新聞近期大量LINE帳號遭盜用的事件受到廣泛關注,雖然這次事件主因在於電信業語音信箱採用預設密碼,讓攻擊者有機可乘,但整起事件背後還有其他更深層議題值得探討,因為雲端服務相關驗證機制仍仰賴OTP認證碼(一次性密碼)。儘管全球產業早已推動採用更強的多因素驗證(MFA)與Passkey,以降低雲端服務登入遭網釣風險,但許多雲端服務在帳號註冊或復原的流程中,至今仍經常依賴簡訊OTP作為身分驗證方式。是否…
業界新聞
I tested three Windows laptops in the MacBook Neo’s price range — there’s no contest https://www.theverge.com/tech/908328/macbook-neo-windows-laptop-competitors-asus-lenovo-acer-review-comparison
Anthropic Loses Appeals Court Bid To Temporarily Block Pentagon Blacklisting https://yro.slashdot.org/story/26/04/09/0010207/anthropic-loses-appeals-court-bid-to-temporarily-block-pentagon-blacklistin…
Google makes it easy to deepfake yourself https://www.theverge.com/ai-artificial-intelligence/909104/youtube-shorts-make-ai-avatar
As if the backlog, the bugs, and the chatbot fixes weren't enoughCapita has limited the online functionality of its Civil Service Pensions Scheme (CSPS) member portal after confirming an "issue" brief…
DSIT hiring directors general with packages reaching £260K plus pensionThe Department for Science, Innovation and Technology (DSIT) is recruiting three directors general to lead aspects of the UK gove…
Spotify now lets you turn off all its videos https://www.theverge.com/entertainment/909099/spotify-video-controls-music-podcasts-canvas
AMD Making It Easier To Embed Lemonade AI Capabilities Into Other Apps The open-source Lemonade local AI server that enables using Ryzen AI NPUs on Linux for LLM usage as well as AMD Radeon GPU suppor…
RADV Lands Support For Vulkan's New Primitive Restart Index Extension The newest Vulkan API extension now wired up for Mesa's Radeon Vulkan driver "RADV" is VK_EXT_primitive_restart_index that was int…
Home Office hopes tech will help cops target hotspots as ministers push to halve offensesThe British government is spending £15 million over the next three years to improve crime mapping in England an…
Mir-Based Miracle-WM 0.9 Introduces A WebAssembly Plugin System Miracle-WM as the Wayland compositor / window manager built atop Canonical's Mir project is out with a big new feature release. This "ha…
新聞Anthropic發布預覽版Claude Mythos,AI資安能力直逼頂尖人類駭客,該公司宣布啟動全球資安防禦計畫Anthropic發表全新通用語言模型Claude Mythos預覽版,該模型已自主發現數千個橫跨作業系統、瀏覽器,以及開源軟體的零時差漏洞,並同步啟動全球資安防禦計畫Project Glasswing,集結十多家科技與金融公司,納入逾40個關鍵基礎設施組織,優先提供模型存取以加…
新聞AWS發表Amazon S3 Files,讓通用S3儲存桶可掛載為檔案系統,供EC2執行個體、EKS工作負載與Lambda函式存取,並可用於部分ECS部署。該服務底層是Amazon EFS,活躍資料延遲約1毫秒,檔案系統與S3儲存桶之間可自動雙向同步,目前已在所有AWS商用地區上線。物件儲存與檔案系統長期以來是兩種不同的儲存架構,前者擅長大規模低成本儲存,後者提供應用程式熟悉的目錄結構與隨機讀…
新聞美國專門開發及營運綠能資料中心的Soluna Holdings近期宣布以5,300萬美元收購位於德州、裝置容量150MW的風電業者Briscoe Wind Farm。從資料中心的單純用電者,轉型為能源生產者,突顯在全球AI算力基礎設施加速擴張下,能源與數位基礎設施整合的趨勢。Soluna藉此完成Dorothy專案的園區垂直整合,從土地、再生能源到資料中心算力基礎設施皆由該公司掌握,強化成本控制…
Even fitness equipment is vulnerable to mischief makers these daysPWNED Welcome back to Pwned, the column where we share war stories from IT soldiers who shot themselves – or watched someone else shoo…
Court of Appeal hearing in ValueLicensing dispute may shape parallel proceedingsThe Microsoft and ValueLicensing legal tussle will enter an appeals phase this month, attracting the attention of a mult…
Amflow’s latest e-bikes raise the bar again https://www.theverge.com/transportation/909060/amflows-latest-e-bikes-raise-the-bar-again
新聞AI公司Anthropic近期針對美國政府提出兩項訴訟,分別挑戰五角大廈將其列為「供應鏈風險」(Supply Chain Risk,SCR),以及要求聯邦機構全面停止使用其Claude模型的行政命令。隨著案件進入不同法院審理,目前已出現判決分歧。針對「全面停用Claude模型」的措施,加州聯邦法院於3月底裁定,暫時禁止政府執行該命令,認為此舉可能涉及違憲,特別是對企業AI安全立場的報復,以及未…
新聞Google公布一項結合AI與航空營運的實地研究成果,顯示透過AI預測並調整飛行路徑,可降低飛機凝結尾(contrails)對氣候的影響。這項研究由Google Research與美國航空(American Airlines)、航班規畫軟體業者Flightkeys等單位合作,並於2025年1月中旬至5月中旬進行為期17週的隨機對照試驗,將凝結尾預測整合至既有航班規畫流程中。凝結尾是飛機在高空飛…
新聞行政院今天(4/9)通過環境部研擬的「資源回收再利用法」修正草案及「廢棄物清理法」(簡稱廢清法)部分條文修正草案,接下來將送立法院審議。其中立法已超過20年的「資源回收再利用法」改名為「資源循環推動法」(簡稱循環法),接軌歐洲等國際相關資源循環利用的立法趨勢,鼓勵產品綠色設計、以回收及維修取代廢棄,鼓勵資源循環利用產業發展。行政院長卓榮泰表示,面對全球資源有限性及環境永續挑戰,我國正推動雙軸轉…