Microsoft today published technical details about a new security feature that will soon be part of Windows 10. From a report: Named Kernel Data Protection (KDP), Microsoft says this feature will block malware or malicious threat actors from modifying (corrupting) the operating system's memory. According to Microsoft, KDP works by giving developers access to programmatic APIs that will allow them to designate parts of the Windows kernel as read-only sections. "For example, we've seen attackers use signed but vulnerable drivers to attack policy data structures and install a malicious, unsigned driver," Microsoft's Base Kernel Team said today. "KDP mitigates such attacks by ensuring that policy data structures cannot be tampered with." Microsoft says this new technology was developed with security in mind but that it also has other applications, such as anti-cheat and digital rights management (DRM) software.

An anonymous reader quotes a report from Phys.Org: Tiny, 3-D printed cubes of plastic, with intricate fractal voids built into them, have proven to be effective at dissipating shockwaves, potentially leading to new types of lightweight armor and structural materials effective against explosions and impacts. "The goal of the work is to manipulate the wave interactions resulting from a shockwave," said Dana Dattelbaum, a scientist at Los Alamos National Laboratory and lead author on a paper to appear in the journal AIP Advances. "The guiding principles for how to do so have not been well defined, certainly less so compared to mechanical deformation of additively manufactured materials. We're defining those principles, due to advanced, mesoscale manufacturing and design."

The researchers tested their fractal structures by firing an impactor into them at approximately 670 miles per hour. The structured cubes dissipated the shocks five times better than solid cubes of the same material. Although effective, it's not clear that the fractal structure is the best shock-dissipating design. The researchers are investigating other void- or interface-based patterns in search of ideal structures to dissipate shocks. New optimization algorithms will guide their work to structures outside of those that consist of regular, repeating structures. Potential applications might include structural supports and protective layers for vehicles, helmets, or other human-wearable protection. The research will be published in the July 2020 issue of AIP Advances.

Some companies are selling government agencies access to data stolen from websites in the hope that it can generate investigative leads, with the data including passwords, email addresses, IP addresses, and more. Motherboard reports: Motherboard obtained webinar slides by a company called SpyCloud presented to prospective customers. In that webinar, the company claimed to "empower investigators from law enforcement agencies and enterprises around the world to more quickly and efficiently bring malicious actors to justice." The slides were shared by a source who was concerned about law enforcement agencies buying access to hacked data. SpyCloud confirmed the slides were authentic to Motherboard. "We're turning the criminals' data against them, or at least we're empowering law enforcement to do that," Dave Endler, co-founder and chief product officer of SpyCloud, told Motherboard in a phone call.

The sale highlights a somewhat novel use of breached data, and signals how data ordinarily associated with the commercial sector can be repurposed by law enforcement too. But it also raises questions about whether law enforcement agencies should be leveraging information originally stolen by hackers. By buying products from SpyCloud, law enforcement would also be obtaining access to hacked data on people who are not associated with any crimes -- the vast majority of people affected by data breaches are not criminals -- and would not need to follow the usual mechanisms of sending a legal request to a company to obtain user data.

schwit1 shares a report from Tom's Guide: Using its own analytical software, the [Fraunhofer Institute] tested the most recently available firmware for 117 home Wi-Fi models currently sold in Europe, including routers from ASUS, D-Link, Linksys, Netgear, TP-Link, Zyxel and the small German brand AVM. The models themselves were not physically tested. A full list of the tested models and firmware is on GitHub. The institute was not able to examine the firmware of 10 more models, mostly from Linksys. The report notes (PDF) that many firmware updates are issued without fixing known flaws.

So what can you do? You can make sure that the next router you buy automatically installs firmware updates. You can check to see whether your current router does so, or makes it fairly easy to install firmware updates manually. You should also make sure that the administrative password for your router has been changed from the factory default password. (Check the list of default passwords at https://www.routerpasswords.com.) You should also check its administrative interface to make sure that UPnP and remote access are disabled. And if your router was first released more than 5 years ago, consider buying a newer model unless it meets all of the above criteria. Alternatively, you could try to "flash" your older router to run more secure open-source router firmware such as OpenWrt, DD-WRT or Tomato. "The worst case regarding high severity CVEs [widely known flaws] is the Linksys WRT54GL powered by the oldest kernel found in our study," the report said, noting that this model uses the 2.4.20 kernel from 2002. "There are 579 high severity CVEs affecting this product."

"That particular model last had its firmware updated in January 2016, one of the oldest firmwares in the study," adds Tom's Guide. "The Linksys WRT54GL was first released in 2005 and is still sold today, even though it handles Wi-Fi protocols only up to 802.11g. However, the WRT54G series is possibly the best-selling family of Wi-Fi routers ever..."

An anonymous reader quotes a report from The Guardian: At midnight on Tuesday, the Great Firewall of China, the vast apparatus that limits the country's internet, appeared to descend on Hong Kong. Unveiling expanded police powers as part of a contentious new national security law, the Hong Kong government enabled police to censor online speech and force internet service providers to hand over user information and shut down platforms. Many residents, already anxious since the law took effect last week, rushed to erase their digital footprint of any signs of dissent or support for the last year of protests. Charles Mok, a pro-democracy lawmaker who represents the technology sector, tweeted: "We are already behind the de facto firewall."

"The law seems to be building up the Great Firewall locally in Hong Kong. Personal freedom on the internet will be eliminated," said Charles Low, the chairman of the Hong Kong chapter of the Internet Society. "If you say something wrong they can request the service provider to give your IP address or mobile number so they can grab you." Experts point out that China's Great Firewall -- which allows the government to inspect data as well as block IP addresses and domain names -- could not be immediately replicated in Hong Kong, home to several private internet service providers and internet exchanges. "It will take at least a few years to build up the wall," said Low, adding that what is more likely is a partial blackout, cutting off access to certain sites such as LIHKG or Telegram. "People are indeed kind of panicked and trying to install VPNs and have no idea what it can and cannot help," said Low, noting that volunteers have been holding workshops to teach residents how to use such tools and how to better protect themselves. "I have faith in Hong Kong people. They will not forget about the freedom we once had." "[T]he measures could go even further than in mainland China," adds The Guardian. "The law covers not only permanent residents and foreigners within Hong Kong, but anyone seen as violating the law, regardless of where they are in the world. The security law may also add to the Balkanisation of the internet, with countries having their own fenced-off versions, and major international tech companies will be under pressure not to contribute to that."

An anonymous reader quotes a report from ZDNet: Google has announced it is launching a new organization, Open Usage Commons (OUC), to host the trademarks for three of its most important new open-source projects. These are Angular, a web application framework for mobile and desktop; Gerrit, a web-based team code-collaboration tool; and Istio, a popular open mesh platform to connect, manage, and secure microservices. While it only covers three Google projects, for now, OUC is meant to give open-source projects a neutral, independent home for their project trademarks. The organization will also assist with conformance testing, establishing mark usage guidelines, and handling trademark usage issues. The organization will not provide services that are outside the realm of usage, such as technical mentorship, community management, project events, or project marketing. "Having an entity like this does make some sense for a certain number of use cases," says Andrew "Andy" Updegrove, open-source standards and patent expert and founding partner of top-technology law firm Gesmer Updegrove. "The most obvious one is an unincorporated OSS project. An amorphous group of individuals can't own a trademark efficiently, so there's no way to protect the project name unless they agree on a singular owner. There are many cases where an individual member has owned a project mark, and that has often led to downstream problems. So simply having a neutral owner is a community good without going any farther than that."

Updegrove also said noted trademarks have usually been achieved by a project "approaching a host, like The Apache Foundation or Linux Foundation and asking them to take over as host. But that usually requires taking the project under the umbrella, and subject to the rules, of that foundation."

Updegrove wonders if there's "more to the story than meets the eye." He notes there is one important difference by only handing over the trademarks: "A project that is primarily important to a single vendor and primarily staffed and controlled by developers employed by that employer can continue to exercise effective control while avoiding the market suspicion that might arise if the vendor owned the mark." He suspects Google is doing this "to up the credibility of some of its projects [to the open-source community] while not taking the more extreme step of turning the project over to a foundation in connection with which a new and more independent governance structure is put in place."

Google abandoned plans to offer a major new cloud service in China and other politically sensitive countries due in part to concerns over geopolitical tensions and the pandemic, Blloomberg reported Wednesday, citing two employees familiar with the matter, revealing the challenges for U.S. tech giants to secure business in those markets. From a report: In May, the search giant shut down the initiative, known as "Isolated Region" and which sought to address nations' desires to control data within their borders, the employees said. The action was considered a "massive strategy shift," according to one of the employees, who said Isolated Region had involved hundreds of employees scattered around the world. Alphabet's Google is pouring money into cloud computing, part of a broader effort to find new sources of growth beyond search advertising. Google Cloud generated $8.9 billion in revenue in 2019 -- a 53% increase over the previous year -- as it has pushed into sectors such as finance and government that require special security clearance and features that shield confidential data. Rivals Microsoft and Amazon.com already offer these capabilities via their cloud units.

Google's recent decision to nix the Isolated Region project was made partly because of global political divisions, which were exacerbated by the Covid-19 pandemic, according to the two employees, who requested anonymity because the project hasn't previously been made public. The initiative would have allowed Google to set up cloud services controlled by a third party, such as a locally owned company or a government agency. The result would be a business sequestered from Google's existing cloud computing services, which include data centers and computer networks. In January 2019, amid growing tensions between the U.S. and China, Google decided to pause its plans for Isolated Region in China and instead began to prioritize potential customers in Europe, the Middle East and Africa, according to the two employees.

Robinhood users buy and sell the riskiest financial products and do so more frequently than customers at other retail brokerage firms, but their inexperience can lead to staggering losses. From a report: Richard Dobatse, a Navy medic in San Diego, dabbled infrequently in stock trading. But his behavior changed in 2017 when he signed up for Robinhood, a trading app that made buying and selling stocks simple and seemingly free. Mr. Dobatse, now 32, said he had been charmed by Robinhood's one-click trading, easy access to complex investment products, and features like falling confetti and emoji-filled phone notifications that made it feel like a game. After funding his account with $15,000 in credit card advances, he began spending more time on the app. As he repeatedly lost money, Mr. Dobatse took out two $30,000 home equity loans so he could buy and sell more speculative stocks and options, hoping to pay off his debts. His account value shot above $1 million this year -- but almost all of that recently disappeared. This week, his balance was $6,956.

"When he is doing his trading, he won't want to eat," said his wife, Tashika Dobatse, with whom he has three children. "He would have nightmares." Millions of young Americans have begun investing in recent years through Robinhood, which was founded in 2013 with a sales pitch of no trading fees or account minimums. The ease of trading has turned it into a cultural phenomenon and a Silicon Valley darling, with the start-up climbing to an $8.3 billion valuation. It has been one of the tech industry's biggest growth stories in the recent market turmoil. But at least part of Robinhood's success appears to have been built on a Silicon Valley playbook of behavioral nudges and push notifications, which has drawn inexperienced investors into the riskiest trading, according to an analysis of industry data and legal filings, as well as interviews with nine current and former Robinhood employees and more than a dozen customers. And the more that customers engaged in such behavior, the better it was for the company, the data shows. More than at any other retail brokerage firm, Robinhood's users trade the riskiest products and at the fastest pace, according to an analysis of new filings from nine brokerage firms by the research firm Alphacution for The New York Times.

Over the past two years, thousands of tech company employees have taken a stand: they do not want their labor and technical expertise to be used for projects with the military or law enforcement agencies. Knowledge of such contracts, however, hasn't been easy for tech workers to come by. From a report: On Wednesday, newly published research from the technology accountability nonprofit Tech Inquiry revealed that the Department of Defense and federal law enforcement agencies including Immigration and Customs Enforcement, the FBI, the Drug Enforcement Agency and the Federal Bureau of Prisons, have secured thousands of deals with Google, Amazon, Microsoft, Dell, IBM, Hewlett Packard and even Facebook that have not been previously reported. The report offers a new window into the relationship between tech companies and the U.S. government, as well as an important detail about why such contracts are often difficult to find.

Tech Inquiry's research was led by Jack Poulson, a former Google research scientist who quit the company in 2018 after months of internal campaigning to get clarity about plans to deploy a censored version of its search engine in China called Project Dragonfly. Poulson has publicly opposed collaborations between American technology companies and the U.S. and foreign governments that aid in efforts to track immigrants, dissenters, and bolster military activity. Poulson analyzed more than 30 million government contracts signed or modified in the past five years. The Department of Defense and federal law enforcement agencies accounted for the largest share of those contracts, with tech companies accounting for a fraction of the total number of contracts.

Facebook has announced that the limp "Oversight Board" intended to help make difficult content and policy decisions will not launch until "late fall," which is to say, almost certainly after the election. You know, the election everyone is worried Facebook's inability to police itself will serious affect. From a report: On Twitter, the board explained that as much as it would like to "officially begin our task of providing independent oversight of Facebook's content decisions," it regrets that it will be unable to do so for some time. "Our focus is on building a strong institution that will deliver concrete results over the long term." That sounds well enough, but for many, the entire point of creating the oversight board -- which has been in the offing since late 2018 -- was to equip Facebook for the coming presidential election, which promises to be something of a hot one.

An anonymous reader writes: Mozilla has temporarily suspended the Firefox Send file-sharing service as the organization investigates reports of abuse from malware operators and while it adds a "Report abuse" button. The browser maker took down the service today after ZDNet reached out to inquire about Firefox Send's increasing prevalence in current malware operations. Since last year, several malware operations have hosted payloads on the service. This includes ransomware gangs like REvil/Sodinokibi, financial crime crews like FIN7, the Zloader and Ursnif banking trojans operations, and government surveillance groups targeting human rights defenders. Reasons include the fact that Firefox Send doesn't have an Report Abuse mechanism, all file uploads are encrypted (useful to dodge malware scanners), and the Firefox URL is whitelisted in most orgs (useful for bypassing email filters).

An anonymous reader writes: Google is partnering with the Ubuntu Desktop team at Canonical to bring Linux support to its open source UI framework Flutter. Today's Linux alpha announcement also means Flutter developers can now deploy their apps to the Snap Store. Flutter group product manager Tim Sneath argues this is a big milestone because UI frameworks rarely become versatile and powerful enough for an operating system to depend on. He pointed to Windows being written in C++ rather than .NET, even for applets like the Calculator. Sneath also believes this shows Canonical is willing to invest in a first-class way to build apps for Linux, making Flutter on Linux an official part of Ubuntu. Additionally, enterprises can feel confident about picking Flutter -- it's more evidence of its longevity and technical excellence, Sneath said.

Intel unveiled Thunderbolt 4 on Wednesday, the next iteration of the I/O specification that provides a high-speed peripheral bus to docks, displays, external storage and eGPUs for PCs. Rather than increase the available bandwidth, however, Thunderbolt 4 provides more clarity and helps create new categories of products. From a report: Thunderbolt 4 will debut later this year as part of Intel's "Tiger Lake" CPU platform, as Intel originally announced during CES in January. We now know it will support 40Gbps throughput, but with tighter minimum specs. Thunderbolt 4 will guarantee that a pair of 4K displays will work with a Thunderbolt dock, and require Thunderbolt 4-equipped PCs to charge on at least one Thunderbolt port. Thunderbolt PCs will be able to connect to either "compact" or "full" docks with up to four Thunderbolt ports. Longer Thunderbolt cables will be possible, too. One thing that doesn't seem to be changing is Thunderbolt's exclusivity. Intel developed Thunderbolt, and perhaps not coincidentally, OEM systems based on rival AMD's CPUs have never had this technology. While AMD has officially dismissed the need for Thunderbolt, with generation 4 Intel appears to have made it even harder for AMD to get it, even if it wanted to. Intel's still pitching Thunderbolt as a single standard to rule them all, but the reality up to now has been complicated. You still have to squint hard at that USB-C-shaped port to determine which of the multitude of USB specifications it meets, including whether it's a USB4 connection that happens to support Thunderbolt. To muddy things further, Thunderbolt also encompasses PCIe, DisplayPort, and USB Power Delivery standards.

Zoom is teaming up with four video conferencing hardware makers to launch Zoom Hardware as a Service, designed to make Zoom Rooms and Zoom Phone more available to enterprises. ZDNet reports: The hardware providers in the package are DTEN, Neat, Poly, and Yealink. The hardware and Zoom bundles give tech buyers a monthly fixed price that varies by system and support by Zoom. Neat and DTEN have already designed hardware systems revolving around Zoom, which has become a household name with growth to match following the remote work shift during the COVID-19 pandemic. Zoom's Hardware as a Service (HaaS) pricing varies depending on hardware. For instance, Zoom Phone hardware runs from $5.99 per device for the Poly VVX 250 to $50 a month for the Yealink CP960. Zoom Hardware as a Service doesn't include software license costs.

The Zoom Rooms Hardware as a Service plans are pricier than Zoom Phone options. Pricing for Zoom Rooms hardware range from the Neat.bar with Neat.Pad controller at $110 a month per device to Poly systems that range from $100 a month to $150 a month. Software licensing costs aren't included. Zoom HaaS like other as-a-service efforts provides low upfront costs and predictable budgeting as well as the ability to scale up or down and get managed support.

An anonymous reader quotes a report from Ars Technica: Google Fiber's wireline broadband is expanding to a new city for the first time in several years as part of a public-private partnership to build an open-access network that any ISP can use to offer service. The new network will be in West Des Moines, Iowa. Google Fiber "paused" plans to expand to new cities in October 2016 amid lawsuits filed by incumbent ISPs and construction problems that eventually led to the Alphabet-owned ISP's complete exit from Louisville. But in West Des Moines, Google Fiber will rely on the city to build a network of fiber conduits. "Municipalities like West Des Moines excel at building and maintaining infrastructure. At digging and laying pipes under the roads, restoring and preserving the sidewalks and green spaces, reducing traffic congestion, and lowering construction disruption," Google Fiber said in an announcement yesterday.

The West Des Moines government's announcement said that "once the City installs conduit in the public right of way, broadband providers will pay a license fee to install their fiber in the City's conduit. Google Fiber will be the first tenant in the network." A conduit-license agreement "calls for Google Fiber to cover a portion of the construction cost to build conduit... through their monthly lease payments." "On a monthly basis, Google Fiber would pay the city $2.25 for each household that connects to the network," according to the Des Moines Register. Google Fiber would pay the city a minimum of $4.5 million over 20 years. Construction is expected to begin this fall and be completed in about two and a half years, the city said. While Google Fiber is slated to be the first tenant offering fiber service over the West Des Moines network, the city is hoping to spur broadband competition by letting other ISPs install their own fiber in the conduits. Current ISPs in West Des Moines include CenturyLink and Mediacom. "Every home and business in West Des Moines is eligible for a free connection point from their property to the municipal fiber conduit," the city said. "The City will be installing these connections and will contact every business and resident in the near future to ensure everyone has the opportunity to participate." The city also said it aims to make high-speed broadband available to "all residents, regardless of their means."

"West Des Moines plans to invest nearly $40 million" in the project, the Des Moines Register wrote, adding that city officials intend to "solicit bids for laying the underground conduit that would house the fiber-optic cables."

schwit1 shares a report from CNN: Some popular home security cameras could allow would-be burglars to work out when you've left the building, according to a study published Monday. Researchers found they could tell if someone was in, and even what they were doing in the home, just by looking at data uploaded by the camera and without monitoring the video footage itself. The international study was carried out by researchers from Queen Mary University of London (QMUL) and the Chinese Academy of Science, using data provided by a large Chinese manufacturer of Internet Protocol (IP) security cameras. Cameras like these allow users to monitor their homes remotely via a video feed on the internet, but the researchers say the traffic generated by the devices can reveal privacy-compromising information.

Study author Gareth Tyson from QMUL told CNN that data uploads of the unencrypted data increase when a camera is recording something moving, so an attacker could tell if the camera was uploading footage of someone in motion, and even different types of motion like running or sitting. The risk is that "someone who is specifically targeting an individual household rocks up outside with a device to try and start passively monitoring traffic," he said. Tyson told CNN that an attacker would require a decent level of technical knowledge to monitor the data themselves, but there is a chance that someone could develop a program that does so and sell it online. Noting that he hasn't seen any direct evidence of this kind of attack taking place, he said one potential use would be if someone wanted to burgle your house. Tyson says companies could randomly inject data into their systems to make it harder for attackers to spot a pattern.

The study has been published at the IEEE International Conference on Computer Communications.

MojoKid writes: Last month, AMD made its Ryzen 3000XT series processors official, after weeks of leaks and speculation. Ryzen 3000XT series processors are tweaked versions of the original 3000X series products, but with higher clocks and the ability to maintain turbo frequencies longer. Launching today, AMD's new Ryzen 5 3600XT is a 6 core/12-thread processor, with a 3.8GHz base clock and a 4.5GHz max boost clock. That's a 100MHz increase over the 3600X. The Ryzen 7 3800XT is an 8-core/16-thread processor with a base clock of 3.9GHz and a max boost clock of 4.7GHz, which is 200MHz higher than the original 3800X. Finally, the Ryzen 9 3900XT is a 12-core/24-thread processor with a base clock of 3.8GHz with a max boost clock of 4.7GHz, which is a 100MHz increase over the original Ryzen 9 3900X.

AMD also notes these new processors can maintain boost frequencies for somewhat longer durations as well, which should offer an additional performance uplift, based on refinements made to the chip's 7nm manufacturing process. In testing, the new CPUs offer small performance gains over their "non-XT" namesakes, with 100MHz - 200MHz increases in boost clocks resulting in roughly 2% - 5% increases to both their single and multi-threaded performance in most workloads. Those frequency increases come at the expense of slightly higher peak power consumption as well of course. The best news may be that AMD's original Ryzen 5 3600X, Ryzen 7 3800X, and the Ryzen 9 3900X will remain in the line-up for the time being, but their prices will be slashed a bit, with the new Ryzen 5 3600XT, Ryzen 7 3800XT, and Ryzen 9 3900XT arriving with the same $249, $399, and $499 introductory prices as the originals.

An anonymous reader quotes a report from Motherboard: Authorities in Germany have seized a server used by the organization that published a trove of US police internal documents commonly known as BlueLeaks, according to the organization's founder. On Tuesday, Emma Best, the founder of Distributed Denial of Secrets or DDoSecrets, a WikiLeaks-like website that has published the police data, said that prosecutors in the German town of Zwickau seized the organization's "primary public download server."

"We are working to obtain additional information, but presume it is [regarding] #BlueLeaks," Best added on Twitter. "The server was used ONLY to distribute data to the public. It had no contact with sources and was involved in nothing more than enlightening the public through journalistic publishing." Best shared a screenshot of the email they received from DDoSecrets' hosting provider informing of the server seizure. "Your server has been confiscated," the email reads. "Until now we were not allowed to inform you accordingly." The email then notes that the seizing authority was the Department of Public Prosecution Zwickau. "We're gonna get set up with a new data host and move up our plans to evolve some of our infrastructure," Best told Motherboard. "It's the perfect time for it to fall apart because we were rebuilding it anyway. It's a huge headache and a violates the ideal of press freedom, but we'll survive, even if we have to close Hunter for a time. The equivalent system they mention is blank and unconfigured, and obviously we can't rely on it."

Marko Saric, a digital marketing consultant and blogger, conducted his own experiment to find out how many visitors would engage with a GDPR banner and grant GDPR consent to their information being collected and shared. For his study, Saric used Metomic for his GDPR consent banner and tested it on two different websites during June. "Site 1 was a site about a tech topic with the majority of visitors coming from Google organic search (60%) and browsing from laptop or desktop devices (60%)," writes Saric. "Site 2 was on a lifestyle topic with the majority of visitors coming from organic social media (70%) and browsing with mobile devices (70%)." Here's what he found: I assumed that having a GDPR compliant consent banner carries a very high risk of visitor refusal as most people don't care enough to engage with your banner and those who do mostly do it to get rid of it. And if you give them an easy way to ignore your banner or to say no to be tracked, most of them will simply do that. With almost 19,000 unique visitors between those two websites, 48% engaged with the banner. 19% of those who engaged with the banner gave their consent which means that 9% of total visitors gave their consent to be tracked.

A higher percentage of visitors engaged with the banner on a mobile device (59% versus 40%) with a lower percentage of them giving consent (16% versus 22%). An obvious explanation is that the banner is more prominent and takes a larger percentage of a mobile screen than a desktop screen so the visitor interacts with the banner to remove it from their mobile screen.

Nokia has become the first major telecom equipment maker to commit to adding open interfaces in its products that will allow mobile operators to build networks that are not tied to a vendor. Reuters reports: The new technology, dubbed Open Radio Access Network (Open RAN), aims to reduce reliance on any one vendor by making every part of a telecom network interoperable and allowing operators to choose different suppliers for different components. Currently, Nokia along with Ericsson and Huawei supplies most of the equipment for building telecom networks and mobile operators can only pick one for each part of their network.

As part of the implementation plan, Nokia plans to deploy Open RAN interfaces in its baseband and radio units, a spokesman said. An initial set of Open RAN functionalities will become available this year, while the full suite of interfaces is expected to be available in 2021, the company said. Nokia, unlike other vendors, had been promising to participate in the development of open RAN technology and have joined several industry alliances.