Windows 10 Update: Would You Like Deleted Files And Blue Screens With That?

Found on Forbes on Sunday, 26 April 2020
Browse Software

With Windows 10 now installed on more than one billion devices, there will always be a wide variation in terms of user satisfaction. One area where this variation can be seen perhaps most clearly is that of updates. It has almost become the norm following the monthly Patch Tuesday update for users to take to support forums and complain that something or other has been borked as a result.

The problems those users are reporting to the Microsoft support forums and on social media have included the installation failing and looping back to restart again, the dreaded Blue Screen of Death (BSOD) following a "successful" update and computers that simply refuse to boot again afterward. Among the more common issues, in terms of complaints after a Windows 10 update, were Bluetooth and Wi-Fi connectivity related ones. But there were have also been users complaining that after a restart, all files from the C drive had been deleted.

Forcing people to upgrade is one of the reasons for problems. Yes, updates are important, but the decision should still be left to the administrator who knows the systems better than Microsoft.

LibreOffice 7.0 Finally Retiring Its Adobe Flash Export Support

Found on Phoronix on Saturday, 25 April 2020
Browse Software

LibreOffice 7.0 has long offered an Adobe Flash export filter, back to the days of it being Macromedia Flash. The focus on this export filter has been for allowing LibreOffice presentations and drawings to be in Flash format.

The support was dropped on Thursday and in the process lightened up this open-source office suite by nearly six thousand lines of code.

That should have happened years ago. Flash was one of the biggest security holes.

Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?

Found on Ars Technica on Friday, 17 April 2020
Browse Software

While the Vanguard anti-cheat client only launches when Valorant is being played, Riot says the system also makes use of a "kernel mode driver" that starts operating as soon as Windows boots up. That's a big change from Riot's pre-Vanguard anti-cheat systems, which operated entirely at the more common "user mode" level, just like most Windows executables.

At the kernel level, any flaws in Riot's driver code could create system-wide, "blue screen of death"-style crashes, as opposed to more localized application-specific glitches. And a serious oversight in the driver, like a buffer overflow exploit, could let an attacker install their own malicious code at an extremely low level, where it could be extremely dangerous.

How about no? Granting random software such access ist a big no-no. On top of that, Riot is owned by chinese Tencent.

The Qt Company Provides A Brief Comment On Open-Source

Found on Phoronix on Monday, 13 April 2020
Browse Software

A KDE developer who serves on the board of the KDE Free Qt Foundation commented that The Qt Company is evaluating restricting new releases to paying customers for 12 months.

Obviously many are concerned that The Qt Company could be erecting a wall around new Qt releases with this possible year delay before going out cleanly as open-source. This comes months after The Qt Company already shifted to make Qt LTS releases customer-only, among other steps to boost their commercial business at the beginning of the year.

Looks like Qt is heading for a fork.

Zoom banned by Taiwan's government over China security fears

Found on BBC News on Thursday, 09 April 2020
Browse Software

Last week, researchers discovered that some traffic from the video-calling app was being sent through Beijing - even when all participants on the Zoom call were in North America.

It is the latest blow to Zoom, which has exploded in popularity during the coronavirus pandemic, resulting in increased scrutiny.

Hopefully many others take this as an example. Zoom is riddled with problems, and far away from being acceptable. Slowly people realize how bad Zoom really is.

Firefox 75 overhauls the browser’s address bar

Found on Ars Technica on Wednesday, 08 April 2020
Browse Software

The big change is a redesign of the address bar, which comes with some tweaks to how searches work when you're using it.

The drop-down that appears when you click in the search bar will show you multiple options for where to search, like Google or Amazon. That same view will show additional keyword suggestions as you type, with the goal being exposing "additional popular keywords that you might not have thought of to narrow your search even further," according to the blog post announcing the redesign.

At the same time, Firefox is on a steady downhill tour. Mozilla should stop concentrating on UI sugar and deliver a useful browser again.

Zoom's end-to-end encryption isn't actually end-to-end at all

Found on The Register on Friday, 03 April 2020
Browse Software

Most notably, the company has been forced to admit that although it explicitly gives users the option to hold an “end-to-end encrypted” conversation and touts end-to-end encryption as a key feature of its service, in fact it offers no such thing.

E2E ensures all communications are encrypted between devices so that not even the organization hosting the service has access to the contents of the connection. With TLS, Zoom can intercept and decrypt video chats and other data.

Zoom granted itself the right to mine your personal data and conference calls to target you with ads, and seemed to have a "creepily chummy" relationship with tracking-based advertisers.

Personal information gathered by the company included, but was not limited to, names, addresses and any other identifying data, job titles and employers, Facebook profiles, and device specifications. It also included "the content contained in cloud recordings, and instant messages, files, whiteboards ... shared while using the service."

Another day, another failure day for Zoom. Do yourself and everybody else a favor and drop this insecure spyware.

Zoom is Leaking Peoples' Email Addresses and Photos to Strangers

Found on Vice on Thursday, 02 April 2020
Browse Software

The issue lies in Zoom's "Company Directory" setting, which automatically adds other people to a user's lists of contacts if they signed up with an email address that shares the same domain.

"I just had a look at the free for private use version of Zoom and registered with my private email. I now got 1000 names, email addresses and even pictures of people in the company Directory. Is this intentional?," one user tweeted last week along with a screenshot.

Last week, Zoom updated the iOS version of its app after Motherboard found it was sending analytics data to Facebook. On Monday a user filed a class action lawsuit against Zoom for the data transfer. On the same day the New York Attorney General sent a letter to Zoom asking what security measures the company had put in place as the app has sky-rocketed in popularity.

It's just getting worse and worse for them. Whenever one hears abou Zoom, it's about pricavy problems, spying and tracking. It feels like you could just install malware instead of it.

Firefox to remove support for the FTP protocol

Found on ZD Net on Friday, 20 March 2020
Browse Software

Mozilla has announced plans today to remove support for the FTP protocol from Firefox. Going forward, users won't be able to download files via the FTP protocol and view the content of FTP links/folders inside the Firefox browser.

"We're doing this for security reasons," said Michal Novotny, a software engineer at the Mozilla Corporation, the company behind the Firefox browser.

"Security reasons". That's like the "terrorism" or "child abuse" argument politicians use to justify snooping. Public FTP is in not way less secure than public HTTP. Oh wait, they are trying to force everything to HTTPS too for various reasons; even where it makes no sense at all. So now people who need FTP are looking for replacement software, and quite a few of them will end up with shady adware based programs that make the entire system less secure.

We love open source, but not enough to share code for our own app, says GitHub

Found on The Register on Thursday, 19 March 2020
Browse Software

The GitHub app however is aimed at all the other things developers do, such as raising or commenting on issues, approving pull requests (requests to merge new code), and responding to notifications such as @mentions.

In an interview, Nystrom and GitHub designer Brian Lovin explained how they mocked up a design for one platform and had the team on the other platform replicate it with appropriate adjustments. The downside of the approach is that the app works differently from visiting the GitHub website with a mobile browser, meaning more to learn.

Sooner or later GitHub will go fully closed-source.