United States

Tech Giants Join Call for Funding Chip Production (reuters.com) 241

Some of the world's biggest chip buyers, including Apple, Microsoft and Alphabet's Google, are joining top chip-makers such as Intel to create a new lobbying group to press for government chip manufacturing subsidies. From a report: The newly formed Semiconductors in America Coalition, which also includes Amazon.com's Amazon Web Services, said Tuesday it has asked U.S. lawmakers to provide funding for the CHIPS for America Act, for which President Joe Biden has asked Congress to provide $50 billion. "Robust funding of the CHIPS Act would help America build the additional capacity necessary to have more resilient supply chains to ensure critical technologies will be there when we need them," the group said in a letter to Democratic and Republican leaders in both houses of the U.S. Congress.

A global chip shortage has hit automakers hard, with Ford Motor saying it could halve second-quarter production. Automotive industry groups have pressed the Biden administration to secure chip supply for car factories. But Reuters last week reported administration officials were reluctant to use a national security law to redirect computer chips to automakers because doing so could hurt other industries. The new coalition includes some of those other chip-consuming industries, with members such as AT&T, Cisco Systems, General Electric, Hewlett Packard Enterprise and Verizon Communications. It cautioned against government actions to favor a single industry such as automakers.

The Military

Pentagon Weighs Ending JEDI Cloud Project Amid Amazon Court Fight (wsj.com) 86

Pentagon officials are considering pulling the plug on the star-crossed JEDI cloud-computing project, which has been mired in litigation from Amazon and faces continuing criticism from lawmakers. From a report: The Joint Enterprise Defense Infrastructure contract was awarded to Microsoft in 2019 over Amazon, which has contested the award in court ever since. A federal judge last month refused the Pentagon's motion to dismiss much of Amazon's case. A few days later, Deputy Defense Secretary Kathleen Hicks said the department would review the project. "We're going to have to assess where we are with regard to the ongoing litigation around JEDI and determine what the best path forward is for the department," Ms. Hicks said at an April 30 security conference organized by the nonprofit Aspen Institute. Her comments followed a Pentagon report to Congress, released before the latest court ruling, that said another Amazon win in court could significantly draw out the timeline for the program's implementation. "The prospect of such a lengthy litigation process might bring the future of the JEDI Cloud procurement into question," the Jan. 28 report said. Ms. Hicks and other Pentagon officials say there is a pressing need to implement a cloud program that serves most of its branches and departments. The JEDI contract, valued at up to $10 billion over 10 years, aims to allow the Pentagon to consolidate its current patchwork of data systems, give defense personnel better access to real-time information and put the Defense Department on a stronger footing to develop artificial-intelligence capabilities that are seen as vital in the future.
Hardware

'Despite Chip Shortage, Chip Innovation Is Booming' (nytimes.com) 33

The New York Times reports on surprising silver linings of the global chip shortage: Even as a chip shortage is causing trouble for all sorts of industries, the semiconductor field is entering a surprising new era of creativity, from industry giants to innovative start-ups seeing a spike in funding from venture capitalists that traditionally avoided chip makers. Taiwan Semiconductor Manufacturing Company and Samsung Electronics, for example, have managed the increasingly difficult feat of packing more transistors on each slice of silicon. IBM on Thursday announced another leap in miniaturization, a sign of continued U.S. prowess in the technology race. Perhaps most striking, what was a trickle of new chip companies is now approaching a flood.

Equity investors for years viewed semiconductor companies as too costly to set up, but in 2020 plowed more than $12 billion into 407 chip-related companies, according to CB Insights. Though a tiny fraction of all venture capital investments, that was more than double what the industry received in 2019 and eight times the total for 2016. Synopsys, the biggest supplier of software that engineers use to design chip, is tracking more than 200 start-ups designing chips for artificial intelligence, the ultrahot technology powering everything from smart speakers to self-driving cars. Cerebras, a start-up that sells massive artificial-intelligence processors that span an entire silicon wafer, for example, has attracted more than $475 million. Groq, a start-up whose chief executive previously helped design an artificial-intelligence chip for Google, has raised $367 million.

"It's a bloody miracle," said Jim Keller, a veteran chip designer whose resume includes stints at Apple, Tesla and Intel and who now works at the A.I. chip start-up Tenstorrent. "Ten years ago you couldn't do a hardware start-up...."

More companies are concluding that software running on standard Intel-style microprocessors is not the best solution for all problems. For that reason, companies like Cisco Systems and Hewlett Packard Enterprise have long designed specialty chips for products such as networking gear. Giants like Apple, Amazon and Google more recently have gotten into the act. Google's YouTube unit recently disclosed its first internally developed chip to speed video encoding.

And Volkswagen even said last week that it would develop its own processor to manage autonomous driving.

Security

Click Studios Asks Customers To Stop Tweeting About Its Passwordstate Data Breach (techcrunch.com) 14

Australian security software house Click Studios has told customers not to post emails sent by the company about its data breach, which allowed malicious hackers to push a malicious update to its flagship enterprise password manager Passwordstate to steal customer passwords. TechCrunch reports: Last week, the company told customers to "commence resetting all passwords" stored in its flagship password manager after the hackers pushed the malicious update to customers over a 28-hour window between April 20-22. The malicious update was designed to contact the attacker's servers to retrieve malware designed to steal and send the password manager's contents back to the attackers. In an email to customers, Click Studios did not say how the attackers compromised the password manager's update feature, but included a link to a security fix.

But news of the breach only became public after Danish cybersecurity firm CSIS Group published a blog post with details of the attack hours after Click Studios emailed its customers. Click Studios claims Passwordstate is used by "more than 29,000 customers," including in the Fortune 500, government, banking, defense and aerospace, and most major industries.

In an update on its website, Click Studios said in a Wednesday advisory that customers are "requested not to post Click Studios correspondence on Social Media." The email adds: "It is expected that the bad actor is actively monitoring Social Media, looking for information they can use to their advantage, for related attacks." "It is expected the bad actor is actively monitoring social media for information on the compromise and exploit. It is important customers do not post information on Social Media that can be used by the bad actor. This has happened with phishing emails being sent that replicate Click Studios email content," the company said.
The report says Click Studios has remained extremely tightlipped about the situation. The company has refused to comment or respond to questions; it's also unclear if the company has disclosed the breach to U.S. and EU authorities, which require companies to disclose data breach incidents or face hefty fines.
Ubuntu

Canonical Launches Ubuntu 21.04 'Hirsute Hippo' 46

Canonical released Ubuntu 21.04 with native Microsoft Active Directory integration, Wayland graphics by default, and a Flutter application development SDK. Separately, Canonical and Microsoft have announced performance optimization and joint support for Microsoft SQL Server on Ubuntu. Canonical blog adds: "Native Active Directory integration and certified Microsoft SQL Server on Ubuntu are top priorities for our enterprise customers." said Mark Shuttleworth, CEO of Canonical. "For developers and innovators, Ubuntu 21.04 delivers Wayland and Flutter for smoother graphics and clean, beautiful, design-led cross-platform development." You can read the full list of new features and changelog here.
Security

Signal CEO Hacks Cellebrite iPhone Hacking Device Used By Cops (vice.com) 85

FlatEric521 shares a report: Moxie Marlinspike, the founder of the popular encrypted chat app Signal claims to have hacked devices made by the infamous phone unlocking company Cellebrite, which has famously worked with cops to circumvent encryption such as Signal's. In a blog post Wednesday, Marlinspike not only published details about the new exploits for Cellebrite devices but seemed to suggest that Signal's code could be theoretically altered to hack Cellebrite devices en masse. "We were surprised to find that very little care seems to have been given to Cellebrite's own software security. Industry-standard exploit mitigation defenses are missing, and many opportunities for exploitation are present," Marlinspike wrote in the post. "Any app could contain such a file, and until Cellebrite is able to accurately repair all vulnerabilities in its software with extremely high confidence, the only remedy a Cellebrite user has is to not scan devices."

Marlinspike claims (whether you believe this portion of the post or not is up to you) that while he was on a walk he happened to find a Cellebrite phone unlocking device: "By a truly unbelievable coincidence, I was recently out for a walk when I saw a small package fall off a truck ahead of me. As I got closer, the dull enterprise typeface slowly came into focus: Cellebrite. Inside, we found the latest versions of the Cellebrite software, a hardware dongle designed to prevent piracy (tells you something about their customers I guess!), and a bizarrely large number of cable adapters." Along with his colleagues, Marlinspike analyzed the device and found that it included several vulnerabilities that could allow an attacker to include an "otherwise innocuous file in an app" that when it gets scanned by a Cellebrite device exploits it and tampers with the device and the data it can access.

Technology

Magic Leap 2 Headset To Be Unveiled at 'End of This Year,' CEO Says (cnet.com) 26

Magic Leap's next augmented realty headset is on track to be unveiled later this year. From a report: In an interview with Protocol published on Tuesday, CEO Peggy Johnson said the Magic Leap 2 will be released through an early adopter program at the end of this year and will be more generally available in early 2022. Johnson said the new headset, which is intended for enterprise customers, will be lighter and have an improved field of view over the Magic Leap One. "For frontline workers, the product has to be something comfortable that they can wear all day long," Johnson told Protocol. "So we've made the product half the size, about 20% lighter. But most importantly, we've doubled the field of view. That's a hard thing to do. The optics around that are complex, but we have a very talented engineering team." Past stories on Magic Leap: Magic Leap, Which Has Raised Over $2B, Lays off 1,000 Employees and Drops Consumer Business
Translation From VC-Backed PR Jargon To English of Magic Leap CEO Rony Abovitz's Statement That He's 'Stepping Down'

United States

The FBI Accessed and Repaired 'Hundreds' of Hacked Microsoft Exchange Servers (csoonline.com) 86

America's top law enforcement agency "obtained a court order that allowed it to remove a backdoor program from hundreds of private Microsoft Exchange servers that were hacked through zero-day vulnerabilities earlier this year," reports CSO. (Thanks to detritus. (Slashdot reader #46,421) for sharing the news...) Earlier this week, the Department of Justice announced that the FBI was granted a search and seizure warrant by a Texas court that allows the agency to copy and remove web shells from hundreds of on-premise Microsoft Exchange servers owned by private organizations. A web shell is a type of program that hackers install on hacked web servers to grant them backdoor access and remote command execution capabilities on those servers through a web-based interface.

In this case, the warrant targeted web shells installed by a cyberespionage group dubbed Hafnium that is believed to have ties to the Chinese government. In early March, Microsoft reported that Hafnium has been exploiting previously unpatched vulnerabilities in Microsoft Exchange to compromise servers. At the same time, the company released patches for those vulnerabilities, as well as indicators of compromise and other detection tools, but this didn't prevent other groups of attackers from exploiting the vulnerabilities after they became public. In its warrant application, dated April 13, the FBI argues that despite the public awareness campaigns by Microsoft, CISA and the FBI itself, many servers remained infected with the web shell deployed by Hafnium. While the exact number has been redacted from the unsealed warrant, the DOJ said in a press release that it was "hundreds."

The FBI asked for, and received court approval, to access the malicious web shells through the passwords set by the original attackers and then use that access against the malware itself by executing a command that will delete the web shell, which is essentially an .aspx script deployed on the server. The FBI was also allowed to make a copy of the web shells first because they could constitute evidence.

The warrant states that it "does not authorize the seizure of any tangible property" or the copying or alteration of any content from the servers aside from the web shell themselves, which are identified in the warrant by their unique file paths. This means the FBI was not granted permission to patch the vulnerabilities to protect the servers from future exploitation or to remove any additional malware or tools that hackers might have already deployed...

The FBI sent an email message from an official email account, including a copy of the warrant, to the email addresses associated with the domain names of the infected servers.

An official statement from the Department of Justice is already using the past tense, announcing that U.S. authorities "have executed a court-authorized operation to copy and remove malicious web shells from hundreds of vulnerable computers in the United States. They were running on-premises versions of Microsoft Exchange Server software used to provide enterprise-level email service."
Communications

Striking Charter Workers Build ISP Where 'Profits Are Returned To Users' (arstechnica.com) 79

An anonymous reader quotes a report from Ars Technica: Charter Communications employees who have been on strike since 2017 are building an Internet service provider in New York City called "People's Choice." "People's Choice Communications is an employee-owned social enterprise launched by members of IBEW Local #3 to bridge the digital divide and help our neighbors get connected to the Internet during the COVID-19 pandemic," the ISP's website says. "We are the workers who built a large part of New York City's Internet infrastructure in the first place. We built out [Charter] Spectrum's cable system, until in 2017, the company pushed us out on strike by taking away our healthcare, retirement, and other benefits. It's now the longest strike in US history."

So far, People's Choice says it has completed rooftop antenna installations at two schools in the Bronx and installed "hardline connections to wireless access points connecting 121 units" at housing for survivors of domestic violence who have disabilities. A Gizmodo article said the system is equipped to offer minimum speeds of 25Mbps downstream and 3Mbps upstream, meeting a broadband standard that has been used by the Federal Communications Commission since 2015. "We have a big portion of most of the Bronx covered with our antenna," IBEW Local #3 steward Troy Walcott told Gizmodo. "Now we have to go building by building to let people know we're out there and start turning them on." "A few dozen Spectrum strikers have been actively involved in the installations, but Walcott expects that at least one hundred workers are waiting in the wings for the project to scale up," the Gizmodo article said.
"We work in affordable housing, supportive housing, co-op housing, NYCHA [NYC Housing Authority], homeless shelters, and regular old apartment complexes," the webpage notes. You can fill out this form if you're interested in bringing broadband to your building.

"After we build out a network in your building, it transfers to cooperative ownership, so profits are returned to users," the People's Choice website says. "We are able to provide high-speed service in most cases for $10-$20/month. No more cable company ripping you off, and as an owner, you have a vote in policies like data privacy."
Security

NSA Helps Out Microsoft With Critical Exchange Server Vulnerability Disclosures (theregister.com) 23

April showers bring hours of patches as Microsoft delivers its Patch Tuesday fun-fest consisting of over a hundred CVEs, including four Exchange Server vulnerabilities reported to the company by the US National Security Agency (NSA). The Register reports: Forty-four different products and services are affected, mainly having to do with Azure, Exchange Server, Office, Visual Studio Code, and Windows. Among the vulnerabilities, four have been publicly disclosed and a fifth is being actively exploited. Nineteen of the CVEs have been designated critical. "This month's release includes a number of critical vulnerabilities that we recommend you prioritize, including updates to protect against new vulnerabilities in on-premise Exchange Servers," Microsoft said in its blog post. "These new vulnerabilities were reported by a security partner through standard coordinated vulnerability disclosure and found internally by Microsoft. We have not seen the vulnerabilities used in attacks against our customers.

Clicking through Microsoft's coy links to CVE-2021-28480 (9.8 severity), CVE-2021-28481 (9.8 severity), CVE-2021-28482 (8.8 severity), and CVE-2021-28483 (9.0 severity), you'll find the unspecified security partner is the NSA. Exchange Server 2013 CU23, Exchange Server 2016 CU19 and CU20, and Exchange Server 2019 CU8 and CU9 are affected by this set of problems. "NSA urges applying critical Microsoft patches released today, as exploitation of these #vulnerabilities could allow persistent access and control of enterprise networks," the signals intelligence agency said via Twitter.

Security

NAME:WRECK Vulnerabilities Impact Millions of Smart and Industrial Devices (therecord.media) 21

Catalin Cimpanu, reporting at Record: Security researchers have found a new set of vulnerabilities that impact hundreds of millions of servers, smart devices, and industrial equipment. Called NAME:WRECK, the vulnerabilities have been discovered by enterprise IoT security firm Forescout as part of its internal research program named Project Memoria -- which the company describes as "an initiative that aims at providing the cybersecurity community with the largest study on the security of TCP/IP stacks." Although never visible to end-users, TCP/IP stacks are libraries that vendors add to their firmware to support internet connectivity and other networking functions for their devices. These libraries are very small but, in most cases, underpin the most basic functions of a device, and any vulnerability here exposes users to remote attacks. The NAME:WRECK research is the fifth set of vulnerabilities impacting TCP/IP libraries that have been disclosed over the past three years, and the third set disclosed part of Project Memoria.
Encryption

Customs and Border Protection Paid $700,000 To Encrypted App Wickr (vice.com) 16

An anonymous reader quotes a report from Motherboard: U.S. Customs and Border Protection (CBP), part of the Department of Homeland Security, recently paid encrypted messaging platform Wickr over $700,000, Motherboard has found. The news highlights the value of end-to-end encryption to law enforcement, while other federal law enforcement agencies routinely lambast the technology for what they say results in visibility on criminals' activities "going dark."

The contract is related to "Wickr licenses and support," dates from September 2020, and totals at $714,600, according to public procurement records. Wickr is likely most well known for its free consumer app, which lets users send encrypted messages to one another, as well as make encrypted video and audio calls. The app also offers an auto-burn feature, where messages are deleted from a users' device after a certain period of time, with the company claiming these messages "can never be uncovered," according to its website. Wickr also offers various paid products to private companies and government agencies. Wickr Pro and Wickr Enterprise are marketed towards businesses; Wickr RAM is geared specifically for the military. [...] It is not clear which specific Wickr product CBP paid for.
A CBP spokesperson told Motherboard in a statement that "The Federal Acquisition Regulations (FAR) and other laws prohibit the unauthorized use and disclosure of proprietary information from federal government contract actions. All publicly available information on this contract has been made available at the link you have provided. Any other information is considered proprietary to the awardee (WICKR) and shall not be divulged outside of the Government."
IBM

IBM Creates a COBOL Compiler For Linux On x86 (theregister.com) 188

IBM has announced a COBOL compiler for Linux on x86. "IBM COBOL for Linux on x86 1.1 brings IBM's COBOL compilation technologies and capabilities to the Linux on x86 environment," said IBM in an announcement, describing it as "the latest addition to the IBM COBOL compiler family, which includes Enterprise COBOL for z/OS and COBOL for AIX." The Register reports: COBOL -- the common business-oriented language -- has its roots in the 1950s and is synonymous with the mainframe age and difficulties paying down technical debt accrued since a bygone era of computing. So why is IBM -- which is today obsessed with hybrid clouds -- bothering to offer a COBOL compiler for Linux on x86? Because IBM thinks you may want your COBOL apps in a hybrid cloud, albeit the kind of hybrid IBM fancies, which can mean a mix of z/OS, AIX, mainframes, POWER systems and actual public clouds.
[...]
But the announcement also suggests IBM doesn't completely believe this COBOL on x86 Linux caper has a future as it concludes: "This solution also provides organizations with the flexibility to move workloads back to IBM Z should performance and throughput requirements increase, or to share business logic and data with CICS Transaction Server for z/OS." The new offering requires RHEL 7.8 or later, or Ubuntu Server 16.04 LTS, 18.04 LTS, or later.

Operating Systems

AlmaLinux Released As a Stable RHEL Clone For Those Who Liked CentOS (zdnet.com) 43

Long-time Slashdot reader xiando quotes the backstory from LinuxReviews.org: CentOS used to be the go-to alternative for those who wanted to use Red Hat Enterprise Linux (RHEL) without having to pay RedHat to use it. It was a almost 1:1 clone until RedHat took control of it and turned it into what is now a RHEL beta-version, not a stable RHEL release without the branding. Almalinux is one of several projects that have made their own RHEL forks in response. The first Almalinux version is now released.
ZDNet notes that CentOS co-founder Gregory Kurtzer has announced his own RHEL clone and CentOS replacement named Rocky Linux. But they offer this report on AlmaLinux: CloudLinux — which was founded in 2009 to provide a customized, high-performance, lightweight RHEL/CentOS server clone for multitenancy web and server hosting companies — came ready to deliver. The new free AlmaLinux is now stable and ready for production workloads. The company also announced the formation of a non-profit organization: AlmaLinux Open Source Foundation. This group will take over managing the AlmaLinux project going forward. CloudLinux has committed a $1 million annual endowment to support the project.

Jack Aboutboul, former Red Hat and Fedora engineer and architect, will be AlmaLinux's community manager. Altogether, Aboutboul brings over 20 years of experience in open-source communities as a participant, manager, and evangelist... "In an effort to fill the void soon to be left by the demise of CentOS as a stable release, AlmaLinux has been developed in close collaboration with the Linux community," said Aboutaboul in a statement. "These efforts resulted in a production-ready alternative to CentOS that is supported by community members...."

In talking with CentOS business users, who deployed CentOS on web and host servers, I found many of them to be very hopeful about AlmaLinux. One from a mid-Atlantic-based Linux hosting company said, "What we want is a stable Linux that our customers can rely on from year to year. Since CentOS Stream can't deliver that, we think — hope — that AlmaLinux can do it for us and our users instead...."

This first release of AlmaLinux is a one-to-one binary compatible fork of RHEL 8.3. Looking ahead, AlmaLinux will seek to keep step-in-step with future RHEL releases... The GitHub page has already been published and the completed source code has been published in the main download repository. The CloudLinux engineering team has also published FAQ on AlmaLinux Wiki.

"The sudden shift in direction for CentOS that was announced in December created a big void for millions of CentOS users," said Simon Phipps, open source advocate and a former president of the Open Source Initiative who is on the governing board of the AlmaLinux project. In a statement, Phipps said that "As a drop-in open-source replacement, AlmaLinux provides those users with continuity and new opportunity to be part of a vibrant community built around creating and supporting this new Linux distribution under non-profit governance.

"I give a lot of credit to CloudLinux for stepping in to offer CentOS users a lifeline to continue with AlmaLinux."
Businesses

WhatsApp for Work: Slack is Turning Into a Full-on Messaging App (protocol.com) 59

Forget email. The final frontier for Slack, as it tries to reimagine the way millions of people communicate at work, is the text message. From a report: Email is a useful tool but a blunt one. It mixes business communication with receipts and confirmation numbers, makes it easy to talk to anyone but also maybe makes it too easy to talk to anyone. But text messages? Not every professional relationship graduates to text-message levels of intimacy, but the ones that do are the ones that matter most. And you might have an assistant read and filter your email, but pretty much everybody checks their own texts. It's the highest, most elusive rung of the business communication ladder, and it's exactly what Slack wants to replace. Starting on Wednesday, any Slack user will be able to direct message any other Slack user. The new system is called Connect DMs, and works a bit like the messaging apps and buddy lists of old: Users send an invite to anyone via their work email address, and once the recipient accepts their new contact is added to their Slack sidebar. The conversations are tied to the users' organizations, but exist in a separate section of the Slack app itself.

Connect DMs turns Slack from an app for chatting with co-workers into an app for chatting with anyone. It puts Slack on par with both enterprise tools like Microsoft Teams and free consumer services like WhatsApp and Facebook Messenger. "When someone opens up their phone," said Ilan Frank, Slack's VP of product, "if they're connecting with their friends, they click on Facebook or WhatsApp. If they're connecting with someone they work with, regardless of where that person works, they should be clicking on Slack." That's a tricky thing to get right, both from a UI perspective and an IT one. But Slack is committed. This has been the plan since before Salesforce bought the company, and it feels even more urgent now. Slack needs this to work, in some ways, as Microsoft Teams and Zoom threaten to leave it behind. By expanding its purview, Slack gives users more reasons to try Slack, gives companies more reasons to adopt it, and makes Slack an even more central part of the modern workday.

Movies

How William Shatner Is Celebrating His 90th Birthday (comicbook.com) 72

When the Star Trek franchise was awarded a special Emmy in 2018, it was William "Captain Kirk" Shatner who'd co-delivered its acceptance speech, remembers ComicBook.com. "Thank you so much. 52 years. What a gift. We're grateful... Star Trek has endured because it represents an idea — one that's greater than the sum of our parts... we watch and we reach to see the best version of ourselves..."

And now three years later, they report that Shatner "will celebrate his 90th birthday back on the bridge of the USS Enterprise." Sort of... Shatner will partake in a two-day event at the Star Trek: The Original Series Set Tour site in Ticonderoga, New York. The exhibit is famed among fans for its replica of the bridge set where Shatner gave orders as Captain James T. Kirk in Star Trek: The Original Series.

The two-day event begins on July 23rd (a belated celebration coming a few months after his actual birthday in March), with the COVID-19 mask and social distancing rules still in effect... The limited $1500 all-inclusive packages will let fans participate in Shatner's 90th Birthday Dinner Celebration, take a set tour with Shatner, plus a Bridge Chat, a photo, and an autograph. Regular admission is $80 for a standard tour with a la carte photos and autographs available... The replica set is likely the closest fans will ever come to seeing Shatner return to a Starfleet bridge.

So what is William Shatner doing on Monday, the actual date of his 90th birthday? The New York Daily News reports: He's got a series airing on the History channel, he's heading overseas to shoot an episode of a television show, and is in the middle of promoting his latest feature film, a romantic comedy called "Senior Moment..."

The indie film features Shatner as Victor, a former test pilot who dates younger women and loves burning rubber behind the wheel of his beautiful 1955 Porsche.

The movie also stars Watchmen actress Jean Smart, along with Christopher Lloyd (who memorably played a Klingon in the 1984 movie Star Trek III: The Search for Spock.)

And meanwhile Priceline.com plans a special series of deals this week to honor Shatner's years as their spokesperson (as well as his singing in their earliest dotcom-era commercials, which revived Shatner's spoken-word singing career).

In Captain Kirk's final appearance in 1994's Star Trek: Generations, one of the last things he says is "It was fun." But it looks like in real life, William Shatner is living long and prospering.

Here's that great moment in Slashdot history when Shatner actually answered questions from Slashdot's readers. Have your own favorite William Shatner memory? Share it in the comments to help celebrate his 90th birthday!
Businesses

Wikipedia Is Finally Asking Big Tech To Pay Up (wired.com) 83

The Big Four all lean on the online encyclopedia at no cost. With the launch of Wikimedia Enterprise, the volunteer project will change that -- and possibly itself too. From a report: From the start, Google and Wikipedia have been in a kind of unspoken partnership: Wikipedia produces the information Google serves up in response to user queries, and Google builds up Wikipedia's reputation as a source of trustworthy information. Of course, there have been bumps, including Google's bold attempt to replace Wikipedia with its own version of user-generated articles, under the clumsy name "Knol," short for knowledge. Knol never did catch on, despite Google's offer to pay the principal author of an article a share of advertising money. But after that failure, Google embraced Wikipedia even tighter -- not only linking to its articles but reprinting key excerpts on its search result pages to quickly deliver Wikipedia's knowledge to those seeking answers. The two have grown in tandem over the past 20 years, each becoming its own household word. But whereas one mushroomed into a trillion-dollar company, the other has remained a midsize nonprofit, depending on the generosity of individual users, grant-giving foundations, and the Silicon Valley giants themselves to stay afloat. Now Wikipedia is seeking to rebalance its relationships with Google and other big tech firms like Amazon, Facebook, and Apple, whose platforms and virtual assistants lean on Wikipedia as a cost-free virtual crib sheet.

Today, the Wikimedia Foundation, which operates the Wikipedia project in more than 300 languages as well as other wiki-projects, is announcing the launch of a commercial product, Wikimedia Enterprise. The new service is designed for the sale and efficient delivery of Wikipedia's content directly to these online behemoths (and eventually, to smaller companies too). Conversations between the foundation's newly created subsidiary, Wikimedia LLC, and Big Tech companies are already underway, point-people on the project said in an interview, but the next couple of months will be about seeking the reaction of Wikipedia's thousands of volunteers. Agreements with the firms could be reached as soon as June.

Programming

After 20 Years, Have We Achieved the Vision of the Agile Manifesto? (zdnet.com) 205

"We are uncovering better ways of developing software by doing it and helping others do it," declared the Agile Manifesto, nearly 20 years ago. "Through this work we have come to value..."

* Individuals and interactions over processes and tools
* Working software over comprehensive documentation
* Customer collaboration over contract negotiation
* Responding to change over following a plan

Today a new ZDNet article asks how far the tech industry has come in achieving the vision of its 12 principles — and why Agile is often "still just a buzzword." The challenge arises "because many come to agile as a solution or prescription, rather than starting with the philosophy that the Agile Manifesto focused on," says Bob Ritchie, VP of Software at SAIC. "Many best practices such as automated test-driven development, automated builds, deployments, and rapid feedback loops are prevalent in the industry. However, they are frequently still unmoored from the business and mission objectives due to that failure to start with why."

Still, others feel we're still nowhere near achieving the vision of the original Agile Manifesto. "Absolutely not at a large scale across enterprises," , says Brian Dawson, DevOps evangelist with CloudBees. "We are closer and more aware, but we are turning a tanker and it is slow and incremental. In start-ups, we are seeing much more of this; that is promising because they are the enterprises of the future." Agile initiatives "all too often are rolled out from, and limited to, project planning or the project management office. To support agile and DevOps transformation, agile needs to be implemented with all stakeholders."

Some organizations turn to agile "as a panacea to increase margins by cutting cost with a better, shinier development process," Ritchie cautions. "Others go even further by weaponizing popular metrics associated with agile capacity planning such as velocity and misclassifying it as a performance metric for an individual or team. In these circumstances, the promises of the manifesto are almost certainly missed as opportunities to engage and collaborate give way to finger pointing, blame, and burnout." What's missing from many agile initiatives is "ways to manage what you do based on value and outcomes, rather than on measuring effort and tasks," says Morris. "We've seen the rise of formulaic 'enterprise agile' frameworks that try to help you to manage teams in a top-down way, in ways that are based on everything on the right of the values of the Agile Manifesto. The manifesto says we value 'responding to change over following a plan,' but these frameworks give you a formula for managing plans that don't really encourage you to respond to change once you get going."

Microsoft

Microsoft's Edge Browser Will Match Chrome's Upcoming Four-Week Release Cycle (theverge.com) 22

Microsoft is going to adjust its release cycles for Microsoft Edge to match the every-four-weeks release cadence for Chrome that Google announced last week. The Verge reports: "As contributors to the Chromium project, we look forward to the new 4-week major release cycle cadence that Google announced to help deliver that innovation to our customers even faster," Microsoft said in a blog post on Friday. The change will go into effect with Edge 94, which is targeted for a September release. Google has committed to making the switch with Chrome in Q3 with Chrome 94, but hasn't given a specific month like Microsoft has. Like Google, Microsoft is also offering enterprises the option of a longer release cycle enterprise customers. On that Extended Stable schedule, there will be a new release every eight weeks. However, a four-week cadence will be the default, Microsoft says. Brave, another Chromium-based browser, also said that it plans to match the new schedule.
Bitcoin

MicroStrategy Buys Another 205 Bitcoins, Now Owns 91,064 Bitcoins (marketwatch.com) 46

Business intelligence firm MicroStrategy disclosed on Friday that it just spent $10 million in cash to buy 205 bitcoins. From a report: The enterprise software and bitcoin holder said it paid an average price of $48,888 for each bitcoin, including fees. The company said as of March 5, it holds about 91,064 bitcoins, which were acquired at total spend of $2.20 billion at an average price of about $24,119 per bitcoin. MicroStrategy's stock has soared 96.9% over the past three months through Thursday, while bitcoin prices have rocketed 156.4% and the S&P 500 has gained 1.9%.

Slashdot Top Deals