Apple pushes out iOS 11.1.1 to fix annoying autocorrect bug

Apple gave its mobile software a facelift when it released iOS 11 back in September, but bugs led the company to push out an 11.1 update a month later to protect user security from that WPA2 Krack vulnerability. Turns out that version introduced another set of squirrely issues, which has led Apple to release iOS 11.1.1 today. You can finally say goodbye to that stupid autocorrect bug switching out the letter ‘i’ for all manner of gibberish. The update also addresses an issue where the ‘Hey Siri’ feature occasionally stops working. And…that’s it. Even the security content is the same as the 11.1 release, meaning Apple pushed this update out just to fix these two issues. Consider your outrage heard, given that Apple could have waited to fix until the forthcoming 11.2 update; Reportedly, some GPS issues with the iPhone 8 and iPhone X are fixed in the 11.2 beta. Via: Ars Technica Source: Apple

See original article:
Apple pushes out iOS 11.1.1 to fix annoying autocorrect bug

Linux Has a USB Driver Security Problem

Catalin Cimpanu, reporting for BleepingComputer: USB drivers included in the Linux kernel are rife with security flaws that in some cases can be exploited to run untrusted code and take over users’ computers. The vast majority of these vulnerabilities came to light on Monday, when Google security expert Andrey Konovalov informed the Linux community of 14 vulnerabilities he found in the Linux kernel USB subsystem. “All of them can be triggered with a crafted malicious USB device in case an attacker has physical access to the machine, ” Konovalov said. The 14 flaws are actually part of a larger list of 79 flaws Konovalov found in Linux kernel USB drivers during the past months. Not all of these 79 vulnerabilities have been reported, let alone patched. Most are simple DoS (Denial of Service) bugs that freeze or restart the OS, but some allow attackers to elevate privileges and execute malicious code. Read more of this story at Slashdot.

View article:
Linux Has a USB Driver Security Problem

Windows 10’s Version ofd AirDrop Lets You Quickly Share Files Between PCs

Microsoft is testing its “Near Share” feature of Windows 10 in the latest Insider build (17035) today, which will let Windows 10 PCs share documents or photos to PCs nearby via Bluetooth. The Verge reports: A new Near Share option will be available in the notification center, and the feature can be accessed through the main share function in Windows 10. Files will be shared wirelessly, and recipients will receive a notification when someone is trying to send a file. Microsoft’s addition comes just a day after Google unveiled its own AirDrop-like app for Android. Read more of this story at Slashdot.

View article:
Windows 10’s Version ofd AirDrop Lets You Quickly Share Files Between PCs

Thieves pilfer $370,000 worth of iPhone Xs in San Francisco

Thieves broken into a UPS truck parked outside a San Francisco Apple Store and made off with 300 iPhone Xs valued at around $370, 000, CBS SF Bay Area reports. The suspects were “husky, ” and “wearing hooded sweatshirts, ” according to SFPD Captain Rick Yarid, adding “it appears [they] knew what they were looking for.” The UPS driver reportedly parked the vehicle outside a mall and went to do a delivery at a Macy’s when the thieves snatched the devices, according to a witness. “Given the dollar value in the incident itself it appears it was planned, ” said Yarid. UPS and Apple are assisting police, and the IMEI serial number of each phone has been recorded. That created one of the “fattest” police reports he’d ever seen, said SFPD Sgt. Paul Weggenmann. The phones will likely be blacklisted on all US cellular networks, but it’s a lot easier for thieves to change an EMEI before an iPhone is set up by a customer. Obviously, if you happen to see a particularly good deal on an iPhone X on the SF Craiglist, assume it’s stolen. So far, the iPhone X is Apple’s hottest-selling smartphone ever, with more than double the number ordered in the first few days than the previous champ, the iPhone 6S . Within minutes, the iPhone X sold out online, pushing orders well back from the original November 3rd ship date. This despite reports that the device, which is Apple’s first without a home button and with “Face ID” facial recognition security, is in short supply. As a result, folks have been queuing at Apple Stores as much as ever, hoping to get one in hand before they disappear. Luckily, folks who pre-ordered their iPhone Xs from the Stonestown Apple Store will still receive them on time, CNET reports. Via: MacRumors Source: CBS SF Bay Area

Excerpt from:
Thieves pilfer $370,000 worth of iPhone Xs in San Francisco

Ableton Live will remember your riffs if you forget to press record

Ableton Live is popular with computer musicians thanks to its flexibility. As the name suggests, it enables live performance of electronic music, but it’s also a robust music making tool in its own right. Fans of Live are long overdue an update, as the last full release (Live 9) was four years ago. Today Ableton revealed Live 10, which promises to make it even easier to translate ideas into anthems. Aside from Live’s double duty as performance and creation software, one of the biggest lures for budding producers is its workflow. Ableton designed Live to work on one screen, with clever shortcuts to jump between common tasks. Live 10 builds on that with new tools to do more with less. For starters, you can now edit multiple MIDI clips side by side, and zoom in for precision work with one key. Most musicians have struggled with getting a part of their track just right. Currently, if you start playing a project back, you won’t hear MIDI instruments until the next note in the clip. This means if you start playback mid-note, you won’t hear it — annoying for long strings sounds, for example. A new “Note chasing” feature solves that, meaning all notes will play even if halfway through. It’s a low key change, but one that will please anyone who’s heard the same part over and over again just to get to where you want to edit. For those (like me) who seem to give their best performance while not recording, there’s “Capture.” It sounds similar to a feature in Apple’s Logic Pro that remembers all MIDI input in the background, even if you’re not recording. So, if you happen to play a killer riff along to a beat, but weren’t recording, Live will have snagged it anyway so you can retrieve it. For advanced users, Ableton’s “Max for Live” kit has long allowed you to create tools like Capture , or software instruments from scratch. Max is now built right in to Live 10 (previously it was a $200 add-on), but it’s good to see some of the more popular ideas made in Max find their way into the standard version of the software. Other updates include a new built-in synthesizer call “Wavetable” for squelchy sounds a-la Stranger Things and three new audio effects (Pedal, Drum Buss and Echo). Owners of Push — Ableton’s companion hardware controller — can look forward to improved graphics and visualizations so you can keep your eyes away from the computer (and look less like you’re checking your email on stage). Despite the announcement today, eager users will still need to wait a little longer. Ableton Live 10 won’t be available until early 2018. The good news is, that you can snag a copy of Live 9 right now if you don’t already have it at 20 percent discount, which will automatically be upgraded to the new version once it lands. Once released, Live 10 will cost $449 for the standard version and $499 for the suite with all the software instruments (this is the one you probably want). Source: Ableton

More:
Ableton Live will remember your riffs if you forget to press record

New VibWrite System Uses Finger Vibrations To Authenticate Users

An anonymous reader quotes a report from Bleeping Computer: Rutgers engineers have created a new authentication system called VibWrite. The system relies on placing an inexpensive vibration motor and receiver on a solid surface, such as wood, metal, plastic, glass, etc.. The motor sends vibrations to the receiver. When the user touches the surface with one of his fingers, the vibration waves are modified to create a unique signature per user and per finger. Rutgers researchers say that VibWrite is more secure when users are asked to draw a pattern or enter a code on a PIN pad drawn on the solid surface. This also generates a unique fingerprint, but far more complex than just touching the surface with one finger. During two tests, VibWrite verified users with a 95% accuracy and a 3% false positive rate. The only problem researchers encountered in the live trials was that some users had to draw the pattern or enter the PIN number several times before they passed the VibWrite authentication test. Besides improvements to the accuracy with which VibWrite can detect finger vibrations, researchers also plan to look into how VibWrite will behave in outdoor environments to account for varying temperatures, humidity, winds, wetness, dust, dirt, and other conditions. This new novel user authentication system is described in full in a research paper entitled “VibWrite: Towards Finger-input Authentication on Ubiquitous Surfaces via Physical Vibration.” Read more of this story at Slashdot.

View post:
New VibWrite System Uses Finger Vibrations To Authenticate Users

Japanese Metal Manufacturer Faked Specifications To Hundreds of Companies

schwit1 writes: Kobe Steel, a major Japanese supplier of steel and other metals worldwide, has admitted that it faked the specifications to metals shipped to hundreds of companies over the past decade.Last week, Kobe Steel admitted that staff fudged reports on the strength and durability of products requested by its clients — including those from the airline industry, cars, space rockets, and Japan’s bullet trains. The company estimated that four percent of aluminum and copper products shipped from September 2016 to August 2017 were falsely labelled, Automotive News reported. But on Friday, the company’s CEO, Hiroya Kawasaki, revealed the scandal has impacted about 500 companies — doubling the initial count — and now includes steel products, too. The practice of falsely labeling data to meet customer’s specifications could date back more than 10 years, according to the Financial Times.For rockets the concern is less serious as they generally are not built for a long lifespan, but for airplanes and cars this news could be devastating, requiring major rebuilds on many operating vehicles. Read more of this story at Slashdot.

See the article here:
Japanese Metal Manufacturer Faked Specifications To Hundreds of Companies

Chrome 62 Released With OpenType Variable Fonts, HTTP Warnings In Incognito Mode

An anonymous reader writes: Earlier today, Google released version 62 of its Chrome browser that comes with quite a few new features but also fixes for 35 security issues. The most interesting new features are support for OpenType variable fonts, the Network Quality Estimator API, the ability to capture and stream DOM elements, and HTTP warnings for the browser’s Normal and Incognito mode. The most interesting of the new features is variable fonts. Until now, web developers had to load multiple font families whenever they wanted variations on a font family. For example, if a developer was using the Open Sans font family on a site, if he wanted a font variation such as Regular, Bold, Black, Normal, Condensed, Expanded, Highlight, Slab, Heavy, Dashed, or another, he’d have to load a different font file for each. OpenType variable fonts allow font makers to merge all these font family variations in one file that developers can use on their site and control via CSS. This results in fewer files loaded on a website, saving bandwidth and improving page load times. Two other features that will interest mostly developers are the Network Quality Estimator and the Media Capture from DOM Elements APIs. As the name hints, the first grants developers access to network speed and performance metrics, information that some websites may use to adapt video streams, audio quality, or deliver low-fi versions of their sites. Developers can use the second API — the Media Capture from DOM Elements — to record videos of how page sections behave during interaction and stream the content over WebRTC. This latter API could be useful for developers debugging a page, but also support teams that want to see what’s happening on the user’s side. Read more of this story at Slashdot.

Read the original:
Chrome 62 Released With OpenType Variable Fonts, HTTP Warnings In Incognito Mode

Microsoft Has Already Fixed the Wi-Fi Attack Vulnerability; Android Will Be Patched Within Weeks

Microsoft says it has already fixed the problem for customers running supported versions of Windows. From a report: “We have released a security update to address this issue, ” says a Microsoft spokesperson in a statement to The Verge. “Customers who apply the update, or have automatic updates enabled, will be protected. We continue to encourage customers to turn on automatic updates to help ensure they are protected.” Microsoft is planning to publish details of the update later today. While it looks like Android and Linux devices are affected by the worst part of the vulnerabilities, allowing attackers to manipulate websites, Google has promised a fix for affected devices “in the coming weeks.” Google’s own Pixel devices will be the first to receive fixes with security patch level of November 6, 2017, but most other handsets are still well behind even the latest updates. Security researchers claim 41 percent of Android devices are vulnerable to an “exceptionally devastating” variant of the Wi-Fi attack that involves manipulating traffic, and it will take time to patch older devices. Read more of this story at Slashdot.

Read the article:
Microsoft Has Already Fixed the Wi-Fi Attack Vulnerability; Android Will Be Patched Within Weeks

Outlook for desktops will behave a lot like the mobile app

Outlook on computers can be overwhelming, to put it gently. The interface is loaded with buttons you probably aren’t using, and it generally isn’t as intuitive or fluid as the mobile and web versions . Thankfully, Microsoft knows this — and it’s planning a revamp that could give the email and calendar app a breath of fresh air. Microsoft recently previewed Outlook redesigns for Mac and Windows that are nearly as clean and intuitive as their mobile counterparts. You can still have a customizable “ribbon” at the top, but it’s stripped down and less intimidating to newcomers. The navigation panel (on the left) also takes its cues from Outlook’s mobile apps, making it much easier to switch folders or entire accounts. Mac users may notice the difference the most. This time around, Microsoft is aiming for an “authentically Mac” look instead of shoehorning the Windows interface into a Mac app. This won’t matter much if you’re interested in features above all else, but it could help you adjust if you’re switching from Apple Mail or another Mac-native email program. There’s no mention of when the new Outlook will hit your PC, although it wouldn’t be surprising if Microsoft rolls this into Office 2019’s release next year. Whenever it arrives, it’ll reflect how much Microsoft’s software priorities have changed in the past few years. Where Outlook’s desktop version has largely focused on business users circulating memos and scheduling meetings, it now has to court home users who may just be looking for an app similar to what they have on their phones. Microsoft’s challenge will be to please these relative newcomers without alienating the corporate crowd. Via: MSPowerUser , The Verge Source: Microsoft Ignite (YouTube)

View post:
Outlook for desktops will behave a lot like the mobile app