Matthew Miller, Author at Techbest - Top Tech Reviews In Australia - Page 121 of 187

Urbanista Atlanta Wireless Earbud, Scarlet Red Review


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

Urbanista Atlanta Wireless Earbud, Scarlet Red

ADHA Invites Proposals for Support of My Health Record and API Gateway


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

ADHA Digital Upgrade: My Health Record and API Gateway

Quick Overview

  • ADHA invites proposals for integrated support of My Health Record and API Gateway.
  • This project is part of a comprehensive digital infrastructure upgrade.
  • The tender represents the first competitive bidding for the $788 million contract in over ten years.
  • My Health Record is developed using Oracle technologies, supported by extensive user licences.
  • API Gateway, created by Deloitte, operates on Microsoft Azure and Red Hat OpenShift.
  • ADHA aims to enhance the digital health landscape in Australia.

Overview

The Australian Digital Health Agency (ADHA) is advancing with a bold initiative to merge My Health Record and API Gateway into a singular application support and maintenance agreement. This move is part of a larger strategy to revamp the country’s digital health infrastructure.

ADHA Invites Bids for My Health Record and API Gateway Support

Tender Announcement

ADHA has issued a tender request for services encompassing the technologies and platforms that underpin My Health Record and the API Gateway. This is the first occasion that the $788 million digital infrastructure contract, which has been with Accenture since 2012, is available for competitive bidding.

Technological Backbone

My Health Record is constructed on Oracle technologies, primarily featuring Oracle Database Enterprise Edition at its core. Oracle Access Manager, Splunk, and Symantec enhance its security features. Data storage and indexing are facilitated by Oracle Healthcare Data Repository and Oracle Health Sciences Information Manager. ADHA maintains 28 million perpetual Oracle user licenses for user engagement support.

User Access Points

Adobe Experience Manager supports key user access points, including the National Consumer Portal, National Provider Portal, and Administration Portal, offering vital interfaces for stakeholders.

The API Gateway

The API Gateway acts as a vital link for external stakeholders, accommodating 125 APIs of varied complexity. Redeveloped by Deloitte, it became operational in 2022. It is hosted on Microsoft Azure as well as on the Red Hat OpenShift platform, replacing an earlier Oracle gateway managed by Accenture.

Contract Specifications

Deloitte’s agreement for the API Gateway, commenced in July 2021, is valued at $50 million and is scheduled to conclude in December 2026. Questions arose regarding whether the new tender encompasses a distinct management scope.

Future Prospects

As ADHA embarks on a thorough transformation to modernise Australia’s digital health framework, the revamp of My Health Record is expected to be pivotal. ADHA CTO John Borchi highlighted that the tender signifies a vital opportunity to uphold Australia’s status as a world leader in digital health innovation.

Conclusion

ADHA is merging My Health Record and API Gateway support into a unified contract as part of a larger digital infrastructure upgrade. This tender opens up the $788 million contract to competitive bids for the first time in over a decade, with the goal of modernising and enhancing Australia’s digital health system.

Q: Why is the ADHA’s tender request important?

A: The tender request is significant as it initiates the first competitive bidding process for the $788 million digital infrastructure contract in over a decade, aiming to unify support for My Health Record and the API Gateway.

Q: What technologies are foundational to My Health Record?

A: My Health Record is constructed using Oracle technologies, which include Oracle Database Enterprise Edition, Oracle Access Manager, and various Oracle data management tools.

Q: What function does the API Gateway serve?

A: The API Gateway provides a channel for external stakeholders to interact with ADHA and supports 125 APIs of differing complexity, enabling integrated healthcare services.

Q: How is the API Gateway structured?

A: The API Gateway operates on Microsoft Azure and leverages the Red Hat OpenShift platform, having been redeveloped by Deloitte.

Q: What are the main objectives of ADHA’s digital infrastructure upgrade?

A: The upgrade aims to modernise Australia’s digital health framework, improve system functionalities, and sustain Australia’s leadership in digital health innovation.

JBL Wave Beam Review


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

JBL Wave Beam, JBL Deep Bass Sound, Comfortable fit, Up to 32 (8h + 24h) total hours of battery life with speed charging, Stay aware of your surrounding, Hands-free calls with VoiceAware, Black

Google’s Gemini CLI Agent Represents a Concealed Malware Risk


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

  • The Gemini CLI agent from Google is prone to executing covert harmful commands.
  • The flaw was uncovered by security researcher Sam Cox.
  • This vulnerability entails inadequate validation, prompt injection, and confusing user experience.
  • Google has updated the status of the vulnerability to Priority 1, Severity 1.
  • Users are encouraged to upgrade to Gemini 0.1.14 for improved protections.
  • Activating sandboxing can thwart the attack, although it is not set as default.

Grasping the Gemini CLI Weakness

The Google Gemini CLI agent, built to connect with Google’s sophisticated AI language model using textual commands, has been identified to possess a critical vulnerability. Detected by Tracebit security researcher Sam Cox, this flaw permits the execution of harmful commands without the user’s knowledge.

The Detection Method

Cox found the vulnerability via a combination of inadequate validation, prompt injection, and misleading user interface. By inserting a prompt within a README.md file—along with a seemingly harmless Python script—Cox illustrated how credentials could be siphoned off using “env” and “curl” commands to a distant server.

Google’s Action Against the Risk

Initially rated as Priority 2, Severity 4, the vulnerability was reclassified by Google to Priority 1, Severity 1 following further investigation. This reassessment emphasizes the risk of major data breaches and unauthorized access.

Recommended User Measures

Users are strongly encouraged to update to Gemini 0.1.14, which offers new protections against shell code execution. Moreover, enabling sandboxing can provide additional defense to systems, though it is not automatically turned on during installation.

Mitigation Techniques

To reduce the threat posed by this vulnerability, users should promptly update their software and activate sandboxing. Sandboxing establishes an isolated environment that can prevent unauthorized code from impacting the host system.

Significance of Timely Updates

Continuous updates and prompt patching are essential for ensuring the safety of software utilities like the Gemini CLI. Users must remain alert and responsive to any security alerts from developers.

Risk posed by the Gemini CLI agent from Google

Conclusion

The Google Gemini CLI agent exhibits a serious security vulnerability that may enable silent operations of malicious commands. Uncovered by Sam Cox, this problem underscores the need for proper validation and thoughtful user interface design in terms of security. Users are advised to upgrade to the latest version and activate sandboxing for system protection.

Questions and Answers

Q: What is the Google Gemini CLI agent?

A: It serves as a text-oriented command interface meant to connect with Google’s AI large language model.

Q: How was the vulnerability identified?

A: The flaw was uncovered by security researcher Sam Cox through a series of improper validations, prompt injections, and a misleading user experience.

Q: What steps should users follow?

A: Users should upgrade to Gemini 0.1.14 and activate sandboxing to protect against possible threats.

Q: Why is sandboxing significant?

A: Sandboxing creates a separate environment that can stop harmful code from impacting the primary system.

Q: How did Google react to the vulnerability?

A: Google updated the classification of the vulnerability to Priority 1, Severity 1 and encouraged users to refresh their software.

Q: Is the vulnerability resolved in the latest edition?

A: The latest edition, Gemini 0.1.14, comprises protections against shell code execution.

Bluetooth Headphones Wireless in-Ear – Bluetooth 5.3 Hi-Fi Stereo Deep Bass Wireless Headphones Noise Cancelling CVC Wireless Earbuds 35 Hours Playtime 13 mm Driver Earphones Waterproof USB C Review


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

Bluetooth Headphones Wireless in-Ear – Bluetooth 5.3 Hi-Fi Stereo Deep Bass Wireless Headphones Noise Cancelling CVC Wireless Earbuds 35 Hours Playtime 13 mm Driver Earphones Waterproof USB C

PHILIPS TAT2149WT Wireless Bluetooth Earbuds Review


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

PHILIPS TAT2149WT Wireless Bluetooth Earbuds – Small Earbuds Great Value Natural Sound with Dynamic Bass, Clear Calls and Pocket Size Charging Case – White

Home Affairs Signs $25 Million Biometrics Renewal Agreement with Unisys


We independently review everything we recommend. When you buy through our links, we may earn a commission which is paid directly to our Australia-based writers, editors, and support staff. Thank you for your support!

Renewal of Home Affairs and Unisys Biometrics Agreement

Renewal of Home Affairs and Unisys Biometrics Agreement

Home Affairs finalizes $25 million biometrics renewal with Unisys

Brief Overview

  • Home Affairs has renewed its biometrics contract with Unisys for $25 million over three years.
  • EBIS platform aids in identity authentication through biometrics such as facial recognition and fingerprints.
  • Initial contract with Unisys commenced in 2018, originally worth $44 million.
  • The new agreement prolongs the operation and assistance of EBIS until 2028.
  • Responsibilities related to policy and strategy have been shifted to the Attorney-General’s Department.

Overview of the Agreement

The Australian Department of Home Affairs has reinstated its collaboration with Unisys, extending the utilization of its biometrics platform via a new $25 million three-year agreement. This renewed deal guarantees that Unisys’ Enterprise Biometric Identification Services (EBIS) system remains functional, enabling secure identity confirmation for migrants and travelers.

Background on the EBIS System

Initially launched in 2018, the EBIS system was created by Unisys with an initial contract worth $44 million. The system uses Unisys’ Stealth identity platform, allowing effective matching of biometric information such as facial images and fingerprints against watch lists. EBIS became active in 2020, succeeding a prior Unisys system that was in operation for 12 years. Over time, the original deal grew to a total of $77 million before concluding in June 2026.

Contract Specifications and Future Plans

The latest agreement, although valued at $25 million, extends the operational support of the EBIS system until 2028. However, the contract includes a maximum service end date of 2026 for certain services. This renewed contract includes essential software maintenance and support services, ensuring the consistent reliability of the EBIS platform in safeguarding identity verification operations.

Shifts in Departmental Roles

In spite of the renewal, Home Affairs has shifted some of its identity and biometrics responsibilities to the Attorney-General’s Department (AGD). This shift involved transferring biometrics assets valued at $23 million as of August 31, 2023. This strategic move reflects wider policy and administrative transformations within government departments.

Conclusion

The Australian Department of Home Affairs continues to be dedicated to securing its borders and verifying identities through cutting-edge biometrics technology. By renewing its agreement with Unisys, the department guarantees continuity and dependability in its biometric systems, despite departmental changes and evolving responsibilities.

Frequently Asked Questions

Q: What is the total value of the new agreement between Home Affairs and Unisys?

A: The total value of the new agreement is $25 million over three years.

Q: What function does the EBIS system serve?

A: The EBIS system is utilized for identity authentication via biometrics such as facial recognition and fingerprints to compare against watch lists.

Q: When was the EBIS system first introduced?

A: The EBIS system was first introduced in 2018 and became operational in 2020.

Q: For how long is the new agreement expected to be in effect?

A: The agreement extends the operation and support of EBIS until 2028, with a maximum service end date of 2026 for specific components.

Q: Why were the biometrics responsibilities transferred to the Attorney-General’s Department?

A: This transfer was part of a strategic shift in policy and administration, reflecting broader governmental changes.