Blog

There’s a great deal on Apple’s AirPods Pro 2 over at Amazon right now. The earbuds are currently 28 percent off, bringing them down to $179. That’s just $10 more than the all-time-low price we saw during October Prime Day, and will save you $70. The AirPods Pro 2 got an update earlier this year that brought some major new features, most notably a suite of hearing health tools and the capability to be used as hearing aids. On top of that, they now offer new gesture-based Siri Interactions and Voice Isolation to reduce background noise when you’re on a call.

Siri Interactions allow for hands- and voice-free Siri controls; you can respond to Siri’s questions simply by nodding or shaking your head. The second-generation AirPods Pro are the best earbuds for iPhone users, with better sound quality than their predecessors and seamless integration with the other devices in the Apple ecosystem. The AirPods Pro 2 offer active noise cancellation and transparency mode, which allows for more natural conversations while they’re in your ear. They also support spatial audio and Dolby Atmos for certain media.

The buds come with four pairs of silicone tips in different sizes and are IP54 rated for protection against dust and sweat. They get up to 6 hours of listening time (though this will be less with certain features, like ANC, enabled) and up to 30 hours with a little help from the USB-C MagSafe Charging Case.

Check out all of the latest Black Friday and Cyber Monday deals here.

This article originally appeared on Engadget at https://www.engadget.com/deals/apples-airpods-pro-2-drop-to-179-in-this-early-black-friday-deal-161357773.html?src=rss

In a new security advisory, Okta has revealed that its system had a vulnerability that allowed people to log into an account without having to provide the correct password. Okta bypassed password authentication if the account had a username that had 52 or more characters. Further, its system had to detect a “stored cache key” of a previous successful authentication, which means the account’s owner had to have previous history of logging in using that browser. It also didn’t affect organizations that require multi-factor authentication, according to the notice the company sent to its users. 

Still, a 52-character username is easier to guess than a random password — it could be as simple as a person’s email address that has their full name along with their organization’s website domain. The company has admitted that the vulnerability was introduced as part of a standard update that went out on July 23, 2024 and that it only discovered (and fixed) the issue on October 30. It’s now advising customers who meet all of the vulnerability’s conditions to check their access log over the past few months. 

Okta provides software that makes it easy for companies to add authentication services to their application. For organizations with multiple apps, it gives users access to a single, unified log-in so they don’t have to verify their identities for each application. The company didn’t say whether it’s aware of anybody who’s been affected by this specific issue, but it promised to “communicate more rapidly with customers” in the past after the threat group Lapsus$ accessed a couple of users’ accounts. 

This article originally appeared on Engadget at https://www.engadget.com/apps/okta-vulnerability-allowed-accounts-with-long-usernames-to-log-in-without-a-password-150041758.html?src=rss