An anonymous reader writes: CentOS team is pleased to announce the immediate availability of CentOS Linux 6.8 and install media for i386 and x86_64 Architectures. Release Notes for 6.8 are available here. Softpedia writes: "CentOS Linux 6.8 arrives today with major changes, among which we can mention the latest Linux 2.6.32 kernel release from upstream with support for storing up to 300TB of data on XFS filesystems. The VPN endpoint solution implemented in the NetworkManager network connection manager utility is now provided on the libreswan library instead of the Openswan IPsec implementation used in previous release of the OS, and it looks like the SSLv2 protocol has been disabled by default for the SSSD (System Security Services Daemon), which also comes with support for smart cards now." In addition, the new release comes with updated applications, including the LibreOffice 4.3.7 office suite and Squid 3.4 caching and forwarding web proxy, many of which are supporting the Transport Layer Security (TLS) 1.2 protocol, including Git, YUM, Postfix, OpenLDAP, stunnel, and vsftpd. The dmidecode open-source tool now supports SMBIOS 3.0.0, you can now pull kickstart files from HTTPS (Secure HTTP) sources, the NTDp (Network Time Protocol daemon) package has an alternative solution as chrony, SSLv3 has been disabled by default, and there's improved support for Hyper-V.

dcblogs writes this report from Computerworld: Former U.S. Secretary of State Hillary Clinton's decision to use a private email server ran afoul of the government's IT security and record retention requirements, according to a report by the department's inspector general released today. This use of a private email server did not go unnoticed within the Department of State's IT department. Two IT staff members who raised concerns about Clinton's use of a private server were told not to speak of it. Clinton was secretary of state from 2009 to 2013 and during that period she used a private email server in her New York home. This report by the Department of State's Inspector General about Clinton's use of a private server makes clear that rules and regulations were not followed. It says that Clinton would not have received approval for this server had she sought it. According to the current CIO, the report said, "Secretary Clinton had an obligation to discuss using her personal email account to conduct official business with their offices, who in turn would have attempted to provide her with approved and secured means that met her business needs." However, the report notes, according to these officials, The Bureau of Diplomatic Security and IRM (Bureau of Information Resource Management) "did not -- and would not -- approve her exclusive reliance on a personal email account to conduct Department business, because of the restrictions in the FAM [Foreign Affairs Manual] and the security risks in doing so."

An anonymous reader quotes a report from BGR: According to a new report from The Information, Apple is finally ready to let Siri grow up. Specifically, the publication relays that Apple will finally offer official Siri APIs to developers, thus paving the way for third-party integrations, the kind that Amazon Echo users can't seem to get enough of. Things like ordering an Uber or pizza are currently impossible, because Siri is locked down by Apple. What's more, Apple is also reportedly working on a standalone device meant to compete with the Amazon Echo and Google's recently unveiled Google Home. If that's true, it's huge news -- Apple has been lacking any kind of smart home hub until now, but a Siri-powered device would be a serious play to get Apple into our homes. Google is the latest tech giant to announce a virtual home assistant. It unveiled Google Home, a small round gadget with microphones and speakers that listen and respond to your questions and commands.

An anonymous reader writes: "It has been possible for a long time for developers to use CSS to append malicious content to the clipboard without a user noticing and thus fool them into executing unwanted terminal commands," writes Softpedia. "This type of attack is known as clipboard hijacking, and in most scenarios, is useless, except when the user copies something inside their terminal." Security researcher Dylan Ayrey published a new version of this attack last week, which uses only JavaScript as the attack medium, giving the attack more versatility and making it now easier to carry out. The attack is called Pastejacking and it uses Javascript to theoretically allow attackers to add their malicious code to the entire page to run commands behind a user's back when they paste anything inside the console. "The attack can be deadly if combined with tech support or phishing emails," writes Softpedia. "Users might think they're copying innocent text into their console, but in fact, they're running the crook's exploit for them."

An anonymous reader writes from a report via The Verge: Facebook is looking to improve its virtual-reality audio experience with the acquisition of Two Big Ears. Facebook is rereleasing Two Big Ears' "Spatial Workstation" software as the Facebook 360 Spatial Workstation, reports VentureBeat. The software is designed to "make VR audio succeed across all devices and platforms," and Two Big Ears developers will be merged with Facebook's Oculus team of employees. The acquisition of Two Big Ears is being made by Facebook and not Oculus -- the program is branded as a Facebook product, focused on 360-degree video and VR. The Spatial Workstation was first released last fall and was a platform for mixing audio that sounded realistically three-dimensional. Two Big Ears will provide "support in accordance with your current agreement" for the next 12 months to those who purchased a paid license to the old workstation. The company says it "will continue to be platform and device agnostic," not being locked into the Rift or Gear VR. Facebook did not disclose the sum of the acquisition. Two Big Ears was previously partnered with YouTube to help bring 360-degree live streaming and spatial audio to the site.

Trailrunner7 quotes a report from onthewire.io: The FBI is working to keep information contained in a key biometric database private and unavailable, even to people whose information is contained in the records. The database is known as the Next Generation Identification System (NGIS), and it is an amalgamation of biometric records accumulated from people who have been through one of a number of biometric collection processes. That could include convicted criminals, anyone who has submitted records to employers, and many other people. The NGIS also has information from agencies outside of the FBI, including foreign law enforcement agencies and governments. Because of the nature of the records, the FBI is asking the federal government to exempt the database from the Privacy Act, making the records inaccessible through information requests. From the report: "The bureau says in a proposal to exempt the database from disclosure that the NGIS should be exempt from the Privacy Act for a number of reasons, including the possibility that providing access 'could compromise sensitive law enforcement information, disclose information which would constitute an unwarranted invasion of another's personal privacy; reveal a sensitive investigative technique; could provide information that would allow a subject to avoid detection or apprehension; or constitute a potential danger to the health or safety of law enforcement personnel, confidential sources, and witnesses.'" RT released a similar report on the matter.

An anonymous reader writes: The licensing deal between Netflix and Disney for the rights to all new films that hit movie theaters in 2016 is nothing new. What is new is when exactly the deal will come into effect. "From September onwards, Netflix will become the exclusive U.S. pay TV home of the latest films from Disney, Marvel, Lucasfilms and Pixar," said Netflix content chief Ted Sarandos in a blog post. This will only apply to new theatrical releases because separate licensing deals are in place for other Disney content. The exclusive partnership with Disney does also extend into original programming. Netflix's partnership with Disney is part of a bigger plan to host more unique content that rival services do not offer.

An anonymous reader writes: Swiss researchers are unveiling "a not at all sinister-sounding system capable of predicting the quality of code produced by developers based on their biometric data," according to Motherboard. "By looking at the programmer as they program, rather than the code after the programmer is done writing it, the system described by the Zurich researchers finds code quality issues as the code is being produced... By using heart rate information, for example, they were able to quantify the difficulty a given programmer had in producing a piece of software. This information could then be used to identify likely sections of bad code..."

In a paper to be presented at an Austin engineering conference this week, the researchers write that "Delaying software quality concerns, such as defects or poor understandability of the code, increases the cost of fixing them," calling their system an improvement over code reviews, even automated ones. "Biometrics helped to automatically detect 50 percent of the bugs found in code reviews and outperformed traditional metrics in predicting all quality concerns found in code reviews."
On the other hand, Motherboard likened the stress level for programmers to "a coding interview that never ends where you also happen to be naked. "

"On the 25th anniversary of classic Visual Basic, return it to its programmers..." reads the plea at UserVoice.com from Sue Gee -- drawing 85 upvotes. "The new Microsoft claims to back open source, why not in this case? There is no need for Microsoft to do any more work on the code base - simply open source it and allow the community to keep it alive."

In an essay at i-programmer.info, Gee shares a video of young Bill Gates building an app with Visual Basic in 1991, and complains that in the 25 years since Microsoft has open sourced .NET Core and the .NET Compiler Platform Roslyn, "but it has explicitly refused to open source VB6." She notes that Friday Visual Basic's program manager announced a "Visual Basic Silver Anniversary Celebratiathon," promising he's reaching out to the VB team members from the last 25 years for a behind-the-scenes retrospective, and adding "this is a party, so feel free to be interactive."

"What the post glosses over is that this history was blighted by the fork in the road that was .NET and that many Visual Basic fans are highly unsatisfied that the programming environment they cherished is lost to them..." writes Gee. "Vote for the proposal not because you want to use VB6 or that you think it is worth having -- Vote for it because a company like Microsoft should not take a language away from its users."

A developer maintaining his company's "half-assed LAMP / WordPress stack pipeline for web and web application development" is considering something more scalable that could eventually be migrated into the cloud. Qbertino asks Slashdot: Have you moved from LAMP (PHP) to Node.js for custom product development and if so, what's your advice? What downsides of JS on the server and in Node.js have a real-world effect? Is callback hell really a thing? And what is the state of free and open-source Node products...? Is there any trend inside the Node.js camp on building a platform and CMS product that competes with the PHP camp whilst maintaining a sane architecture, or is it all just a ball of hype with a huge mess of its own growing in the background, Rails-style?
Condensing Qbertino's original submission: he wants to be able to quickly deliver "pretty, working, and half-way reliable products that make us money" -- and to build a durable pipeline. So leave your educated opinions in the comments. What did you experience moving to Node.js?

Last summer a developer created a plugin which made it possible to run snippets of COBOL code embedded in JavaScript using the Node.js interpreter. Now Slashdot reader techfilz writes: Romanian developer Bizau Ionica has engineered a software bridge called node.cobol which can execute Node.js scripts from within COBOL programs.
The link shows COBOL code executing a Node.js script that launches a Web server and creates ASCII art from a JPEG image -- in this case, Admiral Grace Hopper, who helped create COBOL in 1959. And Ars Technica points out the same developer has also built a Node.js bridge for FORTRAN.

At its I/O developer conference, Google had the message "Eat. Sleep. Code. Repeat." spread everywhere -- walls, t-shirts you name it. Dan Kim, a programmer at Basecamp, has shared an interesting view on the same. He says while he gets the "coding is awesome and we want to do it all the time!" enthusiasm from the company, but he doubts if that's the approach a programmer should take, adding that the company is wittingly or not promoting an "unhealthy perspective that programming is an all or nothing endeavor -- that to excel at it, you have to go all in." He writes: Whether it's racing cars, loving art, reading, hiking, spending time in nature, playing with their dog, running, gardening, or just hanging out with their family, these top-notch programmers love life outside of code. That's because they know that a truly balanced lifestyle -- one that gives your brain and your soul some space to breath non-programming airâS -- actually makes you a better programmer. Life outside of code helps nurture important qualities: inspiration, creative thinking, patience, flexibility, empathy, and many more. All of these skills make you a better programmer, and you can't fully realize them by just coding.

An anonymous reader writes: Moody's Investors Service released an analysis Friday that shows Apple, Microsoft, Alphabet, Cisco Systems, and Oracle are sitting on $504 billion, which is roughly 30% of the $1.7 trillion in cash and cash equivalents held by U.S. non-financial companies in 2015. Almost all of their earnings ($1.2 trillion) are stashed overseas in an effort to avoid paying taxes on moving profits back to the U.S. under the country's complex tax code. Apple has more than 90 percent of its money located outside of the U.S., according to its most recent filings. Moody's said in its report that "we expect that overseas cash balances will continue to grow unless tax laws are changed to encourage companies to repatriate money." Some of the other tech and Silicon Valley companies in the top 50 include Intel, Gilead Sciences, Facebook, Amazon, Qualcomm, eBay, Hewlett-Packard and Yahoo.

Alphabet CEO Larry Page says his company never considered getting permission from Oracle for using the latter's Java APIs in Android. Page, who appeared in a federal court, said Java APIs are open and free, which warrants them or anyone to use it without explicit permission from Oracle. From an Ars Technica report (edited for clarity): "But you did copy the code and copy the structure, sequence, and organization of the APIs?" Oracle attorney Peter Bicks asked, raising his voice. "I don't agree with 'copy code,'" Page said. "For me, declaring code is not code," Page said. "Have you paid anything to Oracle for using that intellectual property?" Bicks asked. "When Sun established Java, they established it as an open source thing," Page said. "I believe the APIs we used were pretty open. No, we didn't pay for the free and open things." [...] "Was Google seeking a license for Java?" Google lawyer Robert Van Nest asked. "Yes, and a broader deal around other things, like branding and cooperation," Page said. "After discussions with Sun broke off, did you believe Google needed a license for APIs?" Van Nest asked. "No, I did not believe that," Page said. "It was established industry practice that the API and just the headers of those things could be taken and re-implemented. [It must be done] very carefully, not to use any existing implementation of those systems. That's been done many, many times. I think we acted responsibly and carefully around these intellectual property issues."

An anonymous reader quotes a report from USA Today: Japan-based SoftBank Robotics announced Wednesday at Google I/O, the company's annual developer's conference, that it is opening a new Pepper-focused outpost in San Francisco and unveiling an Android SDK, or software development kit, in the hopes of enticing programmers to write code for the robot. Asked if SoftBank will roll out at SDK for iOS developers, Carlin says he wouldn't rule anything out but "for the moment Android is the pervasive language." Pepper is a white hard-plastic robot with humanoid features such as large eyes and arms as well as a display screen for a chest. The robot is said to be able to read human emotions by processing visual and vocal inputs through its various microphones and cameras. Its purpose is to be "much more than a robot, he is a genuine humanoid companion created to communicate with you in the most natural and intuitive way," according to the company's website. Pepper already has been deployed commercially in Japan, where it is used to greet customers at 140 SoftBank Mobile stores as well as help take orders at fast food eateries and discuss car model details at dealerships. Carlin says programmers working on Pepper-related tech will get access to "a best in class developer portal" that includes a developer forum, links to robotics workshops, access to SoftBank's engineering team and scientific details about Pepper. Google CEO Sundar Pichai announced the Tensor Processing Unit (TPU) at Google I/O, which the company claims advances machine learning capability by a factor of three generations.

An anonymous reader writes: Google unveiled the biggest update to Android Wear yet at Google I/O -- Android Wear version 2.0. Google VP of Engineering for Android Wear David Singleton said the new version represents a "holistic pass across the design of the whole system" and focuses on providing users more glanceable information, improved messaging tools (including support for keyboards, handwriting recognition and smart replies), as well as new fitness and wellness features. The design features improved Material Design aesthetics with an emphasis on color. By default, the navigation drawer is always at the top of the screen and notifications themselves will always show up at the bottom. Android Wear 2.0 features standalone apps that communicate directly over the Internet via Bluetooth, Wi-Fi, or cellular. Apps are no longer exclusively relying on a tethered phone or cloud syncing. There's a Complications API, which allows developers to pass raw data to watch faces. Wear 2.0 adds two new input methods: a swipe-style keyboard for typing and a handwriting recognition mode to sketch letters on your watch's screen to spell out messages. There have also been various Google Fit-related improvements to make Android Wear watches better fitness trackers. Android Wear 2.0 is available today as a developer preview, with the finished product being released this fall.

An anonymous reader writes: Google has announced a plethora of new features to Firebase, its cloud services provider that mobile developers can use to power their apps. TechCrunch reports: "In its previous incarnation, Firebase was somewhat similar to Facebook's now-defunct Parse in that it offered a database service, user authentication features and hosting tools. In this new version, Firebase takes many of Google's existing developer tools, like Google Cloud Messaging, and combines them with new and existing Firebase services. With this update, Google is turning Firebase into a unified app platform for its now 470,000 developers on the service (up from 110,000 when it acquired Firebase)." The new Firebase features deeply integrated analytics services, allowing developers to track specific parts of their apps with fine-grained events. Firebase can build audience segments and allow developers to analyze their behavior in even more detail than before, and view how their advertising campaigns are performing. With these audience segments, developers can make remote configuration changes in apps and take advantage of Firebase's new notifications system. This feature is based on Google Cloud Messaging, which is now changing its name to Firebase Cloud Messaging. Google is offering all Firebase users free and unlimited notifications with support for iOS, Android and the Web. They're also integrating its Cloud Test Lab into Firebase for testing mobile apps on real hardware, renaming it the Firebase Test Lab. Other new features include crash reporting, the ability to create dynamic deep links into your app, Firebase Invites for allowing app users to share referral codes, Firebase App Indexing for bringing app content into Google Search, and integration with Google's AdWords and AdMob advertising platforms. Last but not least, Google is introducing new pricing plans for Firebase, including a new free plan, a fixed-rate plan, and a pay-as-you go plan.

ErnieKey writes: At Google I/O today, the company announced what they are calling "Google Daydream." This is their upcoming virtual-reality platform that takes Google Cardboard several steps further. Daydream is a platform that will provide guidance for both hardware and software developers to create truly immersive Android N compatible VR hardware, games and experiences. The first hardware will be available this Fall. Companies such as HTC, Samsung, ASUS and others are working on smartphone handsets and VR headsets that are Daydream compatible. Game developers like EA and Ubisoft are already working on compatible games. Google is also releasing reference devices including a headset and controller to encourage developers and companies to develop content for Daydream. In addition to Daydream, Google announced Allo, Duo, Instant Apps, and a stable Android N developer preview.

msm1267 quotes a report from Threatpost: Two University of Texas academics have made what some experts believe is a breakthrough in random number generation that could have longstanding implications for cryptography and computer security. David Zuckerman, a computer science professor, and Eshan Chattopadhyay, a graduate student, published a paper in March that will be presented in June at the Symposium on Theory of Computing. The paper describes how the academics devised a method for the generation of high quality random numbers. The work is theoretical, but Zuckerman said down the road it could lead to a number of practical advances in cryptography, scientific polling, and the study of other complex environments such as the climate. "We show that if you have two low-quality random sources -- lower quality sources are much easier to come by -- two sources that are independent and have no correlations between them, you can combine them in a way to produce a high-quality random number," Zuckerman said. "People have been trying to do this for quite some time. Previous methods required the low-quality sources to be not that low, but more moderately high quality. We improved it dramatically." The technical details are described in the academics' paper "Explicit Two-Source Extractors and Resilient Functions."

An anonymous reader writes: Twitter will stop counting photos and links as part of its 140-character limit for tweets in as soon as two weeks, according to a source familiar with the matter. Right now, links take up 23 characters, even after Twitter automatically shortens them. In January, the Chief Executive Officer Jack Dorsey said the company was looking for new ways to display text on Twitter, and would experiment based on how people use the service. The company considered raising the limit of characters to as many as 10,000. The reason it abides by a 140-character limit is because it allows for tweets to be sent within a mobile text message, which was a common form of sending tweets back in 2006 when the site debuted. Earlier this month, it was reported Twitter blocked U.S. intelligence agencies from having access to a widely used data mining service it partly owns.