Domain: itworld.com
Stories and comments across the archive that link to itworld.com.
Stories · 2,036
-
Will Chromebooks Someday Threaten Windows? (itworld.com)
"There are signs that Chromebooks are a bigger long-term threat to Microsoft than you might imagine," reports ITWorld, arguing that "long term, they'll likely be a serious competitor." The reason? Chromebooks sell big in education. They've unseated the Mac in schools. Two years ago, for the first time, Chromebooks outsold Macs in schools. Schools are a great market for Google, but Chromebooks are also Trojan horses. Children and teens use them for schoolwork and more. And when they get Chromebooks, they also get free subscriptions to Google's G suite of apps. If kids grow up using G Suite and Chromebooks, there's a reasonable chance they'll use them when they get older.
Where I live, in Cambridge, Mass., the public Cambridge Rindge and Latin High School gives out free Chromebooks to every one of the more than 2,000 teens in the school, in a bid to close the digital divide between families who can afford to buy computers for their children and those who can't... Cambridge isn't unique. According to a 2017 article in The New York Times, "More than half the nation's primary- and secondary-school students -- more than 30 million children -- use Google education apps like Gmail and Docs... And Chromebooks, Google-powered laptops that initially struggled to find a purpose, are now a powerhouse in America's schools. Today they account for more than half the mobile devices shipped to schools...."
When students graduate, Google makes it easy for them to move all their mail and documents from their school accounts to their personal accounts. And schools sometimes even act as inadvertent salespeople for Google. The Times reports that some schools tell graduating seniors to move all their documents from their school to their personal accounts... The upshot of all this? Windows hardware continues to rule in enterprises. But Chromebooks may one day prove a serious competitor, as students make their way into the workforce. -
Some HTTPS Inspection Tools Actually Weaken Security (itworld.com)
America's Department of Homeland Security issued a new warning this week. An anonymous reader quotes IT World: Companies that use security products to inspect HTTPS traffic might inadvertently make their users' encrypted connections less secure and expose them to man-in-the-middle attacks, the U.S. Computer Emergency Readiness Team warns. US-CERT, a division of the Department of Homeland Security, published an advisory after a recent survey showed that HTTPS inspection products don't mirror the security attributes of the original connections between clients and servers. "All systems behind a hypertext transfer protocol secure (HTTPS) interception product are potentially affected," US-CERT said in its alert.
Slashdot reader msm1267 quotes Threatpost: HTTPS inspection boxes sit between clients and servers, decrypting and inspecting encrypted traffic before re-encrypting it and forwarding it to the destination server... The client cannot verify how the inspection tool is validating certificates, or whether there is an attacker positioned between the proxy and the target server. -
Microsoft Reports New Subscribers For Office 365 Plunged 62% (itworld.com)
An anonymous reader writes: Microsoft is having trouble selling $7-a-month subscriptions to Office 365. In the last three months of 2016, Microsoft added just 900,000 new subscriptions -- and throughout all of 2016, subscriptions increased by just 4.3 million. In fact, a chart at IT World shows that new subscriptions actually peaked in a year ago, with a steady decline in new subscribers ever since. "In each of the last three quarters, Office 365 grew by about 900,000 subscribers, the smallest quarterly increase since early 2014," they write. "Prior to the nine-month stretch of 2016, subscribers were accumulating at rates two to three times larger per quarter."
This explains why Microsoft announced 97 new markets for the software nine weeks ago. So far after four years, Microsoft's found just 25 million subscribers for Office 365 -- and it's not clear how many of those came from their $100 five-user packages. (Although those figures suggest that Office 365 subscriptions are still earning Microsoft at least half a billion dollars a year.) -
Collabora and OwnCloud Announce LibreOffice Online (itworld.com)
sfcrazy writes: Collabora Productivity, a UK-based consulting company, has collaborated with ownCloud Inc. to release a developer edition of online LibreOffice, which they call CODE (Collabora Online Development Edition). "The office suite implementation runs on ownCloud server. That's where all the processing and heavy lifting is done. The rendering happens at the client side. Currently there are three apps: writer (equivalent to MS Word), spreadsheet (Excel) and presentation (PowerPoint). At the moment users can create new documents and edit them. Other functionality, such as collaborative editing, is in the pipeline." -
FTC Appoints EFF Board Member Lorrie Cranor As Chief Technologist (ftc.gov)
itwbennett writes: The US Federal Trade Commission has appointed Lorrie Faith Cranor as Chief Technologist. Cranor is the director of the Carnegie Mellon Usable Privacy and Security Laboratory and a member of the Electronic Frontier Foundation (EFF) Board of Directors. She was previously a researcher at AT&T Labs Research and has also taught at the Stern School of Business at New York University. She will succeed Ashkan Soltani at the FTC. "Cranor has authored over 150 research papers on online privacy and usable security, and has played a central role in establishing the usable privacy and security research community." -
3D Printed Objects Found Toxic To Fish Embryos (universityofcalifornia.edu)
itwbennett writes: Researchers at the University of California, Riverside have found that the parts of two common types of 3D printers are toxic to zebrafish embryos. The researchers made this discovery accidentally when a graduate student whose work involves developing tools for studying zebrafish embryos "noticed that zebrafish embryos die after exposure to parts from the 3-D printer." According to the report, "While the embryos exposed to parts from the plastic-melting printer had slightly decreased average survival rates compared to control embryos, the embryos exposed to parts from the liquid-resin printer had significantly decreased survival rates, with more than half of the embryos dead by day three and all dead by day seven. And of the few zebrafish embryos that hatched after exposure to parts from the liquid-resin printer, 100 percent of the hatchlings had developmental abnormalities." -
Microsoft Follows Mozilla In Considering Early Ban On SHA-1 Certificates (csoonline.com)
itwbennett writes: Following the first successful collision attack on the SHA-1 hashing algorithm last month, Mozilla said that it was considering a cut-off of July 1, 2016 to start rejecting all SHA-1 SSL certificates, ahead of an earlier scheduled date of Jan. 1, 2017. And now Microsoft is considering blocking the hashing algorithm on Windows by June next year. -
Intel Offers More Insight On Its 3D Memory (itworld.com)
itwbennett writes: When Intel and Micron Technology first announced the 3D XPoint memory in July, they promised about 1,000 times the performance of NAND flash, 1,000 times the endurance of NAND flash, and about 10 times the density of DRAM. At OpenWorld last week, Intel CEO Brian Krzanich disclosed a little more information on the new memory, which Intel will sell under the Optane brand, and did a demo on a pair of matching servers running two Oracle benchmarks. One server had Intel's P3700 NAND PCI Express SSD, which is no slouch of a drive. It can perform up to 250,000 IOPS per second. The other was a prototype Optane SSD. The Optane SSD outperformed the P3700 by 4.4 times in IOPS with 6.4 times less latency. -
What Your Photos Know About You (itworld.com)
itwbennett writes: Sandra Henry-Stocker became curious about how much more complex the jpg format had become since she first did a deep dive into it more than twenty years ago, so she dug into how much information is stored and where. "This information is quite extensive — depending on the digital camera you're using," says Henry-Stocker, "containing detailed information about the photo such as the make and model of the digital camera that was used, whether a flash was used, the focal length, light value, and the shutter speed that was used when it was taken. And, if your phone/camera has geotagging turned on, it will also include the altitude, longitude and latitude of the place where the photo was taken." Henry-Stocker used exiftool to extract and label the data so you can see what is collected, and how you can protect your privacy as well as your intellectual property. -
CoinVault and Bitcryptor Ransomware Victims Can Now Recover Their Files For Free (itworld.com)
itwbennett writes: Researchers from Kaspersky Lab and the Dutch Public Prosecution Service have obtained the last set of encryption keys from command-and-control servers that were used by CoinVault and Bitcryptor,' writes Lucian Constantin. 'Those keys have been uploaded to Kaspersky's ransomware decrypt or service that was originally set up in April with a set of around 750 keys recovered from servers hosted in the Netherlands. -
CoinVault and Bitcryptor Ransomware Victims Can Now Recover Their Files For Free (itworld.com)
itwbennett writes: Researchers from Kaspersky Lab and the Dutch Public Prosecution Service have obtained the last set of encryption keys from command-and-control servers that were used by CoinVault and Bitcryptor,' writes Lucian Constantin. 'Those keys have been uploaded to Kaspersky's ransomware decrypt or service that was originally set up in April with a set of around 750 keys recovered from servers hosted in the Netherlands. -
US Army Tests Swarms of Drones In Major Exercise (itworld.com)
itwbennett writes: The U.S. Army, curious about the potential threat and usefulness of off-the-shelf drones, brought consumer quadcopters and octocopters to the Network Integration Evaluation war games that concluded earlier this month at White Sands Missile Range, New Mexico, and Fort Bliss, Texas. "During the exercise, which is used by the Army to help evaluate new technology, the drones were deployed as a swarm to simulate a threat,' writes Martyn Williams. 'Later, the Army expanded the trials to discover whether it might be able to make use of the same technology." The results are pretty much what you'd expect: "It has been proved that consumer [drones] can be used for intelligence, surveillance and reconnaissance, distraction tactics and, in the future, the ability to drop small munitions," said Barry Hatchett with the Army's Program Executive Office for Simulation, Training and Instrumentation. -
Google Threatens Action Against Symantec After Botched Investigation (itworld.com)
itwbennett writes: Through its acquisition of Verisign's authentication business unit in 2010, Symantec became one of the largest certificate authorities (CAs) in the world. In September of this year, Google discovered that Symantec had issued a pre-certificate for google.com without its knowledge. Symantec's initial investigation of the incident determined that 23 test certificates had been issued for domain names belonging to Google, Opera and three other unnamed organizations. But Google quickly found additional unauthorized certificates that Symantec missed. Now, Google wants Symantec to disclose all certificates issued by its SSL business going forward. -
Google Threatens Action Against Symantec After Botched Investigation (itworld.com)
itwbennett writes: Through its acquisition of Verisign's authentication business unit in 2010, Symantec became one of the largest certificate authorities (CAs) in the world. In September of this year, Google discovered that Symantec had issued a pre-certificate for google.com without its knowledge. Symantec's initial investigation of the incident determined that 23 test certificates had been issued for domain names belonging to Google, Opera and three other unnamed organizations. But Google quickly found additional unauthorized certificates that Symantec missed. Now, Google wants Symantec to disclose all certificates issued by its SSL business going forward. -
Amazon Prime Now Delivery Drivers Sue Over Classification As Contractors (itworld.com)
itwbennett writes: A proposed class-action suit filed by 4 delivery drivers for the app-based Amazon Prime Now service alleges that the company misclassifies its workers as contractors when the terms the drivers follow 'fit many of the hallmarks that would classify them as employees,' according to Leonard Carder, the law firm representing the drivers. Among those terms: The drivers reported to and worked exclusively out of an Amazon warehouse, were scheduled to work fixed shifts during Amazon's Prime Now service hours, and were required to wear shirts and hats bearing the Amazon Prime Now logo and carry a smartphone preloaded with the app, according to the complaint. -
Drone Carrying Drugs, Hacksaw Blades Crashes In Oklahoma Prison (itworld.com)
itwbennett writes: A drone carrying drugs, a cell phone, hacksaw blades, cigarettes, glue, and other contraband was discovered crashed in an Oklahoma prison yard on Monday morning. The drone "apparently crashed after hitting razor wire that guarded the facility." -
Chase and MasterCard Jump Into Mobile Payments (itworld.com)
itwbennett writes: JP Morgan Chase said Monday that it plans to launch its own smartphone payment platform in mid-2016. 'Chase Pay will be based on CurrentC, a retailer-led mobile payment system that has largely been written off by Silicon Valley techies for its reliance on barcodes rather than the more sophisticated NFC (near-field communications) technology adopted by its competitors,' writes Martyn Williams. CurrentC, and therefore Chase Pay, is compatible with a much larger number of smartphones than the rival services from Apple, Google and Samsung. Meanwhile, MasterCard announced a program that aims to turn any type of gadget into a payment device, from car keys to fitness trackers. -
Australia Working On High-Tech Shark-Detection Systems (itworld.com)
jfruh writes: Even if you're a frequent ocean swimmer, you're much more likely to die in a car accident than from a shark attack — and yet sharks strike fear into people's hearts in ways that directly affect the economies of surf paradises like Australia. That's why the Australian government is working on a host of techologies to detect shark incursions on popular beaches, including drones and smart buoys (PDF) that can identify potential predators (PDF). -
Russian Cyberspies Targeted MH17 Crash Investigation (trendmicro.com)
itwbennett writes: Security researchers from Trend Micro have found evidence that the Pawn Storm cyberespionage group set up rogue VPN and SFTP servers to target Dutch Safety Board employees before and after the report on the crash of Malaysia Airlines Flight 17 (MH17) was finalized. It is likely that the rogue servers were set up with the goal of phishing login credentials from people involved in the MH17 crash investigation in order to obtain access to confidential information, the researchers said. -
European ISPs Exaggerate Performance; US ISPs Slower But More Honest (itworld.com)
itwbennett writes: New studies of broadband Internet access across Europe and the U.S. published by the European Commission have found that European broadband Internet access providers advertised download speeds of 47.9 Mbps, but only delivered 38.19 Mbps, while U.S. providers delivered more or less what they advertised. But if you want fast fixed-line Internet access, you're still better off in Europe than in the U.S. Average DSL, fiber, and cable Internet speeds in Europe were all ahead of U.S. average speeds, and at lower prices. -
Google 'Rethinking Everything' Around Machine Learning (itworld.com)
itwbennett writes: Sundar Pichai took part in his first earnings call Thursday when Google's parent company Alphabet reported its quarterly results, and 'in between discussing the numbers he revealed how important Google thinks machine learning is to its future,' writes James Niccolai. 'Machine learning is a core, transformative way by which we're rethinking everything we're doing,' Pichai said. 'We're thoughtfully applying it across all our products, be it search, ads, YouTube, or Play. We're in the early days, but you'll see us in a systematic way think about how we can apply machine learning to all these areas.' -
Ubuntu 15.10 'Wily Werewolf' Released (omgubuntu.co.uk)
LichtSpektren writes: Ubuntu 15.10 "Wily Werewolf" is now released and available, along with its alternative desktop flavors (MATE, Xfce, LXDE, GNOME, KDE, Kylin). This release features Linux 4.2, GCC 5, Python 3.5, and LibreOffice 5. The default version is still using X.org display server and Unity7; Mark Shuttleworth has said that Mir and Unity8 won't arrive until Ubuntu 16.04 "Xenial Xerus." Not much has changed beyond package updates, other than replacing the invisible overlay scrollbars in Nautilus with the GNOME 3 scrollbars.
Phoronix brings us the only bit of drama regarding this release: Jonathan Riddell, long time overseer of Kubuntu, has resigned with claims that Canonical has "defrauded donors and broke the copyright licenses." Another reader adds a link to a Q & A session with Riddell. -
Microsoft To Pay Up To $15K For Bugs In Two Visual Studio Tools (microsoft.com)
itwbennett writes: Yesterday, Microsoft started a three-month bug bounty program for two open source tools that are part of Visual Studio 2015. The program applies to the beta versions of Core CLR, which is the execution engine for .NET Core, and ASP.NET, Microsoft's framework for building websites and web applications. Bounties range from $500 to $15,000, although Microsoft will reward more 'depending on the entry quality and complexity.' The highest reward will go to researchers who've found a remote code execution bug with a functioning exploit and an accompanying, high-quality white paper. On the low end, cross-site scripting or cross-site request forgery bugs with a low-quality report will get $500. -
Oracle Fixes Java Vulnerability Used By Russian Cyberspies (itworld.com)
itwbennett writes: Oracle said that it has fixed 154 security flaws in Java and a wide range of its other products, including one that Russian cyberespionage group Pawn Storm used to launch stealthy attacks earlier this year. The vulnerability, tracked as CVE-2015-4902, was being used by the Pawn Storm attackers to enable the execution of a malicious Java application without user interaction. -
Google Makes Full-Disk Encryption Mandatory For Some Android 6.0 Devices (itworld.com)
itwbennett writes: Google's plan to encrypt user data on Android devices by default will get a new push with Android 6.0, also known as Marshmallow. Devices with enough memory and decent cryptographic performance will need to have full-disk encryption enabled in order to be declared compatible with the latest version of the mobile OS. From the ITWorld article: "The move is likely to draw criticism from law enforcement officials in the U.S. who have argued over the past year that the increasing use of encryption on devices and online communications affects their ability to investigate crimes. In addition to encryption, Google also mandates verified boot for devices with AES performance over 50MB/s. This is a feature that verifies the integrity and authenticity of the software loaded at different stages during the device boot sequence and protects against boot-level attacks that could undermine the encryption." -
Despite Promises, China Still Targeting US Firms (crowdstrike.com)
itwbennett writes: Three weeks after the U.S. and China reached their first ever cybercrime and cyberespionage agreement, a new report from CrowdStrike details intrusions from hackers affiliated with the Chinese government, indicating they almost immediately broke their word. In a blog post, CrowdStrike's Dmitri Alperovich said the first observed intrusion was detected on September 26 – one day after President Obama hosted President Xi Jinping of China for a state visit. -
House of Representatives Proposal Aims To Regulate Car Privacy (itworld.com)
itwbennett writes: Even though, as reported today on Slashdot, 'experts from government, industry, and academia say they have no confidence they'll develop a secure system that can protect users from tracking and privacy breaches,' a subcommittee of the U.S. House of Representatives have 'proposed that the National Highway Traffic Safety Administration set up an Automotive Cybersecurity Advisory Council to develop cybersecurity best-practice.' The draft proposal would require vehicle manufacturers to 'develop and implement' a privacy policy outlining their information-gathering practices, and would make vehicle data hacking illegal and subject to a $100,000 penalty for each violation. -
In Battle With Ad Blockers, Ad Industry Fesses Up To Alienating Users (iab.com)
itwbennett writes: In a post on the Internet Advertising Bureau (IAB) website Thursday, Scott Cunningham, senior vice president of technology of IAB and general manager of its Tech Lab, issued what amounts to an apology for "[losing] track of the user experience" and called on advertisers "to do better." But it may be a case of too little, too late as "a report (PDF) released in August forecasted that U.S. websites will lose US$21.8 billion in ad revenue this year due to ad blockers," writes Jeremy Kirk. -
Beware of Oracle's Licensing 'Traps,' Law Firm Warns (scottandscottllp.com)
itwbennett writes: Slashdot readers are no strangers to Oracle's aggressive licensing practices, practices that have earned them notoriety over the years. This week, Texas law firm Scott & Scott wrote a blog post warning enterprises about the 'traps' in Oracle software licensing. One of the biggest problems with Oracle software is how difficult it is for companies to track internally what they're using and how they're using it, said Julie Machal-Fulks, a partner with Scott & Scott, in an interview with Katherine Noyes. 'They may use just one Oracle product and think they're using it correctly, but then Oracle comes along and says, 'no, you're using it wrong — you owe us a million bucks.' -
Valve's "Room Scale VR Survey" Finds a Lot of People Play In Their Bedrooms (itworld.com)
itwbennett writes: Earlier this week Valve published the results of a "Room Scale VR Survey" completed by 2008 members of its VR Community. The findings: 860 (~43%) of respondents said their gaming PC was in their bedroom and 1,393 (~69%) said they were not willing to move their PC to accommodate a VR experience. The average space respondents feel they can devote to VR is about 8.5'x 9'. Why does this matter? Well, last March, Valve and HTC debuted the HTV Vive virtual reality system consisting of a VR visor, a couple of custom controllers and a tracking system the allows the user to wander around a 15'x15' area. 'While the Vive system certainly sounds impressive I've had questions about how practical it'll be,' writes Peter Smith. 'How many people have a 15'x15' clear area in front of their PC? Turns out, not many.' 'According to this survey at least, using all of the 15'x15' space the system can track is going to leave most users frustrated,' adds Smith. -
Valve's "Room Scale VR Survey" Finds a Lot of People Play In Their Bedrooms (itworld.com)
itwbennett writes: Earlier this week Valve published the results of a "Room Scale VR Survey" completed by 2008 members of its VR Community. The findings: 860 (~43%) of respondents said their gaming PC was in their bedroom and 1,393 (~69%) said they were not willing to move their PC to accommodate a VR experience. The average space respondents feel they can devote to VR is about 8.5'x 9'. Why does this matter? Well, last March, Valve and HTC debuted the HTV Vive virtual reality system consisting of a VR visor, a couple of custom controllers and a tracking system the allows the user to wander around a 15'x15' area. 'While the Vive system certainly sounds impressive I've had questions about how practical it'll be,' writes Peter Smith. 'How many people have a 15'x15' clear area in front of their PC? Turns out, not many.' 'According to this survey at least, using all of the 15'x15' space the system can track is going to leave most users frustrated,' adds Smith. -
Barnes & Noble Has Been Quietly Refreshing Its Nook Hardware (itworld.com)
itwbennett writes: Peter Smith writes that he 'had more or less written off the Nook when Barnes & Noble farmed hardware duties out to Samsung.' But now that Amazon is aiming for the low end with its downgraded Fire tablet line, Barnes & Noble has an opportunity to 'carve out a niche on the higher end of things,' says Smith. And so it has been quietly moving in that direction. Yesterday, Venture Beat wrote about the newly (and stealthily) launched $250 Samsung Galaxy Tab E Nook. As Smith notes, 'the specs for this new tablet aren't anything special,' which might explain the stealthy launch, except that another, pricier Nook tablet apparently came out a month ago (again, according to VentureBeat), the Samsung Galaxy Tab S2 Nook. -
Not All iPhone 6s Processors Are Created Equal (itworld.com)
itwbennett writes: Apple is splitting the manufacture of the A9 processor for its iPhone 6s between TSMC (~60%) and rival Samsung (~40%) — "and they are not created equal," writes Andy Patrizio. For starters, Chipworks noted that Samsung uses 14nm while TSMC uses 16nm. A Reddit user posted tests of a pair of 6s Plus phones and found the TSMC chip had eight hours of battery life vs. six hours for the Samsung. Meanwhile, benchmark tests from the folks at MyDriver (if Mr. Patrizio's efforts with Google Translate got it right) also found that the Samsung chip is a bigger drain on the phone's battery, while the TSMC chip is slightly faster and runs a bit cooler. So how do you know which chip you got? There's an app for that. -
Dell, EMC Said To Be In Merger Talks (itworld.com)
itwbennett writes: According to a Wall Street Journal report (paywalled), Dell might buy some or all of storage giant EMC. (The grain of salt here is that the Journal's report cited unnamed sources, and cautioned that the companies might not finalize any agreement.) If the report has it right, though, "a total merger would be one of the biggest deals ever in the technology industry," writes Stephen Lawson for IDG, "with EMC holding a market value of about US$50 billion. It would also bring together two of the most important vendors to enterprise IT departments." -
Why Is RAM Suddenly So Cheap? It Might Be Windows
jfruh writes: The average price of a 4GB DDR3 memory DIMM at the moment $18.50 — a price that's far lower than at this time last year. Why is it so cheap? The memory business tends to go in boom and bust cycles, but the free availability of Windows 10 means that fewer people are upgrading their PCs, reducing RAM demand. Analyst Avril Wu said, "Notebook shipments in the third quarter fall short of what is expected for a traditional peak season mainly because Windows 10 with its free upgrade plan negatively impacted replaced sales of notebooks to some extent rather than driving the demand for these products." And prices might stay low for another two years. -
Nissan Creates the Ultimate Distracted Driving Machine
jfruh writes: More and more research is suggesting that it isn't safe to text or even talk on our phones hands-free while driving, but one brave car company is pushing full-speed in the other direction. Nissan has created a concept car in which every surface, including the entire dashboard and even the seats, is a display device. The car is the result of "extensive" surveys with the younger generation that came to the conclusion that, according to Nissan, young people "feel that time spent in a car should be time for connecting and sharing experiences with friends." -
30 Years a Sysadmin
itwbennett writes: Sandra Henry-Stocker's love affair with Unix started in the early 1980s when she 'was quickly enamored of the command line and how much [she] could get done using pipes and commands like grep.' Back then, she was working on a Zilog minicomputer, a system, she recalls, that was 'about this size of a dorm refrigerator'. Over the intervening years, a lot has changed, not just about the technology, but about the job itself. 'We might be 'just' doing systems administration, but that role has moved heavily into managing security, controlling access to a wide range of resources, analyzing network traffic, scrutinizing log files, and fixing the chinks on our cyber armor,' writes Henry-Stocker. What hasn't changed? Systems administration remains a largely thankless role with little room for career advancement, albeit one that she is quick to note is 'seldom boring' and 'reasonably' well-paid. And while 30 years might not be a world's record, it's pretty far along the bell curve; have you been at it longer? -
30 Years a Sysadmin
itwbennett writes: Sandra Henry-Stocker's love affair with Unix started in the early 1980s when she 'was quickly enamored of the command line and how much [she] could get done using pipes and commands like grep.' Back then, she was working on a Zilog minicomputer, a system, she recalls, that was 'about this size of a dorm refrigerator'. Over the intervening years, a lot has changed, not just about the technology, but about the job itself. 'We might be 'just' doing systems administration, but that role has moved heavily into managing security, controlling access to a wide range of resources, analyzing network traffic, scrutinizing log files, and fixing the chinks on our cyber armor,' writes Henry-Stocker. What hasn't changed? Systems administration remains a largely thankless role with little room for career advancement, albeit one that she is quick to note is 'seldom boring' and 'reasonably' well-paid. And while 30 years might not be a world's record, it's pretty far along the bell curve; have you been at it longer? -
Researchers: Thousands of Medical Devices Are Vulnerable To Hacking
itwbennett writes: At the DerbyCon security conference, researchers Scott Erven and Mark Collao explained how they located Internet-connected medical devices by searching for terms like 'radiology' and 'podiatry' in the Shodan search engine. Some systems were connected to the Internet by design, others due to configuration errors. And much of the medical gear was still using the default logins and passwords provided by manufacturers. 'As these devices start to become connected, not only can your data gets stolen but there are potential adverse safety issues,' Erven said. -
Apple, Microsoft Tout Their Privacy Policies To Get Positive PR
jfruh writes: Apple hasn't changed its privacy policy in more than a year — but that didn't stop the company from putting up a glossy website explaining it in layman's terms. Microsoft too has been touting its respect for its users's privacy. This doesn't represent any high-minded altruism on those companies' parts, of course; it's part of their battle against Google, their archrival that offers almost all of its services for free and makes its money mining user data. -
Newly Found TrueCrypt Flaw Allows Full System Compromise
itwbennett writes: James Forshaw, a member of Google's Project Zero team has found a pair of flaws in the discontinued encryption utility TrueCrypt that could allow attackers to obtain elevated privileges on a system if they have access to a limited user account. 'It's impossible to tell if the new flaws discovered by Forshaw were introduced intentionally or not, but they do show that despite professional code audits, serious bugs can remain undiscovered,' writes Lucian Constantin. -
Uber's Rivals Forming an International Alliance
jfruh writes: Didi Kuaidi is China's biggest native ride-sharing app, and it's using its cash hoard to build an alliance to take on global giant Uber. On the heels of a $100 million investment in Lyft, the company is also investing in Ola, India's biggest entry in the market. The deals have been described as involving sharing technology and market knowledge. "We look forward to exchanging learnings from two of the worlds largest markets and the tremendous synergies this partnership can bring, towards our commitment of building mobility for a billion Indians," Ola said about the new deal in a statement Monday. -
Europe Agrees To Agree With Everyone Except US What 5G Should Be
itwbennett writes: Following agreements signed by the EU with South Korea in June 2014 and with Japan in May 2015, the EU and China "have agreed to agree by the end of the year on a working definition for 5G," reports Peter Sayer. "About the only point of agreement so far is that 5G is what we'll all be building or buying after 4G, so any consensus between the EU and China could be significant," says Sayer. -
Saudi Arabia Almost Bought Hacking Team
itwbennett writes: If hacked emails posted by WikiLeaks are to be believed, the Saudi Arabian government came close to buying control of Italian surveillance software company Hacking Team, Philip Wilan reports. 'The negotiations were handled by Wafic Said, a Syrian-born businessman based in the U.K. who is a close friend of the Saudi royal family, and also involved Ronald Spogli, a former U.S. ambassador to Italy, who had an indirect investment in Hacking Team,' writes Wilan. The deal collapsed in early 2014. -
IBM's Watson Is Now Analyzing Your Vacation Photos
jfruh writes: IBM's Jeopardy-winning supercomputer Watson is now suite of cloud-based services that developers can use to add cognitive capabilities to applications, and one of its powers is visual analysis. Visual Insights analyzes images and videos posted to services like Twitter, Facebook and Instagram, then looks for patterns and trends in what people have been posting. Watson turns what it gleans into structured data, making it easier to load into a database and act upon — which is clearly appealing to marketers and just as clearly carries disturbing privacy implications. -
Legislation Requiring Tech Industry To Report Terrorist Activity Dropped
itwbennett writes: John Ribeiro reports that 'the U.S. Senate Intelligence Committee has dropped a provision that would have required Internet companies to report on vaguely-defined terrorist activity on their platforms.' The draft legislation, which was unanimously passed by the Committee in July, was widely derided by the tech industry for its technical difficulty and by users for invasion of privacy. -
Michigan Sues HP Over Decade Long, $49 Million Incomplete Project
itwbennett writes: On Friday, embattled HP was hit with a new lawsuit filed by the state of Michigan over a 10-year-old, $49 million project that called for HP to replace a legacy mainframe-based system built in the 1960s. Through the suit filed in Kent County Circuit Court, the state seeks $11 million in damages along with attorney's fees and the funds needed to rebid and re-procure the contract. -
UK Man Gets Britain's First-Ever Conviction For Illegal Drone Use
jfruh writes: Nigel Wilson of Nottingham was quite a drone enthusiast: he flew a drone over a Champions League soccer match low enough to startle police horses, and at other times flew drones over iPro Stadium in Derby, the Emirates Stadium in north London, and near the Houses of Parliament, Buckingham Palace, the HMS Belfast and the Shard tower in London. He's been convicted under the Air Navigation Order 2009 and fined £1,800. -
Intel Kills a Top-of-the-Line Processor
itwbennett writes: In June of this year, Intel announced a processor branded as Broadwell-C. Now, the company has confirmed that the part was cancelled but would not give an official reason. Why did Intel kill the Broadwell-C? ITworld's Andy Patrizio speculates that it's a 'combination of increased cost, lower yield and potential product cannibalization' — cannibalization of the company's newly-launched Skylake processor, which the Broadwell-C outperformed. -
XPRIZE's Jono Bacon On the Next Great Challenge
itwbennett writes: After just under 8 years at Canonical where he was Community Manager of Ubuntu, Jono Bacon left in search of a new challenge. Now, a year and a half into his tenure at the XPRIZE Foundation as Senior Director of Community, Bacon reflects on the changing nature of community and how he is working to bring the 'anybody can play a role in a bigger picture' aspect of open source to "solve the grand challenges facing humanity." Update: 09/17 00:20 GMT by T : Jono wants everyone to know that he's certainly not leaving the world of open source software, either; headline has been updated to reflect that.