Keep OSNews alive by becoming a Patreon, by donating through Ko-Fi, or by buying merch!

Monthly Archive:: January 2016

Netflix to try to stop users using proxies

Some members use proxies or "unblockers" to access titles available outside their territory. To address this, we employ the same or similar measures other firms do. This technology continues to evolve and we are evolving with it. That means in coming weeks, those using proxies and unblockers will only be able to access the service in the country where they currently are. We are confident this change won't impact members not using proxies.

Good luck with that.

Sony’s Z5 Compact is coming to the US

If you long for the days of 2011, when 5.3-inch smartphones were enormous outliers rather than the norm, Sony has some news that may interest you: its flagship Xperia Z5 smartphone and its smaller-but-still-high-end sibling the Xperia Z5 Compact are coming to the US on February 7, 2016.

Sony smartphones are the only non-Nexus Android phones I'd even remotely consider buying. Even though they, too, suffer from the ridiculous update situation, they are at least trying to sell a nice, compact, high-end Android phone. In fact, I find it kind of remarkable that some version of the Z5 Compact isn't available in a Nexus configuration.

There are no secure smartphones

So long as basebands are not audited, and smartphones do not possess IOMMUs and have their operating systems configure them in a way that effectively mitigates the threat, no smartphone can be trusted for the integrity or confidentiality of any data it processes.

This being the case, the quest for "secure" phones and "secure" communications applications is rather bizarre. There are only two possible roads to a secure phone: auditing baseband or using an IOMMU. There can't even begin to be a discussion on secure communications applications until the security of the hardware is established.

I've written about this a long time ago, and it remains true today. Your phone is not secure, by definition, regardless of platform. Governments should legally demand phone manufacturers to fully publish all source code to the baseband chips they use, or be barred from sales. Mobile phone networks have become a crucial pillar of our society, and as citizens, we have the right to know what's going on in baseband chips.

Of course, that's not going to happen - governments benefit from the inherent lack of any form of security in our mobile phone network - but one can dream.

Apple releases public betas for iOS 9.3, OS X 10.11.4

Apple has released a public beta of iOS 9.3. Its major new features:

iOS 9.3 is a major update to the iOS 9 operating system, introducing a long list of new features and improvements. iOS 9.3's biggest new feature is Night Shift mode, which is designed to automatically cut down on the amount of blue light an iOS user is exposed to at night by shifting to more yellow tones for the iPhone or iPad's display. With iOS 9.3, there's a number of changes for educational users, and the iPhone is now able to pair with multiple Apple Watches.

Of course, "Night Shift", as Apple calls it, is a wholesale copy of f.lux.

In any event, Apple also released a public beta of OS X 10.11.4.

The search for the killer bot

Enter the message bots. As 2016 dawns, there's a sense in Silicon Valley that the decades-old fantasy of a true digital assistant is due to roar back into the mainstream. If the trend in past years has been assistants powered by voice - Siri, Alexa, Cortana - in 2016 the focus is shifting to text. And if the bots come, as industry insiders are betting they will, there will be casualties: with artificial intelligence doing the searching for us, Google may see fewer queries. Our AI-powered assistants will manage more and more of our digital activities, eventually diminishing the importance of individual, siloed apps, and the app stores that sell them. Many websites could come to feel as outdated as GeoCities pages - and some companies might ditch them entirely. Nearly all of the information they provide can be fed into a bot and delivered via messaging apps.

This seems a bit... Overblown. Bots are going to revolutionise a lot over the coming decades, but messaging bots replacing the point and click interface we've been using ever since Xerox invented it?

Much like the death of the PC or Apple, the end of our current HUI metaphor has been predicted more times than I can remember - I don't see how this one is any different.

Remix OS 2.0 alpha released

The first alpha release of Remix OS 2.0 - which we talked about a few days ago - is now officially released. It's clearly an alpha, though, so don't try to use this on any important machines. I have been unable to get it to work - I just get "checking media fail" upon boot - but others are reporting it works, so I guess your mileage may vary.

That being said - I'd be a little weary of the EULA. It seems like it contains some regular Chinese boilerplate stuff (other Chinese companies are using the same boilerplate stuff, such as Xiaomi), which sounds incredibly heavy-handed to us. Not sure what to make of this just yet - maybe the company will clarify this one.

Why women aren’t buying smartwatches

The solve for this has been smartwatches designed specifically for women, to varying degrees of offense. Resizing is the first step: a thinner strap, a smaller face, more delicate styling (though, of course, not all women have tiny wrists, the same way that not all men have big wrists). Colorways come next, trading "masculine" black, gray, or brown for "feminine" white, tan, and now-ubiquitous rose gold (seriously, ever since Apple added rose gold to their lineup in September, every damn tech company has followed suit). The final step in making wearable tech for ladies? Throw some jewels on it. Sigh.

Technology companies and designing products for women don't go well together, and never have - smartwatches and fitness trackers just highlight this problem like never before.

How a robot coded ‘Super Mario Maker’ onto an SNES, live

By now, simply taking over a game and replacing it with a brand new app was beginning to feel a little predictable. So this year, TASBot decided to show off a new skill. At the AGDQ marathon, the bot set out to edit new features onto a game that's still running in active memory. TASBot wanted to be magnanimous with its new capabilities, too, allowing human players (and livestream viewers) the opportunity to edit the game on the fly.

But just how did TASBot - and the team of coders behind it - intend to turn an old game of Super Mario World, running on a standard SNES, into a heavily editable game of Super Mario Maker? Luckily, we had a behind-the-scenes invite to the event and the opportunity to find out.

I spent most of last week watching AGDQ (and donating, of course), and this particular segment blew my mind.

Forbes forces readers to turn off ad blockers, serves malware

For the past few weeks, Forbes.com has been forcing visitors to disable ad blockers if they want to read its content. Visitors to the site with Adblock or uBlock enabled are told they must disable it if they wish to see any Forbes content. Thanks to Forbes' interstitial ad and quote of the day, Google caching doesn't capture data properly, either.

What sets Forbes apart, in this case, is that it didn't just force visitors to disable ad blocking - it actively served them malware as soon as they did. Details were captured by security researcher Brian Baskin, who screenshotted the process.

There are no words for this level of stupidity.

Linux 4.4 released

Linux 4.4 has been released This release adds support for 3D support in virtual GPU driver, which allows 3D hardware-accelerated graphics in virtualization guests; loop device support for Direct I/O and Asynchronous I/O, which saves memory and increases performance; support for Open-channel SSDs, which are devices that share the responsibility of the Flash Translation Layer with the operating system; the TCP listener handling is completely lockless and allows for faster and more scalable TCP servers; journalled RAID5 in the MD layer which fixes the RAID write hole; eBPF programs can now be run by unprivileged users, and perf has added support for eBPF programs aswell; a new mlock2() syscall that allows users to request memory to be locked on page fault; and block polling support.

There are also new drivers and many other small improvements. Here is the full list of changes.

How to blow up your PR: the John Legere master class

There are several acknowledged rules on the Internet. Rule Zero, translated into more appropriate language,of course, is don't commit violence against a cat. Rule One ought to be don't mess with the EFF.

The EFF is one of those few organisations you can just always trust to have your best interests at heart. Their track record is impeccable, and their causes always just.

Don't mess with the EFF.

Cyanogen OS now serving Microsoft ads in its Android UI

Speaking of Cyanogen OS:

Following the Cyanogen OS 12.11 update for the OnePlus One, you may have noticed something worse than the automatic inclusion of Cortana. Now upon selecting a file without a set default application, you will see adverts for Microsoft apps and services on the "open with" menu.

I feel like a broken record player at this point, but don't trust these guys. Selling out to Microsoft has never done anyone any good.

Cyanogen OS update adds deeply integrated Microsoft Cortana

As promised, Cyanogen has released an update to Cyanogen OS (which is not CyanogenMod) that integrates Cortana into their Android offering.

In the Cyanogen OS 12.1.1 update, we are excited to introduce Microsoft Cortana. What makes this such an exciting partnership is that by having Cortana's voice command capability deeply integrated into the Cyanogen ecosystem, we're opening the door to future capabilities that don't currently exist.

So, they're going to "take Android away from Google", and then give it to Microsoft? This Microsoft?

OK.

Look - like Microsoft, Google collects data. A lot of it. We all know it, and at least all of us, OSNews readers, make a conscious choice to use Android anyway. While I don't trust Google in any way, there's at least the comfort that they are probably the most closely monitored company when it comes to privacy, and there's little to no risk of the company folding and being up for grabs - meaning, your data will remain within Google, and won't end up in somebody else's, less trustworthy hands just because they happened to buy Google.

Cyanogen Inc., however, is a whole different ballgame. This is a start-up funded by venture capitalists who are clearly looking for a quick buck. They're making a lot of grandiose claims and a ton of ruckus, and as I've said before, I give them a few years before they're acquired by someone else - at which point your data could end up anywhere, completely beyond your control, with little to no oversight.

Venture capitalists - and by extension, those who depend on them - have no interest in you. You are irrelevant. All they care about is cashing in on their investments as soon as possible, everything else be damned.

Don't buy into Cyanogen. Just don't.

Jide to release Remix OS 2.0: Android for PCs and Macs

Jide Technology has released Remix OS 2.0 as a free download available on January 12th designed to run on the majority of Intel and AMD devices such as PC and Mac. The company which was founded by three ex-Google employees has developed the OS thanks to a partnership with the Android-x86 project enabling it to run on almost any PC.

This is pretty much what Android on desktop and laptops - what Google itself is currently working on - is going to look like. It's designed first and foremost for Jide's own devices, but starting 12 January it'll also be available for select generic x86 devices, including some Macs. There's no proper up-to-date compatibility list as far as I can tell, so we'll have to wait and see just how useful it can be.

It looks quite interesting, and the fact that it's run by former Google employees gives some hope regarding its longevity and legitimacy. That being said, with Google itself working on bringing Android to desktops and laptops, you have to wonder how much longer Jide can maintain itself.

Beating Castlevania: Symphony of the Night with assembly code

So, Castlevania: Symphony of the Night is one of my favourite games of all time, and it's also generally considered to be one of the best games ever made. And, as with all games, people 'speedrun' this game, which means trying to beat the game as fast as is humanly possible. There are several categories, each with certain rules and things that are and are not allowed.

This particular speedrun of Symphony Of The Night by Cosmo takes this concept to a whole new level. The end time of 7 minutes and 52 seconds is mind-blowing enough, but how he actually gets there is just utterly insane. Basically, he procures a very specific set of items in his inventory, and then proceeds to manipulate the items in his inventory in a extremely specific way, within very specific fractions of seconds of game-time, to use the sorting mechanism of the inventory to manipulate the assembly code in memory to make the game finish itself. All this, on the actual console itself, without tools, without additional software, without emulators, without anything.

The actual science or coding behind this technique was discovered and developed by a person named Sockfolder, and he put up a 40-minute stream to explain in detail what's going on, with the contents of memory on the side of the screen so you can see exactly what's happening. It's mesmerising (even though I don't fully understand what's going on).

While the actual coding part of it can be discovered and explored in relative comfort of an emulator and other tools, actually pulling this off 'live', with just the tools at the disposal of any regular player, is absolutely amazing. This kind of stuff sits at the very fringes of programming, and I find it incredibly impressive.

AmigaOS 3.1 source code leak: official statement

The Consumer Electronics Show in Las Vegas is going on right now, but unless you're interested in Samsung or LG smart fridges, generic smartphones from generic vendors, or smartwatches nobody will remember or care about two weeks from now, it's kind of hard to find decent news among the cavalcade of irrelevance.

Well, there's this - an official statement from Hyperion, the developer of AmigaOS 4, regarding the source code leak late last year.

The days between last Christmas and New Year were actually clouded by the sad fact that the source code of AmigaOS 3.1 and additional content dating back to 1994 was published and widely spread without permission of the rights-holder. Note that no code of AmigaOS 4.x was released or distributed.

While this would be already more than enough of a reason to care about the unauthorised disclosure and distribution, it is also the very same settlement agreement which made all of this possible in the first place, which contractually requires Hyperion to enforce and protect any intellectual property rights associated with AmigaOS including the AmigaOS 3.1 source-code.

So yeah, Hyperion is obligated to combat this source code leak, but as we all know - this is the internet. It's out there now, and it's not going anywhere any time soon.

Dutch government says no to backdoors, slides $540k to OpenSSL

The Dutch government has formally opposed the introduction of backdoors in encryption products.

A government position paper, published by the Ministry of Security and Justice on Monday and signed by the security and business ministers, concludes that "the government believes that it is currently not appropriate to adopt restrictive legal measures against the development, availability and use of encryption within the Netherlands."

The conclusion comes at the end of a five-page run-through of the arguments for greater encryption and the counter-arguments for allowing the authorities access to the information.

The word "currently" worries me, but this is good news.

Microkernels are slow and Elvis didn’t do no drugs

Microkernel hatred is a peculiar phenomenon. Sheltered users who have never had any background in much beyond Windows and some flavor of free monolithic Unix, will, despite a general apathy or ignorance in the relevant subjects, have strong opinions on the allegedly dreadful performance and impracticality of "icrokernels", however they define the term (and we shall see that a lot of people have some baffling impressions of what a microkernel is supposed to be). Quite often, these negative views will be a result of various remarks made by Linus Torvalds and a general hero worship of his character, a misrepresentation of an old Usenet flame war between AST and Torvalds that was somehow "won" and which supposedly proved that microkernels are nothing but a toy of ivory tower academics, or a rehash of quarter century-old benchmarks on CMU's Mach that were unfavorable. The presence of Linus' character in many of this is no coincidence. It strikes me that anti-microkernel sentiment most vocally originates as a sort of tribal affiliation mechanism by Linux users to ward off insecurity.

In any event, this article will be a concise tour of microkernel myths and misconceptions throughout the ages.

I wouldn't exactly call this article "concise", but it's definitely filled with valuable technical information.

The website obesity crisis

Let me start by saying that beautiful websites come in all sizes and page weights. I love big websites packed with images. I love high-resolution video. I love sprawling Javascript experiments or well-designed web apps.

This talk isn't about any of those. It's about mostly-text sites that, for unfathomable reasons, are growing bigger with every passing year.

While I'll be using examples to keep the talk from getting too abstract, I'm not here to shame anyone, except some companies (Medium) that should know better and are intentionally breaking the web.

This is an amazing and hilarious read we can all agree with it. I doubt there's going to be any pointless bickering over this one.