Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×
Android

Microsoft Is Adding Linux, Android, and Firmware Protections To Windows (arstechnica.com) 19

An anonymous reader quotes a report from Ars Technica: Microsoft is moving forward with its promise to extend enterprise security protections to non-Windows platforms with the general release of a Linux version and a preview of one for Android. The software maker is also beefing up Windows security protections to scan for malicious firmware. The Linux and Android moves -- detailed in posts published on Tuesday here, here, and here -- follow a move last year to ship antivirus protections to macOS. Microsoft disclosed the firmware feature last week. All the new protections are available to users of Microsoft Advanced Threat Protection and require Windows 10 Enterprise Edition. Public pricing from Microsoft is either non-existent or difficult to find, but according to this site, costs range from $30 to $72 per machine per year to enterprise customers. "We are just at the beginning of our Linux journey and we are not stopping here!" Tuesday's post announcing the Linux general availability said. "We are committed to continuous expansion of our capabilities for Linux and will be bringing you enhancements in the coming months."

The Android preview, meanwhile, provides several protections, including:

- The blocking of phishing sites and other high-risk domains and URLs accessed through SMS/text, WhatsApp, email, browsers, and other apps. The features use the same Microsoft Defender
- SmartScreen services that are already available for Windows so that decisions to block suspicious sites will apply across all devices on a network.
- Proactive scanning for malicious or potentially unwanted applications and files that may be downloaded to a mobile device.
- Measures to block access to network resources when devices show signs of being compromised with malicious apps or malware.
- Integration to the same Microsoft Defender Security Center that's already available for Windows, macOS, and Linux.
As for the new firmware protections, Microsoft's new offering via Microsoft Defender "scans Unified Extensible Firmware Interface, which is the successor to the traditional BIOS that most computers used during the boot process to locate and enumerate hardware installed," adds Ars. "The firmware scanner uses a new component added to virus protection already built into Defender."
Android

Microsoft Releases First Public Preview of its Defender Antivirus on Android (zdnet.com) 18

Starting today, customers of Microsoft's commercial antivirus product -- Defender Advanced Threat Protection (ATP) -- can install a first version of the product's Android port. From a report: The product, named "Microsoft Defender ATP for Android," was announced at the RSA security conference in February this year, and has reached a first public preview today. Companies that have contracted Microsoft Defender ATP protection have a new option in their dashboard where they can enable the feature and deploy an Android app to employees' devices.

This new Android app will work like a classic mobile antivirus product that can scan the phone for malicious apps and other malware, detect malicious and phishing sites while the user is browsing the web, and block users from accessing certain sites based on a predefined block-list. Microsoft says the Defender ATP for Android app also comes with hidden features, courtesy of its integration into the larger and more complex Defender ATP, Intune, and Configuration Manager platforms.

Firefox

Mozilla To Launch VPN Product 'in the Next Few Weeks' (zdnet.com) 73

An anonymous reader quotes a report from ZDNet: Mozilla has announced today that its highly anticipated VPN (virtual private network) service will launch later this summer, "in the next few weeks." The product has also been renamed from its original name of Firefox Private Network to its new brand of the "Mozilla VPN." The name change came after Mozilla expanded the VPN product from the initial Firefox extension to a full-device VPN, capable of routing traffic for the entire OS, including other browsers. Currently, the Mozilla VPN offers clients for Windows 10, Chromebooks, Android, and iOS devices. Mozilla said beta testers also requested a Mac client, which they plan to provide, along with a Linux app.
Programming

GitHub, Android, Python, Go: More Software Adopts Race-Neutral Terminology (zdnet.com) 413

"The terms 'allowlist' and 'blocklist' describe their purpose, while the other words use metaphors to describe their purpose," reads a change description on the source code for Android -- from over a year ago. 9to5Mac calls it "a shortened version of Google's (internal-only) explanation" for terminology changes which are now becoming more widespread.

And Thursday GitHub's CEO said they were also "already working on" renaming the default branches of code from "master" to a more neutral term like "main," reports ZDNet: GitHub lending its backing to this movement effectively ensures the term will be removed across millions of projects, and effectively legitimizes the effort to clean up software terminology that started this month.

But, in reality, these efforts started years ago, in 2014, when the Drupal project first moved in to replace "master/slave" terminology with "primary/replica." Drupal's move was followed by the Python programming language, Chromium (the open source browser project at the base of Chrome), Microsoft's Roslyn .NET compiler, and the PostgreSQL and Redis database systems... The PHPUnit library and the Curl file download utility have stated their intention to replace blacklist/whitelist with neutral alternatives. Similarly, the OpenZFS file storage manager has also replaced its master/slave terms used for describing relations between storage environments with suitable replacements. Gabriel Csapo, a software engineer at LinkedIn, said on Twitter this week that he's also in the process of filing requests to update many of Microsoft's internal libraries.

A recent change description for the Go programming language says "There's been plenty of discussion on the usage of these terms in tech. I'm not trying to have yet another debate." It's clear that there are people who are hurt by them and who are made to feel unwelcome by their use due not to technical reasons but to their historical and social context. That's simply enough reason to replace them.

Anyway, allowlist and blocklist are more self-explanatory than whitelist and blacklist, so this change has negative cost.

That change was merged on June 9th -- but 9to5Mac reports it's just one of many places these changes are happening. "The Chrome team is beginning to eliminate even subtle forms of racism by moving away from terms like 'blacklist' and 'whitelist.' Google's Android team is now implementing a similar effort to replace the words 'blacklist' and 'whitelist.'" And ZDNet reports more open source projects are working on changing the name of their default Git repo from "master" to alternatives like main, default, primary, root, or another, including the OpenSSL encryption software library, automation software Ansible, Microsoft's PowerShell scripting language, the P5.js JavaScript library, and many others.
Programming

New FreeBSD Code of Conduct (freebsd.org) 150

An anonymous reader writes: FreeBSD has has adopted a new LLVM-derived code of conduct. The code of conduct requires users to: be friendly and patient,
be welcoming,
be considerate,
be respectful,
be careful in the words that you choose and be kind to others,
when we disagree, try to understand why.

This isn't an exhaustive list of things that you can't do. Rather, take it in the spirit in which it's intended - a guide to make it easier to communicate and participate in the community. This code of conduct applies to all spaces managed by the FreeBSD project. This includes online chat, mailing lists, bug trackers, FreeBSD events such as the developer meetings and socials, and any other forums created by the project that the community uses for communication. It applies to all of your communication and conduct in these spaces, including emails, chats, things you say, slides, videos, posters, signs, or even t-shirts you display in these spaces. In addition, violations of this code outside these spaces may, in rare cases, affect a person's ability to participate within them, when the conduct amounts to an egregious violation of this code.

Open Source

OpenZFS Removed Offensive Terminology From Its Code (arstechnica.com) 504

An anonymous reader quotes a report from Ars Technica: On Wednesday evening, ZFS founding developer Matthew Ahrens submitted what should have been a simple, non-controversial pull request to the OpenZFS project: wherever possible without causing technical issues, the patch removed references to "slaves" and replaced them with "dependents." This patch in question doesn't change the way the code functions -- it simply changes variable names in a way that brings them in conformance with Linux upstream device-mapper terminology, in 48 total lines of code (42 removed and 48 added; with one comment block expanded slightly to be more descriptive). But this being the Internet, unfortunately, outraged naysayers descended on the pull request, and the comments were quickly closed to non-contributors. I first became aware of this as the moderator of the r/zfs subreddit where the overflow spilled once comments on the PR itself were no longer possible. "The horrible effects of human slavery continue to impact society," writes Ahrens in his pull request. "The casual use of the term 'slave' in computer software is an unnecessary reference to a painful human experience." Ahrens' pull request has been reviewed by fellow lead developers Brian Behlendorf and Ryan Moeller and merged into the OpenZFS project repository.
China

Huawei Hid Business Operation in Iran After Reuters Reported Links To CFO (reuters.com) 54

China's Huawei acted to cover up its relationship with a firm that had tried to sell prohibited U.S. computer gear to Iran, after Reuters in 2013 reported deep links between the firm and the telecom-equipment giant's chief financial officer, newly obtained internal Huawei documents show. From the report: Huawei has long described the firm -- Skycom Tech -- as a separate local business partner in Iran. Now, documents obtained by Reuters show how the Chinese tech titan effectively controlled Skycom. The documents, reported here for the first time, are part of a trove of internal Huawei and Skycom Iran-related business records -- including memos, letters and contractual agreements -- that Reuters has reviewed. One document described how Huawei scrambled in early 2013 to try to "separate" itself from Skycom out of concern over trade sanctions on Tehran. To that end, this and other documents show, Huawei took a series of actions -- including changing the managers of Skycom, shutting down Skycom's Tehran office and forming another business in Iran to take over tens of millions of dollars worth of Skycom contracts.

The revelations in the new documents could buttress a high-profile criminal case being pursued by U.S. authorities against Huawei and its chief financial officer, Meng Wanzhou, who is also the daughter of Huawei's founder. The United States has been trying to get Meng extradited from Canada, where she was arrested in December 2018. A Canadian judge last week allowed the case to continue, rejecting defense arguments that the U.S. charges against Meng do not constitute crimes in Canada. A U.S. indictment alleges that Huawei and Meng participated in a fraudulent scheme to obtain prohibited U.S. goods and technology for Huawei's Iran-based business via Skycom, and move money out of Iran by deceiving a major bank. The indictment alleges that Skycom was an "unofficial subsidiary" of Huawei, not a local partner.

Democrats

Joe Biden Doesn't Like Trump's Twitter Order, But Still Wants To Revoke Section 230 (theverge.com) 223

Former Vice President Joe Biden still wants to repeal the pivotal internet law that provides social media companies like Facebook and Twitter with broad legal immunity over content posted by their users, a campaign spokesperson told The Verge. Still, the campaign emphasized key disagreements with the executive order signed by the president earlier this week. From a report: Earlier this year, Biden told The New York Times that Section 230 of the Communications Decency Act should be "revoked, immediately." In recent days, President Donald Trump has reinvigorated a controversial debate over amending the foundational internet law after Twitter fact-checked one of his tweets for the first time. Over the last year, Trump and other congressional Republicans have grown concerned over the false idea that social media platforms actively moderate against conservative speech online. Trump turned his threats into action Thursday, signing an executive order that could pare back platform liability protections under Section 230.

In a statement Thursday responding to the order, Biden campaign spokesperson Bill Russo said that "it will not be the position of any future Biden Administration ... that the First Amendment means private companies must provide a venue for, and amplification of, the president's falsehoods, lest they become the subject of coordinated retaliation by the federal government." Still, Biden's position on Section 230 remains unchanged.

Microsoft

Microsoft's Jeff Teper: Teams 'Will Be Even Bigger Than Windows' 105

An anonymous reader writes: Jeff Teper, CVP for Microsoft 365, has a vision for the company's Office 365 chat-based collaboration tool that competes with Slack, Facebook's Workplace, and Google Chat. In terms of reach, Teper wants Microsoft Teams to eclipse Windows. (Windows 10 runs on over 1 billion monthly active devices.)

Our interview took place a day after Microsoft concluded its online-only Build 2020 developer conference, where the company gave business developers new tools to build Teams apps. Microsoft launched a Visual Studio and Visual Studio Code extension for Teams in preview, introduced new integrations between its Power Platform and Teams, and announced a custom app submission process to help IT admins. Teper was happy to cover a range of Teams topics, including metrics, growth, competitors, consumer positioning, machine learning, and of course dealing with the increased demand during the coronavirus pandemic.
Earth

Pandemic Brings Huge Spike In Demand For Plant-Based Meat Alternatives (nytimes.com) 130

Food safety concerns amid the coronavirus pandemic, along with "changing consumer preferences," are "contributing to a shift toward plant-based food options," reports CNBC, citing alternative meat makers in Asia.

The New York Times shares some specifics, including statistics from Nielsen showing that from April 12 to May 9, demand for uncooked vegan products jumped 53%. To meet the demand, Impossible Foods has been hiring more workers, increasing pay and adding more shifts. Beyond Meat reported record sales in the first quarter of this year... [F]or the first time, plant-based meats are often competitive in price with ground beef, and sometimes easier to find, as fears of meat shortages prompt bulk buying... Impossible Foods, which before the pandemic sold more of its products in restaurants than in grocery stores, has expanded its retail footprint. Chief executive, Pat Brown said his products are now sold in more than 3,000 stores, up from fewer than 200 in January.

In the first quarter of the year, Beyond Meat, whose stock is publicly traded, reported net revenue of $97.1 million, an increase of 141 percent over last year. Its products are now in 25,000 grocery stores nationwide, and the company recently expanded into China. "We were saying that by 2030, Beyond Meat could have a $1 billion in sales," said Alexia Howard, the senior research analyst of U.S. food at Bernstein, an equity research group. "Now, we're saying by the end of 2020, which is only 18 months later."

Education

Students Are Failing AP Tests Because the College Boards Can't Handle HEIC Images (theverge.com) 204

Many high school students around the country completed Advanced Placement tests online last week but were unable to submit them at the end because the testing portal doesn't support HEIC images -- the default format on iOS devices and some newer Android phones. The Verge reports: For the uninitiated: AP exams require longform answers. Students can either type their response or upload a photo of handwritten work. Students who choose the latter option can do so as a JPG, JPEG, or PNG format according to the College Board's coronavirus FAQ. But the testing portal doesn't support the default format on iOS devices and some newer Android phones, HEIC files. HEIC files are smaller than JPEGs and other formats, thus allowing you to store a lot more photos on an iPhone. Basically, only Apple (and, more recently, Samsung) use the HEIC format -- most other websites and platforms don't support it. Even popular Silicon Valley-based services, such as Slack, don't treat HEICs the same way as standard JPEGs.

[Nick Bryner, a high school senior in Los Angeles] says many of his classmates also tried to submit iPhone photos and experienced the same problem. The issue was so common that his school's AP program forwarded an email from the College Board to students on Sunday including tidbits of advice to prevent submission errors. "What's devastating is that thousands of students now have an additional three weeks of stressful studying for retakes," Bryner said. The email Bryner received doesn't mention the HEIC format, though it does link to the College Board's website, which instructs students with iPhones to change their camera settings so that photos save as JPEGs rather than HEICs. The company also linked to that information in a tweet early last week.
In a statement emailed to The Verge, the College Board said that "the vast majority of students successfully completed their exams" in the first few days of online testing, "with less than 1 percent unable to submit their responses." The company also noted that "We share the deep disappointment of students who were unable to submit responses."
Microsoft

Microsoft Debuts Windows Package Manager For Your Dev Environment (venturebeat.com) 50

An anonymous reader quotes a report from VentureBeat: It's finally happening. Microsoft is giving developers a command line interface to install their favorite tools. That's right -- at Build 2020 today, Microsoft announced Windows Package Manager in preview. This is not simply about helping developers build for Windows. It's about helping developers and businesses embrace Windows. Microsoft is on a mission to get developers to love using Windows over macOS and Linux. Part of that mission involves releasing tools like Windows Terminal for enterprises and improving WSL for anyone who needs Linux while they code. Another part is helping developers (and IT admins) set up their Windows environments as effortlessly as possible. In a similar vein, Microsoft today also threw in highly requested features for PowerToys: Run and Keyboard Remapper. But the former is definitely the bigger news.

Windows Package Manager is a command line interface for searching, viewing, and installing commonly used developer tools. Developers list their applications in a GitHub repository; the package manager grabs and installs them. Even better, Windows Package Manager is open source -- Microsoft is asking for developers to help improve it.

Microsoft

Microsoft Launches Windows Terminal 1.0, Unveils GPU Support and Linux GUI Apps in WSL (venturebeat.com) 117

At Build 2020 today, Microsoft gave developers a slew of new tools to coax them into using Windows over macOS or Linux. From a report: Windows Terminal is now out of preview for enterprises, and Windows Subsystem for Linux (WSL) 2 is getting support for GPUs, Linux GUI apps, and a simplified install experience. Microsoft even released a Windows Package Manager in preview. Windows 10 runs on 1 billion monthly active devices (PCs, Xbox One consoles, and HoloLens devices), making it a massive platform for developers to target. [...] Microsoft today released Windows Terminal 1.0, which means it is stable for enterprise use. The open source application features multiple tabs, panes, tear-away windows, shortcuts, Unicode and UTF-8 character support, emojis, ligatures, extensions, GPU-accelerated text rendering engine, and custom themes, styles, and configurations. Windows Terminal is for users of PowerShell, Cmd, WSL, and other command-line tools. Microsoft also unveiled WSL improvements today, including support for GPUs, Linux GUI apps, and a simplified install experience. WSL is a compatibility layer for running Linux binary executables natively on Windows. Microsoft first shared it was working on WSL 2 a year ago at Build 2019. WSL 2 is slated to arrive in the next major Windows 10 update coming later this month (brilliantly called the Windows 10 May 2020 Update), but it won't have these new features. In the second half of the year, WSL 2 will get support for GPU compute workflows.
Businesses

FedEx, Microsoft Are Teaming Up To Deliver Packages, Widening Gap with Amazon (cnbc.com) 45

Microsoft and FedEx announced a joint, multi-year partnership on Monday that the pair believe could help "transform commerce" through FedEx's logistics network and Microsoft's cloud. From a report: The two said their first service, called FedEx Surround, will give real-time analytics into supply chain and delivery, so companies could potentially better ship goods. The companies did not disclose the full nature of the partnership, including how much FedEx will be paying Microsoft to use its Azure cloud technology. But the partnership represents yet another example of Amazon rivals choosing to go with Microsoft's cloud offering over the cloud computing market leader Amazon Web Services (AWS). Amazon and FedEx have been increasingly competitive with each other as Amazon invests heavily in building out its own shipping network. FedEx announced last year that it would end its ground-delivery contract with Amazon.

Slashdot Top Deals

One man's constant is another man's variable. -- A.J. Perlis

Working...