Android

Android 13 Virtualization Hack Runs Windows (and Doom) In a VM On Android (arstechnica.com) 14

An anonymous reader quotes a report from Ars Technica: Here's a fun new feature of Android 13: working virtualization support. Google is building virtualization into Android for its own reasons, but Android developer kdrag0n has commandeered the feature to boot ARM Windows 11 and desktop Linux. The developer even got the Windows version of Doom running, all inside a VM on the Pixel 6. kdrag0n says that Android 13 has "full KVM functionality" at "near-native performance." You need root to enable the functionality, which doesn't support GPU acceleration. The functionality also doesn't support nested virtualization, so while you can now run Android on Windows and Windows on Android, making an infinitely nested OS turducken is out of the question.

This makes for a neat demo that's not at all what Google wants to do with Android's upcoming VM support. Esper's Mishaal Rahman has been meticulously tracking Android's virtualization progress for some time now, and the apparent plan is to someday (maybe in Android 13) use virtual machines as a security and privacy sandbox for various features. Imagine instead of processing sensitive data at the normal app permission level, the data could be processed in a separate OS, so any attackers would have to break through the app security model, then Android, then the hypervisor, then this other, private OS.

Facebook

Zuckerberg Coldly Explains To Facebook Staff They Are Now To Be Known As 'Metamates' (boingboing.net) 208

In an all-hands meeting at Meta "explaining the company's updated values," Mark Zuckerberg says employees are not supposed to "nice ourselves to death," adding that they are now to be known as "Metamates."

According to the Daily Beast, citing long-time executive Andrew Bosworth, "the term was coined by the cognitive scientist Douglas Hofstadter and is a play on the naval-inspired slogan used at Instagram: 'ship, shipmates, self.'"
The Courts

Dutch Foundation Seeks Consumer Damages Over Apple, Google App Payments (reuters.com) 12

Apple and Google face a potential class action lawsuit in the Netherlands over app store charges, after a foundation headed by Dutch entrepreneur Alexander Klopping began gathering claimants. Reuters reports: Klopping is a co-founder of Blendle, a digital platform that enables users to buy individual news articles, which he sold in 2020. He told Reuters his determination to pursue the tech giants grew out of his experience at Blendle. "The reason it's getting so much attention right now is that everyone feels in their gut that there's this imbalance of power when it comes to big tech companies." He said while developers have complained most about app store practices, costs are ultimately passed on to consumers.

Klopping's App Store Claims Foundation is being represented by law firm Hausfeld, with funding from Fortress Investment Group. Klopping's App Store Claims Foundation is being represented by law firm Hausfeld, with funding from Fortress Investment Group. Hausfeld lawyer Rob Okhuijsen said the next step will be submitting evidence to the Amsterdam District Court in April. If a judge agrees, the court would then begin weighing the merits of the complaint.

Security

Ukraine's Military and Banks Hit By Apparent DDoS Cyberattack Campaign (cnet.com) 45

Ukraine's Ministry of Defense website suffered from what appeared to be a distributed denial of service attack Tuesday, according to the government's Facebook account. CNET reports: The military's website remained unavailable as of 12 p.m. PT Tuesday, with the Ukrainian military's Facebook account saying work is currently underway to restore regular functioning to the online portal. The nation's largest commercial bank, PrivatBank, has also been subjected to a "massive DDoS attack" for the past few hours, according to the Ukraine Center for Strategic Communications. There's no threat to customer funds stored at the bank, it said, though the attack is preventing customers from accessing the Privat24 application and viewing their balances. Online banking with Oschadbank is also down, the Center for Strategic Communications said, as reported earlier by Vice. Nobody has yet to be blamed for the attack, but as CNET notes, "it comes after Russia is believed to have mounted multiple cyberattacks on Ukraine as part of efforts that security experts say are designed to destabilize the country's government and economy."

UPDATE (2/16/2022): America's Undersecretary of State said Wednesday that "While we're still investigating and doing forensics along with the Ukrainians, I think what's most important is that these cyberattacks were not very successful," reports CNN, which adds that the official "credited Ukrainian officials for responding quickly and helping the websites recover."
Chrome

Google Is Bringing Chrome OS To PCs and Macs (theverge.com) 84

Google has announced a new version of Chrome OS called Chrome OS Flex, which is designed to run on old PCs and Macs. The Verge reports: The operating system can be installed "within minutes," according to Google's blog post. Google told me that Chrome OS Flex will look and feel identical to Chrome OS on a Chromebook -- it's built from the same code base and follows the same "release cadence." It did caveat that some features may be dependent on the hardware of the PC you're using. In fact, it said this for every specific feature I asked about, including always-on Google Assistant and Android phone syncing. So, if you're going to try this, keep an eye out.

If you want to try out Chrome OS Flex yourself, you can learn more on the Chrome Enterprise website. Note that the OS is still in early access mode, so you may encounter bugs -- you can boot it directly from a USB drive if you'd rather poke around before installing it on your machine.

Transportation

DeLorean Is Being Revived (Again), This Time As Electric Vehicle (bloomberg.com) 82

An anonymous reader quotes a report from Bloomberg: The newest entrant in the fight for EV market share is going back to the future with an all-electric DeLorean. The infamous gull-winged car is being resurrected in Texas by a group of executives who most recently spent time at China-backed EV startup Karma Automotive. They're working with Stephen Wynne, who acquired the DeLorean branding rights in the 1990s and supplies parts for the 6,000 or so remaining vehicles. [...] The new company is called DeLorean Motors Reimagined LLC and its chief executive officer is Joost de Vries, Texas business records and LinkedIn postings show. The firm will set up a headquarters and an engineering outfit in San Antonio, with potential to bring 450 jobs, the city's development arm said in a statement.

It's not the first time the idea of a DeLorean redux has surfaced -- web searches turn up stories every few years about how Wynne has tried to revive the brand or produce low-volume models -- but using an electric powertrain is a new twist on the idea. The original car gained notoriety in the early 1980s both for its quality problems and for the legal woes of its creator, the late John DeLorean, before the "Back to the Future" film franchise turned it into a pop-culture icon.

Google

Google Docs's New Update Takes Aim at Microsoft Word - and Notion, Too (fastcompany.com) 30

Google is continuing to give its document editing suite a more modern makeover. The latest update to Google Docs makes pageless documents available to all users after the company announced the feature last May. It also adds new features such as AI-generated document summaries, inline Google Maps previews, and the ability to draft emails with other users before transferring them over to Gmail. Most of those features are launching today, while email drafting will roll out in the "coming weeks." From a report: The update may be seen as part of a broader effort to compete with startups such as Notion and Coda, which are reimagining document editing around free-flowing, dynamic pages. Those products have also caught the attention of Microsoft, which announced an entirely new document editing app called Loop last November. While Google isn't fundamentally reinventing Docs in response, it's leaning on its ecosystem of other apps and services to make documents feel more dynamic and less like the printed page.

For most Google Docs users, the most striking change will be the new pageless format, which extends whitespace to both edges of the screen and dispenses with the page markers used for printing purposes. It also allows for a fully-responsive design, in which documents reflow when users adjust the size of their browser window. (Pagination will still be the default, but users can switch to pageless formatting under File > Setup.) Other changes won't be as immediately noticeable, but speak to where Google Docs -- and the Workspace suite as a whole -- are headed. Document summaries created using AI technology, for instance, will appear in a sidebar view where users can accept them or modify their text. When users hover over links to another document that includes a summary, it'll appear inside a pop-up preview window. [...] Google's also adding a way to draft Gmail messages inside Docs, so users can collaborate on messaging before passing the contents off to Gmail proper. And a recently-added Meeting Notes feature lets users pull in contacts, action items, and other details from Google Calendar events.

Google

Shortwave, a Startup By Former Google Employees, Wants To Bring Back Google Inbox (techcrunch.com) 21

An anonymous reader shares a report: Google's Inbox experiment was a glorious thing while it lasted. Launched as an invitation-only service in 2014, it was the company's next-gen email client. Because it was so good, it's no surprise Google shut it down in 2019. Thankfully, though, a group of ex-Google/Firebase employees is now resurrecting the Inbox experience -- with a bit of the Slack user experience mixed in, too.

As Lee told me, the team took two important inspirations from Inbox. "One is the idea that you should work with your email in groups," he said, referring to Inbox's ability to bundle emails by topic. "As the volume of email grows in your inbox, it becomes impractical just to page through every single email. Even if you have all the keyboard shortcuts and your app is super optimized, just scanning through all that stuff takes a long time." While you want to know about automated emails like calendar notifications for example, chances are you've already accepted those invites in your calendar, for example, so marking all those as read or snooze them for later with a couple of clicks saves a lot of time. In addition, the team also built Shortwave with the idea that your inbox, whether you like it or not, is a to-do list.

Windows

Windows 11's First Big Update Arrives With Android Apps and Taskbar Changes (theverge.com) 43

Microsoft is releasing its first big update to Windows 11 today, and it includes a lot of new additions. From a report: A public preview of Android apps on Windows 11 will be available today in the US, alongside redesigned Notepad and Media Player apps. The first big Windows 11 update will also include a bunch of improvements to the taskbar. The public preview of Android apps on Windows 11 will allow users to install apps from Amazon's Appstore. The Verge points to workarounds to get Google Play Store running on Windows 11 unofficially. Back to more changes: The biggest changes in this Windows 11 update are related to the taskbar. The time and date will finally be available on multiple monitors in Windows 11, something that was missing at launch. The weather widget also returns to the taskbar in this update, and a new mute / unmute feature in the taskbar will be available for Microsoft Teams calls. You'll also be able to quickly screen share a specific app or window from the taskbar directly into a Microsoft Teams call. Microsoft has also redesigned the Media Player and Notepad apps for Windows 11. Notepad now includes multi-step undo, an improved search interface, and dark mode support. The new Media Player app is designed to replace Groove Music and Windows Media Player and includes support for both audio and video and a design that better matches Windows 11's UI improvements.
Privacy

New Yorkers in High Stop-and-Frisk Areas Subject To More Facial Recognition Tech (theguardian.com) 61

New Yorkers who live in areas where controversial stop-and-frisk searches happen most frequently are also more likely to be surveilled by facial recognition technology, according to research by Amnesty International and other researchers. From a report: Research also showed that in the Brooklyn, Bronx and Queens boroughs of the city there was a direct correlation between the proportion of non-white residents and the concentration of controversial facial recognition technology. "Our analysis shows that the NYPD's use of facial recognition technology helps to reinforce discriminatory policing against minority communities in New York City," said Matt Mahmoudi, artificial intelligence and human rights researcher at Amnesty International. The research is a part of the global anti-facial recognition technology campaign, Ban the Scan, investigating increasing use of surveillance initiatives in the New York police department (NYPD). Using thousands of digital volunteers through the Decode NYC Surveillance project, more than 25,500 CCTV cameras were mapped across New York City. Data scientists and researchers from Amnesty International compared the data on the camera placement with statistics on police stop-and-frisk. "We have long known that stop-and-frisk in New York is a racist policing tactic. We now know that the communities most targeted with stop-and-frisk are also at greater risk of discriminatory policing through invasive surveillance," said Mahmoudi.
Businesses

How SoftBank's Costly Bet on the 'Internet of Things' Backfired at Arm (arstechnica.com) 35

As Masayoshi Son tried to persuade investors of the wisdom of purchasing one of the most successful chip companies in the world in 2016, the SoftBank chief had one clear message: "For the era of the 'Internet of things,' I think the champion will be Arm." But the concept of connecting billions of everyday and industrial devices to the Internet has been much slower than anticipated to materialize. From a report: Son's drive to capture the chip design market for the Internet of things (IoT) was the first bet he made on Arm that has not paid off. The second was a $66 billion sale of the company to Nvidia that unraveled last week. Arm remains the dominant player in designing chips for smartphones, still the most ubiquitous form of computing but a source of much slower growth in recent years. Ahead of an initial public offering that could come as soon as this year, the company is racing to solidify its position in new markets that it has underexploited to date, while trying to drive up profits to appeal to a new set of investors. Rene Haas, Arm's incoming chief executive, told the Financial Times that its products were now "far more competitive" in data centers and cars than when SoftBank bought the Cambridge-based company.

"Making trade-offs about where to invest, where not to invest...âthose are the trade-offs that public companies and even private companies have to do every day," he said. "The company is in great shape." When Son spearheaded the $31 billion purchase of Arm, he saw it as a wager on the future of the entire technology industry, which was crystallizing at that time around the IoT concept. He proceeded to push the executive team firmly on the course to designing chips for this future of machine connectivity. Five-and-a-half years later, it has become increasingly clear that the IoT gamble was a costly misadventure. Moreover, it distracted Arm from attacking Intel's dominance in the much larger data center market. As Son's vision collided with reality, SoftBank quietly revised its market calculations. A presentation from 2018 forecast that by 2026, the IoT controller market would be worth $24 billion, and the server market $22 billion. But, a similar presentation from 2020 predicted that by 2029, the IoT chip market would reach only $16 billion, while the server market -- of which Arm had so far only captured a 5 percent share -- would reach $32 billion. The Japanese technology group also revised down its estimate of the value of the IoT market, from $7 billion in 2017 to $4 billion in 2019.

The Internet

Worldle Is Like Wordle, But For Geography (cnet.com) 44

Worldle, the latest spinoff of the viral online word game Wordle, gives players six chances to guess a country outlined in black. CNET reports: As with Wordle, which was recently purchased by The New York Times, Worldle flashes green, gray and yellow squares. The difference is, here the more green squares you see the closer you are geographically to the right nation. Worldle also shows the distance in kilometers your guess was to the actual location. (You can change that measurement to miles in the Settings section, or even hide the country image for more of a challenge.)
Security

Microsoft Defender Will Soon Block Windows Password Theft (bleepingcomputer.com) 33

Microsoft is enabling a Microsoft Defender 'Attack Surface Reduction' security rule by default to block hackers' attempts to steal Windows credentials from the LSASS process. BleepingComputer reports: When threat actors compromise a network, they attempt to spread laterally to other devices by stealing credentials or using exploits. One of the most common methods to steal Windows credentials is to gain admin privileges on a compromised device and then dump the memory of the Local Security Authority Server Service (LSASS) process running in Windows. This memory dump contains NTLM hashes of Windows credentials of users who had logged into the computer that can be brute-forced for clear-text passwords or used in Pass-the-Hash attacks to login into other devices. While Microsoft Defender block programs like Mimikatz, a LSASS memory dump can still be transferred to a remote computer to dump credentials without fear of being blocked.

To prevent threat actors from abusing LSASS memory dumps, Microsoft has introduced security features that prevent access to the LSASS process. One of these security features is Credential Guard, which isolates the LSASS process in a virtualized container that prevents other processes from accessing it. However, this feature can lead to conflicts with drivers or applications, causing some organizations not to enable it. As a way to mitigate Windows credential theft without causing the conflicts introduced by Credential Guard, Microsoft will soon be enabling a Microsoft Defender Attack Surface Reduction (ASR) rule by default. The rule, ' Block credential stealing from the Windows local security authority subsystem,' prevents processes from opening the LSASS process and dumping its memory, even if it has administrative privileges.

While enabling the ASR rule by default will significantly impact the stealing of Windows credentials, it is not a silver bullet by any means. This is because the full Attack Surface Reduction feature is only supported on Windows Enterprise licenses running Microsoft Defender as the primary antivirus. However, BleepingComputer's tests show that the LSASS ASR rule also works on Windows 10 and Windows 11 Pro clients. Unfortunately, once another antivirus solution is installed, ASR is immediately disabled on the device. Furthermore, security researchers have discovered built-in Microsoft Defender exclusion paths allowing threat actors to run their tools from those filenames/directories to bypass the ASR rules and continue to dump the LSASS process. Mimikatz developer Benjamin Delpy told BleepingComputer that Microsoft probably added these built-in exclusions for another rule, but as exclusions affect ALL rules, it bypasses the LSASS restriction.

AMD

AMD Closes $50 Billion Purchase of Xilinx (tomshardware.com) 19

AMD on Monday completed the acquisition of Xilinx, creating a company that can offer various types of compute devices, including CPUs, GPUs, and FPGAs. Tom's Hardware reports: AMD CEO Dr. Lisa Su told analyst Patrick Moorhead that the first processor combining Xilinx technologies will arrive in 2023, which is in contrast to the company's previous integration efforts. After AMD bought ATI Technologies in 2006, it took the company five years to build its first accelerated processing units (which included AMD's x86 cores and ATI's GPU). This time AMD inked a long-term development pact with Xilinx and was able to work collaboratively even before the regulators approved the transaction. It remains to be seen what exactly AMD plans to offer, but it is reasonable to expect the new processor to feature AMD's x86 cores and Xilinx's programmable engines.

The move will help AMD to continue expanding its presence in the datacenter sector and offer unique solutions that will combine IP ingredients designed by the two companies. Interestingly, the first fruits of the deal are expected to materialize next year. [...] The Xilinx business will become AMD's Adaptive and Embedded Computing Group (AECG), led by former Xilinx CEO Victor Peng. As a result, Xilinx will maintain its leadership for at least a while. Furthermore, AMD's embedded business will cease to be a part of the company's enterprise and semi-custom unit and will merge into AECG, which might be good news as executives from the enterprise division will now spend more time on EPYC CPUs.
"The acquisition of Xilinx brings together a highly complementary set of products, customers and markets combined with differentiated IP and world-class talent to create the industry's high-performance and adaptive computing leader," said Lisa Su, chief executive of AMD. "Xilinx offers industry-leading FPGAs, adaptive SoCs, AI inference engines and software expertise that enable AMD to offer the strongest portfolio of high-performance and adaptive computing solutions in the industry and capture a larger share of the approximately $135 billion market opportunity we see across cloud, edge, and intelligent devices."
Advertising

EV Start-up Polestar Takes Shots At Tesla, Musk and Volkswagen In Super Bowl Ad (cnbc.com) 55

omfglearntoplay shares a report from CNBC: Electric vehicle firm Polestar roasted Tesla CEO Elon Musk and Volkswagen in its Super Bowl ad, with references to "conquering Mars" and "Dieselgate." The electric vehicle startup's "No Compromises" advertisement, which lasted 30 seconds, featured close-up shots of the Polestar 2 with dramatic background music. The ad included phrases such as "no dirty secrets," "no empty promises," and "no greenwashing." Words following "No" during the ad range from general terms such as "epic voiceovers" and "dirty secrets" to "dieselgate" -- referring to a former diesel emissions scandal with Volkswagen -- and "conquering Mars" -- a critique on Tesla and its CEO Elon Musk, who has plans to land humans on Mars by 2026. The commercial ends at "No. 2" and then "Polestar 2," the company's all-electric performance car. Further reading: This Year's Super Bowl Broadcast May Seem 'Crypto-Happy'. But the NFL Isn't
Music

How Fake Song Lyrics Ended Up On Spotify (pitchfork.com) 26

DevNull127 writes: More bad news for Spotify from Conde Naste via their music site Pitchfork:

Last month, in the tone of a band reluctantly summoned from some deep seabed, My Bloody Valentine issued a prickly public service announcement: "Just noticed that Spotify has put fake lyrics up for our songs without our knowledge," the Irish shoegazers tweeted. "These lyrics are actually completely incorrect and insulting." Cocteau Twins' Simon Raymonde chimed in to report that they, too, had found gibberish transcriptions of their famously elliptical songs on streaming services.

The lyric snafu was not limited to Spotify. Over the past decade, a data platform called Musixmatch has assumed dominion over the world of lyrics, securing sub-licensing deals with the major publishing companies. The lyrics you see on Spotify, Tidal, and Amazon Music usually come through Musixmatch, via a data pipeline that links the platform's enormous transcriber community with a small core of paid quality-control monitors. (Apple Music has a dedicated lyrics team handling most of its transcriptions.)

The affair illustrates tech capitalism's discombobulation when faced with a key element in art, which is the inexplicable. I think the problem, though, is not Musixmatch and its protocol so much as the service's unilateral rollout, with quasi-official imprimatur, on platforms already under fire for flattening artistic identity and repackaging music as scaleable content. Having sub-licensed the rights, Musixmatch is perfectly entitled to crowd-source transcriptions and sell them on. But artists should know whose words are being put in their mouths—and that, should they wish, they have the right to opt out.

Security

Thousands of Npm Accounts Use Email Addresses With Expired Domains (therecord.media) 35

An academic research project found that thousands of JavaScript developers are using an email address with an expired domain for their npm accounts, leaving their projects exposed to easy hijacks. From a report: The study, performed last year by researchers from Microsoft and North Caroline State University, analyzed the metadata of 1,630,101 libraries uploaded on Node Package Manager (npm), the de-facto repository for JavaScript libraries and the largest package repository on the internet. Researchers said they found that 2,818 project maintainers were still using an email address for their accounts that had an expired domain, some of which they found on sale on sites like GoDaddy. The team argued that attackers could buy these domains, re-register the maintainer's address on their own email servers, and then reset the maintainer's account password and take over his npm packages.
IBM

Making 'Dinobabies' Extinct: IBM's Push for a Younger Work Force (nytimes.com) 73

In recent years, former IBM employees have accused the company of age discrimination in a variety of legal filings and press accounts, arguing that IBM sought to replace thousands of older workers with younger ones to keep pace with corporate rivals. From a report: Now it appears that top IBM executives were directly involved in discussions about the need to reduce the portion of older employees at the company, sometimes disparaging them with terms of art like "dinobabies." A trove of previously sealed documents made public by a Federal District Court on Friday show executives discussing plans to phase out older employees and bemoaning the company's relatively low percentage of millennials. The documents, which emerged from a lawsuit contending that IBM engaged in a yearslong effort to shift the age composition of its work force, appear to provide the first public piece of direct evidence about the role of the company's leadership in the effort.

"These filings reveal that top IBM executives were explicitly plotting with one another to oust older workers from IBM's work force in order to make room for millennial employees," said Shannon Liss-Riordan, a lawyer for the plaintiff in the case. Ms. Liss-Riordan represents hundreds of former IBM employees in similar claims. She is seeking class-action status for some of the claims, though courts have yet to certify the class. Adam Pratt, an IBM spokesman, defended the company's employment practices. "IBM never engaged in systemic age discrimination," he said. "Employees were separated because of shifts in business conditions and demand for certain skills, not because of their age." Mr. Pratt said that IBM hired more than 10,000 people over 50 in the United States from 2010 to 2020, and that the median age of IBM's U.S. work force was the same in each of those years: 48. The company would not disclose how many U.S. workers it had during that period.

Facebook

Texas Sues Meta Over Facebook's Facial-Recognition Practices (wsj.com) 17

The Texas attorney general filed a suit against Facebook parent Meta Platforms on Monday, charging that the social-media giant's longstanding and now discontinued use of facial-recognition technology violated that state's privacy protections for personal biometric data. From a report: The lawsuit, filed in state district court in Marshall by Texas Attorney General Ken Paxton, seeks civil penalties in the hundreds of billions of dollars, according to a person familiar with the matter. In a statement, Mr. Paxton said the company's capture of facial geometry in photographs that users uploaded from 2010 to late last year resulted in "tens of millions of violations" of Texas law.

"Facebook has been secretly harvesting Texans' most personal information -- photos and videos -- for its own corporate profit," Mr. Paxton said. "Texas law has prohibited such harvesting without informed consent for over 20 years. While ordinary Texans have been using Facebook to innocently share photos of loved ones with friends and family, we now know that Facebook has been brazenly ignoring Texas law for the last decade."

Opera

Opera Browser Now Allows Emoji-only Web Addresses (theverge.com) 61

Web browser company Opera said Monday it will enable emoji-only based web addresses "to bring a new level of creativity to the internet." From a report: The integration is part of a partnership with Yat, a company that sells URLs with strings of emoji in them. "It's been almost 30 years since the world wide web launched to the public, and there hasn't been much innovation in the weblink space: people still include .com in their URLs," Jorgen Arnesen, executive vice president of mobile at Opera, said in a press release.

Slashdot Top Deals