Domain: slashdot.org
Stories and comments across the archive that link to slashdot.org.
Stories · 37,380
-
New Windows Zero-Day Bug Helps Delete Any File, Exploit Available (bleepingcomputer.com)
An anonymous reader quotes a report from Bleeping Computer: Proof-of-concept code for a new zero-day vulnerability in Windows has been released by a security researcher before Microsoft was able to release a fix. The code exploits a vulnerability that allows deleting without permission any files on a machine, including system data, and it has the potential to lead to privilege escalation. The vulnerability could be used to delete application DLLs, thus forcing the programs to look for the missing libraries in other places. If the search reaches a location that grants write permission to the local user, the attacker could take advantage by providing a malicious DLL.
The problem is with Microsoft Data Sharing Service, present in Windows 10, Server 2016 and 2019 operating systems, which provides data brokering between applications. Will Dormann, a vulnerability analyst at CERT/CC, tested the exploit code successfully on a Windows 10 operating system running the latest security updates. Behind the discovery is a researcher using the online alias SandboxEscaper, also responsible for publicly sharing in late August another security bug in Windows Task Scheduler component. Microsoft hasn't addressed the issue, but there is a temporary fix available through the oPatch platform. "A micropatch candidate was ready seven hours after the zero-day vulnerability announcement, and it blocked the exploit successfully," reports Bleeping Computer. "oPatch now delivers the stable version of the micropatch for fully updated Windows 10 1803. -
Apple Just Killed The 'GrayKey' iPhone Passcode Hack (forbes.com)
Apple's newest version of iOS has rendered the GrayKey hacking tech useless, a report said Wednesday. How Apple pulled it off wasn't immediately clear, but it would have a huge implication for the law enforcement agencies around the world that have relied on GrayKey to break into locked iPhones. Forbes reports: Apple has put up what may be an insurmountable wall. Multiple sources familiar with the GrayKey tech tell Forbes the device can no longer break the passcodes of any iPhone running iOS 12 or above. On those devices, GrayKey can only do what's called a "partial extraction," sources from the forensic community said. That means police using the tool can only draw out unencrypted files and some metadata, such as file sizes and folder structures.
Previously, GrayKey used "brute forcing" techniques to guess passcodes and had found a way to get around Apple's protections preventing such repeat guesses. But no more. And if it's impossible for GrayKey, which counts an ex-Apple security engineer among its founders, it's a safe assumption few can break iPhone passcodes. Police officer Captain John Sherwin of the Rochester Police Department in Minnesota said of the claim iOS 12 was preventing GrayKey from unlocking iPhones: "That's a fairly accurate assessment as to what we have experienced." -
Apple Just Killed The 'GrayKey' iPhone Passcode Hack (forbes.com)
Apple's newest version of iOS has rendered the GrayKey hacking tech useless, a report said Wednesday. How Apple pulled it off wasn't immediately clear, but it would have a huge implication for the law enforcement agencies around the world that have relied on GrayKey to break into locked iPhones. Forbes reports: Apple has put up what may be an insurmountable wall. Multiple sources familiar with the GrayKey tech tell Forbes the device can no longer break the passcodes of any iPhone running iOS 12 or above. On those devices, GrayKey can only do what's called a "partial extraction," sources from the forensic community said. That means police using the tool can only draw out unencrypted files and some metadata, such as file sizes and folder structures.
Previously, GrayKey used "brute forcing" techniques to guess passcodes and had found a way to get around Apple's protections preventing such repeat guesses. But no more. And if it's impossible for GrayKey, which counts an ex-Apple security engineer among its founders, it's a safe assumption few can break iPhone passcodes. Police officer Captain John Sherwin of the Rochester Police Department in Minnesota said of the claim iOS 12 was preventing GrayKey from unlocking iPhones: "That's a fairly accurate assessment as to what we have experienced." -
Apple's Tim Cook Makes Blistering Attack on the 'Data Industrial Complex' (techcrunch.com)
Apple's CEO Tim Cook has joined the chorus of voices warning that data itself is being weaponized against people and societies -- arguing that the trade in digital data has exploded into a "data industrial complex." From a report: Cook did not namecheck the adtech elephants in the room: Google, Facebook and other background data brokers that profit from privacy-hostile business models. But his target was clear. "Our own information -- from the everyday to the deeply personal -- is being weaponized against us with military efficiency," warned Cook. "These scraps of data, each one harmless enough on its own, are carefully assembled, synthesized, traded and sold. Taken to the extreme this process creates an enduring digital profile and lets companies know you better than you may know yourself. Your profile is a bunch of algorithms that serve up increasingly extreme content, pounding our harmless preferences into harm. We shouldn't sugarcoat the consequences. This is surveillance," he added. In a series of tweets, Cook added: It was an honor to be invited to ICDPPC 2018 in Brussels this morning. I'd like to share a bit of what I said to this gathering of privacy regulators from around the world. It all boils down to a fundamental question: What kind of world do we want to live in? GDPR has shown us all that good policy and political will can come together to protect the rights of everyone. We believe that privacy is a fundamental human right. No matter what country you live in, that right should be protected in keeping with four essential principles.
First, companies should challenge themselves to de-identify customer data or not collect that data in the first place. Second, users should always know what data is being collected from them and what it's being collected for. This is the only way to empower users to decide what collection is legitimate and what isn't. Anything less is a sham. Third, companies should recognize that data belongs to users and we should make it easy for people to get a copy of their personal data, as well as correct and delete it. And fourth, everyone has a right to the security of their data. Security is at the heart of all data privacy and privacy rights. Technology is capable of doing great things. But it doesn't want to do great things. It doesn't want anything. That part takes all of us. We are optimistic about technology's awesome potential for good -- but we know that it won't happen on its own. -
Apple's Tim Cook Makes Blistering Attack on the 'Data Industrial Complex' (techcrunch.com)
Apple's CEO Tim Cook has joined the chorus of voices warning that data itself is being weaponized against people and societies -- arguing that the trade in digital data has exploded into a "data industrial complex." From a report: Cook did not namecheck the adtech elephants in the room: Google, Facebook and other background data brokers that profit from privacy-hostile business models. But his target was clear. "Our own information -- from the everyday to the deeply personal -- is being weaponized against us with military efficiency," warned Cook. "These scraps of data, each one harmless enough on its own, are carefully assembled, synthesized, traded and sold. Taken to the extreme this process creates an enduring digital profile and lets companies know you better than you may know yourself. Your profile is a bunch of algorithms that serve up increasingly extreme content, pounding our harmless preferences into harm. We shouldn't sugarcoat the consequences. This is surveillance," he added. In a series of tweets, Cook added: It was an honor to be invited to ICDPPC 2018 in Brussels this morning. I'd like to share a bit of what I said to this gathering of privacy regulators from around the world. It all boils down to a fundamental question: What kind of world do we want to live in? GDPR has shown us all that good policy and political will can come together to protect the rights of everyone. We believe that privacy is a fundamental human right. No matter what country you live in, that right should be protected in keeping with four essential principles.
First, companies should challenge themselves to de-identify customer data or not collect that data in the first place. Second, users should always know what data is being collected from them and what it's being collected for. This is the only way to empower users to decide what collection is legitimate and what isn't. Anything less is a sham. Third, companies should recognize that data belongs to users and we should make it easy for people to get a copy of their personal data, as well as correct and delete it. And fourth, everyone has a right to the security of their data. Security is at the heart of all data privacy and privacy rights. Technology is capable of doing great things. But it doesn't want to do great things. It doesn't want anything. That part takes all of us. We are optimistic about technology's awesome potential for good -- but we know that it won't happen on its own. -
Apple's Tim Cook Makes Blistering Attack on the 'Data Industrial Complex' (techcrunch.com)
Apple's CEO Tim Cook has joined the chorus of voices warning that data itself is being weaponized against people and societies -- arguing that the trade in digital data has exploded into a "data industrial complex." From a report: Cook did not namecheck the adtech elephants in the room: Google, Facebook and other background data brokers that profit from privacy-hostile business models. But his target was clear. "Our own information -- from the everyday to the deeply personal -- is being weaponized against us with military efficiency," warned Cook. "These scraps of data, each one harmless enough on its own, are carefully assembled, synthesized, traded and sold. Taken to the extreme this process creates an enduring digital profile and lets companies know you better than you may know yourself. Your profile is a bunch of algorithms that serve up increasingly extreme content, pounding our harmless preferences into harm. We shouldn't sugarcoat the consequences. This is surveillance," he added. In a series of tweets, Cook added: It was an honor to be invited to ICDPPC 2018 in Brussels this morning. I'd like to share a bit of what I said to this gathering of privacy regulators from around the world. It all boils down to a fundamental question: What kind of world do we want to live in? GDPR has shown us all that good policy and political will can come together to protect the rights of everyone. We believe that privacy is a fundamental human right. No matter what country you live in, that right should be protected in keeping with four essential principles.
First, companies should challenge themselves to de-identify customer data or not collect that data in the first place. Second, users should always know what data is being collected from them and what it's being collected for. This is the only way to empower users to decide what collection is legitimate and what isn't. Anything less is a sham. Third, companies should recognize that data belongs to users and we should make it easy for people to get a copy of their personal data, as well as correct and delete it. And fourth, everyone has a right to the security of their data. Security is at the heart of all data privacy and privacy rights. Technology is capable of doing great things. But it doesn't want to do great things. It doesn't want anything. That part takes all of us. We are optimistic about technology's awesome potential for good -- but we know that it won't happen on its own. -
Google Is Teaching Children How To Act Online. Is It the Best Role Model? (nytimes.com)
Google is positioning itself in schools as a trusted authority on digital citizenship at a moment when the company's data-handling practices are under growing scrutiny. From a report: Google is on a mission to teach children how to be safe online. That is the message behind "Be Internet Awesome," a so-called digital-citizenship education program that the technology giant developed for schools. The lessons include a cartoon game branded with Google's logo and blue, red, yellow and green color palette. The game is meant to help students from third grade through sixth guard against schemers, hackers and other bad actors. Google plans to reach five million schoolchildren with the program this year and has teamed up with the National Parent Teacher Association to offer related workshops to parents. But critics say the company's recent woes -- including revelations that it was developing a censored version of its search engine for the Chinese market and had tracked the whereabouts of users who had explicitly turned off their location history -- should disqualify Google from promoting itself in schools as a model of proper digital conduct. -
Google Is Teaching Children How To Act Online. Is It the Best Role Model? (nytimes.com)
Google is positioning itself in schools as a trusted authority on digital citizenship at a moment when the company's data-handling practices are under growing scrutiny. From a report: Google is on a mission to teach children how to be safe online. That is the message behind "Be Internet Awesome," a so-called digital-citizenship education program that the technology giant developed for schools. The lessons include a cartoon game branded with Google's logo and blue, red, yellow and green color palette. The game is meant to help students from third grade through sixth guard against schemers, hackers and other bad actors. Google plans to reach five million schoolchildren with the program this year and has teamed up with the National Parent Teacher Association to offer related workshops to parents. But critics say the company's recent woes -- including revelations that it was developing a censored version of its search engine for the Chinese market and had tracked the whereabouts of users who had explicitly turned off their location history -- should disqualify Google from promoting itself in schools as a model of proper digital conduct. -
Yahoo To Pay $50 Million, Offer Credit Monitoring For Massive Security Breach (go.com)
Yahoo has agreed to pay $50 million in damages and provide two years of free credit-monitoring services to 200 million people whose email addresses and other personal information were stolen as part of the biggest security breach in history. "The restitution hinges on federal court approval of a settlement filed late Monday in a 2-year-old lawsuit seeking to hold Yahoo accountable for digital burglaries that occurred in 2013 and 2014, but weren't disclosed until 2016," reports ABC News. From the report: Claims for a portion of the $50 million fund can be submitted by any eligible Yahoo accountholder who suffered losses resulting from the security breach. The costs can include such things as identity theft, delayed tax refunds or other problems linked to having had personal information pilfered during the Yahoo break-ins. The fund will compensate Yahoo accountholders at a rate of $25 per hour for time spent dealing with issues triggered by the security breach, according to the preliminary settlement. Those with documented losses can ask for up to 15 hours of lost time, or $375. Those who can't document losses can file claims seeking up to five hours, or $125, for their time spent dealing with the breach. Yahoo accountholders who paid $20 to $50 annually for a premium email account will be eligible for a 25 percent refund.
The free credit monitoring service from AllClear could end up being the most valuable part of the settlement for most accountholders. The lawyers representing the accountholders pegged the retail value of AllClear's credit-monitoring service at $14.95 per month, or about $359 for two years -- but it's unlikely Yahoo will pay that rate. The settlement didn't disclose how much Yahoo had agreed to pay AllClear for covering affected accountholders. -
Yahoo To Pay $50 Million, Offer Credit Monitoring For Massive Security Breach (go.com)
Yahoo has agreed to pay $50 million in damages and provide two years of free credit-monitoring services to 200 million people whose email addresses and other personal information were stolen as part of the biggest security breach in history. "The restitution hinges on federal court approval of a settlement filed late Monday in a 2-year-old lawsuit seeking to hold Yahoo accountable for digital burglaries that occurred in 2013 and 2014, but weren't disclosed until 2016," reports ABC News. From the report: Claims for a portion of the $50 million fund can be submitted by any eligible Yahoo accountholder who suffered losses resulting from the security breach. The costs can include such things as identity theft, delayed tax refunds or other problems linked to having had personal information pilfered during the Yahoo break-ins. The fund will compensate Yahoo accountholders at a rate of $25 per hour for time spent dealing with issues triggered by the security breach, according to the preliminary settlement. Those with documented losses can ask for up to 15 hours of lost time, or $375. Those who can't document losses can file claims seeking up to five hours, or $125, for their time spent dealing with the breach. Yahoo accountholders who paid $20 to $50 annually for a premium email account will be eligible for a 25 percent refund.
The free credit monitoring service from AllClear could end up being the most valuable part of the settlement for most accountholders. The lawyers representing the accountholders pegged the retail value of AllClear's credit-monitoring service at $14.95 per month, or about $359 for two years -- but it's unlikely Yahoo will pay that rate. The settlement didn't disclose how much Yahoo had agreed to pay AllClear for covering affected accountholders. -
Apple's Upcoming TV Service To Launch In Over 100 Countries In 2019, Starting With the US (macrumors.com)
A new report from The Information says that Apple's upcoming TV service that is in the works to showcase its original TV shows will be available in more than 100 countries next year. The service will launch in the United States in the first half of 2019, with a global expansion to follow later in the year. MacRumors reports: According to The Information, Apple's original content will be made available for free to Apple device owners, a rumor we heard earlier this month from CNBC. While Apple's content will be available at no cost, Apple will encourage users to sign up for television subscriptions from other cable networks such as HBO or STARZ. Apple has reportedly started negotiating with content providers about what it will pay to carry TV shows and movies, but programming is not expected to be the same in each country. It is also not quite clear how Apple content will be positioned alongside content from third-party services. -
Amazon's Move Off Oracle Caused Prime Day Outage in One of its Biggest Warehouses, Internal Report Says (cnbc.com)
Amazon is learning how hard it can be to move off of Oracle's database software. From a report: On Prime Day, while the e-retailer was dealing with a major website glitch that slowed sales, the company was also dealing with a technical problem in Ohio at one of its biggest warehouses, leading to thousands of delayed package deliveries, according to an internal report obtained by CNBC. The problem was in large part due to Amazon's migration from Oracle's database to its own technology, the documents show. The outage underscores the challenge Amazon faces as it looks to move completely off Oracle's database by 2020, and how difficult it is to re-create that level of reliability. It also shows that Oracle's database is more efficient in some aspects than Amazon's rival software, a point that Oracle will likely emphasize during this week's annual OpenWorld conference in San Francisco. -
Motorola Becomes First Smartphone Company To Sell DIY Repair Kits To Its Customers (vice.com)
As Apple continues to fight independent repair, Motorola has partnered with iFixit and pledged to support the right to repair movement. From a report: It is excellent news that Motorola has decided to make it as easy as possible for you to repair your phone. The company announced that it would begin selling replacement parts for all of its recent phones to customers, and it has partnered with iFixit to sell repair kits for phones like the Moto X, Z, G4, G5, and Droid Turbo 2. The kits come with tools, genuine Motorola-branded replacement parts, and instructions on how to fix your device. iFixit is currently selling replacement batteries, screens, and digitizer assemblies. "Motorola is setting an example for major manufacturers to embrace a more open attitude towards repair," iFixit wrote in a blog post announcing the partnership. "For fixers like us, this partnership is representative of a broader movement in support of our Right to Repair. It's proof that OEM manufacturers and independent repair can co-exist. Big business and social responsibility, and innovation and sustainability, don't need to be mutually exclusive." -
Motorola Becomes First Smartphone Company To Sell DIY Repair Kits To Its Customers (vice.com)
As Apple continues to fight independent repair, Motorola has partnered with iFixit and pledged to support the right to repair movement. From a report: It is excellent news that Motorola has decided to make it as easy as possible for you to repair your phone. The company announced that it would begin selling replacement parts for all of its recent phones to customers, and it has partnered with iFixit to sell repair kits for phones like the Moto X, Z, G4, G5, and Droid Turbo 2. The kits come with tools, genuine Motorola-branded replacement parts, and instructions on how to fix your device. iFixit is currently selling replacement batteries, screens, and digitizer assemblies. "Motorola is setting an example for major manufacturers to embrace a more open attitude towards repair," iFixit wrote in a blog post announcing the partnership. "For fixers like us, this partnership is representative of a broader movement in support of our Right to Repair. It's proof that OEM manufacturers and independent repair can co-exist. Big business and social responsibility, and innovation and sustainability, don't need to be mutually exclusive." -
White House Wants To Borrow Tech Workers From Google and Amazon, Says Report (cnet.com)
"According to CNET, TechCrunch and others, the Trump administration reportedly wants tech giants to make it easy for workers to take leaves of absence to help the government modernize," writes Slashdot reader kimanaw. From a report: White House officials on Monday planned to meet with tech giants including Google, Microsoft, Amazon and IBM, to discuss ways to make it easier for employees to take leaves of absence to help with government projects, according to The Washington Post. The administration reportedly hopes tech industry workers will be able to help modernize state and federal agencies and tackle challenges such as upgrading the veterans' health care system. Attracting tech talent may prove difficult for the Trump administration, which hasn't always seen eye to eye with Silicon Valley on issues such as the president's ban on travel from predominantly Muslim countries. However, White House officials believe tech workers are willing to "put politics aside." "This event on Monday is not just about our efforts, it's about our successor, and their successor after that," said one unnamed official, according to the Post. The White House didn't respond to a request for comment. -
Intel Says They Aren't Abandoning 10nm Chips, Despite Report Saying They're Canceled (pcmag.com)
An anonymous reader quotes a report from PC Magazine: Intel is denying a new report that claims the chipmaker is abandoning its 10 nanometer manufacturing process following years of delays. "Media reports published today that Intel is ending work on the 10nm process are untrue," the company tweeted on Monday. Hours prior to the tweet, semiconductor news site SemiAccurate claimed that Intel was pulling the plug on the chip-making technology over the company's ongoing struggles to bring it to full production. Chips built with the 10nm process were originally slated to arrive in 2016, but the company has repeatedly pushed that launch date back. During Intel's last earnings call, executives said they now expect 10nm chips to officially drop during the 2019 holiday season.
In response to SemiAccurate's report, Intel said it continues to make "good progress" on the 10nm technology. "Yields are improving consistent with the timeline we shared during our last earnings report," the chipmaker added in its tweet. The next-generation silicon will supposedly offer a 25 percent performance increase over 14nm-manufactured technology. The 10nm chips will also be able to run on 50 percent less power when clocked at the same performance of a 14nm processor. Intel will hold an earnings call on Thursday, so expect company executives to elaborate on 10nm's progress then. -
AWS CEO Andy Jassy Follows Apple In Calling For Retraction of Chinese Spy Chip Story (cnbc.com)
An anonymous reader quotes a report from CNBC: Andy Jassy, the CEO of Amazon Web Services, followed Apple's lead in calling the for the retraction of Bloomberg's story about spy chips being embedded in servers. "They offered no proof, story kept changing, and showed no interest in our answers unless we could validate their theories," Jassy wrote in a tweet on Monday. "Reporters got played or took liberties. Bloomberg should retract."
Apple CEO Tim Cook told Buzzfeed on Friday that the scenario Bloomberg reported never happened and that the October story in Bloomberg Businessweek should be retracted. Bloomberg alleged data center hardware used by Apple and AWS, and provided by server company Super Micro, was under surveillance by the Chinese government, even though almost all the companies named in the report denied Bloomberg's claim. Bloomberg published a denial from AWS alongside its own report, and AWS refuted the report in a more strongly worded six-paragraph blog post entitled "Setting the Record Straight on Bloomberg Businessweek's Erroneous Article." Further reading is available via The Washington Post.
"Sources tell the Erik Wemple Blog that the New York Times, the Wall Street Journal and The Post have each sunk resources into confirming the story, only to come up empty-handed," the Washington Post reports. "(The Post did run a story summarizing Bloomberg's findings, along with various denials and official skepticism.) It behooves such outlets to dispatch entire teams to search for corroboration: If, indeed, it's true that China has embarked on this sort of attack, there will be a long tail of implications. No self-respecting news organization will want to be left out of those stories. 'Unlike software, hardware leaves behind a good trail of evidence. If somebody decides to go down that path, it means that they don't care about the consequences,' Stathakopoulos says.'" -
AWS CEO Andy Jassy Follows Apple In Calling For Retraction of Chinese Spy Chip Story (cnbc.com)
An anonymous reader quotes a report from CNBC: Andy Jassy, the CEO of Amazon Web Services, followed Apple's lead in calling the for the retraction of Bloomberg's story about spy chips being embedded in servers. "They offered no proof, story kept changing, and showed no interest in our answers unless we could validate their theories," Jassy wrote in a tweet on Monday. "Reporters got played or took liberties. Bloomberg should retract."
Apple CEO Tim Cook told Buzzfeed on Friday that the scenario Bloomberg reported never happened and that the October story in Bloomberg Businessweek should be retracted. Bloomberg alleged data center hardware used by Apple and AWS, and provided by server company Super Micro, was under surveillance by the Chinese government, even though almost all the companies named in the report denied Bloomberg's claim. Bloomberg published a denial from AWS alongside its own report, and AWS refuted the report in a more strongly worded six-paragraph blog post entitled "Setting the Record Straight on Bloomberg Businessweek's Erroneous Article." Further reading is available via The Washington Post.
"Sources tell the Erik Wemple Blog that the New York Times, the Wall Street Journal and The Post have each sunk resources into confirming the story, only to come up empty-handed," the Washington Post reports. "(The Post did run a story summarizing Bloomberg's findings, along with various denials and official skepticism.) It behooves such outlets to dispatch entire teams to search for corroboration: If, indeed, it's true that China has embarked on this sort of attack, there will be a long tail of implications. No self-respecting news organization will want to be left out of those stories. 'Unlike software, hardware leaves behind a good trail of evidence. If somebody decides to go down that path, it means that they don't care about the consequences,' Stathakopoulos says.'" -
Chinese Company Oppo is the Latest To Be Caught Cheating on Phone Benchmarks (engadget.com)
An anonymous reader shares a report: You can add another big name to the list of phone makers found cheating on benchmarks. UL Benchmarks has delisted Oppo's Find X and F7 phones from its 3DMark charts after testing from itself and news outlet Tech2 revealed that both devices were artificially ramping up processor performance when they detected the test by name. Oppo acknowledged that it always stepped things up when it detected "games or 3D Benchmarks that required high performance," but claimed that any app would run full bore if you tapped on the screen every few seconds to signal your actions. UL, however, rejected the justifications. It was clear that Oppo was looking for the benchmark by name and not the extra processing load involved, according to the outfit. Moreover, tapping wouldn't be an effective solution if Oppo treated apps equally -- you couldn't get consistent results. Further reading: Huawei Caught Cheating Performance Test For New Phones. -
A Device That Can Pull Drinking Water From the Air Just Won the Latest XPrize (fastcompany.com)
Two years ago, XPrize, which creates challenges that pit the brightest minds against one another, announced that it would give any startup or company $1 million that can turn thin air into water. This month, it announced that the challenge has been concluded. From a report: A new device that sits inside a shipping container can use clean energy to almost instantly bring clean drinking water anywhere -- the rooftop of an apartment building in Nairobi, a disaster zone after a hurricane in Manila, a rural village in Zimbabwe -- by pulling water from the air. The design, from the Skysource/Skywater Alliance, just won $1.5 million in the Water Abundance XPrize. The competition, which launched in 2016, asked designers to build a device that could extract at least 2,000 liters of water a day from the atmosphere (enough for the daily needs of around 100 people), use clean energy, and cost no more than 2 cents a liter.
"We do a lot of first principles thinking at XPrize when we start designing these challenges," says Zenia Tata, who helped launch the prize and serves as chief impact officer of XPrize. Nearly 800 million people face water scarcity; other solutions, like desalination, are expensive. Freshwater is limited and exists in a closed system. But the atmosphere, the team realized, could be tapped as a resource. "At any given time, it holds 12 quadrillion gallons -- the number 12 with 19 zeros after it -- a very, very, big number," she says. The household needs for all 7 billion people on earth add up to only around 350 or 400 billion gallons. A handful of air-to-water devices already existed, but were fairly expensive to use. The new system, called WEDEW ("wood-to-energy deployed water") was created by combining two existing systems. One is a device called Skywater, a large box that mimics the way clouds are formed: It takes in warm air, which hits cold air and forms droplets of condensation that can be used as pure drinking water. The water is stored in a tank inside the shipping container, which can then be connected to a bottle refill station or a tap. -
Linus Torvalds is Back in Charge of Linux (zdnet.com)
At Open Source Summit Europe in Edinburgh, Scotland, Linus Torvalds is meeting with Linux's top 40 or so developers at the Maintainers' Summit. This is his first step back in taking over Linux's reins. From a report: A little over a month ago, Torvalds stepped back from running the Linux development community. In a note to the Linux Kernel Mailing List (LKML), Torvalds said, "I need to change some of my behavior, and I want to apologize to the people that my personal behavior hurt and possibly drove away from kernel development entirely. I am going to take time off and get some assistance on how to understand people's emotions and respond appropriately." That time is over. Torvalds is back.
Whether he'll be a kinder and gentler Torvalds remains to be seen. In the Linux 4.19 announcement, Greg Kroah-Hartman, Linux's temporary leader and maintainer of the stable branch, wrote: "Linus, I'm handing the kernel tree back to you. You can have the joy of dealing with the merge window :)" -
Linus Torvalds is Back in Charge of Linux (zdnet.com)
At Open Source Summit Europe in Edinburgh, Scotland, Linus Torvalds is meeting with Linux's top 40 or so developers at the Maintainers' Summit. This is his first step back in taking over Linux's reins. From a report: A little over a month ago, Torvalds stepped back from running the Linux development community. In a note to the Linux Kernel Mailing List (LKML), Torvalds said, "I need to change some of my behavior, and I want to apologize to the people that my personal behavior hurt and possibly drove away from kernel development entirely. I am going to take time off and get some assistance on how to understand people's emotions and respond appropriately." That time is over. Torvalds is back.
Whether he'll be a kinder and gentler Torvalds remains to be seen. In the Linux 4.19 announcement, Greg Kroah-Hartman, Linux's temporary leader and maintainer of the stable branch, wrote: "Linus, I'm handing the kernel tree back to you. You can have the joy of dealing with the merge window :)" -
Bill Gates Honors Microsoft Co-Founder Paul Allen: He 'Changed My Life' (people.com)
In an article published to the Wall Street Journal on Thursday, Bill Gates reflected on Microsoft co-founder Paul Allen's life and the impact Allen had on him. Paul Allen passed away last Monday from complications of non-Hodgkin's lymphoma at the age of 65. People Magazine reports: "I met Paul Allen when I was in 7th grade, and it changed my life, Gates wrote in the Journal. "I looked up to him right away. He was two years ahead of me in school, really tall, and proved to be a genius with computers... Eventually, we were spending just about all our free time messing around with any machine we could get our hands on." The two would often sneak off during late hours to use the computers at the University of Washington, something Gates said he wouldn't have had the nerve to do without Allen by his side.
Back then, Allen was able to foresee how powerful and essential computers would one day become. When Allen came across an issue of Popular Electronics that featured a powerful computer that was going to be released, he convinced Gates to join him in placing all of their focus into getting in on the computer industry before it took off without them. "That moment marked the end of my college career and the beginning of our new company, Microsoft," Gates recalled, adding that Allen's talents largely helped to make Microsoft successful at its inception. "As the first person I ever partnered with, Paul set a standard that few other people could meet. He had a wide-ranging mind and a special talent for explaining complicated subjects in a simple way." In closing, Gates wrote: "Paul was cooler than I was. He was really into Jimi Hendrix, and I remember him playing 'Are You Experienced?' for me. I wasn't experienced at much of anything back then, and Paul wanted to share this amazing music with me. That's the kind of person he was. He loved life and the people around him, and it showed." -
TSA Lays Out Plans To Use Facial Recognition For Domestic Flights (theverge.com)
The TSA has released its roadmap to use biometrics technology in the coming years. The Verge reports: Customs and Border Protection has been using facial recognition to screen non-U.S. residents on international flights since 2015, a project that was expedited by the Trump administration. Last year, the U.S. government laid out its plans to start expanding the screening tools to U.S. citizens, which would require them to undergo facial scans when they leave the country through a system called the Biometric Pathway. Today's news lays out how the TSA will adopt the same technology, partnering with CBP on biometrics for international travelers, expanding security operations to TSA Precheck members, and eventually, using facial recognition to verify domestic travelers.
TSA says that by moving toward facial recognition technology in a time where travel volume is rising, it's hoping to reduce the need for physical documents like passports and paper tickets. Currently, TSA manually compares the passengers in front of them to their ID photos, but it believes an automated process that can match facial images to photos from passports and visa applications will be more accurate and efficient. -
TSA Lays Out Plans To Use Facial Recognition For Domestic Flights (theverge.com)
The TSA has released its roadmap to use biometrics technology in the coming years. The Verge reports: Customs and Border Protection has been using facial recognition to screen non-U.S. residents on international flights since 2015, a project that was expedited by the Trump administration. Last year, the U.S. government laid out its plans to start expanding the screening tools to U.S. citizens, which would require them to undergo facial scans when they leave the country through a system called the Biometric Pathway. Today's news lays out how the TSA will adopt the same technology, partnering with CBP on biometrics for international travelers, expanding security operations to TSA Precheck members, and eventually, using facial recognition to verify domestic travelers.
TSA says that by moving toward facial recognition technology in a time where travel volume is rising, it's hoping to reduce the need for physical documents like passports and paper tickets. Currently, TSA manually compares the passengers in front of them to their ID photos, but it believes an automated process that can match facial images to photos from passports and visa applications will be more accurate and efficient. -
Latest Windows 10 Update Has Yet Another File-Managing Issue (gizmodo.com.au)
An anonymous reader quotes Gizmodo: When it was discovered earlier this month that the 1809 build of Windows 10 was deleting user files just because, Microsoft halted the update until the problem was fixed. Shame, then, that another not-as-bad-but-still-bad file overwriting bug has now reared its head. in 1809, overwriting files by extracting from an archive using File Explorer doesn't result in an overwrite prompt dialogue and also doesn't replace any files at all; it just fails silently. There are also some reports that it did overwrite items, but did so silently without asking.
Ars Technica speculates that there's a larger program with Microsoft's testing process: [M]any of the preview builds had a bug wherein deleting a directory that was synced to OneDrive crashed the machine. Not only was this bug integrated into the Windows code, it was allowed to ship to end users. This tells us some fundamental things about how Windows is being developed. Either tests do not exist at all for this code (and I've been told that yes, it's permitted to integrate code without tests, though I would hope this isn't the norm), or test failures are being regarded as acceptable, non-blocking issues, and developers are being allowed to integrate code that they know doesn't work properly...
Microsoft's new development process has, proportionately, a greater amount of time spent writing new features, and a reduced amount of time stabilizing and fixing those features. That would be fine if the quality of the features were higher to start with, with the testing infrastructure to support it and higher standards before new code was integrated. But the experience with Windows 10 thus far is that Microsoft hasn't developed the processes and systems needed to sustain this new approach. -
Trolls Are Still Actively Trying to Influence Brexit and US Elections (go.com)
TechCrunch reports: A major new campaign of disinformation around Brexit, designed to stir up U.K. 'Leave' voters, and distributed via Facebook, may have reached over 10 million people in the U.K., according to new research. The source of the campaign is so far unknown, and will be embarrassing to Facebook, which only this week claimed it was clamping down on "dark" political advertising on its platform. Researchers for the U.K.-based digital agency 89up allege that Mainstream Network -- which looks and reads like a "mainstream" news site but which has no contact details or reporter bylines -- is serving hyper-targeted Facebook advertisements aimed at exhorting people in Leave-voting U.K. constituencies to tell their MP to "chuck Chequers." Chequers is the name given to the U.K. Prime Ministers's proposed deal with the EU regarding the U.K.'s departure from the EU next year.
ABC News reports: When the Justice Department unsealed criminal charges detailing a yearslong effort by a Russian troll farm to "sow division and discord in the U.S. political system," it was the first federal case alleging continued foreign interference in U.S. elections. Earlier Friday, American intelligence officials released a rare public statement asserting that Russia, China, Iran and other countries are engaged in ongoing efforts to influence U.S. policy and voters in future elections. The statement didn't provide details on those efforts. That stood in contrast with the criminal charges, which provided a detailed narrative of Russian activities...
The criminal complaint provided a clear picture that there is still a hidden but powerful Russian social media effort aimed at spreading distrust for American political candidates and causing divisions on social issues such as immigration and gun control.... Court papers describe how the operatives in Friday's case would analyze U.S. news articles and decide how they would draft social media messages about those stories. They also show that Russian trolls have stepped up their efforts with a better understanding the U.S. political climate and messages that are no longer riddled with misspellings.
CNN notes that one week before America's 2016 presidential election, "one of the Kremlin-backed accounts denied that Russian meddling, saying: 'Russia's Putin says Moscow not trying to influence U.S. election.'" -
Slashdot Asks: Should 'Crunch' Overtime Be Optional? (forbes.com)
An anonymous reader quotes Forbes: Rockstar Games co-founder and VP Dan Hauser unleashed a storm of controversy when he casually stated in an interview with Vulture that "We were working 100-hour weeks" putting the finishing touches on Red Dead Redemption 2. Reaction was swift with many condemning the ubiquitous practice of crunch time in the video game industry in general and Rockstar's history of imposing harsh demands on its employees in particular... Hauser responded that he was talking about a senior writing team of four people working over a three-week period. This kind of intense short-term engagement was common for the team which had been working together for 12 years. Hauser went on to say that Rockstar doesn't "ask or expect anyone to work anything like this". Employees are given the option of working excessive overtime but doing so is a "choice" not a requirement.
A QA tester at Rockstar's Lincoln studio in the UK has taken to Reddit to answer questions and clarify misconceptions about overtime at Rockstar that have arisen in the wake of Hauser's comments.... He has no knowledge of working conditions at other Rockstar studios. The first thing the poster points out is that he and other QA testers (with the possible exception of salaried staff) are paid for their overtime work. He then writes "The other big thing is that this overtime is NOT optional, it is expected of us. If we are not able to work overtime on a certain day without a good reason, you have to make it up on another day. This usually means that if you want a full weekend off that you will have to work a double weekend to make up for it... We have been in crunch since October 9th 2017 which is before I started working here...."
[A] requirement to opt into weekly overtime shifts and more than a year of required crunch time ranging from 56 to 81.5 hours spent at work each week is a far, far cry from Hauser's claim that overtime is a "choice" offered to Rockstar's employees. The good news is that Rockstar has changed its overtime policies in response to the negative press engendered by Hauser's 100-hours comment [according to the verified Rock Star employed on Reddit]. Beginning next week "all overtime going forward will be entirely optional, so if we want to work the extra hours and earn the extra money (As well as make yourself look better for progression) then we can do, but there is no longer a rule making us do it."
The videogame correspondent for Forbes argues that this "crunch time is the norm" idea in the videogame industry "is unconscionable and untenable. No one, in any line of work, should be expected to sacrifice their family for their job. If people want to devote their life to their job, they should be able to do so but those who would rather work a standard work-week should also be able to do so without suffering adverse job-related consequences." But what do Slashdot's readers think?
Should 'crunch' overtime be optional? -
Equifax Web Site Designer Fined $50,000 And Confined To Home Over Insider Trading (zdnet.com)
An anonymous reader writes: A 44-year-old, Georgia-based programmer -- who'd been working at Equifax since 2003 -- has been sentenced to eight months of home confinement and a $50,000 fine for insider trading. Working as Equifax's Production Development Manager of Software Engineering in August of 2017, he'd been asked to create a web site where customers could query a database to see if they were affected by a yet-to-be-announced security breach for a high-profile client. Guessing correctly that it was his own employer's breach, he'd used his wife's brokerage account to purchase $2,166.11 in "put" options betting that Equifax's stock price would tumble -- and when it did, he'd scored a hefty profit of $75,167.68.
"As part of his SEC settlement, he must also forfeit $75,979, the ill-gotten funds, plus interest," ZDNet reports, noting that the transactions "came to light after Equifax started internal investigations into several reported cases of employee insider trading." Another federal complaint also alleges that another Equifax executive avoided $117,000 in losses by selling all $1 million of his stock options -- the same day he'd performed a web search about how Experian's stock was affected by a 2015 security breach, but two weeks before Equifax's breach was announced. That case is still ongoing. -
Equifax Web Site Designer Fined $50,000 And Confined To Home Over Insider Trading (zdnet.com)
An anonymous reader writes: A 44-year-old, Georgia-based programmer -- who'd been working at Equifax since 2003 -- has been sentenced to eight months of home confinement and a $50,000 fine for insider trading. Working as Equifax's Production Development Manager of Software Engineering in August of 2017, he'd been asked to create a web site where customers could query a database to see if they were affected by a yet-to-be-announced security breach for a high-profile client. Guessing correctly that it was his own employer's breach, he'd used his wife's brokerage account to purchase $2,166.11 in "put" options betting that Equifax's stock price would tumble -- and when it did, he'd scored a hefty profit of $75,167.68.
"As part of his SEC settlement, he must also forfeit $75,979, the ill-gotten funds, plus interest," ZDNet reports, noting that the transactions "came to light after Equifax started internal investigations into several reported cases of employee insider trading." Another federal complaint also alleges that another Equifax executive avoided $117,000 in losses by selling all $1 million of his stock options -- the same day he'd performed a web search about how Experian's stock was affected by a 2015 security breach, but two weeks before Equifax's breach was announced. That case is still ongoing. -
Winamp 5.8, the First Update In 4 Years, Is Released (bleepingcomputer.com)
Winamp, the world's most famous media player, has released version 5.8 to make it compatible with today's modern operating systems such as Windows 8.1 and Windows 10. Bleeping Computer notes that there hasn't been a new updates released since 2014, when Radionomy purchased Winamp from AOL. Some other new features include standalone audio player support, an auto-fullscreen option for videos, updates scrollbars and buttons, and bug fixes.
From the report: Radionomy has stated that they are not stopping here and have big plans for Winamp. In an interview with TechCrunch, Radionomy CEO Alexandre Saboundjian, revealed that a massive release is planned for 2019 that aims to add cloud support for streaming music, podcasts, and more. "There will be a completely new version next year, with the legacy of Winamp but a more complete listening experience," Saboundjian stated in the interview. "You can listen to the MP3s you may have at home, but also to the cloud, to podcasts, to streaming radio stations, to a playlist you perhaps have built." -
Ajit Pai Killed Rules That Could Have Helped Florida Recover From Hurricane (arstechnica.com)
sharkbiter shares a report from Ars Technica: The Federal Communications Commission chairman slammed wireless carriers on Tuesday for failing to quickly restore phone service in Florida after Hurricane Michael, calling the delay "completely unacceptable." But FCC Chairman Ajit Pai's statement ignored his agency's deregulatory blitz that left consumers without protections designed to ensure restoration of service after disasters, according to longtime telecom attorney and consumer advocate Harold Feld.
The Obama-era FCC wrote new regulations to protect consumers after Verizon tried to avoid rebuilding wireline phone infrastructure in Fire Island, New York, after Hurricane Sandy hit the area in October 2012. But Pai repealed those rules, claiming that they prevented carriers from upgrading old copper networks to fiber. Pai's repeal order makes zero mentions of Fire Island and makes reference to Verizon's response to Hurricane Sandy only once, in a footnote. Among other things, the November 2017 FCC action eliminated a requirement that telcos turning off copper networks must provide Americans with service at least as good as those old copper networks. This change lets carriers replace wireline service with mobile service only, even if the new mobile option wouldn't pass a "functional test" that Pai's FCC eliminated. Additionally, "in June 2018, Chairman Pai further deregulated telephone providers to make it easier to discontinue service after a natural disaster," Feld wrote. In response to Pai's deregulation, Feld wrote: "The situation in Florida shows what happens when regulators abandon their responsibilities to protect the public based on unenforceable promises from companies eager to cut costs for maintenance and emergency preparedness. This should be a wake-up call for the 37 states that have eliminated traditional oversight of telecommunications services and those states considering similar deregulation: critical communications services cannot be left without some kind of public oversight." -
Amazon Shuts Down Liquavista, a Screen Technology Company It Had Acquired From Samsung in 2013 (the-digital-reader.com)
Liquavista, a screen tech company Amazon acquired five years ago, has shut down. Rumblings of Liquavista's potential closure have been bouncing around the e-reader community for more than six months. It remains unclear if Liquavista's work has been brought inside Amazon and moved to other parts of the organization, or if it was shut down entirely. Amazon declined to release further details. From a report: Launched in 2006 as a spin off from Philips, Liquavista had been developing a unique type of screen tech that was based on running an electric current through a liquid. This is called electrowetting technology, which is a fancy way of saying that each pixel in a Liquavista screen contained 3 liquids (red, green, blue), and that the color shown by a pixel depended on the amount of power fed into each liquid. [...] The screens were originally being developed as a solution to the battery life issue. Mobile battery life was terrible back in the pre-iPad, pre-iPhone, and pre-netbook era, and people were willing to pay a premium for a screen which used less power than typical LCD screens. -
In an Unprecedented Move, Apple CEO Tim Cook Calls For Bloomberg To Retract Its Chinese Spy Chip Story (buzzfeednews.com)
John Paczkowski and Joseph Bernstein, reporting for BuzzFeed News: Apple CEO Tim Cook, in an interview with BuzzFeed News, went on the record for the first time to deny allegations that the company was the victim of a hardware-based attack carried out by the Chinese government. And, in an unprecedented move for the company, he called for a retraction of the story that made this claim. Earlier this month Bloomberg Businessweek published an investigation alleging Chinese spies had compromised some 30 US companies by implanting malicious chips into Silicon Valley bound servers during their manufacture in China. The chips, Bloomberg reported, allowed the attackers to create "a stealth doorway" into any network running on a server in which they were embedded. Apple was alleged to be among the companies attacked, and a focal point of the story. [...] "We turned the company upside down," Cook said. "Email searches, datacenter records, financial records, shipment records. We really forensically whipped through the company to dig very deep and each time we came back to the same conclusion: This did not happen. There's no truth to this." A Bloomberg spokesperson said, "We stand by our story and are confident in our reporting and sources." -
Google App Suite Costs as Much as $40 Per Phone Under New EU Android Deal (theverge.com)
Android manufacturers will have to pay Google a surprisingly high cost in Europe in order to include Google's Play Store and other mobile apps on their devices, according to documents obtained by The Verge. From the report: A confidential fee schedule shows costs as high as $40 per device to install the "Google Mobile Services" suite of apps, which includes the Google Play Store. The new fees vary depending on country and device type, and it would apply to devices activated on or after February 1st, 2019. But phone manufacturers may not actually have to shoulder that cost: Google is also offering separate agreements to cover some or all of the licensing costs for companies that choose to install Chrome and Google search on their devices as well, according to a person familiar with the terms. Google declined to comment. -
Internet Provider Groups Sue Vermont Over Net Neutrality Law (reuters.com)
An anonymous reader quotes a report from Reuters: Five industry groups representing major internet providers and cable companies filed suit on Thursday seeking to block a Vermont law barring companies that do not abide by net neutrality rules from receiving state contracts. The lawsuit was filed in U.S. District Court in Vermont by groups representing major providers like AT&T, Comcast and Verizon. It followed a lawsuit by four of the groups earlier this month challenging a much broader California law mandating providers abide by net neutrality rules.
The trade associations are also challenging an executive order on the issue signed by Vermont Governor Phil Scott. The Vermont lawsuit was filed by the American Cable Association; CTIA -- The Wireless Association; NCTA -- The Internet & Television Association; USTelecom -- The Broadband Association and the New England Cable & Telecommunications Association. The lawsuit argues that states cannot regulate "indirectly through their spending, procurement, or other commercial powers what they are forbidden from regulating directly." -
Major Facebook Investors Want Mark Zuckerberg Out as Chairman (cnbc.com)
Major Facebook investors, including public pension funds and state officials, are pushing for Mark Zuckerberg's ouster as chairman of the company's board. From a report: The proposal is largely symbolic, since Zuckerberg holds absolute control of the board. But it comes at a difficult time for Facebook, as security breaches plague the company and spur questions around corporate oversight. "We need Facebook's insular boardroom to make a serious commitment to addressing real risks -- reputational, regulatory, and the risk to our democracy -- that impact the company, its share owners, and ultimately the hard-earned pensions of thousands of New York City workers," New York City Comptroller Scott Stringer said in a statement to CNBC. Stringer joined a previous motion by Trillium Asset Management in calling for Zuckerberg to step down. -
Major Facebook Investors Want Mark Zuckerberg Out as Chairman (cnbc.com)
Major Facebook investors, including public pension funds and state officials, are pushing for Mark Zuckerberg's ouster as chairman of the company's board. From a report: The proposal is largely symbolic, since Zuckerberg holds absolute control of the board. But it comes at a difficult time for Facebook, as security breaches plague the company and spur questions around corporate oversight. "We need Facebook's insular boardroom to make a serious commitment to addressing real risks -- reputational, regulatory, and the risk to our democracy -- that impact the company, its share owners, and ultimately the hard-earned pensions of thousands of New York City workers," New York City Comptroller Scott Stringer said in a statement to CNBC. Stringer joined a previous motion by Trillium Asset Management in calling for Zuckerberg to step down. -
Apple To Announce New iPads on October 30 (buzzfeednews.com)
Apple will hold its next big product announcement in New York later this month, the company said today. BuzzFeed News: It's the first time Apple, which usually holds these events in the Bay Area, will roll out new devices in New York City. It'll happen at the Brooklyn Academy of Music, on October 30. The company is widely expected to refresh its iPad and possibly the MacBook Air lineups at the event. -
NASA Astronaut Details Fall To Earth After Failed Soyuz Launch (cnet.com)
After surviving an aborted launch to the ISS, NASA astronaut Nick Hague details his fall to Earth and shares what it was like inside the capsule. CNET reports: In his first interviews since surviving the largely uncontrolled "ballistic descent" back to Earth that followed, Hague told reporters on Tuesday that the launch felt normal for the first two minutes but that it became clear "something was wrong pretty quick." "Your training really takes over," Hague said, adding that he and [Russian Cosmonaut Aleksey Ovchinin] had practiced what to do in case of just such a launch-abort scenario. Hague also credited years of flight training, going back to his days as a U.S. Air Force pilot.
The escape procedure has been compared to being launched sideways out of a shotgun -- but while the shotgun is rocketing upward. Hague described the side-to-side shaking inside the capsule as "fairly aggressive but fleeting." "I expected my first trip to space to be memorable," he said. "I didn't expect it to be quite this memorable." Because of the combination of rocket-fueled ascent and the sudden sideways escape maneuver, the crew experienced a higher level of g-forces than during a normal flight. Once the Soyuz reached the top of its arc and began to descend, Hague said, what followed was really the same as a normal Soyuz landing, but with one major difference: The pair couldn't be certain where they were. "My eyes were looking out the window trying to gauge where we were going to land." Luckily, the capsule deployed its parachutes and landed on smooth, flat terrain where Hague and Ovchinin were met by rescue helicopters and whisked off for medical evaluations. -
Essential Products, Startup From Android Creator Andy Rubin, Lays Off 30 Percent of Staff (fortune.com)
Essential Products, a startup founded in 2015 by Android creator Andy Rubin, was started to create a smartphone with high-end design features that wasn't associated with a particular operating-system maker. Unfortunately, reaching that goal has been harder than anticipated as the company has laid off about 30 percent of its staff. Fortune reports: Cuts were particularly deep in hardware and marketing. The company's website indicates it has about 120 employees. A company spokesperson didn't confirm the extent of layoffs, but said that the decision was difficult for the firm to make and, "We are confident that our sharpened product focus will help us deliver a truly game changing consumer product." The firm was Rubin's first startup after leaving Google in 2014, which had acquired his co-founded firm, Android, in 2005.
Essential's first phone came out in August 2017, a few weeks later than initially promised. It received mixed reviews, with most critics citing its lower quality and missing features relative to competing smartphones, such as a lack of waterproofing and poor resiliency to damage. The company dropped the price from an initial $699 within weeks to $499, and offered it on Black Monday in November 2017 for $399. -
Essential Products, Startup From Android Creator Andy Rubin, Lays Off 30 Percent of Staff (fortune.com)
Essential Products, a startup founded in 2015 by Android creator Andy Rubin, was started to create a smartphone with high-end design features that wasn't associated with a particular operating-system maker. Unfortunately, reaching that goal has been harder than anticipated as the company has laid off about 30 percent of its staff. Fortune reports: Cuts were particularly deep in hardware and marketing. The company's website indicates it has about 120 employees. A company spokesperson didn't confirm the extent of layoffs, but said that the decision was difficult for the firm to make and, "We are confident that our sharpened product focus will help us deliver a truly game changing consumer product." The firm was Rubin's first startup after leaving Google in 2014, which had acquired his co-founded firm, Android, in 2005.
Essential's first phone came out in August 2017, a few weeks later than initially promised. It received mixed reviews, with most critics citing its lower quality and missing features relative to competing smartphones, such as a lack of waterproofing and poor resiliency to damage. The company dropped the price from an initial $699 within weeks to $499, and offered it on Black Monday in November 2017 for $399. -
Trivial Authentication Bypass In Libssh Leaves Servers Wide Open (arstechnica.com)
Ars Technica reports of "a four-year-old bug in the Secure Shell implementation known as libssh that makes it trivial for just about anyone to gain unfettered administrative control of a vulnerable server." It's not clear how many sites or devices may be vulnerable since neither the widely used OpenSSH nor Github's implementation of libssh was affected. From the report: The vulnerability, which was introduced in libssh version 0.6 released in 2014, makes it possible to log in by presenting a server with a SSH2_MSG_USERAUTH_SUCCESS message rather than the SSH2_MSG_USERAUTH_REQUEST message the server was expecting, according to an advisory published Tuesday. Exploits are the hacking equivalent of a Jedi mind trick, in which an adversary uses the Force to influence or confuse weaker-minded opponents. The last time the world saw an authentication-bypass bug with such serious consequences and requiring so little effort was 11 months ago, when Apple's macOS let people log in as admin without entering a password.
On the brighter side, there were no immediate signs of any big-name sites being bitten by the bug, which is indexed as CVE-2018-10933. While Github uses libssh, the site officials said on Twitter that "GitHub.com and GitHub Enterprise are unaffected by CVE-2018-10933 due to how we use the library." In a follow-up tweet, GitHub security officials said they use a customized version of libssh that implements an authentication mechanism separate from the one provided by the library. Out of an abundance of caution, GitHub has installed a patch released with Tuesday's advisory. Another limitation: only vulnerable versions of libssh running in server mode are vulnerable, while the client mode is unaffected. Peter Winter-Smith, a researcher at security firm NCC who discovered the bug and privately reported it to libssh developers, told Ars the vulnerability is the result of libssh using the same machine state to authenticate clients and servers. Because exploits involve behavior that's safe in the client but unsafe in the server context, only servers are affected. -
Amazon Doles Out Freebies To Juice Sales of Its Own Brands (bloomberg.com)
An anonymous reader shares a report: Amazon cracked down on fake reviews two years ago by prohibiting shoppers from getting free products directly from merchants in exchange for writing reviews. It was a major turning point for the world's largest online retailer, which had previously seen "incentivized reviews" as a key way for consumers to discover new products. Amazon changed course because it realized some merchants were using such reviews to game its search algorithm, undermining faith in the customer feedback that helps drive e-commerce.
Amazon instead used its "Vine" program, in which Amazon serves as a middleman between prolific Amazon reviewers and vendors eager for exposure. Amazon would still allow freebies in exchange for feedback so long as there was no direct contact between its retail partners and reviewers, theoretically lessening the chance of quid-pro-quo. Amazon would select shoppers eligible for the program, and Amazon vendors would pay a fee and provide free products to participate. But there was an important group excluded from the Vine program: independent merchants who supply about half the goods sold on the site.
Now those excluded merchants and review watchdogs are alleging Amazon is guilty of the review manipulation the company said it was trying to prevent. Amazon uses Vine extensively to promote a fast-growing assortment of its own private-label products, distributing free samples to quickly accumulate the reviews needed to rise in search results and boost shopper faith in making a purchase. It gives Amazon a big advantage when introducing its own brands over third-party merchants who are more vulnerable to Amazon's private-label competition than prominent brands already in stores. -
How Paul Allen Saved the American Search For Extraterrestrial Intelligence (vice.com)
dmoberhaus writes: Paul Allen died on Monday evening at the age of 65. Motherboard spoke with SETI researchers about how the Microsoft co-founder single-handedly saved the American Search for Extraterrestrial Intelligence by building the first dedicated SETI radio telescope and its legacy one decade later. Less than a year after NASA's SETI program started, it was shut down by members of Congress who didn't want to spend money on the "great Martian chase." In order for the program to continue, it needed private funding. "Fortunately, one of the earliest SETI Institute supporters was Barney Oliver, who founded and directed Hewlett Packard laboratories," reports Motherboard. "So in 1993 Oliver called Bill Hewlett and David Packard of Hewlett Packard, Intel founder Gordon Moore, and Paul Allen to ask for their support." They supported Project Phoenix, a SETI program that ran from 1995 to 1998.
SETI astronomers then realized that they needed a dedicated SETI radio telescope, or array of small telescopes, if the search were to have any chance of success. Allen was able to foot the $25-million bill required to build this array of telescopes. The telescope array was built in northern California, "the first facility specifically built for SETI in the U.S.," Motherboard notes. "The cost of building a 350-telescope array ended up being far more expensive than anyone at the SETI Institute had anticipated, however. By the time the Allen Telescope Array came online in 2007, only 42 telescopes had been built and Allen's donation had largely been consumed." The report notes that the Allen Telescope Array "has analyzed 200 million signals from thousands of stars, studied unusual high-energy radio emissions, and even scanned the "spliff-shaped" Oumuamua asteroid for signs of intelligent life." -
How Paul Allen Saved the American Search For Extraterrestrial Intelligence (vice.com)
dmoberhaus writes: Paul Allen died on Monday evening at the age of 65. Motherboard spoke with SETI researchers about how the Microsoft co-founder single-handedly saved the American Search for Extraterrestrial Intelligence by building the first dedicated SETI radio telescope and its legacy one decade later. Less than a year after NASA's SETI program started, it was shut down by members of Congress who didn't want to spend money on the "great Martian chase." In order for the program to continue, it needed private funding. "Fortunately, one of the earliest SETI Institute supporters was Barney Oliver, who founded and directed Hewlett Packard laboratories," reports Motherboard. "So in 1993 Oliver called Bill Hewlett and David Packard of Hewlett Packard, Intel founder Gordon Moore, and Paul Allen to ask for their support." They supported Project Phoenix, a SETI program that ran from 1995 to 1998.
SETI astronomers then realized that they needed a dedicated SETI radio telescope, or array of small telescopes, if the search were to have any chance of success. Allen was able to foot the $25-million bill required to build this array of telescopes. The telescope array was built in northern California, "the first facility specifically built for SETI in the U.S.," Motherboard notes. "The cost of building a 350-telescope array ended up being far more expensive than anyone at the SETI Institute had anticipated, however. By the time the Allen Telescope Array came online in 2007, only 42 telescopes had been built and Allen's donation had largely been consumed." The report notes that the Allen Telescope Array "has analyzed 200 million signals from thousands of stars, studied unusual high-energy radio emissions, and even scanned the "spliff-shaped" Oumuamua asteroid for signs of intelligent life." -
How Paul Allen Saved the American Search For Extraterrestrial Intelligence (vice.com)
dmoberhaus writes: Paul Allen died on Monday evening at the age of 65. Motherboard spoke with SETI researchers about how the Microsoft co-founder single-handedly saved the American Search for Extraterrestrial Intelligence by building the first dedicated SETI radio telescope and its legacy one decade later. Less than a year after NASA's SETI program started, it was shut down by members of Congress who didn't want to spend money on the "great Martian chase." In order for the program to continue, it needed private funding. "Fortunately, one of the earliest SETI Institute supporters was Barney Oliver, who founded and directed Hewlett Packard laboratories," reports Motherboard. "So in 1993 Oliver called Bill Hewlett and David Packard of Hewlett Packard, Intel founder Gordon Moore, and Paul Allen to ask for their support." They supported Project Phoenix, a SETI program that ran from 1995 to 1998.
SETI astronomers then realized that they needed a dedicated SETI radio telescope, or array of small telescopes, if the search were to have any chance of success. Allen was able to foot the $25-million bill required to build this array of telescopes. The telescope array was built in northern California, "the first facility specifically built for SETI in the U.S.," Motherboard notes. "The cost of building a 350-telescope array ended up being far more expensive than anyone at the SETI Institute had anticipated, however. By the time the Allen Telescope Array came online in 2007, only 42 telescopes had been built and Allen's donation had largely been consumed." The report notes that the Allen Telescope Array "has analyzed 200 million signals from thousands of stars, studied unusual high-energy radio emissions, and even scanned the "spliff-shaped" Oumuamua asteroid for signs of intelligent life." -
Chrome 70 Arrives With Option To Disable Linked Sign-Ins, PWAs On Windows, and AV1 Decoder (venturebeat.com)
Krystalo quotes a report from VentureBeat: Google today launched Chrome 70 for Windows, Mac, and Linux. The release includes an option to disable linking Google site and Chrome sign-ins, Progressive Web Apps on Windows, the ability for users to restrict extensions' access to a custom list of sites, an AV1 decoder, and plenty more. You can update to the latest version now using Chrome's built-in updater or download it directly from google.com/chrome. An anonymous Slashdot reader adds: "The most anticipated addition to today's release is a new Chrome setting panel option that allows users to control how the browser behaves when they log into a Google account," reports ZDNet. "Google added this new setting after the company was accused last month of secretly logging users into their Chrome browser accounts whenever they logged into a Google website." Chrome 70 also comes with support for the AV1 video format, TLS 1.3 final, per-site Chrome extension permissions, TouchID and fingerprint sensor authentication, the Shape Detection API (gives Chrome the ability to detect and identify faces, barcodes, and text inside images or webcam feeds), and, last but not least, 23 security fixes. -
Palm Is Back With a Mini Companion Android Phone That's Exclusive To Verizon (droid-life.com)
A couple months ago, it was reported that the dearly departed mobile brand known as Palm would be making a comeback. That day has finally come. Yesterday, Palm announced The Palm, a credit card-sized Android smartphone that's supposed to act as a second phone. Droid Life reports: The Palm, which is its name, is a mini-phone with a 3.3-inch HD display that's about the size of a credit card, so it should fit nicely in your palm. It could be put on a chain or tossed in a small pocket or tucked just about anywhere, thanks to that small size. It's still a mostly fully-featured smartphone, though, with cameras and access to Android apps and your Verizon phone number and texts.
The idea here is that you have a normal phone with powerful processor and big screen that you use most of the time. But when you want to disconnect some, while not being fully disconnected, you could grab Palm instead of your other phone. It uses Verizon's NumberSync to bring your existing phone number with you, just like you would if you had an LTE smartwatch or other LTE equipped device. Some of the specs of this Verizon-exclusive phone include a Snapdragon 435 processor with 3GB RAM, 32GB storage, 12MP rear and 8MP front cameras, 800mAh battery, IP68 water and dust resistance, and Android 8.1. As Kellen notes, "It does cost $350, which is a lot for a faux phone..."
We've already seen a number of gadget fans perplexed by this device. Digital Trends goes as far as calling it "the stupidest product of the year." -
Google Maps Adds EV Charging Station Info (engadget.com)
Google Maps is adding a new feature that will let you search for charging stations and provide you with useful information about that station. The feature is rolling out today and will be available on both Android and iOS. Engadget reports: Just search for "EV charging stations" or "EV charging," and Google Maps will locate those nearby. It will also tell you what types of ports are available, how many there are as well as the station's charging speeds, and businesses with charging stations will now have a link that will lead you to more information about their setup. Additionally, you'll be able to see what other users thought of the station, as Google Maps will bring up user-posted photos, ratings and reviews. Google Maps will include information about charging stations from Tesla and Chargepoint worldwide. In the US, it will also source info about SemaConnect, EVgo and Blink stations. UK users will have access to Chargemaster and Pod Point stations, while Australia and New Zealand EV drivers will see info on Chargefox stations. Unfortunately, you won't be able to tell if individual charging stations are occupied. Also, Google doesn't have Electrify America, a Volkswagen subsidiary that's building a nationwide network of fast-charging stations with universal technology.