Slashdot Mirror

HughPickens.com writes Joshua Rothman has a very interesting article in The New Yorker about Liu Cixin, China's most popular science-fiction writer. The author of thirteen books has retained his day job as a computer engineer with a State-run power plant in a remote part of Shanxi province, because it helps him to stay grounded, enabling him to "gaze at the unblemished sky" as many of his co-workers do. In China, Cixin is about as famous as William Gibson in the United States and Cixin is often compared to Arthur C. Clarke, whom he cites as an influence. Rothman writes that American science fiction draws heavily on American culture, of course—the war for independence, the Wild West, film noir, sixties psychedelia—and so humanity's imagined future often looks a lot like America's past. For an American reader, one of the pleasures of reading Liu is that his stories draw on entirely different resources.

For example, in The Wages of Humanity, visitors from space demand the redistribution of Earth's wealth, and explain that runaway capitalism almost destroyed their civilization. In Taking Care of Gods, the hyper-advanced aliens who, billions of years ago, engineered life on Earth descend from their spaceships; they turn out to be little old men with canes and long, white beards. "We hope that you will feel a sense of filial duty towards your creators and take us in," they say. "I doubt that any Western sci-fi writer has so thoroughly explored the theme of filial piety," writes Rothman. In another story, The Devourer, a character asks, "What is civilization? Civilization is devouring, ceaselessly eating, endlessly expanding." But you can't expand forever; perhaps it would be better, another character suggests, to establish a "self-sufficient, introspective civilization." "At the core of Liu's sensibility," concludes Rothamn, "is a philosophical interest in the problem of limits. How should we react to the inherent limitations of life? Should we push against them or acquiesce?"

HughPickens.com writes Joshua Rothman has a very interesting article in The New Yorker about Liu Cixin, China's most popular science-fiction writer. The author of thirteen books has retained his day job as a computer engineer with a State-run power plant in a remote part of Shanxi province, because it helps him to stay grounded, enabling him to "gaze at the unblemished sky" as many of his co-workers do. In China, Cixin is about as famous as William Gibson in the United States and Cixin is often compared to Arthur C. Clarke, whom he cites as an influence. Rothman writes that American science fiction draws heavily on American culture, of course—the war for independence, the Wild West, film noir, sixties psychedelia—and so humanity's imagined future often looks a lot like America's past. For an American reader, one of the pleasures of reading Liu is that his stories draw on entirely different resources.

For example, in The Wages of Humanity, visitors from space demand the redistribution of Earth's wealth, and explain that runaway capitalism almost destroyed their civilization. In Taking Care of Gods, the hyper-advanced aliens who, billions of years ago, engineered life on Earth descend from their spaceships; they turn out to be little old men with canes and long, white beards. "We hope that you will feel a sense of filial duty towards your creators and take us in," they say. "I doubt that any Western sci-fi writer has so thoroughly explored the theme of filial piety," writes Rothman. In another story, The Devourer, a character asks, "What is civilization? Civilization is devouring, ceaselessly eating, endlessly expanding." But you can't expand forever; perhaps it would be better, another character suggests, to establish a "self-sufficient, introspective civilization." "At the core of Liu's sensibility," concludes Rothamn, "is a philosophical interest in the problem of limits. How should we react to the inherent limitations of life? Should we push against them or acquiesce?"

HughPickens.com writes: Quentin Hugon, Benjamin Benoit and Damien Leloup have created a memorial page for projects adandoned by Google over the years including: Google Answers, Lively, Reader, Deskbar, Click-to-Call, Writely, Hello, Send to Phone, Audio Ads, Google Catalogs, Dodgeball, Ride Finder, Shared Stuff, Page Creator, Marratech, Goog-411, Google Labs, Google Buzz, Powermeter, Real Estate, Google Directory, Google Sets, Fast Flip, Image Labeler, Aardvark, Google Gears, Google Bookmarks, Google Notebook, Google Code Search, News Badges, Google Related, Latitude, Flu Vaccine Finder, Google Health, Knol, One Pass, Listen, Slide, Building Maker, Meebo, Talk, SMS, iGoogle, Schemer, Notifier, Orkut, Hotpot, Music Trends, Refine, SearchWiki, US Government Search, Sparrow, Web Accelerator, Google Accelerator, Accessible Search, Google Video, and Helpouts. Missing from the list that we remember are Friend Connect, Google Radio Ads, Jaiku, SideWiki, and Wave.

We knew there were a lot, but who knew there'd be so many. Which abandoned Google project do you wish were still around?

An anonymous reader writes: Following on the fortieth anniversary of Dungeons & Dragons last year, another formative influence on modern gaming is celebrating its fortieth birthday: Games Workshop. Playing at the World covers the story of how the founders, Ian Livingstone and Steve Jackson (not the other Steve Jackson), started out as subscribers to the 1960s British gaming zine Albion playing Diplomacy by mail and (in Ian's case) publishing silly cartoons. When Albion folded at the beginning of 1975, Livingstone and Jackson formed Games Workshop with its own zine Owl & Weasel as a way to bring "progressive games" (as in "progressive rock") to the UK. Shortly thereafter, when they discovered Dungeons & Dragons, fantasy and role-playing games became their focus. After Owl & Weasel grew up into White Dwarf in 1977, its famous "Fiend Factory" column ended up populating the D&D Fiend Folio. And in the 1980s, of course, they brought us Warhammer and their retail stories brought stylish miniatures to many a needful gamer. Happy birthday to Games Workshop!

Artem Tashkinov writes: Luke Wolf, a KDE developer, argues that PC-BSD might become a serious desktop OS contender by year 2020, since Linux so far has failed to grasp any serious market share. He writes, "Consider this: In the past 10 years has the distribution you run changed significantly in what it offers over other distributions? I think you'll find the answer is largely no. I do have to give a shout out to openSUSE for the OBS, but otherwise I've used my desktop in the same exact way that I have always used it within the continuity of distribution X,Y, or Z since I started using them. Distributions simply aren't focused on desktop features, they're leaving it up to the DEs to do so." He continues, "PC-BSD on the other hand in fitting with the BSD mindset of holistic solutions is focused on developing desktop features and is moving rapidly to implement them." What do you think?

lpress writes In an effort to support Cuba's nascent private sector, the Treasury Department announced on Friday that Americans can now import goods and services produced by "independent Cuban entrepreneurs." Will the Cuban government allow that? Cuba is a communist nation, but they have a list of 201 job categories in which self-employment is permitted. Most of those jobs are goofy things like magician and pedal-taxi driver, but one is not – computer programmer. Will the Castro regime let private individuals and organizations export software and software services to the United States and the rest of the world?

What kind of person builds a cloud chamber at home in his spare time -- and wants to make it easy for other people to make them, too? How about someone who uses a 3-D printer to make shifters for his bicycle? And then there's the spherical speaker enclosures and the alarm clock that shreds money if you don't wake up. The clock isn't original. Seattle resident Rich Olson (whose URL is nothinglabs.com) says someone else originally made it and he liked the idea. No 3-D printing or laser cutting required; just buy and hook up some inexpensive, easy-to-find components and off you go. Despite its lack of originality (which Rich freely admits), this little project got Rich mentioned everywhere from financial publications to the New York Daily News to Huffington Post's UK edition, which is somewhat amusing when you realize that Rich is not famous (outside of a small circle of maker-type people) and doesn't have anyone doing PR for him.

By day, Rich is a humble mobile app developer. But when he's done working he becomes Mr. 3-D and laser cut cool designer guy who does fun things in his workshop with CAD software, a 3-D printer, a laser cutter, and (of course) traditional cutting, drilling, and shaping tools. Since he's an open source devotee, Rich posts almost all of his designs online so you can make them yourself. Or modify them. Or use them to spur an entirely new idea that you can then make, and hopefully pass on to others. While it's interesting to see that Martha Stewart is now selling 3-D printer designs, Rich and his hobby are what the maker movement is really about. If you're so inclined, you can follow Rich on YouTube, where he posts a video now and then that shows what he's made recently or follow his low-volume blog to see what he's up to.

An anonymous reader writes Google today announced that Android One, the company's standard for bringing smartphones to the developing world, is coming to Indonesia later this month. This makes Indonesia the fifth country to roll out Android One, in addition to India, Bangladesh, Nepal, and Sri Lanka. Yet the bigger news is that these latest devices are shipping with Android 5.1 Lollipop. Before today, the latest known version of Google's mobile operating system was Android 5.0 Lollipop, which debuted in November 2014.

jones_supa writes Since 2010, Security Reward Programs have been one cornerstone of Google's relationship with the security research community. In 2014, the company rewarded 200 different researchers with a total amount of $1.5 million. Google wants to celebrate the participants' contributions to the company, and in turn, their contributions back to the researchers. For 2015, two additions to the programs are being announced. It has been noted that researchers' efforts through these programs, combined with Google's internal security work, have made it increasingly difficult to find bugs. Of course, that's good news, but it can also be discouraging when researchers invest their time and struggle to find issues. With this in mind, today Google is rolling out a new, experimental program: Vulnerability Research Grants. These are up-front awards that will be provided to researchers before they even submit a bug. To learn more about the current grants, and review your eligibility, have a look at the rules page. Second, also starting today, all mobile applications officially developed by Google on Google Play and iTunes will now be within the scope of the Vulnerability Reward Program.

New submitter plate_o_shrimp sends word that Google has announced the next group of cities set to receive gigabit fiber infrastructure. They're concentrating on cities around four metro areas: Atlanta, Charlotte, Nashville, and Raleigh-Durham. "We’ve been working closely with city leaders over the past year on a joint planning process to get their communities ready for Google Fiber—and now the really hard work begins. Our next step is to work with cities to create a detailed map of where we can put our thousands of miles of fiber, using existing infrastructure such as utility poles and underground conduit, and making sure to avoid things like gas and water lines. Then a team of surveyors and engineers will hit the streets to fill in missing details. Once we’re done designing the network (which we expect to wrap up in a few months), we’ll start construction." Google also said they're currently looking into Phoenix, Portland, Salt Lake City, San Antonio, and San Jose.

theodp (442580) writes "For better or worse, YouTube stars are a big deal these days. Last December, Microsoft and Code.org turned to YouTube Stars iJustine and The Fine Brothers to help recruit the nation's K-12 schookids for the Hour of Code. And next week, in what the White House is touting as the State of the YOUnion , President Obama will turn to a trio of YouTube Stars for advice on the issues of day following his State of the Union Address. "We're inviting a handful of YouTube creators to the White House to talk with the President in person," explains the White House Blog, "and you can watch it all live on Thursday, January 22. YouTube creators Bethany Mota, GloZell, and Hank Green will interview President Obama about the issues care they most about and what they're hearing from their audiences." Commenting on the choice of the YouTube interviewers, CNN's David Acosta asked (confused) WH Press Secretary Josh Earnest, "I'm just curious, was 'Charlie Bit My Finger' or 'David After Dentist' not available?" So, how long until the U.S. is redistricted into YouTube Channels?"

theodp writes Some of the world's leading Data Scientists are on the payrolls of Microsoft, Google, Facebook, Yahoo, and Apple. So, it'd be interesting to get their take on the infographics the tech giants have passed off as diversity data disclosures. Microsoft, for example, reported its workforce is 29% female, which isn't great, but if one takes the trouble to run the numbers on a linked EEO-1 filing snippet (PDF), some things look even worse. For example, only 23.35% of its reported white U.S. employee workforce is female (Microsoft, like Google, footnotes that "Gender data are global, ethnicity data are US only"). And while Google and Facebook blame their companies' lack of diversity on the demographics of U.S. computer science grads, CS grad and nationality breakouts were not provided as part of their diversity disclosures. Also, the EEOC notes that EEO-1 numbers reflect "any individual on the payroll of an employer who is an employee for purposes of the employers withholding of Social Security taxes," further muddying the disclosures of companies relying on imported talent, like H-1B visa dependent Facebook. So, were the diversity disclosure mea culpas less about providing meaningful data for analysis, and more about deflecting criticism and convincing lawmakers there's a need for education and immigration legislation (aka Microsoft's National Talent Strategy) that's in tech's interest?

theodp writes "Instead of improving the instructional practices of teachers," laments Chicago public school Principal Michael Beyer, "we are throwing vast sums of money and time at software and digital solutions that are largely untested, unproven and highly questionable." Ed-Tech vendors' so-called "weapons of mass instruction," argues Beyer, may show "gains" on the high-stakes tests because they mimic the targeted test format, but the learning gains don't necessarily transfer to the real world, or last much longer than the end of the school year. But technology in the classroom is not going away, as one commenter notes. So, what to do? Well, since U.S. CTO Megan Smith is looking for bigger technological fish to fry than weaning the White House off floppy disks, why not give her a crack at Ed-Tech, including a healthy budget and some Lab Schools where she could have educators and technologists brainstorm-and-prototype to separate the Ed-Tech wheat from the chaff without undue vendor influence and short-term test score pressure?

theodp writes: "If 95% of great programmers aren't in the U.S.," Matt Mullenweg advises in How Paul Graham Is Wrong (a rejoinder to Graham's Let the Other 95% of Great Programmers In), "and an even higher percentage not in the Bay Area, set up your company to take advantage of that fact as a strength, not a weakness. Use WordPress and P2, use Slack, use G+ Hangouts, use Skype, use any of the amazing technology that allows us to collaborate as effectively online as previous generations of company did offline. Let people live someplace remarkable instead of paying $2,800 a month for a mediocre one bedroom rental in San Francisco. Or don't, and let companies like Automattic and Github hire the best and brightest and let them live and work wherever they like." Microsoft and Google — which hawk the very tools to facilitate remote work that Mullenweg cites — have shuttered remote offices filled with top talent even as they cry the talent sky is falling. So, is "being stubborn on keeping a company culture that requires people to be physically co-located," as Mullenweg puts it, a big part of tech's 'talent shortage' problem?" Chris Pepper also recently posted another reasoned rebuttal to Graham's post.

An anonymous reader writes: Over at Medium, Jon Peterson (author of Playing at the World) has put up a new in-depth article covering the internal process at TSR that created Dungeons & Dragons modules in the 1980s. The adventures created at that time (by the likes of Tracy Hickman, then a staff designer) paved the way for many later computer role-playing games, and this piece shows how TSR work was pitched, storyboarded, proofed, edited and organized. With the positive reception of the new 5th edition of D&D and the attention paid to the fortieth anniversary of the game, the historical record behind modern gaming gets ever more important.

lpress writes Cuba first connected to the Internet in 1996 through a Sprint link funded by the US National Science Foundation. A year later the Cuban government decided to contain and control it. Now they say the Internet is a priority. If so, they need a long term plan, but they can get started with low cost interim measures. There is virtually no modern infrastructure on the island, but they could aggressively deploy satellite technology at little cost and, where phone lines could support it, install DSL equipment.

ideonexus writes: Mississippi Attorney General Jim Hood has called for a "time out" in his perpetual fight with Google in response to the company filing a lawsuit against him for conspiring with the movie industry to persecute the search giant. Leaked Sony Pictures Entertainment emails and documents obtained under FOIA requests this week have exposed how the Motion Picture Association of America was colluding with and lobbying state prosecutors to go after Google, even going so far as to "assigned a team of lawyers to prepare draft subpoenas and legal briefs for the attorneys general" to make it easier for them to persecute the company. Here's the full complaint (PDF).

PC Magazine reports (citing a blog post from project manager Andrew Nartker) that Google's Cardboard -- first introduced to some laughter -- is growing up, with a small but growing collection of compatible apps and a recently announced SDK. And while Cardboard itself is pretty low-tech (cardboard, rubber band, a magnet) and consequently cheap, the resulting VR experience is pretty good, which explains why more than 500,000 of them have now shipped.

An anonymous reader writes A security researcher has released a humorous vulnerability description for the Keurig 2.0 coffee maker, which includes DRM designed to only brew Keurig brand coffe pods (K-Cups): "Keurig 2.0 Coffee Maker contains a vulnerability in which the authenticity of coffee pods, known as K-Cups, uses weak verification methods, which are subject to a spoofing attack through re-use of a previously verified K-Cup." The vulnerability description even includes mitigating controls, such as keeping the Keurig in a locked cabinet when not in use. Also at Hackaday.

dcblogs writes At the supercomputing conference, SC14, this week, a U.S. Dept. of Energy offical said the government has set a goal of 2023 as its delivery date for an exascale system. It may be taking a risky path with that amount of lead time because of increasing international competition. There was a time when the U.S. didn't settle for second place. President John F. Kennedy delivered his famous "we choose to go to the moon" speech in 1962, and seven years later a man walked on the moon. The U.S. exascale goal is nine years away. China, Europe and Japan all have major exascale efforts, and the government has already dropped on supercomputing. The European forecast of Hurricane Sandy in 2012 was so far ahead of U.S. models in predicting the storm's path that the National Oceanic and Atmospheric Administration was called before Congress to explain how it happened. It was told by a U.S. official that NOAA wasn't keeping up in computational capability. It's still not keeping up. Cliff Mass, a professor of meteorology at the University of Washington, wrote on his blog last month that the U.S. is "rapidly falling behind leading weather prediction centers around the world" because it has yet to catch up in computational capability to Europe. That criticism followed the $128 million recent purchase a Cray supercomputer by the U.K.'s Met Office, its meteorological agency.

Nerval's Lobster writes Whatever your plans for Thanksgiving, Google can offer some advice: try to avoid driving anywhere the day before. Analysts from the search-engine giant's Google Maps division crunched traffic data from 21 U.S. cities over the past two years and found that the Wednesday before Thanksgiving is by far the worst traffic day that week, with some notable exceptions. (In Honolulu, Providence, and San Francisco, the worst traffic is always on Saturday; in Boston, it's Tuesday.) Unfortunately, Wednesday is often the only available travel day for many Americans—but Google thinks they can beat the worst of the traffic if they leave before 2 P.M. or after 7 P.M. on that day. Traffic on Thanksgiving itself is also light, according to the data. When it comes to driving back home, Sunday beats Saturday from a traffic perspective. According to Google Maps' aggregated trends, Americans also seek out "ham shop," "pie shop," and "liquor store" on the day before Thanksgiving, as they rush to secure last-minute items.

An anonymous reader writes "Google today released Chrome 39 for Windows, Mac, and Linux. The biggest addition in this release is 64-bit support for OS X, which first arrived in Chrome 38 beta. Unlike on Windows, where 32-bit and 64-bit versions will both continue to be available (users currently have to opt-in to use the 64-bit release), Chrome for Mac is now only available in 64-bit. There are also a number of security fixes and developer features. Here's the full changelog.

jones_supa writes: Former Valve engineer Rich Geldreich has written up a blog post about the state of Linux Gaming. It's an interesting read, that's for sure. When talking about recent bigger game ports, his take is that the developers doing these ports just aren't doing their best to optimize these releases for Linux and/or OpenGL. He points out how it took significant resources from Valve to properly optimize Source engine for Linux, but that other game studios are not walking the last mile. About drivers, he asks "Valve is still paying LunarG to find and fix silly perf bugs in Intel's slow open source driver. Surely this can't be a sustainable way of developing a working driver?" He ends his post by agreeing with a Slashdot comment where someone is basically saying that SteamOS is done, and that we will never get our hands on the Steam Controller.

If you go to a sci-fi or gaming convention you'll see people in exotic "character" costumes, often holding exotic props, with some of the most popular being futuristic firearm mockups of one sort or another. Who makes all these cool fannish items? A whole bunch of artists and artisans, including Michelle Sleeper (who says she got tired of jokes about her name many years ago). She's not only one of these artisans, but is also a committed 3-D printer user, since 3-D printing is how she forms a high percentage of her props (with the word "props" being used here in the theatrical rather than the nautical sense). To keep up with what Michelle is making, you should check her blog. One of her most interesting posts, titled Atlanta Mini Maker Faire: On missing deadlines, failure, and triage, is about preparing for the event where Timothy Lord met and interviewed Michelle.

Even if gamer gatherings and SF conventions aren't your thing, the interview (along with the links above) gives a nice glimpse into the life of an independent artisan who uses technology to create a lot of her art. (Alternate Video Link)

If you go to a sci-fi or gaming convention you'll see people in exotic "character" costumes, often holding exotic props, with some of the most popular being futuristic firearm mockups of one sort or another. Who makes all these cool fannish items? A whole bunch of artists and artisans, including Michelle Sleeper (who says she got tired of jokes about her name many years ago). She's not only one of these artisans, but is also a committed 3-D printer user, since 3-D printing is how she forms a high percentage of her props (with the word "props" being used here in the theatrical rather than the nautical sense). To keep up with what Michelle is making, you should check her blog. One of her most interesting posts, titled Atlanta Mini Maker Faire: On missing deadlines, failure, and triage, is about preparing for the event where Timothy Lord met and interviewed Michelle.

Even if gamer gatherings and SF conventions aren't your thing, the interview (along with the links above) gives a nice glimpse into the life of an independent artisan who uses technology to create a lot of her art. (Alternate Video Link)

An anonymous reader writes: Google today introduced a new tool for testing network traffic security called Nogotofail. The company has released it as an open source project available on GitHub, meaning anyone can use it, contribute new features, provide support for more platforms, and do anything else with the end goal of helping to improve the security of the Internet. The tool's main purpose is to test whether the devices or applications you are using are safe against known TLS/SSL vulnerabilities and misconfigurations. Nogotofail works on Android, iOS, Linux, Windows, Chrome OS, OSX, and "in fact any device you use to connect to the Internet."

lpress writes I tested CBS All Access video streaming. It has technical problems, which will be resolved, but I will still pass because they show commercials in addition to a $5.99 per month fee. Eventually, we will all cut the cord and have a choice of viewing modes — on-demand versus scheduled and with and without commercials — but don't expect your monthly bill to drop as long as our ISPs are monopolies or oligopolies.

Z80xxc! writes: The Gmail team announced "Inbox" this morning, a new way to manage email. Inbox is email, but organized differently. Messages are grouped into "bundles" of similar types. "Highlights" pull out and display key information from messages, and messages can be "snoozed" to come back later as a reminder. Inbox is invite-only right now, and you can email inbox@google.com to request an invite.

An anonymous reader writes with this excerpt from VentureBeat: Google today announced it is beefing up its two-step verification feature with Security Key, a physical USB second factor that only works after verifying the login site is truly a Google website. The feature is available in Chrome: Instead of typing in a code, you can simply insert Security Key into your computer's USB port and tap it when prompted by Google's browser. "When you sign into your Google Account using Chrome and Security Key, you can be sure that the cryptographic signature cannot be phished," Google promises. While Security Key works with Google Accounts at no charge, you'll need to go out and buy a compatible USB device directly from a Universal 2nd Factor (U2F) participating vendor.

HughPickens.com writes Jim Edwards writes at Business Insider that Google is so large and has such a massive need for talent that if you have the right skills, Google is really enthusiastic to hear from you — especially if you know how to use MatLab, a fourth-generation programming language that allows matrix manipulations, plotting of functions and data, implementation of algorithms, creation of user interfaces, and interfacing with programs written in other languages, including C, C++, Java, Fortran and Python. The key is that data is produced visually or graphically, rather than in a spreadsheet. According to Jonathan Rosenberg , Google's former senior vice president for product management, being a master of statistics is probably your best way into Google right now and if you want to work at Google, make sure you can use MatLab. Big data — how to create it, manipulate it, and put it to good use — is one of those areas in which Google is really enthusiastic about. The sexy job in the next ten years will be statisticians. When every business has free and ubiquitous data, the ability to understand it and extract value from it becomes the complimentary scarce factor. It leads to intelligence, and the intelligent business is the successful business, regardless of its size. Rosenberg says that "my quote about statistics that I didn't use but often do is, 'Data is the sword of the 21st century, those who wield it the samurai.'"

An anonymous reader writes: As promised, Google today released the full Android 5.0 Lollipop SDK, along with updated developer images for Nexus 5, Nexus 7 (2013), ADT-1, and the Android emulator. The latest version of Android isn't available just yet, but the company is giving developers a head start (about two weeks), so they can test their apps on the new platform. To get the latest Android 5.0 SDK, fire up Android SDK Manager and head to the Tools section, followed by latest SDK Tools, SDK Platform-tools, and SDK Build-tools. Select everything under the Android 5.0 section, hit "Install packages...", accept the licensing agreement, and finally click Install. Google also rolled out updated resources for their Material Design guidelines.

An anonymous reader writes: As promised, Google today released the full Android 5.0 Lollipop SDK, along with updated developer images for Nexus 5, Nexus 7 (2013), ADT-1, and the Android emulator. The latest version of Android isn't available just yet, but the company is giving developers a head start (about two weeks), so they can test their apps on the new platform. To get the latest Android 5.0 SDK, fire up Android SDK Manager and head to the Tools section, followed by latest SDK Tools, SDK Platform-tools, and SDK Build-tools. Select everything under the Android 5.0 section, hit "Install packages...", accept the licensing agreement, and finally click Install. Google also rolled out updated resources for their Material Design guidelines.

An anonymous reader writes In addition to Android 5.0 Lollipop, Google today also announced the first devices running the new version of its mobile operating system: the Nexus 6 and the Nexus 9. The former is a phablet built by Motorola, and the latter is a tablet built by HTC. The Nexus 6 is going up for pre-order on October 29, starting at $649. The Nexus 9 meanwhile is going up for pre-order this Friday (October 17), and you'll also be able to get it in stores on November 3.

An anonymous reader writes: In addition to updating Chrome for iOS, Google has released Chrome 38 for Windows, Mac, and Linux. While Chrome 38 beta brought a slew of new features, the stable release is pretty much just a massive security update. This means that, with Chrome 38, Google isn't adding any features to the stable channel (full changelog). That said, Chrome 38 does address 159 security issues (including 113 "relatively minor ones"). Google spent $75,633.70 in bug bounties for this release.

swillden writes: There's been a lot of discussion of what, exactly, is meant by the Apple announcement about iOS8 device encryption, and the subsequent announcement by Google that Android L will enable encryption by default. Two security researchers tackled these questions in blog posts:

Matthew Green tackled iOS encryption, concluding that the change really boils down to applying the existing iOS encryption methods to more data. He also reviews the iOS approach, which uses Apple's "Secure Enclave" chip as the basis for the encryption and guesses at how it is that Apple can say it's unable to decrypt the devices. He concludes, with some clarification from a commenter, that Apple really can't (unless you use a weak password which can be brute-forced, and even then it's hard).

Nikolay Elenkov looks into the preview release of Android "L." He finds that not only has Google turned encryption on by default, but appears to have incorporated hardware-based security as well, to make it impossible (or at least much more difficult) to perform brute force password searches off-device.

d33tah notes the announcement of Google Code-In 2014 and Google Summer of Code 2015. A call to all students: if you have ever thought it would be cool to write code and see it make a difference in the world, then please keep reading. We are excited to announce the next editions of two programs designed to introduce students to open source software development, Google Summer of Code for university students and Google Code-in for 13-17 year old students.

lpress writes Alibaba is this week's hot news — they have had a lengthy PR campaign (preceded by a documentary film) followed by a record-setting stock offering. After a day of trading Alibaba's market capitalization was comparable to that of established tech giants. But, there are cultural and structural differences between Alibaba and U.S. companies. Alibaba is tightly woven into a complex fabric of personal, corporate and government organization relationships. The same can be said of information technology companies in Singapore. Is owning a share of, say, Apple, conceptually the same as owning a share of Alibaba?

An anonymous reader writes: Dropbox, Google, and the Open Technology Fund have announced a new organization focused on making open source security tools easier to use. Called Simply Secure, the initiative brings together security researchers with experts in user interaction and design to boost adoption rates for consumer-facing security solutions. The companies point out that various security options already do exist, and are technically effective. Features like two-factor authentication remain useless, however, because users don't adopt them due to inconvenience or technical difficulty.

jones_supa writes Google has revealed that it's launching the finished 64-bit version of Chrome 39 for OS X this November, which already brought benefits in speed, security and stability on Windows. However at this point the 32-bit build for Mac will cease to exist. Just to make it clear, this decision does not apply to Windows and Linux builds, at least for now. As a side effect, 32-bit NPAPI plugins will not work on Chrome on Mac version 39 onwards. The affected hardware are only the very first x86-based Macs with Intel Core Duo processors. An interesting question remains, whether the open source version of Chrome, which is of course Chromium, could still be compiled for x86-32 on OS X.

sfcrazy writes Google will integrate Voice and Hangouts with the launch of its redesigned Hangouts apps for Android and iOS, as well as on the web. Amit Fulay, Product Manager at Google says, "Starting today you can make voice calls from Hangouts on Android, iOS and the web. It's free to call other Hangouts users, it's free to call numbers in the U.S. and Canada, and the international rates are really low. So keeping in touch is easier and more affordable than ever."

An anonymous reader writes: Google recently announced Chrome will be gradually phasing out support for certificates using SHA-1 encryption. They said, "We need to ensure that by the time an attack against SHA-1 is demonstrated publicly, the web has already moved away from it." Developer Eric Mill has written up a post explaining why SHA-1 is dangerously weak, and why moving browsers away from acceptance of SHA-1 is a lengthy, but important process. Both Microsoft and Mozilla have deprecation plans in place, but Google's taking the additional step of showing the user that it's not secure. "This is a gutsy move by Google, and represents substantial risk. One major reason why it's been so hard for browsers to move away from signature algorithms is that when browsers tell a user an important site is broken, the user believes the browser is broken and switches browsers. Google seems to be betting that Chrome is trusted enough for its security and liked enough by its users that they can withstand the first mover disadvantage. Opera has also backed Google's plan. The Safari team is watching developments and hasn't announced anything."

Trailrunner7 writes: Mozilla is planning to add support for public-key pinning in its Firefox browser in an upcoming version. In version 32, which would be the next stable version of the browser, Firefox will have key pins for a long list of sites, including many of Mozilla's own sites, all of the sites pinned in Google Chrome and several Twitter sites. Public-key pinning has emerged as an important defense against a variety of attacks, especially man-in-the-middle attacks and the issuance of fraudulent certificates. The function essentially ties a public key, or set of keys, issued by known-good certificate authorities to a given domain. So if a user's browser encounters a site that's presenting a certificate that isn't included in the set of pinned public keys for that domain, it will then reject the connection. The idea is to prevent attackers from using fake certificates in order to intercept secure traffic between a user and the target site.

An anonymous reader writes Google has released Chrome/Chromium version 37 for Windows, Mac, and Linux. Among the changes are better-looking fonts on Windows and a revamped password manager. There are 50 security fixes, including several to patch a sandbox escaping vulnerability. The release also brings stable 64-bit Windows support which ...offers many benefits for speed, stability and security. Our measurements have shown that the native 64-bit version of Chrome has improved speed on many of our graphics and media benchmarks. For example, the VP9 codec that’s used in High Definition YouTube videos shows a 15% improvement in decoding performance. Stability measurements from people opted into our Canary, Dev and Beta 64-bit channels confirm that 64-bit rendering engines are almost twice as stable as 32-bit engines when handling typical web content. Finally, on 64-bit, our defense in depth security mitigations such as Partition Alloc are able to far more effectively defend against vulnerabilities that rely on controlling the memory layout of objects. The full changelog.

NotInHere (3654617) writes with news that Google's Project Zero has been busy at work. A month ago they reported an off-by-one error in glibc that would overwrite a word on the heap with NUL and were met with skepticism at its ability to be used in an attack. Google's 'Project Zero' devised an exploit of the out-of-bounds NUL write in glibc to gain root access using the setuid binary pkexec in order to convince skeptical glibc developers. 44 days after being reported, the bug has been fixed. They even managed to defeat address space randomization on 32-bit platforms by tweaking ulimits. 64-bit systems should remain safe if they are using address space randomization.

schwit1 writes: Using restored images taken by Voyager 2 when it flew past Neptune's moon Triton 25 years ago, scientists have produced a new map and flyby movie of the moon. "The new Triton map has a resolution of 1,970 feet (600 meters) per pixel. The colors have been enhanced to bring out contrast but are a close approximation to Triton's natural colors. Voyager's "eyes" saw in colors slightly different from human eyes, and this map was produced using orange, green and blue filter images. ... Although Triton is a moon of a planet and Pluto is a dwarf planet, Triton serves as a preview of sorts for the upcoming Pluto encounter. Although both bodies originated in the outer solar system, Triton was captured by Neptune and has undergone a radically different thermal history than Pluto. Tidal heating has likely melted the interior of Triton, producing the volcanoes, fractures and other geological features that Voyager saw on that bitterly cold, icy surface. Pluto is unlikely to be a copy of Triton, but some of the same types of features may be present." Dr. Paul Schenk provides provides further information on his blog, and the movie can be viewed here.

An anonymous reader writes: Google today announced it is implementing a new effort to thwart spammers and scammers: the open standard known as Unicode Consortium's "Highly Restricted" specification. In short, Gmail now rejects emails from domains that use what the Unicode community has identified as potentially misleading combinations of letters. The news today follows Google's announcement last week that Gmail has gained support for accented and non-Latin characters. The company is clearly okay with international domains, as long as they aren't abused to trick its users.

Joshua Lifton says you can learn to type at 225 words per minute with his Stenosaurus, an open source stenography keyboard that has a not-there-yet website with nothing but the words, "Stenography is about to evolve," on it as of this writing. If you've heard of Joshua it's probably because he's part of the team behind Crowd Supply, which claims, "Our projects raise an average of $43,600, over twice as much as Kickstarter." A brave boast, but there's plenty of brainpower behind the company. Joshua, himself. has a PhD from MIT, which according to his company bio means, "he's devoted a significant amount of his time learning how to make things that blink." But the steno machine is his own project, independent of Crowd Supply.

Stenotype machines are usually most visible when court reporters are using them. They've been around since the 1800s, when their output was holes in paper tape. Today's versions are essentially chorded keyboards that act as computer input devices. (Douglas Engelbart famously showed off a chorded keyboard during his 1968 Mother of All Demos.) Today you have The Open Steno Project, and Stenosaurus is a member. And while Joshua's project may not have an actual website quite yet, it has an active blog. And the 225 WPM claim? Totally possible. The world record for English language stenography is 360 WPM. And you thought the Dvorak Keyboard was fast. Hah! (Alternate Video Link)

An anonymous reader writes In response to the creation in 2012 by the Internet Engineering Task Force (IETF) of "a new email standard that supports addresses incorporating non-Latin and accented Latin characters", Google has now made it possible for its Gmail users to "send emails to, and receive emails from, people who have these characters in their email addresses." Their goal is to eventually allow its users to create Gmail addresses utilizing these characters.

An anonymous reader writes "Speculation on the eventual shuttering of Google+ has once more risen with news that Google+ Photos will soon be developed and run separately from the social media site. This news follows observations that Google+ "was barely mentioned at Google I/O 2014, while there were 15 sessions dedicated to the service in 2013" and that the company has ended its controversial real name policy. Google Hangouts was also separated from Google+ at the end of July." I've actually heard several people praising Google+ lately; scaling it back to "just a social stream" probably fits into some kind of corollary to Murphy's Law.

An anonymous reader writes "Sunday was the birthday of the late great Gary Gygax, co-creator of Dungeons & Dragons and Futurama guest star. With the fifth edition of D&D soon to come out at Gen Con this year, Jon Peterson, author of Playing at the World, has released a new piece to answer a historical question: how was it, back in 1985, that Gary was ousted from TSR and control of D&D was taken away from him? Drawn from board meeting minutes, stock certificates, letters, and other first-hand sources, it's not a quick read or a very cheery one, but it shows how the greatest success of hobby games of the 1980s fell apart and marginalized its most famous designer."