Tag Archives: consultant

Dallas Cowboys adding Brian Schottenheimer as consultant

FRISCO, Texas — Former Jacksonville Jaguars passing game coordinator Brian Schottenheimer will serve as a consultant to the Dallas Cowboys in 2022, filling the role Ben McAdoo had last season, sources confirmed Thursday.

The move will reunite coach Mike McCarthy with the Schottenheimer family. McCarthy entered the NFL under Schottenheimer’s father, Marty, as a quality control coach with the Kansas City Chiefs in 1993 and spent six years on the staff.

Schottenheimer will help offensive coordinator Kellen Moore and defensive coordinator Dan Quinn with opposing team analysis and leaguewide trends. McAdoo, who worked with McCarthy in Green Bay before becoming the New York Giants’ head coach, was named Carolina Panthers offensive coordinator earlier this offseason.

Schottenheimer was the Seattle Seahawks’ offensive coordinator from 2018 to ’20. He has been with seven teams in his NFL coaching career.

Sports Illustrated first reported the addition of Schottenheimer.

Read original article here

CDC director turns to media consultant as Covid-19 messaging frustrations mount

For months, Walensky has met privately with prominent Democratic media consultant Mandy Grunwald to improve her communication skills and continues to do so, according to a person familiar with the previously unreported sessions. On Friday, Walensky will hold the CDC’s first independent media briefing since the summer after deciding abruptly this week that she wanted to take questions “head on,” according to a person familiar with her decision to hold the briefing.

“We’re in an unprecedented time with the speed of Omicron cases rising, and we are working really hard to get information to the American public, and balancing that with the reality that we’re all living with,” Walenksy said.

“This is hard, and I am committed to continue to improve as we learn more about the science and to communicate that with all of you.”

Since assuming her role, Walensky has worked to improve her internal communications and sought to cultivate a better messaging approach, according to officials. Yet there remains dissatisfaction among both administration aides and outside public health experts in some of the ways the CDC has communicated its decisions as the pandemic enters what officials view as a new phase.

At the same time, between Walensky circumventing some of the CDC’s rigorous vetting processes for new guidelines and the public criticism, morale at the public health agency is sinking.

When asked if there is a credibility problem at the CDC Friday on NBC’s “Today,” Walensky said the agency moves with the science.

“We at the CDC are 12,000 people working 24/7 following the science, with ever-evolving nature, in the midst of a really fast-moving pandemic,” she said during one of a number of interviews ahead of the briefing. “And we are doing so, putting our head down, to keep America safe. We will continue to update. We will continue to improve how we communicate to the American public. This is fast-moving science.”

CNN has reached out to the CDC for comment. The White House declined to comment, pointing toward a statement on Wednesday from White House press secretary Jen Psaki. Asked if Biden has confidence in Walensky, Psaki told reporters, “He has confidence in the scientific expertise, the medical expertise of the team at the CDC. And he believes the American people had a desire, a need for us to address this pandemic, led by data and science. And that’s what he’s going to continue to rely on.”

Frustration over changing guidance

The latest messaging setback happened last month when the CDC cut its recommended isolation period for those with Covid-19 to five days, and recommended people who tested positive should continue to wear a mask in public for five additional days. Confusion ensued, with some outside experts urging the CDC to add a recommendation for a rapid antigen test at the end of the first five days.

Behind the scenes, other federal public health officials also questioned the decision not to include testing. Both Dr. Anthony Fauci, the President’s top medical adviser on Covid-19, and US Surgeon General Dr. Vivek Murthy publicly made clear clarifications were coming.

Amid the public backlash, Walensky sought to reassure fellow senior federal health officials, telling Fauci and Murthy that the lack of a testing requirement in the isolation guidance was not motivated by the nationwide testing shortage, one person familiar with the discussions said.

Instead, she insisted that rapid antigen tests were simply not a sufficiently reliable indicator of contagiousness and noted to her colleagues that the US Food and Drug Administration had not approved the tests for that purpose.

She told CNN, “We actually don’t know how our rapid tests perform and how well they predict whether you’re transmissible during the end of disease.”

The explanation didn’t sit well with FDA officials, who — despite having issued a vague statement at about the same time about sensitivity of rapid antigen tests toward Omicron that lacked specific details — were concerned her comments could sow doubt in the reliability of rapid tests.

“When you are leading an agency like that, the gravity of your words is so much heavier than when you’re just commenting on it,” an administration official later told CNN.

Eschewing traditional CDC processes

After working on the guidance with her circle of advisers, Walensky called an emergency meeting of the officials leading the CDC’s Covid-19 Incident Management System on the eve of the release of the new guidance to inform them of the coming guidance, according to the CDC scientist.

“She’s dispensing with this consultative process that we’ve always had in place that sort of allowed us to make sure that our science was good,” the scientist said.

Officials in the meeting were told not to share the new guidance with state health officials on a weekly call the next day, which took place just hours before the CDC released a statement announcing the changes.

“The lack of engagement and consultation on that (new guidance) obviously contributed to a lot of the outrage,” the scientist said.

After Walenksy spent a week steadfastly defending the agency’s decision not to include a recommendation for a rapid test after five days, the CDC changed course, telling people with access to rapid tests to continue to isolate if they decided to take a test and received a positive result. But the new guidance did not explicitly recommend people should take a test.

“It became very clear that people were interested in using the rapid tests — though not authorized for this purpose — for this purpose after their end of isolation period. And because there was an interest in using them for this reason, we then provided guidance on how they should be used,” Walensky told CNN during a coronavirus briefing on Wednesday.

The latest update also urged people who emerge from the shortened five-day isolation to avoid travel for five more days and not to eat at restaurants.

Those updates only emerged after Walensky and her team tasked CDC experts with turning the press statement announcing the changes into formal public health guidance, a process that would typically happen ahead of a news release.

The CDC’s back and forth on testing after five days of isolation did not go over well in the medical community.

“Nearly two years into this pandemic, with omicron cases surging across the country, the American people should be able to count on the Centers for Disease Control and Prevention (CDC) for timely, accurate, clear guidance to protect themselves, their loved ones, and their communities. Instead, the new recommendations on quarantine and isolation are not only confusing, but are risking further spread of the virus,” the American Medical Association said in a statement.

‘They’re overthinking their messaging’

In some ways, the disconnect with the CDC is a perpetual one between an inherently political operation and one driven by public health experts.

Current and former senior administration officials said the White House has been frustrated with the CDC over its messaging of public health guidelines, even as they acknowledge the decisions the agency makes have sound backing. Meanwhile, some scientists at the CDC feel like the new guidance Walensky is implementing is being insufficiently guided by the science and is overly taking into account political and economic considerations.

Still, the White House has aimed to stick to its hands-off approach to the CDC, seeking to draw a distinction with the previous administration and avoid any impression they are influencing public health measures driven by government scientists.

“I think they’re being way too careful and they’re overthinking their messaging,” a former senior Biden administration official said of the CDC. “They’re smart people and they’re guilty of just being a little bit in a bubble and overthinking things.”

While the CDC’s latest guidance on isolation amounts to the clearest example of the agency’s public messaging woes, former officials said previous CDC messaging — including on masks — have been a source of friction with and frustration within the White House.

“They make insular decisions with the agency — or even within a small group within the agency — and then wait until the last minute to tell everyone it’s coming, so they rush it out without getting reasonable feedback from people who could help address real issues,” one administration official told CNN, referencing other federal health agencies.

In May, Walensky said fully vaccinated people could stop wearing masks indoors, only to reverse course a few months later when new information showed even those with all the recommended shots could still transmit the virus.

The White House was also forced to explain Walensky’s comments in February that teachers did not need to be fully vaccinated for schools to reopen; a day later, Psaki said Walensky was speaking in her “personal capacity.”

White House officials have been loathe to blame Walensky directly, pointing instead to longstanding institutional issues at the CDC and an overly cautious approach among scientists there, which they believe leads to overly complicated or incomplete public health guidance.

“The White House being frustrated with the CDC is like there being sand on a beach,” this former official said. “It’s an age-old thing.”

Read original article here

IT Risk consultant says New World devs “should be ashamed of themselves” for code injection vulnerability

Source: Amazon Game Studio

We are still learning new things about the potential dangers of the New World exploit that was discovered on Friday, and the situation may be worse than we initially thought. Not only is direct code injection possible in every text box in the game, but also the developers appear to be clueless when it comes to fixing the issue.

 

For those who missed it, New World players Josh Strife Hayes and Callum Upton discovered on Friday that the text boxes in the game are HTML, and that the text is not sanitized, which in short means you can run client-side code in any text box in the game. While Amazon has claimed this is not the case, there is overwhelming evidence and examples of players doing this at this point.

 

 

“Every developer at Amazon Game Studio should be ashamed of themselves for letting this go live,” said an IT Risk Consultant. “It’s hard to understate how incompetent this is. Like they would teach you not to do this in a f*cking high school web dev class.”

 

They told me that the bug potentially could not only break in-game systems, but in theory could also be used to access someone’s PC, depending on the permissions that Amazon runs New World on. The extent of the bug is currently unknown, so it is unknown to what extent people can affect the computers of those playing the game, potentially putting your data or even hardware in danger.

 

“If this bug can affect someone’s computer beyond game files, they could use this to gain remote access to people’s computers, install keyloggers to pull their passwords, install viruses, ransomeware, or just delete their entire windows install. That’s the doomsday scenario,” they explained.

 

Luckily, so far no one has experienced the “doomsday” scenario as far as we know, so there is no need to panic about your PC, at least not yet. As the consultant made clear, there is no evidence that this exploit goes beyond in-game experiences as of now.

 

But even without the potential threat to your data and hardware, code injection allows for some seriously damaging in-game results. According to Callum Upton’s testing, Players can crash each other’s systems, blackout the chat with huge images, and he even reported that code injection allows for infinite gold using a script and a quest that nets you 50 gold. This is a clear existential threat to New World’s economy.

 

 

To communicate the gravity of the situation, the consultant told me: “Honest to god, if they can’t fix this tonight [Friday], and can’t determine the extent of the problem, the servers should be taken down. The game is already broken and unplayable since anyone can crash your game at any time
and print infinite money. It would be a reckless disregard for their customers to leave the game up in this state IMO.”

 

Amazon Games Studios developers appear to have no idea what they are doing

While the exploit itself is scary enough, Amazon Games Studio’s response, or rather lack of response, is even scarier.

 

The IT consultant told me: “What’s scary about this, is it seems to me like the Amazon devs don’t understand the nature of the problem, the nature of this very basic and easy to solve problem.”

 

So far the studio has done nothing about the underlying code injection issue, the servers remain online, and the only action they took to limit the dangers of code injection was by banning specific codes in the chat (which didn’t work). It is unacceptable to have a code injection flaw this large in 2021, it is even more unacceptable that they appear to not know what do to next.

 

For context, this is an exploit that previously showed up and was fixed in World of Warcraft…. in 2004! Over 16 years ago game developers solved this problem using the now standardized method called code sanitation, so for Amazon Game Studios to completely miss it is unacceptable to IT professionals. 

 

In fact, not only is code sanitation already very well known, and taught in basically every college internet development course, but according to the IT Consultant, it’s also already built into most developer languages. So the tools are already there for them to properly sanitize messages and avoid client-side coding issues. The IT professional I consulted with for this article said that they were “baffled” at this level of incompetence from New World devs.

 

The patch that Amazon did put out on Friday seemed to misunderstand the issue they are facing. Their patch just banned the specific code that people were using to spam images in the general chat, but you can still do it right now by typing the code in a different order. The fundamental flaw remains In the game, as of writing this article.

 

 

The details surrounding this exploit are still emerging, so we don’t necessarily have all the facts about the severity of this issue. Players don’t necessarily need to start uninstalling New World from their devices or anything, but until this issue is fixed the integrity of New World is in question. Amazon needs to take quick decisive action to fix the exploit plaguing their systems, or they are looking at a serious crisis.

 

Unfortunately, the dev team isn’t exactly filling New World players with the hope that they are in good hands. Hopefully, they can get their act together and patch this issue very soon.

 

 

 

 

 

 

 

Read original article here