MIT Creates Untraceable Anonymous Messaging System Called Vuvuzela

Found on Softpedia on Sunday, 13 December 2015
Browse Software

Unlike Tor, which hides messages with several layers of encryption for sending them through random servers on the Internet, Vuvuzela takes a different approach, one that uses less encryption, but a lot of dummy traffic.

MIT researchers claim that attackers can even infiltrate more than half of its mailbox network, but if at least one mailbox server is left intact, users will be able to safely communicate because of all the fake traffic.

Vuvuzelas were so annoying; hopefully the dummy traffic here is equally annoying for the spooks.

NetHack 3.6.0 Released After a 12-Year Wait

Found on Slashdot on Tuesday, 08 December 2015
Browse Software

For the past 12 years, NetHack 3.4.3 has been the most recent version of the classic roguelike dungeon exploration game. On 7 December 2015, the official NetHack DevTeam announced the release of NetHack 3.6.0.

NetHack 3.6.0 is dedicated to the memory of the author Terry Pratchett. Besides the Tourist character class inspired by his stories, NetHack now contains "a huge number of quotes from many of the Discworld novels."

Time to play again.

Mozilla Wants To Split Off Its Thunderbird Email/Chat Client, Says Mitchell Baker Memo

Found on Techcrunch on Tuesday, 01 December 2015
Browse Software

“I believe Thunderbird should would thrive best by separating itself from reliance on Mozilla development systems and in some cases, Mozilla technology,” Baker wrote in her open memo, posted on Mozilla’s public governance forum.

Mozilla now views any support for Thunderbird, even the limited support it has been providing for the past three years, as akin to “paying a tax,” in Baker’s words, on top of the work those engineers spend building Firefox.

Looks like Chromezilla Mozilla burns all the bridges. If someone takes over Thunderbird and continues the free and open source client, this decision might actually be the best. Chromefox Firefox isn't the lightweight browser it once used to be and just tries to turn into an embarrassing copy of Chrome. Sure, people switch more and more to webmail, but if you truly want control of your email, nothing beats having a local copy.

Telegram Messenger delivers candygrams to stalkers

Found on The Register on Sunday, 29 November 2015
Browse Software

Over at Github, Ola Flisbäck offers up a depressing demonstration of just how easy it is to zero in on an individual by watching the stream of presence and status notifications.

Here's the problem: in trying to make sure Telegram is usable, it's been made way too chatty. For example, Flisbäck writes, “The Telegram Android app sends a notification to all contacts when it becomes or stops being the "foreground" app on the device.

If The Grugq and Matthew Green are right and Telegram's encryption is also problematic, the app is probably more like the spook's friend than the enemy of civilisation

So much for the promise of security.

Windows 10 November Update mysteriously pulled, as concerns about bugs grow

Found on Ars Technica on Tuesday, 24 November 2015
Browse Software

Systems can still be upgraded to the November update, but direct installation is no longer possible. Instead, the original RTM version must be installed, and the upgrade to 1511 performed through Windows Update.

Others are reporting all manner of bugs, such as machines that instantly wake after sleeping, excessive processor usage by the Mail app, the lock screen failing to hide the full desktop, and more besides. Given that Microsoft is still pushing 1511 out through Windows Update, none of these issues would appear to be fatal, showstopper issues, but clearly this release is not without its problems.

The way Windows is developed has changed radically as a result of two things: laying off large numbers of dedicated software testers, and shipping regularly both to members of the Insider program using pre-releases, and to mainstream users with monthly updates and twice-yearly larger upgrades (of which the November release was the first).

MS has always been behind in the development, and right now it seems to have adopted the earlier Facebook motto of "Move Fast and Break Things". It's not helping either that updates take ages. After a fresh Linux install there are around 100-200MB of updates (or you just do them during the install automatically) and a final reboot (which is not a requirement though, just a good idea). In Windows, you do a fresh install, wait 5-10 minutes for an update check, even longer for the amazingly slow installation and face a mandatory reboots. Rinse and repeat numerous times. Roughly 4 hours and 2GB later you finally have an up to date system.

20 Years of GIMP

Found on Slashdot on Sunday, 22 November 2015
Browse Software

Back in 1995, University of California students Peter Mattis and Kimball Spencer were members of the eXperimental Computing Facility, a Berkeley campus organization. In June of that year, the two hinted at their intentions to write a free graphical image manipulation program as a means of giving back to the free software community.

To celebrate the 20th anniversary, there is an update of the current stable branch of GIMP.

It feels like nothing has changed in the past years and it's always been a bit weird.

TrueCrypt is safer than previously reported, detailed analysis concludes

Found on Ars Technica on Friday, 20 November 2015
Browse Software

The researchers said the vulnerabilities uncovered by Project Zero and in the Fraunhofer analysis should be fixed but that there's no indication that they can be exploited to provide attackers access to encrypted data stored on an unmounted hard drive or thumb drive.

The conclusion means that the millions of people who have relied on TrueCrypt will probably have a grace period to safely continue using the program until VeraCrypt or another TrueCrypt replacement is farther along in development.

So it is still safer than not using any encryption at all. If you want to keep some possibly embarrassing files, put them into a Truecrypt container instead of hoping that nobody will look into "C:\Users\Bob\Favorites\Links\Boring\PrinterSetup\".

Python’s on the Rise… While PHP Falls

Found on Dice on Wednesday, 18 November 2015
Browse Software

According to PYPL, which pulls its raw data for analysis from Google Trends, Python has grown the most over the past five years—up 5 percent since roughly 2010. Over the same period, PHP also declined by 5 percent.

For developers and other tech pros, these lists come in useful when deciding which languages to pursue. Ones near the top of the rankings are in wide use, usually making them worth your valuable learning time.

It's not impressive if you know a dozen languages, when the best you can do is a "hello world". Pick a language (or two) which you like and learn to really use it.

Pause Patch Tuesday downloads, buggy code can kill Outlook

Found on The Register on Wednesday, 11 November 2015
Browse Software

The problem is with software in one of the four critical patches issued in yesterday's Patch Tuesday bundle – MS15-115. This was supposed to fix a flaw in the way Windows handles fonts, but has had some unexpected side effects for some Outlook users.

The SysAdmin sector of Reddit is awash with reports of problems with the patch, and it appears to be a cross-OS problem. The general consensus is to disable the patch on Windows Server Update Services and wait for a reissue.

First of all, the major mistake is to actually use Outlook. Second, with forced updates it won't get nicer in the future.

Microsoft Facing IT Manager Resistance to Automatic Windows 10 Updates

Found on eWEEK on Saturday, 07 November 2015
Browse Software

Many corporate and business users—particularly IT managers—are all concerned about the havoc that the update might wreak on the performance of their applications and computers.

Microsoft responded in a blog post by Executive Vice President Terry Myerson explaining the existing options for upgrades and also revealing that, starting next year, Windows 10 would be installed on Windows 7 and Windows 8.1 through the normal update process.

Sorry, but no. The only option left then is to completely avoid the updates and sit on unsupported operating systems, just like XP; which is still the workhorse behind some not so obvious systems, like banking terminals. The last thing you would like is a nightly reboot of an ATM machine after which the UI does not work anymore, making it impossible to withdraw money. Or worse, it could allow attackers to gain access to the bank's network. Microsoft is on its best way to alienate their most-paying customers. If you cannot safely predict (and test) the state of a system, it is worthless for development.