Zen Communications is a results-focused reputation management, PR, and copywriting agency, made up of technically trained writers and grammarians

Zen Communications - Communicating Greatness - Zen Communications

Zen Communications | 3 followers on LinkedIn

Zen Communications | LinkedIn

Zen Communications Ltd | 470 followers on LinkedIn. Welcome to PR as it should be. Welcome to Zen | Zen Communications Ltd is a results-driven strategic public relations and copywriting agency. Shropshire-based, but working with clients across the UK and internationally, our team are all ...

Zen Communications Ltd | LinkedIn

1 billion members | Manage your professional identity. Build and engage with your professional network. Access knowledge, insights and opportunities.

LinkedIn: Log In or Sign Up

Find details of NZ companies and overseas companies operating in New Zealand, and get help to comply with the legal obligations all companies must meet.

New Zealand Companies Register

Our team of experienced advisers help you tell yours · We provide communication advisory services, capitalising on our extensive expertise in areas such as financial communications, crisis management, media, and politics. We work closely with top-level management at leading companies, delivering ...

Home - Corporate Communications

We incorporate and dissolve limited companies. We register company information and make it available to the public. Companies House is an executive agency, sponsored by the Department for Business and Trade .

Companies House - GOV.UK

Free company information from Companies House including registered office address, filing history, accounts, annual return, officers, charges, business activity

Find and update company information - GOV.UK

Ranking the world&#x27;s top companies by market cap, market value, revenue and many more metrics

Companies ranked by Market Cap - CompaniesMarketCap.com

Find the best employer to advance your career and browse millions of reviews from current and past employees.

Find The Best Companies to Work For | Indeed.com

Crunchbase is the leading destination for company insights from early-stage startups to the Fortune 1000. Get insights into your competition. Uncover startup trends, get company funding data. Find new prospects, beat competitors and quotas.

Crunchbase: Discover innovative companies and the people behind them

Astound Broadband provides reliable high speed internet, mobile phone, TV, and streaming services at great prices. Shop our best deals online.

Internet, Mobile, TV & Streaming Services | Astound Broadband | ...

Following years of investor backlash, a number of business leaders are now making a conscious effort to avoid the once widely used term.

The Latest Dirty Word in Corporate America: ESG - WSJ

Glassdoor - Free company reviews for 2,334,000+ companies. All posted anonymously by employees.

Companies & Reviews | Glassdoor

Attractive discounts on high-quality offers – without costs or obligations. Trust the European market leader with 20 years of experience.

corporate benefits – Employee Offers From the Market Leader

Consulting on digital communications and social media marketing in Malaysia

Zen Communications

Welcome to another compelling installment of Hacker Noon's "Innovators in Crypto," where the spotlight shines on the changemakers forging ahead in the cryptosphere. In today’s talk, we’re joined by David Paulson, the dynamic force behind Ascent Exchange's strategic leap onto the Horizen EON platform. Ascent Exchange has been a buzzword in the community, synonymous with cutting-edge DeFi solutions and a steadfast commitment to user empowerment. Their bold migration is not just a transition; it's a transformative journey toward setting a new standard in decentralized trading. crypto So buckle up as we dive into the mechanics of Ascent Exchange’s groundbreaking move, explore the fresh and vibrant rebranding efforts, and discover what this means for the future of DeFi. Let’s get the insights straight from the source. David, it’s fantastic to have you with us. Share with us, if you will, the vision that is propelling Ascent Exchange into its exciting new phase. Ascent Exchange Revolutionizes Decentralized Trading with Horizen EON Move : Hi David, it's a pleasure to have you with us for our "Innovators in Crypto" series. As we dive into the story of Ascent Exchange, can you begin by sharing your journey and the pivotal moments that led to the inception of Ascent Exchange on Horizen EON? Ishan Pandey Thank you for inviting me to share insights about Ascent Exchange in this interview. My name is David, and I'm excited to delve into the transformative journey and innovative features that make Ascent Exchange a standout in the DeFi space. David: : Migrating from Polygon to Horizen EON is a bold move. Can you elaborate on what makes Horizen EON the ideal platform for Ascent Exchange and how does it enhance the trading experience for your users? Ishan Pandey The inception of Ascent Exchange on Horizen EON was a culmination of identifying the need for a more robust, scalable, and user-centric DeFi platform. Our journey began with a vision to simplify and secure DeFi transactions, and the decision to build on Horizen EON was driven by its exceptional scalability, privacy features, and a supportive community. David: Migrating from Polygon to Horizen EON was a strategic decision. Horizen EON provides a more scalable and secure environment for our users, enhancing the trading experience with faster transaction speeds and lower fees while maintaining a high degree of decentralization. Horizen EON's full Ethereum Virtual Machine compatibility, coupled with its robust features like the Cross-Chain Transfer Protocol (CCTP) and zkSNARKs technology, facilitates seamless, permissionless cross-chain communications. This transition is further bolstered by Horizen's extensive node network, ensuring a decentralized, secure, and reliable environment for Ascent Exchange, aligning with our commitment to providing a top-tier, user-centric trading experience. : Ascent Exchange is the first to implement ve(3,3) tokenomics on Horizen EON. How do you think this first-mover advantage positions you in the market, and what are the long-term benefits you foresee? Ishan Pandey Ascent Exchange's adoption of the ve(3,3) Tokenomics model with V3 Concentrated Liquidity marks a significant milestone in the platform's evolution. This advanced feature is tailored to work seamlessly with the veAEX model, providing liquidity providers with enhanced control and flexibility. The key aspects of this integration include: David: Concentrated Liquidity: This allows capital allocation within specific price ranges, enhancing capital efficiency and the potential for higher returns​​. Multiple Fee Tiers: Liquidity providers can choose from four different fee tiers (0.01%, 0.05%, 0.25%, 1%), optimizing earnings based on their risk tolerance and market outlook​​. Automatic Range Options: The platform offers four automatic range options – Full Range, Safe, Common, and Expert – each catering to different risk and return preferences​​. Custom Price Ranges: For those preferring a hands-on approach, there is the option to set custom price ranges, further enhancing the flexibility of the platform​​. Enhanced Returns and Lower Slippage: By focusing liquidity within specific ranges, higher returns can be achieved with the same amount of capital. Additionally, concentrated liquidity can lead to lower slippage, improving the trading experience for users​​. This first-mover advantage with ve(3,3) Tokenomics on Horizen EON positions Ascent Exchange as a leader in innovative liquidity solutions, offering a more efficient, flexible, and user-friendly trading environment. : Partnerships are often the lifeblood of burgeoning platforms. Can you talk about your collaboration with Wave GP and the significance of their maximum per-project allocation to Ascent Exchange? Ishan Pandey The collaboration between Ascent Exchange and Wave GP represents a significant vote of confidence in Ascent Exchange's capabilities and future potential. Wave GP, as Horizen EON’s dedicated liquidity provider, is committing their maximum per project allocation to Ascent Exchange. This strategic move will ensure that the most traded and popular liquidity gauges on Ascent Exchange are backed by deep and stable liquidity. Such a partnership not only underscores the trust and confidence in Ascent Exchange's market position but also enhances the platform's ability to offer robust and reliable trading experiences for its users. David: : In the wake of your strategic shift, Ascent Exchange underwent a significant rebranding. How important is branding in the crypto space, and what message do you want to convey with the new design and colors? Ishan Pandey The rebranding strategy of Ascent Exchange aligns closely with the vision and innovative spirit of Horizen EON. This rebranding is not just a visual makeover; it's a strategic alignment that reflects the advanced technological framework and forward-thinking approach of Horizen EON. David: By adopting a new design and color scheme, Ascent Exchange aims to convey a message of dynamism, innovation, and user-centricity, mirroring Horizen EON's commitment to scalability, security, and a robust ecosystem. This synergy in branding underscores a shared commitment to setting new standards in the DeFi space, highlighting both Ascent Exchange's and Horizen EON's dedication to leading the charge in blockchain innovation. : For users looking to join Ascent Exchange, what steps should they take to set up their Horizen EON wallet, and how does the $ZEN gas token fit into the overall user experience? Ishan Pandey Setting up your Horizen EON wallet involves a few simple steps, especially if you're using MetaMask or Cobalt Wallet. For MetaMask users, here's how to add Horizen EON: David: Open MetaMask: Launch the MetaMask browser extension or mobile app. Access Settings: Navigate to 'Settings' and then to 'Networks'. Add Network: Click on 'Add Network.’ Enter Network Details: Choose to 'Add a Network Manually' and input the following details: Network Name: Horizen EON New RPC URL: https://eon-rpc.horizenlabs.io/ethv1 Chain ID: 7332 Currency Symbol: ZEN Block Explorer URL: As for the $ZEN gas token, it's the native token used for paying network and transaction fees on the Horizen EON network. $ZEN can be acquired from major exchanges, including LBank, and can be withdrawn via the EON chain. https://eon-explorer.horizenlabs.io/ In addition to MetaMask and Cobalt Wallet, Sphere by Horizen is another option for accessing the Horizen EON network. Sphere is a multifunctional wallet that supports both ZEN and other tokens on the Horizen network. For transferring ZEN to Horizen EON, a feature known as "Forward Transfer" is utilized. This mechanism allows for the movement of ZEN from the main Horizen blockchain to the EON platform. Forward Transfer is an integral part of ensuring fluidity and ease of transactions within the Horizen ecosystem, enabling users to effectively participate in the Ascent Exchange platform on Horizen EON. : Looking ahead, what can users and investors expect from Ascent Exchange? Are there any upcoming features or developments that you're particularly excited about? Ishan Pandey : Looking ahead, Ascent Exchange users can expect a suite of new features, including advanced trading tools, more diverse asset offerings, and enhanced security measures. We are particularly excited about integrating AI-driven analytics to provide users with deeper market insights. David : Community is central to Ascent Exchange's philosophy. How do you engage with your community, and what role do they play in the platform's governance and future direction? Ishan Pandey : Our community plays a vital role in shaping the platform's governance and future direction. We engage with our community through regular updates, open forums for feedback, and incorporating their suggestions into our development roadmap. David : In a space that's becoming increasingly crowded, what distinguishes Ascent Exchange from other DeFi platforms, and how do you maintain a competitive edge? Ishan Pandey Ascent Exchange stands out in the crowded DeFi space through its user-centric design, innovative features like ve(3,3) tokenomics, and a strong focus on security and scalability. We maintain our competitive edge by constantly evolving and adapting to the needs of our users and the market. David: : Lastly, as we're seeing shifts in regulatory landscapes across the globe, how is Ascent Exchange preparing for potential changes in DeFi regulation, and what impact do you think this will have on the industry? Ishan Pandey In response to changing regulatory landscapes, Ascent Exchange is proactively engaging with regulatory bodies and staying ahead of compliance requirements. We believe that regulatory changes will bring more stability and trust to the DeFi industry, benefiting platforms that are prepared and adaptable. David: In conclusion, Ascent Exchange is committed to continuously pushing the boundaries of what's possible in DeFi, ensuring that our platform remains at the forefront of innovation, security, and user empowerment. Don’t forget to like and share the story! : Vested Interest Disclosure This author is an independent contributor publishing via our . Be it through direct compensation, media partnerships, or networking, the author has a vested interest in the company/ies mentioned in this story. HackerNoon has reviewed the report for quality, but the claims herein belong to the author. #DYOR brand-as-author program

Breaking New Ground in DeFi: Ascent Exchange’s Groundbreaking Migration to Horizen EON

DeFi-এ ব্রেকিং নিউ গ্রাউন্ড: অ্যাসেন্ট এক্সচেঞ্জের গ্রাউন্ডব্রেকিং মাইগ্রেশন হরিজেন ইওএন

Neue Wege im DeFi-Bereich beschreiten: Die bahnbrechende Migration von Ascent Exchange zu Horizen EON

Abriendo nuevos caminos en DeFi: la innovadora migración de Ascent Exchange a Horizen EON

Innover dans DeFi : migration révolutionnaire d'Ascent Exchange vers Horizen EON

डेफी में नई जमीन तोड़ना: एसेंट एक्सचेंज का होराइजन ईओएन में अभूतपूर्व स्थानांतरण

DeFi の新境地を開く: Ascent Exchange の Horizen EON への画期的な移行

DeFi의 새로운 지평을 열다: Ascent Exchange의 Horizen EON으로의 획기적인 마이그레이션

Abrindo novos caminhos em DeFi: migração inovadora da Ascent Exchange para Horizen EON

Открывая новые горизонты в DeFi: революционная миграция Ascent Exchange на Horizen EON

DeFi'de Yeni Bir Çığır Açıyoruz: Ascent Exchange'in Horizen EON'a Çığır Açan Geçişi

Đột phá mới trong DeFi: Sự di chuyển đột phá của Ascent Exchange sang Horizen EON

开辟 DeFi 新天地：Ascent Exchange 突破性迁移至 Horizen EON

The Corner Pub.

In the past, the phrase "Made in China" conjured up negative associations: cheap design, poor product quality, poor functionality, and banal communication solutions. But in recent years, local Chinese branding has been conquering the global market. "Chinese" is becoming the new synonym for good. Design is winning important awards ( , , ), inspiring revolutionary and conceptual. Red Dot Pentawards IF Design Awards How did this transformation take place? In what way is it expressed? And what can the design community be inspired by? Let’s dive into it. The notable success of Chinese branding Chinese branding is thriving. 10 years ago, in the need to develop branding in a socialist state, but today : no one believed Chinese brands are taking over the market In the Brand Finance Global 500 value ranking, Chinese companies have surpassed the growth of the world's most expensive companies. China has become the growth destination for the fastest-growing brands. Examples are Alibaba (brand growth of 4029% over the past 10 years), WeChat (experts estimated BSI at 92.9 points out of 100), and Lenovo. Total value of the top 500 Chinese brands in 2020 has overtaken the total value of U.S. brands - $1,862 billion, compared with $1,810 billion. China is improving its image The perception of Chinese products is changing. It gets approval from the Chinese and the international community: The level of trust is increasing. A showed that 85% of Chinese prefer local brands over foreign ones (+25% since 2016; +70% since 2011). 2020 survey The Chinese love local brands and vote for them with their money. is happening in all categories. Consumption growth Global perception is improving. People around the world are more positive about Chinese brands, especially in the UK and some other countries in Europe. Chinese challenges to success The secret largely lies in the characteristics of local businesses. Brands get a lot of support from the government and society as a whole. The following trends can be highlighted: Low awareness. Local consumers often do not distinguish between Chinese brands and foreign brands. In 2017, thought Danone was a Chinese brand, while 48% also said the same about Olay. 45% of respondents Difficulties for foreign companies. If a foreign firm didn't give its brand a Chinese name, someone else will. Because of ineffective trademark protection and the , there are many brands that officially copy Lacoste. To survive in difficult conditions, international brands have to adapt to local realities. One example is Coca-Cola. The into the consonant "可口可乐" ("kě kǒu kě lè"), which means "delicious entertainment". difficulty of translating names in the country company translated its name Protectionist policies. The government has a strong influence on current processes. In 2019, 46% of cited local policies and compliance with local regulations as the top challenge to achieving global goals. marketing directors in China In recent years, China has also often blocked the activities of international companies (Microsoft, LinkedIn, Amazon, Slack) that can compete with local corporations. "Made in China" today The perception of China is changing: from harsh reactions like "that's weird" to admiration for innovation and minimalism. What trends are driving Chinese design and branding today? Tribute to Tradition Guochao ("Rising China") is a trend to use elements of local culture. Brands see local consumers' pride in cultural heritage and try to emphasize its elements in their communications: Gongbi - "meticulous brushwork". It implies the use of highly detailed strokes detailing the subjects. Xieyi is the antonym of Gongbi. It implies sketchiness, drawing with a "free brush". Xieyi is reflected in painting with ink (shui-mo). National themes. As patriotic and nationalistic sentiments increase, the use of ethnic paraphernalia grows. Astrological plots Of great importance in China is the cult of the local astrological system. Sacred animals (monkey, tiger, stork, and others) and related legends often appear on packages. European minimalism China is part of the world's culture. It actively adapts to modern trends. Minimalist layouts, graphics with realistic photo zones, and unusual designs are increasingly common in Chinese branding. Intergenerational conflict Chinese society is changing, and this is reflected in new trends. The values of the modern generation are described by the following terms: Tangping and Neijuan. The Chinese are known for their workaholism: 12-hour workdays, overtime, and sleeping pods in offices. The grueling nature of this model of work is called "996" in China (9 a.m. to 9 p.m. 6 days a week). Sang Сulture (singing culture). Young people seek to change their lifestyles, abandoning unattainable career goals and the stress associated with them in favor of a "slow life" format. Sang Culture describes a melancholic, slow way of life associated with the knowledge of oneself through Zen culture. Natural motifs Nature plays an important role in Chinese culture and philosophy. The religion of Taoism and the related principle of wu-wei (the principle of non-action) describe a caring attitude toward the world - knowledge without change or transformation. This approach is reflected in naturalistic motifs, duplication of plant and animal patterns, and textures. Cult of Food Food in China is more than a resource for health. It helps build interpersonal relationships and is a reflection of social status. This favorite theme is evident in brand packaging. They are filled with flavor metaphors and bright, appetizing images. Typography Chinese designers are good at working with the local hieroglyphic system and unlocking its potential in concepts. There are different variations and mechanics of reflecting the characters. Love of nostalgia The love of nostalgia is strong in China. As an example, the White Rabbit candy brand is a kind of nostalgic brand for the older generation of consumers. In 2008, the brand left the shelves, but then it revived and carried out a large-scale rebranding, bringing back to childhood. Conclusion An unusual, sometimes contradictory social, political, and cultural background creates problems for creative development. And at the same time, it often opens new horizons - it allows you to find something special and unique in yourself and subsequently tell the world about it. This is exactly what China does. Preserving traditions while being strongly influenced by socialism and state paternalism, Chinese design works on packaging and branding in a bold, distinctive, and authentic way. I also recommend you read: Commerce Advertising in Ukraine: How the Ads Industry Has Changed in 30 Years A Detailed Guide on Conversion Rate Optimization in E-Commerce Customer Education: How to Educate Customers Profitable for Business

What "Made in China" Means Today

"মেড ইন চায়না" মানে কি আজ

Was „Made in China“ heute bedeutet

Lo que significa "Hecho en China" hoy

Ce que "Made in China" signifie aujourd'hui

"मेड इन चाइना" का मतलब आज क्या है

今日の「メイド・イン・チャイナ」とは

오늘날 "메이드 인 차이나"가 의미하는 것

O que "Made in China" significa hoje

Bugün "Çin Malı" Ne İfade Ediyor?

Ngày nay "Made in China" nghĩa là gì

“中国制造”在今天意味着什么

While most employees nowadays work in a hybrid environment, the possibility of working remotely has presented luxuries in the past, such as working from abroad for extended periods. Employees who work remotely require remote work security because of different scenarios, such as: Working from home (WFH), Traveling for business, or Working in any location outside the company's offices (e.g., café or co-working space). For cybersecurity teams, this new reality brings more threats to be tackled. As a result, they must make sure their security strategies change and adapt to the threat landscape. Security Risks of Remote Working As traditional IT security approaches have long been perimeter-based, they are concerned about what happens inside the office and the corporate infra. However, when users work remotely - performing their job duties from remote locations, the potential security threats rise. The main problem is that - people are accessing corporate data and systems from outside the corporate perimeter. All the previous perimeter-based measures would not be adequate against such dynamics. Let's consider remote work security risk factors. We can separate them into: Network risk User risk Device risk Network Risk Work from home or anywhere but the office, meaning employees could connect to the corporate accounts via the home WiFi network or, worse, using unsecured public WiFi (like free WiFi in Cafe). This introduces a new attack surface for malicious actors to spy on the connection and harvest confidential information. For example, data sent via an unencrypted WiFi network might be intercepted and stolen by someone nearby. Many organizations raced to prop up overloaded remote access and virtual private network (VPN) environments to support a small percentage of the workforce. Then, suddenly, 100 percent of users were working remotely, and everyone required access to the tools and information they needed to keep the business up and to run. However, VPN appliances simply aren't scalable to meet the needs of today's digital and agile environment, in which reliable access anywhere is required. Moreover, because a VPN provides access to an organization's entire network, it introduces a vast security gap that can be exploited if a threat actor gains user credentials access. User Risk Human factors present one of the most significant security risks. For example, remote workers who lack an awareness of security risks may be susceptible to phishing scams. In addition, distracted employees could unknowingly disclose their login credentials in a public area. The IT staff lacks visibility into the endpoints and potentially risky user behavior when remote working. In addition, working in different time zones, remote workers may have to make cybersecurity decisions independently if the IT department is not available to assist them immediately. For example, they need to verify the legitimacy of a suspicious instruction through a different communication. Device Risk Many remote working employees are using their personal devices for two-factor authentication, and they may well have mobile app versions of collaboration software, like Teams and Zoom. This confusion between personal and professional life increases the risk of sensitive information falling into an insecure environment. Cloud documents, emails and attachments, and third-party services are all vulnerable. And without proper digital asset management tools available for remote work, your attack surface has grown much broader. Remote work also enables a trend of allowing employees to use their devices at work, commonly referred to as "Bring Your Own Device" (BYOD). Of course, BYOD is not new to us. But, with most employees using personal devices for work, it would introduce unknown remote working security risks. How to Maintain Security When Employees Work Remotely The cybersecurity experts at the National Institute for Standards and Technology (NIST) offer tips in (Security for Enterprise Telework, Remote Access, and Bring Your Own Device Solutions). If you want a shorter version, they also published an [infographic](https://www.nist.gov/sites/default/files/styles/2800_x_2800_limit/public/images/2020/03/17/Conference Call Security Graphic.png?itok=Jx136-Mg). NIST SP800-46 Rev2 Remote Work Security Best Practice: Dos and Don'ts Dos Trust no one by default. Cyber hygiene is equally important as personal hygiene. Always think twice before clicking a link or downloading a file. Is it safe? Even a wink of incaution may lead to accidental data deletion or falling for a phishing attack. Store work-related content on company-approved cloud services to reduce the risk of data exposure. Implement to reduce the risk of attack from credential theft. Multifactor Authentication (MFA) Use updated antimalware software to reduce the attack surface on the device. Don'ts Don't Forward work-related emails to personal accounts to prevent credential theft or brute force attacks. Don't store work-related content on personal equipment (e.g., laptops and cell phones) to prevent accidental data loss. Don't use your company-owned desktop session for non-work-related activities such as social networking, video streaming, or personal shopping. It is essential to reduce risk exposure and prevent accidentally accessing phishing sites. Please don't click on an unknown email attachment because it is the most direct way malicious actors plant their malware. Most remote work security outbreaks are started by phishing emails. Tips For Creating a Remote Work Security Policy Your remote work security policy doesn't have to be a complicated document. The first is to . also asked cybersecurity professionals regarding the main challenges for security staff in the transition to work from home going smoothly. The concerns are make a security policy specifically designed for remote workers ESG's report Secure configuration of employee devices Secure access Remote monitoring Thus, a successful policy should address all three. Assess Governance and Compliance Processes Catalog IT governance and compliance by reaching out and documenting IT responsibilities—the security, privacy, and compliance policies that protect the organization and its resources. For example, suppose data from the legal department always be constantly available, per regulation, for discovery and audit. In that case, cloud-based storage vendor platforms must conform to those compliance obligations. Tighten Access (Least Privilege) Remote work security policies should specify clear roles for defined personnel and their access to defined applications and data. This process should account for all shadow IT resources and determine how access is logged and reviewed. Data Security As it traverses the cloud and internet, sensitive data (data-at-rest and data-in-motion) should be encrypted. Many cloud providers open Application Program Interfaces (APIs) to their services, which third parties can use to enforce their encryption or data loss prevention (DLP) policies, among other security measures. Document security requirements for internal and external data stores. Also, the remote work policy should state distinctly how remote workers handle data on cloud services and devices. Do not overlook data security to and from the cloud. Therefore, it is good to set clear policies on connectivity security, including secure sockets layer (SSL) and cloud virtual private network (VPN) requirements, data-in-transit encryption, and network traffic scanning and monitoring. Integrated Security Controls A single infected endpoint can cause a data breach in multiple clouds. Develop policies for remote device access to cloud resources and the required endpoint security. No single security solution is enough. However, too many security solutions without integration may create gaps or vulnerabilities. Instead, it should integrate seamlessly with your existing security stack—including your secure web gateway (SWG), firewall, data loss prevention (DLP), cloud access security broker (CASB), security operations center (SOC), and isolation capabilities. Conduct Frequent Security Audits. Maintain current and adequate security by periodically reviewing all remote work security policies. During these audits, ensure cloud services are configured as expected. Upgrade components to remain ahead of the latest threats and business needs. Explaining and Incentivizing Good (Secure) Remote Work Behaviors Ensure employees comprehend how the security risks change when away from the office with awareness training. Given the situation, remote workers are paying closer attention to corporate communications. Use this chance to review remote security best practices for phishing attacks and social engineering using the latest virus-related examples from threat actors. Then, at last, the company should encourage good behavior, like reporting a suspicious email promptly. Final Words: We Will Be Remote Workers For a Long Time, Be Secure. Yes, the new reality is here and will stay for a more extended period. Therefore, staying focused while remote working may be challenging, but it is crucial. Many organizations responded by deploying Zero Trust Network Access (ZTNA) tools to replace or augment existing VPN environments for remote work. These ZTNA solutions served as scalable links between applications and a highly distributed workforce. In addition, ZTNA solutions are critical of the Secure Access Service Edge (SASE) framework that provides secure access to internal applications regardless of the underlying infrastructure or connection. After all, your company's security depends on it. Yet, everything is not so scary. With backups and secure remote work solutions, human error becomes less risky. Thank you for reading. May InfoSec be with you🖖. Also Published Here

Security and its Place in a Remote Working Era

My only impression of those spy movies is the scene when agents from NSA eavesdrop on communications outside the United States. But it is not the only job that he does. Apart from that, the NSA also contributes to the cybersecurity community. t National Security Agency NSA made the original , Linux’s optional (MAC) architecture. Also, they wrote s while everyone is working remotely. Recently, , and thus I would like to share these great resources with you and other best practices on K8S security. SELinux mandatory access control guidelines on securing video conferencing, testing, and collaboration tool NSA updated the Kubernetes Hardening Guide Background The first version of the hardening guide was released in August 2021, authored by the National Security Agency (NSA). The guidance was also co-written by the (CISA) to create users’ awareness of critical threats and configurations to minimize risk. Cybersecurity and Infrastructure Security Agency In March 2022, NSA updated its , which is more valuable today. For example, the made several comments on the 1.0 version. Kubernetes Hardening Guide NCC Group NCC saw that the first version’s information about ” because it stated that Kubernetes doesn’t provide an authentication method by default (Fact: K8S natively supports both token and certification authentication.) Kubernetes authentication was “largely incorrect Why Should We Protect K8S? Cloud-Native Survey 2021 According to the by (CNCF): 2021 Cloud-Native Survey Cloud Native Computing Foundation 96% of organizations now use or are evaluating Kubernetes. 5.6 million developers are using Kubernetes, which equals around one-third worldwide. Now, of that vast number of adoption, Notably, Kubernetes does not offer “secure-enough” by default configuration. As Red Hat pointed out: how many do you think are securing Kubernetes properly? Not much. 94% of those surveyed admitted they had experienced a Kubernetes and container environments security incident in the last 12 months. Human errors or misconfiguration is a severe problem. Adversaries know, as well as we do, that we’re now shifting to containers and Kubernetes, and the change is fast. As the , Kubernetes clusters are a prime target for cyberattacks, including: NSA indicates data theft, computational power theft (e.g., for crypto-mining), and denial of service attacks. The NSA and CISA during the release of the hardening guide stated: joint announcement The security of applications running in Kubernetes and their third-party dependencies relies on the trustworthiness of the developers and the defense of the development infrastructure. A malicious container or application from a third party could provide cyber actors with a foothold in the cluster. , followed by hijacking Kubernetes clusters for . As a result, if leaving the Kubernetes installation by default, you probably give hackers access to your data and computing power inside the cluster. Presently, data theft is the number one target crypto-mining Vulnerabilities — Inside Out The Kubernetes project, like any large open-source project, has been subject to several security vulnerabilities. Therefore, it is crucial to be aware of new vulnerabilities and have a planned procedure to patch Kubernetes once the updates are released quickly. Here is the list of known vulnerabilities found in K8S: https://www.cvedetails.com/vulnerability-list/vendor_id-15867/product_id-34016/Kubernetes-Kubernetes.html The NSA and CISA also make a particular point regarding including software and hardware dependencies that could be compromised in the supply chain before deployment — even the tiniest mistake can break the system. supply chain threats, One notable example is the Log4j vulnerability that caused a significant breakdown recently. Log4j is, in fact, not a component in K8S but Java, which is widely adopted in applications. As you can see, the focus is not only on the vulnerabilities of K8S itself but on all components inside the cluster. Nothing Easy Around Kubernetes I know those are basics, but it doesn’t mean they are easy to do. For example, patching in Kubernetes environments is challenging. Besides Kubernetes, numerous other programs run with it in a real-world application. If it is simple, there would not be a place for using K8S. It is also valid for securing it. We all know it isn't good to run applications as root. Yet, many privilege by default. As a result, the applications that run within them inherit as root. It is because: Let’s take a look at root access. Kubernetes container services run as root The root user (UID 0) is the default user inside a container. If you don’t specify a non-root user, the container runs as root. Since the majority of container images in public repositories do not swap out the root user, this situation drags on. The key to hardening guidance is standard best practices. Still, the report also presents an in-depth look at using standard security mitigation measures in complex environments, often in the cloud. NSA’s Recommendations Let’s go through the basics first! According to the hardening guide, some steps should be taken in a production K8S environment. undefined in containers and Pods. [ ] Scan for vulnerabilities or misconfigurations Apply principles in containers and Pods. [ ] least privilege Employ and authorization to limit user access and reduce the attack surface. [ ] strong authentication Use to reduce the exposure if compromised. [ ] network segmentation Use firewalls to l [ ] imit excessive network access. Use to protect confidentiality. [ ] encryption undefined to account for the acceptable security risks. [ ] Review regularly all Kubernetes settings and use vulnerability scans Finally, to alert potential malicious activity. [ ] capture and monitor audit logs These are not all but a starting point for gaining some confidence when putting your containerized applications into production. K8S Security Best Practices Apart from the NSA K8S hardening guide, another helpful resource from NIST is the or SP 800–190. This document outlines the Application Container Security Guide container-related security concerns and offers recommendations accordingly. 0# Containers Security Implementing security practices in the CI/CD pipeline and the entire build, store and deploy process of container images would include: securely storing the container images, vulnerability scanning for container images and; managing/ monitoring the container runtime security. But if we consider K8S alone, we need something more specific. At the same time, the NSA’s guide is a great starting point. And if you follow through with the guide and build your K8S cluster, it will be fair enough and confident enough to put it in production. Below are some other areas that need to highlight. 1# Role-Based Access Control (RBAC) RBAC is the frontline of defense in Kubernetes. It lets the user control who can access the API and their permissions. Although RBAC is enabled by default, it may not be enabled if you upgrade from an old version of Kubernetes. Also, the RBAC settings should be checked and reviewed regularly to ensure no unnecessary permissions are granted. Simply having RBAC enabled is not good enough. There are authorization policies that should be careful with and appropriately used. Always use RBAC with the least privilege principle. That means using it to limit users and groups to only the actions and tasks they require. Confirm that Kubernetes service and other user accounts have the minimal privileges needed. Moreover, we need to make sure not to give cluster-wide permissions and not give anyone cluster-admin privileges unless necessary. (For more details, please refer to the official Kubernetes .) RBAC documentation 2# API is the New Endpoint Despite what I mentioned in #1 and #2, access control and transport security of Kubernetes API, Kubernetes API endpoint is another area we should be careful of. Administrators can configure the API endpoint of a Kubernetes cluster as part of a private or public subnet. It is better to configure the Kubernetes API endpoint as a private endpoint by default. Thus, the master inaccessible from the public internet as the API endpoint inside the control plane has a private IP address. This is essential for fully private clusters that don’t have or expose any public IPs. As a result, there would be no ingress/egress of traffic to and from the internet. (For more information, please refer to the official .) documentation 3# Encryption Keys (Kubernetes Secrets) There are different forms of encryption keys, such as a password, a token, or an SSH key. Kubernetes secrets support the initial communication securely between artifacts and pods. For example, when a pod starts, it will require to access its secrets. Also, whenever a service account is created, a Kubernetes secret holding its authorization token is generated on the fly. In addition, Kubernetes supports encryption at rest. This encryption offers an additional level of protection when backups are not encrypted, or an attacker gets read access to etcd. According to the official , we should also make sure SSL/TLS is applied in the communication between: document from the API server to the kubelets, and users and the API server. Lastly, it is recommended to have a short lifetime for a secret or credential to reduce the time an attacker uses them when they are lost. To achieve that, set short lifetimes on certificates and automate key rotation. 4# OS, Nods, and Pods Security To harden and secure K8S, we cannot ignore the basics — OS, Nodes, and Pods Security. The services running on a node include: First, a K8S is a worker node running in an OS that can be a virtual or physical machine. node the container runtime, kubelet and kube-proxy. To keep the focus on K8S, the is a well-known best practice guide. All the security practices on a server, including vulnerability management, anti-malware, EDR, and patch management, need to be in place for a node. Center for Internet Security (CIS) Kubernetes benchmark In addition to workload security, there is a security risk regarding internal communications. It is recommended that a gateway should be configured for access outside the cluster if needed. Network port access on nodes should be managed via network access control lists. Limiting Secure Shell (SSH) access to the nodes should also be considered. On the other hand, So, initially, we need to use to control the communication for pods within a cluster. To achieve that, we need the network plugin implements network policies, and using them may require a network driver that supports policies. a is a group of one or more containers that run on nodes. pod network policies The pod-level network security posture can be strengthened by a combination of network policies and access control list down to host levels. Also, the of K8S supports the mapping between privilege and access-control settings for containers and pods. (For the complete list of security contexts, please refer to the official guide # . pod security context securitycontext Nevertheless, the core of pod security should be i.e., the power of running containers as privileged containers leveraging the host file system, network, and ports. that let a user control the runtime execution properties of the pods, Pod security policies For more information, please refer to the official Pod security policy document. Final Words Your ultimate security goal is to push it as challenging as possible for hackers to gain access to your systems; secure K8S is the same. And even if that happens, you should be good enough to detect abnormal activity and take action to prevent it from spreading. Securing Kubernetes can be a full-time job. The NSA mentions that there are third-party security programs that can help. But, of course, these also come with security concerns. Security is vital for containers, and it’s something you need to take into account and manage when working with Kubernetes. Reference: https://www.cvedetails.com/product/34016/Kubernetes-Kubernetes.html https://www.nsa.gov/Press-Room/News-Highlights/Article/Article/2716980/nsa-cisa-release-kubernetes-hardening-guidance/ https://kubernetes.io/blog/2016/08/security-best-practices-kubernetes-deployment/ Thank you for reading. May InfoSec be with you🖖.

How to Harden K8S: Based On the  Recent Updated NSA's Kubernetes Hardening Guide

With Other Cybersecurity Frameworks, CSF Can Help Enhance Organizational Cybersecurity Posture As a security architect, I want more people to notice that Hopefully, looking to lower organizational risk and shield critical infrastructure. NIST's CSF can be a valuable tool for organizations to improve their security maturity. Recently, the National Institute of Standards and Technology (NIST) that interested parties provide comments on . But before NIST publish the comments and updates on CSF, in this article, I will take further steps to align CSF objectives to make this easier to understand. has requested how to improve Cybersecurity Framework (CSF) One example is to map with actual threats by leveraging , which emulate MITRE's ( ) against security products.The second application is to help you start the adoption of with the CSF and other practical frameworks.What is CSF? MITRE's ATT&CK Evaluations Adversarial Tactics, Techniques, and Common Knowledge ATT&CK Zero Trust Architecture (ZTA) The is a set of best practices organizations can use to secure their data. Built by the , the Framework was designed to make cost-effective security possible for organizations of any size. NIST Cybersecurity Framework National Institute of Standards and Technology It directed NIST to work with stakeholders to develop a voluntary framework for reducing risk to critical infrastructure. It does this by focusing on : The CSF came out with the cybersecurity executive order (EO 13636 ) from 2013 by President Obama. three key areas information sharing, privacy, and; the adoption of cybersecurity practices. The latest version of the CSF is , updated in April 2018. And for 2022, CSF would have a planned update to keep its current and ensure that it is aligned with other tools. In addition, to promote further adoption of the CSF, NIST has published guidance including: version 1.1 — , and NISTIR 8170 Approaches for Federal Agencies to Use the Cybersecurity Framework — Three Components of the CSF NISTIR 8286 Integrating Cybersecurity and Enterprise Risk Management (ERM). At its basis, the : the Core, Implementation Tiers, and Profiles. CSF has three components is a set of preferred cybersecurity exercises and results. It guides organizations in managing and reducing their cybersecurity risks in a way that complements an organization's existing cybersecurity and risk management processes. The Core are used by adopting organizations to give context regarding how organizations view cybersecurity risk management. The Tiers guide organizations to consider the appropriate level of rigor for their cybersecurity program and are often used as a communication tool to discuss risk appetite, mission priority, and budget. Implementation Tiers help provide customized alignment with organization requirements and objectives to achieve outcomes and reduce organizational and even industry-wide risk. Profiles are primarily used to identify and prioritize opportunities for improving cybersecurity at an organization. Framework Profiles Within these three components are additional that link to outcomes for a cybersecurity program. NIST has already produced several for manufacturing, elections, and the smart grid. categories and subcategories within functions example framework profiles Five Functions of the CSF One of the most recognizable aspects of CSF is the functions it breaks down activities into — Below are the five functions and the roles they play in supporting cybersecurity. Identify, Protect, Detect, Respond and Recover. Identify The first function, Identify, focuses on assessing and identifying risk in your business and IT infrastructure, which requires a thorough check of your current security practices. The following actions fall under Identify: Asset Management Business Environment Governance Risk Assessment Risk Management Strategy (Critical due to recent incidents such as , , and ) Supply Chain Risk Management Kaseya Log4Shell Colonial Pipeline Protect This function focuses on cybersecurity controls that can help you maintain "CIA" — Confidentiality, Integrity, and Availability. The implementation of the security controls we saw every day under this function. Identity Management and Access ControlAwareness and TrainingData SecurityInformation Protection Processes and ProceduresMaintenanceProtective TechnologyDetect To minimize the number of security incidents when the previous function (Protect) failed, you need ways to detect events when they occur. The Detect function includes the following steps: Anomalies Detection and Events Baselining Continuous Security Monitoring Detection Processes Respond When a security incident occurs, time is critical. Thus, you need to respond swiftly to any sign of an incident by taking the following steps: Response Planning (pre-work) Communications plan and drill (pre-work) Analysis and Investigation Impact Mitigation Improvements (post-work) Recover Finally, the last steps you take in the cybersecurity framework are focused on recovering data and resuming business lost or compromised. Use these steps to ensure a smooth recovery: Recovery Planning Improvements Communications Why is the CSF So Widely Recognized? CSF aligns with the activities and lifecycle of cybersecurity and risk management within an organization's security program. These functions are also applicable to organizations across many industries and verticals, making CSF dynamic and adaptable. Because it is both practical and logical, the Since CSF is built on top of existing standards, guidelines, and practices, it includes activities shared among other industry-leading guidance such as , which is evident through activities such as CIS Critical Controls "identify critical enterprise processes and assets." The CSF also has " Informative References " that align under each function and point to existing framework security controls and references to better leverage existing standards, guidelines, and practices. When the CSF Meet MITRE ATT&CK One great way to , which emulate adversarial tactics and techniques against leading cybersecurity products. align the CSF objectives to real cyber threats is by leveraging MITRE's ATT&CK Evaluations The information is then made available to industry end-users to see how products are performed and align with organizational security objectives. Another excellent resource from MITRE is the Center for and . Threat-Informed Defense mapping MITRE ATT&CK NIST 800–53 GitHub — center-for-threat-informed-defense/attack-control-framework-mappings By using these mappings, organizations could cross-reference the mapping from the Center to the Informational References in the CSF, tied to specific functions and categories. When the CSF Meet Zero Trust In May 2021, the US government on improving the nation's cybersecurity. A significant aspect of the EO was the push for agencies to adopt zero trust (mentioned 11 times ). So again, organizations can see substantial synergies between CSF and the EO objectives. issued another EO here For example, when it comes to Zero Trust, the NIST that (i.e., NIST SP800–27). These are core Zero Trust components, such as National Cybersecurity Center of Excellence (NCCoE) has guided maps relevant Zero Trust components to CSF functions, categories, and subcategories policy engines, administrators, enforcement points. Another helpful resource is the whitepaper from NIST — , which describes how to leverage CSF and the (SP800–37) in the journey of migrating to a Zero Trust Architecture. Planning for a Zero Trust Architecture NIST Risk Management Framework (RMF) Federal agencies and organizations can With that in mind, which includes mapping tools and aspects of the technology stack to CSF criteria. leverage the CSF to map security program objectives across the five CSF functions, categories, and subcategories. Final Words — CSF is Flexible We can use self-assessment and measurement through the CSF to improve decision-making about investment priorities regarding actual threats. A limited set of resources and funding is a reality for all security leaders, regardless of industry. Identifying gaps in the security program and driving investments to the areas that present the most significant risk can provide massive benefits. This is why CSF is essential for security leaders to Doing so ensures alignment with business leadership supports buy-in for security initiatives. ensure that security controls and activities are tied to organizational outcomes and business objectives. NIST's CSF is a flexible framework for managing organizational risk and security program maturity. Its use cases include All these use cases apply to meeting the slew of tasks and objectives that came out in the 2021 cybersecurity EO. managing cyber requirements, reporting cybersecurity risks, and integrating and aligning cyber and acquisition processes. Although the Cybersecurity Framework is not a "one-size-fits-all" approach to managing cybersecurity risk for organizations, it is ultimately aimed at reducing and better managing these risks. Therefore, this guide is intended for any organization regardless of sector or size. Organizations will vary in how they customize security practices described in the CSF. However, organizations can determine important activities to critical service delivery and prioritize investments to maximize impact. This intends to provide direction and guidance to those organizations — in any sector or community — seeking to improve cybersecurity risk management via the utilization of the NIST Cybersecurity Framework. Quick Start Guide ---- Thank you for reading. May InfoSec be with you🖖.

Mapping Risk to Cyber Threats, and Adopt Zero Trust by NIST's CSF

The metaverse is quite possibly the future of the internet. To help our readers learn more about it, we've started this metaverse interview series. These are the questions we've compiled to ask experts in blockchain, DAOs, NFTs, and game development, within the HackerNoon community. The series is intended for tech professionals to contribute their insights about the current state and the future of the metaverse. If you too would like to start contributing to Hacker Noon, you can do so here. If you also want to publish your thoughts about the metaverse, answer the template here. HackerNoon Reporter: So let’s start! First, tell us a bit about yourself. For example, name, profession, and personal interests. My name is Matthew Proffitt. I’m a 26-year old, six-figure freelance consultant, financial analyst (certified FMVA), and content marketer that has helped more than 30 companies secure funding—over $500 million altogether since 2017. I specialize in ESG, emerging tech, and disruptive tech. Some days I type upward of 1500/2000 words per hour (without dictating) and some days, my ADHD gets the best of me, so I go down the dopamine rabbit holes and type like 50 words per hour. Thankfully, I get paid for ideas and insights in addition to content. I enjoy gaming, photography, reading, writing, listening to, and recently making music. I don’t have any music published yet, but I’ve been dabbling for about a year now. I’ve served as a thought-leader “behind the curtain” in more than 20 industries including Web 3.0, cloud computing, drones, cybersecurity, and management consulting. Please sum up what the metaverse is in 1 to two paragraphs. The metaverse is, essentially the next step in the human experience. Millennials have been a fortunate generation in many ways. We’ve seen the transition from AOL (before my time, haha.) to Web 2.0 and the wonders that HTML, among other elements, has brought. We saw the birth of technology like Augmented Reality and Quantum Computing IRL. (There are QCs available to businesses now—we live in the future.) Now, the metaverse is becoming a sovereign space for creators and consumers. It’s a place where people can go to build things that they own. It’s impossible to own a forgery of an NFT, for example. Someone can own the same image, even identical image attributes, but never a fake NFT, something people seem to forget when calling “theft” and other (still offensive) actions out. At a high level, the metaverse is a fusion of infrastructure, technology, experience, identity, and proof of ownership. Are you currently, directly or indirectly, working on building a metaverse? I support Web 3.0 and metaverse businesses alongside other clients. I’ve collaborated with a few NFT projects for ideation on things like world-building and story crafting, marketing, and many other things. I’m indirectly working on building in the metaverse. I attended NFT-focused event on Feb. 23rd, 2022. It was hosted , a non-profit network that supports underdog entrepreneurs in the Appalachian Highlands. I also just finished a grant-related PR for a Web 3.0 client that may prove infrastructural in the months and years to come. FoundersForge In your opinion, is the metaverse inevitable, or is it just another passing trending tech topic that'll lose hype? There’s no avoiding it any more than there was avoiding bitcoin. It will definitely lose hype—by nature, hype is meant to fade. The Gartner “ ” is a common reference for people seeking to learn which stage of adoption a given type of technology is in. Technology Hype Cycle Why is the metaverse such a revolutionary concept? The metaverse is revolutionary because there has never been a phase in human history that we could bring so many disruptive forces together at once. I would go so far as to say that . Once we find effective means to combine manufacturing, logistics, machine vision, , and automation, and all formats of AI/ML into the mix, I don’t think anyone can see where we will end up. To me, the metaverse is a summary of technological progress to date. we are building the singularity today quantum computing autonomization To sum it up, It’s the . beginning of the next chapter in human history What can people build in the metaverse that we can't build on the Internet, or in virtual reality today? What limitations of our current technology does the metaverse free us from? Simply put, the metaverse doesn’t necessarily free us from technological limitations by existing. It does, however, open new potential avenues of progress. Things like immersive AR/VR are already here—I’ve spent a fair bit of time exploring through my Quest 2, but I know I’m just scratching the surface. The most important thing that I see people building in the metaverse is experience. We’re now building experiences based on things that we own. It’s like when you’re playing a game—you farm for loot, grind away hours of your life, and you own the items you get, right? Not in Web 2.0—if a developer shuts their game down, you’ve got nothing. Seeing games like (This link will take you to the Darkwinds Discord server) that lost their footing (and developers) can still exist after losing the founding team—held by a community—it’s exhilarating. Darkwinds How are the metaverse and blockchain technology related? Can we build a metaverse without blockchain tech? This depends on how you relate concepts that underpin these concepts. Blockchain is, effectively, to the metaverse what seconds, minutes, and hours are to this portion of reality. If we compare block time against an average of 10 minutes ($BTC), we’re just converting from minutes into block time. So as far as I’m concerned, no. they’re inextricably linked—inseparable. History is written by the victors —Winston Churchill If you apply this concept to blockchain, it holds true, no matter what method we use to reach consensus. Effectively, there’s a multiverse of orphaned, rejected, and abandoned blocks—each containing a different shard of reality—a timeline of its own. The metaverse as I see it, cannot exist without blockchain—distributed consensus and an immutable ledger of history. How quickly do you think the metaverse will be developed? How much can we expect metaverse tech to grow in the next 5 to 10 years? Given recent changes in public markets and available technology, I expect to see massive growth. In particular infrastructure and quality of life enhancements, such as the Hyundai//IonQ partnership for lithium battery research. Other advancements have been made, with respect to silicon-based quantum computing components and even quantum logic gates. Further, investments from the private sector and media (looking at you, Zuckerburg and Meta) have drastically accelerated public sector awareness of the concept. It’s kind of forcing people to accept the impending advancements. I’ll take a second to split out various tech components of the modern metaverse and what/how I expect to see progress. I’m only going to touch on areas where I’ve provided thought-leadership, whether as a byline or as a ghostwriter—blogs, eBooks, whitepapers, etc. Quantum computing: We will continue to see growth in commercial-grade quantum computers, with widely-respected companies like placing by 2028. Some of the other industry leaders, like (quantum software development.) For some framing, quantum-driven Natural Language Processing (QNLP) was able to in 2020. IonQ 1000+ qubit quantum computers on the horizon Classiq accommodate both grammar AND meaning for words and sentences There’s also been recent progress in quantum networking and quantum encryption. the longest range free space network that I’ve heard of to date employs quantum entanglement to a satellite over 1,200km away. There is already a as well, as of 2021. multinode quantum network A paper published by in Nov. 2021 reported that Google researchers, in collaboration with Stanford, had successfully created time crystals—quantum particle systems that organize themselves into a periodic pattern of motion that is rather than in space. Simply put, it’s , a new category of phases of matter altogether. Nature periodic in time simultaneously stable and always changing Gaming: I’ve been into gaming for over a decade—including co-founding two esports organizations to promote mental well-being and help address some of the toxicity underpinning the gaming and eSports communities. When I started them, I ended up taking on more than I could handle, so despite strong (Top 10 out of over 90 teams) Amateur placements at events like NJROD: King of The Couch (a Halo and Call of Duty-focused event at the time), national placements for Magic the Gathering, and a host of other teams, such as CS:GO and Hearthstone, we decided to shutter the ventures. Blockchain/Crypto/Web 3.0: We will continue to see new and exciting projects in the Decentralized Finance (DeFi) space in addition to Non-Fungible Tokens (NFTs), and expansions upon Peer-to-Peer (P2P) finance elements, such as insurance. Flash loans were an exciting topic in 2021 for things like arbitrage, where your potential losses were able to be mitigated. One comical example was an individual —but ultimately paying only 0.2 $ETH (the cost of gas). buying their own CryptoPunk for $500 million Distributed Autonomous Organizations (DAOs)—I still remember when the Ethereum DAO was hacked in like 2017. The potential for benefit here is crazy, increased by an order of magnitude, at least, if combined with the other tech mentioned in this interview. DAOs can resolve nearly all of the G (governance-related) concerns in the ESG space if we utilize it properly over the next few decades. It’s not a silver bullet, however. Things like “Oracles” that onboard real-world data onto blockchains are just one key component of realizing the full potential of DAOs. I’ve seen a lot of discussion around stablecoins (such as , a former client of mine) and liquidity mining (such as Aave and curve), or pooling funds and letting someone else invest them—also known as “Yield Farming” between 2020 and 2021. There’s been some exciting progress there. Ultimately, you should only ever invest what you can afford to lose, however. Nothing is free—risk is an intangible currency all its own, you pay the risk upfront when you exchange value in any format. Everex Global Musicians like “Lil Bubble” have also made some meme-worthy songs, like this one about yield farming: https://www.youtube.com/watch?v=42pUCIjC6ks And this one about DeFi as an overarching concept: https://www.youtube.com/watch?v=PEs1Ezk9htU There has been a lot of mainstream visibility over the last couple of years, in particular as institutions like Goldman Sachs have , so much so that a wave of new scandals regarding governing-body personnel, such as Federal Reserve (FED) staff have incited sweeping sanctions on stock and crypto trading restrictions for FED personnel, including: begun investing funds into crypto Officials must provide 45-day non-retractable notice for transactions, receive pre-approval for purchases and sales and hold investments for at least one year Transactions will be prohibited during periods of heightened financial market stress ( ) Fortune.com Mobile processing: Qualcomm, Google, Apple, NXP Semiconductors, Samsung, and Ericsson are major mobile processing unit producers. Qualcomm Snapdragon, Google “Tensor”, Ericsson “NovaThor”, and other units have proven capable of impressive performance in a very small form factor. The Oculus Quest 2, as an example to kinda bring things back around to the metaverse, uses the Qualcomm XR2 mobile processing chipset (a variant of the Snapdragon 865 chipset that’s found in higher-end phones like the S20 Ultra from Samsung. It also uses the Adreno 650 graphics processor (GPU) from Qualcomm. It’s the first standalone VR headset to cross into “trillion floating-point operations per second” (Teraflops) territory. For comparison, a PS5 is capable of 10.3 Teraflops. That’s really exciting because the Quest 2 uses only about 5W of power for its mobile processor (CPU), whereas a PS5 uses a Zen-2 based custom processor. For all of its system operations, it uses 200W during gaming and purportedly as much as 90W just for watching Netflix. ( ) Note: These are two different sets of measurements showing the scale of difference—not a direct “apple and apple” comparison Energy Efficiency/ESG: We’re starting to see some crazy stuff here. There’s an AI that can control plasma now, by itself. It can even control the shape of the plasma. This may mean huge things for the safety and efficiency of nuclear power in the not-so-distant future. I’ve been really excited about this since I ghostwrote an article on Tokamak nuclear reactors, it was initially in 2017. I cannot link my article because it was ghostwritten, but we’re seeing really exciting stuff these days. inspired by this release from Tokamak Energy That doesn’t even begin to summarize it, though. I had a conversation with someone regarding a product that could work to balance carbon footprints and maybe even work to convert some of our waste products (like carbon dioxide, etc.) into energy—they were looking to raise funds, but we ultimately drifted apart before agreeing on a deal. Other things are under study and research here, like advanced air filtration (some are exploring air filtration to resolve pollution issues and aid in the reduction of climate change factors.) Tesla, of course, is making news with their (very) recent switch to (Lithium Iron Phosphate, specifically) for their standard-range vehicles. These are the , according to Power-Sonic, a battery manufacturer. producing Iron-based batteries safest lithium batteries that you can buy In conjunction with a multi-billion dollar initiative by the US Department of Energy, this may mean that the lower range is a far lesser concern. Now, when we are able to deploy stable nuclear reactors, we will quickly reach a tipping point wherein electric energy is far more sustainable than fossil fuels. If you think about it, your gas tank is basically just a (refillable) chemical potential battery. Some lead-based batteries last as long as 20 years, far longer than your current average car lifespan. Cybersecurity: There have been countless hacks over the last few years, including OpenSea, which has been a controversial compromise. People need to be aware that emails may be sent using HTML, also known as a “Deep Fake” email. Sites like allow users to send emails . Deadfake has begun imposing a footer at the bottom of emails sent from their service and uses trackable means in case of criminal activity, in order to prevent situations like this, whether related to it or not. Deadfake From anyone as a visibly authentic email address Security deserves an additional mention here as well—the OpenSea hack reminded me of the in 2017 (I ) which was worth 150,000ETH (only $30 million at the time ($220), is equivalent to over $412 million at a modern ETH price of $2,750) Ethereum Parity wallet breach covered the event here Since the SolarWinds attack a couple of years ago, businesses have realized that simply unit testing the components and requisites of software isn’t sufficient. Companies like ReversingLabs have developed solutions for whole-picture software testing, before a software deployment, which helps mitigate modern risks. Self-healing systems are also becoming increasingly relevant—as more than just jargon. Artificial Intelligence: Solving all forms of optimization problems, power management, predictive analytics, data science, the possibilities here are ever-evolving and seem limitless. In 2021, the first AI hyperoptimization model was deployed—an AI that trains new AIs. It’s able to do countless hours of initial training in just seconds. I could spend the next hour of typing at 1400wph, discussing advancements here, and still just scratch the surface. Logistics and Shipping: , , and more have been hot topics from 2017 through 2021, and continue to be hot in 2022. Recent evolution of things like driver shortages, dock detentions/delays, and shipment container-hauling chassis have led to newsworthy port backups and stalls in the supply chain. Odds are pretty high that you or someone you know has seen shelves barren as of late, sometimes for days to weeks at a time. COVID has definitely contributed, but some things, like the chassis shortages, have been backlogged for a year or more. Amazon and Walmart are struggling to find logistics support, FedEx seems to be struggling, and many third-party logistics providers are starving for talent. Self-driving cars can aid with resolving the talent struggles but are not market-ready for full autonomy yet. Seoul Robotics displayed a “ ” at CES 2022. Warehouse optimization automated warehouses LVL5 CTRL TWR One simple use case for this might be a CRM integration that verifies customers’ location-based details, such as weather, so businesses aren’t sending out SMS coupons for sleds when it’s seventy degrees outside. Manufacturing: Holy cow, we’re seeing the birth of the first fully autonomous factories and robots that can both feel pain and respond to it themselves. . They’re capable of complex tasks such as independently loading products and pallets onto trucks, and more—with no human intervention. Japan and the US are already —the perceptible culmination of tech required for fully automated factories and fully automated self-driving cars. Robots can now detect damage and repair themselves as well as other robots working on collective standards for 6G communications What is your hope for the metaverse? Do you have any worries or does the concept pose any threats? I have high hopes for it. I see the metaverse as an opportunity for humans to create truly sustainable industry, fully-immersive entertainment, and experiences, and resolve many trust-based issues that exist in the modern market. We may see a world of anything we can ever want within the next 20 years. I have a wide array of concerns as well, of course. We’ve got AI and machine-related ethics, defining the human experience to enable people to continue living full, deep, fulfilling lives, and even concerns regarding the addictiveness of AR/VR, gaming addiction, and more. Then there’s the prospect of mind-reading technology (Neuralink to name one business in the space), and a whole host of potential dystopian and apocalyptic scenarios. I’m not a doomsday type of guy, but I’m not blind to the possibilities, either. We have to work together and consistently adhere to and test our morals & ethics to ensure a bright tomorrow for humanity, specifically the generations to come. Thanks for your time! Any final words? I like to talk to people who do stuff. I welcome all formats of feedback and conversation, as long as people are respectful. I’m the guy that people come to when everyone says their idea is crazy, who helps them launch and raise funds. Most of the time, it’s people that are just ahead of their time. This article definitely covers more than just the metaverse, but I think it’s important to see progress as a whole, how the pieces come together, and where businesses can fit into the puzzle. That’s what I’m passionate about—stepping into the unknown and figuring out what connections exist, and which ones need to exist. I’m happy to answer any questions that I am able to.

ZEN COMMUNICATIONS

zencomms.com

-- employees

Since n.d.

COMPANY RANKING

ZEN COMMUNICATIONS

EVERGREEN INDEX #12019

Representing this company? Click here to claim and customize this page!

Zen Communications WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!

ZEN COMMUNICATIONS

zencomms.com

-- employees

Since n.d.

COMPANY RANKING

ZEN COMMUNICATIONS

EVERGREEN INDEX #12019

RELATED COMPANIESRANK

STORIES ABOUT ZEN COMMUNICATIONS

Representing this company? Click here to claim and customize this page!

Zen Communications WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!