Apple has confirmed it will open up its Private Cloud Compute (PCC) system – a secure cloud platform built to support the iPhone maker’s Apple Intelligence features – to security researchers who think they can spot vulnerabilities in its code.
Through the release of a Virtual Research Environment (VRE) and select PCC source code, the security community can inspect and validate the company’s security and privacy features.
To incentivize the reporting of vulnerabilities and bugs, Apple will offer up to $1 million as a reward for the most serious instance.
Apple bug bountiesPCC is engineered to ensure sensitive data from Apple devices is processed without compromising user privacy by preventing any unauthorized third party from accessing it, including Apple itself. Initially, only select auditors and researchers had access to review the code, but now Apple is expanding access to public researchers.
Running on macOS Sequoia 15.1 Developer Preview, the VRE allows users to boot PCC releases, examine the software and modify or debug it. The virtual environment is meant to mirror the secure cloud accurately, helping researchers to investigate its architecture without interfering with the live product.
Arbitrary code execution with arbitrary entitlements are the most lucrative discoveries, worth a $1 million bounty from the company. Other rewards, set at $250,000, $150,000, $100,000 and $50,000 are also available.
Apple also committed to considering reports that don’t match the predetermined categories, saying it would, “evaluate every report according to the quality of what's presented, the proof of what can be exploited, and the impact to users.”
“We believe Private Cloud Compute is the most advanced security architecture ever deployed for cloud AI compute at scale, and we look forward to working with the research community to build trust in the system and make it even more secure and private over time," the company added.
More from TechRadar ProApple has confirmed it will open up its Private Cloud Compute (PCC) system – a secure cloud platform built to support the iPhone maker’s Apple Intelligence features – to security researchers who think they can spot vulnerabilities in its code.
Through the release of a Virtual Research Environment (VRE) and select PCC source code, the security community can inspect and validate the company’s security and privacy features.
To incentivize the reporting of vulnerabilities and bugs, Apple will offer up to $1 million as a reward for the most serious instance.
Apple bug bountiesPCC is engineered to ensure sensitive data from Apple devices is processed without compromising user privacy by preventing any unauthorized third party from accessing it, including Apple itself. Initially, only select auditors and researchers had access to review the code, but now Apple is expanding access to public researchers.
Running on macOS Sequoia 15.1 Developer Preview, the VRE allows users to boot PCC releases, examine the software and modify or debug it. The virtual environment is meant to mirror the secure cloud accurately, helping researchers to investigate its architecture without interfering with the live product.
Arbitrary code execution with arbitrary entitlements are the most lucrative discoveries, worth a $1 million bounty from the company. Other rewards, set at $250,000, $150,000, $100,000 and $50,000 are also available.
Apple also committed to considering reports that don’t match the predetermined categories, saying it would, “evaluate every report according to the quality of what's presented, the proof of what can be exploited, and the impact to users.”
“We believe Private Cloud Compute is the most advanced security architecture ever deployed for cloud AI compute at scale, and we look forward to working with the research community to build trust in the system and make it even more secure and private over time," the company added.
More from TechRadar ProOpenAI CEO Sam Altman has slammed a media report about the imminent release of Orion, which is effectively ChatGPT-5, with a terse tweet on X.com. He described the report as “fake news out of control”, quashing rumors of a new version of ChatGPT before December.
fake news out of controlOctober 25, 2024
The report by The Verge quotes ‘sources’ as claiming Microsoft is planning to host Orion, the successor to ChatGPT-4 on its servers in November, pointing towards a release for the new LLM in time for ChatGPT’s 2nd birthday next month.
ChatGPT’s 2nd birthdayAltman, who has a history of posting cryptic messages on X.com that hint at upcoming product releases in a coded way, posted on 21 October “Whoa ChatGPT's 2nd birthday is next month!”, followed up by a tweet saying, “What should we give it for a birthday present…”
whoa ChatGPT's 2nd birthday is next month!October 21, 2024
Many users took this to mean a new product launch was imminent around the time of ChatGPT’s 2nd birthday (ChatGPT was released on 30 November 2022). Altman’s latest X.com post however would seem to remove any ambiguity around the event.
In a previous cryptic post on 14 September, Altman wrote “I love being home in the midwest. the night sky is so beautiful. excited for the winter constellations to rise soon; they are so great.”
i love being home in the midwest.the night sky is so beautiful.excited for the winter constellations to rise soon; they are so great.September 14, 2024
Since the Winter constellation Orion is most visible in the night sky from November to February, this was taken as another hint about a possible release date for Orion.
Most popular by farChatGPT is the most widely used chatbot in the US with a whopping 24.9 million searches for the term each month, according to Superside, which puts it a long way ahead of the next most searched-for AI chatbot, Google's Gemini on 1.5 million searches. You can use ChatGPT for several useful tasks like planning a trip, researching subjects for a school project, or simply coming up with a plan to get your next business idea off the ground.
ChatGPT will be integrated into an upcoming version of Apple Intelligence, running on compatible Apple devices, and become accessible through the Siri virtual assistant. ChatGPT is also accessible via a stand-alone mobile app that features an Advanced Voice mode on mobile, which enables you to chat with the AI just as you would chat with a human being.
We contacted OpenAI for comment on this story but they simply referred us to Altman’s tweet, saying “The best response is Sam’s tweet, which sums it up!”
You might also like...OpenAI CEO Sam Altman has slammed a media report about the imminent release of Orion, which is effectively ChatGPT-5, with a terse tweet on X.com. He described the report as “fake news out of control”, quashing rumors of a new version of ChatGPT before December.
fake news out of controlOctober 25, 2024
The report by The Verge quotes ‘sources’ as claiming Microsoft is planning to host Orion, the successor to ChatGPT-4 on its servers in November, pointing towards a release for the new LLM in time for ChatGPT’s 2nd birthday next month.
ChatGPT’s 2nd birthdayAltman, who has a history of posting cryptic messages on X.com that hint at upcoming product releases in a coded way, posted on 21 October “Whoa ChatGPT's 2nd birthday is next month!”, followed up by a tweet saying, “What should we give it for a birthday present…”
whoa ChatGPT's 2nd birthday is next month!October 21, 2024
Many users took this to mean a new product launch was imminent around the time of ChatGPT’s 2nd birthday (ChatGPT was released on 30 November 2022). Altman’s latest X.com post however would seem to remove any ambiguity around the event.
In a previous cryptic post on 14 September, Altman wrote “I love being home in the midwest. the night sky is so beautiful. excited for the winter constellations to rise soon; they are so great.”
i love being home in the midwest.the night sky is so beautiful.excited for the winter constellations to rise soon; they are so great.September 14, 2024
Since the Winter constellation Orion is most visible in the night sky from November to February, this was taken as another hint about a possible release date for Orion.
Most popular by farChatGPT is the most widely used chatbot in the US with a whopping 24.9 million searches for the term each month, according to Superside, which puts it a long way ahead of the next most searched-for AI chatbot, Google's Gemini on 1.5 million searches. You can use ChatGPT for several useful tasks like planning a trip, researching subjects for a school project, or simply coming up with a plan to get your next business idea off the ground.
ChatGPT will be integrated into an upcoming version of Apple Intelligence, running on compatible Apple devices, and become accessible through the Siri virtual assistant. ChatGPT is also accessible via a stand-alone mobile app that features an Advanced Voice mode on mobile, which enables you to chat with the AI just as you would chat with a human being.
We contacted OpenAI for comment on this story but they simply referred us to Altman’s tweet, saying “The best response is Sam’s tweet, which sums it up!”
You might also like...Intergenerational warfare is given a fresh and meaty lease of life in Ben Wheatley’s six-part black comedy Generation Z. When a military convoy drops its toxic load outside a retirement home, its elderly inhabitants develop an insatiable appetite for young flesh. Here's where to watch Generation Z online for free – from anywhere.
An allegory of Brexit and Covid, Generation Z sees the military collude with the government and media in an effort to cover the spill up, leaving Dambury's youth to fend for themselves.
As if survival wasn't difficult enough, schoolmates Charlie, Kelly, Steff and Finn are told in no uncertain terms that the unfolding apocalypse shouldn't distract from their A-Levels, and it falls on the gang to get to the heart of the mystery, while showing compassion to the geriatric horde that's hell-bent on destroying them.
Starring Anita Dobson and Robert Lindsay, read on as we explain how to watch Generation Z from anywhere in the world.
Can I watch Generation Z for free?Yes. The six episodes of Generation Z will be available to stream on the free Channel 4 streaming service in the UK.
Don't forget you can use a VPN to watch Generation Z on your usual streaming service from abroad.
Unblock any stream with a VPNIf you're keen to watch Generation Z but you're away from home and access to the show is geo-blocked, then you could always use a VPN to access it (assuming you're not breaching any broadcaster T&Cs, of course). You may be surprised by how simple it is to do.
Use a VPN to watch Generation Z from anywhere:
Editors ChoiceNordVPN – get the world's best VPN
We regularly review all the biggest and best VPN providers and NordVPN is our #1 choice. It unblocked every streaming service in testing and it's very straightforward to use. Speed, security and 24/7 support available if you need – it's got it all.
The best value plan is the two-year deal which sets the price at $3.69 per month, and includes an extra 3 months absolutely FREE. There's also an all-important 30-day no-quibble refund if you decide it's not for you.
- So, try NordVPN 100% risk-free for 30 daysVIEW DEAL ON
Can you watch Generation Z in the US?At the time of writing, any plans to make Generation Z available to watch in the US are yet to be announced.
Brits currently away from home can use a VPN to watch Generation Z on Channel 4 from abroad.
How to watch Generation Z for FREE in the UKGeneration Z premieres on Channel 4 at 9pm GMT on Sunday, October 27. Episodes air on Sundays and Mondays.
They'll be available to stream on the FREE Channel 4 streaming service after broadcast.
However, all six episodes are available right now on the premium Channel 4+ tier, which offers ad-free access to the platform's huge catalog of shows. It costs £3.99 per month or £39.99 per year after a 7-day free trial.
Outside the UK? To access Channel 4 from abroad, you'll need to download a good VPN, as detailed below.
Can you watch Generation Z in Canada?As with the US, there's no word as to when or if Generation Z will air in Canada.
However, UK nationals currently traveling in Canada can use a VPN to unblock Channel 4 and watch the show from anywhere in the world. We recommend NordVPN.
Can you watch Generation Z in Australia?Any plans to make Generation Z available to watch in Australia are yet to be announced at the time of publication.
Brits currently away from home can use a VPN to watch Generation Z on Channel 4 from abroad.
Generation Z trailer Generation Z castAnybody with a Channel 4+ subscription can watch all six episodes of Generation Z right now. Otherwse, you'll need to wait to watch on the following dates:
Intergenerational warfare is given a fresh and meaty lease of life in Ben Wheatley’s six-part black comedy Generation Z. When a military convoy drops its toxic load outside a retirement home, its elderly inhabitants develop an insatiable appetite for young flesh. Here's where to watch Generation Z online for free – from anywhere.
An allegory of Brexit and Covid, Generation Z sees the military collude with the government and media in an effort to cover the spill up, leaving Dambury's youth to fend for themselves.
As if survival wasn't difficult enough, schoolmates Charlie, Kelly, Steff and Finn are told in no uncertain terms that the unfolding apocalypse shouldn't distract from their A-Levels, and it falls on the gang to get to the heart of the mystery, while showing compassion to the geriatric horde that's hell-bent on destroying them.
Starring Anita Dobson and Robert Lindsay, read on as we explain how to watch Generation Z from anywhere in the world.
Can I watch Generation Z for free?Yes. The six episodes of Generation Z will be available to stream on the free Channel 4 streaming service in the UK.
Don't forget you can use a VPN to watch Generation Z on your usual streaming service from abroad.
Unblock any stream with a VPNIf you're keen to watch Generation Z but you're away from home and access to the show is geo-blocked, then you could always use a VPN to access it (assuming you're not breaching any broadcaster T&Cs, of course). You may be surprised by how simple it is to do.
Use a VPN to watch Generation Z from anywhere:
Editors ChoiceNordVPN – get the world's best VPN
We regularly review all the biggest and best VPN providers and NordVPN is our #1 choice. It unblocked every streaming service in testing and it's very straightforward to use. Speed, security and 24/7 support available if you need – it's got it all.
The best value plan is the two-year deal which sets the price at $3.69 per month, and includes an extra 3 months absolutely FREE. There's also an all-important 30-day no-quibble refund if you decide it's not for you.
- So, try NordVPN 100% risk-free for 30 daysVIEW DEAL ON
Can you watch Generation Z in the US?At the time of writing, any plans to make Generation Z available to watch in the US are yet to be announced.
Brits currently away from home can use a VPN to watch Generation Z on Channel 4 from abroad.
How to watch Generation Z for FREE in the UKGeneration Z premieres on Channel 4 at 9pm GMT on Sunday, October 27. Episodes air on Sundays and Mondays.
They'll be available to stream on the FREE Channel 4 streaming service after broadcast.
However, all six episodes are available right now on the premium Channel 4+ tier, which offers ad-free access to the platform's huge catalog of shows. It costs £3.99 per month or £39.99 per year after a 7-day free trial.
Outside the UK? To access Channel 4 from abroad, you'll need to download a good VPN, as detailed below.
Can you watch Generation Z in Canada?As with the US, there's no word as to when or if Generation Z will air in Canada.
However, UK nationals currently traveling in Canada can use a VPN to unblock Channel 4 and watch the show from anywhere in the world. We recommend NordVPN.
Can you watch Generation Z in Australia?Any plans to make Generation Z available to watch in Australia are yet to be announced at the time of publication.
Brits currently away from home can use a VPN to watch Generation Z on Channel 4 from abroad.
Generation Z trailer Generation Z castAnybody with a Channel 4+ subscription can watch all six episodes of Generation Z right now. Otherwse, you'll need to wait to watch on the following dates:
With the Samsung Galaxy S25 handsets expected to be launched in January, we're also hoping to see One UI 7.0 – Samsung's take on Android 15 – appear around the same time. Fortunately, a new hands-on video has given us an early look at the software and its features.
The video was posted by Mobile Wala Bhai (via SamMobile) and shows the software running on a Samsung Galaxy S24 Ultra device. Officially, we haven't even got a beta release of One UI 7.0 yet, so it's unclear where the software has come from.
One of the upcoming changes that's visible in this clip is a redesigned quick settings panel, which appears when you swipe down from the top of the screen: there are now more elements to this panel, with access to more options.
You're able to quickly adjust the display brightness by sliding your finger left and right for example, and enable or disable dark mode with a tap. In addition, notifications get their own panel away from other settings and toggles.
Apps and camera controlsThe video also gives us a look at some of the design tweaks applied to the stock apps in One UI 7.0, including the Gallery app. We're expecting the software to show up with a more modern look across the board.
There are changes coming to the stock Camera app too, which will seemingly be easier to operate with one hand, with the options for different camera modes and zoom levels given more prominence in the revamped interface.
While it's interesting to see some of these features in use, a lot of them have already been leaked, so they're not a massive surprise. Samsung did briefly show off One UI 7.0 at its developer conference at the start of this month.
At the same conference, Samsung announced that a One UI 7.0 beta will be out before the end of this year, though we'll have to wait until 2025 for the final version. In the meantime, expect more sneak previews and leaks to appear.
You might also likeAmazon Web Services (AWS) has fixed a security flaw in its Cloud Development Kit (CDK) which could have allowed threat actors to fully take over people’s accounts.
The AWS Cloud Development Kit (CDK) is an open source software development framework that allows developers to define cloud infrastructure using familiar programming languages like TypeScript, Python, and Java. It simplifies the process of creating and managing AWS resources by converting code into AWS CloudFormation templates, enabling infrastructure as code (IaC) practices.
In order to deploy an app, users are first required to bootstrap the environment, which includes creating necessary components such as identity and access management (IAM) ropes, permissions, policies, and an S3 staging bucket. The S3 staging buckets follow the same naming pattern: "cdk-{Qualifier}-{Description}-{Account-ID}-{Region}". That means, crooks can easily predict the name, as long as they know the AWS Account-ID, and the region in which the CDK is deployed.
Thousands of instances“Since the Prefix is always cdk, the Qualifier is by default hnb659fds, and assets is a constant string in the bucket name, the only variables that change are the Account ID and the Region,” explained cybersecurity researchers from Aqua, who first spotted the flaw.
This means crooks could claim someone else’s CDK staging bucket name in advance, preload it with malware, and then just wait for the victim to run it.
To make matters worse, Aqua says there are “thousands” of instances with the default qualifier being used in the bootstrap process, making it super easy to claim another user’s CDK staging bucket name. In fact, the problem could "allow an attacker to gain administrative access to a target AWS account, resulting in a full account takeover," the pros explained.
Aqua reported the flaw to Amazon, who patched it in early July this year, it was said. The first clean CDK version is v2.149.0.
Via The Register
More from TechRadar ProMicrosoft CEO Satya Nadella took home $79.1 million in 2024, marking a 63% increase compared with the previous year, reports have claimed - despite actually requesting a reduction in his pay.
Despite his substantial compensation package, Nadella had requested a reduction in his cash incentive, following a number security challenges affecting the company recently, which had led to a Microsoft commitment to link executive pay to security outcomes.
In response, the Microsoft board agreed to reduce Nadella's cash incentive to $5.2 million, marking a more than 50% reduction from the $10.7 million sum he was initially eligible for.
Satya Nadella got a $79 million pay packet in 2024“The Board reviewed the Company’s performance and firmly believes that Mr. Nadella provided exceptional leadership and was both critical in achieving the extremely strong performance of the Company and personally responsible for the ongoing repositioning of its investments and priorities," an extract in a letter from the Microsoft Compensation Committee read.
"It also considered the factors that Mr. Nadella raised in requesting a reduction of his cash incentive and concluded that such an adjustment was appropriate.”
While part of this multimillion-dollar sum came in the form of pay, Nadella’s stock alone, expected to account for around $71 million, made up a major part of his earnings, according to a company filing.
At the beginning of the 2024 calendar year, Microsoft became one of the now three tech companies to reach a $3 trillion market cap after it became a $2 trillion company in 2021.
In its final financial year quarter, ending June 30, Microsoft drew in $64.7 billion in revenue, bringing its annualized revenue to $245.12 billion, up from the $211.92 billion in revenue it made the year before. The tech giant’s share price also rose by 31.2% in its most recent full year.
“Our strong performance this fiscal year speaks both to our innovation and to the trust customers continue to place in Microsoft," Nadella said at the time.
Via Reuters
More from TechRadar ProAnthropic has announced a significant update to its Claude AI chatbot allowing it to both write and execute Javascript code.
Through a new analysis tool, Claude users can process data, conduct analysis and produce real-time insights with a higher degree of mathematical accuracy, making it a much more powerful and reliable tool in industries outside of the creative context where this accuracy matters.
For example, it can perform complex calculations, analyze large data sets and generate interactive visualizations based on CSV files, which can be hard to digest.
Claude goes hands-on with JavascriptAnthropic claims Claude’s added capabilities mean that responses will be “mathematically precise and reproducible,” something that other chatbots have proven incapable of doing.
“Instead of relying on abstract analysis alone, it can systematically process your data—cleaning, exploring, and analyzing it step-by-step until it reaches the correct result," the company wrote in a blog post.
Anthropic also detailed how marketers could upload customer interaction data to let Claude suggest customer engagement optimizations, or how product managers can use it to analyze customer engagement to inform sprint planning and development focus areas.
The feature adds Claude to a growing list of AI models that integration code execution abilities, such as Google’s Gemini models which offer Python-based code execution and OpenAI, which offers Advanced Data Analysis on flagship models.
However, the company’s decision to go down the route of Javascript makes it particularly useful in the realms of web-based data processing and interactive elements.
Claude’s new Javascript abilities are available to Claude.ai users, who can enable the update through their account settings as a preview.
More from TechRadar ProIt's quite hard to make earbuds that stand out from the crowd in today's competitive market, which is why many firms are turning their attention to the humble charging case. JBL stuck a touchscreen into some of theirs, while LG added UV sanitization to its earbud charger. And now Cleer is joining the smart case party with its new Arc 3 true wireless open-ear buds by adding both of those features and its own addition too: a mirror.
The new case isn't just good news for anyone who's been so engrossed in a podcast that they've forgotten what they look like. It's useful too. The UV-C light promises to blast bacteria for more hygienic headphones, while the touchscreen provides easy access to key features and settings.
In addition to the case there are some key improvements in the sound department too.
Cleer ARC3 True Wireless Open-Ear Earbuds: key features and pricing (Image credit: Cleer)The new buds deliver Dolby Atmos with head tracking, version three of Cleer's dynamic bass enhancement and the new Qualcomm Snapdragon Sound S5 platform for better sound quality. That means LDAC hi-res audio as well as aptX Adaptive and aptX Lossless, AAC and SBC codecs.
The Arc 3 also promise deeper bass than before via their 16.2mm neodynium dynamic drivers, a useful improvement as open-ears tend to be a little light at the low end. Frequency response here is 50Hz to 40kHz.
The Bluetooth chip is Bluetooth 5.4 with multi-point for seamless switching between dual devices, and Cleer's automatic volume control adjusts the audio based on how noisy your listening environment becomes. And there's 50 hours of total battery life: 10 from the buds themselves and a further 40 from the case. IPX7 water and sweat resistance makes them a good choice for the gym or for outdoor running, one of the key areas where open-ears are often a better choice than in-ears with ANC.
The Cleer ARC3 True Wireless Open-Ear Earbuds are available now from the usual retailers and from Amazon. The MSRP is $219.99, which is around £169 or AU$330, but those last two prices are unofficial.
(Image credit: Cleer Audio) You may also like