Microsoft really wants you to upgrade OneDrive, with new ads popping up in Windows 10 File Explorer

Found on Digital Trends on Thursday, 09 March 2017
Browse Software

One of the least popular new “features” in Windows 10 is the advertising function Microsoft injected directly into the operating system. Ads show up in a number of ways, from promotions of Windows Store apps in the Start menu to pop-up “reminders” that Microsoft’s Edge browser gets better battery life than Google’s Chrome.

OneDrive is baked into Windows 10 and can’t easily be uninstalled, and Microsoft wants to make sure you know that the 5GB of free OneDrive storage can be easily upgraded to significantly more space.

Microsoft has not learned anything from their spam approach to force the adoption of Windows 10.

Windows 10 will let you watch TV as you work

Found on CNet News on Wednesday, 08 February 2017
Browse Software

A test version of Windows 10 released Wednesday comes with a feature called "compact overlay window" that will always float atop your other windows. That could be handy for holding Skype video chats, keeping an eye on political hearings and yes, watching Netflix or the big game when you're supposed to be at work.

"Always on top" is now a sales argument? They must be really desperate, and bosses sure won't be amused.

Overwatch director speaks out against console mouse/keyboard adapters

Found on Ars Technica on Monday, 06 February 2017
Browse Software

"We have lobbied and will continue to lobby for first-party console manufacturers to either disallow mouse and keyboard and input conversion devices or openly and easily support mouse and keyboard for all players," he continued. "I encourage you to reach out to the hardware manufacturers and express your concerns (but please do so in a productive and respectful way)."

Now using keyboard and mouse is considered cheating. Sad new times.

Mozilla binds Firefox's fate to the Rust language

Found on Infoworld on Sunday, 05 February 2017
Browse Software

After version 53, Firefox will require Rust to compile successfully, due to the presence of Firefox components built with the language. But this decision may restrict the number of platforms that Firefox can be ported to—for now.

"The advantage of using Rust is too great,” according to maintainer Ted Mielczarek. “We normally don’t go out of our way to make life harder for people maintaining Firefox ports, but in this case we can’t let lesser-used platforms restrict us from using Rust in Firefox,” he wrote.

That's just another nail in the coffin.

Microsoft won't fix the most frustrating thing about Windows

Found on CNet News on Sunday, 29 January 2017
Browse Software

Windows will take control of your computer, force-feed it updates, and flip the reset switch automatically -- and there's not a damn thing you can do about it, once it gets started.

With no warning, a prompt pops up on your screen telling you that your Windows 10 laptop is about to restart. Even though you know you're about to lose access to your computer, there's not a damn thing you can do about it -- the buttons are all grayed out.

When I ask my fellow CNET staffers, many of them chime in with stories, too: how Windows decided to reboot in the middle of a liveblog, or an expense report, or while taking notes in the middle of an interview -- or in the airport, right before boarding a plane, without enough power left to actually finish the install.

That's why it has (sadly) become a good habit to immediately disable automatic updates after the basic install. In the recent years, Microsofts update strategy has turned into a nightmare of less tested pieces that get shoved down the throats of the users. With Windows 10 making it even harder to avoid updates and the inability to deselect single updates, the next options to remain is the firewall on your router; because you can be pretty sure that using your hosts file to blacklist windowsupdate.microsoft.com will be ignored.

Viruses, spyware found in 'alarming' number of Android VPN apps

Found on ABC News on Wednesday, 25 January 2017
Browse Software

They found of the 283 apps they analysed, 38 per cent contained malware or malvertising (malicious advertising containing viruses).

More than 80 per cent of the apps want access to your sensitive information, such as user data and text messages, according to the researchers.

People rely too much on unknown companies with no history whatsoever to protect their privacy. If you think about it, that already is the first step to failure.

Oracle to Block JAR Files Signed with MD5 Starting with April 2017

Found on Bleeping Computer on Saturday, 21 January 2017
Browse Software

Oracle originally planned MD5's deprecation for the current Critical Patch Update (CPU), released this week, which included a whopping 270 security fixes, one of the biggest security updates to date.

In recent years, Oracle has been advising Java developers to use powerful and dedicated code-signing keys instead.

Java should just be removed entirely. "Write once, run anywhere" was nothing but a marketing joke; you're required to install the runtime environment and different JRE's aren't even compatible.

State of the Union: npm

Found on Linux.com on Saturday, 14 January 2017
Browse Software

For example, in the 28 days prior to the talk, users had installed 18 billion ("billion" with a "b") packages from the registry, although this translated to "only" about 6 billion downloads. The downloads are substantially lower than the installs because approximately 66 percent of the installs are now being served from the cache.

At over 350,000 packages, the npm registry contains more than double the next most populated package registry (which is the Apache Maven repository). In fact, it is currently the largest package registry in the world.

That giant mess is nothing to be proud of. The massive size of the repository would only hint at the low quality guidelines; and that's quite true, seeing that there are lots of "hello world" packages which have absolutely no place in a serious repository. Not to forget the left-pad incident which just underlines the problems of relying on packages for even just the most simple code. Instead of writing your own code, trying to be as independant as possible, these "developers" produce applications which can too easily break. Another thing you should not forget is that packages are not signed, so when caches will get more common, malicious cache operators can modify everything. Furthermore, because world and dog can publish packages, there is no code audit. What if the account containing left-pad would have been hacked and someone just pushes a malware update?

It's now 2017, and your Windows PC can still be pwned by a Word file

Found on The Register on Tuesday, 10 January 2017
Browse Software

Microsoft has begun its 2017 with the release of four updates to address security holes in Windows and Office, while Adobe has posted fixes for more than three dozen vulnerabilities in Flash and Reader.

By the way, if you update Reader, bear in mind it comes with a little surprise: a Chrome extension that sends Adobe telemetry.

Some things just never change. On days like these you can be glad if you just don't use Office, Flash and Reader.

Latest watchOS update bricks some Apple Watches

Found on Ars Technica on Wednesday, 14 December 2016
Browse Software

The issue appears to mostly affect the Apple Watch Series 2, although not every user has experienced problems with the update.

Apple's Apple Watch update woes follow reports that sales of the wearable have slumped dramatically since last year. According to IDC, Apple sold 1.1 million units in the third quarter of 2016, down 71 percent from a year ago. However, Apple CEO Tim Cook said that "sales growth is off the charts."

"Off the chart" has two directions.