×
Republicans

Trump Says He Won't Return To Twitter (barrons.com) 215

Earlier today, Twitter announced that it has agreed to be acquired by Elon Musk for approximately $44 billion. The announcement led to speculation that former President Donald Trump may return to the social media platform after being permanently banned in January 2021 for his role in the January 6th insurrection. However, according to TechCrunch, "it looks like he's not interested and is instead planning to formally join his own Truth Social platform over the next seven days." From the report: "I am not going on Twitter, I am going to stay on Truth," Trump told Fox News. "I hope Elon buys Twitter because he'll make improvements to it and he is a good man, but I am going to be staying on Truth. The bottom line is, no, I am not going back to Twitter." [...] Trump's comments from today come as shares of Digital World Acquisition Corp, which announced a deal in October to acquire Trump Media & Technology Group, fell 9.5% as Twitter officially announced its deal with Musk. It's possible that Truth's shaky start could cause Trump to change his mind about rejoining Twitter down the road.

Trump's media group released its Truth Social iOS app in February, but the app remained unavailable to users for quite some time. Truth is being marketed as an alternative to social media giants like Twitter and Facebook. If Trump does end up posting on Truth regularly this week, it will mark the former president's return to social media following his ban from numerous platforms, including Twitter and Facebook. So far, he's only posted on Truth once.

As for Twitter, Musk says that "free speech" is key to Twitter's future. Twitter says the transaction, which was unanimously approved by the board, will likely close this year following shareholder and regulatory approval and "the satisfaction of other customary closing conditions."

Security

The Pros and Cons of a Future Without Passwords (cnbc.com) 123

CNBC explores the dream of "a future where nobody has to constantly update and change online passwords to stay ahead of hackers and keep data secure." Here's the good news: Some of the biggest names in tech are already saying that the dream of a password-less internet is close to becoming a reality. Apple, Google and Microsoft are among those trying to pave the way... In theory, removing passwords from your cybersecurity equation nixes what former Secretary of Homeland Security Michael Chertoff has called "by far the weakest link in cybersecurity." More than 80% of data breaches are a result of weak or compromised passwords, according to Verizon....

Doing away with passwords altogether is not without risks. First, verification codes sent via email or text message can be intercepted by hackers. Even scarier: Hackers have shown the ability to trick fingerprint and facial recognition systems, sometimes by stealing your biometric data. As annoying as changing your password might be, it's much harder to change your face or fingerprints. Second, some of today's password-less options still ask you to create a PIN or security questions to back up your account. That's not much different from having a password.... Plus, tech companies still need to make online accounts accessible across multiple platforms, not just on smartphones — and also to the people who don't own smartphones at all, roughly 15% of the U.S.

Some data points from the article:
  • "Microsoft says 'nearly 100%' of the company's employees use password-less options to log into their corporate accounts."
  • "In September, Microsoft announced that its users could go fully password-less to access services like Windows, Xbox, and Microsoft 365."
  • Apple's devices have used Touch ID and Face ID features for several years."

Iphone

Apple App Store Appears to Be Widely Removing Outdated Apps (theverge.com) 76

"Apple may be cracking down on apps that no longer receive updates," reports the Verge: In a screenshotted email sent to affected developers, titled "App Improvement Notice," Apple warns it will remove apps from the App Store that haven't been "updated in a significant amount of time" and gives developers just 30 days to update them....

In 2016, Apple said it would start removing abandoned apps from the App Store. At the time, it also warned developers that they would have 30 days to update their app before it got taken down. That said, it's unclear whether Apple has continuously been enforcing this rule over the years, or if it recently started conducting a wider sweep. Apple also doesn't clearly outline what it considers to be "outdated" — whether it's based on the time that has elapsed since an app was last updated, or if it concerns compatibility with the most recent version of iOS.

Critics of this policy argue that mobile apps should remain available no matter their age, much like old video games remain playable on consoles. Others say the policy is unnecessarily tough on developers, and claim Apple doesn't fully respect the work that goes into indie games.

Earlier this month, the Google Play Store similarly announced it would begin limiting the visibility of apps that "don't target an API level within two years of the latest major Android release version." Android developers have until November 1st, 2022 to update their apps, but also have the option of applying for a six-month extension if they can't make the deadline.

United Kingdom

No 10 Suspected of Being Target of NSO Spyware Attack, Boris Johnson 'Told' (theguardian.com) 23

Boris Johnson has been told his Downing Street office has been targeted with "multiple" suspected infections using Pegasus, the sophisticated hacking software that can turn a phone into a remote listening device, it was claimed on Monday. The Guardian reports: A report released by Citizen Lab at the University of Toronto said the United Arab Emirates was suspected of orchestrating spyware attacks on No 10 in 2020 and 2021. Pegasus is the hacking software -- or spyware -- developed, marketed and licensed to governments around the world by the Israeli firm NSO Group. It has the capability to infect phones running either iOS or Android operating systems. Citizen Lab added there had also been suspected attacks on the Foreign Office over the same two years that were also associated with Pegasus operators linked to the UAE -- as well as India, Cyprus and Jordan.

The researchers, considered among the world's leading experts in detecting digital attacks, announced they had taken the rare step of notifying Whitehall of the attack as it "believes that our actions can reduce harm." However, they were not able to identify the specific individuals within No 10 and the Foreign Office who are suspected of having been hacked. "The suspected infections relating to the FCO were associated with Pegasus operators that we link to the UAE, India, Cyprus and Jordan. The suspected infection at the UK prime minister's office was associated with a Pegasus operator we link to the UAE."

Facebook

Apple's App Tracking Transparency Crackdown Estimated To Cost Facebook Another $13 Billion In 2022 42

Apple's controversial App Tracking Transparency feature available in iOS 14.5 is expected to have a significant impact on Facebook, Twitter, Snap, and YouTube in 2022. According to a report by Lotame, big tech platforms' revenue could drop by almost $16 billion. 9to5Mac reports: For those who don't remember, ATT requires that applications ask permission from users before tracking them across other apps and websites. For example, when you open the Facebook app, you'll see a prompt that says the app would like to track you across other apps and services. There will be two options from which to choose: "Ask App not to Track" or "Allow."

Talking about Facebook, Lotame's report shows that Zuckerberg's company will take the biggest hit as the privacy changes will cost it $12.8 billion in revenue: "The effects of these changes on these companies are hard to isolate because all four players are still growing extremely strongly, still taking share from the last bastions of traditional media and gaining share in digital media as privacy regulations make it harder and harder for independent publishers and technologies to execute,' said Mike Woosley, Chief Operating Officer at Lotame. 'To add to the complexity, the pandemic has introduced volatile and unpredictable gyrations in the pacing of media spend.'"
Google

Google Quietly Launches Its Awaited 'Switch To Android' App on iOS (techcrunch.com) 29

On Monday, Google quietly launched the Switch to Android app on the App Store in a number of global markets, including the U.S. From a report: As expected, the app promises to make the transition between mobile platforms easier to manage by helping users import their contacts, calendar, photos, and videos to their new Android phone. The app also instructs users how to turn off Apple's iMessage in order to get text messages on their new device and has them connect with iCloud to migrate their photo and video library to Android.
Transportation

'Speedcam Anywhere' App Allows Anyone To Submit Evidence of Drivers Speeding (totum.com) 323

An anonymous reader quotes a report from Totum: A new app will allow any member of the public to submit evidence of other drivers speeding to the police. Using AI to estimate the speed of a passing car, Speedcam Anywhere, has been created by a team of AI scientists with backgrounds in Silicon Valley companies and top UK universities, reports the Guardian. The hope is it will encourage police to take speeding more seriously while enabling residents, pedestrians and cyclists to document traffic crimes in their area.

However, the app's creators say they have been subjected to a vicious response, with many now scared to reveal their real identities due to the level of vitriol aimed at them by drivers. "We're getting quite abusive emails," Sam, the app's founder, told the Guardian on condition of anonymity. "It's a Marmite product -- some people think it's a good idea, some people think that it turns us into a surveillance state. "I can see both sides of that, but I think that if you're going to have speed limits, then it's the law that you obey them, and you should enforce the law. It's not a personal vendetta against anyone, it's just -- how do we make our roads safe? "There are 20,000 serious injuries on the roads every year -- how can we reduce them? And the way we reduce them is we make a deterrent to speeding."

The app has also faced other difficulties in getting off the ground. Google initially refused to allow it on the Play Store, claiming it wasn't possible to estimate the speed of a passing vehicle using AI alone, however this claim was later proved wrong. An iOS version has also been developed, but it has not yet been approved for distribution by Apple, who have not given a reason for the delay. "We're not sure why they would block a useful piece of technology, something that could save people's lives," Sam said. [...] Currently, the app cannot lead to drivers receiving speeding tickets, as the algorithm is yet to be vetted by the Home Office, meaning it is not legally a speed camera, although drivers could still be charged with 'dangerous driving' offenses if their behavior is deemed to be sufficiently negligent. Sam says he hopes use of the app will alert police to speeding hotspots, encouraging them to take more action against dangerous driving.

Digital

Apple Announces Digital WWDC 2022 Event (macrumors.com) 23

Apple today announced that its 33rd annual Worldwide Developers Conference is set to take place from Monday, June 6 to Friday, June 10. As with the last several WWDC events, the 2022 Worldwide Developers Conference will be held digitally with no in-person gathering. MacRumors reports: There will be no cost associated with WWDC 2022, with all developers worldwide able to attend the virtual event. Apple plans to provide sessions and labs for developers to allow them to learn about the new features and software updates that will be introduced at the event, plus there will be a traditional Swift Student Challenge.

Apple says that this year's event will feature additional information sessions, more learning labs, more digital lounges to engage with attendees, and more localized content, with the aim of making WWDC22 "a truly global event." Though the event will be digital, Apple also plans to host a special day for developers and students at Apple Park on June 6 to watch the keynote and State of the Union videos together. Space will be limited, and Apple will take applications.

Apple is expected to hold an online keynote on the first day of WWDC to unveil new software, including iOS 16, iPadOS 16, macOS 13, tvOS 16, and watchOS 9. It is also possible we could see new hardware at WWDC, as Apple is working on an updated Apple silicon Mac Pro, a new version of the MacBook Air, and more.

Privacy

Russian Tech Giant Yandex's Data Harvesting Raises Security Concerns (ft.com) 26

Russia's biggest internet company has embedded code into apps found on mobile devices that allows information about millions of users to be sent to servers located in its home country. From a report: The revelation relates to software created by Yandex that permits developers to create apps for devices running Apple's iOS and Google's Android, systems that run the vast majority of the world's smartphones. Yandex collects user data harvested from mobiles, before sending the information to servers in Russia. Researchers have raised concerns the same "metadata" may then be accessed by the Kremlin and used to track people through their mobiles. Researcher Zach Edwards first made the discovery regarding Yandex's code as part of an app auditing campaign for Me2B Alliance, a non-profit. Four independent experts ran tests for the Financial Times to verify his work.

Yandex has acknowledged its software collects "device, network and IP address" information that is stored "both in Finland and in Russia," but it called this data "non-personalised and very limited." It added: "Although theoretically possible, in practice it is extremely hard to identify users based solely on such information collected. Yandex definitely cannot do this." The revelations come at a critical time for Yandex, often referred to as "Russia's Google," which has long attempted to chart an independent path without falling foul of Russian president Vladimir Putin's desire for greater control of the internet. The company said it followed "a very strict" internal process when dealing with governments: "Any requests that fail to comply with all relevant procedural and legal requirements are turned down."

Security

How to Eliminate the World's Need for Passwords (arstechnica.com) 166

The board members of the FIDO alliance include Amazon, Google, PayPal, RSA, and Apple and Microsoft (as well as Intel and Arm). It describes its mission as reducing the world's "over-reliance on passwords."

Today Wired reports that the group thinks "it has finally identified the missing piece of the puzzle" for finally achieving large-scale adoption of a password-supplanting technology: On Thursday, the organization published a white paper that lays out FIDO's vision for solving the usability issues that have dogged passwordless features and, seemingly, kept them from achieving broad adoption....

The paper is conceptual, not technical, but after years of investment to integrate what are known as the FIDO2 and WebAuthn passwordless standards into Windows, Android, iOS, and more, everything is now riding on the success of this next step.... FIDO is looking to get to the heart of what still makes passwordless schemes tough to navigate. And the group has concluded that it all comes down to the procedure for switching or adding devices. If the process for setting up a new phone, say, is too complicated, and there's no simple way to log in to all of your apps and accounts — or if you have to fall back to passwords to reestablish your ownership of those accounts — then most users will conclude that it's too much of a hassle to change the status quo.

The passwordless FIDO standard already relies on a device's biometric scanners (or a master PIN you select) to authenticate you locally without any of your data traveling over the Internet to a web server for validation. The main concept that FIDO believes will ultimately solve the new device issue is for operating systems to implement a "FIDO credential" manager, which is somewhat similar to a built-in password manager. Instead of literally storing passwords, this mechanism will store cryptographic keys that can sync between devices and are guarded by your device's biometric or passcode lock. At Apple's Worldwide Developer Conference last summer, the company announced its own version of what FIDO is describing, an iCloud feature known as "Passkeys in iCloud Keychain," which Apple says is its "contribution to a post-password world...."

FIDO's white paper also includes another component, a proposed addition to its specification that would allow one of your existing devices, like your laptop, to act as a hardware token itself, similar to stand-alone Bluetooth authentication dongles, and provide physical authentication over Bluetooth. The idea is that this would still be virtually phish-proof since Bluetooth is a proximity-based protocol and can be a useful tool as needed in developing different versions of truly passwordless schemes that don't have to retain a backup password. Christiaan Brand, a product manager at Google who focuses on identity and security and collaborates on FIDO projects, says that the passkey-style plan follows logically from the smartphone or multi-device image of a passwordless future. "This grand vision of 'Let's move beyond the password,' we've always had this end state in mind to be honest, it just took until everyone had mobile phones in their pockets," Brand says....

To FIDO, the biggest priority is a paradigm shift in account security that will make phishing a thing of the past.... When asked if this is really it, if the death knell for passwords is truly, finally tolling, Google's Brand turns serious, but he doesn't hesitate to answer: "I feel like everything is coalescing," he says. "This should be durable."

Such a change won't happen overnight, the article points out. "With any other tech migration (ahem, Windows XP), the road will inevitably prove arduous."
Linux

Linux For M1 Macs? First Alpha Release Announced for Asahi Linux (asahilinux.org) 108

"Asahi Linux aims to bring you a polished Linux experience on Apple Silicon Macs," explains the project's web site.

And now that first Asahi Linux alpha release is out — ready for testing on M1, M1 Pro, and M1 Max machines (except Mac Studio): We're really excited to finally take this step and start bringing Linux on Apple Silicon to everyone. This is only the beginning, and things will move even more quickly going forward!

Keep in mind that this is still a very early, alpha release. It is intended for developers and power users; if you decide to install it, we hope you will be able to help us out by filing detailed bug reports and helping debug issues. That said, we welcome everyone to give it a try — just expect things to be a bit rough.... Asahi Linux is developed by a group of volunteers, and led by marcan as his primary job. You can support him directly via Patreon and GitHub Sponsors....

Can I dual-boot macOS and Linux?

Yes! In fact, we expect you to do that, and the installer doesn't support replacing macOS at this point. This is because we have no mechanism for updating system firmware from Linux yet, and until we do it makes sense to keep a macOS install lying around for that. You can have as many macOS and Linux installs as you want, and they will all play nicely and show up in Apple's boot picker. Each Linux install acts as a self-contained OS and should not interfere with the others.

Note that keeping a macOS install around does mean you lose ~70GB of disk space (in order to allow for updates, since the macOS updater is quite inefficient). In the future we expect to have a mechanism for firmware updates from Linux and better integration, at which point we'll be comfortable recommending Linux-only setups....

Is this just Arch Linux ARM?

Pretty much! Most of our work is in the kernel and a few core support packages, and we rely on Linux's excellent existing ARM64 support. The Asahi Linux reference distro images are based off of Arch Linux ARM and simply add our own package repository, which only adds a few packages. You can freely convert between Arch Linux ARM and Asahi Linux by adding or removing this repository and the relevant packages, although vanilla Arch Linux ARM kernels will not boot on these machines at this time.

The project's home page adds that "All contributors are welcome, of any skill level!"

"Doing this requires a tremendous amount of work, as Apple Silicon is an entirely undocumented platform," the team explains. "In particular, we will be reverse engineering the Apple GPU architecture and developing an open-source driver for it." But they're already documenting the Apple Silicon platform on their GitHub wiki. We will eventually release a remix of Arch Linux ARM, packaged for installation by end-users, as a distribution of the same name. The majority of the work resides in hardware support, drivers, and tools, and it will be upstreamed to the relevant projects....

Apple allows booting unsigned/custom kernels on Apple Silicon Macs without a jailbreak! This isn't a hack or an omission, but an actual feature that Apple built into these devices. That means that, unlike iOS devices, Apple does not intend to lock down what OS you can use on Macs (though they probably won't help with the development). As long as no code is taken from macOS to build the Linux support, the result is completely legal to distribute and for end-users to use, as it would not be a derivative work of macOS.

An interesting observataion from Slashdot reader mrwireless: It once again seems Apple is informally supportive of these efforts, as the recent release of OS Monterey 12.3 makes the process even simpler. As Twitter user Matthew Garrett writes:

"People who hate UEFI should read https://github.com/AsahiLinux/... — Apple made deliberate design choices that allow third party OSes to run on M1 hardware without compromising security, and with much less closed code than on basically any modern x86."

OS X

macOS 12.3 Arrives With Universal Control, Spatial Audio Features (engadget.com) 121

Apple has rolled out macOS 12.3 and iPadOS 15.4, bringing the highly-anticipated (and delayed) Universal Control feature. Engadget reports: The tool, which is in beta, allows you to control a Mac and iPad at the same time with a single keyboard and mouse (or trackpad). You can enter text on either device and drag files between them. Apple initially said Universal Control would be available last fall, but in December it delayed the release until this spring. Apple has enhanced spatial audio on M1-powered systems as well. Apple Music now has dynamic head tracking support for compatible AirPods. You'll find settings for fixed and head-tracking spatial audio in the Control Center. There's also several new emoji, more filters for the Podcasts app, optional notes for saved passwords and more accurate battery capacity readings, among other changes.

iOS 15.4 was also released today, adding the option to use Face ID while wearing a mask. "The updates also add 37 new emoji characters and they lay the groundwork for the new 'Tap to Pay on iPhone' feature that allows NFC-compatible iPhones to accept payments through Apple Pay," reports MacRumors. "There are also updates to add custom domains to iCloud Mail right on device, Siri enhancements, new Emergency SOS features, and tons more."
Twitter

Twitter Makes It Harder To Choose the Old Reverse-Chronological Feed (theverge.com) 29

Twitter is rolling out a change that, frustratingly, makes it a bit more difficult to see your chronological feed. From a report: The design change, which lets you swipe between your Home (algorithmically served) and Latest (reverse chronological) timelines, was announced Thursday. To set it up, you tap the sparkle icon in the top right corner, and you'll see the option to pin your "Latest timeline," and if you select that, you'll see both "Home" and "Latest Tweets" tabs at the top of the iOS app. If you use pinned lists on the iOS app, the layout might look familiar. The feature is available first on iOS, and it's coming "soon" to Android and the web, Twitter says. To my great disappointment, however, I've found that after testing the feature, now I can't make the chronological feed the default. Instead, I can only have Home as my default or set up the two Home and Latest Tweets tabs and swap between them as needed.
Safari

'Open Web Advocacy' Group Battles Apple's WebKit-Based Walled Garden (theregister.com) 78

The Register reported this week on a group of software developers launching a group called Open Web Advocacy "to help online apps compete with native apps and to encourage or compel Apple to relax its iOS browser restrictions." The group (OWA), organized by UK-based developers Stuart Langridge, Bruce Lawson, and others, aims to promote a more open web by explaining subtle technical details to lawmakers and to help them understand anti-competitive aspects of web technology. Over the past few months, group members have been communicating with the UK Competitions and Markets Authority (CMA) to convince the agency that Apple's iOS browser policy harms competition.

In conjunction with the debut of the group's website, the OWA plans to release a technical paper titled "Bringing Competition to Walled Gardens," that summarizes the group's position and aims to help regulators in the UK and elsewhere understand the consequences of web technology restrictions.

The group is looking for like-minded developers to take up its cause.... The primary concern raised by Langridge and Lawson is that Apple's iOS App Store Guidelines require every browser running on iPhones and iPads to be based on WebKit, the open source project overseen by Apple that serves as the rendering engine for the company's Safari browser.

"The OWA is now urging Apple users to contact regulators and legislators in other jurisdictions to galvanize support and force Apple to end its restrictions around WebKit," reports MacRumors, "although such a move could make sideloading apps from the web a real possibility, and that is something Apple appears equally reluctant to allow.

Reuters reported today that Apple has now written to U.S. lawmakers "to dispute assertions that its concerns about the dangers of sideloading apps into phones were overblown...." Reuters points out that the U.S. Congress "is currently considering a bill aimed at reining in app stores run by Apple and Alphabet's Google, which would require companies to allow sideloading. Apple has argued that such a practice would be a security risk as it keeps tight control of the apps in the store in order to keep users safe."

But OWA organizer Bruce Lawson tells the Register that as things stand now, "at the moment, every browser on iOS, whether it be badged Chrome, Firefox or Edge is actually just a branded skin of Safari, which lags behind [other browsers] because it has no competition on iOS."

And something funny happened when the Register contacted Apple for a comment about why they're against App Store rule changes: To our astonishment, after having queries ignored for months, an Apple spokesperson responded, asking whether the company could correspond off-the-record. We replied that we would be happy to communicate off-the-record and then never heard back.

Or if we did, we couldn't say.

Microsoft

Former Xamarin Co-founder Miguel de Icaza is Leaving Microsoft (zdnet.com) 32

Well-known open source advocate and developer Miguel de Icaza, who joined Microsoft in 2016 when it acquired Xamarin, the mobile-tool company he cofounded, is leaving Microsoft. From a report: De Icaza -- a Microsoft distinguished engineer -- confirmed to me on March 2 that he has decided to leave and will be taking some time off before moving to a new job. Ever since de Icaza's colleague and former Xamarin CEO Nat Friedman left Microsoft in November 2021, there's been speculation that de Icaza also would leave Microsoft. Friedman was the CEO of Microsoft's GitHub division. Friedman said late last year he had decided to go back to his startup roots. De Icaza has been with Microsoft for just over six years. Most recently, he has been working on various AI projects with the ONNX team. ONNX, the Open Neural Network Exchange, is an evolving standard format for machine learning models that is being championed by Microsoft, Meta and Amazon. De Icaza worked with the team to get the ONNX runtime on Android and iOS to support mobile developers using Xamarin.
Iphone

Apple Announces March 8 Event, With the Tagline 'Peek Performance' (cnbc.com) 18

Apple on Tuesday sent out invitations to the media for an event on March 8, with the tagline "Peek Performance." According to CNBC, the company is "expected to announce a new low-cost iPhone model" and a midrange iPad. From the report: Apple could announce a new low-cost iPhone with 5G support and a fingerprint reader, as well as a midrange iPad, according to media and analyst reports. The company currently offers a low-cost iPhone called the iPhone SE, which was introduced in the spring of 2020, and retails for $399. It's the most recent iPhone model with Apple's Touch ID fingerprint sensor. The new iPad is expected to be an updated version of the iPad Air, according to Bloomberg. That device was last updated in October 2020 and currently retails for $599.

Apple could also release iOS 15.4, the latest version of iPhone software, with several new features including the option to use facial recognition to unlock the device while wearing a mask, and the ability to accept contactless credit card payments without additional hardware.

Cloud

Amazon's Luna Cloud Gaming Service Officially Launches In the US (engadget.com) 6

A year and a half later, Amazon's Luna cloud gaming service has formally launched in the U.S. for Android, iOS, Chrome OS, macOS and Windows. Engadget reports: The core Luna+ service with over 100 games will normally cost $10 per month, with the kid-friendly Family Channel and Ubisoft+ Channels available for a respective $6 and $18 per month. Amazon hopes to reel in newcomers by dropping the monthly fees of Luna+ and the Family channel to $6 and $3 for anyone who signs up during March. Existing users just have to maintain their subscriptions to lock in that pricing.

The official debut comes alongside some new channels. A Prime Gaming channel, as the name implies, gives Amazon Prime members a free, rotating mix of games. The March selection will include titles like Devil May Cry 5 and Flashback. Pay $5 per month for the Retro Channel and you'll get Capcom and SNK classics like Street Fighter II Hyper Fighting and Metal Slug 3, while a similar outlay for the Jackbox Games Channel provides access to all eight Jackbox Party Pack titles. Luna's latest update also makes it simpler to stream gameplay from a Fire TV device, Mac or Windows PC on Twitch.

Bug

Linux Developers Patch Bugs Faster Than Microsoft, Apple, and Google, Study Shows (zdnet.com) 43

Linux programmers fixed bugs faster than anyone — in an average of just 25 days (improving from 32 days in 2019 to just 15 in 2021). That's the conclusion of Google's "Project Zero" security research team, which studied the speed of bug-fixing from January 2019 to December 2021.

ZDNet reports that Linux's competition "didn't do nearly as well." For instance, Apple, 69 days; Google, 44 days; and Mozilla, 46 days. Coming in at the bottom was Microsoft, 83 days, and Oracle, albeit with only a handful of security problems, with 109 days.

By Project Zero's count, others, which included primarily open-source organizations and companies such as Apache, Canonical, Github, and Kubernetes, came in with a respectable 44 days.

Generally, everyone's getting faster at fixing security bugs. In 2021, vendors took an average of 52 days to fix reported security vulnerabilities. Only three years ago the average was 80 days. In particular, the Project Zero crew noted that Microsoft, Apple, and Linux all significantly reduced their time to fix over the last two years.

As for mobile operating systems, Apple iOS with an average of 70 days is a nose better than Android with its 72 days. On the other hand, iOS had far more bugs, 72, than Android with its 10 problems.

Browsers problems are also being fixed at a faster pace. Chrome fixed its 40 problems with an average of just under 30 days. Mozilla Firefox, with a mere 8 security holes, patched them in an average of 37.8 days. Webkit, Apple's web browser engine, which is primarily used by Safari, has a much poorer track record. Webkit's programmers take an average of over 72 days to fix bugs.

Medicine

FDA Clears First Smartphone App For Insulin Delivery (theverge.com) 13

The Food and Drug Administration cleared a smartphone app from Tandem Diabetes Care to program insulin delivery for its t:slim X2 insulin pump, the company announced Wednesday. The Verge reports: It's the first phone app for both iOS and Android to able to deliver insulin, the company said in a statement. Previously, delivery had to be handled through the pump itself. With this update, pump users will be able to program or cancel bolus doses of insulin, which are taken at mealtimes and are crucial in keeping blood glucose levels under control. "Giving a meal bolus is now the most common reason a person interacts with their pump, and the ability to do so using a smartphone app offers a convenient and discrete solution," John Sheridan, president and CEO of Tandem Diabetes Care, said in a statement. [...] Tandem said in the statement that it will launch the new bolus delivery update for select users this spring ahead of a wider launch this summer.
Android

Google Plans Privacy Changes, but Promises To Not Be Disruptive (nytimes.com) 9

Google said on Wednesday that it was working on privacy measures meant to limit the sharing of data on smartphones running its Android software. But the company promised those changes would not be as disruptive as a similar move by Apple last year. From a report: Apple's changes to its iOS software on iPhones asked users for permission before allowing advertisers to track them. Apple's permission controls -- and, ultimately, the decision by users to block tracking -- have had a profound impact on internet companies that built businesses on so-called targeted advertising. Google did not provide an exact timeline for its changes, but said it would support existing technologies for at least two more years.

This month, Meta, the company founded as Facebook, said Apple's privacy changes would cost it $10 billion this year in lost advertising revenue. The revelation weighed on Meta's stock price and led to concerns about other companies reliant on digital advertising. Anthony Chavez, a vice president at Google's Android division, said in an interview before the announcement that it was too early to gauge the potential impact from Google's changes, which are meant to limit the sharing of data across apps and with third parties. But he emphasized that the company's goal was to find a more private option for users while also allowing developers to continue to make advertising revenue.

Slashdot Top Deals