dryriver writes: In talking to people who are doing software development or other tech work, many told me that they found their tech education at university lacking in various ways. Some were taught outdated software, programming languages, methods, techniques or approaches. Others had problems with academia hostile to new ideas or creative problem solving. Some didn't get enough recognition for the coursework they did at university. Others couldn't get into top-tier universities when they were finishing high school aged 17 or 18 and got a second-rate tech education at a lower-quality academic institution as a result. So to the question: How was the quality of your tech education at university? Was the curriculum up to date? Were you taught the right things? Was academia open to new ideas and new ways of doing things? Did your education prepare you well for real life tech work in a non-academic environment?

Two FTC commissioners have blamed their own agency for the proliferation of fake reviews on the web. From a report: Commissioners Rohit Chopra and Rebecca Slaughter of the Federal Trade Commission say it's about to get a lot worse, and they know who to blame: their own agency. The FTC this month brought its first case against a company for enlisting its employees in a coordinated fake-review campaign to boost sales. Chopra and Slaughter say the decision reached by their fellow commissioners could usher in even more review fraud. The settlement did not require the company to admit fault, notify customers of the fraud, or turn over any ill-gotten gains. "Dishonest firms may come to conclude that posting fake reviews is a viable strategy, given the proposed outcome here," Chopra said in a statement dissenting from the FTC's decision, joined by Slaughter. "Honest firms, who are the biggest victims of this fraud, may be wondering if they are losing out by following the law. Consumers may come to lack confidence that reviews are truthful."

The case in question concerns skin-care brand Sunday Riley, which on Monday agreed to settle FTC charges that it posted faked reviews for its products on Sephora's website for nearly two years. The FTC has the power to punish companies for engaging in online review fraud through fines, forfeitures, or notices, among other things. But the Sunday Riley decision amounted to little more than finger wagging, Chopra and Slaughter say. The dissenting commissioners say the agency's investigation uncovered more than enough evidence to prove that Sunday Riley had engaged in online review fraud -- including an Instagram comment posted by a brand representative that confirmed the company had posted fake reviews. But the FTC voted 3â"2 to allow Sunday Riley to settle the charges by agreeing not to post future fake reviews, without admitting fault.

Apple this year differentiated the iPad by creating a superset of iOS that only works on the company's tablet, the cleanly named iPadOS. In theory, iPadOS fixes the many shortcomings of previous iOS versions that tried to serve two masters, the iPad and the iPhone. But some fundamental issues remain. From a column: Apple's iPadOS page is adamant that a world of possibilities is now "ours." The "Features" section provides a long, long list of new iPad talents. Without getting into the embarrassing details about the klutziness that makes me a good product tester because I tend to do things that knowledgeable users already know how to do, I'm confused and frustrated by all of these "possibilities." For relatively simple tasks such as using multiple apps side by side or opening more than one window for an app such as Pages, the iPad support site is cryptic and, in some cases, just plain wrong. As just one example, the on-line guidance advises: "go to Settings > General > Multitasking & Dock..." Trouble is, the General section of Settings on my iPad Pro doesn't have a Multitasking & Dock section. A little bit of foraging gets me to the Home Screen & Dock section where, yes, the Multitasking adjustments are available.

On the positive side, one now has a real Safari browser, equivalent in most regards to the "desktop" version, and the ability to open two independent windows side by side. Because I feel self-conscious about my mental and motor skills, I compared notes with a learned friend, a persistent fellow who forced himself to learn touch typing by erasing the letters on his keyboard. He, too, finds iPadOS discoverability to be severely lacking. There are lot of new and possibly helpful features but, unlike the 1984 Mac, not enough in the way of the hints that menu bars and pull-down menus provide. It all feels unfinished, a long, long list of potentially winning features that are out of the reach of this mere mortal and that I assume will remain undiscovered by many others. Kvetching aside, we know that Apple plays the long game. Today's stylus equipped and mouse-capable iPad shows great promise. (I connected my trusted Microsoft Mouse and its two buttons and wheel -- no problem.) It clearly has the potential to become a multifaceted device capable of a wide range of interactions. From the simplest one-finger control enjoyed by children and adults alike to the windows and pointing device interactions "power users" hope for, the iPad shows great potential -- and the need for more work to make the new features more discoverable.

Microsoft said in a blog post today that it has tracked "significant" cyberattacks coming from a group it calls "Strontium" or "Fancy Bear," targeting anti-doping authorities and global sporting organizations. Reuters reports: The group, also called APT28, has been linked to the Russian government, Microsoft said in a blog post. At least 16 national and international sporting and anti-doping organizations across three continents were targeted in the attacks which began on Sept. 16, according to the company. The company said some of these attacks had been successful, but the majority had not. Microsoft has notified all customers targeted in these attacks.

Strontium, one of the world's oldest cyber espionage groups, has also been called Sofancy and Pawn Storm by a range of security firms and government officials. Security firm CrowdStrike has said the group may be associated with the Russian military intelligence agency GRU. Microsoft said Strontium reportedly released medical records and emails taken from sporting organizations and anti-doping officials in 2016 and 2018, resulting in an indictment in a federal court in the United States in 2018. Strontium's methods include spear-phishing, password spray, exploiting internet-connected devices and the use of both open-source and custom malware, it added.

An anonymous reader quotes a report from The Wall Street Journal: The Federal Communications Commission is moving to place another restraint on the U.S. business of Huawei and ZTE by banning U.S. companies receiving federal subsidies from purchasing the Chinese firms' equipment (Warning: source may be paywalled; alternative source). FCC Chairman Ajit Pai set the proposal for vote at the agency's meeting on Nov. 19. It would designate Huawei and ZTE as national security threat and tell U.S. firms not to buy their equipment using money from an $8.5 billion federal fund designed to fund telecommunications service in rural areas. The FCC would also propose further study, and potentially federal funding, for removing and replacing equipment from the companies that has already been installed. Mr. Pai in a Wall Street Journal op-ed Monday called this existing equipment an "unacceptable risk."

Apple has released iOS 13.2 today, bringing over 60 new emoji, new Siri privacy settings, and Apple's new Deep Fusion camera technology. 9to5Mac reports: There are over 60 new emoji and emoji variations in iOS 13.2. Apple first previewed these emoji over the summer, and they are now available for everyone. In total, the new 2019 emoji set includes 59 new characters that make up for 75 total variations when gender options are taken into account, and 230 options when skin tone options are included. iOS 13.2 also includes the Announce Messages with Siri feature that was originally meant for iOS 13. This feature allows Siri to read messages back to you when connected to AirPods or other headphones with Apple's H1 chip.

Perhaps most notably, especially for iPhone 11 users, iOS 13.2 includes Apple's new Deep Fusion camera technology. Deep Fusion is Apple's new image processing technology that works in the background to improve image quality for iPhone 11 and iPhone 11 Pro users. iOS 13.2 also includes new Siri privacy settings that allow you to opt in or opt out of sharing your Siri interactions with Apple. You'll see a new splash screen the first time you boot into iOS 13.2 asking your preference. Last but not least, iOS 13.2 also includes support for the just-announced AirPods Pro. This includes settings for Transparency and Active Noise Cancellation modes.

Adobe has received a U.S. license allowing it to restore its services to users in Venezuela, which it was due to shut down to comply with a U.S. executive order that prohibits trade with the country. Reuters reports: Venezuelans said they were resorting to piracy after San Jose, California-based Adobe said it planned to halt access to its products to comply with sanctions. "After discussions with the U.S. government, we've been granted a license to provide all of our Digital Media products and services in Venezuela," wrote Chris Hall, Vice President and General Manager for Customer Experience, in a blog post. "Users can continue to access the Creative Cloud and Document Cloud portfolio, and all of their content, as they did before." Adobe had said its software would stop working in Venezuela on Oct 28.

Google executives misled their own employees last week when they said a former top Department of Homeland Security official who had recently joined the company was "not involved in the family separation policy," government emails obtained under the Freedom of Information Act reveal. From a report: In fact, Miles Taylor, who served as deputy chief of staff and then chief of staff to former Homeland Security secretary Kirstjen Nielsen, was involved in high-level discussions about immigration enforcement, helping to shape the department's narratives and talking points as one of Nielsen's trusted lieutenants. As Nielsen's deputy chief of staff, Taylor was included on some of the DHS secretary's emails and privy to her events schedule, often prepping his boss with reports and talking points ahead of public appearances between April and June 2018, when the family separation policy was in effect.

In one email obtained by BuzzFeed News, Taylor assisted Nielsen in preparing what he described as the "Protecting Children Narrative" -- the department's spin on a policy that horrified Americans when images of abandoned, caged migrant children in squalid camps emerged. Other emails from Nielsen's events planner show that he had been scheduled to participate in at least two weekly calls to "discuss Border Security and Immigration Enforcement" in June 2018. Two former DHS officials dismissed Google's claim that Taylor -- who last month joined the company as a government affairs and public policy manager advising on national security issues -- could have kept his hands clean from the policy.

An anonymous reader quotes a report from Ars Technica: Lawmakers in Australia (like their counterparts in the United Kingdom) are looking for an effective way to limit kids' access to online pornography. Australia's Department of Home Affairs has a possible solution: face-recognition technology. "Home Affairs is developing a Face Verification Service which matches a person's photo against images used on one of their evidence of identity documents to help verify their identity," the government agency wrote in a recent regulatory filing. "This could assist in age verification, for example by preventing a minor from using their parent's driver license to circumvent age verification controls."

Australia's government face-matching system has been years in the making. In 2016, the government announced that (in the words of CNET) "the first phase of its new biometric Face Verification Service (FVS) is up and running, giving a number of government departments and the Australian Federal Police the ability to share and match digital photos of faces." Initially, the system was fairly limited. It only included photos of people who had applied to become Australian citizens. And use of the database was supposed to be limited to a handful of government agencies with a compelling need for it. But since then, the government has steadily expanded the system. Photos from other sources were added to the database. And Australia has been trying to develop a more sophisticated Face Identification Service that can identify unknown persons. "The Face Verification Service is not yet fully operational," the government acknowledges. "Whilst it is intended to be made available to private sector organizations in future, this will be subject to the passage of the Identity-matching Services Bill 2019 which is currently before Parliament."

When it comes to firewalls, most system administrators prefer to use a graphical user interface (GUI) rather than a command-line interface (CLI), a new academic study published over the summer has revealed. From a report: Despite the many preconceptions that system administrators are almost all ardent CLI users, firewall GUIs won by a pretty large margin in a survey compiling results from more than 300 respondents. Almost 60% of sysadmins said they "preferred" GUIs over CLIs, and 70% said they "used" GUIs on a daily basis. The survey showed that while CLIs might be popular in some circles, they are not the most ideal interface for managing a complex security software suite like a firewall. The survey, which included more than 15 questions that also sought to discover the reasoning behind each answer, revealed that "usability" was the main reason why system administrators tended to prefer and use firewalls more than CLIs.

With two months of 2019 still to go, Indian tech startups are already having their best year as a record amount of capital flows into the local ecosystem in a major rebound since the darkened funding environment of 2016. From a report: The unlisted tech startups in India have raised $11.3 billion this year, a substantial jump from last year's $10.5 billion fundraise, research firm Tracxn told TechCrunch. This year's fundraise, the largest sum for the local ecosystem in any year, further moves the nation's burgeoning startup space on a path of steady growth. Since 2016, when tech startups accumulated just $4.3 billion -- down from $7.9 billion the year before -- flow of capital has increased significantly in the ecosystem. In 2017, Indian startups raised $10.4 billion, according to Tracxn. Startups with consumer-facing offerings including financial services have attracted most of the venture capital this year -- about $8.2 billion, Tracxn said. Following that is retail startups that have bagged about $2.3 billion and those that offer enterprise services, with $1.5 billion. (There is some overlap of startups whose offerings fall under more than one category.)

The New York Times: The letter was aimed at Mark Zuckerberg, Facebook's chief executive, and his top lieutenants. It decried the social network's recent decision to let politicians post any claims they wanted -- even false ones -- in ads on the site. It asked Facebook's leaders to rethink the stance. Facebook's position on political advertising is "a threat to what FB stands for," said the letter, which was obtained by The New York Times. "We strongly object to this policy as it stands." The message was written by Facebook's own employees. For the past two weeks, the text has been publicly visible on Facebook Workplace, a software program that the Silicon Valley company uses to communicate internally. More than 250 employees have signed the letter, according to three people who have seen it and who declined to be identified for fear of retaliation.

While the number of signatures on the letter was a fraction of Facebook's 35,000-plus work force, it was one sign of the resistance that the company is now facing internally over how it treats political ads. Many employees have been discussing Mr. Zuckerberg's decision to let politicians post anything they want in Facebook ads because those ads can go viral and spread misinformation widely. The worker dissatisfaction has spilled out across winding, heated threads on Facebook Workplace, the people said. For weeks, Facebook has been under attack by presidential candidates, lawmakers and civil rights groups over its position on political ads. But the employee actions -- which are a rare moment of internal strife for the company -- show that even some of its own workers are not convinced the political ads policy is sound. The dissent is adding to Facebook's woes as it heads into the 2020 presidential election season.

Google owner Alphabet has made an offer to acquire U.S. wearable device maker Fitbit, as it eyes a slice of the crowded market for fitness trackers and smartwatches, Reuters reported Monday, citing familiar with the matter. From the report: While Google has joined other major technology companies such as Apple and Samsung in developing smart phones, it has yet to develop any wearable offerings. There is no certainty that the negotiations between Google and Fitbit will lead to any deal, the sources said, asking not to be identified because the matter is confidential.

An anonymous reader quotes MediaPost: Faced with a new controversy related to online privacy, Comcast said this week that it doesn't draw on information about the sites broadband users visit for advertising or targeting. The company said Thursday that it deletes information every 24 hours about the domain names people navigate to online. "Millions of Comcast customers look up billions of addresses online every day," Chief Privacy Officer Christin McMeley wrote on the company's blog. "We've never used that data for any sort of marketing or advertising -- and we have never sold it to anyone."

The company's statement came one day after the publication Motherboard reported on Comcast's efforts to rally opposition on Capitol Hill to Google's plan to encrypt domain names... "While cloaked as enhancing user privacy, Google's DNS encryption will in fact vastly expand Google's control over and use of customer data, and will result in the complete commercialization of DNS data for Google's own ends," [Comcast's] presentation states. Google has said its plans were mischaracterized by broadband organizations, and that it has no intention of centralizing the web, or changing people's existing DNS providers to Google by default. "Any claim that we are trying to become the centralized encrypted DNS provider is inaccurate," a company spokesperson said last month...

One day after Motherboard posted the material reportedly prepared by Comcast, the cable provider touted its privacy policies in a blog post. "Where you go on the Internet is your business, not ours," McMeley wrote. "As your Internet Service Provider, we do not track the websites you visit or apps you use through your broadband connection. Because we don't track that information, we don't use it to build a profile about you and we have never sold that information to anyone."

Several years ago, Comcast opposed Federal Communications Commission privacy regulations that would have required broadband providers to obtain consumers' opt-in consent before drawing on their web-browsing activity for advertising. The FCC passed those rules in 2016, but the regulations were revoked by Congress the following year.

An anonymous reader quotes ISP Review: The RIPE Network Coordination Centre (RIPE NCC), which manages regional distribution of internet addresses for the UK, Europe, Middle East and parts of Central Asia, has confirmed that their final reserve pool of Internet Protocol v4 (IPv4) addresses will completely run out in November 2019. Strictly speaking the Regional Internet Registry (RIR) started running out of address space in 2012 and began rationing the little they had left. Fast forward a few years and at the start of October 2019 it was confirmed that they only had 1 million IPv4 addresses left in their available pool (out of 4 billion addresses total), "which we expect to run out in November 2019...."

Thankfully many ISPs, devices and services have now introduced "newer" IPv6 addresses, although some still have a lot of work to do (e.g. TalkTalk)... A Spokesperson for RIPE NCC told ISPreview.co.uk "... IPv4 'run-out' has long been anticipated and planned for by the technical community and no one needs to worry about the Internet suddenly breaking. But it does mean that the pressure will continue to build for many networks, necessitating the use of complex and expensive workarounds.

"Our advice to network operators is to take stock of their IP resources and to make sure their IPv6 plans are making progress."

An anonymous reader quotes Reuters: Facebook Inc said on Saturday that it had removed an ad which falsely claimed that U.S. Republican Senator Lindsey Graham supported the Green New Deal, demonstrating that it will fact-check ads from political groups but not politicians.

The ad, which ran on Friday, was put up as a stunt by a left-leaning Political Action Committee, or PAC, called The Really Online Lefty League, to test Facebook's political ad policies... Facebook spokesman Tom Channick told Reuters on Friday that since the new ad came from a political action group, rather than a politician, it was eligible for review by the company's third-party fact-checking partners.

"An unpiloted Air Force X-37B spaceplane, one of two winged orbiters used to carry out classified research, made a surprise landing at the Kennedy Space Center early Sunday to close out a record 780-day mission," reports CBS News: It was the fifth flight in the secretive Orbital Test Vehicle (OTV) program, pushing total time aloft to 2,865 days. "This program continues to push the envelope as the (Air Force's) only reusable space vehicle," Randy Walden, director of the Air Force's Rapid Capabilities Office, said in a statement. "With a successful landing today, the X-37B completed its longest flight to date and successfully completed all mission objectives."

The unpiloted orbiters, built by Boeing, are based on the same lifting body design used for the space shuttle and they fly a similar re-entry trajectory to a runway touchdown. The X-37B features a small 4-foot by 7-foot payload bay and uses a deployable solar array for power. The spacecraft are believed to fly as orbital test beds for advanced technology sensors and other systems but the program is classified, and the Air Force provides few details. Walden said the latest mission "successfully hosted Air Force Research Laboratory experiments, among others, as well as providing a ride for small satellites...."

The X-37B is one of only two operational spacecraft capable of multiple flights to and from orbit. SpaceX's unpiloted Dragon cargo ship also can be refurbished for additional flights... "This spacecraft is a key component of the space community," Lt. Col. Jonathan Keen, X-37B program manager, said in the Air Force statement. "This milestone demonstrates our commitment to conducting experiments for America's future space exploration. Congratulations to the X-37B team for a job well done."

nickwinlund77 shares this story from ZDNet: A recently patched security flaw in modern versions of the PHP programming language is being exploited in the wild to take over servers, ZDNet has learned from threat intelligence firm Bad Packets. The vulnerability is a remote code execution (RCE) in PHP 7, the newer branch of PHP, the most common programming language used to build websites.

The issue, tracked as CVE-2019-11043, lets attackers run commands on servers just by accessing a specially-crafted URL. Exploiting the bug is trivial, and public proof-of-concept exploit code has been published on GitHub earlier this week. Only NGINX servers with PHP-FPM enabled are vulnerable. PHP-FPM, or FastCGI Process Manager, is an alternative PHP FastCGI implementation with some additional features, and according to reports, a common server configuration option.

Facebook AI Research created a system for the de-identification of individuals in videos, reports VentureBeat: It maps a slightly distorted version on a person's face in order to make it difficult for facial recognition technology to identify a person... Like faceswap deepfake software, the AI uses an encoder-decoder architecture to generate both a mask and an image. During training, the person's face is distorted then fed into the network. Then the system generates distorted and undistorted images of a person's face for output that can be embedded into video.

Facebook has no plan to apply the tech to any part of the Facebook family of apps at this time, a company spokesperson told VentureBeat, but such methods could enable public speech that remains recognizable to people but not to AI systems. Anonymized faces in videos could also be used for the privacy-conscious training of AI systems.

"First the first time, hundreds of watts of power were wirelessly transmitted hundreds of meters [video], with an integrated system that ensured the safety of operators and bystanders," writes an anonymous Slashdot reader -- sharing a new press release from the U.S. Naval Research Lab. "This could be the first step towards drones that never have to land..."

According to the Navy, the power transmitted came from "an electrical outlet in the building": On one end of the of the testing facility -- one of the largest test facilities for model ships in the world -- the receiver was converting the laser energy to DC power, which an inverter was turning into AC power to run lights, several laptops, and a coffeemaker that the organizers were using to make coffee for the attendees, or 'laser lattes'...

At NRL, Paul Jaffe, an electronics engineer with the U.S. Naval Research Laboratory has been conducting space-based solar energy research for more than a decade... According to Jaffe, power beaming could also make possible the transmission of power from solar-energy-collecting satellites in space to the ground, wherever it's needed... Imagine using it to send power to locations that are remote, hard to reach or lack infrastructure, he suggested.