্মোচন করে

USA führen weltweite Bemühungen um KI-Governance und Vertrauen an und stellen internationalen Verhaltenskodex vor

Estados Unidos lidera los esfuerzos globales en materia de gobernanza y confianza de la IA y presenta un código de conducta internacional

Les États-Unis mènent les efforts mondiaux en matière de gouvernance et de confiance en IA et dévoilent un code de conduite international

अमेरिका ने एआई गवर्नेंस और ट्रस्ट में वैश्विक प्रयासों का नेतृत्व किया, अंतर्राष्ट्रीय आचार संहिता का अनावरण किया

米国がAIガバナンスと信頼に関する世界的な取り組みを主導し、国際行動規範を発表

미국은 AI 거버넌스와 신뢰 분야에서 글로벌 노력을 주도하고 국제 행동 강령을 공개했습니다.

EUA lideram esforços globais em governança e confiança em IA e divulgam código de conduta internacional

США возглавляют глобальные усилия в области управления и доверия к искусственному интеллекту и представляют Международный кодекс поведения

ABD, Yapay Zeka Yönetişimi ve Güveni Konusunda Küresel Çabalara Öncülük Ediyor, Uluslararası Davranış Kurallarını Açıklıyor

Hoa Kỳ dẫn đầu các nỗ lực toàn cầu về quản trị và tin cậy AI, công bố quy tắc ứng xử quốc tế

美国引领全球人工智能治理与信任努力，发布国际行为准则

You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here. This part is 4 of 38. Cyber Attacks and National Security Threats Adversarial cyber campaigns can cumulatively produce strategic loss for the United States and its allies, and they increasingly put the development goals of emerging economies at risk. Cyber threats continue to intensify in both frequency and severity, with increased risks of escalatory or uncontrolled cyber activity. State actor and non-state actors, including criminals, terrorists, and violent extremists, have tremendous incentives to invest in and exploit digital technologies to threaten our and other’s national interests. The People’s Republic of China (PRC) presents the broadest, most active, and most persistent cyber threat to government and private sector networks in the United States. Beijing has mounted cyber espionage operations against government, commercial, and civil society actors and has increased its ability to carry out destructive and disruptive cyberattacks. The PRC is capable of launching cyberattacks that could disrupt oil and gas pipelines, rail systems, and other critical infrastructure services within the United States or its allies and partners. Attempts to compromise critical infrastructure by PRC actors are designed in part to pre-position themselves to be able to disrupt or destroy critical infrastructure in the event of a conflict—either to either prevent the United States from being able to project power into Asia, or to affect our decision-making during a crisis by instigating societal chaos inside the United States. Both state-sponsored activity and that of PRC-linked actors are part of the PRC cyber approach. A persistent cyber threat, the Russian government is refining its cyber espionage, cyberattack, influence, and information manipulation capabilities to threaten other states and to weaken U.S. alliances and partnerships. Russia continues to provide safe haven to transnational cybercriminal actors, such as disruptive ransomware gangs. Russia’s cyberattacks in support of its 2022 unprovoked invasion of Ukraine were intended to destabilize the Ukrainian state and military and have resulted in spillover effects onto civilian critical infrastructure in other European countries. As the war continues, Russian government and Russian government-aligned cyber actors have targeted Ukraine with cyber operations against the public and private sectors, information manipulation and online influence operations, and attempts to divert and censor Ukrainians’ access to the Internet. Russia appears particularly focused on improving its ability to target critical infrastructure in the United States to demonstrate its ability to damage infrastructure during a crisis. The governments of the Democratic People’s Republic of North Korea (DPRK) and Iran have both increased the scale of their malicious cyber activities. Facing multiple rounds of international sanctions, the DPRK evades controls through cybercrime and the theft of cryptocurrencies. DPRK hackers continue to gather intelligence on military technology targets as well as academia and think tanks. In addition, the DPRK dispatches thousands of skilled IT workers around the world to generate fraudulent revenue that ultimately contributes to its weapons of mass destruction and ballistic missile programs despite U.S. and UN sanctions. Iran’s growing expertise and willingness to conduct cyber operations threaten the security of networks and data globally. Iran’s opportunistic approach to cyberattacks makes critical infrastructure owners in the United States susceptible to being targeted by Iranian actors, particularly when Tehran believes that it must demonstrate it can push back against the United States in other domains. Iranian actors have engaged in a wide range of intelligence-gathering operations around the world, and—in the wake of Hamas’ atrocities on October 7, 2023, and Israel’s military operations in Gaza—have conducted wiper, website takedown, hack and leak operations, espionage, and online information manipulations campaigns. Iranian actors have also conducted malicious activity against operational technology devices used in the water sector and other industries. Cyber criminals and criminal syndicates operating in cyberspace now represent a specific threat to the economic and national security of countries around the world. Cybercrime and online fraud cause significant harm to economic development, with small- to medium-sized enterprises and financial service providers especially at risk. According to one estimate, the global cost of cybercrime is estimated to top $23 trillion in 2027. [3] Ransomware incidents have disrupted critical functions, services, and businesses, from energy pipelines and food companies to schools and hospitals. Ransomware attacks against the healthcare industry can undercut the level of care provided to patients and others under care. Total economic losses from ransomware attacks worldwide continue to climb, reaching into the billions of U.S. dollars annually. Ransomware groups often operate out of safe haven jurisdictions whose governments, often adversaries like Russia, do not cooperate with law enforcement and sometimes encourage, direct, sanction, or tolerate their activities. Terrorists’ and violent extremists’ use of digital technologies also represents a threat to the national security of the United States and its allies and partners. Malign activities include the use of information and communications technologies (ICT) to spread violent propaganda; encourage radicalization and mobilization to commit violent acts; recruit individuals to terrorist organizations; to train, plan, and coordinate attacks; and finance terrorist acts. Continue Reading Here. This post was originally published on May 6, 2024, by the U.S Department of State You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here. This part is 4 of 38. You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here . This part is 4 of 38. here Cyber Attacks and National Security Threats Adversarial cyber campaigns can cumulatively produce strategic loss for the United States and its allies, and they increasingly put the development goals of emerging economies at risk. Cyber threats continue to intensify in both frequency and severity, with increased risks of escalatory or uncontrolled cyber activity. State actor and non-state actors, including criminals, terrorists, and violent extremists, have tremendous incentives to invest in and exploit digital technologies to threaten our and other’s national interests. The People’s Republic of China (PRC) presents the broadest, most active, and most persistent cyber threat to government and private sector networks in the United States. Beijing has mounted cyber espionage operations against government, commercial, and civil society actors and has increased its ability to carry out destructive and disruptive cyberattacks. The PRC is capable of launching cyberattacks that could disrupt oil and gas pipelines, rail systems, and other critical infrastructure services within the United States or its allies and partners. Attempts to compromise critical infrastructure by PRC actors are designed in part to pre-position themselves to be able to disrupt or destroy critical infrastructure in the event of a conflict—either to either prevent the United States from being able to project power into Asia, or to affect our decision-making during a crisis by instigating societal chaos inside the United States. Both state-sponsored activity and that of PRC-linked actors are part of the PRC cyber approach. A persistent cyber threat, the Russian government is refining its cyber espionage, cyberattack, influence, and information manipulation capabilities to threaten other states and to weaken U.S. alliances and partnerships. Russia continues to provide safe haven to transnational cybercriminal actors, such as disruptive ransomware gangs. Russia’s cyberattacks in support of its 2022 unprovoked invasion of Ukraine were intended to destabilize the Ukrainian state and military and have resulted in spillover effects onto civilian critical infrastructure in other European countries. As the war continues, Russian government and Russian government-aligned cyber actors have targeted Ukraine with cyber operations against the public and private sectors, information manipulation and online influence operations, and attempts to divert and censor Ukrainians’ access to the Internet. Russia appears particularly focused on improving its ability to target critical infrastructure in the United States to demonstrate its ability to damage infrastructure during a crisis. The governments of the Democratic People’s Republic of North Korea (DPRK) and Iran have both increased the scale of their malicious cyber activities. Facing multiple rounds of international sanctions, the DPRK evades controls through cybercrime and the theft of cryptocurrencies. DPRK hackers continue to gather intelligence on military technology targets as well as academia and think tanks. In addition, the DPRK dispatches thousands of skilled IT workers around the world to generate fraudulent revenue that ultimately contributes to its weapons of mass destruction and ballistic missile programs despite U.S. and UN sanctions. Iran’s growing expertise and willingness to conduct cyber operations threaten the security of networks and data globally. Iran’s opportunistic approach to cyberattacks makes critical infrastructure owners in the United States susceptible to being targeted by Iranian actors, particularly when Tehran believes that it must demonstrate it can push back against the United States in other domains. Iranian actors have engaged in a wide range of intelligence-gathering operations around the world, and—in the wake of Hamas’ atrocities on October 7, 2023, and Israel’s military operations in Gaza—have conducted wiper, website takedown, hack and leak operations, espionage, and online information manipulations campaigns. Iranian actors have also conducted malicious activity against operational technology devices used in the water sector and other industries. Cyber criminals and criminal syndicates operating in cyberspace now represent a specific threat to the economic and national security of countries around the world. Cybercrime and online fraud cause significant harm to economic development, with small- to medium-sized enterprises and financial service providers especially at risk. According to one estimate, the global cost of cybercrime is estimated to top $23 trillion in 2027. [3] [3] [3] Ransomware incidents have disrupted critical functions, services, and businesses, from energy pipelines and food companies to schools and hospitals. Ransomware attacks against the healthcare industry can undercut the level of care provided to patients and others under care. Total economic losses from ransomware attacks worldwide continue to climb, reaching into the billions of U.S. dollars annually. Ransomware groups often operate out of safe haven jurisdictions whose governments, often adversaries like Russia, do not cooperate with law enforcement and sometimes encourage, direct, sanction, or tolerate their activities. Terrorists’ and violent extremists’ use of digital technologies also represents a threat to the national security of the United States and its allies and partners. Malign activities include the use of information and communications technologies (ICT) to spread violent propaganda; encourage radicalization and mobilization to commit violent acts; recruit individuals to terrorist organizations; to train, plan, and coordinate attacks; and finance terrorist acts. Continue Reading Here. Continue Reading Here . Here This post was originally published on May 6, 2024, by the U.S Department of State This post was originally published on May 6, 2024, by the U.S Department of State by the U.S Department of State

The Growing Cyber Threat Landscape: Insights into State-Sponsored and Criminal Cyber Activities

ক্রমবর্ধমান সাইবার হুমকি ল্যান্ডস্কেপ: রাষ্ট্র-স্পন্সর এবং অপরাধমূলক সাইবার কার্যকলাপের অন্তর্দৃষ্টি

Die wachsende Cyber-Bedrohungslandschaft: Einblicke in staatlich geförderte und kriminelle Cyber-Aktivitäten

El creciente panorama de amenazas cibernéticas: información sobre las actividades cibernéticas criminales y patrocinadas por el Estado

Le paysage croissant des cybermenaces : aperçu des cyberactivités criminelles et parrainées par l'État

बढ़ता साइबर खतरा परिदृश्य: राज्य प्रायोजित और आपराधिक साइबर गतिविधियों की जानकारी

拡大するサイバー脅威の状況: 国家主導および犯罪的なサイバー活動に関する洞察

증가하는 사이버 위협 환경: 국가 후원 및 범죄적 사이버 활동에 대한 통찰력

O cenário crescente de ameaças cibernéticas: insights sobre atividades cibernéticas criminosas e patrocinadas pelo Estado

Растущий ландшафт киберугроз: понимание спонсируемой государством и преступной кибердеятельности

Büyüyen Siber Tehdit Ortamı: Devlet Destekli ve Kriminal Siber Faaliyetlere İlişkin Bilgiler

Bối cảnh mối đe dọa mạng ngày càng tăng: Thông tin chuyên sâu về các hoạt động tội phạm mạng và do nhà nước tài trợ

日益严重的网络威胁形势：深入了解国家支持的网络犯罪活动

Why 1-Bit Transformers Will Change the World

How I Got Llama 3 to Revere God!

100 Complex Cryptocurrency Terminologies Explained in a Single Sentence

Stories, News & Mentions about UILICIOUS

Uilicious’s Stories on HackerNoon