PyTorch 1.9 has arrived: Here’s what you need to know – ZDNet

PyTorch, the Facebook-backed open-source library for the Python programming language, has reached version 1.9 and brings major improvements for scientific computing.

PyTorch has become one of the more important Python libraries for people working in data science and AI. Microsoft recently added enterprise support for PyTorch deep learning on Azure. PyTorch has also become the standard for AI workloads at Facebook.

Google's TensorFlow and PyTorch integrate with important Python add-ons like NumPy and data-science tasks that require faster GPU processing.

SEE: Hiring Kit: Python developer (TechRepublic Premium)

The PyTorch linear algebra module torch.linalg has moved to stable in version 1.9, giving NumPy users a familiar add-on to work with maths, according to release notes.

Per those release notes, the module "extends PyTorch's support for it with implementations of every function from NumPy's linear algebra module (now with support for accelerators and autograd) and more, like torch.linalg.matrix_norm and torch.linalg.householder_product."

Also moving to stable is the Complex Autograd feature to provide users a way to "calculate complex gradients and optimize real valued loss functions with complex variables."

"This is a required feature for multiple current and downstream prospective users of complex numbers in PyTorch like TorchAudio, ESPNet, Asteroid, and FastMRI," the PyTorch project notes.

There are also some debugging goodies in this release with a new torch.use_determinstic_algorithms option. Enabling this makes operations behave deterministically, if possible, otherwise it will produce a runtime error if they might behave nondeterministically.

There's a new beta of the torch.special module similar to SciPy's special module. It brings many functions that are helpful for scientific computing and working with distributions such as iv, ive, erfcx, logerfc, and logerfcx.

And this version brings the PyTorch Mobile interpreter, which is made for executing programs on edge devices. It's a slimmed down version of the PyTorch runtime. This should make big cuts to the binary size compared to the current on-device runtime.

"The current pt size with MobileNetV2 in arm64-v8a Android is 8.6 MB compressed and 17.8 MB uncompressed. Using Mobile Interpreter, we are targeting at the compressed size below 4 MB and uncompressed size below 8MB," the PyTorch project notes.

Mobile app developers can also use the TorchVision library on their iOS and Android apps. The library contains C++ TorchVision ops to help with tasks like object detection and segmentation in videos and images.

SEE:This old programming language is suddenly hot again. But its future is still far from certain

There are several additions to help with distributed training for machine-learning algorithms. TorchElastic is now in beta but part of core PyTorch, and is used to "gracefully handle scaling events".

There's also CUDA support for RPC. CUDA RPC sends Tensors from local CUDA memory to remote CUDA memory for more efficient peer-to-peer Tensor communication.

On the performance front, this version of PyTorch also brings the stable release of the Freezing application protocol interface (API), a beta of the PyTorch Profiler, a beta of the Inference Mode API, and a beta of torch.package, a new way to package PyTorch models.

Read more from the original source:
PyTorch 1.9 has arrived: Here's what you need to know - ZDNet

PyTorch 1.9 has arrived: this is what you need to know – Texasnewstoday.com

PyTorch, a Facebook-backed open source library for the Python programming language, has reached version 1.9 and has made significant improvements in scientific computing.

PyTorch has become one of the more important Python libraries for people working in data science and AI. Microsoft recently added enterprise support for PyTorch deep learning on Azure. PyTorch has also become the standard for Facebooks AI workloads.

Googles TensorFlow and PyTorch are integrated with important Python add-ons such as NumPy and data science tasks that require faster GPU processing.

to see: Recruitment Kit: Python Developer (TechRepublic Premium)

According to the release notes, the PyTorch linear algebra module torch.linalg will move to stable in version 1.9, providing NumPy users with familiar add-ons for working with math.

According to these release notes, this module extends PyTorch support and implements all the functions of NumPys linear algebra module (currently supporting accelerators and autograd). torch.linalg.matrix_norm And torch.linalg.householder_product..

Also moving to the stable version is the Complex Autograd feature, which provides users with a way to calculate complex gradients and use complex variables to optimize real-valued loss functions.

This is a feature needed by multiple prospective users of PyTorch complex numbers, such as TorchAudio, ESPNet, Asteroid, and FastMRI, now and downstream, said the PyTorch project.

This release also has some debugging features with the new torch.use_determinstic_algorithms option. When enabled, the operation works deterministically if possible. If not enabled, you will get a runtime error if it can behave non-deterministically.

There is a new beta version of torch.special Module Similar to SciPys special module. This brings many features that are useful for scientific computing and working with distributions such as: iv, ive, erfcx, logerfc,and logerfcx..

And this version brings a PyTorch Mobile interpreter designed to run programs on edge devices. This is a streamlined version of the PyTorch runtime. This significantly reduces the binary size compared to the runtime on the current device.

The current pt size on Arm64-v8a Android MobileNet V2 is 8.6MB compressed and 17.8MB uncompressed. We are using MobileInterpreter to target compressed sizes less than 4MB and uncompressed sizes less than 8MB, said the PyTorch project. Says.

Mobile app developers can also use the TorchVision library with iOS and Android apps. The library contains C ++ TorchVision operations that assist with tasks such as object detection and segmentation in video and images.

to see: This old programming language suddenly gets hot again.But the future is still uncertain

There are some additional features that are useful for distributed training of machine learning algorithms. TorchElastic, which is currently in beta, is part of the core PyTorch and is used to handle scaling events properly.

There is also CUDA support for RPC. CUDA RPC sends Tensors from local CUDA memory to remote CUDA memory for more efficient peer-to-peer Tensor communication.

In terms of performance, this version of PyTorch also offers a stable release of the Freezing Application Protocol Interface (API), a beta version of PyTorch Profiler, a beta version of the inference mode API, and a beta version of torch.package in new ways. .. Package the PyTorch model.

See the rest here:
PyTorch 1.9 has arrived: this is what you need to know - Texasnewstoday.com

Top Blockchain Programming Books to Read in 2021 – Analytics Insight

Blockchain programming can be difficult if the basics are not understood properly. Good books help in understanding and give a better insight to the readers about using blockchain programming for different purposes. Analytics Insight has selected the top 10 popular books about blockchain programming, available in 2021.

Foundations of Cryptocurrency and Blockchain Programming for Beginners

Author: Chris Dannen

Chris Dannen is a partner and founder at Iterative Instinct, a hybrid investment fund focused on cryptocurrency trading and seed-stage venture investments. He was formerly a corporate strategist for Fortune 500 companies.

The book demonstrates how to use Solidity and the Ethereum project, which is second only to Bitcoin in market capitalization. Blockchain protocols are taking the world by storm, and the Ethereum project, with its Turing-complete scripting language Solidity, has rapidly become a front runner. This book presents the blockchain phenomenon in context; then situates Ethereum in a world pioneered by Bitcoin. It provides the fundamentals of programming and networking, alongside its introduction to the new discipline of crypto-economics.

Blueprint for a New Economy

Author: Melanie Swan

Melanie Swan is the Founder of the Institute for Blockchain Studies and a Contemporary Philosophy MA candidate at Kingston University London and Universit Paris VIII. She has a traditional markets background with an MBA in Finance from the Wharton School at the University of Pennsylvania, and work experience at Fidelity and JP Morgan.

The book talks about how the blockchain is in a position to become the fifth disruptive computing paradigm after mainframes, PCs, the Internet, and mobile/social networking. It explains that the blockchain is essentially a public ledger with the potential as a worldwide, decentralized record for the registration, inventory, and transfer of all assets. It is not only applicable just for finances, but also for property and intangible assets such as votes, software, health data, and ideas.

Harnessing Bitcoins Blockchain Technology

Author: Siraj Raval

Siraj Raval is an app developer & entrepreneur. He is the founder of a crowdfunding platform for developers called Havi. He has also developed several iOS apps including Meetup and has worked on a host of open source work.

The book demonstrates how to take advantage of Bitcoins underlying technology, the blockchain, to build massively scalable, decentralized applications known as DApps. In this practical guide, author Siraj Raval explains why DApps will become more widely used and also more profitable than todays most popular web apps. It would help the reader learn about advances in distributed-system technology that make distributed data, wealth, identity, computing, and bandwidth.

Building Blockchain Projects

Author: Narayan Prusty

Narayan Prusty is a full-stack developer, with five years of experience in the field. He specializes in Blockchain and JavaScript. His commitment has led him to build scalable products for startups, the government, and enterprises across India, Singapore, the USA, and UAE.

The book talks about developing real-time practical DApps using Ethereum and JavaScript. This book is for JavaScript developers who now want to create tamper-proof data (and transaction) applications using Blockchain and Ethereum. Those who are interested in cryptocurrencies and the logic and database empowering it will find this book extremely useful.

The Collected Writings of Bitcoin Creator Satoshi Nakamoto

Author: Phil Champagne

Phil Champagne is the Managing Director of Wren Investment Group LLC, a firm that invests in real estate with equity funding from financial partners. His knowledge of the Austrian School of Economics enables Wren Investment Group LLC and its partners to navigate investments from a sound money perspective.

Like the currency he created, the identity of Bitcoins creator Satoshi Nakamoto is virtual, existing only online. The Nakamoto persona, which may represent an individual or a group, exists only in the online publications that introduced and explained Bitcoin during its earliest days. This book is the first-ever collected and professionally published form of the essential writings that detail Bitcoins creation. It contains Satoshi Nakamoto emails and posts on computer forums presented in chronological order, Bitcoin fundamentals presented in laymans terms, Bitcoins potential and profound economic implications, etc.

Write Production-ready Smart Contracts for Ethereum Blockchain with Solidity

Author: Jitendra Chittoda

Jitendra Chittoda is a blockchain security engineer at ChainSecurity. His day job is to perform a security audit on smart contracts and expose security vulnerabilities in Solidity and Scilla contracts. He has also developed non-custodial, decentralized, P2P lending contracts for ETHLend. The Solidity contracts that he has developed or audited handle over $100 million worth of crypto assets. He also served as a tech and security advisor in various ICO projects.

The book delves into solidity and understands control structures, function calls, and variable scopes. It explores tools for developing, testing, and debugging your blockchain applications. The book also helps in learning advanced design patterns and best practices for writing secure smart contracts book Description. The book is very detailed and essential for beginners.

Practical Java Programming for IoT, AI, and Blockchain

Author: Perry Xiao

Dr. Perry Xiao is an Associate Professor and Course Director of London South Bank University. He comes from a physics and electronics background, having received BEng in Opto-Electronics, MSc in Physics, and Ph.D. in Photophysics.

The book demonstrates practical uses for some of the hottest tech applications trending among technology professionals. It provides a brief overview for getting started with Java Programming and how it can be applied to some of the biggest trending applications of today. The book helps the readers to understand how to program Java to interact with operating systems, networking, and mobile applications.

A Beginners Guide to Build Smart Contracts for Ethereum and Blockchain

Author: Ritesh Modi

Ritesh Modi is a former Microsoft senior technology evangelist. He has been recognized as a Microsoft Regional Director for his contributions to Microsoft products, services, and communities. He is a cloud architect, a published author, a speaker, and a leader who is popular for his contributions to datacenters, Azure, Kubernetes, blockchain, cognitive services, DevOps, artificial intelligence, and automation.

The book helps in learning the most powerful and primary programming language for writing smart contracts and find out how to write, deploy, and test smart contracts in Ethereum. It starts with a brief run-through of blockchain, Ethereum, and their most important concepts or components. It also teaches how to install all the necessary tools to write, test, and debug Solidity contracts on Ethereum.

Programming the Open Blockchain

Author: Andreas M. Antonopoulos

Andreas is a passionate technologist, who is well-versed in many technical subjects. He is a serial tech-entrepreneur, having launched businesses in London, New York, and California. He has earned degrees in Computer Science and Data Communications and Distributed Systems from UCL.

The book acts as a guide through the seemingly complex world of Bitcoin, providing the knowledge the reader needs to participate in the internet of money. Whether one is building the next killer app, investing in a startup, or simply curious about the technology, this revised and expanded second edition provides essential detail to get started.

Gain blockchain programming skills to build decentralized applications using Python

Author: Arjuna Sky Kok

Arjuna Sky Kok has experienced more than 10 years in expressing himself as a software engineer. He has developed web applications using Symfony, Laravel, Ruby on Rails, and Django. He also has built mobile applications on top of Android and iOS platforms. Currently, he is researching Ethereum technology. Other than that, he teaches Android and iOS programming to students.

The book implements real-world decentralized applications using Python, Vyper, Populus, and Ethereum. It talks about the blockchain ecosystem implement in smart contracts, wallets, and decentralized applications (DApps) using Python. It provides deeper insights into storing content in a distributed storage platform book description.

Read more here:
Top Blockchain Programming Books to Read in 2021 - Analytics Insight

This free coding school has no teachers or classes. Can it help solve the tech skills crisis? – ZDNet

Kood/Jhvi opens its doors to students this autumn, offering a radical new approach to learning to code.

Later this year, an international coding school will open its doors to students in Jhvi, a town of fewer than 10,000 inhabitants in Estonia that is located 50km from the Russian border.

There are no tuition fees, no classes and no teachers, and over the course of two years, students learn the skills they need to enter Estonia's job market as full-stack developers.

"We have to constantly explain how a school without classes can actually work," says Karin Knnapas, the 34-year old co-headteacher of the brand-new Kood/Jhvi computing school. "There is no similar school in Estonia."

Kood/Jhvi is an initiative from members of the Estonian Founders Society, an organization set up to invigorate the local startup community and empower new startup founders. Among the eight Estonian entrepreneurs involved in the project are the co-founders of two unicorn-status startups: Bolt's Martin Villig, and Wise's (formerly Transferwise) Taavet Hinrikus. In addition to state funding, the school has received 700,000 in private donations.

SEE: Hiring Kit: Python developer (TechRepublic Premium)

Kood/Jhvi's curriculum is based on 01 Education System, a peer-learning platform developed by French computer scientist Nicolas Sadirac. There are no classes and teachers, and most of the studies are cooperation-based.

Knnapas likens the curriculum to a computer game, with students tasked with solving increasingly difficult problems that allow them to level-up. "The platform has specific instructions on what the student needs to do, for example, code a forum, build a website," she says.

"They need to follow the instructions and do what is asked. About 80% of these problems are solved together in a team, so they need to work with other people and figure it out together."

Knnapas had been involved in organizing student entrepreneurship at the European Innovation Academy for a number of years alongside colleague Elle-Mari Pappel, when in autumn 2020 they came across a job listing for a headmaster role at a new IT school in Estonia.

The pair applied for the role together, and as of the beginning of 2021, Knnapas and Pappel work alongside each other in joint roles as Kood/Jhvi's co-headteachers.

"Kood/Jhvi is a unique type of school with an innovative methodology, so the school also needed a different kind of management model," says Knnapas.

"We knew that our cooperation works well, we know each other's strengths and weaknesses and like working together, so it just felt like a perfect match to take on this challenge together."

The location of the school, which is situated in the industrial county of Ida-Virumaa, was selected with the hope that it would help diversify job opportunities in the region, where the main industry of oil shale mining is expected to decline in the future.

For decades, Estonia has relied heavily on oil shale in electricity production, but in recent years the country has made efforts to turn towards renewable energy sources.

The state energy firm, Eesti Energia, announced in June that it will stop producing electricity from oil shale by 2030 and there have been steps taken in that direction already.

All of this is expected to bring sweeping changes to the economy and labour market in eastern Estonia home to the country's biggest oil shale mines and a need for new job opportunities for the thousands of people employed in the industry-heavy region.

"Our goal is to support the competitiveness of the region [and] give the local youth and also older people an additional education opportunity either at the start of their journey, or if they want to change their career," says Knnapas.

SEE:AI and data science jobs are hot. Here's what employers want

To apply to Kood/Jhvi, students need to be over 18 years-old and have at least a basic education, which means having graduated from ninth grade. While there are no tuition fees, students are expected to commit to their studies full-time throughout their two-year education.

Kood/Jhvi is not entirely unique. There are more than 20 schools worldwide that are based on a similar methodology, including Paris's cole 42, which Sadirac developed in cooperation with French telco billionaire, Xavier Niel.

Despite this, word of Kood/Jhvi is already spreading, with the school attracting interest regionally and internationally. Its first round of applications ended on May 31; of the roughly 3,000 applicants, 25% were from Ida-Virumaa, with other applications coming from Finland, Latvia, and even as far as Brazil.

To apply, applicants must take a two-hour online test that challenges their logical thinking and memory. The 600 highest test scorers will then be selected to continue the application process in a 'selection sprint', during which, over the course of three intensive weeks, they will learn the basics of programming and solve challenges individually and as a team. In autumn, the 200 best applicants of these 600 will start their two-year journey at Kood/Jhvi.

To begin with, students will be housed in the Ida-Viru Vocational Education Center in neighbouring Sillame, until a modern, renovated building in Jhvi is opened in 2022 that will house study space, housing, and event space.

According to The State of European Tech Survey 2020, Estonia has four to six times as many startups per capita as the European average, meaning that on a population-adjusted basis, it is the European capital of startups. At the same time, there are growing concerns that the future development of the Estonian IT sector could be jeopardized by a lack of skilled technology professionals.

"A good programmer without a job is really hard to find in Estonia," says Ivo Lasn, the head of the Estonian Association of Information Technology and Telecommunications (ITL). "There are more ideas and business plans in the IT field than the people with whom to execute those ideas. We're talking about a shortage of thousands of people."

The problem is an old one, and over the years there have been several initiatives by state and private-sector companies aimed at promoting IT education among prospective students. The success of Estonian startups in more recent years has had a positive impact on these efforts, and ICT courses are now among most the popular university subjects in terms of the number of applications universities receive.

Older adults are also being encouraged to explore careers in tech. Two of the biggest universities in Estonia have master's curriculums for people from other fields wanting to acquire IT-specific skills and knowledge: Tallinn University of Technology (Taltech) offers a 'Digital Transformation in Business' degree, meanwhile the University of Tartu offers a 'Conversion Master in IT'.

SEE:What is Agile software development? Everything you need to know about delivering better code, faster

Since 2017, more than 500 retrained adults have entered the IT labor market having taken the software development course Choose IT!, which involves six weeks of theory classes and eight weeks of hands-on internship experience at partner companies.

It's not just software developers and testers that are desperately needed for Estonia's IT sector, with Lasn pointing out that non-technical roles such as business analysts, project managers, product owners, service designers, salespeople, and even recruiters and marketeers are also in demand.

After all, these roles usually constitute around 50% of the people working in IT companies, Lasn says.

Knnapas hopes that Kood/Jhvi will help draw more people into Estonia's fledgling tech sector and address the country's widening skills gap. She also believes more education is needed around the opportunities a career in IT can offer, regardless of a person's background or whether they're interested in technical or non-technical roles.

"We need opportunities available both for young people who are finishing high school, but also for people who want to change their career or looking for new opportunities," she says.

"Learning to code can seem a bit daunting even if it isn't, and we need to talk more about what it actually means to work in the IT sector, to help people understand that there are a lot of different roles that need to be covered."

She adds: "Everyone can find something that's interesting for them."

Originally posted here:
This free coding school has no teachers or classes. Can it help solve the tech skills crisis? - ZDNet

Career in Web Development: 5 Tips on How to Improve Your Skills – Tech Guide

Are you looking to ensure a great career in web development? Then, master your existing skills and hit on valuable learning opportunities. Here Im going to pin down a few tips for you to try to ensure a successful web development career:

1.Enroll in an Online Course

First & foremost, get yourself enrolled in any good web development course. You should consider getting a certification in internet programming to build skills in this field. Typically, an online course has a duration of 18 months, and you will learn so many new things and gain confidence during that period. You will learn the art to build your own website and learn new methods of developing and designing. You will also learn how to effectively administer websites. An online course helps you build a site from scratch and end up mastering business skillsa gateway to ensure a successful career.

2.Work on Open-Source Projects

If you aim to excel in your web development career, then its best to join the open-source community. This will help you polish your existing skills in so many different ways. You get to learn new things from field experts, you get to be a part of real-time projects, you can get the maximum exposure to coding, you can learn the ability to become an accomplished developer, etc. You should know that contributing to open-source projects can help you establish new skills. You can either be a part of an existing project or establish an iteration of it.

3.Learn New Industry Trends

To succeed in your career, you must stay up-to-date with changing industry trends. This will help you gain an edge over colleagues, business competitors, etc. Learn about what is currently going on in the web development industry and learn by doing. Join industry groups, socialize with expert web developers, attend conferences/colloquiums, etc. to learn more about the web development industry. Remember that web development is a competitive & fast-changing industry and you must want to stay on top of your industry trends.

4.Regularly Write Codes

Have you ever heard that common saying that practice makes the man perfect? Well, the same applies when it comes to polishing your skills in web development. If you want to be a pro in coding, then dont miss a day without doing the coding. Once you have learned the art of coding, its time to focus on that skill. Constantly learning a skill is ideal to grow and be successful in your field. Writing codes every day and being creative with what you are doing will help you become an amazing web developer.

5.Teach Others What Youve Learned

Perhaps, youve already heard, if you want to improve your skills in a specific area, then teach what youre learning. This can help you grow on so many personal levels. Teaching others about how to write codes enables you to gain new perspectives. You should know that learning and teaching are two different things, and hence you must simultaneously employ both to have a solid understanding of web development. First, learn how coding works and then share with others what youve learned. This will help you raise new queries that you never thought about earlier.

Excerpt from:
Career in Web Development: 5 Tips on How to Improve Your Skills - Tech Guide

GB News Is Off to a Splashy, but Shaky, Start in Britain – The New York Times

Media analysts said GB News faced a bigger long-term challenge: It wants to be treated as a traditional ad-supported news channel, but it is promoting itself as a politically opinionated combatant in the culture wars.

GB News is pitching itself along identity lines but using the idea of a separation between advertisers and editorial to fight back against its critics, said Meera Selva, director of the Reuters Journalism Fellowship Program at the University of Oxford.

There are also questions about whether GB News will run afoul of Britains broadcast rules. Several hundred viewers filed complaints with the broadcasting regulator, known as Ofcom, after Mr. Woottons harsh criticism of Mr. Johnsons postponed reopening a warning sign, given that it was the channels first night.

Under the regulations, broadcasters are allowed to deliver opinions, provided there is a rough balance over the course of a day between left and right. Some media experts said the mix of programming on GB News from Mr. Woottons commentary to Mr. Neils interviews suggested that it was trying to strike that balance.

Theyre not trying to bust the rules, said Stewart Purvis, a former chief editor at the broadcaster ITN, who oversaw content and standards at Ofcom. Theyre trying to understand the rules.

More than a British version of Fox, Mr. Purvis said, GB News was an example of grievance television. Its targets are the media establishment, personified by the BBC, and the politically correct precincts of academia and government. That will appeal to its mainly pro-Brexit audience, he said. But when Mr. Neil is not on the air, GB News fills the time with far less well-known figures.

What weve never had before in British television is a succession of young people just talking to each other, Mr. Purvis said. Whether there is an audience for endless, anti-woke, happy talk is less clear.

Anna Joyce contributed reporting.

See original here:
GB News Is Off to a Splashy, but Shaky, Start in Britain - The New York Times

GitLab fixes serious SSRF flaw that exposed orgs internal servers – The Daily Swig

John Leyden17 June 2021 at 15:03 UTC Updated: 17 June 2021 at 15:06 UTC

DevSecOops

Programming code-share platform GitLab has fixed a server-side request forgery (SSRF) issue in a software library after the problem was flagged by a security researcher.

Server-side request forgery is a class of web security vulnerability that allows, for example, an attacker to force a vulnerable server to make a connection to internal services within an organizations infrastructure.

Researcher Vin01 discovered that GitLabs CI Lint API, a library related to code handling and managing developer workflows, was flawed.

Catch up with the latest DevOps news and analysis

After discovering the problem last December, the researcher reported it to GitLab, which responded by publishing a temporary fix in February.

GitLab followed up with a more complete patch early this month, clearing the way for Vin01 to publish a detailed technical write-up of their findings.

The affected CI Lint API is used to validate CI/CD YAML configuration for GitLab instances. A flaw in the technology, if left unaddressed, created a means for miscreants to steal sensitive info such as passwords and cloud service credentials, Vin01 told The Daily Swig.

Installations which had a particular configuration in place to allow internal network requests from GitLab were vulnerable to server-side request forgery (SSRF), where an attacker could have sent a request to internal servers by jumping from the public facing GitLab servers.

These internal servers are usually not exposed to the internet as they are only meant to be used internally and may contain sensitive information like passwords, API keys, cloud service credentials, which could have been stolen as a result of this vulnerability.

Public facing GitLab servers are quite common, and the issue in hand was exacerbated because no authentication was required in order to exploit it.

The vulnerabilities are tracked as CVE-2021-22175 and CVE-2021-22214.

READ MORE Vulnerability in Microsoft Teams granted attackers access to emails, messages, and personal files

In my research I saw hundreds of vulnerable GitLab servers including but not limited to many open source projects, government departments and universities which use GitLab for hosting their code and integrate it with their infrastructure, Vin01 added.

The security researcher has put together a small script to test if a GitLab server is vulnerable, availableon GitHub.

Vin01 praised GitLabs handling of the disclosure process, adding that even though they have since privately warned many affected organizations about their exposure to the flaw, there are still many vulnerable instances.

RELATED Security researcher turns Apache Airflow into bug bounty cash cow

Read more here:
GitLab fixes serious SSRF flaw that exposed orgs internal servers - The Daily Swig

We did much better than how we did in a non-pandemic year – THE WEEK

Much has been said about the virtual mode of learning. Were engineering and technical colleges in a better position to adapt to online teaching?

Naturally, yes indeed. Many technical colleges were already using different digital platforms, online tools and NPTEL (National Programme on Technology Enhanced Learning) courses prior to Covid-19. Hence it was easy for technical colleges to migrate to online education. Secondly, most of the institutions have [the open source] MOODLE-based education [system] or their own learning management system. Plus, the ministry of human resource development's MOOC (massive open online course) portal, SWAYAM, which started about three-and-a-half years ago, has over 3,000 courses and 10 million plus users. Other institutions, like arts and commerce colleges or even schools, had little exposure to online methodology. There are certainly difficulties in remote, rural areas. But even there, people have been innovative. There are common service centres, what we call CSCs, in almost all the blocks and villages, where there are computers, internet and power supply. The SWAYAMs counterpart, in the form of SWAYAM PRABHA direct-to-home channels, too, are easily available with a simple dish antenna anywhere, for free.

Many courses are also posted on the website. So, the digital divide is bare minimum. In fact, if a level-playing field can be created, it is only through digital technology. Because in order to have education for all, if you have to build brick-and-mortar infrastructure and induct a huge number of faculty, it will be expensive. The online mode is much more economical. And fortunately, in India, fibre optic connectivity has reached almost all the villages.

Many people lost their jobs and could not pay the fees for their children.... I found that many philanthropists are coming forward and are saying that they will take care of the fees.

How have colleges under the AICTE fared since the pandemic struck?

In March, when the first lockdown started, we set up a helpline. Many students having difficulty with food, hostel accommodation, transport, medical aid and other essentials were connected to people ready to help. So there were philanthropists and NGOs on one side and students seeking help on the other. And we did match-making using artificial intelligence tools. Then we had two hackathonsSamadhan and Ideathoncompleted to sensitise students and for helping the community. We are in the midst of two other hackathons, a drug discovery hackathon and a toycathon, for developing new drugs, and indigenous toys.

We have trained 1.65 lakh faculty members in emerging areas like AI, data science, machine learning and other emerging technologies through 948 week-long programmes. We also held several one-week-long faculty development programmes covering topics like universal human values, ethics, sensitisation towards society and empathy development. Some 40,000 teachers were trained and they are, in turn, taking that to the students.

There are examination reforms to take students away from rote learning; like Bloom's Taxonomy-based examination, which has questions fostering innovation and critical thinking. All of this was done during the pandemic. We have two Guinness Book of World Records now. We trained 1.2 lakh students in a [programming] language called Python; [a] face-recognition system was taught to 1.2 lakh students in 24 hours. We have not shut our eyes to what is going on. We did much better than how we did in a non-pandemic time during the previous year.

Can you talk a little bit about the AICTE's open and distance learning (ODL) and the online education guidelines of 2021?

In terms of online and ODL education, the AICTE is clear that any course which requires a lot of laboratory experiments or hands-on work is not going to be allowed in this online mode. We [have], however, permitted computer applications and management [courses] in online mode. We added courses like travel and tourism to the list last year. Then we expanded it this year to include logistics, AI and data science. We are still not allowing courses like civil, electrical, mechanical or aerospace engineering in distance or online mode.

How have the enrolment figures of engineering courses been affected by Covid-19? Can you share some data?

I do not have the exact data, but, perhaps, 5 per cent, plus or minus. That is the nature of variation in the last four or five years. The total number of students entering engineering has not been increasing. That is a truth, but they are not decreasing.

They are actually getting divided into two different types of institutions. Previously there were only a few private universities or deemed-to-be universities. Most of the institutions with engineering seats were in affiliated colleges. But with a large number of private universities and many deemed universities expanding their number of seats, the intake has spread out. There are institutions which have engineering seats with a capacity of 10 to 12 colleges. So naturally, if there are such large institutions, they will absorb most of the students, and the affiliated colleges get affected and it [causes] an impression that there are less admissions.

The data which we receive about admissions in engineering are from the affiliated colleges. So it looks like there is a decrease in the number of engineering admissions, but, overall, actually it is almost steady. With the pandemic, many people lost their jobs and could not pay the fees for their children. So maybe 5 per cent to 10 per cent less admissions would have happened. But, this time I have found that many philanthropists are coming forward and are saying that they will take care of the fees of students who cannot afford it. This is a good sign of giving back to society.

And placement? How has that suffered?

Placement figures, of course, have reduced a little bit because many companies were not fully running during the lockdown. Even internships have been affected because the number of companies which allow students on their premises decreased. And like education, internships have also gone online.

But, I am very happy that two major IT companies have taken in 40,000 students from engineering colleges. So it is not as bad as what we were expecting. Once industrial activity gets back at full throttle, I am sure there will be a huge requirement of jobs and students will get placements.

What about new programmes and technologies introduced in the last one year? Any area or discipline which is now being given a push or an increased focus?

We have identified areas where emerging technologies will play an important role. They are all available as minor degrees. AI, data science, robotics, 3D printing, augmented reality, virtual reality, quantum computing, cloud computing, cyber security and data analytics. If you have a combination of AI and data science, the opportunities will double.

The March 12 guidelines call for removal of physics, chemistry and mathematics as a mandatory requirement for admissions to engineering courses. This led to widespread debates. Your comments.

We have not said that physics, chemistry and mathematics are not required. This is absolutely untrue. Prior to 2005, physics, chemistry and mathematics were mandatory for engineering admissions. But, since 2005, chemistry was made optional at the time of entry. Courses such as biology and computer programming were added as alternatives. Nobody possibly noticed this and very few made use of this flexibility and thus nobody practiced it either. Very few institutions probably allowed students to join engineering programmes without chemistry. These subjects were the basis of entrance exams and may continue to be for the next whatever number of years.

We [also] added courses like graphics, drawing and vocational subjects or courses which are akin to engineering or science. Today, there are 14 such subjects at the Class 12 level which students can study to opt for engineering courses. The new education policy speaks about flexibility, multiple levels of entry and exit. If we do not open it up to the ones who may not have studied chemistry or physics in school, then that is not right. And that is where this policy is absolutely inclusive. This is giving choice to students. This is also autonomous in terms of allowing students to learn whatever they want to. There are many people in rural areas who do not know what engineering is all about. There is no science stream available in some remote areas and hence students might have missed maths or physics. Why are you stopping them if they have talent? In fact, one of the suggestions which we have often been making is that we must test aptitude rather than knowledge of physics, chemistry, or maths, which can be always taught in the engineering colleges. In fact, science and maths faculty in engineering colleges are far more qualified to train students. There are many maths, physics, chemistry and even biology courses in the AICTE's model curriculum. Thus, no student will be able to move ahead in engineering education without doing the requisite levels of maths, physics and chemistry. These are the foundations on which the entire edifice of engineering is built.

Read the original post:
We did much better than how we did in a non-pandemic year - THE WEEK

Kicking dissent out of social media: Does it hurt or help? – The Citizen

By Sam Wambugu

In January this year, the world was outraged to see the American democracy shaken when a rowdy mob invaded the Capitol baying for the blood of leaders in Congress and government.

Many people point an accusing finger at then-President Donald Trump for fanning the flames of dissent, which boiled over on January 6. Subsequently, Mr Trump was banished by several social media outlets. His curated content and profile were removed.

Although social media had expelled other people before President Trump, his removal from several social media platforms was the most notable. His eviction from social media sites led to an explosion of the use of the term deplatform a verb meaning to deny someone or an institution the ability to post on social media. Thus, it is simply an eviction from the platform.

Eviction from social media occurs when its owners deem the posted content unacceptable and going against the terms of service of the platform. The evicted person or institution is regarded dangerous to the society.

Deplatforming can also include removing cloud infrastructure providers, domain name providers, and other web-related services from the unwanted group. It may also involve not just banning the user or discontinuing his services, but also removing any existing content the user previously created on the site or service.

Deplatforming people is meant to cut their ability to communicate with the public using social media tools. But do they lose that ability? The public is divided on this issue. Some raise ethical concerns. They see deplatforming as a ploy to curtail free speech. Others see it as an effective strategy to reduce hate speech and calls for violence on social media.

Whether deplatforming reduces the level of hate speech is an issue up for debate. However, people who are deplatformed often become more popular because the announcement to expel them and erase their content causes curiosity, leading to more online searches for their name.

Also, people who are deplatformed are likely to go underground and sign up anew with pseudo names and perpetuate their agenda covertly or use their surrogate to spread their beliefs. For example, people sympathetic to a deplatformed group could build their hosting infrastructure and use it to drive out content.

Monitoring social media is a tough farm to plough. Attempts to monitor people or institutions is a digital version of the hide-and-seek game, with the social media surveillance apparatus chasing ghost profiles.

Unlike traditional media such as radio and television governed by rules and regulations, social media cannot strictly be monitored, and offenders quickly nabbed and punished.

And laws are difficult to enforce for the billions of people on the internet, some of whom have sophisticated tools to evade online traps laid for them.

This leaves countries in a conundrum damned if they deplatform. Damned if they dont.

---------------------------------------

SamWambungu is an Inforrmatician[emailprotected]Twitter: #Samwambugu2

Continued here:

Kicking dissent out of social media: Does it hurt or help? - The Citizen

Researchers say they have unmasked a major QAnon influencer | TheHill – The Hill

Researchers at the intelligence firm Logically said Tuesday that they have identified an influential figure in the QAnon conspiracy community who pushed dangerous narratives about coronavirus and child trafficking.

In a new report, researchers linked the Twitter handle qthewakeup to Jeremy J.J. Sicotte, a documentary filmmaker.

The account amassed over 140,000 followers on Twitter before being banned during one of the platforms sweeps of QAnon-related accounts last year.

Sicotte denied taking part in the account when reached for comment by Logically. The Hill was unable to reach Sicotte.

Qthewakeup played an influential role in spreading the false theory that Wayfair was selling trafficked children along with expensive furniture and was identified among a key cluster of accounts pushing the Plandemic conspiracy that coronavirus is a creation of governments aiming to complete authoritarian takeovers.

Accounts associated with qthewakeup also developed significant followings on Instagram and YouTube before being removed over the last year.

A qthewakeup channel that uses similar branding to the former Twitter account is active on the messaging service Telegram, but has less than 1,500 subscribers.

Researchers at Logically said they hope that unmasking qthewakeup will reducethe account's influence and dissuade it from boosting dangerous theories.

In cases where accounts evade deplatforming or rebrand, theres value in taking away that anonymity, especially when it's being weaponized to push harmful information, lead investigator Nick Backovic told The Hill.

In some cases [anonymity] means they straight-up can lie about their identity, he continued. In other cases, because they are shielded from accountability it allows them to post stuff that is more daring, more extremist and that makes the harmful content more dangerous.

Researchers said they initially were investigating the Twitter account because of inconsistencies in the type of content it was posting but quickly found links to prominent QAnon figure Jordan Sather, who said in posts that the person running qthewakeup was a male friend who helped him film "Above Majestic," a 2018 documentary with heavy conspiracy themes.

Logically found that the accounts handle was jjfromjupiter when it was created in 2009, which researchers said appears to be a reference to Sicottes band at the time. Sicotte is a graduate of the BerkleeCollege of Music.

Researchers said that analyzing interactions with the account ultimately led them to Sicotte. They were able to verify that the Twitter account was registered to a phone number and email belonging to Sicotte.

Sicotte told Logically that Sather had used his information for the account. Sather saidhe made the account, but declined to explain the earlier activity on it when contacted by Logically. He had said in a video on his Rumble channel this year that he would be starting a podcast soon with a friend who ran qthewakeup.

The Hill reached out to Sather for further comment.

Thereport comes as many segments of the conspiracy community have moved away from QAnon branding. The shadowy figure known as Q, who alleged that former President TrumpDonald TrumpChinese apps could face subpoenas, bans under Biden executive order: report Kim says North Korea needs to be 'prepared' for 'confrontation' with US Ex-Colorado GOP chair accused of stealing more than 0K from pro-Trump PAC MORE was working to expose a global network of Democratic elites and media figures trafficking children, has not posted on the image boards they crafted the theory on for several months.

While some of the most clearly QAnon elements have faded, the broader anti-institutionalist and anti-democracy movement borne out of the theory appears to be growing in strength and following.

Previous unmaskings of QAnon influencers have led to changes, researchers say.

After a Logically investigation revealed the identity of the individual behind QMap, a heavily trafficked site that compiled Qs posts, the website was taken down.

Sicotte most recently produced a film about hospice care called Death Is But a Dream that was released earlier this year.

See original here:

Researchers say they have unmasked a major QAnon influencer | TheHill - The Hill