Domain: slashdot.org
Stories and comments across the archive that link to slashdot.org.
Stories · 37,380
-
Apple Shuts Swift Mailing List, Migrates to Online Forum (swift.org)
An anonymous reader writes: Apple's Swift project "has completed the process of migrating to the Swift Forums as the primary method for discussion and communication!" announced a blog post on Friday. "The former mailing lists have been shut down and archived, and all mailing list content has been imported into the new forum system."
While they're still maintaining a few Swift-related mailing lists, they're moving discussions into online forums divided into four main categories: Evolution, Development, Using Swift, and Site Feedback. Forum accounts can be set up using either email registration or GitHub accounts.
It was one year ago that Swift creator Chris Lattner answered questions from Slashdot readers. -
Car Manufacturers Sued Over Rodents Eating Soy-Insulated Wires (hackaday.com)
An anonymous reader writes about "a little-known problem plaguing many newer vehicles from the likes of Honda, Toyota, and Kia." The car makers used soy-insulated wiring to cut costs and "Go Green", but owners in rural areas are finding the local wildlife finds the wiring irresistible; thousands of dollars in damage has been done by rats and other critters eating wiring harnesses. Hackaday is asking their community to brainstorm solutions to this unique problem, as owners of affected vehicles have had to resort to sprinkling their driveway with coyote urine and putting rat traps on the wheels.
Hackaday reports that "It isn't just one or two cases either, it's enough of a problem that some car manufacturers are getting hit with class-action lawsuits." Back in 2010 Slashdot reported that rabbits had already discovered the joys of eating soy-insulated wires, and were turning the parking lot at the Denver International Airport into their own personal buffet.
There's even a web site called HowToPreventRatsFromEatingCarWires.com, which reports that Honda has already manufactured a special wire-wrapping tape that's infused with the active ingredient from chili peppers. -
Ajit Pai's FCC Can't Admit Broadband Competition Is a Problem (dslreports.com)
An anonymous reader quotes a report from DSLReports: While the FCC is fortunately backing away from a plan that would have weakened the standard definition of broadband, the agency under Ajit Pai still can't seem to acknowledge the lack of competition in the broadband sector. Or the impact this limited competition has in encouraging higher prices, net neutrality violations, privacy violations, or what's widely agreed to be some of the worst customer service of any industry in America. The Trump FCC had been widely criticized for a plan to weaken the standard definition of broadband from 25 Mbps down, 3 Mbps up, to include any wireless connection capable of 10 Mbps down, 1 Mbps up. Consumer advocates argued the move was a ham-fisted attempt to try and tilt the data to downplay the industry's obvious competitive and coverage shortcomings. They also argued that the plan made no coherent sense, given that wireless broadband is frequently capped, often not available (with carrier maps the FCC relies on falsely over-stating coverage), and significantly more expensive than traditional fixed-line service.
In a statement (pdf), FCC boss Ajit Pai stated the agency would fortunately be backing away from the measure, while acknowledging that frequently capped and expensive wireless isn't a comparable replacement for fixed-line broadband. "The draft report maintains the same benchmark speed for fixed broadband service previously adopted by the Commission: 25 Mbps download/3 Mbps upload," stated Pai. "The draft report also concludes that mobile broadband service is not a full substitute for fixed service. Instead, it notes there are differences between the two technologies, including clear variations in consumer preferences and demands." That's the good news. The bad news: the FCC under Pai's leadership continues to downplay and ignore the lack of competition in the sector, and the high prices and various bad behaviors most people are painfully familiar with. -
Google CEO Sundar Pichai Says He Does Not Regret Firing James Damore (theverge.com)
An anonymous reader quotes a report from The Verge: Google CEO Sundar Pichai responded today to the firing of employee James Damore over his controversial memo on workplace diversity, stating that while he does not regret the decision, he regrets that people misunderstood it as a politically motivated event. Speaking in a live conversation with journalist and Recode co-founder Kara Swisher, MSNBC host Ari Melber, and YouTube CEO Susan Wojcicki in San Francisco, Pichai said that the decision to fire Damore was about ensuring women at Google felt like the company was committed to creating a welcoming environment.
"I regret that people misunderstand that we may have made this for a political belief one way or another," Pichai said. "It's important for the women at Google, and all the people at Google, that we want to make a inclusive environment." When pressed by Swisher on the issue of regret, Pichai stated more definitively, "I don't regret it." Wojcicki, who has spoken publicly about how Damore's memo affected her personally, followed up with, "I think it was the right decision." -
Google Releases Fix For Chromecast Wi-Fi Crashes (zdnet.com)
An anonymous reader quotes a report from ZDNet: Google on Wednesday said it will release an update Jan. 18 to fix a bug in Cast software on Android phones that dramatically slows down WiFi networks. Reports have been circulating this week that the Google Home Max speaker can knock the TP-Link Archer C7 router offline. In a support page, Google explains a bug caused the Cast software that connects with Chromecast devices to send a large amount of network traffic routers can't handle. Google said the update will roll out via a Google Play services update. Until the update is released, Google advises users to try rebooting their Android phone, and check that their WiFi router is updated with the latest firmware. Google didn't list specific routers impacted by the bug, but reports have indicated routers from Linksys and Synology are seeing network crashes as well. -
Google's Fuchsia OS On the Pixelbook (arstechnica.com)
An anonymous reader quotes a report from 9to5Google: Our early look at Fuchsia OS last May provided a glimpse into a number of new interface paradigms. Several months later, we now have an updated hands-on with Google's future operating system that can span various form factors. This look at the in-development OS eight months later comes courtesy of Ars Technica who managed to get Fuchsia installed on the Pixelbook. The Made by Google Chromebook is only the third officially supported "target device" for Fuchsia development. As our last dive into the non-Linux kernel OS was through an Android APK, we did not encounter a lockscreen. The Ars hands-on shows a basic one that displays the time at center and Fuchsia logo in the top-left corner to switch between phone and desktop/tablet mode, while a FAB (of sorts) in the opposite corner lets users bring up WiFi controls, Login, and Guest.
Only Guest is fully functioning at this stage -- at least for non-Google employees. Once in this mode, we encounter an interface similar to the one we spotted last year. The big difference is how Google has filled in demo information and tweaked some elements. On phones and tablets, Fuchsia essentially has three zones. Recent apps are above, at center are controls, and below is a mixture of the Google Feed and Search. The controls swap out the always-displayed profile icon for a Fuchsia button. Tapping still surfaces Quick Settings which actually reflect current device battery levels and IP address. Impressively, Ars found a working web browser that can actually surf the internet. Google.com is the default homepage, with users able to visit other sites through that search bar. Other examples of applications, which are just static images, include a (non-working) phone dialer, video player, and Google Docs. The Google Calendar is notable for having subtle differences to any known version, including the tablet or web app. -
Microsoft Puts Minecraft Boss In Charge of Xbox Games (theverge.com)
Microsoft is promoting its Minecraft boss to the head of the company's games studios. "Matt Booty's new role sees him oversee Microsoft Studios, second only to Microsoft's games chief Phil Spencer," reports The Verge. "Microsoft CEO Satya Nadella previously promoted Phil Spencer from head of Xbox to a new role overseeing all games, associated hardware, and game strategy." From the report: Spencer reports directly to Nadella, with Booty now reporting directly to Spencer. GamesBeat reports that Booty's new role will see Microsoft devoting more resources to its games business. Booty will be looking after Microsoft's relationships with 343 Industries, The Coalition, Mojang, Rare, Turn 10 Studios, and Global Publishing. Booty first joined Microsoft back in 2010, and helped launch games for Windows phones. He's also helped develop Xbox Live Arcade, and oversaw Minecraft maker Mojang after Microsoft acquired the company for $2.5 billion back in 2014. -
Tim Cook Says Power Management Feature In Older iPhones Will Be Able To Be Turned Off In Future Update (macrumors.com)
In an interview with Rebecca Jarvis of ABC News, Apple CEO Tim Cook touched on the ongoing controversy over power management features in older iPhones. He says that a future update will allow customers to turn off the power management feature that has caused older iPhones to slow down. Mac Rumors reports: According to Cook, when the power management features were first introduced in iOS 10.2.1, Apple did explain what was going on, but following the controversy, he believes Apple should have been clearer. The company did indeed mention that the shutdown issue was caused by uneven power delivery and explained that its power management system had been tweaked, but there was no clear notice that it could cause devices to operate more slowly at times. Cook says Apple "deeply apologizes" to customers who thought the company had other motivations. Apple is introducing better battery monitoring features in a future iOS update, and Cook says Apple will also allow customers to turn off the power management feature, which is new information that the company has not previously shared. The majority of the interview was focused on the announcements that Apple made today. The company plans to contribute $350 billion in the U.S. economy over the next five years, as well as issue employees a bonus of $2,500 of restricted stock units following the introduction of the new U.S. tax law. -
Tim Cook Says Power Management Feature In Older iPhones Will Be Able To Be Turned Off In Future Update (macrumors.com)
In an interview with Rebecca Jarvis of ABC News, Apple CEO Tim Cook touched on the ongoing controversy over power management features in older iPhones. He says that a future update will allow customers to turn off the power management feature that has caused older iPhones to slow down. Mac Rumors reports: According to Cook, when the power management features were first introduced in iOS 10.2.1, Apple did explain what was going on, but following the controversy, he believes Apple should have been clearer. The company did indeed mention that the shutdown issue was caused by uneven power delivery and explained that its power management system had been tweaked, but there was no clear notice that it could cause devices to operate more slowly at times. Cook says Apple "deeply apologizes" to customers who thought the company had other motivations. Apple is introducing better battery monitoring features in a future iOS update, and Cook says Apple will also allow customers to turn off the power management feature, which is new information that the company has not previously shared. The majority of the interview was focused on the announcements that Apple made today. The company plans to contribute $350 billion in the U.S. economy over the next five years, as well as issue employees a bonus of $2,500 of restricted stock units following the introduction of the new U.S. tax law. -
Tim Cook Says Power Management Feature In Older iPhones Will Be Able To Be Turned Off In Future Update (macrumors.com)
In an interview with Rebecca Jarvis of ABC News, Apple CEO Tim Cook touched on the ongoing controversy over power management features in older iPhones. He says that a future update will allow customers to turn off the power management feature that has caused older iPhones to slow down. Mac Rumors reports: According to Cook, when the power management features were first introduced in iOS 10.2.1, Apple did explain what was going on, but following the controversy, he believes Apple should have been clearer. The company did indeed mention that the shutdown issue was caused by uneven power delivery and explained that its power management system had been tweaked, but there was no clear notice that it could cause devices to operate more slowly at times. Cook says Apple "deeply apologizes" to customers who thought the company had other motivations. Apple is introducing better battery monitoring features in a future iOS update, and Cook says Apple will also allow customers to turn off the power management feature, which is new information that the company has not previously shared. The majority of the interview was focused on the announcements that Apple made today. The company plans to contribute $350 billion in the U.S. economy over the next five years, as well as issue employees a bonus of $2,500 of restricted stock units following the introduction of the new U.S. tax law. -
Amazon Won't Say If It Hands Your Echo Data To the Government (zdnet.com)
Zack Whittaker reports via ZDNet of how Amazon still won't say whether or not it hands your Echo data to the government -- three years after the Echo was first released. From the report: Amazon has a transparency problem. Three years ago, the retail giant became the last major tech company to reveal how many subpoenas, search warrants, and court orders it received for customer data in a half-year period. While every other tech giant had regularly published its government request figures for years, spurred on by accusations of participation in government surveillance, Amazon had been largely forgotten. Eventually, people noticed and Amazon acquiesced. Since then, Amazon's business has expanded. By its quarterly revenue, it's no longer a retail company -- it's a cloud giant and a device maker. The company's flagship Echo, an "always listening" speaker, collects vast amounts of customer data that's openly up for grabs by the government. But Amazon's bi-annual transparency figures don't want you to know that. In fact, Amazon has been downright deceptive in how it presents the data, obfuscating the figures in its short, but contextless, twice-yearly reports. Not only does Amazon offer the barest minimum of information possible, the company has -- and continues -- to deliberately mislead its customers by actively refusing to clarify how many customers, and which customers, are affected by the data demands it receives. -
Apple Gives Employees $2,500 Bonuses After New Tax Law (bloomberg.com)
Apple told employees that it's issuing a bonus of $2,500 of restricted stock units, following the introduction of the new U.S. tax law. "The iPhone maker will begin issuing grants to most employees worldwide in the coming months," reports Bloomberg. Apple also announced today that it would bring back most of its cash from overseas and spend $30 billion in the U.S. over the next five years. From the report: Apple confirmed the bonuses in response to a Bloomberg inquiry Wednesday. The Cupertino, California-based company joins a growing list of American businesses that have celebrated the introduction of corporate-friendly tax law with one-time bonuses for staff. AT&T, Comcast, JetBlue, and Wal-Mart also said they were giving bonuses. -
Meteor Lights Up Southern Michigan (arstechnica.com)
New submitter Foundryman writes: Amidst fake missile reports in Hawaii and Japan, Michigan gets hit by something real. From a report via Ars Technica: "Early last night local time, a meteor rocketed through the skies of southern Michigan, giving local residents a dramatic (if brief) light show. It also generated an imperceptible thump, as the U.S. Geological Survey confirmed that there was a coincident magnitude 2.0 earthquake. The American Meteor Society has collected more than 350 eyewitness accounts, which ranged from western Pennsylvania out to Illinois and Wisconsin. They were heavily concentrated over southern Michigan, notably around the Detroit area. A number of people have also posted videos of the fireball online. The American Meteor Society estimates that the rock was relatively slow-moving at a sedate 45,000km an hour. Combined with its production of a large fireball, the researchers conclude it was probably a big rock. NASA's meteorwatch Facebook page largely agrees and suggests that this probably means that pieces of the rock made it to Earth. If you were on the flight path, you might want to check your yard. -
Meteor Lights Up Southern Michigan (arstechnica.com)
New submitter Foundryman writes: Amidst fake missile reports in Hawaii and Japan, Michigan gets hit by something real. From a report via Ars Technica: "Early last night local time, a meteor rocketed through the skies of southern Michigan, giving local residents a dramatic (if brief) light show. It also generated an imperceptible thump, as the U.S. Geological Survey confirmed that there was a coincident magnitude 2.0 earthquake. The American Meteor Society has collected more than 350 eyewitness accounts, which ranged from western Pennsylvania out to Illinois and Wisconsin. They were heavily concentrated over southern Michigan, notably around the Detroit area. A number of people have also posted videos of the fireball online. The American Meteor Society estimates that the rock was relatively slow-moving at a sedate 45,000km an hour. Combined with its production of a large fireball, the researchers conclude it was probably a big rock. NASA's meteorwatch Facebook page largely agrees and suggests that this probably means that pieces of the rock made it to Earth. If you were on the flight path, you might want to check your yard. -
A Photo Accidentally Revealed a Password For Hawaii's Emergency Agency (qz.com)
An anonymous reader quotes a report from Quartz: In the aftermath of an erroneous missile warning that terrified Hawaiians on Saturday (Jan. 13), the state's emergency management agency has come under increased scrutiny, from the poor design of the software that enables alerts to a particularly slapdash security measure by one of its employees. Old photos from the Associated Press inside the agency's office appear to show an unspecified password on a yellow Post-It note, stuck to a computer monitor. The image, which shows operations manger Jeffrey Wong standing in front of the computer, was taken in July and appeared in articles published at the time about the agency's preparedness in the face of a nuclear threat. The agency verified that the password is indeed real but wouldn't go into specifics on what program the password was supposed to be used for. -
A Photo Accidentally Revealed a Password For Hawaii's Emergency Agency (qz.com)
An anonymous reader quotes a report from Quartz: In the aftermath of an erroneous missile warning that terrified Hawaiians on Saturday (Jan. 13), the state's emergency management agency has come under increased scrutiny, from the poor design of the software that enables alerts to a particularly slapdash security measure by one of its employees. Old photos from the Associated Press inside the agency's office appear to show an unspecified password on a yellow Post-It note, stuck to a computer monitor. The image, which shows operations manger Jeffrey Wong standing in front of the computer, was taken in July and appeared in articles published at the time about the agency's preparedness in the face of a nuclear threat. The agency verified that the password is indeed real but wouldn't go into specifics on what program the password was supposed to be used for. -
Bitcoin Plunges Below $12,000 To Six-Week Low Over Crackdown Fears (cnbc.com)
Bitcoin plunged to a six-week low Tuesday after comments from South Korea's finance minister renewed worries about a crackdown in one of the largest markets for digital currency trading. In a radio program interview, South Korean Finance Minister Kim Dong-yeon said that "the shutdown of virtual currency exchanges is still one of the options" the government has. CNBC reports: Bitcoin dropped more than 17 percent to a low of $11,182.71 on Tuesday, falling below $12,000 for the first time since December 5, according to CoinDesk. CoinDesk's bitcoin price index tracks prices from cryptocurrency exchanges Bitstamp, Coinbase, itBit and Bitfinex. As of 12:13 p.m. ET, bitcoin was trading more than 13 percent lower at $11,759.73 a coin, according to CoinDesk. Trading in South Korean won accounted for about 4 percent of bitcoin trading volume, according to CryptoCompare. U.S. dollar-bitcoin trading had the largest share at 40 percent, the website showed. Other major digital currencies including ethereum and ripple also fell significantly. According to CoinMarketCap data, ethereum was trading at $1,051.83, down more than 20 percent in the last 24 hours, before lifting slightly to $1,117.72. Ripple fell almost 27 percent to $1.33 a token before recovering slightly to $1.36. -
'Very High Level of Confidence' Russia Used Kaspersky Software For Devastating NSA Leaks (yahoo.com)
bricko shares a report from Yahoo Finance: Three months after U.S. officials asserted that Russian intelligence used popular antivirus company Kaspersky to steal U.S. classified information, there are indications that the alleged espionage is related to a public campaign of highly damaging NSA leaks by a mysterious group called the Shadow Brokers. In August 2016, the Shadow Brokers began leaking classified NSA exploit code that amounted to hacking manuals. In October 2017, U.S. officials told major U.S. newspapers that Russian intelligence leveraged software sold by Kaspersky to exfiltrate classified documents from certain computers. (Kaspersky software, like all antivirus software, requires access to everything stored on a computer so that it can scan for malicious software.) And last week the Wall Street Journal reported that U.S. investigators "now believe that those manuals [leaked by Shadow Brokers] may have been obtained using Kaspersky to scan computers on which they were stored." Members of the computer security industry agree with that suspicion. "I think there's a very high level of confidence that the Shadow Brokers dump was directly related to Kaspersky ... and it's very much attributable," David Kennedy, CEO of TrustedSec, told Yahoo Finance. "Unfortunately, we can only hear that from the intelligence side about how they got that information to see if it's legitimate." -
India To Add Facial Authentication For Its Aadhaar Card Security (reuters.com)
India will build facial recognition into its national identity card in addition to fingerprints after a series of breaches in the world's biggest biometric identification programme, the government said on Monday. From a report: A local newspaper reported this month that access to the "Aadhaar" database which has identity details of more than 1 billion citizens was being sold for just $8 on social media. The Unique Identification Authority of India (UIDAI), which issues the identity cards, said it would add face recognition software as an additional layer of security from July. Card holders will be required to match their photographs with that stored in the data base for authentication in addition to fingerprints and iris scans, the agency said in a statement. -
The Tech Failings of Hawaii's Missile Alert
Over the weekend, Hawaii incorrectly warned citizens of a missile attack via their phones. According to The Washington Post, the error was a result of a staffer picking the wrong option -- missile alert instead of test missile alert -- from a drop down software menu. Hawaiian officials say they have already changed protocols to avoid a repeat of the scenario. The report goes on to add: Part of what worsened the situation Saturday was that there was no system in place at the state emergency agency for correcting the error, HEMA (Hawaii Emergency Management Agency) spokesman Richard Rapoza said. The state agency had standing permission through FEMA to use civil warning systems to send out the missile alert -- but not to send out a subsequent false alarm alert, he said. Though the Hawaii Emergency Management Agency posted a follow-up tweet at 8:20 a.m. saying there was "NO missile threat," it wouldn't be until 8:45 a.m. that a subsequent cellphone alert was sent telling people to stand down. Motherboard notes that new regulations require telecom companies to offer a testing system for local and state alert originators, but because of lobbying by Verizon and CTIA, this specific regulation does not go into effect until March 2019.
In a piece, The Atlantic argues that the 90-character messages sent by the system aren't suited to the way we use our devices. -
Following Other Credit Cards, Visa Will Also Stop Requiring Signatures (siliconbeat.com)
An anonymous reader quotes SiliconBeat: Visa, the largest U.S. credit card issuer, became the last of the major credit card companies to announce its plan to make signatures optional... Visa joined American Express, Discover, and Mastercard in the phase-out. Mastercard was the first one to announce the move in October, and American Express and Discover followed suit in December... However, this change does not apply to every credit card in circulation; older credit cards without EMV chips will still require signatures for authentication... Since 2011, Visa has deployed more than 460 million EMV chip cards and EMV chip-enabled readers at more than 2.5 million locations.
"Businesses that accepted EMV cards reported a 66 percent decline in fraud in the first two years of EMV deployment," the article notes -- suggesting a future where fewer shoppers are signing their receipts.
"In Canada, Australia and most of Europe, credit cards have long abandoned the signature for the EMV chip and a PIN to authenticate the transaction, like one does with a debit card." -
Ask Slashdot: Is There a Useful Voice-Activated PC? (dailycaring.com)
An anonymous reader writes: My elderly monther-in-law misses her computer. Her mind is okay, but she cannot use a computer because of her Parkinson's disease.
I am not all that impressed with Amazon Echo. Seems you can ask the Echo for the time of day, or the weather outside, but it will not do anything useful -- like send an email. A voice controlled PC would be great, even if it only did a few simple tasks.
The original submission ends with a question: "Is there such a thing?" So leave your best thoughts and suggestions in the comments. Is there a useful voice-activated PC? -
Peter Thiel Is Now Bidding on Gawker.com (reuters.com)
An anonymous reader writes: Its official. "Venture capitalist Peter Thiel has made an offer for Gawker," reports Reuters, adding that the potential acquisition "would let him take down stories regarding his personal life that are still available on the website, and remove the scope for further litigation between him and Gawker." It was Thiel's 2016 lawsuit which bankrupted the site, prompting a Washington Post blogger to write that Thiel "killed Gawker once. Now it looks like he may kill it again."
Elsewhere the Washington Post argues the whole episode "highlighted the immense legal risk borne by news outlets already facing a precarious financial reality in the digital age." The Post's blogger describes Thiel as "a billionaire leveraging his wealth to obliterate a media outlet...as part of a personal vendetta."
Last month former Gawker staffers attempted to crowdfund the purchase and relaunch of Gawker.com as a nonprofit media organization. But their 1,496 backers only pledged $89,844, far short of the campaign's $500,000 target. -
Peter Thiel Is Now Bidding on Gawker.com (reuters.com)
An anonymous reader writes: Its official. "Venture capitalist Peter Thiel has made an offer for Gawker," reports Reuters, adding that the potential acquisition "would let him take down stories regarding his personal life that are still available on the website, and remove the scope for further litigation between him and Gawker." It was Thiel's 2016 lawsuit which bankrupted the site, prompting a Washington Post blogger to write that Thiel "killed Gawker once. Now it looks like he may kill it again."
Elsewhere the Washington Post argues the whole episode "highlighted the immense legal risk borne by news outlets already facing a precarious financial reality in the digital age." The Post's blogger describes Thiel as "a billionaire leveraging his wealth to obliterate a media outlet...as part of a personal vendetta."
Last month former Gawker staffers attempted to crowdfund the purchase and relaunch of Gawker.com as a nonprofit media organization. But their 1,496 backers only pledged $89,844, far short of the campaign's $500,000 target. -
Apple's China iCloud Data Migration Sweeps Up International User Accounts (techcrunch.com)
Yesterday, it was reported that Apple's iCloud services in mainland China will be operated by a Chinese company from next month. What wasn't reported was the fact that Apple has included iCloud accounts that were opened in the U.S., are paid for using U.S. dollars and/or are connected to U.S.-based App Store accounts in the data that will be handled by local partner Guizhou-Cloud Big Data (GCBD) from February 28. TechCrunch reports: Apple has given China-based users the option to delete their data, but there is no opt out that allows them to have it stored elsewhere. That has concerned some users who are uneasy that the data migration is a sign of closer ties with the Chinese government, particularly since GCBD is owned by the Guizhou provincial government. When asked for comment, Apple pointed TechCrunch to its terms and conditions site which explains that it is migrating iCloud accounts based on their location: "The operation of iCloud services associated with Apple IDs that have China in their country or region setting will be subject to this transition. You will be notified of this transition via email and notifications on your devices. You don't need to take any further action and can keep using iCloud in China. After February 28, 2018, you will need to agree to the terms and conditions of iCloud operated by GCBD to keep using iCloud in China."
However, TechCrunch found instances of iCloud accounts registered overseas that were part of the migration. One user did find an apparent opt-out. That requires the user switching their iCloud account back to China, then signing out of all devices. They then switch their phone and iCloud settings to the U.S. and then, upon signing back into iCloud, their account will (seemingly) not be part of the migration. Opting out might be a wise-move, as onlookers voice concern that a government-owned company is directly involved in storing user data. -
Researcher Finds Another Security Flaw In Intel Management Firmware (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: Meltdown and Spectre are not the only security problems Intel is facing these days. Today, researchers at F-Secure have revealed another weakness in Intel's management firmware that could allow an attacker with brief physical access to PCs to gain persistent remote access to the system, thanks to weak security in Intel's Active Management Technology (AMT) firmware -- remote "out of band" device management technology installed on 100 million systems over the last decade, according to Intel. [T]he latest vulnerability -- discovered in July of 2017 by F-Secure security consultant Harry Sintonen and revealed by the company today in a blog post -- is more of a feature than a bug. Notebook and desktop PCs with Intel AMT can be compromised in moments by someone with physical access to the computer -- even bypassing BIOS passwords, Trusted Platform Module personal identification numbers, and Bitlocker disk encryption passwords -- by rebooting the computer, entering its BIOS boot menu, and selecting configuration for Intel's Management Engine BIOS Extension (MEBx).
If MEBx hasn't been configured by the user or by their organization's IT department, the attacker can log into the configuration settings using Intel's default password of "admin." The attacker can then change the password, enable remote access, and set the firmware to not give the computer's user an "opt-in" message at boot time. "Now the attacker can gain access to the system remotely," F-Secure's release noted, "as long as they're able to insert themselves onto the same network segment with the victim (enabling wireless access requires a few extra steps)." -
Ex-Google Employee's Memo Says Executives Shut Down Pro-Diversity Discussions (gizmodo.com)
An anonymous reader shares a report: A memo written by a former Google engineer claims that the company's human resources department and a senior vice president pressured him to stop discussing diversity initiatives on company forums, interactions that ultimately motivated him to leave the company. The document, which was written in 2016 and shared publicly this week, provides a striking counterpoint to allegations made by former Google employees James Damore and David Gudeman in a discrimination lawsuit filed against their former employer. Cory Altheide, the former employee who wrote the memo, began work as a security engineer at Google in 2010 and departed the company in January 2016. He recently published his account in a public Google document. Altheide posted several articles and comments to internal discussion groups that promoted diversity in the workplace and was chastised for doing so, he wrote. -
When It Comes to Gorillas, Google Photos Remains Blind (wired.com)
Tom Simonite, writing for Wired: In 2015, a black software developer embarrassed Google by tweeting that the company's Photos service had labeled photos of him with a black friend as "gorillas." Google declared itself "appalled and genuinely sorry." An engineer who became the public face of the clean-up operation said the label gorilla would no longer be applied to groups of images, and that Google was "working on longer-term fixes." More than two years later, one of those fixes is erasing gorillas, and some other primates, from the service's lexicon. The awkward workaround illustrates the difficulties Google and other tech companies face in advancing image-recognition technology, which the companies hope to use in self-driving cars, personal assistants, and other products. WIRED tested Google Photos using a collection of 40,000 images well-stocked with animals. It performed impressively at finding many creatures, including pandas and poodles. But the service reported "no results" for the search terms "gorilla," "chimp," "chimpanzee," and "monkey." -
Apple To Transfer Chinese iCloud Operations To Chinese Firm (bbc.com)
Apple's iCloud services in mainland China will be operated by a Chinese company from next month, the tech giant has confirmed, though Apple will still have access to all data stored on iCloud. The company said it had made the move to comply with the country's cloud computing regulations. iCloud accounts registered outside of China are not affected. BBC reports: The Chinese cyber security rules, introduced in July last year, include a requirement for companies to store all data within China. The firm, Guizhou on the Cloud Big Data (GCBD), is owned by the Guizhou provincial government in southern China. Guizhou is where Apple opened a $1 billion data center last year to meet the regulations. iCloud data will be transferred from February 28, Apple said. Customers living in mainland China who did not want to use iCloud operated by GCBD were given the option to terminate their account. Apple said the "partnership" with GCBD would allow it to "improve the speed and reliability of our iCloud services products while also complying with newly passed regulations that cloud services be operated by Chinese companies." It added that Apple had "strong data privacy and security protections in place and no backdoors will be created into any of our systems." However, some on social media have said the step gives Beijing more opportunity to monitor its citizens and others living in the country. -
Samsung Will Unveil the Galaxy S9 Next Month At Mobile World Congress (theverge.com)
Samsung will unveil its next flagship handset, the Galaxy S9, next month at Mobile World Congress (MWC). DJ Koh, the company's smartphone chief, confirmed the launch to ZDNet at CES yesterday without offering a specific date. The Verge reports: The S9 (and, presumably, an S9 Plus) will be the successors to the S8 and S8 Plus, which launched at a Samsung event in New York last March before going on sale in April. The S8 and its bigger brother were a hit with critics, who praised the phones' gorgeous design and brilliant cameras. The phones were even good enough to make consumers forget about the disaster of the Galaxy Note 7 and its exploding batteries. Not much is known about the Galaxy S9 at this point, though we're not expecting any radical departures from the S8. A handful of leaked renders suggest it will look near-identical to its predecessor, with a slight tweak moving the rear fingerprint sensor to below the camera (rather than its current, awkward position of off to one side). -
FCC Plan To Lower Broadband Standards Is Met With 'Mobile Only Challenge' (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: Broadband consumer advocates have launched a "Mobile Only Challenge" to show U.S. regulators that cellular data should not be considered an adequate replacement for home Internet service. The awareness campaign comes as the Federal Communications Commission is considering a change to the standard it uses to judge whether broadband is being deployed to all Americans in a reasonable and timely fashion. While FCC Chairman Ajit Pai hasn't released his final plan yet, the FCC may soon declare that America's broadband deployment problem is solved as long as everyone has access to either fast home Internet or cellular Internet service with download speeds of at least 10Mbps. That would be a change from current FCC policy, which says that everyone should have access to both mobile data and fast home Internet services such as fiber or cable.
"The FCC wants to lower broadband standards," organizers of the Mobile Only Challenge say on the campaign's website. "Pledge to spend one day in January 2018 accessing the Internet only on your mobile device to tell them that's not OK." The Mobile Only Challenge was organized by Public Knowledge, Next Century Cities, New America's Open Technology Institute, the Institute for Local Self-Reliance, the National Hispanic Media Coalition (NHMC), and other groups. Participants are encouraged to share their experiences using the #MobileOnly hashtag. -
Senator Wants Apple To Answer Questions on Slowing iPhones (reuters.com)
The chairman of a U.S. Senate committee overseeing business issues asked Apple to answer questions about its disclosure that it slowed older iPhones with flagging batteries, Reuters reported on Wednesday, citing a letter. From the report: The California-based company apologized over the issue on Dec. 28, cut battery replacement costs and said it will change its software to show users whether their phone battery is good. Senator John Thune, a Republican who chairs the Commerce, Science and Transportation Committee, said in a Jan. 9 letter to Apple Chief Executive Officer Tim Cook that "the large volume of consumer criticism leveled against the company in light of its admission suggests that there should have been better transparency." -
Senator Wants Apple To Answer Questions on Slowing iPhones (reuters.com)
The chairman of a U.S. Senate committee overseeing business issues asked Apple to answer questions about its disclosure that it slowed older iPhones with flagging batteries, Reuters reported on Wednesday, citing a letter. From the report: The California-based company apologized over the issue on Dec. 28, cut battery replacement costs and said it will change its software to show users whether their phone battery is good. Senator John Thune, a Republican who chairs the Commerce, Science and Transportation Committee, said in a Jan. 9 letter to Apple Chief Executive Officer Tim Cook that "the large volume of consumer criticism leveled against the company in light of its admission suggests that there should have been better transparency." -
AT&T and Comcast Finalize Court Victory Over Nashville and Google Fiber (arstechnica.com)
"AT&T and Comcast have solidified a court victory over the metro government in Nashville, Tennessee, nullifying a rule that was meant to help Google Fiber compete against the incumbent broadband providers," reports Ars Technica. From the report: The case involved Nashville's "One Touch Make Ready" ordinance that was supposed to give Google Fiber and other new ISPs faster access to utility poles. The ordinance let a single company make all of the necessary wire adjustments on utility poles itself instead of having to wait for incumbent providers like AT&T and Comcast to send work crews to move their own wires. But AT&T and Comcast sued the metro government to eliminate the rule and won a preliminary victory in November when a U.S. District Court judge in Tennessee nullified the rule as it applies to poles owned by AT&T and other private parties.
The next step for AT&T and Comcast was overturning the rule as it applies to poles owned by the municipal Nashville Electric Service (NES), which owns around 80 percent of the Nashville poles. AT&T and Comcast achieved that on Friday with a new ruling from U.S. District Court Judge Aleta Trauger. Nashville's One Touch Make Ready ordinance "is ultra vires and void or voidable as to utility poles owned by Nashville Electric Service because adoption of the Ordinance exceeded Metro Nashville's authority and violated the Metro Charter," the ruling said. Nashville is "permanently enjoined from applying the Ordinance to utility poles owned by Nashville Electric Service." The Nashville government isn't planning to appeal the decision, a spokesperson for Nashville Mayor Megan Barry told Ars today. -
Tesla's New York Gigafactory Kicks Off Solar Roof Production (bloomberg.com)
In an email Tuesday, Tesla said that its manufacturing of the long-awaited electricity-producing shingles began last month at a factory in Buffalo built with backing from New York State. It comes more than a year after Tesla unveiled the shingles to a mix of fanfare and skepticism. Bloomberg reports: The appeal: a sleek, clean solar product, especially for homeowners seeking to replace aging roofs. The tiles -- from most angles -- look like ordinary shingles. They allow light to pass from above and onto a standard flat solar cell. Tesla, the biggest U.S. installer of rooftop-solar systems, piloted the product on the homes of several employees. The company expects to begin installing roofs for customers within the next few months.
Tesla started production of solar cells and panels about four months ago at its Gigafactory 2 in Buffalo. New York committed $750 million to help build the 1.2 million-square-foot factory, which currently employs about 500 people. The plant will eventually create nearly 3,000 jobs in Western New York and nearly 5,000 statewide, Governor Andrew Cuomo said in 2015. -
Senate Bill to Block Net Neutrality Repeal Now Has 40 Co-Sponsors (thehill.com)
New submitter Rick Schumann writes: The senate bill to block the FCC repeal of Obama-era internet net neutrality rules now has 40 co-sponsors, up from the 30 co-sponsors it had yesterday. The bill, being driven by Senate minority Democrats, requires only a simple majority vote in order to be passed, although Washington insiders are currently predicting the bill will fail. "The bill would use authority under the Congressional Review Act (CRA) to block the FCC's repeal from going into effect," reports The Hill. "And with more than 30 senators on board, the legislation will be able to bypass the committee approval process and Democrats will be able to force a vote on the floor." -
UK Backs Off From Banning Reidentification Research (theguardian.com)
An anonymous reader writes: The United Kingdom has recently debated banning reidentification in its new data privacy law. This proposal has quickly been identified as dangerous and criticized, as it was argued this is not only ineffective but would also put at risk legitimate security and privacy researchers. Following public outcry, the UK government amended the bill to include safe-guards allowing researchers to study anonymization weaknesses. Researchers will also gain a new channel of disclosure via the Information Commissioner Office (ICO). According to The Guardian, "Researchers will have to notify the ICO within three days of successfully deanonymizing data, and demonstrate that they had acted in the public interest and without intention to cause damage or distress in re-identifying data." -
Snowden Joins Outcry Against World's Biggest Biometric Database (bloomberg.com)
Former U.S. intelligence-contractor-turned whistleblower Edward Snowden joined critics of India's digital ID program as the nation's top court is due to decide on its legality. From a report: Snowden on Tuesday tweeted in support of an Indian journalist who faces police charges after she reported that personal details of over a billion citizens enrolled in the program could be illegally accessed for just $8 paid through a digital wallet. Named Aadhaar, the program is backed by the world's biggest biometric database, which its operator Unique Identification Authority of India, or UIDAI, says wasn't breached. Snowden tweeted, "The journalists exposing the Aadhaar breach deserve an award, not an investigation. If the government were truly concerned for justice, they would be reforming the policies that destroyed the privacy of a billion Indians. Want to arrest those responsible? They are called @UIDAI." -
Microsoft Pauses Rollout of Spectre and Meltdown Patches To AMD Systems (betanews.com)
Microsoft is suspending patches to guard against Meltdown and Spectre security threats for computers running AMD chipsets after complaints by AMD customers that the software updates froze their machines. From a report: The company is blaming AMD's failure to comply with "the documentation previously provided to Microsoft to develop the Windows operating system mitigations to protect against the chipset vulnerabilities known as Spectre and Meltdown." There's no word on when the patches will be fixed, but Microsoft says that it is working with AMD to address the problem. -
Apple Investigated By France For 'Planned Obsolescence' (bbc.com)
AmiMoJo shares a report from the BBC: French prosecutors have launched a probe over allegations of "planned obsolescence" in Apple's iPhone. Under French law it is a crime to intentionally shorten the lifespan of a product with the aim of making customers replace it. In December, Apple admitted that older iPhone models were deliberately slowed down through software updates. It follows a legal complaint filed in December by pro-consumer group Stop Planned Obsolescence (Hop). Hop said France was the third country to investigate Apple after Israel and the U.S., but the only one in which the alleged offense was a crime. Penalties could include up to 5% of annual turnover or even a jail term. -
James Damore Sues Google For Allegedly Discriminating Against Conservative White Men (theverge.com)
An anonymous reader shares a report: The author of the controversial memo that upended Google in August is suing the company, alleging that white, male conservatives are systematically discriminated against by Google. James Damore was fired as an engineer after a manifesto questioning the benefits of diversity programs was widely passed around the company. In a new lawsuit, he and another fired engineer claim that "employees who expressed views deviating from the majority view at Google on political subjects raised in the workplace and relevant to Google's employment policies and its business, such as 'diversity' hiring policies, 'bias sensitivity,' or 'social justice,' were/are singled out, mistreated, and systematically punished and terminated from Google, in violation of their legal rights." -
Alexa is Coming To Windows 10 PCs From HP, ASUS and Others (engadget.com)
An anonymous reader shares a report: Amazon's Alexa recently arrived on headphones and even toilets, but it's about to become much more ubiquitous by hitting Windows 10 PCs later this year. HP, ASUS and Acer have revealed that the voice assistant is coming to various models, including ASUS's ZenBook and VivoBook lineup, the HP Pavilion Wave, and select Acer Spin, Swift, Switch and Aspire notebooks. Amazon will release a special Alexa app in the spring, and laptop builders are tapping Intel's Smart Sound tech to make sure that the app can pick up your voice when you're not right next to your PC. "Hands-free access to Alexa on PCs can be helpful to customers in many ways, like making it simple to interact with your smart home, get news or weather, set timers, and more," Amazon Alexa VP Steve Rabuchin said in a statement. -
John Young, Legendary Astronaut, Dies at Age 87 (cbsnews.com)
Legendary astronaut John Young -- who walked on the moon and piloted the first space shuttle -- died Friday at the age of 87. schwit1 shares a nice profile from CBS News: A naval aviator and test pilot, Young logged more than 15,275 hours flying time in a variety of aircraft, including 9,200 hours in T-38 jets. He spent 835 hours in space across his six NASA flights, serving as co-pilot of the first Gemini mission in 1965, commander of a second Gemini flight in 1966, lunar module pilot for Apollo 10 in 1969, commander of Apollo 16 in 1972 and commander of the first shuttle flight in 1981... Young was the first man to fly in space six times and the only astronaut to fly aboard Gemini and Apollo capsules and the space shuttle... He also brought a legendary cool nerve to an inherently dangerous job that amazed his compatriots. "I found out from the flight surgeon later on that my heartbeat was 144 at liftoff," Charlie Duke, one of Young's crewmates on the Apollo 16 moon landing mission, said of his reaction to launch atop a Saturn 5 rocket. "John's (heartbeat) was 70".
On one space shuttle flight, two of the ship's three auxiliary power units actually caught on fire, and exploded just minutes after touchdown. But Young always kept his cool. In 2010 Slashdot remembered the first manned Gemini mission in 1965. When it reached orbit, Young surprised his fellow astronaut Gus Grissom by pulling a fresh corned beef sandwich out of his pocket.
An anonymous Slashdot reader writes:
Andrew Chaikin, author of "A Man on the Moon: The Voyages of the Apollo Astronauts", remembers that Young "used to talk about how if we stay on this planet for too long, something's going to get us, whether it was a super volcano or whatever. He really was a true believer." NASA Administrator Robert Lightfoot added that Young's career "spanned three generations of spaceflight; we will stand on his shoulders as we look toward the next human frontier."
In 2012 -- when he was in his 80s -- Young published a memoir titled Forever Young: A Life of Adventure in Air and Space. "My life has been long, and it has been interesting. It's also been a lot of fun, and a lot of hard, challenging work. If I could do it over, I would do it over the very same way. -
Can We Replace Intel x86 With an Open Source Chip? (zdnet.com)
An anonymous reader quotes Jason Perlow, the senior technology editor at ZDNet: Perhaps the Meltdown and Spectre bugs are the impetus for making long-overdue changes to the core DNA of the semiconductor industry and how chip architectures are designed... Linux (and other related FOSS tech that forms the overall stack) is now a mainstream operating system that forms the basis of public cloud infrastructure and the foundational software technology in mobile and Internet of Things (IoT)... We need to develop a modern equivalent of an OpenSPARC that any processor foundry can build upon without licensing of IP, in order to drive down the costs of building microprocessors at immense scale for the cloud, for mobile and the IoT. It makes the $200 smartphone as well as hyperscale datacenter lifecycle management that much more viable and cost-effective.
Just as Linux and open source transformed how we view operating systems and application software, we need the equivalent for microprocessors in order to move out of the private datacenter rife with these legacy issues and into the green field of the cloud... The fact that we have these software technologies that now enable us to easily abstract from the chip hardware enables us to correct and improve the chips through community efforts as needs arise... We need to stop thinking about microprocessor systems' architectures as these licensed things that are developed in secrecy by mega-companies like Intel or AMD or even ARM... The reality is that we now need to create something new, free from any legacy entities and baggage that has been driving the industry and dragging it down the past 40 years. Just as was done with Linux.
The bigger question is which chip should take its place. "I don't see ARM donating its IP to this effort, and I think OpenSPARC may not be it either. Perhaps IBM OpenPOWER? It would certainly be a nice gesture of Big Blue to open their specification up further without any additional licensing, and it would help to maintain and establish the company's relevancy in the cloud going forward.
"RISC-V, which is being developed by UC Berkeley, is completely Open Source." -
Kansas 'Swat' Perpetrator Had Already Been To Prison For Fake Bomb Threats (go.com)
More details are emerging about an online gamer whose fake call to Kansas police led to a fatal shooting:- "After phoning in a false bomb threat to a Glendale, California TV station in 2015, Tyler Barriss threatened to kill his grandmother if she reported him, according to local reports and court documents." -- The Wichita Eagle
- "The Glendale Police Department confirmed to ABC News that Tyler Barriss made about 20 calls to universities and media outlets throughout the country around the time he was arrested for a bomb threat to Los Angeles ABC station KABC in 2015... He was sentenced to two years and eight months in jail, court records show." -- ABC News
- "Within months of his release in August, he had already become the target of a Los Angeles Police Department investigation into similar hoax calls... LAPD detectives were planning to meet with federal prosecutors to discuss their investigation..." -- The Los Angeles Times
- The Wichita Eagle reports that even after the police had fatally shot the person SWauTistic was pretending to be, he continued his phone call with the 911 operator for another 16 minutes -- on a call which lasted over half an hour.
- Brian Krebs reports that police may have been aided in their investigation by another reformed SWAT perpetrator -- adding that SWauTistic privately claimed to have already called in fake emergencies at approximately 100 schools and 10 homes.
Just last month SWauTistic's Twitter account showed him bragging about a bomb threat which caused the evacuation of a Dallas convention center, according to the Daily Beast -- after which SWauTistic encouraged his Twitter followers to also follow him on a second account, "just in case twitter suspends me for being a god." Later the 25-year-old tweeted that "if you can't pull off a swat without getting busted you're not a leet hacking God its that simple."
Barriss remains in jail in Los Angeles with no bond, though within three weeks he's expected to be extradited to Kansas for his next trial. -
Bill Gates Is First Guest Editor In Time Magazine's 94-Year History (geekwire.com)
Long-time Slashdot reader theodp writes: Time invited Bill Gates to be the first guest editor in the 94-year history of the magazine. Among the news Bill deemed fit to print in Time's first augmented-reality-enhanced issue were articles by wife Melinda and pal Bono, both of whom graced the cover of Time with Bill as the 2005 Persons of the Year... Another article reveals that "the four learning hacks Bill Gates swears by" include Khan Academy (a $10+ million Gates Foundation partner), tech-backed Code.org (to which Bill, the Gates Foundation, Microsoft, and Steve Ballmer have given somewhere north of $17M), the Big History Project (to which Bill had contributed a "modest $10 million" as of 2014), and The Teaching Company (which got Bill stoked about Big History).
The issue also includes Gates' "four favorite ways to give back" and "six innovations that could change the world." In fact, the theme of the whole issue is "optimism," with 62-year-old Gates writing that "On the whole, the world is getting better. This is not some naively optimistic view; it's backed by data. Look at the number of children who die before their fifth birthday. Since 1990, that figure has been cut in half. That means 122 million children have been saved in a quarter-century, and countless families have been spared the heartbreak of losing a child."
Another optimistic essay came from Daily Show host Trever Noah, who writes, "Mock millennials all you want. Here's why they give me hope." -
Lindows Resurrected! Freespire 3.0 and Linspire 7.0 Linux Distros Now Available (betanews.com)
BrianFagioli writes: About 16 years ago, a for-pay Linux distribution caused quite a stir all because of its name -- Lindows. Yes, someone actually thought kicking the billion dollar hornets nest that is Microsoft by playing off of the "Windows" name was a good idea. To be honest, from a marketing perspective, it was brilliant -- it got tons of free press. Microsoft eventually killed the Lindows name by use of money and the legal system, however. Ultimately, the Linux distro was renamed "Linspire." Comically, there was a Lindows Insiders program way before Windows Insiders!
After losing the Lindows name, the operating system largely fell out of the spotlight, and its 15 minutes of fame ended. After all, without the gimmicky name, it was hard to compete with free Linux distros with a paid OS. Not to mention, Richard Stallman famously denounced the OS for its non-free ways. The company eventually created a free version of its OS called Freespire, but by 2008, both projects were shut down by its then-owner, Xandros. Today, however, a new Linspire owner emerges -- PC/OpenSystems LLC. And yes, Lindows is rising from the grave -- as Freespire 3.0 and Linspire 7.0!
"Today the development team at PC/Opensystems LLC is pleased to announce the release of Freespire 3.0 and Linspire 7.0. While both contain common kernel and common utilities, they are targeted towards two different user bases. Freespire is a FOSS distribution geared for the general Linux community, making use of only open source components, containing no proprietary applications. This is not necessarily a limitation : through our software center and extensive repositories, Freespire users can install any application that they wish," says PC/OpenSystems LLC.
Back in 2003 the CEO of Lindows answered questions from Slashdot readers.
The first question was "Why oh why?" -
Intel Hit With Three Class-Action Lawsuits Over Meltdown and Spectre Bugs (theguardian.com)
An anonymous reader quotes a report from The Guardian: Intel has been hit with at least three class-action lawsuits over the major processor vulnerabilities revealed this week. Three separate class-action lawsuits have been filed by plaintiffs in California, Oregon and Indiana seeking compensation, with more expected. All three cite the security vulnerability and Intel's delay in public disclosure from when it was first notified by researchers of the flaws in June. Intel said in a statement it "can confirm it is aware of the class actions but as these proceedings are ongoing, it would be inappropriate to comment." The plaintiffs also cite the alleged computer slowdown that will be caused by the fixes needed to address the security concerns, which Intel disputes is a major factor. "Contrary to some reports, any performance impacts are workload-dependent, and, for the average computer user, should not be significant and will be mitigated over time," Intel said in an earlier statement. -
Intel Hit With Three Class-Action Lawsuits Over Meltdown and Spectre Bugs (theguardian.com)
An anonymous reader quotes a report from The Guardian: Intel has been hit with at least three class-action lawsuits over the major processor vulnerabilities revealed this week. Three separate class-action lawsuits have been filed by plaintiffs in California, Oregon and Indiana seeking compensation, with more expected. All three cite the security vulnerability and Intel's delay in public disclosure from when it was first notified by researchers of the flaws in June. Intel said in a statement it "can confirm it is aware of the class actions but as these proceedings are ongoing, it would be inappropriate to comment." The plaintiffs also cite the alleged computer slowdown that will be caused by the fixes needed to address the security concerns, which Intel disputes is a major factor. "Contrary to some reports, any performance impacts are workload-dependent, and, for the average computer user, should not be significant and will be mitigated over time," Intel said in an earlier statement. -
Eben Upton Explains Why Raspberry Pi Isn't Vulnerable To Spectre Or Meltdown (raspberrypi.org)
Raspberry Pi founder and CEO Eben Upton says the Raspberry Pi isn't susceptible to the "Spectre" or "Meltdown" vulnerabilities because of the particular ARM cores they use. "Spectre allows an attacker to bypass software checks to read data from arbitrary locations in the current address space; Meltdown allows an attacker to read data from arbitrary locations in the operating system kernel's address space (which should normally be inaccessible to user programs)," Upton writes. He goes on to provide a "primer on some concepts in modern processor design" and "illustrate these concepts using simple programs in Python syntax..."
In conclusion: "Modern processors go to great lengths to preserve the abstraction that they are in-order scalar machines that access memory directly, while in fact using a host of techniques including caching, instruction reordering, and speculation to deliver much higher performance than a simple processor could hope to achieve," writes Upton. "Meltdown and Spectre are examples of what happens when we reason about security in the context of that abstraction, and then encounter minor discrepancies between the abstraction and reality. The lack of speculation in the ARM1176, Cortex-A7, and Cortex-A53 cores used in Raspberry Pi render us immune to attacks of the sort."