Piracy

Studies Keep Showing That the Best Way To Stop Piracy Is To Offer Cheaper, Better Alternatives (vice.com) 111

An anonymous reader quotes a report from Motherboard: Study after study continues to show that the best approach to tackling internet piracy is to provide these would-be customers with high quality, low cost alternatives. That idea was again supported by a new study this week out of New Zealand first spotted by TorrentFreak. The study, paid for by telecom operator Vocus Group, surveyed a thousand New Zealanders last December, and found that while half of those polled say they've pirated content at some point in their lives, those numbers have dropped as legal streaming alternatives have flourished.

The study found that 11 percent of New Zealand consumers still obtain copyrighted content via illegal streams, and 10 percent download infringing content via BitTorrent or other platforms. But it also found that users are increasingly likely to obtain that same content via over the air antennas (75 percent) or legitimate streaming services like Netflix (55 percent). "In short, the reason people are moving away from piracy is that it's simply more hassle than it's worth," says Vocus Group NZ executive Taryn Hamilton said in a statement. "The research confirms something many internet pundits have long instinctively believed to be true: piracy isn't driven by law-breakers, it's driven by people who can't easily or affordably get the content they want," she said.

Microsoft

Microsoft Takes a Big Step Towards Putting Xbox Games On Windows (arstechnica.com) 87

An anonymous reader quotes a report from Ars Technica, written by Peter Bright: Ever since the first Xbox was released, an obvious question has been hanging in the air: Microsoft already owns one of the premier gaming platforms, the PC, and both the original Xbox and the current Xbox One are more or less PCs anyway, so when is Microsoft going to bring the two together and let us play Xbox games on Windows? With the new Windows 10 builds, it looks like the company is taking some big steps in that direction. Microsoft has put big chunks of the Xbox infrastructure into Windows 10. This starts right from the moment you download the game: it's coming from the Xbox distribution servers, not the usual ones for Store apps. The game package itself uses a format called .xvc, which is used for Xbox One games, and there are PowerShell commands to work with these .xvc files and install .xvc games. Microsoft Gaming Services includes portions of this Xbox infrastructure; it includes a couple of drivers ("Microsoft Gaming Filesystem Driver" and "Microsoft Gaming Install Filter Driver"), along with a number of libraries that provide Xbox APIs.

The last few Windows 10 preview builds have included some vague instructions from Microsoft to install a special edition of a game, State of Decay, and report any problems with the process. There are no problems with playing the game but, rather, problems with installing and launching it. The instructions didn't give any indication as to why or what to look for. Naturally, people have been taking a closer look to see what's special about State of Decay and figure out why Microsoft is having Windows Insiders test it. Nazmus Khandaker, Rafael Rivera, and the pseudonymous WalkingCat have been poking around both the special edition of State of Decay and a helper application called Microsoft Gaming Services that insider machines are running. Brad Sams wrote up his findings. [...] The State of Decay package does nonetheless contain PC-oriented elements. In particular, it tries to install and update the DirectX runtime during its setup. We the users don't seem to be at the stage of simply running Xbox games unmodified on our PCs, or at least, not yet. But it looks as if the groundwork is being laid. The strange preview of a 2020 Windows release looks like it contains even more of this infrastructure, with signs of a layer to support Xbox's Direct3D variant on PC.
"Microsoft could go the whole hog and simply make a Windows 10 PC with a suitable hardware spec into an Xbox that can play any Xbox game," writes Bright, adding: "it might just be there as a simple option for developers to enable if they choose."
Security

Attackers Can Track Kids' Locations Via Connected Watches 33

secwatcher shares a report from Threatpost: A gamut of kids' GPS-tracking watches are exposing sensitive data involving 35,000 children -- including their location, in real time. Researchers from Pen Test Partners specifically took a look at the Gator portfolio of watches from TechSixtyFour. The Gator line had been in the spotlight in 2017 for having a raft of vulnerabilities, called out by the Norwegian Consumers Council in its WatchOut research. "A year on, we decided to have a look at the Gator watch again to see how their security had improved," said Vangelis Stykas, in a Tuesday posting. "Guess what: a train wreck. Anyone could access the entire database, including real-time child location, name, parents' details etc. Not just Gator watches either -- the same back end covered multiple brands and tens of thousands of watches." "At issue was an easy-to-exploit, severe privilege-escalation vulnerability: The system failed to validate that the user had the appropriate permission to take admin control," reports Threatpost. "An attacker with access to the watch's credentials simply needed to change the user level parameter in the backend to an admin designation, which would provide access to all account information and all watch information."
Spam

Verizon Blames School Text Provider In Dispute Over 'Spam' Fee (arstechnica.com) 46

Last week, Ars Technica reported that Verizon's new "spam" fee for texts sent from teachers to students might stop working on the network because of a dispute over texting fees that Verizon demanded from Remind, the company that operates the service. Now, it appears that Verizon "has backed down from its original position slightly, and ongoing negotiations could allow the free texting service to continue," reports Ars. From the report: As we reported Monday, the dispute involves Verizon and Remind, which makes a communication service used by teachers and youth sports coaches. Verizon is charging an additional fee, saying the money will be used to fund spam-blocking services. The fee would increase Remind's costs for sending texts to Verizon users from a few hundred thousand dollars to several million dollars per year, Remind said. Remind said it would absorb the cost in order to continue providing the paid version of its service. But most of Remind's 30 million users rely on the free version of the service, and Remind said it could no longer provide free text message notifications over Verizon's network unless the fee is reversed.

Verizon issued an announcement today, titled "App provider Remind threatens to eliminate a free texting service for K-12 education organizations (which will cost it nothing)." The title reflects a new offer Verizon said it made on Tuesday, which would reverse the fee for K-12 users of the free Remind service. "Verizon will not charge Remind fees as long as they don't begin charging K-12 schools, educators, parents and students using its free text message service," Verizon said. "Despite this offer, made Tuesday, Remind has not changed its position that it will stop sending free texts to Verizon customers who use the service regarding school closures, classroom activities and other critical information."
The report goes on to note that simply limiting the offer to K-12 users means the fee "would still be charged for preschools, day-care centers, and youth sports coaches who use the free Remind service."
Cloud

Cloudflare Under Fire For Allegedly Providing DDoS Protection For Terrorist Websites 98

Cloudflare is facing accusations that it's providing cybersecurity protection for at least seven terrorist organizations. "On Friday, HuffPost reported that it has reviewed numerous websites run by terrorist organizations and confirmed with four national security and counter-extremism experts that the sites are under the protection of Cloudflare's cybersecurity services," reports Gizmodo.

"Among Cloudflare's millions of customers are several groups that are on the State Department's list of foreign terrorist organizations, including al-Shabab, the Popular Front for the Liberation of Palestine, al-Quds Brigades, the Kurdistan Workers' Party (PKK), al-Aqsa Martyrs Brigade and Hamas -- as well as the Taliban, which, like the other groups, is sanctioned by the Treasury Department's Office of Foreign Assets Control (OFAC)," reports HuffPost.

"In the United States, it's a crime to knowingly provide tangible or intangible 'material support -- including communications equipment -- to a designated foreign terrorist organization or to provide service to an OFAC-sanctioned entity without special permission," the report continues. "Cloudflare, which is not authorized by the OFAC to do business with such organizations, has been informed on multiple occasions, dating back to at least 2012, that it is shielding terrorist groups behind its network, and it continues to do so." Gizmodo reports: The issue that HuffPost raises is whether Cloudflare is providing "material support" to sanctioned organizations. Some attorneys told HuffPost that it may be in violation of the law. Others, like the Electronic Frontier Foundation, argue that "material support" can and has been abused to silence speech. Cloudflare's general counsel, Doug Kramer, told Gizmodo over the phone that the company works closely with the U.S. government to ensure that it meets all of its legal obligations. He said that it is "proactive to screen for sanctioned groups and reactive to respond when its made aware of a sanctioned group" to which it may be providing services. HuffPost spoke with representatives from the Counter Extremism Project, who expressed frustration that they've sent four letters to Cloudflare over the last two years identifying seven terrorist-operated sites without receiving a reply. Kramer would not address any specific customers or situations when speaking with Gizmodo. He said that's simply company policy for reasons of protecting privacy.
Businesses

After 23 Years, IBM Sells Off Lotus Notes (techcrunch.com) 105

"IBM has agreed to sell select software products to HCL Technologies," writes Slashdot reader virtig01. "Included among these is everyone's favorite email and calendaring tool, Lotus Notes and Domino." TechCrunch reports: IBM paid $3.5 billion for Lotus back in the day. The big pieces here are Lotus Notes, Domino and Portal. These were a big part of IBM's enterprise business for a long time, but last year Big Blue began to pull away, selling the development part to HCL, while maintaining control of sales and marketing. This announcement marks the end of the line for IBM involvement. With the development of the platform out of its control, and in need of cash after spending $34 billion for Red Hat, perhaps IBM simply decided it no longer made sense to keep any part of this in-house. As for HCL, it sees an opportunity to continue to build the Notes/Domino business. "The large-scale deployments of these products provide us with a great opportunity to reach and serve thousands of global enterprises across a wide range of industries and markets," C Vijayakumar, president and CEO at HCL Technologies, said in a statement announcing the deal.
Businesses

High Score, Low Pay: Why the Gig Economy Loves Gamification (theguardian.com) 134

Ostracus writes: Using ratings, competitions and bonuses to incentivise workers isn't new -- but as I found when I became a Lyft driver, the gig economy is taking it to another level. [...] The language of choice, freedom, and autonomy saturate discussions of ride hailing. "On-demand companies are pointing the way to a more promising future, where people have more freedom to choose when and where they work," Travis Kalanick, the founder and former CEO of Uber, wrote in October 2015. "Put simply" he continued, "the future of work is about independence and flexibility." In a certain sense, Kalanick is right. Unlike employees in a spatially fixed worksite (the factory, the office, the distribution centre), rideshare drivers are technically free to choose when they work, where they work and for how long. They are liberated from the constraining rhythms of conventional employment or shift work. But that apparent freedom poses a unique challenge to the platforms' need to provide reliable, "on demand" service to their riders -- and so a driver's freedom has to be aggressively, if subtly, managed. One of the main ways these companies have sought to do this is through the use of gamification.

Simply defined, gamification is the use of game elements -- point-scoring, levels, competition with others, measurable evidence of accomplishment, ratings and rules of play -- in non-game contexts. Games deliver an instantaneous, visceral experience of success and reward, and they are increasingly used in the workplace to promote emotional engagement with the work process, to increase workers' psychological investment in completing otherwise uninspiring tasks, and to influence, or "nudge," workers' behaviour. This is what my weekly feedback summary, my starred ratings and other gamified features of the Lyft app did. There is a growing body of evidence to suggest that gamifying business operations has real, quantifiable effects. Target, the US-based retail giant, reports that gamifying its in-store checkout process has resulted in lower customer wait times and shorter lines. During checkout, a cashier's screen flashes green if items are scanned at an "optimum rate." If the cashier goes too slowly, the screen flashes red. Scores are logged and cashiers are expected to maintain an 88% green rating. In online communities for Target employees, cashiers compare scores, share techniques, and bemoan the game's most challenging obstacles.

Desktops (Apple)

Apple Confirms Its T2 Security Chip Blocks Some Third-Party Repairs of New Macs (theverge.com) 179

An anonymous reader shares a report from The Verge about Apple's new security-focused T2 chip found in the newest Mac computers. The introduction of the chip "has renewed concerns that Apple is trying to further lock down its devices from third-party repair services," The Verge reports. From the report: The T2 is "a guillotine that [Apple is] holding over" product owners, iFixit CEO Kyle Wiens told The Verge over email. That's because it's the key to locking down Mac products by only allowing select replacement parts into the machine when they've come from an authorized source -- a process that the T2 chip now checks for during post-repair reboot. "It's very possible the goal is to exert more control over who can perform repairs by limiting access to parts," Wiens said. "This could be an attempt to grab more market share from the independent repair providers. Or it could be a threat to keep their authorized network in line. We just don't know." Apple confirmed to The Verge that this is the case for repairs involving certain components on newer Macs, like the logic board and Touch ID sensor, which is the first time the company has publicly acknowledged the tool's use. But Apple could not provide a list of repairs that required this or what devices were affected. It also couldn't say whether it began this protocol with the iMac Pro's introduction last year or if it's a new policy instituted recently.

First revealed last month by MacRumors and Motherboard, both of which got their hands on an internal Apple document, the T2 chip could render a computer inoperable if, say, the logic board is replaced, unless the chip recognizes a special piece of diagnostic software has been run. That means if you wanted to repair certain key parts of your MacBook, iMac, or Mac mini, you would need to go to an official Apple Store or a repair shop that's part of the company's Authorized Service Provider (ASP) network. If you want to repair or rebuild portions of those devices on your own, you simply can't -- at least, according to this document. The parts affected, according to the document, are the display assembly, logic board, top case, and Touch ID board for the MacBook Pro, and the logic board and flash storage on the iMac Pro. It is also likely that logic board repairs on the new MacBook Air and Mac mini are affected, as well as the Mac mini's flash storage. Yet, the document, which is believed to have been distributed earlier this year, does not mention those products because they were unannounced at the time. Regardless, to replace those parts, a technician would need to run what's known as the AST 2 System Configuration suite, which Apple only distributes to Apple Stores and certified ASPs. So DIY shops and those out of the Apple network would be out of luck.

Operating Systems

Open Source BeOS Successor Haiku Releases R1/beta 1 (haiku-os.org) 40

Remember Haiku, the open source successor to the Be operating system? Long-time Slashdot reader GuerillaRadio quotes a new announcement from Haiku-os.org: It's been just about a month less than six years since Haiku's last release in November 2012 -- too long. As a result of such a long gap between releases, there are a lot more changes in this release than in previous ones, and so this document is weightier than it has been in the past. The notes are mostly organized in order of importance and relevance, not chronologically, and due to the sheer number of changes, thousands of smaller improvements simply aren't recognized here.

Please keep in mind that this is beta-quality software, which means it is feature complete but still contains known and unknown bugs. While we are mostly confident in its stability, we cannot provide assurances against data loss.

United States

FCC Angers Cities, Towns With $2 Billion Giveaway To Wireless Carriers (arstechnica.com) 131

An anonymous reader quotes a report from Ars Technica: The Federal Communications Commission's plan for spurring 5G wireless deployment will prevent city and town governments from charging carriers about $2 billion worth of fees. The FCC proposal, to be voted on at its meeting on September 26, limits the amount that local governments may charge carriers for placing 5G equipment such as small cells on poles, traffic lights, and other government property in public rights-of-way. The proposal, which is supported by the FCC's Republican majority, would also force cities and towns to act on carrier applications within 60 or 90 days. The FCC says this will spur more deployment of small cells, which "have antennas often no larger than a small backpack." But the commission's proposal doesn't require carriers to build in areas where they wouldn't have done so anyway.

The FCC plan proposes up-front application fees of $100 for each small cell and annual fees of up to $270 per small cell. The FCC says this is a "reasonable approximation of [localities'] costs for processing applications and for managing deployments in the rights-of-way." Cities that charge more than that would likely face litigation from carriers and would have to prove that the fees are a reasonable approximation of all costs and "non-discriminatory." But, according to Philadelphia, those proposed fees "are simply de minimis when measured against the costs that the City incurs to approve, support, and maintain the many small cell and distributed antenna system (DAS) installations in its public rights-of-way." Philadelphia said it "has already established a fee structure and online application process to apply for small cell deployment that has served the needs of its citizens without prohibiting or creating barriers to entry for infrastructure investment." The city has also negotiated license agreements for small cell installations with Verizon, AT&T, and other carriers.
In addition to Philadelphia, the Rural County Represenatives of California (RCRC), a group representing 35 rural California counties, also objects to the FCC plan. They told the FCC that its "proposed recurring fee structure is an unreasonable overreach that will harm local policy innovation."

"That is why many local governments have worked to negotiate fair agreements with wireless providers, which may exceed that number or provide additional benefits to the community," the RCRC wrote. "The FCC's decision to prohibit municipalities' ability to require 'in-kind' conditions on installation agreements is in direct conflict with the FCC's stated intent of this Order and further constrains local governments in deploying wireless services to historically underserved areas."
DRM

'It's Always DRM's Fault' (publicknowledge.org) 172

A social media post from Anders G da Silva, who accused Apple of deleting movies he had purchased from iTunes, went viral earlier this month. There is more to that story, of course. In a statement to CNET, Apple explained that da Silva had purchased movies while living in Australia, with his iTunes region set to "Australia." Then he moved to Canada, and found that the movies were no longer available for download -- due, no doubt, to licensing restrictions, including restrictions on Apple itself. While his local copies of the movies were not deleted, they were deleted from his cloud library. Apple said the company had shared a workaround with da Silva to make it easier for him to download his movies again. Public Knowledge posted a story Tuesday to weigh in on the subject, especially since today is International Day Against DRM. From the post: To that rare breed of person who carefully reads terms of service and keeps multiple, meticulous backups of important files, da Silva should have expected that his ability to access movies he thought he'd purchased might be cut off because he'd moved from one Commonwealth country to another. Just keep playing your original file! But DRM makes this an unreasonable demand. First, files with DRM are subject to break at any time. DRM systems are frequently updated, and often rely on phoning home to some server to verify that they can still be played. Some technological or business change may have turned the most carefully backed-up and preserved digital file into just a blob of unreadable encrypted bits.

Second, even if they are still playable, files with DRM are not very portable, and they might not fit in with modern workflows. To stay with the Apple and iTunes example, the old-fashioned way to watch a movie purchased from the iTunes Store would be to download it in the iTunes desktop app, and then watch it there, sync it to a portable device, or keep iTunes running as a "server" in your home where it can be streamed to devices such as the Apple TV. But this is just not how things are done anymore. To watch an iTunes movie on an Apple TV, you stream or download it from Apple's servers. To watch an iTunes movie on an iPhone, same thing. (And because this is the closed-off ecosystem of DRM'd iTunes movies, if you want to watch your movie on a Roku or an Android phone, you're just out of luck.)

[...] My takeaway is that, if a seller of DRM'd digital media uses words like "purchase" and "buy," they have at a minimum an obligation to continue to provide additional downloads of that media, in perpetuity. Fine print aside, without that, people simply aren't getting what they think they're getting for their money, and words like "rent" and "borrow" are more appropriate. Of course, there is good reason to think that even then people are not likely to fully understand that "buying" something in the digital world is not the same as buying something in the physical world, and more ambitious measures may be required to ensure that people can still own personal property in the digital marketplace. See the excellent work of Aaron Perzanowski and Jason Schultz on this point. But the bare minimum of "owning" a movie would seem to be the continued ability to actually watch it.

Graphics

Nvidia Scanner Brings One-Click Overclocking To Its GeForce RTX Graphics Cards (pcworld.com) 39

Nvidia's new "Scanner" tool for the company's newest GeForce RTX 2080 graphics cards will provide one-click overclocking. PCWorld reports: Nvidia Scanner isn't actually a tool you can download. Instead, it's an API that developers can implement, similar to how current GeForce overclocking software relies on Nvidia's NVAPI. Tom Peterson, Nvidia's director of technical marketing, says all of the major overclocking programs will implement Scanner. You simply press the Test button, and the software starts walking through your graphics card's volt frequency curve, running arithmetic tests all the while. If the overclock starts pushing too far, Nvidia Scanner will discover a math error before your card crashes. When that happens, Scanner ramps up your card's voltage and starts testing again. After about 20 minutes, Scanner will have a complete understanding of your RTX card's capabilities, and automatically generate an overclocking profile built to squeeze as much performance as possible out of it without crashing. Easy-peasy. PCWorld's Brad Chacos mentions a demonstration where "Nvidia's Tom Peterson showed Nvidia Scanner pushing the GeForce RTX 2080 -- which ships with a 1,710MHz boost clock -- all the way to 2,130MHz at 1,068mV."
Technology

Podcasting is Not Walled (Yet) (rakhim.org) 86

Rakhim Davletkaliyev, a software developer, writer and podcaster, recently launched two new podcasts. One of the things he was asked by people following the launches was "but how do I subscribe, it's not on iTunes/Google Podcasts?" He writes: Podcasts are simply RSS feeds with links to media files (usually mp3s). A podcast is basically a URL. And podcast clients are special browsers. They check that URL regularly and download new episodes if the content of the URL changes (new link added). That's it, no magic, no special membership or anything else required. The technology is pretty "stupid" in a good way.

Ever since tech companies started waging war against RSS, podcast distribution became visually RSS-free. What do you do to subscribe? Easy, just search in the app! For the majority of iOS users that app is Apple Podcasts, and recently Google made their own "default client" for Android -- Google Podcasts. It looks like podcast clients are similar to web browsers and just provide a way to consume content, but the underlying listings make them very different. Corresponding services are actually isolated catalogs. When you perform a search on Apple Podcasts, you aren't searching for podcasts. You are searching for Apple-approved podcasts. And if the thing you're looking for is not there, then... well, you get nothing.

Most Podcast clients still accept RSS. Apple Podcasts, iTunes, PocketCasts, OverCast, PodcastAddict. Google Play Music doesn't say anything explicitly, but you can just put RSS URL into the search field and it works. For now. I won't be surprised if these apps gradually and silently remove this feature.

Open Source

Interviews: Christine Peterson Answers Your Questions 79

You asked questions, we've got the answers!

Christine Peterson is a long-time futurist who co-founded the nanotech advocacy group the Foresight Institute in 1986. One of her favorite tasks has been contacting the winners of the institute's annual Feynman Prize in Nanotechnology, but she also coined the term "Open Source software" for that famous promotion strategy meeting in 1998.

Christine took some time to answer questions from Slashdot readers.
Google

Google Maps API Becomes 'More Difficult and Expensive' (govtech.com) 121

Government Technology reports: On July 16, Google Maps is going to make it more difficult and expensive to use its API, which could make custom maps that rely on the service less sustainable or even unfeasible for the people who made them... First, Google Maps is requiring all projects to have an official API key in order to work. If a user doesn't have a key, the quality of the map will likely be reduced, or it could simply stop working. Second, API keys will only work if they are attached to somebody's credit card. Google will charge that card if users exceed a certain number of API requests, which is different for different services. Google will provide users a free $200 credit toward those costs each month...

There are a couple places where the changes might have more of an impact. One is in the civic hacking space, where people often work with government data to create niche projects that aim for low costs, or are free so that as many people as possible can use them... "I think that's what scares people a little bit, it certainly scares me, this thought of having this API out there and not knowing how many people are going to use it," said Derek Eder, founder of the civic tech company DataMade. "I don't want to suddenly get a bill for $1,000."

There's at least three Open Source alternatives, and Geoawesomeness.com lists nine more.

Slashdot reader Jiri_Komarek also points out that Google's move was good news for its competitor, MapTiler. "Since Google announced the pricing change the number of our users increased by 200%," said Petr Pridal, head of the MapTiler team. "We expect more people to come as they get their first bill from Google."
Operating Systems

watchOS 5 Brings Automatic Workout Detection, Walkie-Talkie Mode, Podcast App To Apple Watch (digitaltrends.com) 50

At WWDC 2018, Apple announced several new features in watchOS 5 that will be coming to the Apple Watch later this year. Digital Trends summarizes all the big new additions including more watch faces and improved health tracking features: Apple is putting a huge emphasis on ensuring fitness tracking data is accurate in WatchOS 5. The company studied more than seven terabytes of fitness data from more than 12,000 participants to make sure its tracking measurements are on point. You'll also find a new competition mode on WatchOS 5. The mode allows you to enter a seven-day competition with a friend. WatchOS 5 also features new fitness modes. The Yoga mode will track your activity via the heart rate monitor while the Hiking mode will use your pace and elevation to better determine the number of calories burned. The Running mode now offers a custom pace alert, tracks your cadence and will even provide time data on the previous mile run. Finally, you'll see new start and end workout alerts.

WatchOS 5 also brings several awesome communications improvements. First off is the new Walkie-Talkie mode. With Walkie-Talkie, you can add friends to your Apple Watch and communicate with them directly by tapping the Talk button within the Walkie-Talkie app. Your Siri watch face will also get a huge update as well. The new Siri watch face will provide more information on your favorite sports teams, offer commute and traffic information, as well as heart rate.
Also available in watchOS 5 are Siri Shortcuts, an official Podcast app, and WebKit, which will let you view webpages from Messages or emails. You will also no longer need to say "Hey Siri" to activate Siri. Now you can simply raise your wrist to your mouth and Siri will automatically be listening.

Note: The original Apple Watch won't get watchOS 5's new features. You will need a Series 1 or newer timepiece.
Google

Does Gmail's New 'Confidential Mode' Make It Easier to Phish? (vortex.com) 82

Gmail's new confidential mode lets its users create "expiration dates" for emails, or require recipients to provide an SMS passcode. (And Google also claims they've removed the option to forward, copy, download or print messages.)

But Slashdot reader Lauren Weinstein warns that Google is also opening up a new vector for phishing emails: The problem arises since non-Gmail users cannot directly receive Gmail confidential mode messages. Instead...when a Gmail user wants to send a non-Gmail user such a message, the non-Gmail user is instead sent a link, that when clicked takes them to Google's servers where they can read the confidential mode message in their browser.

The potential risks for any service that operates in this way are obvious. Those of us working on Internet security and privacy have literally spent many years attempting to train users to avoid clicking on "to read the message, click here" links in emails that they receive. Criminals have simply become too adept at creating fraudulent emails that lead to phishing and malware sites.

Power

Your Future Home Might Be Powered By Car Batteries (bloomberg.com) 319

Increasingly utilities and automakers are wondering if they could use the batteries inside electric cars as storage for the entire public power grid. An anonymous reader shares a report: The idea, known as "vehicle-to-grid," is to someday have millions of drivers become mini electricity traders, charging up when rates are cheap and pumping energy back into the grid during peak hours or when the sun simply isn't shining. If it works -- and it's a big if -- renewable energy could get much cheaper and more widely used. "We really, really need storage in order to make better use of wind and solar power, and electric cars could provide it," said Daniel Brenden, an analyst who studies the electricity market at BMI Research in London. "The potential is so huge." Today, fewer than one percent of the world's vehicles are electric, but by 2040 more than half of all new cars will run on the same juice as televisions, computers and hair dryers, according to estimates by Bloomberg New Energy Finance. Once cars and everything else are fed from the same source, they can share the same plumbing.
Earth

Google's New 'Plus Codes' Are An Open Source, Global Alternative To Street Addresses (9to5google.com) 183

Google has developed a "simple and consistent addressing system that works across India and globally." Called "Plus Codes," the location-based digital addressing system is designed for people with addresses that are not easily located through conventional descriptors like street names or house numbers. That's half of the world's urban population, according to a World Bank estimate. 9to5Google reports: Notably, this open source solution composed of 10 characters works globally and can be incorporated by other products and platforms for free, with a developer page available here. It works offline and on print when overlaid as a grid on existing maps. Places that are close together share similar plus codes, while the system is identifiable by the "+" symbol in every address. "This system is based on dividing the geographical surface of the Earth into tiny 'tiled areas,' attributing a unique code to each of them," reports Google. "This code simply comprises a '6-character + City' format that can be generated, shared and searched by anyone -- all that's needed is Google Maps on a smartphone."

The first four characters are the area code, describing a region of roughly 100 x 100 kilometers. The last six characters are the local code, describing the neighborhood and the building, an area of roughly 14 x 14 meters -- about the size of one half of a basketball court. The area code is not needed when navigating within a town, while another optional character can be appended to provide additional accuracy down to a 3 x 3 meter region. Users of Google Maps in India will be able to easily find the plus code for any area in the app, while the mapping service along with Search will support the entry of the new coordinate system. Plus codes for any location can also be found with this tool.

Software

Ask Slashdot: What Is Your View On Forced Subscription-Only Software? 660

dryriver writes: All used to be well in the world of Digital Content Creation (DCC) until two very major DCC software makers -- Adobe and Autodesk -- decided to force a monthly subscription model on pretty much every software package they make to please Wall Street investors. Important 2D and 3D DCC software like Photoshop, After Effects, Premiere, InDesign, 3DMax, Maya, and Mudbox is now only available to "rent" from these companies. You simply cannot buy a perpetual license or boxed copy for this software at all anymore, and what makes matters worse is that if you stop paying your subscription, the software locks itself down, leaving you unable to open even old files you created with the software for later review. Also annoying is that subscription software constantly performs "license validity" checks over the internet (subscription software cannot be run offline for any great length of time, or on an air-gapped PC) and the software is increasingly tied into various cloud services these companies have set up. The DCC companies want you to save your -- potentially confidential -- project files on their servers, not on your own hard disk.

There are millions of DCC professionals around the world who'd love to be able to buy a normal, perpetual, offline-use capable license for these software tools. That is no longer possible. Adobe and Autodesk no longer provide that. What is your view on this "forced subscription" model? What would happen if all the major commercial software developers forced this model on everyone simultaneously? What if the whole idea of being able to "purchase" a perpetual license for ANY commercial software went away completely, and it was subscription only from that point on?

Slashdot Top Deals