GPT-4 Boosts Skilled Kenyan Entrepreneurs by 15% Profit While Costing Unprepared Businesses 10% in Six-Month Study
A six-month experiment by researchers from UC Berkeley, Harvard, and Columbia University tested how a GPT-4-powered AI advisor influenced small business owners in Kenya.
The most capable entrepreneurs increased their profits by 15 percent after using the tool. They treated the model’s suggestions as starting points rather than ready-made instructions and adapted them to real-world constraints, such as purchasing generators to handle frequent power outages or expanding their service offerings.
In contrast, less experienced participants lost approximately 10 percent of their income. They frequently implemented the AI’s generic recommendations without scrutiny, for example by lowering prices in ways that reduced overall revenue despite appearing logical in the chat interface.
The study concludes that GPT-4 functions less as a business consultant and more as a highly confident generator of losses when users forgo critical evaluation. The researchers emphasize that the problem stems primarily from the human tendency to stop thinking critically rather than from any flaw in the underlying technology.
Supporting evidence comes from an earlier Dickinson College experiment in which 97 percent of participants copied a clearly wrong answer generated by ChatGPT on a straightforward task, while the control group without AI performed better. A simple prompt reminding users to verify the output doubled accuracy rates.
Analysis of 1.4 million work sessions at KPMG produced similar findings: roughly 95 percent of users request a draft or summary and accept the first result, whereas only 5 percent treat the model as a collaborative reasoning partner by supplying context, guiding the chain of thought, and questioning outputs.
For organizations, these patterns mean that simply providing access to generative AI tools says little about expected productivity gains. Universal guidelines can even prove counterproductive because different tasks require different degrees of human oversight. The technology can accelerate strong performers while convincingly leading weaker users in the wrong direction.
Related articles
Securing 1C Web Client Access with External MFA via Nginx, Keycloak and Active Directory
A detailed implementation separates user browser access from integration traffic by placing MFA enforcement on an external Nginx and Keycloak layer while preserving the original IIS endpoints for automated systems. The architecture uses a new IIS server for employees only, with oauth2-proxy handling OIDC flows against Keycloak federated to Active Directory. Access is restricted to members of a dedicated AD group such as 1C_Web_2FA, and TOTP serves as the second factor. Existing integrations continue to reach the legacy IIS directly from whitelisted IP addresses without triggering interactive authentication. The solution avoids 1C OpenID Authentication, keeps native 1C login intact, and supports desktop shortcuts that launch the web client in a dedicated browser window. Network controls ensure the new IIS cannot be reached directly from the internet, preventing bypass of the MFA gateway.
Avanpost Unveils DAG System for Sensitive File Discovery and Excessive Access Rights Management
Avanpost has launched its new DAG solution designed to control access to unstructured data across file servers, cloud environments, and corporate knowledge bases. The system scans file contents to identify confidential information, maps actual user permissions, and highlights policy violations that official regulations often overlook. Built-in workflow automation routes access review requests to data owners, collects approvals, assigns remediation tasks to IT teams, and verifies changes through follow-up scans. DAG integrates with existing IdM/IAM platforms to factor in employee roles and employment status, automatically triggering access reviews during job changes or terminations. The platform also forwards detected violations to SIEM and SOAR systems for coordinated response and supports both high-load enterprise deployments and simpler mid-market installations. Customers can request on-site pilots to evaluate the solution against their current infrastructure.
Why Complex Password Policies Fail to Protect Companies: Practical Account Security Guidance
Many organizations implement strict password rules requiring at least eight characters with numbers, uppercase letters, and special symbols, plus mandatory changes every 30 days. Employees respond by creating predictable variations such as Company2026!, Company2026@, and Company2026#, which offer little real protection against phishing or credential stuffing. The core issue lies in poor visibility into all accounts across Active Directory, VPN, cloud services, databases, and contractor access rather than password length alone. Effective security begins with full inventory of every account, classification into user, privileged, service, and external types, and clear ownership assignment. Privileged accounts require separate credentials, MFA, minimal rights, and activity logging, while service accounts must avoid hardcoded secrets in configuration files or source code. Password managers must enforce client-side encryption so that even compromised administrator accounts cannot access stored secrets. MFA deployment should prioritize high-risk entry points such as VPN, email, and backup systems, and access revocation must integrate with HR processes to prevent former employees or contractors from retaining credentials.
Wireshark Wi-Fi Traffic Analysis: Diagnosing Connectivity Failures in 802.11 Networks
Wireshark captures help distinguish between radio-layer issues, DHCP failures, and application-layer problems when a device connects to Wi-Fi but cannot load pages. The guide explains how to select the right capture point—client, monitor-mode adapter, or wired side of the access point—and why ordinary Ethernet headers often hide critical 802.11 management and control frames. Detailed sections cover CSMA/CA contention, frame types (Management, Control, Data), EAPOL-Key exchanges for WPA2-Personal, and the limitations of retry flags as loss indicators. Practical Linux commands using iw, dumpcap, and NetworkManager demonstrate how to enable monitor mode on channel 6 HT20 and record a two-minute trace. Filters for wlan.addr, eapol, and wlan.fc.retry allow analysts to isolate association failures, key-handshake problems, or DHCP delays. The article also addresses decryption of WPA2 traffic with a known passphrase and warns that Wireshark cannot replace a spectrum analyzer for detecting non-Wi-Fi interference.