×
Operating Systems

Linux 4.19 Preparing Better CPU Security Mitigations, New EROFS File-System (phoronix.com) 88

An anonymous reader writes: Linus Torvalds released on Sunday Linux 4.19-rc1 that he describes as a "fairly frustrating merge window" following the new features landing over the past two weeks. What does this "pretty big release" offer? Phoronix's Linux 4.19 feature overview sheds light on more Spectre CPU mitigations for x86/POWER/s390, the new EROFS read-only Android file-system, a Raspberry Pi voltage driver, ThinkPad calculator key support, an in-kernel GPS subsystem, the Google GASKET driver framework, virtual kernel mode-setting, Qualcomm Adreno 600 series support, and many other improvements.
PHP

As PHP 5.6, Still Used By a Large Number of Websites, Approaches Its End of Life Deadline, Some Worry About the Consequences (linkedin.com) 151

An anonymous reader writes: I know PHP isn't to some devs liking, but chances are you know people who work with PHP or have sites that are built with it. PHP 5.6 and 7.0 are shortly coming to the end of the support period for security patches, so what plans have you made to migrate code and sites to newer platforms? With apparently huge numbers (80%) of sites still running PHP 5.6, there appears to be little industry acknowledgement of the issue. Is there a ticking PHP Time Bomb waiting to go off?
Businesses

Java and JavaScript Remain the Top Enterprise Developer Languages For the Cloud, Survey Finds (zdnet.com) 101

Programmers may love hot newer languages like Kotlin and Rust, but according to a Cloud Foundry Foundation (CFF) recent survey of global enterprise developers and IT decision makers, Java and Javascript are the top enterprise languages. ZDNet: That said, the CFF also found [PDF] that, "More and more, businesses are employing a polyglot and a multi-platform strategy to meet their exact needs." The CFF discovered 77 percent of enterprises are using or evaluating Platforms-as-a-Service (PaaS); 72 percent are using or considering containers; and 46 percent are using or thinking about serverless computing. Simultaneously, more than a third (39 percent) are using all three technologies together. For companies this "flexibility of cloud-native practices enables [companies to move] away from a monolithic approach and towards a world of computing that is flexible, portable and interoperable." That means, while Java and JavaScript are only growing ever more popular, the larger the company, the more languages are used. After the Java twins, C++, C#, Python, and PHP are the most popular languages.
Earth

Tiny Plastic Is Everywhere (npr.org) 210

An anonymous reader shares a report from NPR about ecologist Chelsea Rochman, who has dedicated her career to studying how microplastics are getting into the food chain and affecting everything from beer to fish: Since modern plastic was first mass-produced, 8 billion tons have been manufactured. And when it's thrown away, it doesn't just disappear. Much of it crumbles into small pieces. Scientists call the tiny pieces "microplastics" and define them as objects smaller than 5 millimeters -- about the size of one of the letters on a computer keyboard. Researchers started to pay serious attention to microplastics in the environment about 15 years ago. They're in oceans, rivers and lakes. They're also in soil. Recent research in Germany found that fertilizer made from composted household waste contains microplastics. And, even more concerning, microplastics are in drinking water. In beer. In sea salt. In fish and shellfish. How microplastics get into animals is something of a mystery, and Chelsea Rochman is trying to solve it.

Since she started studying microplastics, Rochman has found them in the outflow from sewage treatment plants. And they've shown up in insects, worms, clams, fish and birds. To study how that happens, [researcher Kennedy Bucci] makes her own microplastics from the morning's collection. She takes a postage stamp-size piece of black plastic from the jar, and grinds it into particles using a coffee grinder. "So this is the plastic that I feed to the fish," she says. The plastic particles go into beakers of water containing fish larvae from fathead minnows, the test-animals of choice in marine toxicology. Tanks full of them line the walls of the lab. Bucci uses a pipette to draw out a bunch of larvae that have already been exposed to these ground-up plastic particles. The larva's gut is translucent. We can see right into it. "You can see kind of a line of black, weirdly shaped black things," she points out. "Those are the microplastics." The larva has ingested them. Rochman says microplastic particles can sicken or even kill larvae and fish in their experiments.

Education

Saint Louis University Is Outfitting Student Living Spaces With Thousands of Echo Dots (techcrunch.com) 174

Saint Louis University announced this week a plan to outfit living spaces with 2,300 Echo Dots. The smart speakers will be ready by the time classes start later this month. TechCrunch reports: SLU is quick to note that it's "the first college or university in the country to bring Amazon Alexa-enabled devices, managed by Alexa for Business, into every student residence hall room and student apartment on campus." It's certainly not the first to adopt Amazon's smart speakers, but it's among the largest scale for this sort of deployment. While the product has become a mainstay in plenty of American homes, it does seem like an odd choice dorms and student campus. SLU has worked with Alexa for Business to create 100 custom questions, including, "What time does the library close tonight?" and "Where is the registrar's office?"

The company addressed [the privacy concerns] on a privacy page, writing: "Because of our use of the Amazon Alexa for Business (A4B) platform, your Echo Dot is managed by a central system dedicated to SLU. This system is not tied to individual accounts and does not maintain any personal information for any of our users, so all use currently is anonymous. Additionally, neither Alexa nor the Alexa for Business management system maintains recordings of any questions that are asked."

Firefox

Firefox-Forking Browser 'Pale Moon' Releases Major Update 28.0 (palemoon.org) 144

Long-time Slashdot reader tdailey spotted a new version of Pale Moon, a customised version of Firefox optimized for speed and efficiency. Beta News reports it's the first major update since November of 2016:

There are virtually no visual or obvious changes in this new major build, but the under-the-hood changes are both extensive and necessary.... Despite all the updates, Moonchild is keen to stress certain things haven't changed -- unlike Firefox, for example, Pale Moon continues to support NPAPI plugins, complete themes and a fully customizable user interface. There is also no DRM built into the browser, although third-party plugins such as Silverlight are supported. It will also continue to work with certain "legacy" plugins of the type abandoned by Firefox.
Pale Moon strips out what one reviewer calls "little-used components" of Firefox, including parental controls and accessbility features, as well as crash reports and support for Internet Explorer's ActiveX and ActiveX scripting technology.

"Proving that open source leads to great development, Pale Moon takes the already decent Firefox web browser and makes it even better and a faster."
Communications

Two Months Later: NASA's Opportunity Rover Is Still Lost On Mars After Huge Dust Storm (space.com) 46

Two months have passed since NASA's Opportunity Mars rover last phoned home. The last time we reported on the rover was on June 12th, when it was trying to survive an intensifying dust storm that was deemed "much worse than a 2007 storm that Opportunity weathered," according to NASA. "The previous storm had an opacity level, or tau, somewhere above 5.5; this new storm had an estimated tau of 10.8." Space.com reports on Opportunity's current status: Opportunity hasn't made a peep since June 10, when dust in the Red Planet's air got so thick that the solar-powered rover couldn't recharge its batteries. Opportunity's handlers think the six-wheeled robot has put itself into a sort of hibernation, and they still hope to get a ping once the dust storm has petered out. And there are good reasons for this optimism, NASA officials said. "Because the batteries were in relatively good health before the storm, there's not likely to be too much degradation," NASA officials wrote in an Opportunity update Thursday (Aug. 16). "And because dust storms tend to warm the environment -- and the 2018 storm happened as Opportunity's location on Mars entered summer -- the rover should have stayed warm enough to survive."

Engineers are trying to communicate with Opportunity several times a week using NASA's Deep Space Network, a system of big radio dishes around the globe. They hail the robot during scheduled "wake-up times" and then listen for a response. And team members are casting a wider net, too: Every day, they sift through all radio signals received from Mars, listening for any chirp from Opportunity, NASA officials said. Even if Opportunity does eventually wake up and re-establish contact, its long ordeal may end up taking a toll on the rover.
"The rover's batteries could have discharged so much power -- and stayed inactive so long -- that their capacity is reduced," NASA officials wrote in the update. "If those batteries can't hold as much charge, it could affect the rover's continued operations. It could also mean that energy-draining behavior, like running its heaters during winter, could cause the batteries to brown out."
Encryption

NSA Cracked Open Encrypted Networks of Russian Airlines, Al Jazeera, and Other 'High Potential' Targets (theintercept.com) 68

An anonymous reader quotes a report from The Intercept: The National Security Agency successfully broke the encryption on a number of "high potential" virtual private networks, including those of media organization Al Jazeera, the Iraqi military and internet service organizations, and a number of airline reservation systems, according to a March 2006 NSA document. The fact that the NSA spied on Al Jazeera's communications was reported by the German newsmagazine Der Spiegel in 2013, but that reporting did not mention that the spying was accomplished through the NSA's compromise of Al Jazeera's VPN. During the Bush administration, high-ranking U.S. officials criticized Al Jazeera, accusing the Qatar-based news organization of having an anti-American bias, including because it broadcasted taped messages from Osama bin Laden.

According to the document, contained in the cache of materials provided by NSA whistleblower Edward Snowden, the NSA also compromised VPNs used by airline reservation systems Iran Air, "Paraguayan SABRE," Russian airline Aeroflot, and "Russian Galileo." Sabre and Galileo are both privately operated, centralized computer systems that facilitate travel transactions like booking airline tickets. Collectively, they are used by hundreds of airlines around the world. In Iraq, the NSA compromised VPNs at the Ministries of Defense and the Interior; the Ministry of Defense had been established by the U.S. in 2004 after the prior iteration was dissolved. Exploitation against the ministries' VPNs appears to have occurred at roughly the same time as a broader "all-out campaign to penetrate Iraqi networks," described by an NSA staffer in 2005.

Nintendo

Nintendo's Switch Has Been Hiding a Buried 'VR Mode' For Over a Year (arstechnica.com) 38

An anonymous reader quotes a report from Ars Technica: Hackers have uncovered and tested a screen-splitting "VR Mode" that has been buried in the Switch's system-level firmware for over a year. The discovery suggests that Nintendo at least toyed with the idea that the tablet system could serve as a stereoscopic display for a virtual reality headset. Switch hackers first discovered and documented references to a "VrMode" in the Switch OS' Applet Manager services back in December when analyzing the June 2017 release of version 3.0.0 of the system's firmware. But the community doesn't seem to have done much testing of the internal functions "IsVrModeEnabled" and "SetVrModeEnabled" at the time. That changed shortly after Switch modder OatmealDome publicly noted one of the VR functions earlier this month, rhetorically asking, "has anyone actually tried calling it?" Fellow hacker random0666 responded with a short Twitter video (and an even shorter followup) showing the results of an extremely simple homebrew testing app that activates the system's VrMode functions.

As you can see in those video links, using those functions to enable the Switch's VR mode splits the screen vertically into two identical half-sized images, in much the way other VR displays split an LCD screen to create a stereoscopic 3D effect. System-level UI elements appear on both sides of the screen when the mode is enabled, and the French text shown in the test can be roughly translated to "Please move the console away from your face and click the close button." The location of the functions in the Switch firmware suggest they're part of Nintendo's own Switch code and not generic functions included in other Nvidia Tegra-based hardware.

Businesses

Apple Argued That Buildings at Its Headquarters Were Worth $200, Not $1B, To Reduce Its Tax Bill: Report (sfchronicle.com) 536

Apple argued that buildings it owned around Cupertino, where it is headquartered, were only worth $200 instead of the $1 billion tax assessors deemed in 2015, according to appeals reviewed by the San Francisco Chronicle. From a report: The report characterized the dispute as part of an aggressive strategy by Apple to lower its tax bills. According to the Chronicle, Apple has 489 open appeals in tax disputes over property assessed at $8.5 billion in Santa Clara County, Calif., dating back to 2004. Those appeals include the $1 billion building assessed by tax officials, as well as another $384 million property that Apple also claims is worth $200. Apple is now valued at $1 trillion. It is also the county's biggest taxpayer, paying $56 million in the 2017-2018 tax year.
Communications

WWV Shortwave Time Broadcasts May Be Slashed In 2019 (qrz.com) 305

New submitter SteveSgt writes: A forum thread on QRZ.com indicates that the shortwave time broadcasts by the National Institute of Standards and Technology (NIST) from stations WWV (Colorado) and WWVH (Hawaii) may be slashed in budget year 2019. [One of the proposed reductions includes "$6.3 million supporting fundamental measurement dissemination, including the shutdown of NIST radio stations in Colorado and Hawaii."] While the WWV broadcasts may seem like an anachronism to some Slashdotters, they remain a crucial component in many unexpected services, from over-the-air broadcasters and traffic signals, to medical devices, wall clocks, and wrist watches. The signals serve as standard beacons for radio propagation, and as a frequency reference for alignment of a broad range of communications equipment. It's easy to imagine that not even the NIST knows every service and device that could be impacted by this decision.
Operating Systems

Linux 4.18 Releases With Steam Controller Kernel Driver, Spectre Updates (phoronix.com) 47

fstack writes: Linus Torvalds has released Linux 4.18 as the newest kernel bringing a Steam Controller kernel driver, Spectre updates for ARM64, power management updates, a "Restartable Services" system call, AMD Radeon graphics driver improvements, V3D DRM as Broadcom's new graphics driver, DM writecache support, USB 3.2 support, and many other updates. Linus Torvalds wrote of the 4.18 final release: "It was a very calm week, and arguably I could just have released on schedule last week, but we did have some minor updates. Mostly networking, but some vfs race fixes (mentioned in the rc8 announcement as 'pending') and a couple of driver fixes (scsi, networking, i2c). Some other minor random things (arm crypto fix, parisc memory ordering fix)." In a separate article, Phoronix details all the changes and new features available in this release.
Biotech

Will the Food Industry Botch the Introduction Of Gene-Edited Foods? (sfgate.com) 166

We've reached a milestone in gene-edited food, according to the Washington Post. "Calyxt's 'healthier' soybean oil, the industry's first true gene-edited food, could make its way into products such as chips, salad dressings and baked goods as soon as the end of this year." Calyxt's soybean is the first of 23 gene-edited crops the Agriculture Department has recognized to date.... Scientists at Calyxt, a subsidiary of the French pharmaceutical firm Cellectis, developed their soybean by turning "off" the genes responsible for the trans fats in soybean oil. Compared with the conventional version, Calyxt says, oil made from this soybean boasts far more "healthy" fats, and far less of the fats that raise bad cholesterol. Chief executive Federico Tripodi likes to say the product is akin to olive oil but without the pungent flavor that would make it off-putting in Oreos or granola bars.

It has earned praise from the Center for Science in the Public Interest, a consumer group that says public health will benefit from ingredients with less trans and saturated fats, regardless of how they were developed.... Scientists in university labs and at companies such as Calyxt are already designing plants that are more nutritious, convenient and sustainable, they say.... [U]niversities around the country are working on plants that will withstand droughts, diseases and the ravages of climate change. Such improvements, underway in crops as diverse as oranges, wine grapes and cacao, could protect these plants in the future while cutting down water and chemical use, experts say....

While Congress passed a law requiring food makers to disclose genetically modified ingredients in 2016, those rules will probably not apply to foods made with newer gene-editing techniques, said experts who had reviewed it. Calyxt has marketed its soybean oil to food-makers as "non-GMO," citing the fact that it contains no foreign genetic material. But consumers are unlikely to accept this distinction, said Michael Hansen, a senior staff scientist at Consumers Union. Hansen argues that GMOs developed a negative reputation in part because biotech companies botched public outreach in the 1980s and 1990s. Should businesses repeat that mistake, he said, consumers will reject a promising technology.

Non-GM foods are already a multibillion-dollar market, the article points out, adding that according to a 2016 Pew Research Center report, nearly 4 in 10 American consumers believe genetically modified foods are bad for their health.
Emulation (Games)

Lawsuit Threat Shuts Down ROM Downloads On Major Emulation Site 'EmuParadise' (arstechnica.com) 79

Following Nintendo's recent lawsuits against ROM sites LoveROMs and LoveRetro, a major ROM repository called EmuParadise announced it will preemptively cease providing downloadable versions of copyrighted classic games. While no lawsuits have been filed yet, the site's founder, MasJ, writes in an announcement post: "It's not worth it for us to risk potentially disastrous consequences. I cannot in good conscience risk the futures of our team members who have contributed to the site through the years. We run EmuParadise for the love of retro games and for you to be able to revisit those good times. Unfortunately, it's not possible right now to do so in a way that makes everyone happy and keeps us out of trouble." Ars Technica reports: EmuParadise will continue to operate as a repository for legal downloads of classic console emulators, as well as a database of information on thousands of classic games. "But you won't be able to get your games from here for now," as MasJ writes. Since founding EmuParadise in 2000, MasJ says EmuParadise has faced threatening letters, server shutdowns, and numerous DMCA takedown requests for individual games. Through it all, he says he was encouraged by "thousands of emails from people telling us how happy they've been to rediscover and even share their childhood with the next generations in their families."
Cloud

Oracle Challenges Pentagon's $10 Billion Cloud Computing Contract (theregister.co.uk) 101

Oracle has filed an official complaint with the U.S. government over plans to award the Pentagon's lucrative cloud contract to a single vendor. Rebecca Hill writes via The Register: The Joint Enterprise Defense Infrastructure (JEDI) contract, which has a massive scope, covering different levels of secrecy and classification across all branches of the military, will run for a maximum of 10 years and is worth a potential $10 billion. In spite of this pressure from vendors and the tech lobby -- as well as concerns from Congress -- the US Department of Defense (DoD) refused to budge, and launched a request for proposals (RFP) at the end of last month. Oracle is less than impressed with the Pentagon's failure to back down, and this week filed a bid protest to congressional watchdog the Government Accountability Office asking for the RFP to be amended.

In the protest, the database goliath sets out its arguments against a single vendor award -- broadly that it could damage innovation, competition, and security. Reading between the lines, it doesn't want either of Amazon or Microsoft or Google to get the whole pie to itself, and thus endanger Oracle's cosiness with Uncle Sam. Summing up its position in a statement to The Register, Oracle said that JEDI "virtually assures DoD will be locked into legacy cloud for a decade or more" at a time when cloud technology is changing at an unprecedented pace.

Linux

Lenovo To Make Its BIOS/UEFI Updates Easier For Linux Users Via LVFS (phoronix.com) 62

An anonymous reader shares a report: Lenovo is making it easier for their customers running Linux to update their firmware now on ThinkPad, ThinkStation, and ThinkCenter hardware. Lenovo has joined the Linux Vendor Firmware Service (LVFS) and following collaboration with the upstream developers is beginning to roll-out support for offering their device firmware on this platform so it can be easily updated by users with the fwupd stack. Kudos to all involved especially with Lenovo ThinkPads being very popular among Linux users.
Businesses

San Francisco Officials Are Planning To Ban Corporate Cafeterias, Force Tech Workers To Eat Out At Local Restaurants (nytimes.com) 825

"According to The New York Times, San Francisco officials are planning to ban corporate cafeterias to force tech workers to eat out at local eateries," writes Slashdot reader The Original CDR. Here's an excerpt from the report: Two San Francisco supervisors introduced an ordinance last week that would forbid employee cafeterias in new corporate construction. It is not clear whether the measure will pass, but it is a direct attack on one of the modern tech industry's most entrenched traditions. The ordinance, which seeks to force tech workers out of their subsidized cafeterias and into neighborhood restaurants, is the latest attempt by San Francisco leaders to make the tech companies that are migrating north from Silicon Valley adapt to life in the city.

"These tech companies have decided to leave their suburban campuses because their employees want to be in the city, and yet the irony is, they come to the city and are creating isolated, walled-off campuses," said Aaron Peskin, a city supervisor who is co-sponsoring the bill with Ahsha Safai. "This is not against these folks, it's for them. It's to integrate them into the community." Mr. Peskin's ordinance is also aimed at getting more out of a tax deal given to tech companies that would agree to move into a troubled area called Mid-Market. In 2011, the companies were given tax breaks on payroll and stock options with the hope that they would bring jobs and investment to the neighborhood, just a short walk from San Francisco's City Hall. Within a few years, a number of companies like Twitter, Square and Uber moved into Mid-Market. But despite initial excitement over the opening of a number of restaurants and shops, the neighborhood has not yet flourished the way many had hoped.
Further reading: San Francisco Examiner, San Francisco Chronicle
Transportation

Uber's Self-Driving Trucks Division Is Dead (techcrunch.com) 61

Uber is shuttering its self-driving unit, reports TechCrunch. The company will reportedly stop development of self-driving trucks and instead focus its efforts on self-driving cars. "We recently took the important step of returning to public roads in Pittsburgh, and as we look to continue that momentum, we believe having our entire team's energy and expertise focused on this effort is the best path forward," Eric Meyhofer, head of Uber Advanced Technologies Group, said in an emailed statement. From the report: Uber Freight, a business unit that helps truck drivers connect with shipping companies, is unaffected by this decision. "Rather than having two groups working side by side, focused on different vehicle platforms, I want us instead collaborating as one team, according to an email reviewed by TechCrunch that was sent by Meyhofer to employees. "I know we're all super proud of what the Trucks team has accomplished, and we continue to see the incredible promise of self-driving technology applied to moving freight across the country. But we believe delivering on self-driving for passenger applications first, and then bringing it to freight applications down the line, is the best path forward. For now, we need the focus of one team, with one clear objective." The company will pivot employees focused on self-driving trucks to other work that revolves around self-driving technology.
Android

VLC Blacklists Newer Huawei Devices To Combat Negative App Reviews (theverge.com) 78

An anonymous reader quotes a report from The Verge: Some newer Huawei phones are actively being blocked from installing the open-source VLC media player app from Google Play. VLC's developers announced today that they're blacklisting some of Huawei's devices after unhappy users left too many one-star reviews for the app. But the negative reviews stem from a decision on Huawei's part and has nothing to do with VLC. The negative reviews are a result of Huawei's aggressive battery management and tendency to kill background apps, which directly affects VLC's background audio playback feature. Huawei users on VLC's forums are well aware of the issue. It's possible to manually disable these battery optimizations and have the app function properly in the background, but VLC claims that people often don't know how to do that, so they blame the app instead. The devices being blacklisted are the Huawei P8, P10, and P20. Users can still manually download the APK from VLC's website if they're interested in using the player.
PHP

Ask Slashdot: Should I Ditch PHP? 341

Long-time Slashdot reader Qbertino does PHP for a living, but says he's growing "increasingly frustrated with the ignorant and clueless in the vincinity of PHP." Crappy code and baaaaad application setups is one thing, but people refusing to fix them or simply not even understanding the broader implications of bad applications or attempting SEO with gadgets while refusing to fix 3.5 MB-per-pagecall are just minor tidbits in a history of increasingly unnerving run-ins with knuckledragers in the "web agency" camp...

Will I leave the larger part of this backwards stuff behind if I move to another server-side programming language such as Java or Kotlin for professional work in the broader web area? Do I have a chance to do quality work on quality projects using PHP, or are those slim compare to other programming languages? In short, should I ditch PHP?

"I think .NET is a much cleaner language to work in with Microsoft's excellent Visual Studio IDE and debugger," argues Slashdot reader Agret , adding "there are many large projects in my city hiring .NET developers and being a strongly typed language the code quality is generally better than PHP."

But what's been your experience? And would a frustrated developer find more quality projects by ditching PHP?

Slashdot Top Deals