×
Google

Google Brings 'Nearby Share' To Windows, Making It Easy To Transfer Files (arstechnica.com) 25

Google is bringing Android's "Nearby Share" feature to the desktop with a new Windows app. Google says the new program will make sharing between Windows and Android easier, letting you send files over in just a few clicks and taps. From a report: Google's Nearby Share has been built into Android for a few years now and allows you to locally transfer files over Wi-Fi, with the initial device-pairing happening over Bluetooth. Nearby share has been kind of tough to use in real life, since most people share files over the Internet. And for personal use, most people only have one Android device, their phone, so there has been nothing to share files with. A ton of Android users have Windows PCs, though, so for many this will be the first time Nearby Share has an actual use. Using the app is easy. Just download it from the Android website and click a few "next" buttons in the installer. You need a 64-bit Windows PC (not ARM, ironically) with Bluetooth and Wi-Fi. From there you can easily share by dragging and dropping on Windows or by using the Android "share" button and hitting "Nearby Share." You have the option of signing in to the Windows app or not. If you don't you'll need to manually approve every transaction on both the phone and PC. If you sign in, you can set up auto-accept from yourself, anyone in your contacts, or the probably not advisable "everyone" option.
Privacy

Tor Project's New Privacy-Focused Browser Doesn't Use the Tor Network (theverge.com) 24

The Tor Project, the organization behind the anonymous network and browser, is helping launch a privacy-focused browser that's made to connect to a VPN instead of a decentralized onion network. From a report: It's called the Mullvad browser, named after the Mullvad VPN company it's partnered with on the project, and it's available for Windows, Mac, or Linux. The Mullvad browser's main goal is to make it harder for advertisers and other companies to track you across the internet. It does this by working to reduce your browser's "fingerprint," a term that describes all the metadata that sites can collect to uniquely identify your device.
AI

YouTuber Tricks ChatGPT Into Generating Windows 95 Keys 51

A YouTuber has published a video where he tricks ChatGPT into generating usable Windows 95 activation keys. Tom's Hardware reports: After asking Open AI's chatbot directly for Windows 95 keys, he received an expected reasoned refusal. YouTuber Enderman then asked the same thing but from a different angle. The result was a success which was somewhat limited by ChatGPT's ability to process natural language requests into formulas. [...] Some of the tested results were checked by attempting to activate a fresh Windows 95 install in a virtual machine. While the keys passed a casual inspection, it turns out that only about 1-in-30 keys seem to work as expected.

So what is the problem with these keys? Enderman complains that "the only issue keeping ChatGPT from successfully generating valid Windows 95 keys almost every attempt is the fact that it can't count the sum of digits and it doesn't know divisibility." In the five-digit string divisible by seven section, the AI appears to provide a stream of random numbers that don't pass this simple mathematical test.
The report adds: "[W]hile quizzing ChatGPT about key generating may be fun, it would have probably been more productive to manipulate the AI into writing a Python script to generate a conforming key or to DIY it."
Windows

Steam Will Require Windows 10 or Later Next Year (engadget.com) 100

Valve announced today that Steam will require Windows 10 or later on January 1, 2024. The reason? Google Chrome. PC Gamer reports: "The newest features in Steam rely on an embedded version of Google Chrome, which no longer functions on older versions of Windows," Valve's typically curt announcement reads. "In addition, future versions of Steam will require Windows feature and security updates only present in Windows 10 and above." January 1, 2024 is the day of doom for Steam on the old Windows versions. "After that date, the Steam Client will no longer run on those versions of Windows. In order to continue running Steam and any games or other products purchased through Steam, users will need to update to a more recent version of Windows."
Windows

Microsoft Plans Major Platform Upgrades for 'Windows 12' That Will Modernize the OS With AI and Faster Updates (windowscentral.com) 143

Windows Central reports: According to my sources who are familiar with Microsoft's plans, the company is once again hard at work on a new project internally that's designed to modernize the Windows platform with many of the same innovations it was working on for Windows Core OS, but with a focus on native compatibility for legacy Win32 applications on devices where it makes sense. The project is codenamed CorePC and is designed to be a modular and customizable variant of Windows for Microsoft to leverage different form factors with. Not all Windows PCs need the full breadth of legacy Win32 app support, and CorePC will allow Microsoft to configure "editions" of Windows with varying levels of feature and app compatibility.

The big change with CorePC versus the current shipping version of Windows is that CorePC is state separated, just like Windows Core OS. State separation enables faster updates and a more secure platform via read-only partitions that are inaccessible to the user and third-party apps, just like on iPadOS or Android. [...] CorePC splits up the OS into multiple partitions, which is key to enabling faster OS updates. State separation also enables faster and more reliable system reset functionality, which is important for Chromebook compete devices in the education sector.

[...] My sources tell me CorePC will allow Microsoft to finally deliver a version of Windows that truly competes with Chromebooks in OS footprint, performance, and capabilities. [...] Microsoft is also working on a version of CorePC that meet the current feature set and capabilities of Windows desktop, but with state separation enabled for those faster OS updates and improved security benefits. The company is working on a compatibility layer codenamed Neon for legacy apps that require a shared state OS to function, too. Lastly, I hear that Microsoft is experimenting with a version of CorePC that's "silicon-optimized," designed to reduce legacy overhead, focus on AI capabilities, and vertically optimize hardware and software experiences in a way similar to that of Apple Silicon. Unsurprisingly, AI experiences are a key focus for Windows going into 2024.

Microsoft

Microsoft Says Its New Version of Teams Is Twice As Fast (cnbc.com) 86

Microsoft said Monday it is starting to roll out a faster new version of its Teams communication app for Windows to commercial clients enrolled in a preview program. CNBC reports: The software will become available to all customers later this year, and Microsoft also promises new versions of Teams for Mac and the web. The new version also includes enhancements meant to simplify Teams, building on the more than 400 feature updates Microsoft delivered last year, some of them meant to help Microsoft catch up with rivals. Competition comes from the likes of Cisco, Google, Salesforce-owned Slack and Zoom. Instead of displaying a kind of ribbon of functions for a chat, Teams will hide several options behind a plus sign that people can click on. It's a concept people have become accustomed to on other messaging applications. For example, in Slack, users can upload documents or set reminders after clicking on a plus sign under the area where they type messages.

During Teams video calls, the software will show every participant on screen in a box of the same size, rather than giving more space to participants with their cameras on. Until now, Teams calls have sometimes resembled Piet Mondrian paintings characterized by their squares and rectangles of varying sizes and colors. Microsoft is also adjusting Teams so that people who belong to multiple organizations can more easily stay on top of what's going on. "Instead of logging in and out of different tenants and accounts, you can now stay signed in across them all -- receiving notifications no matter which one you are currently using," [Jeff Teper, president of collaborative apps and platforms at Microsoft] wrote in a blog post.

AI

Bill Gates Predicts 'The Age of AI Has Begun' (gatesnotes.com) 221

Bill Gates calls the invention of AI "as fundamental as the creation of the microprocessor, the personal computer, the Internet, and the mobile phone," predicting "Entire industries will reorient around it" in an essay titled "The AI Age has Begun." In my lifetime, I've seen two demonstrations of technology that struck me as revolutionary. The first time was in 1980, when I was introduced to a graphical user interface — the forerunner of every modern operating system, including Windows.... The second big surprise came just last year. I'd been meeting with the team from OpenAI since 2016 and was impressed by their steady progress. In mid-2022, I was so excited about their work that I gave them a challenge: train an artificial intelligence to pass an Advanced Placement biology exam. Make it capable of answering questions that it hasn't been specifically trained for. (I picked AP Bio because the test is more than a simple regurgitation of scientific facts — it asks you to think critically about biology.) If you can do that, I said, then you'll have made a true breakthrough.

I thought the challenge would keep them busy for two or three years. They finished it in just a few months. In September, when I met with them again, I watched in awe as they asked GPT, their AI model, 60 multiple-choice questions from the AP Bio exam — and it got 59 of them right. Then it wrote outstanding answers to six open-ended questions from the exam. We had an outside expert score the test, and GPT got a 5 — the highest possible score, and the equivalent to getting an A or A+ in a college-level biology course. Once it had aced the test, we asked it a non-scientific question: "What do you say to a father with a sick child?" It wrote a thoughtful answer that was probably better than most of us in the room would have given. The whole experience was stunning.

I knew I had just seen the most important advance in technology since the graphical user interface.

Some predictions from Gates:
  • "Eventually your main way of controlling a computer will no longer be pointing and clicking or tapping on menus and dialogue boxes. Instead, you'll be able to write a request in plain English...."
  • "Advances in AI will enable the creation of a personal agent... It will see your latest emails, know about the meetings you attend, read what you read, and read the things you don't want to bother with."
  • "I think in the next five to 10 years, AI-driven software will finally deliver on the promise of revolutionizing the way people teach and learn. It will know your interests and your learning style so it can tailor content that will keep you engaged. It will measure your understanding, notice when you're losing interest, and understand what kind of motivation you respond to. It will give immediate feedback."
  • "AIs will dramatically accelerate the rate of medical breakthroughs. The amount of data in biology is very large, and it's hard for humans to keep track of all the ways that complex biological systems work. There is already software that can look at this data, infer what the pathways are, search for targets on pathogens, and design drugs accordingly. Some companies are working on cancer drugs that were developed this way."
  • AI will "help health-care workers make the most of their time by taking care of certain tasks for them — things like filing insurance claims, dealing with paperwork, and drafting notes from a doctor's visit. I expect that there will be a lot of innovation in this area.... AIs will even give patients the ability to do basic triage, get advice about how to deal with health problems, and decide whether they need to seek treatment."

AI

Developer Builds a ChatGPT Client for MS-DOS (yeokhengmeng.com) 54

"With the recent attention on ChatGPT and OpenAI's release of their APIs, many developers have developed clients for modern platforms to talk to this super smart AI chatbot," writes maker/retro coding enthusiast yeokm1 . "However I'm pretty sure almost nobody has written one for a vintage platform like MS-DOS."

They share a blog post with all the details — including footage of their client ultimately running on a vintage IBM PC from 1984 (with a black and orange monitor and those big, boxy keys). "3.5 years ago, I wrote a Slack client to run on Windows 3.1," the blog post explains. "I thought to try something different this time and develop for an even older platform as a challenge."

One challenge was just finding a networking API for DOS. But everything came together, with the ChatGPT-for-DOS app written using Visual Studio Code text editor (testing on a virtual machine running DOS 6.22), parsing the JSON output from OpenAI's Chat Completion API. "And before you ask, I did not use ChatGPT for help to code this app in any way," the blog post concludes. But after the app was working, he used it to ask ChatGPT how one would build such an app — and ChatGPT erroneously suggested breezily that he just try accessing OpenAI's Python API from the DOS command line.

"What is the AI smoking...?"
Programming

'Docker is Deleting Open Source Organisations' 34

Alex Ellis: Earlier this month, Docker sent an email to any Docker Hub user who had created an "organisation", telling them their account will be deleted including all images, if they do not upgrade to a paid team plan. The email contained a link to a tersely written PDF (since, silently edited) which was missing many important details which caused significant anxiety and additional work for open source maintainers. As far as we know, this only affects organisation accounts that are often used by open source communities. There was no change to personal accounts. Free personal accounts have a a 6 month retention period. Why is this a problem?

1. Paid team plans cost 420 USD per year (paid monthly)
2. Many open source projects including ones I maintain have published images to the Docker Hub for years
3. Docker's Open Source program is hostile and out of touch

Why should you listen to me? I was one of the biggest advocates around for Docker, speaking at their events, contributing to their projects and being a loyal member of their voluntary influencer program "Docker Captains". I have written dozens if not hundreds of articles and code samples on Docker as a technology. I'm not one of those people who think that all software and services should be free. I pay for a personal account, not because I publish images there anymore, but because I need to pull images like the base image for Go, or Node.js as part of my daily open source work. When one of our OpenFaaS customers grumbled about paying for Docker Desktop, and wanted to spend several weeks trying to get Podman or Rancher Desktop working, I had to bite my tongue. If you're using a Mac or a Windows machine, it's worth paying for in my opinion. But that is a different matter. Having known Docker's new CTO personally for a very long time, I was surprised how out of touch the communication was.
More: Docker: We apologize. We did a terrible job announcing the end of Docker Free Teams..
Windows

Microsoft Wants Changing Default Apps In Windows To Be Less of a Mess (arstechnica.com) 80

An anonymous reader quotes a report from Ars Technica: One of the enduring legacies of the '90s browser wars has been an outsize attention to how Microsoft handles default app settings in Windows, especially browser settings. The company plans to make it more straightforward to change your app defaults in future versions of Windows 11, according to a new blog post that outlines a "principled approach to app pinning and app defaults in Windows."

The company's principled approach is a combination of broad, vague platitudes ("we will ensure people who use Windows are in control of changes to their pins and their defaults") and new developer features. A future version of Windows 11 will offer a consistent "deep link URI" for apps so they can send users to the right place in the Settings app for changing app defaults. Microsoft will also add a pop-up notification that should be used when newly installed apps want to pin themselves to your Taskbar, rather than either pinning themselves by default or getting lost somewhere in your Start menu.

These new features will be added to Windows "in the coming months," starting in the Dev channel Windows Insider Preview builds. Though Microsoft frames these changes as a way to make changing default apps easier and more consistent, they also serve as a gentle rebuke to developers who handle things differently.

Programming

Something Pretty Right: a History of Visual Basic (retool.com) 124

Long-time Slashdot reader theodp writes: In Something Pretty Right: A History of Visual Basic, Retool's Ryan Lucas has a nice round-up of how Visual Basic became the world's most dominant programming environment, its sudden fall from grace, and why its influence is still shaping the future of software development.

Visual Basic (or VB) burst onto the scene at a magical, transitional moment, presenting a radically simpler alternative for Windows 3.0 development. Bill Gates' genuine enthusiasm for VB is evident in an accompanying 1991 video in which BillG personally and playfully demonstrates Visual Basic 1.0 at its launch event, as well as in a 1994 video in which Gates thanks Alan Cooper, the "Father of Visual Basic," with the Windows Pioneer Award.

For Gates, VB was love at first sight. "It blew his mind, he had never seen anything like it," recalls Cooper of Gates's reaction to his 1988 demo of a prototype. "At one point he turned to his retinue and asked 'Why can't we do stuff like this?'" Gates even came up with the idea of taking Cooper's visual programming frontend and replacing its small custom internal language with BASIC.

After seeing what Microsoft had done to his baby, Cooper reportedly sat frustrated in the front row at the launch event. But it's hard to argue with success, and Cooper eventually came to appreciate VB's impact. "Had Ruby [Cooper's creation] gone to the market as a shell construction set," Cooper said, "it would have made millions of people happier, but then Visual Basic made hundreds of millions of people happier. I was not right, or rather, I was right enough, had a modicum of rightness. Same for Bill Gates, but the two of us together did something pretty right."

At its peak, Visual Basic had nearly 3.5 million developers worldwide. Many of the innovations that Alan Cooper and Scott Ferguson's teams introduced 30 years ago with VB are nowhere to be found in modern development, fueling a nostalgic fondness for the ease and magic VB delivered that we have yet to rekindle.

Bitcoin

Microsoft Is Testing a Built-In Cryptocurrency Wallet For the Edge Browser (arstechnica.com) 42

Microsoft appears to be testing a built-in cryptocurrency wallet for Edge, according to screenshots pulled from a beta build of the browser. Ars Technica reports: The feature, which the screenshots say is strictly for internal testing, was unearthed by Twitter user @thebookisclosed, who has a history of digging up present-but-disabled features in everything from new Windows 11 builds to ancient Windows Vista betas. According to the screenshots, the crypto wallet is "embedded in Edge, making it easy to use without installing any extension," and it can handle multiple types of cryptocurrency. It will also record transactions and the value of your individual currencies as they fluctuate. An "explore" tab offers news stories relevant to cryptocurrency, and an "assets" tab will let you stare lovingly at your NFTs. The wallet is "non-custodial" (also called "self-custodial"), meaning that you have sole ownership of and responsibility for the passwords and recovery keys that allow access to your funds. Microsoft won't be able to let you back in if you lose your credentials.
Games

20 Years Later, Second Life is Launching on Mobile (arstechnica.com) 26

Remember Second Life? The virtual world launched on the desktop web back in 2003 with 3D avatars and spaces for various social activities. Believe it or not, it has been running continually this entire time -- and now it's coming to mobile for the first time. From a report: In fact, this will be the first time that Second Life has expanded beyond the PC (across Windows, macOS, and Linux) in any form. In a post to the virtual world's community web forum, a community manager for Second Life developer Linden Lab shared a video with some details about the mobile version's development, and announced that a beta version of the mobile app will launch sometime this year.

The video reveals that the app was built using Unity -- in part to make for an easy path to releasing and maintaining the app on multiple platforms, including the iPhone, iPad, Android phones, and Android tablets. It also includes a few minutes of footage of Second Life's detailed character models and environments, with accompanying commentary by Linden Lab developers about bringing as much of the experience to mobile as possible.

Microsoft

Microsoft Signs Another Call of Duty Deal In Bid To Impress Regulators (arstechnica.com) 18

An anonymous reader quotes a report from Ars Technica: Microsoft announced Tuesday that it has signed a 10-year deal to bring its Xbox PC games to little-known Ukraine-based streaming platform Boosteroid. The move is being positioned in part to "mak[e] even more clear to regulators that our acquisition of Activision Blizzard will make Call of Duty available on far more devices than before," as Microsoft Vice Chair and President Brad Smith said in a statement. "If the only argument is that Microsoft is going to withhold Call of Duty from other platforms, and we've now entered into contracts that are going to bring this to many more devices and many more platforms, that is a pretty hard case to make to a court," Smith told The Wall Street Journal.

Started in 2017, Boosteroid boasts 4 million streaming customers using servers based in nine European countries and six US states. Those customers pay 7.50 euro per month to stream games from those servers to any smartphone, Windows/Mac/Linux-based PC, or Android TV device. Boosteroid currently links to users' accounts on other PC-based platforms -- including Steam, the Epic Games Store, Blizzard's Battle.net, EA's Origin, the Rockstar Game Launcher, and Wargaming -- and lets them play games from those services without having to install them on a local gaming PC. With this new deal, that access will expand to include games available through Microsoft's Xbox app on the PC.

AI

You Can Now Run a GPT-3 Level AI Model On Your Laptop, Phone, and Raspberry Pi 27

An anonymous reader quotes a report from Ars Technica: On Friday, a software developer named Georgi Gerganov created a tool called "llama.cpp" that can run Meta's new GPT-3-class AI large language model, LLaMA, locally on a Mac laptop. Soon thereafter, people worked out how to run LLaMA on Windows as well. Then someone showed it running on a Pixel 6 phone, and next came a Raspberry Pi (albeit running very slowly). If this keeps up, we may be looking at a pocket-sized ChatGPT competitor before we know it. [...]

Typically, running GPT-3 requires several datacenter-class A100 GPUs (also, the weights for GPT-3 are not public), but LLaMA made waves because it could run on a single beefy consumer GPU. And now, with optimizations that reduce the model size using a technique called quantization, LLaMA can run on an M1 Mac or a lesser Nvidia consumer GPU. After obtaining the LLaMA weights ourselves, we followed [independent AI researcher Simon Willison's] instructions and got the 7B parameter version running on an M1 Macbook Air, and it runs at a reasonable rate of speed. You call it as a script on the command line with a prompt, and LLaMA does its best to complete it in a reasonable way.

There's still the question of how much the quantization affects the quality of the output. In our tests, LLaMA 7B trimmed down to 4-bit quantization was very impressive for running on a MacBook Air -- but still not on par with what you might expect from ChatGPT. It's entirely possible that better prompting techniques might generate better results. Also, optimizations and fine-tunings come quickly when everyone has their hands on the code and the weights -- even though LLaMA is still saddled with some fairly restrictive terms of use. The release of Alpaca today by Stanford proves that fine tuning (additional training with a specific goal in mind) can improve performance, and it's still early days after LLaMA's release.
A step-by-step instruction guide for running LLaMA on a Mac can be found here (Warning: it's fairly technical).
Crime

Does IceFire Ransomware Portend a Broader Shift From Windows to Linux? (darkreading.com) 28

An anonymous reader shares this report from Dark Reading: In recent weeks, hackers have been deploying the "IceFire" ransomware against Linux enterprise networks, a noted shift for what was once a Windows-only malware.

A report from SentinelOne suggests that this may represent a budding trend. Ransomware actors have been targeting Linux systems more than ever in cyberattacks in recent weeks and months, notable not least because "in comparison to Windows, Linux is more difficult to deploy ransomware against, particularly at scale," Alex Delamotte, security researcher at SentinelOne, tells Dark Reading....

"[M]any Linux systems are servers," Delamotte points out, "so typical infection vectors like phishing or drive-by download are less effective." So instead, recent IceFire attacks have exploited CVE-2022-47986 — a critical remote code execution (RCE) vulnerability in the IBM Aspera data transfer service, with a CVSS rating of 9.8.

Delamotte posits a few reasons for why more ransomware actors are choosing Linux as of late. For one thing, she says, "Linux-based systems are frequently utilized in enterprise settings to perform crucial tasks such as hosting databases, Web servers, and other mission-critical applications. Consequently, these systems are often more valuable targets for ransomware actors due to the possibility of a larger payout resulting from a successful attack, compared to a typical Windows user."

A second factor, she guesses, "is that some ransomware actors may perceive Linux as an unexploited market that could yield a higher return on investment."

While previous reports had IceFire targetting tech companies, SentinelLabs says they've seen recent attacks against organizations "in the media and entertainment sector," impacting victims "in Turkey, Iran, Pakistan, and the United Arab Emirates, which are typically not a focus for organized ransomware actors."
Windows

Microsoft Is Testing File Recommendations In Explorer (theverge.com) 46

Microsoft is starting to test a system called File Recommendations in File Explorer, which does exactly what the name suggests -- when you visit the home tab, it shows specific files that you may want to open at the top. The Verge reports: In a blog post, the company says the current version is only available to some Insiders in its Dev Channel who have installed the Windows 11 Insider Preview Build 23403 update and will only work if you're logged in with an Azure Active Directory account (meaning that currently, this feature feels squarely aimed at business users). For those that do have it, it'll suggest cloud files that you own or that have been shared with you.

Microsoft says it plans to "monitor feedback and see how it lands before pushing it out to everyone," so it seems as if it's aware that the feature could be controversial. Part of that may be just down to the fact that not everybody will want unexpected results in their file browser -- though based on the screenshot, you will be able to collapse the Recommended section.

Microsoft

Microsoft Will Now Preview the Future of Windows With New Canary Channel (theverge.com) 23

Microsoft is getting ready to publicly test major new Windows features even earlier. While the software giant has been previewing changes to Windows for nearly a decade, a new Canary channel for Windows Insiders will allow anyone to try out "hot off the presses" builds of Windows that include major changes to the kernel, APIs, and other big parts of Windows. From a report: It feels like this new Canary channel is preparation work for Windows 12, which Intel and Microsoft have both been hinting at recently. "The new Canary Channel is going to be the place to preview platform changes that require longer-lead time before getting released to customers," says Amanda Langowski, Microsoft's head of the Windows Insider program, in a blog post today. "Some examples of this include major changes to the Windows kernel, new APIs, etc." We've seen Microsoft test underlying platform changes to Windows before that eventually shipped in a future version of Windows. Microsoft tested some display changes to Windows 10 preview builds before Windows 11 was announced, and the changes only ended up shipping in what became Windows 11. Likewise, x64 emulation for Windows 10 on Arm was tested early on and only ever shipped in Windows 11.
Security

Unkillable UEFI Malware Bypassing Secure Boot Enabled By Unpatchable Windows Flaw (arstechnica.com) 115

Researchers have announced a major cybersecurity find -- the world's first-known instance of real-world malware that can hijack a computer's boot process even when Secure Boot and other advanced protections are enabled and running on fully updated versions of Windows. From a report: Dubbed BlackLotus, the malware is what's known as a UEFI bootkit. These sophisticated pieces of malware hijack the UEFI -- short for Unified Extensible Firmware Interface -- the low-level and complex chain of firmware responsible for booting up virtually every modern computer. As the mechanism that bridges a PC's device firmware with its operating system, the UEFI is an OS in its own right. It's located in an SPI-connected flash storage chip soldered onto the computer motherboard, making it difficult to inspect or patch. Because the UEFI is the first thing to run when a computer is turned on, it influences the OS, security apps, and all other software that follows. These traits make the UEFI the perfect place to run malware. When successful, UEFI bootkits disable OS security mechanisms and ensure that a computer remains infected with stealthy malware that runs at the kernel mode or user mode, even after the operating system is reinstalled or a hard drive is replaced.

As appealing as it is to threat actors to install nearly invisible and unremovable malware that has kernel-level access, there are a few formidable hurdles standing in their way. One is the requirement that they first hack the device and gain administrator system rights, either by exploiting one or more vulnerabilities in the OS or apps or by tricking a user into installing trojanized software. Only after this high bar is cleared can the threat actor attempt an installation of the bootkit. The second thing standing in the way of UEFI attacks is UEFI Secure Boot, an industry-wide standard that uses cryptographic signatures to ensure that each piece of software used during startup is trusted by a computer's manufacturer. Secure Boot is designed to create a chain of trust that will prevent attackers from replacing the intended bootup firmware with malicious firmware. If a single firmware link in that chain isn't recognized, Secure Boot will prevent the device from starting.

Microsoft

Microsoft Makes Outlook for Mac Free To Use (theverge.com) 47

Microsoft is making Outlook for Mac free to use today. From a report: Outlook is now available free in Apple's App Store, and you no longer need a Microsoft 365 subscription or Office license to use it. It's a surprise move that coincides with Microsoft's push to make its Windows desktop Outlook email client more web-powered. Outlook for Mac includes support for Outlook.com accounts, Gmail, iCloud, Yahoo, and any email provider that has IMAP support. Microsoft redesigned its Mac email client in 2020, with a user interface that's optimized for Apple's latest macOS design changes.

Slashdot Top Deals