×
The Internet

The Browser Company's Darin Fisher Thinks It's Time To Reinvent the Browser (theverge.com) 128

An anonymous reader quotes a report from The Verge: Darin Fisher has built a lot of web browsers. A lot of web browsers. He was a software engineer at Netscape early in his career, working on Navigator and then helping turn that app into Firefox with Mozilla. Then, he went to Google and spent 16 years building Chrome and ChromeOS into massively successful products. Last year, he left Google for Neeva, where he worked on ways to build a browser around the startup's search engine. And now, he's leaving Neeva to join The Browser Company and work on Arc, one of the hottest new browsers on the market. Arc, which has been in an invite-only beta for more than a year, is trying to rethink the whole browser UI. It has a sidebar instead of a row of tabs, offers a lot of personalization options, and is meant for people who live their computing life in a browser (which is increasingly most people). CEO Josh Miller often talks about building "the internet computer," too, and using the browser as a way to make the internet more useful.

Fisher has been an advisor to The Browser Company for a while, but Monday is his first official day at the company as a software engineer. Ahead of his new gig, Fisher and I got on a call to talk about why he thinks browsers are due for a reinvention -- and why he thinks a startup is the best place to do it. The answer starts with the browser's defining feature: tabs. Fisher doesn't hate tabs -- in fact, he helped popularize them. But he hates that using a modern browser involves opening a million of them, not being able to find them again, and eventually just giving up and starting all over again. "I remember when tabbed browsing was novel," Fisher says, "and helped people feel less cluttered because you don't have as many windows." But now, "even when I use Chrome," Fisher says, "I get a bunch of clutter. At some point, I just say, 'Forget it, I'm not even going to bother trying to sort through all these tabs. If it's important, I'll open it again.'" Browsers need better systems for helping you manage tabs, not just open more of them.

The best way to improve the browser, Fisher ultimately decided, is to just start from scratch. Arc is full of new ideas about how web browsers can work: it combines bookmarks and tabs into one app switcher-like concept; it makes it easy to search among your open tabs; it has built-in tools for taking notes and making shareable mini websites. The experience can be jarring because it's so different, but Fisher says that's part of what he's excited about. "This is not stuff people haven't talked about before," he says, "but actually putting it together and focusing on it and thinking about the small steps that go a long way, I think that's where there's so much opportunity." Fisher likes to compare a browser to an operating system, which matches with The Browser Company's idea that Arc isn't just a browser but rather an iOS-like system for the open web. "It has task management UI, it has UI for creating and starting a journey, but there's so much more in between," he says. What the iPhone did for native apps, Arc hopes to do for web apps. Fisher says he's interested in improving the way files move around the internet, for instance, finding a better way than the constant downloading and uploading we all do all day. He likes that Arc has a picture-in-picture mode that works by default, pulling your YouTube video out when you switch tabs. All these make the web feel more connected and cohesive rather than just a bunch of tabs in a horizontal line.
The Browser Company also plans to reinvent the internet browser for mobile, too. On mobile, in particular, he says, "there are so many opportunities because the starting point is so archaic."

"He's vague on the details of his plans -- and The Browser Company hasn't really started working on a mobile browser yet anyway -- but says that's a big focus for him going forward," adds The Verge.
Microsoft

Joe Belfiore, the Former Head of Windows Phone, To Leave Microsoft After 32 Years (windowscentral.com) 35

Microsoft Corporate Vice President Joe Belfiore will leave Microsoft after 32 years with the company. From a report: Belfiore has served in several roles at Microsoft but is currently the CVP of Office. His plans to retire were announced internally in an email sent out to employees and later shared publicly on Twitter. Belfiore will be a senior advisor and coach to aid the transition until summer 2023. The Office Group will be led by CVP Ales Holecek, who has led the division alongside Belfiore for several years, and CVP Sumit Chauhan, who will move up from their role as head of Office Organization. Many of our readers know Belfiore best for his time in charge of Windows Phone. He co-led that division from 2009 to 2013, which included Microsoft's acquisition of Nokia. Belfiore then went on to lead the Windows 10 team for almost five years.
Security

OpenSSL Warns of Critical Security Vulnerability With Upcoming Patch (zdnet.com) 31

An anonymous reader quotes a report from ZDNet: Everyone depends on OpenSSL. You may not know it, but OpenSSL is what makes it possible to use secure Transport Layer Security (TLS) on Linux, Unix, Windows, and many other operating systems. It's also what is used to lock down pretty much every secure communications and networking application and device out there. So we should all be concerned that Mark Cox, a Red Hat Distinguished Software Engineer and the Apache Software Foundation (ASF)'s VP of Security, this week tweeted, "OpenSSL 3.0.7 update to fix Critical CVE out next Tuesday 1300-1700UTC." How bad is "Critical"? According to OpenSSL, an issue of critical severity affects common configurations and is also likely exploitable. It's likely to be abused to disclose server memory contents, and potentially reveal user details, and could be easily exploited remotely to compromise server private keys or execute code execute remotely. In other words, pretty much everything you don't want happening on your production systems.

The last time OpenSSL had a kick in its security teeth like this one was in 2016. That vulnerability could be used to crash and take over systems. Even years after it arrived, security company Check Point estimated it affected over 42% of organizations. This one could be worse. We can only hope it's not as bad as that all-time champion of OpenSSL's security holes, 2014's HeartBleed. [...] There is another little silver lining in this dark cloud. This new hole only affects OpenSSL versions 3.0.0 through 3.0.6. So, older operating systems and devices are likely to avoid these problems. For example, Red Hat Enterprise Linux (RHEL) 8.x and earlier and Ubuntu 20.04 won't be smacked by it. RHEL 9.x and Ubuntu 22.04, however, are a different story. They do use OpenSSL 3.x. [...] But, if you're using anything with OpenSSL 3.x in -- anything -- get ready to patch on Tuesday. This is likely to be a bad security hole, and exploits will soon follow. You'll want to make your systems safe as soon as possible.

Linux

'Old/Weird Laptops' Sought To Help Test Linux Kernel Backlight Drivers (arstechnica.com) 33

Do you have a laptop that's either "pretty old" or "weird in some other way"? Did it ship without Windows from the factory, or did you flash its firmware with coreboot? You could help the Linux kernel move its backlight code forward without abandoning quirky gear like yours. ArsTechnica: Hans de Goede, a longtime Linux developer and principal engineer at Red Hat, writes on his Livejournal about the need to test "a special group of laptops" to prevent their backlight controls from disappearing in Linux kernel 6.1. Old laptop tests are needed because de Goede is initiating some major changes to user-space backlight controls, something he has been working on since 2014. As detailed at Linux blog Phoronix, there are multiple issues with how Linux tries to address the wide variety of backlight schemes in displays, which de Goede laid out at the recent Linux Plumbers Conference. There can be multiple backlight devices operating a single display, leaving high-level controls to "guess which one will work." Brightness control requires root permissions at the moment. And "0" passed along as a backlight value remains a conundrum, as the engineer pointed out in 2014: Is that entirely off, or as low as the display can be lit?
Google

Surface Duo Continues Its Worst-in-Class Update Record, Ships Android 12L (arstechnica.com) 34

An anonymous reader shares a report: Microsoft is still struggling to learn what exactly it takes to be a successful Android manufactuer. The company's first self-branded Android phones, the dual-screened Surface Duo and Surface Duo 2, have tried to resurrect Microsoft's mobile ambitions after the death of Windows Phone. They leave a lot to be desired, though, and the first version went through some embarrassing fire sales. An ongoing knock against the devices has also been Microsoft's very slow OS updates. Unlike, say, Windows and Windows Update, Google's expensive and labor-intensive Android update process puts the responsibility for updates on the hardware seller, and a big part of being a good Android OEM is how quickly you can navigate this complicated process. Microsoft is proving to not be good at this.

This week, Microsoft announced the Surface Duo and Surface Duo 2 are finally getting Android 12L, an OS update that came out in March. That puts that company at a more than seven-month update time, which is worst-in-class for a flagship device, especially for one costing the $1,499 Microsoft is charging for the Duo 2. The company took a prolonged 14 months to ship Android 11 to the Surface Duo, so at least it's improving!

Chrome

Chrome To Drop Support For Windows 7 In 2023 (androidpolice.com) 53

Chrome will no longer support Windows 7 nor Windows 8.1 upon the release of Chrome 110, currently scheduled to hit stable on February 7, 2023. From that point on, you'll need to be running at least Windows 10 to maintain access to new builds. Android Police reports: While Google won't be doing anything to stop users of older platforms from continuing to install and run earlier releases of Chrome, they'd be missing out on the latest critical security and usability enhancements.
Privacy

Passkeys Are Finally Here (arstechnica.com) 96

An anonymous reader quotes a report from Ars Technica: Generically, passkeys refer to various schemes for storing authenticating information in hardware, a concept that has existed for more than a decade. What's different now is that Microsoft, Apple, Google, and a consortium of other companies have unified around a single passkey standard shepherded by the FIDO Alliance. Not only are passkeys easier for most people to use than passwords; they are also completely resistant to credential phishing, credential stuffing, and similar account takeover attacks.

On Monday, PayPal said US-based users would soon have the option of logging in using FIDO-based passkeys, joining Kayak, eBay, Best Buy, CardPointers, and WordPress as online services that will offer the password alternative. In recent months, Microsoft, Apple, and Google have all updated their operating systems and apps to enable passkeys. Passkey support is still spotty. Passkeys stored on iOS or macOS will work on Windows, for instance, but the reverse isn't yet available. In the coming months, all of that should be ironed out, though.

Passkeys work almost identically to the FIDO authenticators that allow us to use our phones, laptops, computers, and Yubico or Feitian security keys for multi-factor authentication. Just like the FIDO authenticators stored on these MFA devices, passkeys are invisible and integrate with Face ID, Windows Hello, or other biometric readers offered by device makers. There's no way to retrieve the cryptographic secrets stored in the authenticators short of physically dismantling the device or subjecting it to a jailbreak or rooting attack. Even if an adversary was able to extract the cryptographic secret, they still would have to supply the fingerprint, facial scan, or -- in the absence of biometric capabilities -- the PIN that's associated with the token. What's more, hardware tokens use FIDO's Cross-Device Authentication flow, or CTAP, which relies on Bluetooth Low Energy to verify the authenticating device is in close physical proximity to the device trying to log in.
"Users no longer need to enroll each device for each service, which has long been the case for FIDO (and for any public key cryptography)," said Andrew Shikiar, FIDO's executive director and chief marketing officer. "By enabling the private key to be securely synced across an OS cloud, the user needs to only enroll once for a service, and then is essentially pre-enrolled for that service on all of their other devices. This brings better usability for the end-user and -- very significantly -- allows the service provider to start retiring passwords as a means of account recovery and re-enrollment."

In other words: "Passkeys just trade WebAuthn cryptographic keys with the website directly," says Ars Review Editor Ron Amadeo. "There's no need for a human to tell a password manager to generate, store, and recall a secret -- that will all happen automatically, with way better secrets than what the old text box supported, and with uniqueness enforced."

If you're eager to give passkeys a try, you can use this demo site created by security company Hanko.
Microsoft

Microsoft's 'Project Volterra' Becomes an Arm-powered mini PC with 32GB of RAM (arstechnica.com) 68

Earlier this year, Microsoft announced that it would be releasing new hardware to encourage more developers to start using and supporting the Arm version of Windows. Dubbed "Project Volterra," all we knew about it at the time was that it would use an unnamed Qualcomm Snapdragon processor and NVMe-based storage, that it would support at least two monitors, and that it would have a decent number of ports. Today, Microsoft is putting Volterra out into the world, complete with a snappy new name: the Windows Dev Kit 2023. From a report: The Dev Kit 2023 will use a Snapdragon 8cx Gen 3 -- essentially the same chip as the Microsoft SQ3 in the new 5G version of the Surface Pro 9 -- plus 512GB of storage and a whopping 32GB of RAM for the surprisingly low price of $599.

We don't know exactly how fast the 8cx Gen 3 will be (Qualcomm says "up to 85 percent faster" CPU performance than the 8cx Gen 2, which would put it somewhere below but within spitting distance of modern Core i5 laptop CPU). But 512GB of storage and 32GB of memory should make the Dev Kit 2023 useful as a development and testing environment. Microsoft says the box can connect to up to three monitors simultaneously using its two USB-C ports and mini DisplayPort and that up to two of those displays can be 4K screens running at 60 Hz. Three USB-A ports, gigabit Ethernet, Wi-Fi 6, and Bluetooth 5.1 round out the connectivity options.

Windows

Zeek Becoming Part of Microsoft Windows (corelight.com) 21

First released in 1998, the BSD-licensed software Zeek (originally named "Bro") is about to get more widely adopted, writes long-time Slashdot reader skinfaxi: Zeek, the open source network security monitoring platform, is being integrated into Windows and "is now deployed on more than one billion global endpoints," according to an announcement from Corelight.
From Corelight's press release: Corelight, the leader in open network detection and response, today announced the integration of Zeek, the world's most popular open source network security monitoring platform, as a component of Microsoft Windows and Defender for Endpoint. The integration will help security teams respond to the most challenging attacks by providing "richer signals for advanced threat hunting, complete and accurate discovery of IoT devices, and more powerful detection and response capabilities."

Originally created by Corelight co-founder and chief scientist Dr. Vern Paxson while at Lawrence Berkeley National Laboratory, Zeek transforms network traffic into compact and high-fidelity logs, file content, and behavioral analytics to accelerate security operations. Vital funding for Zeek came initially from the National Science Foundation and the US Department of Energy's Office of Science. As adoption increased, Corelight was founded to provide a financial model and corporate sponsor for the project....

"Microsoft is strongly committed to supporting open source projects and ecosystems," said Rob Lefferts, corporate vice president for Microsoft. "We're proud to be working with Zeek and are thrilled to bring this level of network intelligence and monitoring to our customers."

"This is an amazing development for Zeek and its community of contributors and users," said Paxson. "I never imagined that the tool I developed for network monitoring would find broader application in defending endpoints — but that's part of the creative magic of open source development.

"We are grateful for Microsoft's contributions and support, and we are excited that the project's impact, and that of the community of contributors, will increase so dramatically."

Windows

New Version of Windows 95 JavaScript App Runs On Basically Any Platform (betanews.com) 32

An anonymous reader quotes a report from BetaNews: Slack developer Felix Rieseberg released Windows 95 as an Electron app four years ago, updating it shortly afterwards to allow it to run gaming classics like Doom. Now he rolls out a new version which can run on any Windows, Mac or Linux system. Based on the Electron framework, Rieseberg's Windows 95 is written entirely in JavaScript, so it doesn't run as smoothly as it would if it was a native app, but you shouldn't let that put you off.

This is the second update of the year, which brings it up to version 3.1.1 and includes two important changes:

- Upgraded from Electron v18 to Electron v21 (and with it, Chrome and Node.js)
- Upgraded v86 (sound is back!)

The earlier update (in June) brought the software up to 3.0.0 and introduced the following changes:

- Upgraded from Electron v11 Electron v18 (and with it, Chrome and Node.js)
- Upgraded v86 (now using WASM)
- Upgraded various smaller dependencies
- Much better scaling on all platforms
- On Windows, the link to OSFMount was broken and is now fixed.
- On Windows, you can now see a prettier installation animation.
- On Windows, windows95 will have a proper icon in the Programs & Features menu.
You can download the latest version of the Windows 95 app for Windows, macOS, and Linux at their respective links.
Windows

Microsoft's PC Manager Is Like CCleaner For Your Computer (theverge.com) 41

Microsoft is working on a PC Manager app that's designed to boost your computer's performance. The Verge reports: Much like CCleaner, a beta version of Microsoft's PC Manager includes storage management and the ability to end tasks quickly and control which apps start up with Windows. Much of this functionality is already baked into Windows, but this PC Manager app puts it all in one useful location. There's even a browser protection section that makes it easier to change default browsers than what exists in Windows right now.

The storage manager feature includes the ability to manage apps or remove those that are rarely used, and there's also a full cleanup scan available or a scan to find large files on your drives. The process management feature is a more simplified version of the Task Manager so you can quickly kill processes that might be eating up RAM. Hitting the main "boost" button will clear temporary files and free up memory, which could be useful on older PCs.

Microsoft

Windows Subsystem for Android Declared Ready for Prime Time (theregister.com) 32

Microsoft has decided the Windows Subsystem for Android (WSA) -- its offering that runs Android VMs which behave just like another application in Windows -- is sufficiently stable that it can be designated version 1.0 and made available to all. From a report: While it's lovely that Windows can now run Android VMs, Hendrixson's tweet needs a little parsing. The "50,000 apps" he mentions are only available from the Amazon.com app store -- not the larger Google Play digital tat bazaar. Google's apps aren't in the Amazonian store, nor are Microsoft's. I couldn't find Twitter, WhatsApp, Slack, any of the banks I use, or the Australian government apps I need to access services. In fact it's tough work to find apps other than games in the store -- and when a search term does bear fruit it delivers what look like knockoff apps that scream "here be dragons."
Firefox

Firefox 106 Is Now Available With PDF Annotation, Firefox View (9to5linux.com) 35

Firefox 106 is now available for download, bringing various new features and enhancements, such as a new PDF editing feature and new way to organize recently closed tabs. 9to5Linux reports: Mozilla says that Firefox 106 finally brings the long-anticipated two-finger swipe horizontal gesture for navigating back and forward on a website without having to hold down the Alt key. [...] Firefox 106 also introduces annotation capabilities to the built-in PDF viewer so you can write text, draw, or add signatures on PDF files. You'll be able to change the size and color of the text tool, as well as the thickness, opacity, and color of the draw tool.

Another interesting new feature of the Firefox 106 release is called Firefox View, which is implemented as a pinned tab, promising to help you get back to the content you've previously discovered by allowing you to switch seamlessly between your devices running Firefox. On top of all that, Firefox 106 also brings major WebRTC changes to improve Windows and Wayland screen sharing, RTP performance and reliability, statistics, and more. There are also the usual bug and security fixes to make Firefox more stable and reliable on your system.

Microsoft

Microsoft Preps DirectStorage 1.1 With GPU Decompression For Faster Game Loads (arstechnica.com) 16

An anonymous reader shares a report: One of the newer Xbox features that Microsoft has been working to bring to Windows is DirectStorage, a collection of features that allows fast PCI Express-based NVMe SSDs to communicate directly with your GPU. For DirectStorage 1.0, the main benefit was faster load times -- up to 40 percent faster, according to Microsoft. This week Microsoft announced that it's readying DirectStorage 1.1 for release later this year, which will allow game assets to be decompressed on the GPU instead of the CPU, speeding up decompression operations and freeing up your processor to do other things.

Normally, compressed game assets are loaded into system memory and decompressed by the CPU before being sent to the GPU. This circuitous route adds to game load times and can contribute to "pop-in" in games with big open worlds -- that effect where you see a bland, less-detailed version of an object for a brief instant before more detailed textures and models have time to load in. DirectStorage's GPU-based decompression works with a new GPU-optimized compression format called "GDeflate," originally created by Nvidia. Microsoft's sample image comparing GPU decompression with GDeflate and CPU decompression using Zlib showed much faster load times (0.8 second on the GPU, compared to 2.36 seconds on the CPU) along with much lower CPU usage, though Microsoft says that the exact results will vary based on your hardware and the game you're loading.

Software

VirtualBox 7.0 Adds First ARM Mac Client, Full Encryption, Windows 11 TPM (arstechnica.com) 19

Nearly four years after its last major release, VirtualBox 7.0 arrives with a... host of new features. Chief among them are Windows 11 support via TPM, EFI Secure Boot support, full encryption for virtual machines, and a few Linux niceties. From a report: The big news is support for Secure Boot and TPM 1.2 and 2.0, which makes it easier to install Windows 11 without registry hacks (the kind Oracle recommended for 6.1 users). It's strange to think about people unable to satisfy Windows 11's security requirements on their physical hardware, but doing so with a couple clicks in VirtualBox, but here we are. VirtualBox 7.0 also allows virtual machines to run with full encryption, not just inside the guest OSâ"but logs, saved states, and other files connected to the VM. At the moment, this support only works through the command line, "for now," Oracle notes in the changelog.

This is the first official VirtualBox release with a Developer Preview for ARM-based Macs. Having loaded it on an M2 MacBook Air, I can report that the VirtualBox client informs you, extensively and consistently, about the non-production nature of your client. The changelog notes that it's an "unsupported work in progress" that is "known to have very modest performance." A "Beta Warning" shows up in the (new and unified) message center, and in the upper-right corner, a "BETA" warning on the window frame is stacked on top of a construction-style "Dev Preview" warning sign. It's still true that ARM-based Macs don't allow for running operating systems written for Intel or AMD-based processors inside virtual machines. You will, however, be able to run ARM-based Linux installations in macOS Venture that can themselves run x86 processors using Rosetta, Apple's own translation layer.

Microsoft

Microsoft Office Will Become Microsoft 365 in Major Brand Overhaul (theverge.com) 95

Microsoft is making a major change to its Microsoft Office branding. After more than 30 years, Microsoft Office is being renamed "Microsoft 365" to mark the software giant's collection of growing productivity apps. From a report: While Office apps like Excel, Outlook, Word, and PowerPoint aren't going away, Microsoft will now mostly refer to these apps as part of Microsoft 365 instead of Microsoft Office. Microsoft has been pushing this new branding for years, after renaming Office 365 subscriptions to Microsoft 365 two years ago, but the changes go far deeper now. "In the coming months, Office.com, the Office mobile app, and the Office app for Windows will become the Microsoft 365 app, with a new icon, a new look, and even more features," explains a FAQ from Microsoft.
Windows

New Apple Services and Apps Are Rolling Out On Windows 11 and Xbox (arstechnica.com) 15

Today, Microsoft and Apple announced a number of deeper integrations of Apple services on both Windows PCs and Xbox game consoles, including Music and TV apps for both platforms and the ability to browse your iCloud Photo Library within the Windows 11 Photos app. Ars Technica reports: The Apple Music app for Xbox is already available. Existing users can download the app and start listening to their playlists and stations, while new users can sign up for a one-month trial. The user interface for Apple Music on the Xbox is almost exactly the same as the one we've used before on Apple TV hardware. It doesn't add any new features we haven't seen before, but it's nice to see parity between the platforms. The Music and TV apps for Windows aren't available yet, but the companies say they'll both be available next year.

The Windows iTunes app lets users listen to songs and watch TV and movies purchased through Apple's online store. Even though Apple Music will arrive on Windows, iTunes will continue to be available, and users will still be able to access Podcasts and Books there. While you'll have to wait until next year to download the Music and TV apps in Windows, the iCloud Photo Library integration is available right now. You'll have to download the iCloud Windows app (which is already used to sync a variety of things, like browser bookmarks) and opt into syncing your iCloud Photo Library. After that, both videos and photos should be available within the Windows 11 Photos app.

Microsoft

Microsoft Unveils Surface Pro 9 With Choice of Intel or ARM Models, No Headphone Jack (theverge.com) 79

Earlier today, Microsoft unveiled three new Surface computers: the Surface Pro 9, Surface Laptop 5, and Surface Studio 2+. While this year's Surface Pro 9 remains very similar to last year's Surface Pro 8, it's being offered with refreshed Intel 12th-gen CPUs or a "new 5G-equipped model with a custom SQ 3 Arm chip," reports Engadget. From the report: If that sounds confusing to you, well, it is. We last saw the company's SQ chip in the 2020 Surface Pro X, a computer that we found both beautiful and frustrating, thanks to Windows' crummy software compatibility with Arm chips. To shift that problem over to a computer with the same name as its Intel sibling is a recipe for disaster. (We can just imagine the frustrated Best Buy shoppers who are dazzled with the idea of a 5G Surface, only to learn they can't run most of their traditional Windows apps.) The 5G Pro 9 is also broken down into millimeter-wave and Sub-6 variants, which will be sold in their respective markets. It's understandable why Microsoft isn't keen to keep the Surface Pro X moniker going -- the Pro 8 lifted many of its modern design cues, after all. But from what we've seen, Windows 11 doesn't solve the problems we initially had with the Pro X. After analyzing the product's tech specs, The Verge discovered that the Surface Pro 9 no longer appears to have a headphone jack. From the report: This seems to be the direct result of Microsoft bringing the Intel and Arm versions of the Surface Pro 9 together in the same chassis. The Surface Pro X has never had a 3.5mm jack, so now, the Intel hardware is coming in line with that design direction. But I'd argue it's a more controversial omission this time. Why? The new universal outer enclosure is essentially the same size as that of the Surface Pro 8.

The Surface Pro X hardware was quite a bit thinner than Microsoft's Intel hardware at the time (and still now). So excising the 3.5mm jack made sense. But we've now lost the headphone jack for a chassis that's basically identical in dimensions to last year's model. They really couldn't fit one on there somewhere?
Further reading: Microsoft's Surface Studio 2 Plus Ships With an RTX 3060 for $4,299
Google

Google is Bringing Passkey Support To Android and Chrome (googleblog.com) 63

Android Developers Blog: Passkeys are a significantly safer replacement for passwords and other phishable authentication factors. They cannot be reused, don't leak in server breaches, and protect users from phishing attacks. Passkeys are built on industry standards and work across different operating systems and browser ecosystems, and can be used for both websites and apps. Passkeys follow already familiar UX patterns, and build on the existing experience of password autofill. For end-users, using one is similar to using a saved password today, where they simply confirm with their existing device screen lock such as their fingerprint. Passkeys on users' phones and computers are backed up and synced through the cloud to prevent lockouts in the case of device loss. Additionally, users can use passkeys stored on their phone to sign in to apps and websites on other nearby devices.

Today's announcement is a major milestone in our work with passkeys, and enables two key capabilities: Users can create and use passkeys on Android devices, which are securely synced through the Google Password Manager. Developers can build passkey support on their sites for end-users using Chrome via the WebAuthn API, on Android and other supported platforms. To try this today, developers can enroll in the Google Play Services beta and use Chrome Canary. Both features will be generally available on stable channels later this year. Our next milestone in 2022 will be an API for native Android apps. Passkeys created through the web API will work seamlessly with apps affiliated with the same domain, and vice versa. The native API will give apps a unified way to let the user pick either a passkey or a saved password. Seamless, familiar UX for both passwords and passkeys helps users and developers gradually transition to passkeys.

For the end-user, creating a passkey requires just two steps: (1) confirm the passkey account information, and (2) present their fingerprint, face, or screen lock when prompted. Signing in is just as simple: (1) The user selects the account they want to sign in to, and (2) presents their fingerprint, face, or screen lock when prompted. A passkey on a phone can also be used to sign in on a nearby device. For example, an Android user can now sign in to a passkey-enabled website using Safari on a Mac. Similarly, passkey support in Chrome means that a Chrome user, for example on Windows, can do the same using a passkey stored on their iOS device. Since passkeys are built on industry standards, this works across different platforms and browsers - including Windows, macOS and iOS, and ChromeOS, with a uniform user experience.

Microsoft

Microsoft Partners With Meta To Bring Teams, Office, Windows, and Xbox To VR (theverge.com) 87

During Meta Connect today, Microsoft CEO Satya Nadella said the company is partnering with Meta to bring its biggest services -- Teams, Office, Windows, and even Xbox Cloud Gaming -- to Meta's Quest VR headsets. The Verge reports: It's a surprise partnership that will see Microsoft and Meta combine their strengths. Microsoft sees an opportunity to bring Teams and its other productivity experiences to a capable VR headset, and Meta gets a key partner in its grand metaverse plan. [...] The Teams experience the new Quest Pro and Quest 2 headsets will even include Microsoft adapting Meta's avatar system for Teams and Teams getting support within Meta's own Horizon Workrooms. "People will be able to join a Teams meeting directly from Workrooms," Meta CEO Mark Zuckerberg said during the event. "We think that this cross-device, cross-screen experience will be the foundation of the virtual office of the future."

This virtual office of the future won't just be about meetings. Microsoft is bringing Windows 365 to Quest, the company's platform for streaming full versions of Windows to devices. "With Windows 365 coming to Quest, you'll have a new way to securely stream the entire Windows experience, including all the personalized apps, content, and settings to your VR device with the full power of Windows and Windows applications," Nadella said.

Microsoft is also bringing 2D versions of its Office apps to Quest through its Progressive Web Apps (PWA) technology. These won't be full-blown 3D versions of Office designed for VR, but if there's an appetite for VR in the enterprise, then it's easy to imagine Microsoft adapting them in the future. Xbox Cloud Gaming will even make its way to Meta's Quest VR headsets, allowing Xbox Game Pass Ultimate subscribers to stream games. It's not going to be as immersive as a native VR experience for Xbox games, but you'll be able to pick up an Xbox controller and play them on a giant screen projected inside a Quest headset.
Earlier today, Meta announced the Meta Quest Pro: a $1,499 virtual reality headset it's been teasing for the past year. They also announced a big addition to their updated higher-detail avatars: legs.

Slashdot Top Deals