Switch from Zoom: How to run your own videoconferencing platform


Nik Rawlinson

1 Nov, 2021

​For most businesses, the pandemic has been a huge disruption – but some have benefited. Delivery services, online supermarkets and streaming sites have all boomed. Perhaps none has seen such a meteoric rise as Zoom.

Zoom’s growth isn’t simply a case of offering the right service at the right time. There were plenty of online meeting platforms to choose from, including 8×8, Cisco Webex and Microsoft Teams, but Zoom was the one that broke out of the business realm to facilitate remote pub quizzes, online fitness classes and virtual family get-togethers.

A key reason is the ease of use. Zoom made it supremely easy to invite non-subscribers into your meetings, and for those people to join. In the first half of 2020, as its name became synonymous with video conferencing, it became an obvious default option for businesses seeking a reliable, familiar way for employees to communicate during lockdown.

Now, although pandemic restrictions are finally easing, many organisations intend to allow employees to keep working from home, at least part of the time. And for businesses that settled on Zoom – or some other service – at the start of the pandemic, that raises an important question. Is the service still the right solution for an era where video calls are not a stopgap solution but an integral, ongoing part of your working practices?

As Stefan Walther, CEO of communications solution provider 3CX points out, the downsides of Zoom are starting to become apparent. “A lot of people don’t need the extent of the feature set,” Walther told PC Pro. “It’s a great platform; it works very well, but it comes with a hefty price tag, per-user licences with a lot of add-ons, and a quite expensive dial-in feature.”

It’s time to explore your alternatives – and one you might not have considered is hosting your own videoconferencing service.

Free and easy

You don’t necessarily need to pay for fully functional conferencing software. Jitsi is a complete free-to-use open-source option that includes end-to-end encryption and integration with Google, Microsoft products and Slack. First appearing under the name SIP communicator in the early 2000s, it’s now run by communications specialist 8×8, which supports the ongoing development of Jitsi alongside its commercial hosted videoconferencing solution.

To get started with Jitsi, you just need something to run the back-end on. Server code for Debian/Ubuntu and Docker can be downloaded for free, along with a range of support packages on GitHub, plus Chrome extensions, iOS and Android apps. Jitsi rooms can be embedded in your own website, and there’s a hosted web front-end at meet.jit.si for anyone who doesn’t want to host it themselves.

If you’re wondering whether Jitsi is good enough for your company, be reassured that some big names rely on it – including Wikimedia, which hosts its own public portal. In choosing a video platform, the organisation said it found that, for meetings of 10-15 participants, Jitsi’s performance was “subjectively on par with Google Meet and Zoom”.

Indeed, the developer says the platform is suitable for hosting unlimited free meetings with up to 100 simultaneous participants – although if you need a bigger capacity, or advanced features such as closed captioning, moderation and analytics, it recommends you step up to the paid-for 8×8 Meet service.

While Jitsi can be appealing for certain scenarios, it’s not your only free option. Google Hangouts, Cisco Webex and others allow free meetings for limited numbers of participants or limited times; 3CX only starts charging for its hosted conferencing solution after the first year’s use.

Web conferencing for education

Another free, open-source option is BigBlueButton. It’s a popular choice in education settings: having emerged from the Technology Innovation Management program at Canada’s Carleton University, it’s now supported by more than three quarters of the worldwide market for learning management systems (LMSes).

BigBlueButton is straightforward to deploy. The server runs happily on 64-bit Ubuntu 18.04 inside a Docker container, and it uses no client software at all, relying instead on native browser features. This makes it ideal for home-teaching environments, but also for businesses seeking an easy way to ensure that employees can stay in touch, regardless of what device they’re using or where.

As you’d expect, some of BigBlueButton’s features have a distinctly educational flavour. It supports online whiteboards and allows hosts to pick a random user to answer questions. Like many videoconferencing platforms, it allows the participants to raise a digital hand to ask a question or offer a response, and the host can click to lower all raised hands at once.

However, BigBlueButton sports a range of business staples, such as document sharing and breakout rooms, along with screen sharing and integration with CMS software as well as LMS tools.

Reasons to run your own server

Installing and managing your own videoconferencing solution is more complex than opting for a ready-made alternative, but it has benefits. Businesses and educational establishments can more finely tune their spending and back-end management, as well as gain greater control over add-ons and the location of data.

With third-party services, this type of control varies considerably between the different providers. Zoom account owners and administrators can customise which data centre regions they use for hosting real-time meetings and webinar data, although the default is locked to the region in which your account was originally provisioned.

With 3CX there’s more flexibility. CEO Stefan Walther told us that, on his company’s platform, “you’re always 100% in charge of your location, your data and the people you invite”. There’s no need to install a dedicated app if you’re happy to host meetings in the browser, and British users’ data will stay within the UK while European user data resides within the EU.

Skype for Business is another service that supports a self-hosted back end; however, owner Microsoft is currently encouraging customers to ditch Skype and move onto Teams instead, which resides wholly on Microsoft’s own servers.

Another factor to consider is the breadth of services you require. Buy into 3CX’s integrated communications service and you’re getting more than just a videoconferencing solution: it’s a fully featured PBX with a lot of extras, including VoIP for regular phone calling, messaging and presence tools, with support for both software clients and physical phones. Skype for Business has a similarly wide-ranging feature set. Having all of this in one place can help productivity, as employees don’t need to mess about switching between multiple tools, but smaller businesses often won’t need to go beyond video, group chat and messaging.

Managing your own service – even if it’s not hosted on your own hardware but cloud services such as Azure or AWS – means that you’re free to switch providers when you choose, or even migrate to an alternative videoconferencing platform entirely. Should you instead choose to roll hosting and app provision into a single payment, you don’t have this flexibility: there might be a minimum lock-in, and even if you migrate because your current provider no longer meets your requirements, there may be residual bills to be paid.

Support and hosting

While features are an important consideration when choosing a conferencing platform, another critical issue is support. A communications server is a key piece of business infrastructure, and you’ll need the expertise to keep it running. In many instances – but by no means all – a charged-for service will often be easier to get up and running more quickly. Likewise, less tech-savvy end users may find it easier to work on the move if they can do so using apps, rather than a mobile browser.

Some services have quick setup wizards for easy deployment, but others expect a significant level of technical know-how on the part of administrators, which may make them an impractical choice for smaller organisations, at least as far as self-hosting is concerned. Even for the larger enterprise, an option that requires constant monitoring could justify adding one to the head count which, over the course of a year, could end up costing just as much as opting for a provider-hosted alternative.

At the same time, depending on which path you choose, you may also have limited recourse to external support. Jitsi, for example, warns that “neither the immediate Jitsi team or 8×8 provide commercial support for Jitsi. Jitsi does enjoy a large developer community with many development shops and individuals that provide support and commercial development services. If you need help, we recommend you do a search or post a request on our Community Forum.” It’s better than nothing, but you might have trouble convincing the board that this is a viable solution.

You’ll need suitable server hardware too. Thankfully, this isn’t a big ask: most services don’t need a ton of resources and will run in a container or virtual machine. Alternatively, you can use a very lightweight dedicated system; Jitsi and 3CX can both be installed on Raspberry Pi devices, for a terrifically cheap one-box solution.

TrueConf is another commercial service that supports the Raspberry Pi – and even allows you to download a ready-made Linux-based image that’s preinstalled with the conferencing software and all necessary documentation.

Redundancy

Running an on-site videoconferencing solution can cut ongoing costs, but it risks creating a single point of failure if your local infrastructure goes down. For this reason, even if you’re happy to own and manage your own communications services, it can make sense to let someone else host the server: cloud-based services should have contingencies for outages and multiple lines with automatic failover.

Many of the solutions discussed here can be hosted on the Azure, AWS or Google Cloud platforms. Amazon’s own Chime communications service, which runs on AWS, goes one step further, offering an SDK that developers can use to integrate its features into their own web or mobile applications, including SIP trunking, chat, collaboration and screen sharing.

Zoom out?

If you’ve only ever thought of videoconferencing as a closed, third-party service, the potential of setting up and operating your own services can be liberating – and economical. However, it also means taking on responsibilities – for installation, for maintenance, and possibly for loss of business if your system goes down.

Taking a cloud-hosted approach reduces that risk, but brings ongoing connectivity and capacity costs to consider, even if the software you’re running is itself free. And if you opt for a system without professional support then a misconfiguration or corrupted upgrade could also prove costly in engineer hours and lost productivity.

We’d recommend therefore that you don’t rush to ditch your current conferencing service. Today’s crop of commercial systems are robust, well-supported and easy to use – and often easier to roll out within an organisation than a self-managed solution.

Rather, the point is this: in past years, online videoconferencing might have seemed like a luxury or a gimmick. That’s no longer the case. Videoconferencing is right at the heart of business, and likely to remain there for a long time to come. It’s time to take a fresh look at your needs, and weigh up whether the time is right to take these crucial services into your own hands.

AWS makes its Panorama Appliance generally available


Praharsha Anand

21 Oct, 2021

​Amazon Web Services (AWS) has announced the general availability of its Panorama Appliance.

The device integrates computer vision into on-premises internet protocol (IP) cameras, allowing fast and easy visual inspections of production lines, drive-thru queue management, layout optimisations of physical stores, and more.

“While some smart cameras can provide real-time visual inspection, replacing existing cameras with new smart cameras can be cost prohibitive. Even then, smart cameras are often ineffective because they are limited to specific use cases and require additional effort to fine-tune,” explained AWS.

“Alternatively, some customers send video feeds from existing on-premises cameras to third-party servers, but often the required internet bandwidth is costly or facilities are in remote locations where internet connectivity can be slow, all of which degrades the usefulness and practicality of the analysis.”

AWS’ Panorama device minimises costs by enabling customers to pair the solution with existing on-premises cameras and monitor video streams locally through computer vision.

Customers can update their computer vision application in Amazon SageMaker and deploy the model to the AWS Panorama Appliance, thanks to the device’s full integration with Amazon SageMaker.

Together, AWS Panorama Appliance, Amazon Monitron, Amazon Lookout for Equipment, and Amazon Lookout for Vision deliver the most comprehensive cloud-to-edge machine learning solution for industrial applications.

AWS offers its Panorama Appliance in Virginia, Oregon, Canada, and Ireland. Support for additional regions will follow soon.

“CVG Airport is committed to providing a world-class traveler experience through continuous innovation and strategic cooperation,” said Brian Cobb, chief innovation officer at Cincinnati/Northern Kentucky International Airport.

Cobb added, “By using TaskWatch’s application on AWS Panorama, we are able to bring machine learning to our existing IP cameras and automatically monitor congestion over 70,000 square feet of airport traffic lanes. Once an issue is detected, such as a disabled vehicle, TaskWatch sends real-time alerts to airport staff so they can provide assistance, keep the traffic flowing, and reduce delays for our passengers.”

You can now test Android apps on Windows 11


Zach Marzouk

22 Oct, 2021

​Microsoft has released the preview of Android apps to Windows 11 testers, after launching the new operating system without the feature at the start of October and promising to do so in the next few months.

The preview is available for anyone on the Windows Insider Program as well as Beta Channel users in the US on eligible devices running Intel, AMD, and Qualcomm platforms. It allows apps to be viewed through the Microsoft store before taking users to the Amazon Appstore to load and install them.

The apps can be run side-by-side with other apps and can be pinned to the Start menu or Taskbar, or even integrated into Alt+Tab and Task view to quickly move back and forth between them. Android app notifications can be viewed in the Action Center and users can share their clipboard between a Windows app and Android app too. Windows accessibility settings also apply to Android apps and Microsoft is working with Amazon to deliver more improvements in the coming months.

Microsoft revealed it has partnered with Amazon and app developers to curate 50 apps for Windows Insiders to test and validate across a broad set of hardware. These will be released in the coming months and allow users to try the game Lords Mobile, read Kindle books, and access Khan Academy Kids’ library of learning tools.

The tech giant has also built the Windows Subsystem for Android, which powers the Amazon Appstore and its catalogue. The subsystem includes the Linux kernel and Android OS based on the Android Open Source Project (AOSP) version 11.

“The Subsystem runs in a Hyper-V Virtual Machine, like the Windows Subsystem for Linux,” said Aidan Marcuss, corporate vice president at Windows. “It understands how to map the runtime and APIs of apps in the AOSP environment to the Windows graphic layer, the memory buffers, the input modes, the physical and virtual devices, and the sensors.”

The subsystem is available on AMD, Intel, and Qualcomm chips, and Microsoft is also partnering with Intel to enable Arm-only apps to run on AMD and Intel devices.

The Windows 11 rollout began on 5 October with all eligible devices to be offered the free upgrade by mid-2022. The update is being rolled out in a phased approach, meaning that new eligible devices will be offered the upgrade first.

PayPal in talks to buy Pinterest for $45 billion


Sabina Weston

21 Oct, 2021

​PayPal is in talks to acquire digital pinboard platform Pinterest for $45 billion (£32.6 billion), according to people familiar with the matter.

The deal is said to be in “late-stage talks”, confidential sources told Bloomberg on Wednesday, with Pinterest reportedly being offered $70 per share, mostly in stock.

If accepted, the deal would be the biggest acquisition of a social media company to date, surpassing Microsoft’s $26.2 billion takeover of LinkedIn in June 2016. PayPal is likely to announce the acquisition by the time it reports quarterly earnings on 8 November, according to one of the sources. However, the deal is still uncertain and its terms could be subject to change.

News of the potential acquisition caused Pinterest shares to surge by 12.8% to $62.68, with CEO Ben Silbermann’s net worth skyrocketing by an estimated $400 million to $3.8 million. PayPal, on the other hand, saw its shares slump by 4.9% to $258.36 at closing. Neither company was immediately available for comment.

Founded in 2019, Pinterest allows users to “pin” posts, such as cooking recipes or decoration ideas, organise them into folders, as well as share them with friends. It makes its money by letting companies advertise their services through promoted posts.

PayPal’s interest in the social media platform stems from the shifting landscape of retail, with customers opting to buy products advertised by “influencers” – popular social media users with high rates of followers and engagement. The trend is seen across other social media platforms: in May 2020, Instagram and Facebook introduced Shops, which allow users to browse and purchase products directly from a business’ Facebook or Instagram profile, while TikTok’s partnership with ecommerce giant Shopify allows retail brands to link their product catalogues to the app.

Pinterest had previously been in talks to be acquired by Microsoft, but the deal fell through in February 2021 after Pinterest expressed a wish to remain independent. This was the second time that Microsoft had attempted to buy a large social media platform, following its failed bid to take over Chinese video-sharing app TikTok.

Alkira deepens partnership with AWS


Praharsha Anand

20 Oct, 2021

​Alkira has announced the expansion of its business ties with Amazon Web Services (AWS).

The firm also announced integration with AWS Transit Gateway Connect, a service that allows native integration of software-defined wide area network (SD-WAN) appliances with AWS.

The combined solution will provide seamless AWS capabilities to Alkira customers and simplify cloud networking services for on-premises, cloud, and multi-cloud environments.

Furthermore, Alkira announced a multi-year international agreement with AWS customer Warner Music Group to deploy Alkira Cloud Services Exchange (CSX).

“Alkira is thrilled with this closer business engagement with AWS to offer hundreds of thousands of AWS customers a more sophisticated, yet simplified network infrastructure, consumed completely as-a-service,” said Amir Khan, CEO and founder of Alkira.

Khan added, “Visionaries like Ralph Munsen, CIO of Warner Music Group can now realise the company’s cloud networking vision and consume their complete network infrastructure directly from the only comprehensive Cloud Network infrastructure as-a-Service (CNaaS) in the AWS.”

Alkira has also been accepted into the AWS ISV Accelerate Program, a co-sell program for AWS partners that offer solutions integrated with or running on AWS.

Alkira will also participate in the AWS Global Startup Program aimed at supporting mid-to-late-stage startups that have raised institutional funding, achieved product-market fit, and are ready for scaling.

“Cloud has a lot of promise, but we’re always working to improve our network agility and performance and to ensure a seamless process especially in this fast-moving virtual world we’re doing business in,” said Ralph Munsen, CIO of Warner Music Group.

Munsen continued, “Alkira addresses our cloud networking infrastructure as-a-service needs and we’re pleased to see the close collaboration with AWS. WMG evaluated multiple multi-cloud networking solutions and selected Alkira because the Alkira CSX greatly simplifies management of our network infrastructure and enables us to focus on the growth of our business.”

Together, Alkira and AWS will provide customers with enhanced agility, more advanced networking, and improved procurement experiences.

Why the financial industry is turning to the cloud


Cloud Pro

25 Oct, 2021

It should come as no surprise that the financial services industry is vast. According to data from Research and Markets, the sector is expected to reach a global value of more than $22 trillion by the end of 2021. It’s home to a huge range of organisations, encompassing everything from traditional banks, lenders and insurance companies, to payment providers, wealth management firms and more.

All of these organisations have one thing in common: they rely on immense technical capabilities in order to run their businesses. Financial services organisations have to process vast amounts of data in order to track things like investment trends, market conditions and credit ratings, and all of these analytical processes have to be as close to real-time as possible. After all, time is money.

Historically, this has meant that the financial services sector has almost exclusively been the preserve of giant monolithic organisations, or those with sizeable amounts of pre-existing capital. This is because establishing these technical capabilities traditionally involves significant investment, in the form of data centre equipment and personnel. 

Not only do you need large quantities of high-end server equipment to perform the necessary analytics tasks, you also need storage and networking infrastructure to support it, data centre space to house it in (along with the attendant cooling, power and maintenance costs that go along with it) and a team of highly skilled technical staff to ensure that your data centre remains operational and performant.

That all adds up. Modern cloud platforms like G-Core Labs, however, have opened the financial services market up to organisations that don’t have these resources. Since the turn of the century, the financial services space has exploded with fintech startups, most of whom have leveraged cloud technology to quickly establish their services without needing huge capital investments. This includes household names like PayPal and Venmo, as well as new digital-native challenger banks, boutique lenders and even insurtech firms like TempCover.

Many startups have used the ‘minimum viable product’ approach when designing their applications, which fits well with the cloud model. This method involves focusing on a single, small-scale product or feature, then expanding it over time – which means that the cloud infrastructure required to deliver the service to customers is comparatively cheap and easy to manage. Instead of needing a big, expensive server deployment – which, chances are good, you won’t be fully utilising – you can spin up as much cloud capacity as needed and pay for it on a consumption-based model.

In many cases, this approach also allows cloud-based financial services organisations to be more agile than their more established traditional counterparts, as they can build and test new capabilities much faster. Rather than having to wait for server resources to become available, the combination of highly elastic cloud infrastructure and containerised applications allows for rapid iteration and deployment of new features, which lets financial services companies respond rapidly to the ever-changing needs of the market.

The Royal Bank of Canada, for instance, has used cloud infrastructure since 2018 to speed up the development of its software products. This project is not just a consequence of optimisation, but a part of the bank’s global strategy to transfer business to its data-driven enterprise segment.

The cloud has allowed financial services organisations both old and new to easily leverage another key capability, in the form of big data and AI applications. This emerging technology has enabled financial organisations to rapidly speed up a number of processes, including automatically flagging potentially fraudulent transactions, automating credit reporting and analysing market trends.

For example, Shanghai-based SPD Bank has been using the cloud since 2017 to develop and implement more than 60 applications – including some critical applications – that use artificial intelligence. This enabled it to become an honorary member of the Cloud Native Computing Foundation in acknowledgement of its active use of cloud technology in application development.

This function of the cloud gives organisations the ability to offer new products and services to their customers, as well as introducing cost savings by freeing up employees to focus on more complex and nuanced tasks, but without low-cost, high-capacity cloud resources to enable them, the infrastructure needed to support these workloads would make them prohibitively expensive for many organisations. That’s why G-Core Labs has introduced a cloud AI platform to give customers access to ready-made machine learning models and templates for speeding up development of these applications.

It’s not just about spinning up new services, either – the highly scalable nature of cloud platforms makes them ideally suited for coping with fluctuations in server load. Financial systems in particular require an extremely high level of stability, and being able to rapidly add additional server capacity minimises the chances of an unexpected and costly outage.

The cloud also allows for rapid expansion, as multi-region cloud providers like G-Core Labs allow services to be extended to new geographies at the push of a button. Rather than renting space in a new data centre and installing appliances, existing cloud systems can simply be replicated and placed in the new territory with little to no additional configuration. On top of this, organisations can choose where they hold their data to meet compliance regulations, and cloud platforms like G-Core labs have various certifications to ensure regulatory standards are adhered to.

Security is a top priority for every financial business, and many organisations have chosen to adopt hybrid cloud strategies, allowing them to keep their most sensitive data on-site while also taking advantage of the benefits of public cloud. Alongside a range of robust security protections like comprehensive backup, audit and disaster recovery functionality, G-Core Labs also offers customers the option of maintaining a secure loop within their own security perimeter for additional peace of mind.

The time of big, all-pervading financial monoliths is over. New technologies have levelled the playing field, and nimble startups are taking the opportunity to outmanoeuvre and outperform their legacy competitors. For financial services organisations that want to remain at the cutting edge of data efficiency and customer satisfaction, cloud platforms like G-Core Labs offer the key to ensuring that digital transformation and agility is at the heart of your business.

Learn more about G-Core Labs’ services

UK and US defence labs collaborate on mission-ready AI tech


Bobby Hellard

19 Oct, 2021

Researchers from the US Air Force have demonstrated ways that the UK can partner with America to develop and deploy ‘state of the art’ machine learning algorithms to support ground troops. 

The US Air Force Research laboratory (AFRL) has been working with the UK’s Defence Science and Technology Laboratory (Dstl) since December 2020 to develop artificial intelligence (AI) systems for warfare.

The four-year partnership agreement is aimed at accelerating joint US-UK collaboration of AI technologies, which will largely focus on research and development for command and control capabilities for both nations.

The first project of the collaboration was demonstrated via dual virtual events in New York and Salisbury, UK. It featured an integrated system with the ability to share data and algorithms through a common development and deployment platform. The platform is said to enable the rapid selection, testing, and deployment of artificial intelligence capabilities. 

This was the first in a series of events that will be hosted by the joint and international signatories of the Autonomy and Artificial Intelligence Collaboration (AAIC) Partnership Agreement, with more projects to improve combat technologies. 

«We are dedicated to getting robotics and autonomous systems capability into the hands of the warfighters,» ​​Dr Robert W Sadowski, US Army DEVCOM, said. «Advances in robotics and autonomy will make our formations more capable and mission-ready while providing protection to our warfighters through unprecedented stand-off while enabling enhanced lethality on the battlefield.»

The demonstration featured a simulated scenario focusing on how the UK and US can cooperate and share AI capabilities to support troops. Where both countries operate in adjacent areas, they will be able to share data, AI algorithms «tightly» during missions.

Some of the technology on show included the UK’s Model Cards, which are able to present to a commander the ability to quickly understand, explore, and select appropriate machine learning models to deploy in missions. 

Alibaba unveils custom Arm-based server chip


Zach Marzouk

19 Oct, 2021

Alibaba has unveiled a new in-house processor that will be used to power servers in its data centres, as China aims to increase its domestic chip production in the face of a global chip shortage and US sanctions targeting the country.

The server chips, named Yitian 710, are custom-built by the company’s chip development business, named T-Head. It’s powered by 128 Arm cores with a 3.2GHz top clock speed and is the first server processor compatible with the latest Armv9 architecture. It includes 8 DDR5 channels and 96-lane PCIe 5.0, providing high memory and I/O bandwidth.

Alibaba has also developed proprietary servers, called Panjiu, for the next generation of cloud-native infrastructure. The company said that by separating computing from storage, the servers are optimised for both general-purpose and specialised AI computing, as well as high-performance storage.

The servers have been developed for large-scale data centre deployment through their modular design, and the company expects them to serve a variety of cloud-native workloads such as containerised applications and computed optimised workloads.

«Customizing our own server chips is consistent with our ongoing efforts toward boosting our computing capabilities with better performance and improved energy efficiency,» said Jeff Zhang, president of Alibaba Cloud Intelligence and head of Alibaba DAMO Academy. «We plan to use the chips to support current and future businesses across the Alibaba Group ecosystem. We will also offer our clients next-generation computing services powered by the new chip-powered servers in the near future.»

Zhang added that, together with Intel, Nvidia, AMD, and Arm, Alibaba will continue to innovate its compute infrastructure and other diverse computing services for global customers.

Alibaba also announced it would open the source code of the XuanTie IP core series, the company’s custom-built processors based on RISC-V instruction-set architecture. Developers will not be able to access the cores’ source code on GitHub and Open Chip Community to build prototype chips of their own.

This coincides with the Chinese government’s “Made in China 2025” initiative of lifting the country’s chip production from less than 10% at the time to 40% in 2020 and 70% in 2025, as reported by NIkkei Asia. The government has invested in the semiconductor industry to try and meet these goals although this appears to be a long way off considering data from IC Insights shows that the country only sourced 16% of its semiconductors domestically.

Being self-reliant on chips is a key issue for the country, especially as it has been hit by a number of US sanctions targeting the tech sector in recent years. In April this year, the US government added seven Chinese supercomputing entities to its Entity List, restricting US exports to them. The US government adds entities to this list as it feels they are working against US national security or foreign policy interests.

Arm launches cloud-based IoT platform


Zach Marzouk

19 Oct, 2021

Arm has launched Arm Total Solutions for IoT, a cloud-based platform to enable software development without the need for physical silicon.

The company hopes this will simplify and modernise software development, resulting in accelerated time to market for developers, OEMs, and service providers at all stages of the Internet of Things (IoT) value chain. It also claims it will reduce the product design cycles by up to two years.

The new platform is built on Arm Corstone, the company’s IoT system on a chip (SoC) package, and will deliver a virtual model of the Corston subsystem to allow for software development without the need for physical silicon. It will provide mechanisms for simulating memory, peripherals, and more, to allow for development and testing of software before hardware is available.

The company said this will allow users to reduce a typical product design cycle from an average of five years to as little as three. It will help Arm customers get customer feedback for chips before release and allows the entire IoT value chain to develop and test code on the latest IP ahead of chips being released.

To help it simplify the design process and streamline product development, it contains hardware IP, software, machine learning models, and application-specific reference code.

“Through a radical change in how systems are designed, Arm is uniquely positioned to fuel a new IoT economy that rivals the shape, speed and size of the smartphone industry’s app economy,” said Mohamed Awad, vice president of IoT and Embedded at Arm. “Arm Total Solutions for IoT changes the way we’re delivering key technology to the entire ecosystem and demonstrates our significant and ongoing investment in the software that will empower developers to innovate for global impact.”

Arm is also set to introduce Project Centauri, a set of device and platform standards as well as reference implementations for device boot, security, and cloud integration. The company hopes this will reduce engineering costs, accelerate time to market, enable IoT deployments at scale, and improve security.

In March, Arm launched its first new chip architecture in a decade, focusing on security and AI. It is called v9 and the company hoped it would help it move from general-purpose to more specialised compute across applications like AI, 5G, and IoT.

WordPress plugin exploit puts over 90,000 sites at risk


Bobby Hellard

14 Oct, 2021

Researchers have unearthed a series of vulnerabilities that could have compromised thousands of WordPress websites.

Potentially exploitable bugs were found in the Brizy Page Builder, a WordPress plugin that is installed across more than 90,000 websites, according to security firm Wordfence.

The company’s Threat Intelligence team reported the issues in August and a fix was released shortly afterwards, but it’s likely that a number of installations still remain unpatched. If exploited, it could allow attackers to execute «complete site takeover» and add malicious code to existing posts.

The vulnerabilities could also allow for any registered user, including subscribers, to pass as an administrator, where they could modify posts and pages, even if they had already been published on a site.

The Wordfence’s Threat Intelligence team said it stumbled upon the vulnerability while conducting a routine review of the Wordfence firewall in July. It said the plugin «did not appear» to be under active attack, but they were led to believe that there was something amiss following «unusual traffic».

«The unusual traffic led us to discover two new vulnerabilities as well as a previously patched access control vulnerability in the plugin that had been reintroduced,» Wordfence wrote in a blog post. «Both new vulnerabilities could take advantage of the access control vulnerability to allow complete site takeover.»

A patched version of the Brizy Page Builder plugin, was released on 24 August, just a few days after Wordfence disclosed the vulnerability. Wordfence «strongly recommends» users update to the latest version of the Brizy Page Builder (2.3.17) as soon as possible.