TPM is a dedicated chip or firmware enabling hardware-level security, housing encryption keys, certificates, passwords, and sensitive data, "and shielding them from unauthorized access," Microsoft senior product manager Steven Hosking wrote last month, declaring TPM 2.0 to be "a non-negotiable standard for the future of Windows."

Or, as BleepingComputer put it, Microsoft "made it abundantly clear... that Windows 10 users won't be able to upgrade to Windows 11 unless their systems come with TPM 2.0 support." (This despite the fact that Statcounter Global data "shows that more than 61% of all Windows systems worldwide still run Windows 10.") They add that Microsoft "announced on October 31 that Windows 10 home users will be able to delay the switch to Windows 11 for one more year if they're willing to pay $30 for Extended Security Updates."

But last week the Free Software Foundation's campaigns manager delivered a message on the FSF's official blog: "Keep putting pressure on Microsoft." Grassroots organization against a corporation as large as Microsoft is never easy. They have the advertising budget to claim that they "love Linux" (sic), not to mention the money and political willpower to corral free software developers from around the world on their nonfree platform Microsoft GitHub. This year's International Day Against DRM took aim at one specific injustice: their requiring a hardware TPM module for users being forced to "upgrade" to Windows 11. As Windows 10 will soon stop receiving security updates, this is a (Microsoft-manufactured) problem for users still on this operating system. Normally, offloading cryptography to a different hardware module could be seen as a good thing — but with nonfree software, it can only spell trouble for the user...

What's crucial now is to keep putting pressure on Microsoft, whether that's through switching to GNU/Linux, avoiding new releases of their software, or actions as simple as moving your projects off of Microsoft GitHub. If you're concerned about e-waste or have friends who work to combat climate change, getting them together to tell them about free software is the perfect way to help our movement grow, and free a few more users from Microsoft's digital restrictions. If you're concerned about e-waste or have friends who work to combat climate change, getting them together to tell them about free software is the perfect way to help our movement grow, and free a few more users from Microsoft's digital restrictions.

If we dissolve acid-neutralizing rocks in the ocean, will it absorb more carbon dioxide?

Climate ventures and philanthropic funders have been spending millions of dollars to find out, reports the Washington Post. "Researchers have been exploring this technology for the last five years, but over the last two months, at least a couple of start-ups have begun operation along the Atlantic and Pacific coasts." Planetary, a start-up based in Nova Scotia, removed 138 metric tons of carbon last month for Shopify and Stripe. The start-up Ebb Carbon is running a small site in Washington that can remove up to 100 carbon metric tons per year and committed in October to remove 350,000 metric tons of carbon from the atmosphere over the next decade for Microsoft.

Proponents of the technology say it's one of the most promising forms of carbon removal, which experts say will be necessary to meet climate goals even as the world cuts emissions. But in order for this to make a dent, it will need to be scaled up to remove billions, not hundreds of thousands, of metric tons of carbon per year, Yale associate professor of earth and planetary sciences Matthew Eisaman said... Removing carbon could also help prevent ocean acidification. Although the ocean's chemistry has varied through geologic time, it has become more acidic as it has absorbed more carbon from human-generated emissions, said Andy Jacobson, a geochemist at Northwestern University. The increased acidity makes it difficult for some marine organisms to build their skeletons and shells...

Researchers are still investigating the best strategy to implement the method. Ebb Carbon, for example, takes existing saltwater waste streams from treatment and desalination plants and uses electricity to alkalize it before returning it to the ocean, said Eisaman, who is the start-up's co-founder and chief scientist. Another method is depositing alkaline minerals or solution into the ocean using a ship; others want to enhance the rock weathering that already occurs on the coast...

The growing evidence from early studies in labs and controlled outdoor settings suggest no serious impacts on plankton, which are at the bottom of the food web.

"The Washington Post's crossword puzzle was recently deemed too offensive for advertisers," reports the Wall Street Journal. "So was an article about thunderstorms. And a ranking of boxed brownie mixes.

"Marketers have long been wary about running ads in the news media, concerned that their brands will land next to pieces about terrorism or plane crashes or polarizing political stories." But "That advertising no-go zone seems to keep widening." It is a headache that news publishers can hardly afford. Many are also grappling with subscriber declines and losses in traffic from Google and other tech platforms, and are now making an aggressive push to change advertisers' perceptions... News organizations recently began publicizing studies that show it really isn't dangerous for a brand to appear near a sensitive story. At the same time, they say blunt campaign-planning tools wind up fencing off even harmless content — and those stories' potentially large audiences — from advertisements. Forty percent of the Washington Post's material is deemed "unsafe" at any given time, said Johanna Mayer-Jones, the paper's chief advertising officer, referencing a study the company did about a year ago. "The revenue implications of that are significant."

The Washington Post's crossword page was blocked by advertisers' technology seven times during a weekslong period in October because it was labeled as politics, news and natural disaster-related material. (A tech company recently said it would ensure the puzzle stops getting blocked, according to the Post.) The thunderstorm story was cut off from ad revenue when a sentence about "flashing and pealing volleys from the artillery of the atmosphere" triggered a warning that it was too much like an "arms and ammunition" story. As for the brownies, a reference to research from "grocery, drug, mass-market" and other retailers was automatically flagged by advertisers for containing the word "drug."

While some brands avoid news entirely, many take what they consider to be a more surgical approach. They create lengthy blacklists of words or websites that the company considers off-limits and employ ad technology to avoid such terms. Over time, blacklists have become extremely detailed, serving as a de facto news-blocking tool, publishers said... The lists are used in automated ad buying. Brands aim their ads not at specific websites, but at online audiences with certain characteristics — people with particular shopping or web-browsing histories, for example. Their ads are matched in real-time to available inventory for thousands of websites... These days, less than 5% of client ad spending for GroupM, one of the largest ad-buying firms in the world, goes to news, according to Christian Juhl, GroupM's former chief executive who revealed spending figures during a congressional hearing over the summer.
A recent blacklist from Microsoft included about 2,000 words including "collapse," according to the article. ("Microsoft declined to comment.")

Windows 11 24H2 continues to experience issues with multifunction devices using the eSCL scan protocol, despite Microsoft marking the problem as resolved. According to a Register reader, "It works on a Windows 10 machine, but not on Windows 11, unless both the computer and the scanner are on wired Ethernet." From the report: Microsoft issued a compatibility safeguard hold on USB-connected devices using the Scanner Communication Language (eSCL) protocol in November after users who installed the Windows update experienced glitches with device discovery. The issue was reported resolved by Microsoft in December. However, it seems that KB5048667 might not have fixed all the problems for Canon owners. According to our reader: "Canon support tells me that the 24H2 eSCL issue still is not fixed." We asked Microsoft about the situation, but despite telling us it was looking into the problem on Friday, December 20, the company has yet to provide any further details. Canon was more forthcoming. A spokesperson told The Register it was aware of a problem impacting devices using ScanGear MF.

ScanGear MF is a scanner driver provided by Canon and allows customers to configure advanced settings for scanning. Canon does not appear to be changing its code to rectify whatever problems had been brought on by the Windows 11 update. The spokesperson said: "Microsoft is currently working on an OS amendment to resolve this and we are keeping in close contact with them. The timing for resolving this is yet to be confirmed by Microsoft, however we expect to receive the plan to fix in January 2025." Customers affected by the issue, which manifests itself with a communications error message, according to Canon's support forum, are advised to use either native Microsoft software solutions or go fully wired via USB.

Samsung and Google are introducing Eclipsa Audio, an open-source 3D audio standard set to debut on select YouTube videos and Samsung's 2025 TVs and soundbars. The new format "could eventually serve as a free alternative to Dolby Atmos, the dominant 3D audio format that hardware makers like Samsung pay to license for TVs and other equipment," reports The Verge. "Samsung says that similar to Atmos, this audio format supports adjusting 'audio data such as the location and intensity of sounds, along with spatial reflections' to create a 3D experience." From the report: The two companies first announced a partnership to develop spatial audio technology in 2023, initially calling it Immersive Audio Model and Formats (IAMF). At the time, Samsung spatial audio head WooHyun Nam said the format would provide "a complete open-source framework for 3D audio, from creation to delivery and playback."

The IAMF spec has also been adopted by the Alliance for Open Media, a group that has been pushing for royalty-free codec support since 2015 and counts companies like Amazon, Apple, Microsoft, and Netflix -- along with Samsung and Google -- among its members. If they also add support for this audio format, it could help it catch on, although it's already taken years for their AV1 video codec to see more use. Samsung and Google are also creating a certification program with the Telecommunications Technology Association "to ensure consistent audio quality" across devices using the format, which also sounds similar to the way companies like Dolby and THX manage the labeling for their specs.

An anonymous reader quotes a report from TechCrunch: A U.S. online gift card store has secured an online storage server that was publicly exposing hundreds of thousands of customer government-issued identity documents to the internet. A security researcher, who goes by the online handle JayeLTee, found the publicly exposed storage server late last year containing driving licenses, passports, and other identity documents belonging to MyGiftCardSupply, a company that sells digital gift cards for customers to redeem at popular brands and online services.

MyGiftCardSupply's website says it requires customers to upload a copy of their identity documents as part of its compliance efforts with U.S. anti-money laundering rules, often known as "know your customer" checks, or KYC. But the storage server containing the files had no password, allowing anyone on the internet to access the data stored inside. JayeLTee alerted TechCrunch to the exposure last week after MyGiftCardSupply did not respond to the researcher's email about the exposed data. [...]

According to JayeLTee, the exposed data -- hosted on Microsoft's Azure cloud -- contained over 600,000 front and back images of identity documents and selfie photos of around 200,000 customers. It's not uncommon for companies subject to KYC checks to ask their customers to take a selfie while holding a copy of their identity documents to verify that the customer is who they say they are, and to weed out forgeries. MyGiftCardSupply founder Sam Gastro told TechCrunch: "The files are now secure, and we are doing a full audit of the KYC verification procedure. Going forward, we are going to delete the files promptly after doing the identity verification." It's not known how long the data was exposed or if the company would commit to notifying affected individuals.

Microsoft plans to spend $80 billion in fiscal 2025 on the construction of data centers that can handle AI workloads, the company said in a Friday blog post. From a report: Over half of the expected AI infrastructure spending will take place in the U.S., Microsoft Vice Chair and President Brad Smith wrote. Microsoft's 2025 fiscal year ends in June.

Researchers from Inria and Microsoft have developed a system to automatically convert specific types of C programming code into memory-safe Rust code, addressing growing cybersecurity concerns about memory vulnerabilities in software systems.

The technique, detailed in a new paper, requires programmers to use a restricted version of C called "Mini-C" that excludes features like pointer arithmetic. The researchers successfully tested their conversion system on two major code libraries, including the 80,000-line HACL* cryptographic library. Parts of the converted code have already been integrated into Mozilla's NSS and OpenSSH security systems, according to the researchers. Memory safety errors account for 76% of Android vulnerabilities in 2019.

Despite Microsoft's push for Windows 11, Windows 10 continues to dominate the desktop OS market, rising to 62.7% market share in December 2024. The Register reports: Figures for December 2024 from Statcounter -- used because Microsoft rarely shares usage data unless it has something to boast about -- confirm Windows 10's market share has inched up to 62.7 percent compared to the previous month while Windows 11's share fell back to 34.12 percent (from 34.94 percent in November 2024). Even though Windows 11's percentage of the pie is still bigger than it was this time last year (when Statcounter pegged it at 26.54 percent), the fact the new OS is still nowhere near to overtaking Windows 10 may alarm some Microsoft executives. [...]

Canalys analyst, Kieren Jessop, noted that when looking at the more than 230 countries and regions tracked by Statcounter, Windows 10 share had actually only increased in just under a quarter of them, but that increase made an outsized impacted. Jessop cited the example of the US, where Windows 10 market share had gone from 58 percent in October 2024 to 67 percent in December. [...] Many editions of Windows 10 are due to drop out of free support on October 14, 2025. Affected users will then have the option to purchase Extended Security Updates (ESU) to keep the lights on a little longer or keep using the operating system and risk falling foul of unpatched vulnerabilities. Further reading: Ex-Microsoft Designer Reveals Windows 11's Dynamic Wallpapers That May Have Been Shelved

Former Microsoft designer Sergey Kisselev has shared previously unseen concepts for Windows 11 dynamic wallpapers, intended for educational devices. The animated backgrounds were designed to complement Windows 11's centered interface but never shipped with the operating system's 23H2 update as initially planned.

SvarDOS, a compact open-source operating system derived from DR-DOS, has switched to using the EDRDOS kernel, marking a shift from its FreeDOS distribution roots. The change allows the operating system to fit on a single 1.4MB floppy disk while offering a network-capable package manager that can fetch from a repository of over 400 packages.

Unlike its rival FreeDOS, SvarDOS can run Microsoft Windows 3.1 natively, though the capability currently requires additional configuration. The system maintains compatibility with legacy DOS applications while providing modern features like FAT32 support and network connectivity.

The long-anticipated "year of the Linux desktop" could see renewed interest in 2025 as Microsoft's planned end of support for Windows 10 approaches, potentially driving users to explore alternatives.

With Windows 10 reaching end of support in October 2025, many users will face decisions about upgrading hardware for Windows 11 or considering different operating systems entirely. Linux distributions have evolved to offer increasingly polished desktop experiences, with improving hardware compatibility and familiar user interfaces.

2024 saw Linux adoption grow thanks to the Steam Deck's success, reaching a 4.04% market share in December, up from 3.85% during the same time last year. More Linux laptops, improved gaming compatibility, and growing awareness of its benefits also contributed to its steady rise.

"I still can't quite believe that I'm using an Arm-powered Windows laptop every day," writes a senior editor at the Verge: After more than a decade of trying to make Windows on Arm a reality, Microsoft and Qualcomm finally nailed it this year with Copilot Plus PCs. These new laptops have excellent battery life and great performance — and the app compatibility issues that have plagued Windows on Arm are mostly a thing of the past (as long as you're not a gamer). Microsoft wanted 2024 to be "the year of the AI PC," but I think it was very much the year of Windows on Arm...

The key to Windows on Arm's revival this year was Qualcomm's Snapdragon X Elite processors, which were announced in April. They've provided the type of performance and power efficiency only previously available with Apple's MacBooks and challenged Intel and AMD to do better in the x86 space. After much debate over Microsoft's MacBook Air-beating benchmarks, the reviews rolled in and showed that Windows on Arm was indeed capable of matching and beating Apple's MacBook Air. Qualcomm even hired the "I'm a Mac" guy to promote Windows on Arm PCs, showing how confident it was in challenging Apple's laptop dominance.

Microsoft and Qualcomm also worked closely with developers to make key apps compatible, and it's now very rare to run into an app compatibility issue that can't be solved by a native Arm64 version or Microsoft's improved emulator. Even Google, which previously shunned Windows Phone, has created Arm64 versions of Chrome and Google Drive to support Microsoft's efforts. With developers continually providing native versions of their apps, it makes it a lot easier to switch to a Windows on Arm laptop. The only big exception is gaming, where x86 still reigns supreme for compatibility and performance...

It's hard not to see 2025 as the year that Windows on Arm continues to eat into the laptop space. A Dell leak revealed Qualcomm is preparing new chips for 2025, and the chip maker has also been rolling out cheaper Arm-based chips to bring laptop prices down.
The article acknowledges that both AMD and Intel "have the key advantage of game compatibility that Windows on Arm is definitely not ready for..." But "Given the Windows on Arm gaming situation, a new generation of Nvidia's GPUs could help generate fresh excitement around x86 laptops throughout 2025." And "Nvidia might also be planning to help the Windows on Arm effort. The chip maker has long been rumored to be planning to launch Arm PC chips as soon as 2025... Whatever happens to laptops in 2025, you can guarantee that there's going to be fierce competition between Intel, AMD, and Qualcomm."

But the author still complains about the dedicated Copilot key on his new WIndows-on-Arm laptop. "While the Copilot experience on Windows has gone through several confusing revisions, it's still a key I accidentally press and then get frustrated when a Copilot window appears."

jjslash shares a report from TechSpot: A Valve employee recently provided PC Gamer with a rough calculation of the company's per-employee income, revealing that Valve generates more money per person than several of the world's largest companies. While the data is a few years old and doesn't account for some significant recent trends in the tech sector, Valve's ranking in this metric likely hasn't shifted much over that time. Exact figures for Valve's per-hour and per-employee net income remain redacted. However, a chart from 2018 confirms that Valve's per-employee income exceeded that of companies like Facebook, Apple, Netflix, Alphabet/Google, Microsoft, Intel, and Amazon. Facebook ranks second with a high revenue per employee of $780,400 annually, or $89 per hour, surpassing competitors like Apple and Microsoft due to its relatively smaller workforce of under 70,000. Amazon, by contrast, with over 1.5 million employees, earns significantly less per employee at $15,892 annually, or $1.81 per hour.

Further reading: Valve Runs Its Massive PC Gaming Ecosystem With Only About 350 Employees

OpenAI plans to overhaul its corporate structure by converting its for-profit business into a Delaware public benefit corporation, seeking to raise capital from investors who want conventional equity stakes.

The Microsoft-backed AI startup will scrap its unusual hybrid model where a nonprofit controls a capped-profit entity. The restructuring aims to help OpenAI compete with tech giants pouring hundreds of billions into AI development, it said.

Under the plan, OpenAI's nonprofit wing will receive shares in the new public benefit corporation at a valuation set by outside advisers. The nonprofit will pursue charitable work in healthcare and education while the corporation runs OpenAI's main operations.

The startup, which launched ChatGPT in 2022 and claims 300 million weekly users, said its current structure hampers fundraising at the scale needed to advance artificial general intelligence development. The restructured business will maintain OpenAI's mission of ensuring AI benefits humanity as its legal mandate.

The Federal Trade Commission has launched a broad antitrust investigation into Microsoft's business practices, focusing on how the company bundles its Office products with cybersecurity and cloud computing services.

The probe follows ProPublica reporting that revealed Microsoft offered free temporary upgrades of federal agencies' software licenses to include advanced cybersecurity features, leading to long-term contracts once the trial period ended. The strategy helped Microsoft expand its government business while displacing competitors in both cybersecurity and cloud computing markets.

The investigation includes scrutiny of Microsoft's identity management product Entra ID, formerly Azure Active Directory. The FTC has issued a civil investigative demand compelling the company to turn over information. The probe represents one of FTC Chair Lina Khan's final moves before leadership changes under the Biden administration. Microsoft confirmed receiving the demand but called it "broad, wide ranging, and requests things that are out of the realm of possibility to even be logical."

theodp writes: In 2012, now-Microsoft President Brad Smith unveiled Microsoft's National Talent Strategy, a two-pronged strategy that called for tech visa restrictions to be loosened to allow tech companies to hire non-U.S. citizens to fill jobs until more American schoolchildren could be made tech-savvy enough to pass hiring standards. Shortly thereafter, tech-backed nonprofit Code.org emerged (led by Smith's next-door neighbor Hadi Partovi with Smith as a founding Board member) with a mission to ensure that U.S. schoolchildren started receiving 'rigorous' computer science education instruction. Around the same time, Mark Zuckerberg's FWD.us PAC launched (with support from Smith, Partovi, and other tech leaders) with a mission to reform tech visa policy to meet tech's need for talent.

Fast forward to 2024, and Newsweek reports the debate over tech immigration policy has been revived, spurred by the recent appointment of Sriram Krishnan as senior policy adviser for AI at the Trump White House. Comments by far-right political activist Laura Loomer on Twitter about Krishnan's call for loosening Green Card restrictions were met with rebuttals from prominent tech leaders who are also serving as members of the Trump transition team. Entrepreneur David Sacks, who Trump has tapped as his cryptocurrency and AI czar, took to social media to clarify that Krishnan advocates for removing country caps on green cards, not eliminating caps entirely, aiming to create a more merit-based system. However, the NY Times reported that Sacks discussed a much broader visa reform proposal with Trump during a June podcast ("What I will do is," Trump told Sacks, "you graduate from a college, I think you should get automatically, as part of your diploma, a green card to be able to stay in this country"). Elon Musk, the recently appointed co-head of Trump's new Dept. of Government Efficiency (DOGE) had Sacks' and Krishnan's backs (not unexpected -- both were close Musk advisors on his Twitter purchase), tweeting out "Makes sense" to his 209 million followers, lamenting that "the number of people who are super talented engineers AND super motivated in the USA is far too low," reposting claims crediting immigrants for 36% of the innovation in the U.S., and taking USCIS to task for failing to immediately recognize his own genius with an Exceptional Ability Green Card (for his long-defunct Zip2 startup).

Vivek Ramaswamy, who Trump has tapped to co-lead DOGE with Musk, agreed and fanned the Twitter flames with a pinned Tweet of his own explaining, "The reason top tech companies often hire foreign-born -- first-generation engineers over "native" Americans isn't because of an innate American IQ deficit (a lazy -- wrong explanation). A key part of it comes down to the c-word: culture." (Colorado Governor Jared Polis also took to Twitter to agree with Musk and Ramaswamy on the need to import 'elite engineers'). And Code.org CEO Partovi joined the Twitter fray, echoing the old we-need-H1B-visas-to-make-US-schoolchildren-CS-savvy argument of Microsoft's 2012 National Talent Strategy. "Did you know 2/3 of H1B visas are for computer scientists?" Partovi wrote in reply to Musk, Loomer, and Sachs. "The H1B program raises $500M/year (from its corporate sponsors) and all that money is funneled into programs at Labor and NSF without focus to grow local CS talent. Let's fund CS education." The NYT also cited Zuckerberg's earlier efforts to influence immigration policy with FWD.us (which also counted Sacks and Musk as early supporters), taking note of Zuck's recent visit to Mar-a-Lago and Meta's $1 million donation to Trump's upcoming inauguration.

So, who is to be believed? Musk, who attributes any tech visa qualms to "a 'fixed pie' fallacy that is at the heart of much wrong-headed economic thinking" and argues that "there is essentially infinite potential for job and company creation ['We should let anyone in the country who is hardworking and honest and will be a contributor to the United States,' Musk has said]"? Or economists who have found that immigration and globalization is not quite the rising-tide-that-raises-all-boats it's been cracked up to be?

Microsoft is warning that Windows 11 installations using USB or CD media created with October or November 2024 security updates may be unable to receive future security patches.

The bug affects version 24H2 installations made between October 8 and November 12, but does not impact systems updated through Windows Update or the Microsoft Update Catalog. Microsoft advised users to rebuild installation media using December 2024 patches while it works on a permanent fix for the issue, which primarily affects business and education environments.

OpenAI CEO Sam Altman is negotiating major changes to the company's $14 billion partnership with Microsoft. The companies have defined artificial general intelligence (AGI) as systems generating $100 billion in profits [non-paywalled source] -- the point at which OpenAI could end certain Microsoft agreements, The Information reports.

According to their contract, AGI means AI that surpasses humans at "most economically valuable work." The talks focus on Microsoft's equity stake, cloud exclusivity, and 20% revenue share as OpenAI aims to convert from nonprofit to for-profit status. The AI developer projects $4 billion in 2024 revenue.

Data center construction is driving an unprecedented influx of electricians to central Washington state, where abundant hydropower and tax incentives have attracted major tech companies building AI infrastructure, New York Times is reporting.

Microsoft alone projects needing 2,300 electricians in coming years for facilities across three counties along the Columbia River. Union electricians earning up to $2,800 weekly after taxes are transforming agricultural communities like Quincy, where data centers now account for 75% of local tax revenue.

While the construction boom has funded community improvements including a new high school, rising housing costs and limited long-term employment opportunities raise concerns about sustainable economic benefits for longtime residents.