Google

Chrome Will Whack Website Bait-and-Switch Tactics (cnet.com) 76

Starting next year, Google's Chrome browser will stamp out some shenanigans that send you to a website you didn't expect. From a report: You probably don't like it when you navigate to a particular web page and then your browser unexpectedly jumps to another page -- an action called a redirect and something the website publisher didn't even want to happen. With Chrome 64, in testing now and due to ship early next year, Chrome will block that kind of bait and switch, Google said. "We've found that this redirect often comes from third-party content embedded in the page, and the page author didn't intend the redirect to happen at all," Google product manager Ryan Schoen said in a blog post. Chrome 64 will block the redirect action and instead show an information bar telling you what happened. That's not all. Chrome 65, due a few weeks later, will squelch another unwelcome action that can happen when you click a link and the website opens in a new tab while switching the existing tab to a page you didn't request.
The Almighty Buck

The Inside Story of Venture Capital's Messiest Breakup (wired.com) 20

mirandakatz writes: The Xfund started with a bold idea and ended with one of its founders banished from the country. At Backchannel, Jessi Hempel has the definitive story of what really happened after Patrick Chung and Hugo Van Vuuren went into business together, and how a promising venture went so wrong. It's an incredibly complex story, and no one agrees on the basic facts: As Hempel writes, 'What's clear is that from the start, they had clashing visions for what they were building. The tale of Van Vuuren and Chung's partnership and its demise offers a window into how power really works in Silicon Valley, where personal relationships are the most important currency and, in order to protect capital, investors are more likely to place their bets on people they know and trust.'
Security

Linux Has a USB Driver Security Problem (bleepingcomputer.com) 156

Catalin Cimpanu, reporting for BleepingComputer: USB drivers included in the Linux kernel are rife with security flaws that in some cases can be exploited to run untrusted code and take over users' computers. The vast majority of these vulnerabilities came to light on Monday, when Google security expert Andrey Konovalov informed the Linux community of 14 vulnerabilities he found in the Linux kernel USB subsystem. "All of them can be triggered with a crafted malicious USB device in case an attacker has physical access to the machine," Konovalov said. The 14 flaws are actually part of a larger list of 79 flaws Konovalov found in Linux kernel USB drivers during the past months. Not all of these 79 vulnerabilities have been reported, let alone patched. Most are simple DoS (Denial of Service) bugs that freeze or restart the OS, but some allow attackers to elevate privileges and execute malicious code.
Apple

Apple Plans To Start Selling Its AR Headset By 2020, Bloomberg Says (bloomberg.com) 63

Apple plans to have an augmented-reality headset complete by 2019, and begin selling it by 2020, Bloomberg reported on Wednesday citing multiple sources familiar with the matter. The report claims that Apple has assembled a team called "T288" with hundreds of engineers to work on an AR headset that doesn't require an iPhone to work. The team is reportedly testing their work with HTC Vive VR headsets and "a device similar to an Oculus Gear VR headset," with goal to build a fully integrated headset that includes a display and cameras powered by a custom chipset. Apple is looking into using its knowledge in designing custom silicon to create a more power-efficient chip for the headset, the report said, adding the chip could be similar to the integrated system used on the Apple Watch.
China

China Spreads Propaganda to U.S. on Facebook, a Platform it Bans at Home (nytimes.com) 103

Paul Mozur, reporting for the New York Times: China does not allow its people to gain access to Facebook, a powerful tool for disseminating information and influencing opinion. As if to demonstrate the platform's effectiveness, outside its borders China uses it to spread state-produced propaganda around the world, including the United States (Editor's note: the link could be paywalled; alternative source). So much do China's government and companies value Facebook that the country is Facebook's biggest advertising market in Asia, even as it is the only major country in the region that blocks the social network. A look at the Facebook pages of China Central Television, the leading state-owned broadcast network better known as CCTV, and Xinhua, China's official news agency, reveals hundreds of English-language posts intended for an English-speaking audience. Each quarter China's government, through its state media agencies, spends hundreds of thousands of dollars to buy Facebook ads, according to a person with knowledge of those deals, who was unauthorized to talk publicly about the company's revenue streams. China's propaganda efforts are in the spotlight with President Trump visiting the country and American lawmakers investigating foreign powers's use of technology to sway voters in the United States.
Bitcoin

2x Called Off: Bitcoin Hard Fork Suspended for Lack of Consensus (coindesk.com) 50

Alyssa Hertig, writing for CoinDesk: The organizers of a controversial bitcoin scaling proposal are suspending an attempt to increase the block size by way of a software upgrade. Known for its strong early support from bitcoin startups and mining pools, the plan, called Segwit2x, or simply 2x, was to trigger a block size increase at block 494784, expected to occur on or around November 16th. The suspension was announced today in an email, written by Mike Belshe, CEO and co-founder of bitcoin wallet software provider BitGo. One of the leaders of the Segwit2x project, he argued that the scaling proposal is too controversial to move forward. He wrote: "Unfortunately, it is clear that we have not built sufficient consensus for a clean block size upgrade at this time. Continuing on the current path could divide the community and be a setback to Bitcoin's growth. This was never the goal of Segwit2x."
Google

Google Wants Google Doodles Taught In Public School, Warns Kids They Best Behave 146

theodp writes: Well, this year's Hour of Code is almost upon us, and if Google has its way, K-12 schoolchildren across the nation will be learning computer science by creating Google Doodles with Scratch (lesson plan). Curiously, the introductory video for the Create Your Own Google Logo Hour of Code activity from the Google Computer Science Education Department sternly warns kids, "While it is okay to use the Google logo for your personal Doodle, it is not okay [emphasis Google's] to use it anyplace else or outside this activity." In addition to respecting its intellectual property, Google instructs kids that they are to follow the Scratch Community Guidelines when they create Google logos: "Please stay positive, friendly, and supportive towards others in the Scratch Community. Help us keep Scratch a place where people of different backgrounds and interests feel welcome to hang out and create together."
NASA

NASA Is Working With Uber on Its Flying Taxi Project 51

Ride-hailing service Uber on Wednesday took a step forward in its plan to make autonomous "flying taxis" a reality, signing a contract with NASA to develop the software to manage them. From a report: Uber said at the Web Summit tech conference in Lisbon that it signed a Space Act Agreement with NASA for the development of "unmanned traffic management." This is NASA's push to figure out how unmanned aerial systems (UAS), such as drones that fly at a low altitude, can operate safely. Uber wants to make vertical take-off and landing vehicles. That will allow their flying cars to take off and land vertically. They will fly at a low altitude. This is the start-up's first partnership with a U.S. federal government agency. NASA is also working with other companies to develop traffic management for these low altitude vehicles. "UberAir will be performing far more flights on a daily basis than it has ever been done before. Doing this safely and efficiently is going to require a foundational change in airspace management technologies," Jeff Holden, chief product officer at Uber, said in a statement on Wednesday. "Combining Uber's software engineering expertise with NASA's decades of airspace experience to tackle this is a crucial step forward for Uber Elevate."
Yahoo!

Former Yahoo CEO Marissa Mayer Apologizes For Data Breach, Blames Russians (reuters.com) 212

Former Yahoo chief executive officer Marissa Mayer apologized today for a pair of massive data breaches at Yahoo and blamed Russian agents on the growing number of incidents involving major U.S. companies. A reader shares a report: "As CEO, these thefts occurred during my tenure, and I want to sincerely apologize to each and every one of our users," she told the Senate Commerce Committee, testifying alongside the interim and former CEOs of Equifax and a senior Verizon Communications executive. "Unfortunately, while all our measures helped Yahoo successfully defend against the barrage of attacks by both private and state-sponsored hackers, Russian agents intruded on our systems and stole our users' data."
Chrome

'How Chrome Broke the Web' (tonsky.me) 283

Reader Tablizer writes (edited and condensed): The Chrome team "broke the web" to make Chrome perform better, according to Nikita Prokopov, a software engineer. So the story goes like this: there's a widely-used piece of DOM API called "addEventListener." Almost every web site or web app that does anything dynamic with JS probably depends on this method in some way. In 2016, Google came along and decided that this API was not extensible enough. But that's not the end of the story. Chrome team proposed the API change to add passive option because it allowed them to speed up scrolling on mobile websites. The gist of it: if you mark onscroll/ontouch event listener as passive, Mobile Google can scroll your page faster (let's not go into details, but that's how things are). Old websites continue to work (slow, as before), and new websites have an option to be made faster at the cost of an additional feature check and one more option. It's a win-win, right? Turned out, Google wasn't concerned about your websites at all. It was more concerned about its own product performance, Google Chrome Mobile. That's why on February 1, 2017, they made all top-level event listeners passive by default. They call it "an intervention." Now, this is a terrible thing to do. It's very, very, very bad. Basically, Chrome broke half of user websites, the ones that were relying on touch/scroll events being cancellable, at the benefit of winning some performance for websites that were not yet aware of this optional optimization. This was not backward compatible change by any means. All websites and web apps that did any sort of draggable UI (sliders, maps, reorderable lists, even slide-in panels) were affected and essentially broken by this change.
AMD

Raja Koduri, AMD's Radeon Tech Group Leader, Resigns (anandtech.com) 38

Ryan Smith, writing for AnandTech: On the day following what's perhaps one of the greatest (and oddest) product design wins for AMD's Radeon Technologies Group, a second bit of surprising news is coming out of AMD. Raja Koduri, the Senior VP and Chief Architect of the group, who has been its leader since the RTG was formed two years ago, has announced that he is resigning from the company, effective tomorrow. Word of Raja's resignation originally broke via an internal memo penned by Raja and acquired by Hexus. And while AMD will not confirm the validity of the memo, the company is confirming that Raja has decided to leave the company.
Wikipedia

Nearly All of Wikipedia Is Written By Just 1 Percent of Its Editors (vice.com) 224

From a report on Motherboard: According to the results of a recent study that looked at the 250 million edits made on Wikipedia during its first ten years, only about 1 percent of Wikipedia's editors have generated 77 percent of the site's content. "Wikipedia is both an organization and a social movement," Sorin Matei, the director of the Purdue University Data Storytelling Network and lead author of the study, told me on the phone. "The assumption is that it's a creation of the crowd, but this couldn't be further from the truth. Wikipedia wouldn't have been possible without a dedicated leadership." At the time of writing, there are roughly 132,000 registered editors who have been active on Wikipedia in the last month (there are also an unknown number of unregistered Wikipedians who contribute to the site). So statistically speaking, only about 1,300 people are creating over three-quarters of the 600 new articles posted to Wikipedia every day.
IOS

iOS 11 Passes 50 Percent Adoption In Under 2 Months (venturebeat.com) 133

An anonymous reader quotes a report from VentureBeat: After a longer wait than usual, Apple today finally released the first official numbers for iOS 11. The various figures and estimates released by marketing and research firms are no longer relevant, as we now know for certain that iOS 11 has passed the 50 percent mark in less than two months. In other words, the latest version of the company's mobile operating system is now on one in every two of its mobile devices. iOS 11 was released on September 13, meaning it took less than seven weeks to reach the majority of users that Apple tracks. While this is certainly impressive, keep in mind that iOS 10 took less than a month and iOS 9 took less than a week to hit the same adoption milestone. Sure, the number of iOS devices is growing, but Apple also cuts down the number allowed to get the latest updates.
Google

Google To Add Restaurant Wait Times To Google Search, Maps (techcrunch.com) 59

Google Search and Maps already show you the peak traffic times for your favorite restaurants, but it will soon show you the wait times as well. Google says the feature begins rolling out today, and will eventually expand to include grocery stores. TechCrunch reports: Google's new restaurant wait times also comes from the aggregated and anonymized data from users who opted in to Google Location History -- the same data that powers popular times, wait times and visit duration. In the case of restaurants, Google will now include a pop-up box that appears when you click on a time frame in the popular times' chart. The box shows the live or historical data labeled as "busy," "usually busy," "usually not busy," etc., along with the wait time. Below the popular times chart, there's also a section that helps users plan their visit by offering info on the peak wait times and duration. (e.g. "People typically spend 45 mins to 2 hr here.") The new wait time feature will be supported on nearly a million sit-down restaurant listings worldwide, initially in Google Search.
NASA

NASA Astronaut Dick Gordon, Pilot of Gemini and Apollo 12, Dies At 88 (astronautscholarship.org) 58

sconeu writes: Dick Gordon, pilot of Gemini 11 and command module pilot of Apollo 12, has died at the age of 88. Gordon was also slated to command the cancelled Apollo 18 mission. "Dick Gordon is an American hero, and a true renaissance man by any measure. He was an American naval officer and aviator, chemist, test pilot, NASA astronaut, professional football executive, oil and gas executive and generous contributor to worthy causes," said Curt Brown, board chairman of the Orlando-based Astronaut Scholarship Foundation and an astronaut and veteran of six space flights. "He was in a category all his own." The Astronaut Scholarship Foundation has a touching write-up that details Gordon's childhood and career successes. You can read the full article here.

Slashdot Top Deals