Circars Bistro, Visakhapatnam’s newest American and continental dining space, offers a smorgasbord of offerings for the palate

1. Live coverage: SpaceX to launch 20 Starlink satellites on Falcon 9 rocket from California  Spaceflight Now
2. SpaceX morning rocket launch in Cape Canaveral: What time is liftoff of Starlink satellites?  Florida Today
3. SpaceX rocket launches Koreasat-6A satellite, lands Falcon 9 booster on record-tying 23rd flight (video)  Space.com
4. Launch Roundup: Falcon 9 launches customer payloads, China to fly resupply mission to Tiangong  NASASpaceflight.com
5. SpaceX launches and lands Falcon 9 rocket deploying 24 Starlink satellites  KTLA Los Angeles

1. Last Supermoon Of 2024 Emerges This Week—Here’s What To Know About The ‘Beaver’ Moon  Forbes
2. November supermoon will rise this week, and here's why it's so special  NBC Chicago
3. The Next Full Moon Will Be the Last of Four Consecutive Supermoons  Science@NASA
4. Beaver Moon 2024: See the final 'supermoon' of the year rise next to the 'Seven Sisters'  Livescience.com
5. Be sure to catch this week's full supermoon, the last one for a year  MLive.com

1. NASA's Jet Propulsion Lab laying off 5% of its workforce  Space.com
2. JPL Workforce Update  NASA Jet Propulsion Laboratory
3. NASA’s JPL to cut 325 positions amid budget tightening  The Pasadena Star-News
4. NASA's Jet Propulsion Lab announces hundreds of layoffs: 'Painful but necessary'  Fox Business

1. Horoscope for Wednesday, November 13, 2024  Chicago Sun-Times
2. Horoscope for Wednesday, 11/13/24 by Christopher Renstrom  SFGATE
3. Horoscope for November 13, 2024: Today's cosmsic energy brings luck to these zodiac signs  Hindustan Times
4. Your Daily Horoscope by Madame Clairevoyant: November 13, 2024  The Cut
5. Linda Black, what’s my horoscope today? Scorpio, listening helps avoid stupid arguments (11/13/24)  MLive.com

1. Israel's West Bank settlers hope Trump's return will pave the way for major settlement expansion  ABC News
2. Ex-Trump aides warn Israeli ministers not to assume he’ll back annexation in 2nd term  The Times of Israel
3. This Is How Netanyahu Will Annex the West Bank  Haaretz
4. Eyeing Trump support, Israeli minister pushes for West Bank settlement annexation  CNN

1. US defense contractor to pay former Iraqi detainees $42 million for its role in torture at notorious Abu Ghraib prison  CNN
2. Abu Ghraib torture survivors win US civil case, $42m damages  Al Jazeera English
3. US jury awards $42m to ex-detainees at Iraq's Abu Ghraib  BBC.com
4. How a Troy lawyer convinced U.S. jury to award $42 million to 3 Iraqi prisoners  Detroit Free Press
5. U.S. Jury Awards $42 Million to Iraqi Men Abused at Abu Ghraib  The New York Times

1. How will Donald Trump’s plans for education affect Chicago Public Schools?  Chicago Tribune
2. Trump pledged to close the Education Department. What would that mean?  The Washington Post
3. Could Donald Trump eliminate the Department of Education?  WCNC.com
4. So You Want To Abolish The Department Of Education? Here’s What You Need To Know.  Forbes

1. Special Counsel Jack Smith plans to resign, file report before Trump can fire him: report  Fox News
2. Jack Smith expected to resign ahead of Trump inauguration  WAVY.com
3. Special counsel Jack Smith plans to retire before Trump takes office: report  New York Post

Overcome fear and get comfortable with discomfortIt can certainly be challenging and a little scary to step out of your comfort zone, but facing unfamiliar challenges can help you feel happier and more fulfilled in the long run. You can end up discovering a lot about yourself and your abilities when you make an effort to take risks and try new things. To help you begin this transformation, we’ve rounded up the best, most effective strategies for stepping out of your comfort zone, embarking on new adventures, and expanding your personal horizons.

Data gathered from several consulting firms by HT Digital indicated that Bengaluru has maintained its position as the top option for non-resident Indians wishing to invest in India’s residential real estate market, particularly those seeking affordable and mid-segment homes.  The … Continue reading →

This budget’s extensive measures demonstrate the government’s dedication to the real estate industry’s overall growth, which makes it a major driver of the country’s economic expansion.  The Finance Minister, Nirmala Sitharaman, unveiled the 2024 Union Budget, which includes some ground-breaking … Continue reading →

Property owners may face serious legal and financial ramifications if they fail to pay their property taxes. Therefore, timely paying such taxes is necessary to continue taking advantage of the municipal amenities. Owners must take immediate action if a property … Continue reading →

North Goa may be the best option if you want to invest in real estate in Goa and make significant profits. The area is an investment-friendly destination because it attracts large numbers of tourists year-round and because properties such as … Continue reading →

Godrej Properties Ltd has announced the acquisition of a roughly 46-acre land parcel in Indore. According to the company’s July 31 regulatory filing, the development on this land will mostly consist of plotted residential units and offer an estimated saleable … Continue reading →

The Delhi-Alwar Regional Rapid Transit System (RRTS) is currently under construction and will link Delhi with the outlying satellite towns of Manesar, Rewari, and Alwwar. It will also link Delhi Metro’s four lines. Ten kilometers of the route are currently … Continue reading →

The Beats Solo 4 features enhanced sound quality, up to 40 hours of battery life, and seamless Apple device integration. These on-ear headphones combine style with premium audio performance in a striking Cloud Pink finish. Reasons to Buy What Makes It Stand Out The Solo 4 improves upon its predecessor with enhanced audio quality and stronger build […]

The Epson EcoTank ET-2800 features cartridge-free printing with supersized ink tanks and wireless connectivity. This all-in-one printer delivers exceptional value with up to two years of ink included in the box. Reasons to Buy What Makes It Stand Out The ET-2800 revolutionizes home printing with its refillable ink tank system. The included ink equivalent to about 90 […]

The Samsung EVO Select 1TB microSD features ultra-fast 160MB/s transfer speeds, comprehensive device compatibility, and Samsung’s 6-proof protection system. This high-capacity card provides reliable storage for mobile devices, gaming consoles, and cameras. Reasons to Buy What Makes It Stand Out The EVO Select combines massive storage with Samsung’s reliability. The included full-size SD adapter extends compatibility to […]

The XFX SPEEDSTER MERC319 features 16GB GDDR6 memory, advanced RDNA 3 architecture, and premium triple-fan cooling. This high-performance graphics card delivers excellent 1440p and 4K gaming capabilities. Reasons to Buy What Makes It Stand Out The MERC319 model represents XFX’s premium cooling solution. The triple-fan design and extended heatsink ensure lower temperatures and quieter operation compared to […]

The Nikon Z50 Two Lens Kit features a 20.9MP DX-format sensor, 4K video capabilities, and two versatile zoom lenses. This mirrorless camera kit provides a complete solution for both photography and videography. Reasons to Buy What Makes It Stand Out The Z50 combines Nikon’s mirrorless technology with a practical two-lens solution. The included VR (Vibration Reduction) lenses […]

The Sony XG300 Portable Speaker features IP67 waterproofing, powerful X-Balanced speakers, and up to 25 hours of battery life. This premium speaker combines durability with Sony’s signature sound quality. Reasons to Buy What Makes It Stand Out The XG300 delivers exceptional sound through Sony’s X-Balanced speaker units and dual passive radiators. The combination of MEGA BASS, ClearAudio+, […]

Doors are usually mundane, but these 16 different doors all hide terrible secrets behind them. Or do they?

Trump's flying car initiative gains momentum as UFO expert Dr. Michael Salla signals potential involvement, bringing advanced aerospace expertise to ambitious urban development plan.

A federal judge in Washington yesterday ordered the Interior Department to shut down most of its employees' Internet access and some of its public Web sites after concluding that the agency has failed to fix computer security problems that threaten...

Summary: The abundance of X.509 certificate authorities who already perform identity proofing for businesses provides a rich resource that can be leveraged to boot the verifiable data ecosystem.

When you used a verifiable credential to prove something about yourself, the verifier can know cryptographically: (1) the identifiers for the issuer, (2) the credential hasn't been tampered with, (3) the credential was issued to you, and (4) the credential hasn't been revoked. These four checks are important because their establish the fidelity of the data being transferred. They don't, however, tell them whether they can trust the issuer. For that, they need to take the issuer's decentralized identifier (DID) that they got from credential presentation and determine who it belongs to.

At the most recent Internet Identity Workshop, Drummond Reed gave a session on how X.509 certificates could help with this. The first step, like always, is to resolve the DID and retrieve the DIDDoc that associates keys and endpoints with the DID. The endpoint can be an HTTP server and, of course, should have an X.509 certificate providing TLS security. That certificate, at the very least, has a a domain name to bind that to the certificate's public key. It can, if you pay for the feature, also include information about the entity that applied for the certificate. The certificate authority proofs that information and is vouching for it when they sign the certificate.

The key to making the X.509 certificate useful for checking the provenance of a DID lies in one key change. X.509 certificates can contain and extended field called a Subject Alternative Name. This following figure shows how it can help.

In this figure:

1. The issuer (Attestor) creates the DID they will use to issue the certificate along with its associated DIDDoc, including an HTTP endpoint for DID verification.
2. Attestor applies for a X.509 certificate for that endpoint, including in the application the DID they created in (1).
3. The certificate authority does it's usual proofing of the application and issues a certificate that includes the DID in the Subject Alternative Name field.
4. The issuer creates a credential definition in the usual way that includes their DID and writes it to whatever Verifiable Data Registry their DID method dictates.
5. Attestor issues a credential to a holder (Alice) using that credential definition.
6. At some later time, Alice presents the credential to the verifier (Certiphi).
7. Certiphi resolves the DID to get the DIDDoc and retrieves the verfication endpoint from the DIDDoc
8. Certiphi retrieves the certificate for that endpoint¹.
9. Certiphi verifies the certificate by checking it's signature and ensures that the DID in the DIDDoc for the credential matches the one in certificate.²

The issuer's DID has now been tied in a verifiable way to whatever information is in the certificate. Provided the certificate includes information about the entity beyond the domain name, the verifier can use that information to determine whether or not the credential is authentic (i.e., issued by who the credential definition purports issued it). That might be all the evidence they need to determine whether to trust the entity. Certificate authorities could also issue verifiable credentials to the customer attesting the same verified claims—after all, it's one more product they can offer.

The benefit of doing issuer validation using X.509 certificates is that there are already many trusted X.509 certificate authorities in business who already do proofing of attributes about businesses. That's a huge chunk of the verifiable data ecosystem that doesn't need to be built because it can be leveraged. To make this work, digital certificate authorities would need to start offering to validate DIDs and include them in a certificate as a Subject Alternative Name. I don't discount that this will take some bureaucratic maneuvering. Certificate authorities will need to see a business opportunity. I'd love to see Digitcert or someone do a pilot on this.

Notes

1. Note that this step might be combined with the previous step if the Verifiable Data Registry is the same server as the endpoint, but that's not necessarily going to be the case for a number of reasons.
2. Note that this does not create a call back wherein Attestor can determine which credential was used, preserving the privacy of the presentation. Attestor does know one of its credentials has been presented to Certiphi. If this information leakage bothers you, then any web-based DID method is potentially a problem.

Tags: identity ssi decentralized+identifiers verifiable+credentials x.509

Summary: We know that LLMs hallucinate. And we know that we can overcome some of that problem with better prompts. But can LLMs provide references for their work? I conducted an experiment.

Recently my friend Scott Mace asked this on X in response to a post about the evolution of software and how LLMs will likely follow that same trajectory:

Yes, but how trustworthy will it be? Can I at least see the links it used to create its response?

From X
Referenced 2024-05-21T18:09:06-0400

The short answer is "no", but the real answer is a bit more nuanced because of how LLMs like ChatGPT work. First the short answer: LLMs don't understand what they're saying so they can't reference the material that it used to create a response. They don't work like that. They don't go out, do a bunch of research and then create a response. Instead lots (and I mean LOTS) of material is fed into the program that creates the model, a multi-dimensional matrix of word orders. Then when you ask a question ("give it prompt" in LLM-speak), it processes the question and generates text based on the probabilities of words in its model¹. There's no way it can satisfy Scott directly because the model doesn't—can't, as far as I know—include the references that it used to create the text because it's generating it on the fly from material that has been thoroughly blended together.

But, in fairness, that's not what people do most of the time either. If you asked me over lunch or at the end of a tech presentation to describe zero trust and its pros and cons, I'd start talking. I wouldn't start looking up things on the web and somehow weave them into text complete with references. I'd go look for references if you asked me to back up something I said. So, let's try that with ChatGPT 4o. I gave it the following prompt:

You are a writer for a website focusing on technology. Your specialty is security. Write a 150 word explanation of zero trust with three pros and three cons.

ChaptGPT answered with this text:

Zero Trust is a security model based on the principle of "never trust, always verify." Unlike traditional security models that assume everything inside the network is safe, Zero Trust assumes that threats can exist both inside and outside the network. It requires strict identity verification for every user and device attempting to access resources, regardless of their location.

Pros:

1. Enhanced Security: By continuously verifying users and devices, Zero Trust reduces the risk of breaches and unauthorized access.
2. Minimized Attack Surface: It limits access to only what is necessary, reducing potential entry points for attackers.
3. Improved Compliance: Helps meet regulatory requirements by ensuring strict access controls and logging all access attempts.

Cons:

1. Complex Implementation: Deploying Zero Trust can be complex and time-consuming, requiring a significant overhaul of existing systems and processes.
2. Increased Costs: The initial investment in technology and training can be high.
3. User Experience Impact: Continuous verification can lead to friction and inconvenience for users if not implemented smoothly.

Zero Trust is essential for modern cybersecurity, but it requires careful planning and resources to implement effectively.

That's pretty good. But what if we need some references to other material to back up the pros and cons? I asked ChatGPT to supply them:

Now repeat that task, but this time include references as hyperlinks to back up each pro and con.

ChaptGPT answered with this text:

Zero Trust is a security model based on the principle of "never trust, always verify." Unlike traditional security models that assume everything inside the network is safe, Zero Trust assumes that threats can exist both inside and outside the network. It requires strict identity verification for every user and device attempting to access resources, regardless of their location.

Pros:

1. Enhanced Security: By continuously verifying users and devices, Zero Trust reduces the risk of breaches and unauthorized access (CSO Online).
2. Minimized Attack Surface: It limits access to only what is necessary, reducing potential entry points for attackers (NIST).
3. Improved Compliance: Helps meet regulatory requirements by ensuring strict access controls and logging all access attempts (Gartner).

Cons:

1. Complex Implementation: Deploying Zero Trust can be complex and time-consuming, requiring a significant overhaul of existing systems and processes (Forrester).
2. Increased Costs: The initial investment in technology and training can be high (ZDNet).
3. User Experience Impact: Continuous verification can lead to friction and inconvenience for users if not implemented smoothly (TechRepublic).

Zero Trust is essential for modern cybersecurity, but it requires careful planning and resources to implement effectively.

That looks great! Nice references for each bullet. There's just one problem. All the links, except the NIST reference, are dead. I don't know if they're wrong, made up, or stale. I tried finding content on a few of the sites by searching and came up dry. As I heard Johannes Ernst say once, ChatGPT is a "large language model" not a "large fact model" and this bears that out.

Still, asking for references or evidence for statements is something people are going to want. So, I tried a different tack. This time I asked this:

Why do you say complex implementation is a problem for zero trust? Can you give me a few references on that I can read myself?

ChatGPT responded with this:

Implementing a Zero Trust security model can be challenging for several reasons:

1. Overall Complexity: Zero Trust requires a comprehensive understanding of your network's intricacies, including users, devices, applications, and data. This can involve significant changes to existing infrastructure, which can be disruptive and costly. Organizations need to be prepared for the extensive planning and resources required for successful implementation​ (Help Net Security)​​ (Enterprise Networking Planet​).
2. Legacy Systems: Many organizations have legacy systems that are not designed to operate within a Zero Trust framework. These systems might require different security measures or even complete replacement, adding to the complexity and cost (Help Net Security)​​ (Enterprise Networking Planet​)
3. Cultural Shift: Zero Trust is not just a technological shift but also a cultural one. It requires continuous verification and strict access controls, which can lead to user frustration and resistance if not managed properly. Ensuring user buy-in and minimizing disruption to workflows through training and communication is essential (Deloitte United States)​​ (Guidehouse).
4. Resource Intensive: Implementing and maintaining Zero Trust can put a strain on IT resources due to the need for continuous monitoring and management. The need for advanced security tools and ongoing updates further adds to the resource demands (Help Net Security)​​ (Enterprise Networking Planet​).
5. Stakeholder Alignment: Achieving buy-in from all stakeholders and aligning them with the Zero Trust principles is critical. This requires a coordinated effort to educate stakeholders, prioritize gaps, and ensure consistent understanding and application of Zero Trust principles across the organization (Deloitte United States)​​ (Guidehouse).

These challenges highlight the importance of a phased and well-planned approach to Zero Trust implementation, considering both technological and human factors. For more detailed insights, you can refer to articles from Help Net Security and Guidehouse.

Much better. The links in the bullets all work, but the ones at the end don't. The articles it references aren’t very detailed, so I wouldn’t say they’re stellar references, but at least there’s a pointer to outside material that discusses similar challenges. So, partial success.

I've found that when you're using ChatGPT to do research, treating it like a librarian and asking questions that follow up are the best way to gain confidence that the material is correct and find the supporting material, just as I did above. I'm sure you could wrap additional helper functions around an LLM to make getting references easier. But for now interrogation through chat is the best way to get comfortable with the results.

Notes

1. Yeah, this is really simplified and thus wrong, but it's directionally correct. For a better explanation, see What Is ChatGPT Doing … and Why Does It Work?.

Photo Credit: Older Man Talking to Robot Librarian from DALL-E (public domain) Prompt: draw me a rectangular picture of an older man talking with a robot librarian. Use earth tones.

Tags: genai llm chatgpt prompt+engineering

Roberto J. Rodriguez, et al., Office of Educational Technology, Nov 13, 2024

This is a longish (79 page PDF) resource from the U.S. government's Office of Educational Technology. "The Department heard educators say that AI is here to stay, AI will keep changing, and safely integrating AI in educational settings will require informed leadership at multiple levels across the education system." The toolkit is divided into three sections: migitating risks, strategy for AI integration, and guiding its use. The risks considered include privacy and data security, student civil rights, accessibility, and digital equity. The second section is weaker, focusing on the 'instructional core' (credited to Elmore, but basically Moore (1989)), with a corresponding focus on instruction. The third section begins with a discussion of AI literacy (limited to "includes the knowledge, skills, and attitudes needed to engage with AI safely") and promotion of "responsible use". 

Vinay K. Chaudhri, The Hechinger Report, Nov 13, 2024

This is an idea straight from the 50s but expect to see more of the same as companies wrestle with how to make their publications relevant in the age of AI. Vinay K. Chaudhri beghins with a reaffirmation of the importance of textbooks (as "a carefully curated body of knowledge... nearly 100 percent accurate... (and) the view of an expert educator"). Needed now, though, is "authoring textbooks so that their concepts can be read as computer code." How? Back to the 50s - a controlled vocabulary. "Textbooks, using the discipline of knowledge engineering, can support the curation, preservation and learning of all forms of human knowledge." Next up? I guess it would have to be the unification of the sciences.

Lisa Janicke Hinchliffe, The Scholarly Kitchen, Nov 13, 2024

We expect The Scholarly Kitchen to represent the publishers' point of view, since that is its intent, but in this case it ventures into the realm of pure propaganda. No open access charges subscription fees to readers. In 'Gold' open access, publishers charge authors 'article publication fees', while in 'Green' open access no such fees are charged. So how is there a "cost" to readers? According to this article, it's in the time and effort it takes to find the 'version of record' of an article as compared to what is found in typical 'green' venues such as preprint repositories. This argument, of course, assumes readers want to find the 'version of record', and the author is ready with a 'fear, uncertainty, doubt (FUD)' argument. The author also argues that green versions are hard to find, compared to gold versions, ignoring such services as Unpaywall that index open access articles.

For the fifth consecutive year, the Accenture and MIT Digital Government Awards are showcasing technology breakthroughs that deliver public sector...

It's Christmas. See the cool search tool set that Santa has left under the tree for you and your website!

The General Services Administration is now offering at their Section 508 site their free STEP508 software to help government agencies...

ITS has recently polled State agency developers for their ideas for a more collaborative eDG site that will better serve...

Governor Olene Walker has announced that the Utah State Advisory Council on Science and Technology is accepting nominations for the 2004 annual Governor's Medal for Science and Technology Award. The awards recognize individuals who have made a significant impact and contribution to science and technology in the State of Utah.

Congress enacts open government legislation in three main areas: (1) laws that provide public access to federal records; (2) laws that allow the government to restrict public access to federal information; and (3) laws that provide for congressional access to federal records. A new 90-page Congressional Report by Rep. Henry A. Waxman provides a comprehensive, though arguably partisan, examination finding the Bush Administration has acted to restrict the amount of government information that is available.

I bet you’re wondering why I’ve taken you to the softly-lit terrace of this 5-star restaurant at sunset, and hired this string quartet to play while we eat… With this Annual Hosting Plan, you’ll get a free .com domain, and a free webmail account. Plus, you’ll get the best hosting support you’ve ever experienced, and […]

Innovators in the field of space solar power are outperforming expectations for commercial application, motivated by the potential for harvesting solar energy on a 24/7 basis, unimpeded by weather or climate.

The post A 30-Megawatt Space Solar Power Plant Is Scheduled For 2030 appeared first on CleanTechnica.

In an unprecedented move some months ago, Ethiopia became effectively the first country in the world to ban the import of internal combustion engine vehicles. That ban was not some futuristic target for 2030 or 2035. It was an immediate ban on the import of ICE cars, with no exceptions. ... [continued]

The post Inchcape & BYD Partner In New Distribution Agreement For Ethiopia! appeared first on CleanTechnica.

I recently came across a social media post that puts solar energy in an interesting perspective: energy that everyone can possibly harness. This not only applies to most of the planet, but provides a very simple way to visualize a way forward to providing everyone with needed energy. Sunlight is ... [continued]

The post Can The Sun Become A Form of Universal Basic Income? appeared first on CleanTechnica.

These days, it seems like everyone is into emergency preparedness, or at least wants to think they are. Whether it’s a fear of natural disasters, the communists, the fascists, or even the space aliens, there is no shortage of content these days on social media, blogs, and YouTube. But, we ... [continued]

The post E-Bikes For Preparedness appeared first on CleanTechnica.

The US Department of Defense is pursuing next-generation geothermal energy systems that can produce zero emission electricity and green hydrogen, too.

The post US Air Force Pursues Green Hydrogen Via Geothermal Energy appeared first on CleanTechnica.

By Kyle Julian, Regional Director, Commercial & Industrial Sales, U.S. West Without data centers, life as we know it would collapse. That may sound like hyperbole, but our entire digital economy relies on data centers. But it turns out that data centers use a lot of electricity. In fact, the ... [continued]

The post Behind the Curtain: Power Grid Resilience for Data Centers appeared first on CleanTechnica.

This Luckeep X2 Stormtrooper E-Bike is Awesome We’ve tested a lot of electric bikes. I like some for certain reasons, others for other reasons, and some I really don’t care for much at all. I have to say that one thing I’ve found over the years is that e-bikes seem ... [continued]

The post Exploring the Luckeep X2: A High-Performance Urban E-Bike for All Terrains appeared first on CleanTechnica.

Toyota is already complaining about the state of California and CARB as it seems an opportunity to shove its point of view down our throats.

The post Toyota Exec Says California ZEV Goal Is Impossible To Achieve appeared first on CleanTechnica.

This is the first of a five-part series of articles where I look at the best affordable EVs in each size category. There are plenty of good EVs right now, but one of the main challenges continues to be their price and how much more expensive they are compared to ... [continued]

The post Best Value for Money EVs — City Cars (A Segment) appeared first on CleanTechnica.