Microsoft's email client breaks worldwide, leaves everyone stumped

Found on The Register on Friday, 17 July 2020
Browse Internet

When you try to start the software on Windows, it immediately crashes with the error code 0xc0000005. "Microsoft has borked Outlook," one Reg reader told us. "Thousands of users worldwide are now experiencing this."

A spokesperson for Microsoft also told us: "Our teams have begun to roll out a mitigation for an issue affecting user access to Outlook."

It's understandable that a company cannot test it's updates on all possible software combination, but even not on their own flagships...?

Gmail redesign turns it into a one-stop productivity suite

Found on Ars Technica on Thursday, 16 July 2020
Browse Internet

Twitter user Tahin Rahman posted leaked slides (first spotted by 9to5Google) detailing a merger between Gmail, Google Docs, Google Chat, and Google Meet that looks to be coming to the Web and mobile soon.

The goal of all this looks to be turning Gmail into a one-stop-shop productivity site, where you can do Slack-style room-based chat or single chats, make video calls, edit documents, and send emails.

The goal is to trick you into handing over more and more of your data into the hands of Google. The more of your data you have there, the less likely you are to switch to a competitor, and the better you can be profiled.

Mozilla suspends Firefox Send service while it addresses malware abuse

Found on ZD Net on Saturday, 11 July 2020
Browse Internet

While Mozilla launched Firefox Send with the privacy and security of its users in mind, since late 2019, Firefox Send has seen broader adoption in the malware community.

Over the past few months, Firefox Send has been used to store payloads for all sorts of cybercrime operations, from ransomware to financial crime, and from banking trojans to spyware used to target human rights defenders.

There was no timeline provided for Firefox Send's return, at the time of writing. Any Firefox Send links are now down, meaning that any malware operation relying on the service has also been thwarted.

So much for Mozilla's ideas about how things are going to work. Next thing to fall onto their feet will be DoH.

Microsoft and Zoom join Hong Kong data 'pause'

Found on BBC News on Wednesday, 08 July 2020
Browse Internet

Microsoft and Zoom have said they will not process data requests made by the Hong Kong authorities while they take stock of a new security law.

And while Facebook, Google, Twitter and Telegram's services are blocked in mainland China, the same is not true of Microsoft, Zoom and Apple.

Let's see for how long these requests won't be processed when China stops producing electronics.

Remember when we warned in February Apple will crack down on long-life HTTPS certs?

Found on The Register on Saturday, 04 July 2020
Browse Internet

From September 1, Apple software, from Safari to macOS to iOS, will reject new HTTPS and other SSL/TLS certificates that are valid for more than 398 days, plus or minus some caveats.

"Connections to TLS servers violating these new requirements will fail," Apple warned in its official note. "This might cause network and app failures and prevent websites from loading."

Mozilla and other tech giants previously lobbied the CA/Browser Forum – a collective of certificate issuers and browser makers – for shorter cert lifetimes. After those proposals were shot down in a vote, Apple went ahead anyway with a one-year-max policy and bypassed the industry forum, a move backed by the Chromium team.

Long lived certificates are mostly EV certificates. So if these websites decide to switch to DV certificates like Let's Encrypt, they actually lower the bar. In the end, lifetime decisions should be left to the webmaster.

YouTube TV jumps 30% in price effective immediately

Found on Ars Technica on Thursday, 02 July 2020
Browse Internet

Brand-new customers can expect to pay $65/mo for the service from here on out, while existing customers will see the price jump from $50 to $65 on their July bill.

The other family of streaming and TV services to see a price hike today comes from AT&T, whose AT&T TV (a streaming-only product with rates and plans that resemble standard cable contracts) and DirecTV (a standard satellite-TV product) are each seeing their new-customer rates jump.

These price spikes come less than three months after AT&T disclosed a massive 890,000 drop in premium TV service subscribers.

How many hundreds of dollars are consumers supposed to pay each month, now that everybody seems to roll out their own streaming service?

India bans TikTok, WeChat and dozens more Chinese apps

Found on BBC News on Wednesday, 01 July 2020
Browse Internet

India's Ministry of Information Technology said it was banning the 59 Chinese apps after receiving "many complaints from various sources" about apps that were "stealing and surreptitiously transmitting users' data in an unauthorised manner".

"The compilation of these data, its mining and profiling by elements hostile to national security and defence of India, which ultimately impinges upon the sovereignty and integrity of India, is a matter of very deep and immediate concern which requires emergency measures," the ministry said.

China massively collects each and every bit of information, dubbed "thousand grains of sand".

Google says it will keep less browser history and location data by default

Found on NBC News on Monday, 29 June 2020
Browse Internet

There will be no automatic change for existing accounts and people who already have location history turned on in their Google settings, but the company plans to inform existing users of the option to set up auto-delete after three to 18 months, he said. People also have the option to turn the setting off.

The change comes after growing scrutiny of the amount of data that tech companies such as Google collect and retain. Personal data helps to fuel Google’s lucrative advertising business by allowing marketers to better target their ads.

Or, they could just keep no data by default.

Comcast, Mozilla strike privacy deal to encrypt DNS lookups in Firefox

Found on Ars Technica on Thursday, 25 June 2020
Browse Internet

Comcast is partnering with Mozilla to deploy encrypted DNS lookups on the Firefox browser, the companies announced today. Comcast's version of DNS over HTTPS (DoH) will be turned on by default for Firefox users on Comcast's broadband network, but people will be able to switch to other options like Cloudflare and NextDNS.

Firefox CTO Eric Rescorla said that "bringing ISPs into the TRR program helps us protect user privacy online without disrupting existing user experiences," and that Mozilla hopes today's news "sets a precedent for further cooperation between browsers and ISPs."

So DoH is getting forced down the throat of everybody to protect their privacy, because traditional DNS offered by your ISP lets them snoop on you, and now Comcast joins TRR, but of course now it won't snoop on you anymore. Really now? DoH has proven it's failure.

Facebook accused of trying to bypass GDPR, slurp domain owners' personal Whois info

Found on The Register on Wednesday, 24 June 2020
Browse Internet

Earlier this month, the CEO of domain registrar Namecheap Richard Kirkendall warned “Facebook is fighting for the blanket right to access your information,” and detailed efforts behind the scenes at DNS overseer ICANN to force through Facebook’s interpretation of privacy laws to slurp data on domain holders.

Facebook has been particularly aggressive, filing tens of thousands of requests for data on domains that are often only tangentially related to its trademarks and insisting its rights are being infringed. When those requests have been rebuffed, Facebook has then sued the companies that people used to register the names, claiming trademark infringement and demanding $100,000 in compensation.

But so far at least, the antisocial network – whose entire business is built on grabbing, storing and monetizing this kind of data – is determined to keep pushing its claims, even if it delays the creation of a new system for everyone else.

Hopefully the big registrars won't give in. Facebook is collecting way too much data and anybody who believes the whois information will not be merged into the databases with (shadow) profiles also believes in unicorns.