Good Morning! Apple has open sourced Pkl, a new configuration language for simplifying complex tasks like defining JSON schemas. While Pkl offers improved safety, ease of use and sharing, JPEG XL, an improved image compression format, is seeing slow browser adoption due to lack of consensus and Google's dominance. Even anti-cheat systems like Riot's Vanguard struggle to combat sophisticated cheating techniques, raising concerns around security and privacy.

— Forrest Knight & Meghanadh Vasireddy

Apple’s New Open Source Programming Language

Apple has released Pkl, a new open source programming language tailored specifically for configuration tasks. Configuration languages like JSON can become complex and repetitive as needs grow.

Introducing Pkl: Pkl combines a familiar, declarative syntax with common programming language features like functions, conditionals, and loops. Template-like schemas define structure which instances then populate with data. Capabilities like built-in validation constraints and data generators aid complex configuration needs. 

Some key goals behind Pkl include:

• Enhanced safety via validating configuration before deployment

• Improved sharability through publishable packages

• An enjoyable authoring experience with editor integration

Pkl can output configuration data in formats like JSON, YAML, and more. It also provides bindings to generate configuration code in languages like Swift, Java, Go, and Kotlin. Editor plugins offer smart completion, navigation, and real-time validation feedback.

Availability

• Open sourced on GitHub last week

• Try out CLI, editor plugins, code samples

• Feedback welcome through discussions

Read More Here

Google Accused of Blocking JPEG XL Browser Adoption Despite Developer Interest

JPEG XL is a new image compression standard designed to replace JPEG with improved compression and backwards compatibility. However, despite interest from web developers, browser adoption has been slow.

Google's Influence: A proposal to add JPEG XL support to the Interop 2024 browser standardization project was rejected, with Interop citing lack of consensus amongst members. But many believe Google wields influence here.

• Google removed experimental JPEG XL support in Chromium last year, claiming insufficient ecosystem interest and lack of substantial benefits over existing formats

• However, Google researchers helped develop JPEG XL, which originated from Google's PIK format

Industry Support: While Google Chrome continues holding out, citing lack of interest, other major industry players have announced JPEG XL support coming soon, including:

• Apple

• Adobe

• Samsung

• Microsoft

With over 60% browser market share, Google and Chromium suffer little consequence for refusing JPEG XL support. But their dominance allows them to clamp adoption of next-gen standards like JPEG XL that threaten existing tech bets.

Read More Here

The Cracks in Riot Vanguard’s Shield: Anti-Cheat and The Secret Battle With Hackers

Riot Games recently announced its anti-cheat software Vanguard is coming to League of Legends after a source code breach. Vanguard currently runs in Valorant to combat cheating. Riot has claimed it would make their games cheat-free.

How Cheating Works: Cheats typically inject malicious code into a game's memory through techniques like DLL injection. Kernel-level anti-cheats like Vanguard run at the deepest system level to block these injection attempts.

• Sophisticated algorithms involving AI and randomized aiming patterns make aimbots highly covert.

• Coders utilize assembly language and memory dumping to analyze Vanguard code for weaknesses.

• Bypass scripts specifically target and disable anti-cheat functions.

Despite Vanguard's touted capabilities, hackers have found ways to bypass its protections:

• Methods include frequently updating cheats, using external hardware like DMA devices, and crafting tailored injection techniques.

• Hundreds of users actively use private cheats in games like Valorant and League.

Concerns Around Vanguard: Kernel-level access raises privacy issues and the threat of malware exploits. Riot has already suffered security breaches of its servers and user data in the past.

Read More Here

Tech News

Meta working on technology to detect AI images ahead of the 2024 elections

Ahead of the 2024 elections, Meta is developing technology to identify AI-generated images across its platforms, including Facebook, Instagram, and Threads. This aims to limit disinformation as creative AI tools become more accessible to everyday users.

Approach

• By partnering with industry groups, Meta wants to create standards for detecting images from major AI vendors. The system would likely use metadata embedded in images by providers.

• However, video/audio generation tools don't yet have robust signaling.

To address gaps with other media types, Meta will let users self-identify AI-generated content. Unlabeled high-risk media may get platform tags directly.

• Still, truly combating fake media requires tackling fundamental provenance issues in the AI era.

Read More Here

Youtube Spotlight

the thing no one will say about Apple Vision Pro

Casey has a really interesting perspective on his user experience with the Apple Vision Pro, a new product category that offers a glimpse into the future of computing.

Was this forwarded to you? Sign Up Here