Dia daoibh! Tá Gaeilge againn! – Microsoft Translator Blog

Microsoft Translator adds Irish as a new language.

Irish language support

Our ongoing mission to break down language barriers continues with Irish: Today, we have added Irish Gaelic to Microsoft Translator. Irish Gaelic, usually referred to as the Irish Language or just Irish, and commonly known in Irish itself as Gaeilge (pronounced “gwael-guh”), is the latest addition to the Microsoft Translator family of languages. This brings Irish to all scenarios powered by Microsoft Translator, including Custom Translator, which helps customers to build translation systems for domain-specific terminology and style.

Neural machine translation technology has recently achieved impressive quality gains, characterized by highly fluent and accurate output, even for low-resourced languages such as Gaeilge. Using deep learning, we have iteratively refined our machine translation models. With today’s release, our commitment to deliver high-quality machine translation for Gaeilge moves to the next stage, as we prepare to continuously improve translation quality based on feedback from our users.

The Irish Language 

Irish is an official language of the country of Ireland, and also has official status in the European Union. It is classified as a Celtic language, a family of languages that includes Welsh, Scottish Gaelic, Breton, Manx, and Cornish, first appearing over 2,500 years ago. Irish is spoken as a first language in a number of regions of Ireland and taught in all schools across the country.

Professor Andy Way, head of the MT-team at the ADAPT Research Centre Ireland, shared his support by stating” We are very pleased to hear of the launch of Microsoft’s new neural MT system for Irish.” His colleague, Dr. Teresa Lynn, Research Fellow specializing in Irish language technology at ADAPT, added “Microsoft’s launch of their Irish-language NMT system is wholly complementary to the work we have been doing in the ADAPT over the past few years towards improving Irish machine translation in public administration. With this new release, the wider Irish language community now have the opportunity to enjoy the benefits of advanced language technology.” Likewise, Cllr. Peter Kavanagh, Green Party Irish Language Spokesperson and Co-founder of Pop Up Gaeltacht, said “It’s very positive to see Microsoft launching an Irish language machine translation engine.”

Irish Gaelige is available now, or in the next few days, on all Microsoft Translator apps, add-ins, Office, Translator for Bing, and through the Azure Cognitive Services Translator API for businesses and developers.

What you can do with Microsoft Translator

Translate real-time conversations, menus and street signs, websites, documents, and more using the Translator app for Windows, iOS, Android and the web. Use the Microsoft Translator Text and Speech API, both members of the Azure Cognitive Services family, to help globalize your business and customer interactions. Create a more inclusive classroom for both students and parents with live captioning and cross-language understanding.

For more information on Microsoft Translator please visit: https://www.microsoft.com/translator/.

Go raibh míle maith agaibh go léir!

Go to Original Article
Author: Microsoft News Center

Wanted – G-sync compatible monitor (ideally IPS)

https://www.asus.com/uk/Monitors/ROG-SWIFT-PG279Q/ Treat myself to an LG 55″ OLED for my gaming PC so now have my 1440p Monitor to go. Bought Feb 2016 from scan. Will need collection, no box now. Can test and see running on collection. Will post photos if any interest. Great condition.

Go to Original Article
Author:

For Sale – 3 x New Philips Hue Hubs

1 remaining x New and unused Philips Hue Hubs

New & Unused
Version 2.1
Comes with Original New & Unused PSU

£24.00 Each inc delivery.

Location
Wiltshire
Price and currency
£24
Delivery cost included
Delivery Is Included
Prefer goods collected?
I have no preference
Advertised elsewhere?
Not advertised elsewhere
Payment method
PayPal Gift or Cash On Collection
  • Hubs.jpg

    158.1 KB Views: 25

Last edited:

Go to Original Article
Author:

Announcing Windows 10 Insider Preview Build 19551 | Windows Experience Blog

Hello Windows Insiders, today we’re releasing Windows 10 Insider Preview Build 19551.1005 to Windows Insiders in the Fast ring. If you want a complete look at what build is in which Insider ring, head over to Flight Hub. You can also check out the rest of our documentation here, including a list of new features and updates. 
Not seeing any of the features in this build? Check your Windows Insider Settings to make sure you’re on the Fast ring. Submit feedback here to let us know if things weren’t working the way you expected.  

We’re continuing to look at ways we can improve the update experience on Windows 10 PCs for our customers. As part of this effort, we are conducting an experiment related to how we deliver driver updates through Windows Update. During this experiment, drivers categorized as “optional” will not be automatically downloaded and installed on Windows Insider’s PCs running Build 19536 and newer. To install any new optional drivers available for a PC that’s involved in this experiment (including drivers for new devices that might get plugged in to a PC), Insiders can go to Settings > Update & Security > Windows Update > View optional updates and manually download these drivers. This experiment will be running now through March 5th, 2020.

We fixed an issue resulting in snipping not working on secondary monitors.
Thank you for reporting that the Optimize Drives Control Panel was incorrectly showing that optimization hadn’t run on some devices. We’ve fixed it in this build.
We’ve fixed an issue causing Remote Desktop Connection crashes when attempting to connect to multiple sessions.
We’ve made a server-side fix to address the issue causing Narrator Home to crash when selecting the “What’s New” button in Narrator Home.
We fixed an issue that could result in the language defaults listed at the top of Language Settings unexpectedly being blank.
We’ve done some work to help address feedback reports that screenshots (WIN+Shift+S) pasted into Outlook would be unexpectedly large.
We fixed an issue where, if you’d changed the candidate pane font for the Pinyin IME, it would be reset back to default after you reboot your PC.
We fixed an issue resulting in the “Safely Remove Hardware” icon in the notification area sometimes unexpectedly drawing in white (making it unreadable) when using light theme.

BattlEye and Microsoft have found incompatibility issues due to changes in the operating system between some Insider Preview builds and certain versions of BattlEye anti-cheat software. To safeguard Insiders who might have these versions installed on their PC, we have applied a compatibility hold on these devices from being offered affected builds of Windows Insider Preview. See this article for details.
We are aware Narrator and NVDA users that seek the latest release of Microsoft Edge based on Chromium may experience some difficulty when navigating and reading certain web content. Narrator, NVDA and the Edge teams are aware of these issues. Users of legacy Microsoft Edge will not be affected. NVAccess has released a beta of NVDA that resolves the known issue with Edge. Further information can also be found in the In Process blog post that goes into more detail about the beta.
The cloud recovery option for Reset this PC isn’t working on this build. Please use the local reinstall option when performing Reset this PC.
We’re looking into reports of the update process hanging for extended periods of time when attempting to install a new build.
We’re investigating reports that some Insiders are unable to update to newer builds with error 0x8007042b.
We’re looking into reports that some Insiders are unable to update to newer builds with error 0xc1900101.
We’re looking into reports of certain external USB 3.0 drives not responding with Start Code 10 after they’re attached.
The Documents section under Privacy has a broken icon (just a rectangle).
The IME candidate window for East Asian IMEs (Simplified Chinese, Traditional Chinese, and the Japanese IME) may not open sometimes. We are investigating your reports. As a workaround if you encounter this, please change the focus to another application or editing area and back to the original and try again. Alternatively, you can go to Task Manager and end the “TextInputHost.exe” task from the Details tab, and it should work afterwards.

Calling all tennis fans! The Australia Open tournament has begun, and Bing wants to keep you in the loop. Check out our Australia Open feature, where you can find information for matches, draws, and top players. Find out who is rank #1, get the results from past matches, and so much more.
If you want to be among the first to learn about these Bing features, join our Bing Insiders Program.

We’re no longer planning to do external testing or a public release of our “Project Catnip PWA” for the Windows Insider Program. Due to some technical limitations, we were not going to be able to offer the experiences we wanted to for Insiders through the PWA. We’re still looking at solutions for some of the features we investigated in the PWA. Thank you as always for your enthusiasm.
Thanks,BLB

Debug z-index stacking content with 3D View in the Microsoft Edge DevTools – Microsoft Edge Blog

We are thrilled to announce the next iteration of 3D View in the Microsoft Edge DevTools, with a new feature to help debug z-index stacking context. The general 3D View shows a representation of the DOM (Document Object Model) depth using color and stacking, and the z-Index view helps you isolate the different stacking contexts of your page.
3D view is enabled by default in the Canary branch – to enable it in other branches, open the DevTools “Experiments” settings (Ctrl-Shift-P -> “Experiments“) and turn on “Enable 3D View.” If you don’t see that item, navigate to edge://flags and make sure you have enabled “Developer Tools experiments.” Once 3D view is enabled, you can find it under the “More tools” menu (or via search: Ctrl-Shift-P -> “3D View“).

With our first 3D View experiment, we were able to get incredible feedback from Twitter and from the feedback button. This encouraged us to conduct further usability studies to improve the tool. Along the way, we received plenty of requests for CSS z-index debugging as a feature, and felt that the 3D View would be a great vehicle to try it out.
In the z-index tab you can further simplify the view by only showing elements with a stacking context or hiding elements with the same paint order as their parent. These two settings will make for a flatter and more readable experience. Check out our explainer for more details!

What’s next
Coming soon, we’ll have a better highlighting experience between the Elements panel and 3D View, UI improvements, and new camera controls. We’d love to hear what else you’d like to see from this experience! What other features would help you with your day to day debugging? Feel free to reach out to us on Twitter, or just click “Send feedback” in the Microsoft Edge “Help and Feedback” menu at any time.
– Erica Draud, Program Manager, Edge DevTools

Sophos adds mobile threat defense app to Intercept X line

Security vendor Sophos this month expanded its endpoint protection lineup with Intercept X for Mobile. The new mobile security application extends the company’s Intercept security software to devices including phones, tablets and laptops.

The new offering is meant to bolster mobile threat defense for devices running on Android, iOS and Chrome. Features include:

  • Authenticator: Helps to manage multi-factor authentication passwords for sites like Google, Amazon and Facebook.
  • Secure QR code scanner: Scans target URLs for malicious content.
  • Privacy protection: Detects when personal data is accessed or if there are hidden costs associated with downloaded apps.

“The biggest unique point of the Intercept X model is that we are a security model, and we do security for different platforms and can be configured in one place,” said Petter Nordwall, director of product management at Sophos. “Intercept X, as a whole, can now protect Windows, Mac iOS, Chromebooks and servers. Regardless of what platform they use, they can use Intercept X.”

Sophos introduced Intercept X in 2016 as a cloud-based tool designed to enhance endpoint security already running in an environment. Intercept X for Server was introduced in December 2018; an update launched in May 2019 added endpoint protection and response features.

Mobile threats on the rise

In “Advance and Improve Your Mobile Security Strategy,” a recent report from Gartner, senior analyst Patrick Hevesi found that “mobile security products are becoming increasingly important as a rate of mobile attacks continues to grow.” Hevesi recommended tech professionals track new threats, build a mobile threat defense strategy and set minimum iOS and hardware versions.

He added that organizations should focus on training users on what threats actually look like, rather than letting the systems do all the work.

“Everyone is doing antiphishing training, but think about the application,” Hevesi said. “The user doesn’t think about mobile in the same way; they see a highly rated app and don’t think about why the app needs permission to my contact data.”

Pricing for Intercept X for Mobile ranges from $24.50 to $63 per 100 seats depending on the addition of Sophos’ mobile, a unified endpoint management system. Intercept X for Mobile is available free for download for individual use, from Google Play and the Apple App Store.

Go to Original Article
Author:

Live from Bett: What’s new in EDU– Change within the Microsoft Educator Center and fostering future-ready skills in students | | Microsoft EDU

It’s Day 2 of Bett and we’re back, ready to share the latest innovations in education technology and helping you get you started using the new tools and resources we announced last week. You can tune in live to watch special episodes of “What’s new in EDU” each day of Bett at 5:00PM Local London time or noon EST and 9 am PT. Here’s where you go on Thursday  and Friday. In our episode yesterday, we talked about choosing and managing devices and various ways educators can help students strengthen their communication and collaboration skills while using free tools like Office 365 Education and Microsoft Teams. If you missed that episode, you can check it out here

Today we want to show you how to create learning experiences that inspire creativity, deepen student engagement and develop high-level cognitive skills. And we’ll tell you about free resources you can use to ensure your students are developing the future-ready skills they need to be prepared for success in college and careers.   

In this episode we’ll show you how:  

  • You can help teachers adopt new technology with free teacher training online in the improved Microsoft Educator Center and from Microsoft Stores
  • You can access STEM Lessons from Discovery Education directly from within Teams using the new Discovery Education app for Teams 
  • You can inspire creativity and professional skills for the Windows Video Editor 
  • Coming soon: You can teach students how to code using Python with Minecraft: Education Edition and Microsoft MakeCode 
  • You can use Minecraft to develop social-emotional skills like digital citizenship and mindfulness

 

Microsoft Educator Center 

We’re introducing an updated and improved MEC. The Microsoft Educator Center is a platform designed to address the needs of educators. It’s a digital hub where you can find free content, training and support to help you use technology effectively and drive improved student outcomes. 

The MEC is home to innovative courses and resources built by teachers for teachers. You can earn badges, go deep on topics through learning paths, build your transcript and grow your expertise. It’s a resource to help you gain new skills related to bringing technology into the classroom, fostering student-center learning, developing future ready skills, creating inclusive and accessible environments and more. Check out the new MEC experience here

STEM and CS 

We’re excited to announce that Discovery Education– the global leader in standards-aligned digital curriculum resources, engaging content, and professional learning for K-12 classrooms– is releasing a new app for Microsoft Teams, the digital hub for bringing classroom content, conversations, assignments and apps together. If you’re using Discovery Education’s high-quality, digital resources for instruction, we know you’ll be thrilled to see those materials available within Microsoft Teams. This integration will save you time, help keep your classes organized, and provide greater opportunities to collaborate with your students and colleagues. 

You’ll be able to access Discovery Education’s rich, standards-aligned STEM, Science, Math, Social Studies content and more from within Teams from your device and, connect to the largest educator community of its kind, the Discovery Educator Network (DEN), and very soon, share content with students as an assignment within Teams. We’ll have more to come on that, so keep an eye on our Microsoft Educator Center for training opportunities. And check out the steps below for how to get started. 


MakeCode News 

We’re excited to announce the release of Microsoft MakeCode Arcade for general availability. Microsoft MakeCode Arcade is a new online game development environment for simple, visually appealing 2D sprite-based games. Students use drag-and-drop blocks or JavaScript to design and build games and collaborate with friends. Microsoft MakeCode is an open source, free platform for creating inclusive computer science learning experiences that support a progression from blocks to real-world text-based programming. Educators around the world have been using MakeCode for the micro:bit or MakeCode with Minecraft to introduce computing concepts into their classrooms.  


We are thrilled to have this new member of the Microsoft MakeCode family in MakeCode Arcade. It’s a great next step up from MakeCode for micro:bit, a development environment that’s popular with educators and students just starting off with coding. The early feedback from MakeCode Arcade Beta users has been positive. Educators say they’re finding MakeCode Arcade to be a draw for diverse learners, and that students love designing their own characters and bringing special effects and music into their games. For those ready to give MakeCode Arcade a try, you can find the latest updates on free curriculum resources here. And you and your students can get started now with this free tutorial here. No login needed! 

And in another exciting MakeCode development, we are thrilled to announce that MakeCode will support the Python programming language alongside support for JavaScript and Blocks. Python is a widely used programming language in education and data science, and we heard from many computer science teachers around the world, that they would like to see MakeCode support for Python.  


Minecraft: Education Edition 

Computational thinking is a vital skill to develop in students as we prepare them for the workplace, especially since the vast majority of future jobs will require digital skills. Teachers can introduce computer science to students of all ages with Minecraft: Education Editionwhich also now supports the Python programming language for MakeCode alongside JavaScript and block-based coding.

From easy Hour of Code tutorials to Computer Science curriculum based on CSTA standards, Minecraft offers all you need to teach coding across the STEM curriculum. Download a free coding demo lesson here for all Windows, Mac, and iPad users—no login required.

In addition to developing STEM skills, students are building social-emotional competencies with Minecraft: Education Edition. A new set of SEL lessons for Minecraft: Education Edition offers special lessons and immersive Minecraft worlds to help educators teach these skills and create inclusive classrooms. Discover the Mindful Knight—an interactive world that introduces mindfulness and self-regulation—and lessons on digital citizenship and empathy.

Curious what else Minecraft offers? Now you can access more than 200 lessons and 50 build challenges with the new and improved in-game Library. Whether you teach history, math, language arts, technology, or biology, Minecraft is an effective tool for engaging students in immersive project-based learning across the curriculum. Check out this story from educators in Ireland and learn how to get started with Minecraft: Education Edition in your school here.

STEM Lesson Plans

Microsoft Hacking STEM is a collection of free, standards-aligned lesson plans that bring project-based learning to the classroom using inexpensive, everyday materials.    

In November 2019, the world celebrated the 20-year anniversary of humans living aboard the International Space Station. To inspire and engage students, Microsoft Education and NASA have partnered and developed eight new lesson plans focused around the complex issues to think about when living in space. The collection of middle and high school materials connects core academic concepts with hands-on experiences. Students are challenged to design in 3D, analyze data, build sensors, and use virtual reality and work with machine learning and AI while engaging in discussions about living in space. 

We are also excited to share that  Carolina Biological Supply Company is launching three new classroom kits to support projects from the NASA collection. These projects include:  

  • Designing Astro Socks to protect astronauts’ feet in microgravity: This project has students investigating solutions to reduce the impact of working in microgravity on the astronauts’ feet.  
  • What is the electromagnetic spectrum: This asks students to measure radiation in our environment and examine the light waves and frequencies within the electromagnetic spectrum. Students use sensors to capture live data and relate their observations about life in space to their own on Earth.  
  • Using materials science engineering to determine heat resistance: This asksstudents to explore the properties of different heat shield construction materials to protect crew and cargo returning from the International Space Station from the heat generated during the capsule’s descent.   

These kits will be available on the Carolinawebsite soon. We hope you leverage these resources to inspire, educate and engage your students.    

Data Streamer

The Excel Data Streamer provides students with a simple way to bring data from the physical world in and out of Excel’s powerful digital canvas. With a sensor connected to a microcontroller that is attached to Excel, you can introduce students to the emerging worlds of data science and the internet of things.  

We are continuing to add key STEM Partners that support streaming of real time data in Excel using the Data Streamer Add-in. At Bett, Vernier, Pasco and Sphero are showcasing new applications integrated with Excel. This will enable educators to use their existing professional sensors and probes with Excel and modernize their classrooms with live data to transform how students model modern scientific and engineering practices.  

An innovation story 

We love hearing stories about educators who use new tech tools in innovative ways to inform instruction and improve teaching and learning. One such story is that of Assistant Principal Lauren Taylor of Manitou Park Elementary School in Tacoma, Washington. She used Microsoft PowerApps, which allows you to build your own mobile apps using templates, to create an app for her school that helps teachers input and evaluate student reading assessment data. Read more about Lauren’s inspiring story here.  

New and immersive tools 

HoloLens 2 is now available and bringing immersive mixed-reality experiences to colleges, universities, and K-12 classrooms. Educators are turning to this new tool to enhance key experiences in areas such as life sciences and career and technical education. Some of the upgrades to the new HoloLens include an increased field of view and an enhanced ability to see intricate details on 3D images.  

Some examples of HoloLens in use in educational settings include Case Western University in Cleveland, Ohio, where students use it in anatomy classes. You can learn more about that here. And we’ve seen exciting examples of the HoloLens bringing lessons to life with younger students as well. Ewout Warringa recently offered insights into how he uses it to teach construction and technology coursework to 13- to 17-year-old students in the Netherlands in this inspiring blog post

And if you want to read up on various ways to bring immersive experiences to education and the potential benefits, please check out this white paper we previously released on the subject. 

New 3D Models in Windows and Office 

We are excited to announce we now have more than 600 new 3D education models available in Office 365 Education and Paint3D, a built-in creative app that comes with Windows 10. You read that right—more than 600!  

To learn more about how you can insert 3D models directly into Word, Excel, PowerPoint and Outlook on Windows and macOS, please check out this post. It’s relatively easy. You insert 3D models much like you insert other images.  

3D models can enhance lessons in biology, chemistry, physics, engineering, the humanities and more. Research has shown that providing 3D visualization for students can lead to greater understanding around shapes and spatial relationships. 

Inspiring Creativity and offering new ways for students to share what they know 


Video Editor 
 

We have updates to Video Editor that we know you and your students will enjoy. Video Editor for Windows 10 is our full-featured set of video creation and editing tools for digital storytelling, and it’s free with every Windows 10 device. Students love to use it to create films with background music, text effects, 3D models and special effects. Now with Video Editor you can: 

  • Split video clips into two or more segments for easier editing 
  • Back up projects to share with peers and teachers, create templates, and import projects in progress to create a more efficient workflow 
  • Add content to your video project directly from Bing image search with Creative Commons licenses as captions  
  • Speed up and slow down video clips to create slow motion or time lapse content  
  • Rotate photos and videos between landscape and portrait for easier use in your projects
  • Have card thumbnails for a video project that reflect edits a user has done to that specific card  

If you haven’t tried Video Editor yet, look for it in your Start Menu or search for “Video.” And check out this guide for more details on how to get started using this creative tool. 

Up Next… 

Thanks for checking out our latest episode of What’s New in EDU, live from Bett. We hope you got some useful information about teacher training, bringing STEM resources into your classroom and ideas for boosting future-ready skills in your students. Please join us tomorrow live from Bett when we’ll look closely at specific ways to foster inclusion and accessibility in the classroom with the help of new ed tech resources. As always, share your feedback with us on Twitter by tagging @MicrosoftEDU! And be sure to sign up for the Microsoft Educator Newsletter here. 

Go to Original Article
Author: Microsoft News Center

Developers could ease DevOps deployment with CircleCI Orbs

CI/CD platform provider CircleCI has introduced a suite of 20 integrations that automate deployment and were developed with prominent partners including AWS, Azure, Google Cloud, VMware and Salesforce.

These integrations, known as CircleCI Orbs, enable developers to quickly automate deployments directly from their CI/CD pipelines. CircleCI launched Orbs in November 2018, and today there are more than 1,200 listed in its registry. But users created the vast majority of them; the difference with CircleCI’s internally created orbs is that they’re backed by vendor support.

CircleCI Orbs are shareable configuration packages for development builds, said Tom Trahan, CircleCI’s vice president of business development. The orbs define reusable commands, executors and jobs so that commonly used pieces of configuration can be condensed into a single line of code, he said.

The process of automating deployment can be challenging, which is why CircleCI added this suite of out-of-the-box integrations.

Orbs have two primary benefits for developers, said Chris Condo, an analyst at Forrester Research. “They can be certified by the third parties that create them, and they are maintainable pieces of code that contain logic, actions and connections to CD [continuous delivery] capabilities,” he said.

The orbs help CircleCI operate in an increasingly competitive market that includes open-source Jenkins as well as the commercial CloudBees Jenkins Platform, GitLab and GitHub, as well as cloud platform providers such as AWS and Microsoft.

Orbs are very similar in design to the best package managers that you see — like npm for Node.js, or like the Java library or Ruby Gems.
Tom TrahanVice president of business development, CircleCI

“When we launched Orbs, it was because our customers were asking us for a way to operate the same way that they operate within the broader open source world, particularly when you think about open source frameworks for various languages,” Trahan said. “Orbs are very similar in design to the best package managers that you see — like npm for Node.js, or like the Java library or Ruby Gems.”

These are all frameworks created so that bundles of code could be packaged up and made available to developers, which is what the CircleCI Orbs do, Trahan added.

Developers don’t want to have to “reinvent the wheel,” when they can simply access bundles of code and best practices that others have already developed, he said.

Multi-cloud trend drives need for easier deployment

Anything that removes boring configuration work from a developer’s plate is likely to be welcome, said James Governor, an analyst at RedMonk, based in Portland, Maine.

“CircleCI building out a catalog of deployment orbs makes a lot of sense, particularly as the market becomes increasingly multi-cloud oriented,” Governor said. “Enterprises want to see their vendors offer a wide range of supported platforms. The Orb approach allows for standardized, repeatable deployments and rollbacks.”

However, the process of automating deployments can be problematic for some teams because of the time it takes to write integrations with services such as AWS ECS or Google Cloud Run, Trahan said. The CircleCI deployment orbs are designed to limit the complexity and time spent creating integrations.

“Customers are asking for simpler ways to connect their dev and CD processes; Orbs helps them do that,” Forrester’s Condo said. “So I see Orbs as a very nice evolutionary step that allows teams to build maintainable abstractions between their development and deployment processes.”

How commercially successful the new suite of Orbs will be remains to be seen, but conceptually, the approach has been embraced by CircleCI users. Since their launch in November 2018, CircleCI orbs are now used by 13,000 user organizations, with around 40,000 repositories and nine million CI/CD pipelines, Trahan said.

Pricing for CircleCI’s CI/CD pipeline services is free for small teams and starts at $30 a month for teams with four or more developers. Pricing for enterprise customers starts at $3,000 a month. The orbs are free for all CircleCI users.

Go to Original Article
Author:

AWS leak exposes passwords, private keys on GitHub

An Amazon Web Services engineer uploaded sensitive data to a public GitHub repository that included customer credentials and private encryption keys.

Cybersecurity vendor UpGuard earlier this month found the exposed GitHub repository within 30 minutes of its creation. UpGuard analysts discovered the AWS leak, which was slightly less than 1 GB and contained log files and resource templates that included hostnames for “likely” AWS customers.

“Of greater concern, however, were the many credentials found in the repository,” UpGuard said in its report Thursday. “Several documents contained access keys for various cloud services. There were multiple AWS key pairs, including one named ‘rootkey.csv,’ suggesting it provided root access to the user’s AWS account.”

The AWS leak also contained a file for an unnamed insurance company that included keys for email and messaging providers, as well as other files containing authentication tokens and API keys for third-party providers. UpGuard’s report did not specify how many AWS customers were affected by the leak.

UpGuard said GitHub’s token scanning feature, which is opt-in, could have detected and automatically revoked some of the exposed credentials in the repository, but it’s unclear how quickly detection would have occurred. The vendor also said the token scanning tool would not have been able to revoke exposed passwords or private keys.

The documents in the AWS leak also bore the hallmarks of an AWS engineer, and some of the documents included the owner’s name. UpGuard said it found a LinkedIn profile for an AWS engineer that matched the owner’s exact full name, and the role matched the types of data found in the repository; as a result, the vendor said it was confident the owner was an AWS engineer.

While it’s unclear why the engineer uploaded such sensitive material to a public GitHub repository, UpGuard said there was “no evidence that the user acted maliciously or that any personal data for end users was affected, in part because it was detected by UpGuard and remediated by AWS so quickly.”

UpGuard said at approximately 11 a.m. on Jan. 13, its data leaks detection engine identified potentially sensitive information had been uploaded to the GitHub repository half an hour earlier. UpGuard analysts reviewed the documents and determined the sensitive nature of the data as well as the identity of the likely owner. An analyst contacted AWS’ security team at 1:18 p.m. about the leak, and by 4 p.m. public access to the repository had been removed. SearchSecurity contacted AWS for comment, but at press time the company had not responded.

Go to Original Article
Author:

How to install the Windows Server 2019 VPN

Many organizations rely on a virtual private network, particularly those with a large number of remote workers who need access to resources.

While there are numerous vendors selling their VPN products in the IT market, Windows administrators also have the option to use the built-in VPN that comes with Windows Server. One of the benefits of using Windows Server 2019 VPN technology is there is no additional cost to your organizations once you purchase the license.

Another perk with using a Windows Server 2019 VPN is the integration of the VPN with the server operating system reduces the number of infrastructure components that can break. An organization that uses a third-party VPN product will have an additional hoop the IT staff must jump through if remote users can’t connect to the VPN and lose access to network resources they need to do their jobs.

One relatively new feature in Windows Server 2019 VPN functionality is the Always On VPN, which some users in various message boards and blogs have speculated will eventually replace DirectAccess, which remains supported in Windows Server 2019. Microsoft cites several advantages of Always On VPN, including granular app- and traffic-based rules to restrict network access, support for both RSA and elliptic curve cryptography algorithms, and native Extensible Authentication Protocol support to enable the use of a wider variety of advanced authentication methods.

Microsoft documentation recommends organizations that currently use DirectAccess to check Always On VPN functionality before migrating their remote access processes.

The following transcript for the video tutorial by contributor Brien Posey explains how to install the Windows Server 2019 VPN role. 

In this video, I want to show you how to configure Windows Server 2019 to act as a VPN server.

Right now, I’m logged into a domain joined Windows Server 2019 machine and I’ll get the Server Manager open so let’s go ahead and get started.

The first thing that I’m going to do is click on Manage and then I’ll click on Add Roles and Features.

This is going to launch the Add Roles and Features wizard.

I’ll go ahead and click Next on the Before you begin screen.

For the installation type, I’m going to choose Role-based or feature-based installation and click Next. From there I’m going to make sure that my local server is selected. I’ll click Next.

Now I’m prompted to choose the server role that I want to deploy. You’ll notice that right here we have Remote Access. I’ll go ahead and select that now. Incidentally, in the past, this was listed as Routing and Remote Access, but now it’s just listed as a Remote Access. I’ll go ahead and click Next.

I don’t need to install any additional feature, so I’ll click Next again, and I’ll click Next [again].

Now I’m prompted to choose the Role Services that I want to install. In this case, my goal is to turn the server into a VPN, so I’m going to choose DirectAccess and VPN (RAS).

There are some additional features that are going to need to be installed to meet the various dependencies, so I’ll click Add Features and then I’ll click Next. I’ll click Next again, and I’ll click Next [again].

I’m taken to a confirmation screen where I can make sure that all of the necessary components are listed. Everything seems to be fine here, so I’ll click Install and the installation process begins.

So, after a few minutes the installation process completes. I’ll go ahead and close this out and then I’ll click on the Notifications icon. We can see that some post-deployment configuration is required. I’m going to click on the Open the Getting Started Wizard link.

I’m taken into the Configure Remote Access wizard and you’ll notice that we have three choices here: Deploy both DirectAccess and VPN, Deploy DirectAccess Only and Deploy VPN Only. I’m going to opt to Deploy VPN Only, so I’ll click on that option.

I’m taken into the Routing and Remote Access console. Here you can see our VPN server. The red icon indicates that it hasn’t yet been configured. I’m going to right-click on the VPN server and choose the Configure and Enable Routing and Remote Access option. This is going to open up the Routing and Remote Access Server Setup Wizard. I’ll go ahead and click Next.

I’m asked how I want to configure the server. You’ll notice that the very first option on the list is Remote access dial-up or VPN. That’s the option that I want to use, so I’m just going to click Next since it’s already selected.

I’m prompted to choose my connections that I want to use. Rather than using dial-up, I’m just going to use VPN, so I’ll select the VPN checkbox and click Next.

The next thing that I have to do is tell Windows which interface connects to the internet. In my case it’s this first interface, so I’m going to select that and click Next.

I have to choose how I want IP addresses to be assigned to remote clients. I want those addresses to be assigned automatically, so I’m going to make sure Automatically is selected and click Next.

The next prompt asks me if I want to use a RADIUS server for authentication. I don’t have a RADIUS server in my own organization, so I’m going to choose the option No, use Routing and Remote Access to authenticate connection requests instead. That’s selected by default, so I can simply click Next.

I’m taken to a summary screen where I have the chance to review all of the settings that I’ve enabled. If I scroll through this, everything appears to be correct. I’ll go ahead and click Finish.

You can see that the Routing and Remote Access service is starting and so now my VPN server has been enabled.

View All Videos

Go to Original Article
Author: