Microsoft

Microsoft Defends Planned Partner Program Changes, But Many Aren't Buying It (zdnet.com) 57

Last week, Microsoft quietly published information to its partner web site which made it clear that one of its program's main benefits -- internal use rights (IURs) -- would be axed in July 2020. Since then, Microsoft's been attempting to do damage control, including by holding a webcast that meant to shed more light on the reasoning behind the move. But most partners seem unconvinced about Microsoft's stated reasons, with more than a few saying they might go so far as to quit the partner program as a result. ZDNet: In a 20-minute recorded Ask Me Anything (AMA) entitled "Partner Transformation and Partner Business Investments" recorded on July 10, Microsoft execs talked about the priorities and trade-offs the company is making in regard to its partner program in fiscal 2020 and beyond. More than 230 partners attended the presentation live. (Note: It looks like Microsoft has removed the video of the AMA from YouTube.) Erez Wohl, General Manager of Business Strategy and Partner Investments in the One Commercial Partner organization, told partners that Microsoft "has the richest incentive portfolio in the industry," and that it would spend $400 million more on its partner program in fiscal 2020 (starting July 1, 2019) than it did in the previous year. He and his colleague Toby Richards, General Manager of Go-To-Market & Programs in the Microsoft One Commercial Partner organization, talked up some of the advanced specializations, new commerce capabilities and other new partner benefits that would be coming to the program this year.

But webcast attendees were largely there for one reason: To dispute Microsoft's plan to eliminate internal use rights. Yet Microsoft officials held fast to their stance, saying the company had to make some trade-offs in order to deliver on other priorities, such as making it easier for partners to connect with more users, partners and sellers. [...] For what it's worth, someone I know at Microsoft said Microsoft is currently incurring about $200 million in costs annually (and growing) resulting from its services being used by partners via IUR products.
Update Microsoft capitulates and agrees to undo planned partner product-licensing changes.
Media

Scientists Use Camera With Human-Like Vision To Capture 5,400 FPS Video (petapixel.com) 66

An anonymous reader quotes a report from PetaPixel: A team of scientists from the Swiss Federal Institute of Technology in Zurich (ETH Zurich) have figured out how to capture super slow-motion footage using what's called an "Event Camera." That is: a camera that sees the world in a continuous stream of information, the way humans do. Regular cameras work by capturing discrete frames, recapturing the same scene 24 or more times per second and then stitching it together to create a video. Event cameras are different. They capture "pixel-level brightness changes" as they happen, basically recording each individual light "event" as it happens, without wasting time capturing all the stuff that remains the same frame by frame.

As ETH Zurich explains, some of the advantages of this type of image capture is "a very high dynamic range, no motion blur, and a latency in the order of microseconds." The downside is that there's no easy way to process the resulting "footage" into something you can display using current algorithms because they all expect to receive a set of discrete frames. Well, there was no easy way. This is what the folks at ETH Zurich just improved upon, developing a reconstruction model that can interpret the footage to the tune of 5,000+ frames per second. The results are astounding: a 20% increase in the reconstructed image quality over any model that existed before, and the ability to output "high frame rate videos (more than 5,000 frames per second) of high-speed phenomena (e.g. a bullet hitting an object)," even in high dynamic range "challenging lighting conditions."
Their findings have been published in a research paper titled High Speed and High Dynamic Range Video with an Event Camera.
Earth

A Sunken Cold War Nuclear Sub Is Leaking Radiation At Levels 800,000 Times Normal (gizmodo.com) 149

Using a robotic sub, a team of investigators has detected traces of radiation leaking from Komsomolets -- a Soviet nuclear submarine that sank 30 years ago in the Norwegian Sea. The recorded radiation levels are unusually high, but scientists say it's not threatening humans or marine life. Gizmodo reports: On April 7, 1989, while cruising at a depth of 380 meters (1,250 feet), a fire broke out in the aft section of Komsomolets, a Soviet nuclear-powered attack submarine out on its first patrol. Its captain managed to bring the beleaguered sub to the surface, but it sank about five hours later. All 42 sailors were killed in the incident, known as the Komsomolets disaster. The 120-meter-long (400-foot) nuclear submarine still rests some 1,700 meters (5,575 feet) below the surface of the Norwegian Sea, about 320 kilometers (200 miles) north of the Norwegian mainland.

And it's leaking radiation, according to a press release issued by Norway's Institute of Marine Research (IMR). The amount of cesium radiation leaking from the wreck is significant, at about 800,000 times the typical reading for the Norwegian Sea, but it "poses no risk to people or fish," according to a collaborative research team involving IMR and the Norwegian Radiation and Nuclear Safety Authority (DSA). A leaking radioactive sub certainly sounds scary, but this research suggests the wreck is not currently endangering the Norwegian Sea and outlying areas. Normally, radiation levels in the Norwegian Sea are at 0.001 Becquerel (Bq) per liter. Around the wreck, however, they are as high as 100 Bq per liter. For reference, the acceptable amount of radiation in food is 600 Bq per kilogram, as established by the Norwegian government in the wake of the Chernobyl disaster.

Power

Nissan Sees Leaf As Home Energy Source, Says Tesla Big Battery 'Waste of Resources' (npr.org) 253

An anonymous reader quotes a report from The Driven: Owning an electric car in Australia could become much more than just driving from A to B with a reduced carbon footprint, according to Nissan Australia which launched the new version of the Nissan Leaf electric vehicle in Melbourne on Wednesday. Nissan confirmed at the launch that the new Leaf, with a 40kWh battery, will be a V2H (vehicle-to-home) energy asset -- meaning that, unlike other electric vehicles, it will have the capability to charge your home (subject to further testing with Australia's network owners and operators). Called bidirectional charging, the 40kWh Leaf (and for that matter the 62kWh version which is not yet slated for an Australian release) essentially has the capability to become your personal, massive, mobile battery. This means it will be able to not only store energy by plugging into your home, workplace or other destinations such as shopping centers with free charging, or from DC fast-chargers -- it will be able to serve that energy back to your home. And it could be available to use in Australia within six months. Nissan's global head of electric vehicles, Nic Thomas, says that installations such as the grid connected Tesla big battery at Hornsdale in South Australia is a waste, despite the fact that its performance -- both for the grid and financially -- has been widely admired.

"It's a complete waste of resources because what we can do is have cars that are also batteries and those cars are parked most of the time," Thomas said.
Music

Parks and Recreation Centers Are Using Sonic Devices That Play High-Pitched Noises To Repel Teens (npr.org) 406

NPR reports of the various parks and recreation centers in North America that are using sonic devices to repel teens from the premises. Philadelphia, for example, has 30 parks and recreation centers that are outfitted with a small speaker called the Mosquito. "It blares a constant, high-pitched ringing noise all night long -- but one that only teenagers and young adults can hear," reports NPR. "Anyone over age 25 is supposed to be immune because, basically, their ear cells have started to die off." From the report: Philadelphia parks officials have been installing the device since 2014, reported WHYY's Billy Penn, intending to shoo rowdy youths from the premises. And it's not the only U.S. city to do so. Mosquito's Vancouver-based manufacturer Moving Sound Technologies works with roughly 20 parks departments around the country to implement the youth-repellent devices, says president Michael Gibson. It's intended to prevent loitering and vandalism by teens and young adults at public facilities. But some say this age-based targeting is a form of prejudice. Philadelphia City Council member Helen Gym refers to the devices as "sonic weapons" -- and she's working to get them removed.

[I]n Philadelphia, Parks & Recreation defends its use of the Mosquito, saying the devices are operational from 10 p.m. to 6 a.m. only, and they're just one part of an overall anti-vandalism strategy that includes fences and gates, security cameras and night watch staff. For now, the city is moving forward with installation. Despite the backlash, two new Mosquito devices are being installed at other city playgrounds as part of major renovation projects.

Cellphones

FCC Photos Confirm Galaxy Note 10 Won't Have a Headphone Jack (theverge.com) 148

Samsung has been one of the only large smartphone manufacturers to insist on keeping the headphone jack in its flagship phones. But that is about to come to an end with the Galaxy Note 10. According to photos published by the FCC, showing both the bottom and top of the phone, there's no headphone jack in sight. The Verge reports: The FCC seems to have briefly shared these images by mistake. Samsung followed the usual protocols in requesting confidentiality for external photos of the Note 10 test device, and yet here we are. Whoops. There are two different models at the FCC, but neither includes 5G. So as with the S10 series, Samsung will likely produce a standalone 5G model. Aside from the headphone jack being a goner -- renders of the phone had already suggested this was coming -- we get a look at the triple-camera system on the back. There's another sensor positioned under the flash, which could be the same 3D time-of-flight depth sensor that Samsung included in the Galaxy S10 5G. The Note is usually where the company throws in everything it can, so it makes sense for it to carry over everything from the top-tier S10 model. The center-aligned front camera cutout is also faintly visible in one shot. Samsung is expected to formally announce the Note 7 at an August 7th Unpacked event in Brooklyn, New York.
Microsoft

Microsoft Stirs Suspicions By Adding Telemetry Files To Security-Only Update (zdnet.com) 154

An anonymous reader quotes a report from ZDNet: As expected, Windows Update dropped off several packages of security and reliability fixes for Windows 7 earlier this week, part of the normal Patch Tuesday delivery cycle for every version of Windows. But some hawk-eyed observers noted a surprise in one of those Windows 7 packages. What was surprising about this month's Security-only update, formally titled the "July 9, 2019 -- KB4507456 (Security-only update)," is that it bundled the Compatibility Appraiser, KB2952664, which is designed to identify issues that could prevent a Windows 7 PC from updating to Windows 10.

Among the fierce corps of Windows Update skeptics, the Compatibility Appraiser tool is to be shunned aggressively. The concern is that these components are being used to prepare for another round of forced updates or to spy on individual PCs. The word telemetry appears in at least one file, and for some observers it's a short step from seemingly innocuous data collection to outright spyware. [...] I strongly suspect that some part of the Appraiser component on Windows 7 SP1 had a security issue of its own. If that's the case, then the updates indisputably belong in a Security-only update. And if they happen to get installed on systems where administrators had taken special precautions not to install those components, Microsoft's reaction seems to be, "Well ... tough."
"The Appraiser tool was offered via Windows Update, both separately and as part of a monthly rollup update two years ago; as a result, most of the declining population of Windows 7 PCs already has it installed," the report notes.
Facebook

Facebook AI Pluribus Defeats Top Poker Pros In 6-Player Texas Hold 'Em (arstechnica.com) 58

Carnegie Mellon University and Facebook AI research scientists have developed an AI dubbed Pluribus that took on 15 professional human players in six-player no-limit Texas Hold 'em and won. The researchers describe how they achieved this feat in a new paper in Science. Ars Technica reports: Playing more than 5,000 hands each time, five copies of the AI took on two top professional players: Chris "Jesus" Ferguson, six-time winner of World Series of Poker events, and Darren Elias, who currently holds the record for most World Poker Tour titles. Pluribus defeated them both. It did the same in a second experiment, in which Pluribus played five pros at a time, from a pool of 13 human players, for 10,000 hands.

Co-author Tuomas Sandholm of Carnegie Mellon University has been grappling with the unique challenges poker poses for AI for the last 16 years. No-Limit Texas Hold 'em is a so-called "imperfect information" game, since there are hidden cards (held by one's opponents in the hand) and no restrictions on the size of the bet one can make. By contrast, with chess and Go, the status of the playing board and all the pieces are known by all the players. Poker players can (and do) bluff on occasion, so it's also a game of misleading information.

Android

Malicious Apps Infect 25 Million Android Devices With 'Agent Smith' Malware (phys.org) 26

An anonymous reader quotes a report from Phys.Org: Malicious apps from a campaign called "Agent Smith" have been downloaded to 25 million Android devices, according to new research by cyber-security firm Check Point. The apps, most of them games, were distributed through third-party app stores by a Chinese group with a legitimate business helping Chinese developers promote their apps on outside platforms. Check Point is not identifying the company, because they are working with local law enforcement. About 300,000 devices were infected in the U.S.

The malware was able to copy popular apps on the phone, including WhatsApp and the web browser Opera, inject its own malicious code and replace the original app with the weaponized version, using a vulnerability in the way Google apps are updated. The hijacked apps would still work just fine, which hid the malware from users. Armed with all the permissions users had granted to the real apps, "Agent Smith" was able to hijack other apps on the phone to display unwanted ads to users. That might not seem like a significant problem, but the same security flaws could be used to hijack banking, shopping and other sensitive apps, according to Aviran Hazum, head of Check Point's analysis and response team for mobile devices.
There was also a "dormant" version of "Agent Smith" in 11 apps on the Play Store, which could have been triggered into action by a banner ad containing the keyword "infect." The apps have since been removed from the Play Store, but had over 10 million downloads.
Security

German Banks Are Moving Away From SMS One-Time Passcodes (zdnet.com) 76

Multiple German banks have announced plans to drop support for SMS-based one-time passcodes (OTP) as a login authentication and transaction verification method. From a report: Postbank plans to drop support in August, while Raiffeisen Bank and Volksbank plan to do so in the fall, Handelsblatt reports. Deutsche Bank and Commerzbank also plan to drop support for SMS OTP but have not announced a deadline, while Consorsbank plans to discontinue it by the end of the year. Other banks like DKB and N26 have never deployed the technology, while ING has not made any public statements on its plans. The reason why German banks are dropping support for SMS OTP is because of legislation that the EU passed in 2015, set to enter into effect on September 14, this year. In 2015, the EU revised the Payment Services Directive (PSD), a set of rules that govern online payments in the EU, and issued an updated version called the PSD2. This legislation also included a clause for strong customer authentication (SCA) mechanisms.
Businesses

Microsoft Teams Overtakes Slack With 13 Million Daily Users (theverge.com) 89

Microsoft is finally revealing exactly how many people are using its Slack competitor Microsoft Teams. From a report: The software maker says that more than 13 million people are using Microsoft Teams daily, along with more than 19 million weekly active users. This is the first time Microsoft has revealed an active user count, and the company's previous update was that 500,000 organizations were using the service back in March. This figure is above the more than 10 million people who use Slack daily. Slack revealed its 10 million daily active user count earlier this year, and it used the same figure back in April in a financial filing. Team communication service Slack, which has been around for much longer, was valued at north of $20 billion when it went public last month.

Further reading: Microsoft Might Crush Slack Like Facebook Crushed Snapchat.
Privacy

Google Admits Partners Leaked More Than 1,000 Private Conversations With Google Assistant (cnbc.com) 53

Google admitted on Thursday that more than 1,000 sound recordings of customer conversations with the Google Assistant were leaked by some of its partners to a Belgian news site. From a report: These conversations are used by companies such as Google and Amazon -- which takes clips from the Amazon Echo -- to improve voice responses from their smart assistants. They are supposed to be kept confidential. But Belgian news site VRT said on Wednesday that a contractor provided it with samples of these sound samples, which VRT then used to identify some of the people in the clips. It also examined the sorts of conversations that Google collects when people say "OK Google," into a phone or a Google Home product. Among other things, VRT heard customer addresses. Sources who talked to the publication also described hearing recordings of a woman in distress and people talking about medical conditions.

Google has now admitted the recordings were leaked. "We just learned that one of these language reviewers has violated our data security policies by leaking confidential Dutch audio data," Google product manager of search David Monsees said in a blog post. "Our Security and Privacy Response teams have been activated on this issue, are investigating, and we will take action. We are conducting a full review of our safeguards in this space to prevent misconduct like this from happening again."

Social Networks

Twitter is Down [Update] 160

Multiple users are reporting issues while trying to load Twitter. Third-party internet firm DownDetector corroborates the claim, saying more than 10,500 users have reported issues with Twitter in the last 15 minutes. (Update: 47,000+ reports in last 25 minutes). TweetDeck, a service offered by Twitter, is also facing an outage. Twitter apps are also not loading new tweets.

Update at 19:00 GMT: Twitter has acknowledged that users are facing issues accessing its service. The microblogging platform said it is investigating the matter.

Update at 20:00 GMT: In a statement, Twitter said it has resolved the issue.
Security

US Mayors Group Adopts Resolution Not To Pay Any More Ransoms To Hackers (zdnet.com) 72

The US Conference of Mayors unanimously adopted a resolution this week to not pay any more ransom demands to hackers following ransomware infections. From a report: "Paying ransomware attackers encourages continued attacks on other government systems, as perpetrators financially benefit," the adopted resolution reads. "The United States Conference of Mayors has a vested interest in de-incentivizing these attacks to prevent further harm," it said. "NOW, THEREFORE, BE IT RESOLVED, that the United States Conference of Mayors stands united against paying ransoms in the event of an IT security breach." The resolution adopted this week at the 87th annual meeting of the US Conference of Mayors doesn't have any legal binding, but can be used as an official position to justify administrative actions, for both federal authorities and taxpayers alike. The Conference of Mayors includes over 1,400 mayors from across the US, representing cities with a population of over 30,000. The organization said that "at least 170 county, city, or state government systems have experienced a ransomware attack since 2013," and "22 of those attacks have occurred in 2019 alone."
Businesses

France Approves Digital Tax on American Tech Giants, Defying US Trade Threat (cnbc.com) 313

France's Senate approved a tax on the revenues of tech giants like Google, Amazon and Facebook on Thursday, defying a warning from the President Donald Trump administration that it "unfairly targets American companies." From a report: On Wednesday, Trump ordered an investigation into France's planned "digital tax" on tech companies. The 3% tax would apply to the French revenues of roughly 30 major companies, mostly from the U.S. "France is sovereign, and France decides its own tax rules. And this will continue to be the case," France's Finance Minister Bruno Le Maire said in a statement. He added the U.S. and France could find agreements, rather than using threats, to reach a deal on the "fair taxation" of internet giants.
Businesses

Bankrupt Maker Faire Revives, Reduced To Make Community (techcrunch.com) 51

After being shut down last month with 22 employees losing their jobs, Maker Faire and Maker Media are coming back, but in a weakened capacity. Founder and CEO Dale Dougherty tells TechCrunch that "he's bought back the brands, domains, and content from creditors and rehired 15 of 22 laid off staffers with his own money." The report says that he will formally announce the relaunch of the company with the new name "Make Community." From the report: The company is already working on a new issue of Make Magazine that it will hope to publish quarterly (down from six times per year) and the online archives of its do-it-yourself project guides will remain available. It hopes to keep publishing books. And it will continue to license the Maker Faire name to event organizers who've thrown over 200 of the festivals full of science-art and workshops in 40 countries. But Dougherty doesn't have the funding to commit to producing the company-owned flagship Bay Area and New York Maker Faires any more.

For now, Dougherty is financing the revival himself "with the goal that we can get back up to speed as a business, and start generating revenue and a magazine again. This is where the community support needs to come in because I can't fund it for very long." The immediate plan is to announce a new membership model next week at Make.co where hobbyists and craft-lovers can pay a monthly or annual fee to become patrons of Make Community. Dougherty was cagey about what they'll get in return beyond a sense of keeping alive the organization that's held the maker community together since 2005. He does hope to get the next Make Magazine issue out by the end of summer or early fall, and existing subscribers should get it in the mail.

Data Storage

The Most Clever 'Zip Bomb' Ever Made Explodes a 46MB File To 4.5 Petabytes (vice.com) 102

Programmer and engineer David Fifield has unveiled a brand-new Zip bomb that explodes a 46-megabyte file to 4.5 petabytes of data. Fifield's new type of "Zip bomb" or "compression bomb" is particularly novel because he "figured out how to 'overlap' files inside of a Zip archive, allowing for compression rates far beyond those of a traditional archive," reports Motherboard. From the report: In an email interview, Fifield noted that, while 42.zip (which has a 106 billion-to-one compression ratio and has been hosted on the same single-serving website for at least 15 years) gets much of the attention, he finds later attempts more technically interesting. "eI find 42.zip inspiring on an aesthetic level -- not so much the file itself but the circumstances around it," Fifield said. "It's like folklore. There must have been many examples of the same basic idea, but for whatever reason 42.zip is the one that had staying power."

Fifield noted that part of what makes his process possible was by coming up with ways to handle cyclic redundancy checks, or CRCs, a basic error-correction functionality baked into Zip, PNG, Ethernet, and numerous other technical standards. Messing around with CRC -- 32 checksums, as they're called, was where Fifield said he learned the most. Fifield, who will present his findings at the USENIX Workshop on Offensive Technologies (WOOT) conference next month, noted that while the work itself adds to a history of research and likely will be superseded in the future, its benefit from an awareness standpoint is important.

China

Chinese Air Pollution Dimmed Sunlight Enough To Impact Solar Panels (arstechnica.com) 122

Using a record of solar radiation measurements around China going back to the late 1950s, researchers from ETH Zurich found that China's coal-driven air pollution is significantly reducing the output of solar panels by dimming the Sun. Ars Technica reports: The researchers found that, over the entire record between about 1960 and 2015, the average potential solar generation declined by about 13%. Expressed in terms of capacity factor -- the fraction of a solar panel's maximum output that is actually produced on average -- the drop from the start to the lowest point in 2008 was 0.162 to 0.142. The change wasn't the same everywhere, though, as air pollution and local conditions varied. The five worst provinces actually saw potential generation drops of fully 20-28%. These included industrial centers in the east but also some clearer high-elevation areas in the west where a small amount of air pollution can have a big impact.

If China could go back to its 1950s air quality, its existing solar installations in 2016 would have produced an additional 14 terawatt-hours of electricity for free. As more solar panels are built, that number would only grow. By 2030, cleaner air could net an additional 70 terawatt-hours of electricity each year -- about 1% of total projected electricity generation at that point. To put some dollar signs on these numbers, the researchers used the current feed-in tariff of $0.14 per kilowatt-hour and a projected drop to $0.09 per kilowatt-hour in 2030. In 2016, this would mean cleaner air would have brought $1.9 billion worth of electricity. In 2030, the extra 13% or so of solar potential could be worth over $6 billion per year.
The study has been published in the journal Nature Energy.
Facebook

Fed Chief Calls For Facebook To Halt Libra Project Until Concerns Addressed (reuters.com) 100

U.S. Federal Reserve Chairman Jerome Powell said on Wednesday that Facebook's plan to build a digital currency called Libra "cannot go forward" until serious concerns are addressed. Reuters reports: "Libra raises many serious concerns regarding privacy, money laundering, consumer protection and financial stability," Powell said during his semi-annual testimony on monetary policy before the U.S. House of Representatives Financial Services Committee. "I don't think the project can go forward" without addressing those concerns, he added later. Powell said any regulatory review of the project should be "patient and careful." He noted that existing rules do not fit digital currencies. "It's something that doesn't fit neatly or easily within our regulatory scheme but it does have potentially systemic scale," he said. "It needs a careful look, so I strongly believe we all need to be taking our time with this." A Facebook spokesperson said in response: "We are very much aligned with the Chairman around the need for public discourse on this. This is why we along with the 27 other Founding Members of the Libra Association made this announcement so far in advance, so that we could engage in constructive discourse on this and get feedback."
Google

Google Contractors Are Secretly Listening To Your Assistant Recordings (thenextweb.com) 129

A new report from Belgian broadcaster VRT News describes the process by which Google Home recordings end up being listened to by contractors -- and the scary part is that it apparently doesn't take much, if anything, to start a recording. While the recordings are not listened to live, audio clips are sent to subcontractors. The Next Web reports: VRT, with the help of a whistleblower, was able to listen to some of these clips and subsequently heard enough to discern the addresses of several Dutch and Belgian people using Google Home -- in spite of the fact some hadn't even uttered the words "Hey Google," which are supposed to be the device's listening trigger. The person who leaked the recordings was working as a subcontractor to Google, transcribing the audio files for subsequent use in improving its speech recognition. They got in touch with VRT after reading about Amazon Alexa keeping recordings indefinitely.

According to the whistleblower, the recordings presented to them are meant to be carefully annotated, with notes included about the speakers presumed identity and age. From the sound of the report, these transcribers have heard just about everything. Personal information? Bedroom activities? Domestic violence? Yes, yes, and yes. While VRT only listened to recordings from Dutch and Belgian users, the platform the whistleblower showed them had recordings from all over the world -- which means there are probably thousands of other contractors listening to Assistant recordings. The VRT report states that the Google Home Terms of Service don't mention that recordings might be listened to by other humans.
The report says that the recordings are identified by numbers rather than user names, but VRT "was able to pick up enough data from the recordings to find the addresses of the users in question, and even confront some of the users in the recordings -- to their great dismay," reports The Next Web.

What does Google have to say about all this? That they only transcribe and use "about 0.2% of all audio clips" to improve their voice recognition technology.

Slashdot Top Deals