Busted Windows 8, 10 update blamed for breaking Brits' DHCP

Found on The Register on Saturday, 10 December 2016
Browse Software

Computers running the Microsoft operating systems are losing network connectivity due to what appears to be a problem with DHCP. Specifically, it seems some Windows 10 and 8 boxes can no longer reliably obtain LAN-side IP addresses and DNS server settings from their BT and Plusnet broadband routers, preventing them from reaching the internet and other devices on their networks.

If an operating system upgrade is the cause, it would be the second case of egg-on-face for Microsoft's Windows Update team in as many weeks.

Whatever the cause is this time, the result is broken DHCP with PCs being left with no automatically assigned IP addresses. The scale of the issue is unclear, although in our view, it’s mushrooming and it’s striking PCs apparently randomly. Acer, Dell and HP machines have all been affected, we're told.

It's embarrassing for Microsoft if such a bug really slipped through QA.

Hollow, world! Netflix premieres Java in-memory database toolkit

Found on The Register on Monday, 05 December 2016
Browse Software

The streaming media service on Monday released an open-source project called Hollow that dispenses with what it characterizes as the conventional wisdom about distributing datasets of a certain size over a network.

Koszewnik claims that Hollow has helped Netflix reduce server startup times and heap footprints even as it deals with more and more metadata. He also said it has helped the company realize productivity gains associated with disseminating its data catalog.


So they offload the storage and cpu to the customers; hopefully they also offer some compensation. Plus: Java, was that really necessary?

Chrome 55 Now Blocks Flash, Uses HTML5 by Default

Found on Bleeping Computer on Sunday, 04 December 2016
Browse Software

While some of the initial implementation details of the "HTML5 By Default" plan changed since May, Flash has been phased out in favor of HTML5 as the primary technology for playing multimedia content in Chrome.

Flash, who's been accused of being a resource hog and a security threat, will continue to ship with Chrome for the time being.

If you do it, don't do it half-heartedly: you don't block Flash while still shipping it. Just don't install it at all; the Internet works without it. Those websites which rely on Flash for core parts need to phase it out quickly. Having said all that, having Chrome doing this is an annoying decision: until now there was no real pressure to move to HTML5, so not having Flash installed means no annoying advertising that sneaks by adblockers. Now that advertisers will shift to HTML5, this simple and easy protection is gone.

SHIFT + F10, Linux gets you Windows 10's cleartext BitLocker key

Found on The Register on Thursday, 01 December 2016
Browse Software

Microsoft is working on a patch for a bug or feature in Windows 10 that allowed access to the command line and, using a live Linux .ISO, made it possible steal BitLocker keys during OS updates.

"This sadly allows for access to the hard disk as during the upgrade Microsoft disables BitLocker."

Bitlocker is only good for a laugh. Even more so since Microsoft can have backups of your key for recovery purposes, making the disk encryption basically pointless.

You work so hard on coding improvements... and it's all undone by a buggy component

Found on The Register on Tuesday, 18 October 2016
Browse Software

Nearly all (97 per cent) of Java applications contain at least one component with a known vulnerability, according to a new study by app security firm Veracode.

A single popular component with a critical vulnerability spread to more than 80,000 other software components, which were in turn then used in the development of potentially millions of software programs.

Java. Of course. The problem is always Java.

Speak, Memory

Found on The Verge on Sunday, 09 October 2016
Browse Software

It had been three months since Roman Mazurenko, Kuyda’s closest friend, had died. Kuyda had spent that time gathering up his old text messages, setting aside the ones that felt too personal, and feeding the rest into a neural network built by developers at her artificial intelligence startup. She had struggled with whether she was doing the right thing by bringing him back this way. At times it had even given her nightmares. But ever since Mazurenko’s death, Kuyda had wanted one more chance to speak with him.

What if we all are nothing but bots in a simulation? You will never be able to find out.

Windows updates? Just trust us, says Microsoft executive

Found on The Register on Friday, 07 October 2016
Browse Software

"What we have been building is this concept of what we call the Microsoft security graph. With these cloud services, there are signals or telemetry that comes back, that allows us to see what is working, what is not working, what is being used. We have taken all that signal and we call that the intelligent security graph".

"Rather than you approving which patches you want, we are saying let them all flow because the way organisations get the most secure, the most compliant, the most reliable and most performance devices is to stay updated with all of our updates,” says Anderson.

Yeah, that has proven to be so perfect, like the last reboot loop caused by forced updates. Not to mention that all the telemetry is highly unliked by users and a security as well as privacy concern.

Facebook's Messenger Lite lights up old Android phones

Found on CNet News on Monday, 03 October 2016
Browse Software

Facebook Messenger Lite, announced Monday, takes up a much smaller amount of a phone's storage -- just 10 megabytes -- than the full-fat app that most users have installed on their phones, and it has been pared back so that it runs peppily over slower-than-average networks. It is the companion app to Facebook Lite, a stripped-down version of the social network, also for old Android phones, launched in 2015.

Better use one of the various alternatives than that sniffing network.

Learned helplessness and the languages of DAO

Found on Techcrunch on Sunday, 02 October 2016
Browse Software

Everything is terrible. Most software, even critical system software, is insecure Swiss cheese held together with duct tape, bubble wrap, and bobby pins. See eg this week’s darkly funny post “How to Crash Systemd in One Tweet.” But it’s not just systemd, not just Linux, not just software; the whole industry is at fault.

In principle, code can be proved correct with formal verification. This is a very difficult, time-consuming, and not-always-realistic thing to do; but when you’re talking about critical software, built for the long term, that conducts the operation of many millions of machines, or the investment of many millions of dollars, you should probably at least consider it.

The reason is simple: people don't get paid for writing bug-free code, or have the time. Furthermore, the less common a job is, the higher the chance that someone who wrote software for it does not have a perfect background as a developer.

Contentious Windows 10 upgrade ads removed from Windows 7, 8.1

Found on Ars Technica on Wednesday, 21 September 2016
Browse Software

Broadly speaking, the Get Windows 10 program seems to have been successful. Windows 10's uptake was unprecedented for a Windows release, with more than 350 million people now using the operating system—a number that hasn't been updated for several weeks.

The removal of the software isn't going to undo the reputational harm that Microsoft deliberately caused itself with the aggressive upgrade tactics, but it should at least provide some reassurance that Windows 7 or 8.1 will never again try to push a major update.

Successful? If you want to called forced upgrades which are shoved down users' throats by malware- and scareware-like tactics successful, then yes.