Security

Critical EFI Code in Millions of Macs Isn't Getting Apple's Updates (wired.com) 91

Andy Greenberg, writing for Wired:At today's Ekoparty security conference, security firm Duo plans to present research on how it delved into the guts of tens of thousands of computers to measure the real-world state of Apple's so-called extensible firmware interface, or EFI. This is the firmware that runs before your PC's operating system boots and has the potential to corrupt practically everything else that happens on your machine. Duo found that even Macs with perfectly updated operating systems often have much older EFI code, due to either Apple's neglecting to push out EFI updates to those machines or failing to warn users when their firmware update hits a technical glitch and silently fails. For certain models of Apple laptops and desktop computers, close to a third or half of machines have EFI versions that haven't kept pace with their operating system system updates. And for many models, Apple hasn't released new firmware updates at all, leaving a subset of Apple machines vulnerable to known years-old EFI attacks that could gain deep and persistent control of a victim's machine.
Cellphones

Can An Individual Still Resist The Spread of Technology? (chicagotribune.com) 383

schwit1 shares a column from the Chicago Tribune: When cellphones first appeared, they gave people one more means of communication, which they could accept or reject. But before long, most of us began to feel naked and panicky anytime we left home without one. To do without a cellphone -- and soon, if not already, a smartphone -- means estranging oneself from normal society. We went from "you can have a portable communication device" to "you must have a portable communication device" practically overnight... Today most people are expected to be instantly reachable at all times. These devices have gone from servants to masters...

Few of us would be willing to give up modern shelter, food, clothing, medicine, entertainment or transportation. Most of us would say the trade-offs are more than worth it. But they happen whether they are worth it or not, and the individual has little power to resist. Technological innovation is a one-way street. Once you enter it, you are obligated to proceed, even if it leads someplace you would not have chosen to go.

The column argues "the iPhone X proves the Unabomber was right," citing this passage from the 1996 manifesto of the anti-technology terrorist. "Once a technical innovation has been introduced, people usually become dependent on it, so that they can never again do without it, unless it is replaced by some still more advanced innovation. Not only do people become dependent as individuals on a new item of technology, but, even more, the system as a whole becomes dependent on it."
Android

LG Announces V30 Smartphone With 'FullVision' OLED Display, Dual Cameras (phonedog.com) 45

At a press conference in Berlin, LG announced their newest flagship smartphone, the LG V30. The V30 doesn't feature a removable battery or a secondary display like its predecessor, but it does feature faster performance and a significantly redesigned build construction that puts in more in line with Samsung and Apple's offerings. PhoneDog reports: A bigger device with beefier specs, the LG's V series took more design cues from the G series this year more than ever. As expected, LG got rid of the secondary display in favor of a single 6-inch LG P-OLED display (not Super AMOLED, although practically the same with rich black and vibrant colors). The V30 switches out its secondary display for slimmer bezels, which may prove to be a smart move considering how popular the concept is this year. Specs look pretty solid, although there were reports that the device would feature 6GB of RAM rather than 4GB. The bread and butter of the V30 are its sophisticated audio and its dual rear camera set-up. Speaking of the back of the device, another small advantage that LG may have over the competition is the center placement of its rear fingerprint sensor, which has been a bit of a pain point for Samsung this year with the S8 and the Note 8. The LG V30 is set to release on September 21 in South Korea, with releases in North America, Asia, Africa, and Europe following shortly after. LG also has yet to announce a price for the V30, although rumors peg it to be around 800,000 KRW in South Korea (which equates to about $699 in the U.S.). For those interested, GSMArena has a full spec sheet available for the LG V30. Some of the noteworthy specs include a 6-inch LG P-OLED display with an 18:9 aspect ratio and QHD (1440 x 2880) resolution, Snapdragon 835 processor with 4GB RAM, dual 16-megapixel/13-megapixel rear-facing camera sensors, headphone jack, 32-bit/192kHz audio, wireless charging and Android 7.1.2 Nougat.
Businesses

In Our Cynical Age, No One Fails Anymore -- Everybody 'Pivots' (nytimes.com) 131

An anonymous reader shares a report: The "pivot" has assumed a peculiar place in our common lexicon. A word once used to describe a guard angling for position on the basketball court is now in wide circulation in politics and business. That's especially the case in Silicon Valley, where pivoting has become the new failure, a concept to describe a haphazard, practically madcap form of iterative development. With its sheen of management-speak, pivoting is well suited to our moment. And like any act of public relations, pivoting is also a performance. A key part of the act is acknowledging that you are doing it while trying to recast the effort as something larger, more sophisticated, highly planned. The pivot, though it arises from desperation, is nevertheless supposed to appear methodical. The word seems to have first gained currency in Silicon Valley through the efforts of Eric Ries, author of "The Lean Startup." Ries defines pivoting as "a change in strategy without a change in vision." Many successful start-ups now claim a pivot as their origin story. Slack began its life as a video-game company before realizing that its actual value might lie in a chat app the company used to communicate internally. The company is now considered to be worth at least $5 billion, putting it among the most successful pivoters of all time. (Other web staples -- YouTube, Groupon, Instagram -- began life in vastly different iterations before pivoting into their current forms.) There's a promise of technocratic efficiency with pivoting, that all you require is a good business plan, and perhaps another injection of venture capital, and you can transform yourself overnight.
Businesses

Having a Woman On Your Team Ruins Your Chances For VC Funding (theoutline.com) 296

Laura June, writing for The Outline: It's a well-known, well-documented fact that women entrepreneurs face an uphill battle in the fight to get funding for their businesses. But a new study suggests that it can actually be almost impossible. According to the study, published Tuesday in the journal Venture Capital, having even one woman on a company's team makes them far less likely to get funding than an entirely male one. In fact, an all male team is about four times more likely to get funding than teams with any women on them. The study was done by researchers at Babson College and Wellesley, and looked at data on 6,793 companies funded between 2011 and 2013. This is the first large-scale study in a decade to focus on women's efforts to get funding, and it's not encouraging. The authors write, "We did not determine any significant performance differences between companies with women CEOs from companies with men CEOs, so it is quite surprising that women are still, practically speaking, shut out of the market for venture capital funding, both as CEOs and participants of executive teams."
Businesses

Roomba's Next Big Step Is Selling Maps of Your Home to the Highest Bidder (gizmodo.com) 123

The maker of the Roomba robotic vacuum, iRobot -- which we have talked about several times in the past -- has found itself embroiled in a privacy row after its chief executive suggested it may begin selling floor plans of customers' homes, derived from the movement data of their autonomous servants. From a report: While it may seem like the information that a Roomba could gather is minimal, there's a lot to be gleaned from the maps it's constantly updating. It knows the floor plan of your home, the basic shape of everything on your floor, what areas require the most maintenance, and how often you require cleaning cycles, along with many other data points. [...] If a company like Amazon, for example, wanted to improve its Echo smart speaker, the Roomba's mapping info could certainly help out. Spatial mapping could improve audio performance by taking advantage of the room's acoustics. Do you have a large room that's practically empty? Targeted furniture ads might be quite effective. The laser and camera sensors would paint a nice portrait for lighting needs that would factor into smart lights that adjust in real time. Smart AC units could better control airflow. And additional sensors added in the future would gather even more data from this live-in double agent.
Security

Linux Is Not As Safe As You Think (betanews.com) 237

BrianFagioli writes via BetaNews: Would you be surprised if I told you that threat methods for Linux increased an astonishing 300 percent in 2016, while Microsoft's operating systems saw a decrease? Well, according to a new report, that is true. Does this mean Linux is unsafe? No way, Jose! There are some important takeaways here. Microsoft's Windows operating systems are still the most targeted platforms despite the year over year decline -- far beyond Linux. Also, just because there is an increase in malware attack methods doesn't necessarily mean that more systems will be infected. Let us not forget that it is easier to find a vulnerability with open source too; Microsoft largely uses closed source code. "At the end of November, criminals with other variants of the same Linux malware unleashed devastating attacks against DSL routers of Telekom customers. 900,000 devices were taken down. In October, the Mirai code appeared freely available on the Internet. Since then, the AV-TEST systems have been investigating an increasing number of samples with spikes at the end of October, November and beginning of December," says AV Test of the Mirai malware. "Other Linux malware, such as the Tsunami backdoor, has been causing trouble for several years now and can be easily modified for attacks against IoT devices. The detection systems of AV-TEST first detected the Tsunami malicious code in the year 2003. Although, at that time, practically no IoT devices existed, the Linux backdoor already offered attack functions which even today would be suitable for virtually unprotected attacks on routers: In this manner, Tsunami can download additional malicious code onto infected devices and thus make devices remote controllable for criminals. But the old malware can also be used for DDoS attacks. The Darlloz worm, known since 2013, as well as many other Linux and Unix malware programs, have similar attack patterns which AV-TEST has been detecting and analyzing for years."
Encryption

Germany Plans To Fingerprint Children and Spy On Personal Messages (fortune.com) 225

From a report: Germany is planning a new law giving authorities the right to look at private messages and fingerprint children as young as 6, the interior minister said on Wednesday after the last government gathering before a national election in September. Ministers from central government and federal states said encrypted messaging services, such as WhatsApp and Signal, allow militants and criminals to evade traditional surveillance. "We can't allow there to be areas that are practically outside the law," interior minister Thomas de Maiziere told reporters in the eastern town of Dresden.
Wireless Networking

Logitech Reveals Mouse Mat That Is a Giant Wireless Charging Pad (theverge.com) 62

Logitech has just revealed a new Powerplay technology that builds wireless charging directly into its mouse pad, allowing compatible wireless mice to charge constantly while on the pad. The Verge reports: The wireless charging tech built inside the Powerplay mouse mat is proprietary to Logitech, and the company claims it took more than four years of research and development to make it a reality. I asked Logitech why it didn't go with something more ubiquitous like the Qi standard, and the answer I received was that it wouldn't have been possible to cover the whole surface (275mm x 320mm) of the pad with Qi. Alongside the Logitech G Powerplay, which is to be priced at $99.99 and released in August, Logitech has also announced the first two mice officially compatible with it: the G903 and G703. The G903 is a very modest upgrade from the G900 while the G703 is practically identical to the well liked G403; both of the two new models use the PMW3366 optical sensor and just add improved switches rated to last longer. The G903 will cost $149.99 and the G703 will be $99.99 when they go on sale later this month.
Classic Games (Games)

Celebrating '21 Things We Miss About Old Computers' (denofgeek.com) 467

"Today, we look back at the classic era of home computing that existed alongside the dreariness of business computing and the heart-pounding noise and colour of the arcades," writes the site Den of Geek. An anonymous reader reports: The article remembers the days of dial-up modems, obscure computer magazines, and the forgotten phenomenon of computer clubs. ("There was a time when if you wanted to ask a question about something computer related, or see something in action, you'd have to venture outside and into another building to go and see it.") Gamers grappled with old school controllers, games distributed on cassette tapes, low-resolution graphics and the "playground piracy" of warez boards -- when they weren't playing the original side-scrolling platformers like Mario Bros and Donkey Kong at video arcades.

In a world where people published fanzines on 16-bit computers, shared demo programs, and even played text adventures, primitive hardware may have inspired future coders, since "Old computers typically presented you with a command prompt as soon as you switched them on, meaning that they were practically begging to be programmed on." Home computers "mesmerised us, educated us, and in many cases, bankrupted us," the article remembers -- until they were replaced by more powerful hardware. "You move on, but you never fully get over your first love," it concludes -- while also adding that "what came next was pretty amazing."

Does this bring back any memories for anybody -- or provoke any wistful nostalgic for a bygone era? Either way, I really liked the way that the article ended. "The most exciting chapter of all, my geeky friends? The future!"
Nintendo

The Legend of Zelda: Breath of the Wild Review By Ars Technica (arstechnica.com) 59

Kyle Orland writes via Ars Technica: At this point, the Legend of Zelda series operates on a rhythm so predictable you can practically set your watch to it. In a Zelda game, after an extremely slow-paced tutorial, you progress from puzzle-filled dungeon to puzzle-filled dungeon, finding in each one a key item that -- coincidentally -- is crucial to beating the dungeon boss and to finding the next dungeon. Between dungeons, you face perfunctory battles with simple enemies on a vast overworld map dotted with small towns and occasional mini-games and side-quests. Most of these give you rewards that are already so plentiful as to be practically worthless (oh, goodie, more rupees to fill my already full wallet). By the time you reach Ganon, your circuitous trip from point A to point B has given you a set of required powers that help you take on the big bad boss threatening the kingdom. Individual Zelda games each make slight variations to this formula, but the basic rhythm is there every time. And then there's the new Breath of the Wild (BotW), a Zelda game that throws off this established rhythm so quickly, and with such force, that it practically feels like a whole new genre. In doing so, Breath of the Wild offers a compelling take on a stagnating series, bringing a sense of wonder and excitement back to Zelda that hasn't been felt this strongly since the original NES game. "Breath of the Wild is my new favorite 3D Zelda game and in contention for the top spot in the series overall," Orland writes in ending. "Don't miss it." You can read his full review here
AI

Are Gates, Musk Being 'Too Aggressive' With AI Concerns? (xconomy.com) 311

gthuang88 reports on a talk titled "Will Robots Eat Your Job?" Bill Gates and Elon Musk are sounding the alarm "too aggressively" over artificial intelligence's potential negative consequences for society, says MIT professor Erik Brynjolfsson. The co-author of The Second Machine Age argues it will take at least 30 to 50 years for robots and software to eliminate the need for human laborers. In the meantime, he says, we should be investing in education so that people are prepared for the jobs of the future, and are focused on where they still have an advantage over machines -- creativity, empathy, leadership, and teamwork.
The professor acknowledges "there are some legitimate concerns" about robots taking jobs away from humans, but "I don't think it's a problem we have to face today... It can be counterproductive to overestimate what machines can do right now." Eventually humankind will reach a world where robots do practically everything, the professor believes, but with a universal basic income this could simply leave us humans with more leisure time.
China

WeChat Beats Google in Releasing Apps That Don't Need Downloading or Installing (mashable.com) 73

An anonymous reader shares a Mashable report: Click on a link in China's top messaging app, WeChat, and you'll be taken to a rich app-like experience, but without needing to download or install anything. Tencent, WeChat's maker, on Monday released "mini programs." The new mini programs work within the messaging app, and the early crop at launch include a Prisma-like photo editing app, a Pomodoro Timer productivity app, a flight search engine, and one for recipe searches. With the mini programs, the already-dominant WeChat continues its march to become practically ubiquitous on Chinese handsets, where people already use the messenger for real-life tasks like paying at restaurants, to hailing a Didi Chuxing ride. Last year, Google too announced that it would soon allow users to check out apps without downloading or installing them. The feature is yet to go live.
The Almighty Buck

India Just Flew Past Us In the Race To E-Cash (backchannel.com) 216

New submitter mirandakatz writes: Since India's prime minister banned 86 percent of the rupee notes in circulation last month, citizens have been waiting in hours-long lines for ATMs. But these circumstances have also created an unexpected progression: a burgeoning cashless economy. At Backchannel, Lauren Razavi explores how India is now beating many Western countries in adopting mobile payments, and how demonetization has triggered a radical shift toward reimagining India's enormous informal economy as a data-driven digital marketplace. From the report: "Before last month, Paytm, a mobile app that allows users to pay for everything from pizza to utility bills, saw steady business -- it was processing between 2.5 and 3 million transactions a day. Now, usage of the app has close to doubled. 6 million transactions a day is common; 5 million is considered a bad day. Rather than being forced to idle away time in excruciatingly long lines, 'people are proactively exploring other ways to settle payments besides cash,' says Deepak Abbot, senior vice president at Paytm. 'Now people are realizing they don't need to really line up, because merchants are starting to accept other forms of payment.' All of this has created a newfound system that practically incentives mobile payment. With so many people queuing up at banks every day -- and a lot of Indian bureaucracy to wade through in order to open a traditional bank account or line of credit -- the appeal of more convenient digital alternatives is easy to understand. According to a report in the Hindu Business Line, as many as 233 million unbanked people in India are skipping plastic and moving straight to digital transactions. 'Cash has lost its credibility and payments are no longer perceived in the same way,' says Upasana Taku, the cofounder of Indian mobile wallet company MobiKwik, which reported a 40 percent increase in downloads and a 7,000 percent increase in bank transfers since demonetization. 'There's chaos at the moment but also relief that India will now be an improved economy,' she says."
China

Why China Can't Lure Tech Talent (bloomberg.com) 219

China may have been hoping to attract tech talent to its nation, but it is unlikely that people in the tech industry will move there. A columnist at Bloomberg explains why: The biggest problem is government control of the internet. For a software developer, the inconvenience goes well beyond not being able to access YouTube during coffee breaks. It means that key software libraries and tools are often inaccessible. In 2013, China blocked Github, a globally important open-source depository and collaboration tool, thereby forcing developers to seek workarounds. Using a virtual private network to "tunnel" through the blockades is one popular option. But VPNs slow uploads, downloads and collaboration. And it isn't just developers who suffer. Among the restricted sites in China is Google Scholar, a tool that indexes online peer-reviewed studies, conference proceedings, books and other research material into an easily accessible format. It's become a crucial database for academics around the world, and Chinese researchers -- even those with VPNs -- struggle to use it. The situation grew so dire this summer that several state-run news outlets published complaints from Chinese scientists, with one practically begging the nationalist Global Times newspaper: "We hope the government can relax supervision for academic purposes." The cumulative impact of these restrictions is significant. Scientists unable to keep up with what researchers in other countries are publishing are destined to be left behind, which is one reason China is having difficulty luring foreign scholars to its universities. Programmers who can't take advantage of the sites and tools that make development a global effort are destined to write software customized solely for the Chinese market. The author has raised several other reasons to make his case.
Operating Systems

Antivirus Firm Kaspersky Launches Its Own Hackproof OS, Based On Microkernel (fossbytes.com) 108

An anonymous reader quotes a report from Fossbytes: Kaspersky Lab, a Russian cybersecurity and antivirus company, has announced their new operating system which was in development for the last 14 years. Dubbed as Kaspersky OS, it has made its debut on a Kraftway Layer 3 Switch. Not many details have been revealed by the CEO Eugene Kaspersky in his blog post. The GUI-less OS -- as it appears in the image -- has been designed from scratch and Eugene said it doesn't have "even the slightest smell of Linux." He actually tagged "Kaspersky OS being non-Linux" as one of the three main distinctive features he mentioned. The other two features he briefly described are rather fascinating. The first feature is that the Kaspersky OS is based on microkernel architecture, which basically means using the minimum amount of ingredients to bake your own operating system. The OS can be custom-designed as per requirements by using different modification blocks. The second distinctive feature is the inbuilt security system which can control application behavior and OS modules. It touts Kaspersky OS as practically unhackable, unless a cyber-baddie has a quantum computer -- which will be required to crack the digital signature of the platform -- at his disposal.
Security

The Slashdot Interview With Security Expert Mikko Hypponen: 'Backupception' 38

You asked, he answered!

Mikko Hypponen, Chief Research Officer at security firm F-Secure, has answered a range of your questions. Read on to find his insight on the kind of security awareness training we need, whether anti-virus products are relevant anymore, and whether we have already lost the battle to bad guys. Bonus: his take on whether or not you should take backups of your data.
AI

New AI Is Capable of Beating Humans At Doom (denofgeek.com) 170

An anonymous reader quotes a report from Den of Geek UK: Two students at Carnegie Mellon University have designed an artificial intelligence program that is capable of beating human players in a deathmatch game of 1993's Doom. Guillaume Lample and Devendra Singh Chaplot spent four months developing a program capable of playing first-person shooter games. The program made its debut at VizDoom (an AI competition that centered around the classic shooter) where it took second place despite the fact that their creation managed to beat human participants. That's not the impressive part about this program, however. No, what's really impressive is how the AI learns to play. The creator's full write-up on the program (which is available here) notes that their AI "allows developing bots that play the game using the screen buffer." What that means is that the program learns by interpreting what is happening on the screen as opposed to following a pre-set series of command instructions alone. In other words, this AI learns to play in exactly the same way a human player learns to play. This theory has been explored practically before, but Doom is arguably the most complicated game a program fueled by that concept has been able to succeed at. The AI's creators have already confirmed that they will be moving on to Quake, which will be a much more interesting test of this technologies capabilities given that Quake presents a much more complex 3D environment.
AI

Facebook, Amazon, Google, IBM, and Microsoft Come Together To Create Historic Partnership On AI (techcrunch.com) 87

An anonymous reader quotes a report from TechCrunch: In an act of self-governance, Facebook, Amazon, Alphabet, IBM, and Microsoft came together today to announce the launch the new Partnership on AI. The group is tasked with conducting research and promoting best practices. Practically, this means that the group of tech companies will come together frequently to discuss advancements in artificial intelligence. The group also opens up a formal structure for communication across company lines. It's important to remember that on a day to day basis, these teams are in constant competition with each other to develop the best products and services powered by machine intelligence. Financial support will be coming from the initial tech companies who are members of the group, but in the future membership and involvement is expected to increase. User activists, non-profits, ethicists, and other stakeholders will be joining the discussion in the coming weeks. The organizational structure has been designed to allow non-corporate groups to have equal leadership side-by-side with large tech companies. As of today's launch, companies like Apple, Twitter, Intel and Baidu are missing from the group. Though Apple is said to be enthusiastic about the project, their absence is still notable because the company has fallen behind in artificial intelligence when compared to its rivals -- many of whom are part of this new group. The new organization really seems to be about promoting change by example. Rather than preach to the tech world, it wants to use a standard open license to publish research on topics including ethics, inclusivity, and privacy.

Slashdot Top Deals