FileZilla FTP Client Adds Support for Master Password That Encrypts Your Logins

In November 2016, a user frustrated with Koose's stance forked the FileZilla FTP client and added support for a master password via a spin-off app called FileZilla Secure.
The author of FileZilla Secure took this action after his computer was infected with malware, and the malware stole the FileZilla password trove, a file named sitemanager.xml.
Red Hat Enterprise Linux 7.4 Set to Improve Security Features

The upcoming Red Hat Enterprise Linux 7.4 release is set to provide organizations with a series of new features and enhancements that will improve security and performance.
Security isn't the only area of enhancement in RHEL 7.4, as the new release will also benefit from the inclusion the Network Manager 1.8 update. Network Manager is the open-source service that enables detection and configuration of network connectivity.
Redmond puts wall around Windows 10 for Chinese government edition

"The China Government Edition will use these manageability features to remove features that are not needed by Chinese government employees, like OneDrive, to manage all telemetry and updates, and to enable the government to use its own encryption algorithms within its computer systems."
Presumably a lot less information is collected by the notoriously data-hungry OS, and little of it is likely to flow to Redmond's servers. Any info that is extracted is almost certainly staying in China.
Windows 10 S: no command line apps, free Pro upgrades for assistive tech users

First, a thing 10 S won't do: run command-line applications. CMD and PowerShell, the two built-in Windows command-line interfaces, won't be supported.
The rationale is that the built-in command-line applications include dangerous tools (for example, the diskpart partitioning program) that can break things, and the Store has no third-party command-line tools at all. To keep Windows 10 S protected against user error, they're all prohibited.
It might be time to say goodbye to the MP3 - so let's look back at its life

The Fraunhofer Institute says it has "terminated" its licensing programme with Technicolor because its patents are expiring.
The supposed "death" of the MP3 won't have much of an impact because of streaming and most new portable players now use different formats anyway.
Don't tell people to turn off Windows Update, just don't

Often, the updates these products deliver patch some pretty nasty security flaws. If you had any version of Windows since Vista running the default Windows Update, you would have had the critical Microsoft Security Bulletin known as "MS17-010" pushed down to your PC and automatically installed.
This is how consumer software these days should be: self-updating with zero input required from the user. As soon as they're required to do something, it'll be neglected which is why Windows Update is so critical.
Opera’s new browser gives you direct access to WhatsApp, Messenger, and Telegram

Opera may be the underdog of the browser world, but it continues to fight hard, adding interesting new features to try and win over users. The latest addition is a messaging sidebar built directly into the browser interface.
As well as the messaging sidebar, Opera Reborn debuts a redesigned UI, offering animated icons, colorful themes, and a dedicated dark mode.
Linux kernel security gurus Grsecurity oust freeloaders from castle

Linux users, the free lunch is over. Pennsylvania-based Open Source Security on Wednesday decided to stop making test patches of Grsecurity available for free.
To date and going forward, Grsecurity's patches are and will be distributed under the GPLv2 free-software license, just like the Linux kernel.
Windows Updates getting even more complex, a little more controllable

This split packaging (and split classification) should make it easier for organizations to, for example, deploy Security Update very quickly but hold the non-security portion back so that it can be more thoroughly tested and validated. Systems that are set to skip "quality updates" will skip these packages, picking up only the security updates.
Top-ranked programming Web tutorials introduce vulnerabilities into software

Researchers from several German universities have checked the PHP codebases of over 64,000 projects on GitHub, and found 117 vulnerabilities that they believe have been introduced through the use of code from popular but insufficiently reviewed tutorials.
In their research, they evaluated only PHP application code, but their approach can be easily used to evaluate codebases in other programming languages, especially because they have made available their crawler (GithubSpider) and code analogue detector (CADetector) tools.