12.9 C
New York
Tuesday, March 25, 2025
Home Blog Page 22

ios – Flutter HERE maps here_sdk not loading map. White display solely. Occurs in all apps, INCLUDING their OFFICIAL here_map_app instance


Challenge

Utilizing the Flutter here_sdk would not work. Particularly, the HERE hello_map_app instance solely exhibits a white display when loading.

I’m utilizing the Discover here_sdk. Right here is the highest of its pubspec.yaml:

title: here_sdk
description: HERE SDK for Flutter
model: 4.21.5
homepage: https://right here.com

I’ve adopted these Getting Began steps meticulously, together with making certain my API keys are appropriate (I do not get any incorrect credential errors when loading the app).

simulator screenshot

My System

Flutter/Dart variations:

Flutter 3.29.2 • channel secure • https://github.com/flutter/flutter.git
Framework • revision c236373904 (9 days in the past) • 2025-03-13 16:17:06 -0400
Engine • revision 18b71d647a
Instruments • Dart 3.7.2 • DevTools 2.42.3

Growth machine:

M1 Macbook Professional 2021, macOS Sequoia 15.1.1

Ran on gadgets (examined with debug, profile, and launch by way of Flutter run ... and XCode’s GUI):

- iOS simulator operating iOS 17.5; and
- bodily iPhone 15 operating iOS 18.3.2.

Error Logs

These are proven after I run it on my iOS simulator by way of XCode:

[INFO ] Threading - Platform threading is initialized.
[INFO ] ApplicationUtilsInitializer - HERESDK Model 4.21.5
[INFO ] ConnectivityStatusNotifier - Community is reachable
FlutterView implements focusItemsInRect: - caching for linear focus motion is proscribed so long as this view is on display.
flutter: The Dart VM service is listening on http://127.0.0.1:55450/ahlySVd0qx8=/
[INFO ] LockingProcess - Neither cache nor persistent map storage is locked
13:25:52.078 [INFO] ThreadPoolTaskScheduler - Beginning thread 'OLPSDKPOOL_0'
13:25:52.079 [INFO] ThreadPoolTaskScheduler - Beginning thread 'OLPSDKPOOL_1'
13:25:52.079 [INFO] ThreadPoolTaskScheduler - Beginning thread 'OLPSDKPOOL_0'
13:25:52.079 [INFO] ThreadPoolTaskScheduler - Beginning thread 'OLPSDKPOOL_1'
[INFO ] hsdk-SDKNativeEngineImpl - Creation
[INFO ] hsdk-OfflineAwareNetwork - Modified to OfflineMode=0 AllowedUrls=
[INFO ] hsdk-OfflineAwareNetwork - Modified to OfflineMode=0 AllowedUrls=
[ERROR] hsdk-initializeOptional - class ConsentInitializer not discovered
[ERROR] hsdk-initializeOptional - class LocationInitializer not discovered

My Concepts

Be aware

This additionally occurs in any Flutter undertaking I make, however I am utilizing the official HERE hello_map_app instance so its reproducible.

CISA Warns of Energetic Exploitation in GitHub Motion Provide Chain Compromise

0


Mar 19, 2025Ravie LakshmananVulnerability / DevSecOps

CISA Warns of Energetic Exploitation in GitHub Motion Provide Chain Compromise

The U.S. Cybersecurity and Infrastructure Safety Company (CISA) on Tuesday added a vulnerability linked to the provide chain compromise of the GitHub Motion, tj-actions/changed-files, to its Recognized Exploited Vulnerabilities (KEV) catalog.

The high-severity flaw, tracked as CVE-2025-30066 (CVSS rating: 8.6), includes the breach of the GitHub Motion to inject malicious code that permits a distant attacker to entry delicate knowledge by way of actions logs.

“The tj-actions/changed-files GitHub Motion accommodates an embedded malicious code vulnerability that enables a distant attacker to find secrets and techniques by studying actions logs,” CISA mentioned in an alert.

Cybersecurity

“These secrets and techniques might embody, however aren’t restricted to, legitimate AWS entry keys, GitHub private entry tokens (PATs), npm tokens, and personal RSA keys.”

Cloud safety firm Wiz has since revealed that the assault might have been an occasion of a cascading provide chain assault, with unidentified risk actors first compromising the reviewdog/action-setup@v1 GitHub Motion to infiltrate tj-actions/changed-files.

“tj-actions/eslint-changed-files makes use of reviewdog/action-setup@v1, and the tj-actions/changed-files repository runs this tj-actions/eslint-changed-files Motion with a Private Entry Token,” Wiz researcher Rami McCarthy mentioned. “The reviewdog Motion was compromised throughout roughly the identical time window because the tj-actions PAT compromise.”

It is at the moment not clear how this occurred. However the compromise is claimed to have occurred on March 11, 2025. The breach of tj-actions/changed-files occurred in some unspecified time in the future earlier than March 14.

GitHub Action Supply Chain Compromise

Because of this the contaminated reviewdog motion could possibly be used to insert malicious code into any CI/CD workflows utilizing it, on this case a Base64-encoded payload that is appended to a file named set up.sh utilized by the workflow.

Like within the case of tj-actions, the payload is designed to reveal secrets and techniques from repositories operating the workflow in logs. The difficulty impacts just one tag (v1) of reviewdog/action-setup.

The maintainers of tj-actions have disclosed that the assault was the results of a compromised Github Private Entry Token (PAT) that enabled the attackers to switch the repository with unauthorized code.

Cybersecurity

“We are able to inform the attacker gained enough entry to replace the v1 tag to the malicious code they’d positioned on a fork of the repository,” McCarthy mentioned.

“The reviewdog Github Group has a comparatively massive contributor base and seems to be actively including contributors by way of automated invitations. This will increase the assault floor for a contributor’s entry to have been compromised or contributor entry to have been gained maliciously.”

In mild of the compromise, affected customers and federal companies are suggested to replace to the newest model of tj-actions/changed-files (46.0.1) by April 4, 2025, to safe their networks in opposition to lively threats. However given the foundation trigger, there’s a danger of re-occurrence.

In addition to changing the affected actions with safer options, it is suggested to audit previous workflows for suspicious exercise, rotate any leaked secrets and techniques, and pin all GitHub Actions to particular commit hashes as an alternative of model tags.

Discovered this text fascinating? Observe us on Twitter and LinkedIn to learn extra unique content material we publish.



The Way forward for GenAI in Regional Banks and Credit score Unions

0


Traditionally, regional banks and credit score unions have constructed their manufacturers by private relationships with their account holders. For instance, it wasn’t uncommon so that you can know the title of your teller’s partner and for them to know your youngsters’ names. Certainly, private relationships have been the hallmark of smaller monetary establishments and what has set them other than their bigger rivals. The digitization of banking has made forging private relationships a problem, eroding the differentiator and leaving smaller establishments looking for a approach to reset the board.

Enter generative synthetic intelligence (GenAI), which is a subset of AI applied sciences that makes use of massive language fashions (LLMs) to be taught patterns from massive datasets. It then makes use of the patterns with prompts and instructions from a human to create new textual content content material that resembles or enhances unique, human-generated work.

The 2025 Retail Banking Traits and Priorities report we sponsored this 12 months discovered that 80% of organizations imagine digital brokers will depend on generative AI for real-time personalised advertising communications by 2030 and 76% of monetary establishments imagine that the majority monetary establishments will probably be utilizing GenAI by 2030. We truly imagine the proportion must be larger, on condition that GenAI can considerably improve productiveness, help higher data-driven human decision-making, assist ship improved and extra personalised digital buyer experiences, and enhance the underside line considerably.

How considerably? On the finish of 2023, The McKinsey International Institute estimated that, amongst industries globally, GenAI might add the equal of $2.6 trillion to $4.4 trillion yearly in worth throughout the 63 use instances it analyzed. Amongst trade sectors, banking is anticipated to have one of many largest alternatives, with the potential to ship between $200 and $340 billion in new worth to retail banking — largely from elevated productiveness.

Quicker, Higher, Happier

There’s a false impression that AI will take jobs from people. However the energy of GenAI is that it produces content material based mostly on information and knowledge plus prompts and instructions given by people. It’s an enhancement instrument, not a substitute instrument.

Presently, GenAI in banking is generally used to automate essential however repetitive duties or processes, together with safety, mortgage origination, fraud detection, and to ship higher automated service experiences. Permitting GenAI to take over the mundane work related to these and different processes not solely will increase effectivity and productiveness, it additionally frees up the workers doing that work to deal with extra significant assignments, thus making their jobs extra satisfying.

One of many major methods regional banks and credit score unions can differentiate themselves is by personalizing and elevating the digital banking expertise of account holders. Particularly, the expertise facilitates deeper insights into their habits and predilections to assist anticipate their wants. So, services that meet these wants will be supplied to them in the identical approach Netflix provides its clients curated leisure, and Amazon provides its clients leisure and merchandise — based mostly on buyer habits and preferences.

Equally, the information gathering and deep evaluation doable with GenAI allows the creation of personalised content material, so every account holder will see solely content material (together with advertising campaigns) related to them at a sure time of their life. It is senseless for a middle-aged lady who owns her own residence and has wage and credit score rating to see the identical content material as a current school graduate who’s attempting to repay pupil loans and nonetheless aspires to personal a house.

The Human Contact

The inclusion of human decision-making and oversight are essential to constructing GenAI options for banking. Our system for profitable integration of GenAI is to begin with deep studying fashions educated particularly on massive banking datasets. These fashions, which have additionally been educated to be taught the patterns and constructions of human language, then create pure responses to person queries or prompts. Human involvement is essential to make sure that AI-generated responses are correct and align with moral requirements, regulatory compliance and buyer wants — whereas mitigating potential dangers and biases.

Tomorrow’s Tech, As we speak

The potential of GenAI to rework regional banks and credit score unions is unbounded. The monetary establishments that reach integrating the expertise will probably be people who begin strategizing for the long run whereas focusing investments on high-potential and lower-risk purposes, at the moment.

Listed here are 4 major methods we see GenAI making instant and substantial impacts within the service of banking.

Driving strategic progress

The McKinsey report calculated that company and retail banking will profit essentially the most from the proper deployment of GenAI. On the company banking facet, the very best potential is enhanced human-in-the-loop decision-making, automated danger evaluation fashions and operational efficiencies by automation. Retail banking stands to learn from personalised banking experiences, improved customer support and advertising improvements.

Powering operational effectivity

In a report on the highest banking traits for 2023, Accenture recognized banking because the trade probably to be completely impacted by GenAI and the trade with the best potential to extend output with the expertise, with 34% of present workflows ripe for GenAI enhancement. It additionally discovered that monetary establishments that undertake GenAI can enhance their productiveness by as much as 30%.

However even with the potential for GenAI to enhance effectivity, human experience stays the important thing to success. Utilizing particular banking information, inner groups can prepare the fashions to be correct and to evaluate complexities the best way people can. However they’ll scale quicker and to a stage far past human capability. 

Leveling the enjoying area between bigger and smaller establishments

We’ve seen a couple of of the methods GenAI can profit regional banks and credit score unions, together with growing productiveness and enabling personalised account holder experiences. It’s a constructive signal that notoriously risk-averse bankers are recognizing the myriad advantages of GenAI, with adoption charges rising, however we nonetheless see too many regional monetary establishments hesitant to leap on board.

Whereas they dawdle, the large monetary establishments are on the transfer. And they’re solely skimming the floor in leveraging the ability of GenAI. Those that proceed to be overly cautious will probably be completely left behind. The factor to recollect is GenAI instruments will be ring-fenced, related to proprietary information and saved internally.

Delivering collective intelligence

Collective intelligence is created when people and teams work collectively. Elements might embody group decision-making, consensus formation, ideation from totally different sources and motivation from competitors. Historically, leveraging collective intelligence was accomplished by documenting institutional information and sharing it by coaching and job expertise. GenAI elevates the advantages of collective intelligence — simply and in actual time. 

The profitable adoption and growing integration of GenAI in regional monetary establishments would require LLMs particularly educated on banking information and deep trade information. However the essential aspect is human collaboration and oversight. Bear in mind, GenAI is an enhancement instrument, not a substitute instrument.

Menace Actors Leverage Reddit to Unfold AMOS and Lumma Stealers

0


In a current surge of cyber threats, menace actors have been exploiting Reddit to distribute two potent malware variants: AMOS (Atomic Stealer) and Lumma Stealer.

These malware varieties are particularly designed to focus on cryptocurrency merchants by providing cracked variations of in style buying and selling software program, similar to TradingView.

The attackers interact actively with potential victims on Reddit, reassuring them concerning the security of the downloads and downplaying safety issues.

Distribution Techniques

The distribution of those malware variants entails refined ways.

On Reddit, attackers put up hyperlinks to compromised software program installers, that are hosted on uncommon servers, similar to an internet site belonging to a Dubai-based cleansing firm.

This selection means that the attackers have direct management over the server, permitting them to replace and modify the malware payloads as wanted.

The information are sometimes double-zipped and password-protected, a typical evasion tactic to bypass safety scans.

In line with MalwareBytes Report, for macOS customers, the malware is a variant of AMOS, whereas Home windows customers are focused with Lumma Stealer.

AMOS, or Atomic Stealer, is a macOS-specific malware that has been gaining traction since early 2023.

It’s bought as a Malware-as-a-Service (MaaS) on Telegram and is understood for its means to extract delicate data, together with keychain passwords, browser information, and cryptocurrency pockets contents.

AMOS employs anti-debugging methods and checks for digital machines to keep away from detection.

However, Lumma Stealer is a flexible malware out there on each Telegram and devoted web sites, concentrating on a variety of knowledge, together with net browser data, electronic mail credentials, and cryptocurrency wallets.

It makes use of superior methods like event-controlled write operations and encryption to evade detection.

Impression and Protection Methods

The impression of those malware variants has been important, with stories of stolen cryptocurrency wallets and subsequent impersonation makes an attempt by attackers.

To mitigate these threats, customers must be cautious of suspicious hyperlinks and downloads, particularly these promising cracked software program.

Guaranteeing that software program is downloaded from official sources and sustaining up-to-date safety software program are essential protection methods.

Moreover, cybersecurity professionals ought to concentrate on creating efficient countermeasures towards these evolving malware threats, together with monitoring for uncommon community exercise and implementing strong information encryption practices.

As these malware variants proceed to evolve, staying knowledgeable about their ways and adapting protection methods accordingly is important to guard delicate information.

Examine Actual-World Malicious Hyperlinks & Phishing Assaults With Menace Intelligence Lookup – Strive for Free

Scientists Uncover Hidden Protein Driving Autoimmune Assaults – NanoApps Medical – Official web site


Scientists have uncovered a vital piece of the puzzle in autoimmune ailments: a protein that helps launch immune response molecules.

By finding out an ultra-rare situation, researchers recognized ArfGAP2 as a key participant in immune overactivity. Blocking it in mice prevented extreme tissue harm, opening the door to potential therapies for a spread of immune-related ailments, together with COVID-19 and Alzheimer’s.

Unraveling the Thriller of Autoimmune Triggers

Autoimmune ailments have an effect on over 15 million folks within the U.S. They happen when the physique errors its personal wholesome tissues for threats, triggering immune “false alarms.” This results in immune cells attacking the physique as an alternative of dangerous invaders. Whereas scientists have lengthy understood how these false alarms start, the following step, how the immune system mobilizes its assault, has remained unclear.

Now, researchers at Washington College College of Drugs in St. Louis and the Perelman College of Drugs on the College of Pennsylvania have found an important piece of that puzzle. They’ve recognized a beforehand unknown protein that helps set off the discharge of infection-fighting molecules from cells. This protein seems to play a key function in each regular immune responses and dangerous overreactions.

Due to its central function, the protein may very well be a promising goal for growing therapies to deal with autoimmune ailments and different circumstances linked to immune system overactivity. The findings had been revealed on-line on February 12 in Cell, and appeared in print on March 20.

A Breakthrough in Uncommon Illness Analysis

The workforce of researchers, co-led by Jonathan Miner, MD, PhD, an affiliate professor of Rheumatology and Microbiology and a member of Penn’s Colter Heart for Autoimmunity, and David Kast, PhD, an assistant professor within the Division of Cell Biology & Physiology at WashU Drugs, made the invention by finding out a uncommon autoimmune illness known as STING-associated vasculopathy with onset in infancy (SAVI). The situation is extraordinarily uncommon, occurring in one in every of each 1 million births. It results in the immune response attacking tissues within the lungs and limbs of sufferers, usually leading to demise earlier than maturity.

Finding out uncommon ailments the place the foundation reason for the illness is brought on by a single mutation cannot solely reveal the organic function of the affected gene and the disease-causing disruptions it incites, but additionally present perception into more-common circumstances.

The Function of STING in Autoimmune Assaults

SAVI is brought on by adjustments to a protein in cells known as STING, which ordinarily acts as a molecular watchdog that responds to the presence of viral DNA by activating the element of the cell that generates immune proteins. These immune proteins are then launched from the cell to sign to the physique’s immune system of the necessity to assault the viral invaders, and the place within the physique the immune cells must go. In SAVI, STING is overactive, triggering fixed immune exercise that finally damages wholesome tissue.

Along with signaling the cell to make the immune-response proteins, known as cytokines, the researchers found that STING additionally has a novel function in releasing these proteins from the place they’re made within the cell. How that launch course of labored was unknown, however discovering a method to management it may very well be a promising avenue for treating SAVI in addition to different autoimmune issues.

Discovering ArfGAP2: The Lacking Piece

Utilizing immune cells that had been delicate to the disease-causing mutations in STING, the workforce carried out a display to establish proteins that prevented this sensitivity. One protein, ArfGAP2, stood out, because it gave the impression to be strongly linked to the ultimate step when the immune response proteins get launched.

The workforce additional validated this discovering in SAVI cells that didn’t produce ArfGAP2. With out it, STING couldn’t drive the discharge the immune proteins.

“It’s like a prepare station and ArfGAP2 is appearing because the conductor, directing which molecules are to be shipped out,” stated Kast. “If STING and ArfGAP2 will not be working collectively, the trains are stopped.”

The workforce reasoned that stopping the unending “trains” in SAVI’s fixed immune response may very well be a method of treating the uncommon illness.

A Path Towards New Therapies

The workforce examined that concept in a mouse that was genetically modified to have SAVI, however didn’t produce the ArfGAP2 protein. They discovered that the lung- and limb-destroying immune response typical of the illness didn’t happen, which confirmed that if the protein may very well be neutralized, the overactive immune response may very well be turned off.

Miner, who initiated the venture when he was at WashU Drugs, stated that it’s a promising goal for different circumstances that equally result in extra immune proteins of the identical kind. This might embody the “cytokine storms” attribute of COVID-19 or the mind irritation linked to immune responses in Alzheimer’s illness.

Uncommon Illnesses Unlocking Broader Medical Insights

“Illnesses like SAVI which are tremendous uncommon can present worthwhile insights,” stated Miner, “as a result of in the event you can determine how a uncommon illness mutation is working, you study one thing in regards to the regular proteins that each one of us have. Then abruptly you’ve opened the doorways to all these new avenues of potential therapies for a lot of, many various lessons of ailments.”

Reference: “ArfGAP2 promotes STING proton channel exercise, cytokine transit, and autoinflammation” by Subhajit Poddar, Samuel D. Chauvin, Christopher H. Archer, Wei Qian, Jean A. Castillo-Badillo, Xin Yin, W. Miguel Disbennett, Cathrine A. Miner, Joe A. Holley, Teresa V. Naismith, W. Alexander Stinson, Xiaochao Wei, Yue Ning, Jiayuan Fu, Trini A. Ochoa, Nehalee Surve, Shivam A. Zaver, Kimberly A. Wodzanowski, Katherine R. Balka, Rajan Venkatraman, Canyu Liu, Kelly Rome, Will Bailis, Yoko Shiba, Sara Cherry, Sunny Shin, Clay F. Semenkovich, Dominic De Nardo, Sunnie Yoh, Elisha D.O. Roberson, Sumit Okay. Chanda, David J. Kast and Jonathan J. Miner, 12 February 2025, Cell.
DOI: 10.1016/j.cell.2025.01.027

This work was supported by NIH grant numbers R01 AI143982, R01 436 NS131480, R01 GM136925, in addition to funding from the Colton Heart for Autoimmunity and the Clayco Basis to J.J.M. The content material is solely the accountability of the authors and doesn’t essentially signify the official views of the Nationwide Institutes of Well being (NIH).