TrueCrypt Windows encryption app has critical security flaws

If you’re still using TrueCrypt to protect your Windows disks, even though its developers abandoned it and said it was “not secure” last year, you may want to stop that. Google Project Zero researcher James Forshaw found two “privilege elevation” holes in the popular software that would give attackers full access to your data. Worse yet, TrueCrypt was audited earlier this by a crowdfunded team of iSec security researchers and found to be error-free. Google’s James Forshaw said on Twitter that the miss was understandable, though: “iSec phase 1 audit reviewed this specific code but Windows drivers are complex beasts (and) easy to miss.” Forshaw hasn’t disclosed the bugs yet, saying he usually waits seven days after a patch is released. He and other researchers agree that the vulnerabilities — which can reportedly be exploited by “abusive drive letter handling” — weren’t deliberately installed. And they won’t, of course, be fixed in the original program’s code. @v998n @VeraCrypt_IDRIX I don’t tend to open up security bug reports until 7 days or so after the release of the patch, just in case 🙂 — James Forshaw (@tiraniddo) September 27, 2015 However, if you’re using TrueCrypt because “free” is a good price, there are other options –VeraCrypt and CipherShed are open source forks of TrueCrypt, and VeraCrypt has already patched the bugs. Suffice to say, you should stop using TrueCrypt within the seven day window before Forshow releases the exploitable code. Even if you do, however, we likely haven’t heard the end of this type of Windows vulnerability. VeraCrypt’s Mounir Idrassi gold Threatpost that “These are the kind of vulnerabilities that exist in (lots of) software on Windows, ” and that will be (and have been) used by hackers for years. Via: PC World Source: James Forshaw (Twitter)

Read the original:
TrueCrypt Windows encryption app has critical security flaws

Microsoft promises that Windows 10 doesn’t violate your privacy

Microsoft famously accused Google of ” Scroogling ” users by selling their private data to advertisers. But when it launched Windows 10, Microsoft was itself roundly criticized for over-zealous personal data collection. Critics say it does things like send parents reports of their kids’ PC use, prevent users from opting out of certain types of data collection, and scan PCs for counterfeit software. The software giant has responded to those accusations in a Windows blog post , saying that it only collects data that makes its products work better and that it gives users control over information collected. Microsoft started by addressing the “telemetry data” it collects when Windows or an app crashes. Company VP Terry Myerson explained that such info “help(s) us provide a secure and reliable experience, ” and that it “doesn’t include any of your content or files, and we take several steps to avoid collecting any information that directly identifies you.” He added that the practice has already paid off, helping a Microsoft partner fix a faulty graphics driver within 24 hours. As for personal data, Microsoft says that it only collects it to “deliver a delightful and personalized Windows experience, ” to give you updates on scores for your favorite team, for instance. Additional data is collected for features like Cortana because of its nature as a personal assistant. However, Myerson pointed out that you can opt out of collection of speech, typing, location and other activities. Finally, Redmond insists that “neither Windows 10 nor any other Microsoft software scans the contents of your email or other communications, or your files, in order to deliver targeted advertising.” In other words, Microsoft doesn’t use Outlook to create targeted advertising, unlike Google’s Gmail. As Ars Technica points out, however, the wording seems to indicate that Microsoft reserves the right to collect advertising data via other apps like Bing and Cortana. So what to make of this? Many of the original accusations were false: MIcrosoft doesn’t send your personal files to its servers like torrent sites claim, for instance. Also, it’s not new that Microsoft sends parents reports on their kids’ surfing activities — that feature was also available in Windows 8. However, Microsoft promised that it’ll update its policies to take your children’s ages into account. As for the collection of crash data, Microsoft didn’t address the actual complaint: Windows 10 users can’t opt out of telemetry, unlike with previous versions. As for the collection of crash data, Microsoft didn’t address the actual complaint; namely that Windows 10 users can’t opt out of telemetry, unlike with previous versions (unless they’re a Windows 10 Enterprise licensee). You can, however, adjust the setting from full (the default) to basic, so that you transmit less data to Microsoft. And while the company collects unique user IDs after a crash, it only does so to determine how many users are experiencing an issue. Would it be good to be able to completely opt out of telemetry? Sure! Would you trade that for a potentially more unstable operating environment? Probably not! Microsoft concluded by saying it’s listening to users’ privacy concerns, and will update its policies if need be. That’s a good start — they probably don’t bother most users, but it needs to better communicate the hows and whys of them. It would do well to keep the dialogue going, especially considering Google’s ongoing problems in privacy-mad Europe. Source: Microsoft

More:
Microsoft promises that Windows 10 doesn’t violate your privacy

‘Star Trek’ virtual tour will recreate every deck of the Enterprise

You’ve probably seen a few attempts at recreating worlds in game engines , but never at this level of detail. Artist Jason B is working on the Enterprise-D Construction Project , an Unreal Engine-based virtual tour that aims to reproduce all 42 decks in the Enterprise from Star Trek: The Next Generation . While it’s not quite photorealistic, the attention to detail in this digital starship is already uncanny — the bridge, shuttle bay and other areas feel like lived-in spaces, just waiting for the crew to return. Jason is drawing on as much official material as he can to get things pixel-perfect, and he’s only taking creative liberties in those areas where there’s no canonical content. The project is currently just a hobby, but there might be more in the cards if everything goes smoothly. Jason is considering populating the ship, offering a chance to explore the outsides of other locations (such as Deep Space Nine) and even introducing game mechanics. Whether or not those happen will depend on many things falling into place, however. The creator is thinking about crowdfunding campaigns to help with his work, and there’s the looming question of licensing: he’ll likely need CBS’ approval to release anything, especially if he wants to charge for it. Even if it amounts to little more than some screenshots and video, though, it’s an impressive feat. Via: Road To VR Source: Enterprise-D Construction Project

Read the article:
‘Star Trek’ virtual tour will recreate every deck of the Enterprise

The New Roomba 980 Can Now Watch Your Dirt

 It knows when you’ve been sleeping, it knows when you’re awake, it knows when your kids spilled Rice Krispies next to the couch and covered the spill with the dog. The new Roomba 980 is a round robotic vacuum with a new twist. While previous models got around by bumping into things and coming to the edge of stairs, the new 980 uses a low-res video camera to “map”… Read More

Link:
The New Roomba 980 Can Now Watch Your Dirt

HP To Jettison Up To 30,000 Jobs As Part of Spinoff

An anonymous reader writes: Hewlett-Packard says its upcoming spinoff of its technology divisions focused on software, consulting and data analysis will eliminate up to 30, 000 jobs. The cuts announced Tuesday will be within the newly formed Hewlett Packard Enterprise, which is splitting from the Palo Alto, California company’s personal computer and printing operation. “The new reductions amount to about 10 percent of the new company’s workforce, and will save about $2.7 billion in annual operating costs.” The split is scheduled to be completed by the end of next month. “The head of the group, Mike Nefkens, outlined a plan under which it is cutting jobs in what he called ‘high-cost countries’ and moving them to low-cost countries. He said that by the end of HP Enterprise’s fiscal year 2018, only 40 percent of the group’s work force will be located in high-cost countries.” Read more of this story at Slashdot.

Original post:
HP To Jettison Up To 30,000 Jobs As Part of Spinoff

Intel Invests In Qnovo’s Battery Boosting Tech

 Qnovo, a Newark, California-based firm that’s been developing battery charging enhancement technology since 2010, is today announcing an $8.6 million Series B funding round, with Intel Capital joining as a strategic investor, alongside existing investors RockPort Capital, US Venture Partners and Blue Run Ventures. Read More

More:
Intel Invests In Qnovo’s Battery Boosting Tech

Slack ties in with Windows 10’s notification center

Communication / productivity tool Slack is starting to blend in with Windows 10 after its latest update. In version 1.2.0 , notifications show up in the desktop OS’ Action Center, and clicking them links directly to the appropriate conversation in the app. Many Windows applications never updated to take advantage of new features in Windows 8, or even to become fully compatible with how it worked with hardware like touchscreens, so it’s encouraging to see some support. It’s not a Windows 10 Universal app yet, but the company has a Windows Phone version in beta , just months after it came out of beta on the desktop. There’s also a fresh new icon for Windows 10, and color-coded notification icon in the tray. If you use Slack in the workplace (like we do), it should probably auto-update with the latest features, or you can download it here . Filed under: Internet , Software Comments Source: Slack Changelog , Slack Apps Tags: 1.2.0, actioncenter, notifications, Slack, update, Windows10

See original article:
Slack ties in with Windows 10’s notification center

Vim On A Typewriter Will Endear You To Grizzled Unix Experts

 There have been many mechanical keyboard solutions in the past few years, most notably an IBM Selectric with serial out that let you klack away like Ada Lovelace directly into a printed email. However, the real Holy Grail has been the ability to transmit mechanical key presses directly to a computer using a few bits of electronics. Well, it’s been done and it’s glorious. An… Read More

Visit site:
Vim On A Typewriter Will Endear You To Grizzled Unix Experts

NASA Mulls Missions To Neptune and Uranus, Using the Space Launch System

MarkWhittington writes: According to a story in Astronomy Magazine, NASA is contemplating sending flagship sized space probes to the so-called “ice giants” of Uranus and Neptune. These probes would orbit the two outer planets, similar to how Galileo orbited Jupiter and how Cassini currently orbits Saturn. The only time NASA has previously had a close encounter with either of these worlds was when Voyager 2 flew by Uranus in 1986 and then Neptune in 1989. Each of these missions would happen after the Europa Clipper, a flagship-class mission scheduled for the mid-2020s. Read more of this story at Slashdot.

Visit link:
NASA Mulls Missions To Neptune and Uranus, Using the Space Launch System

Windows 10 is on 75 million PCs after only one month

If you’re still wondering why Microsoft made Windows 10 free, just consider the latest stats: It’s now on 75 million computers one month after its big launch, Windows corporate VP Yusuf Mehdi tweeted today. In comparison, it took six months for Microsoft to sell 100 million Windows 8 licenses , a more nebulous stat that didn’t necessarily include actual installs. None of this is a surprise though: We’ve written extensively about Microsoft’s desire to build a long-lasting Windows platform , and that starts with prioritizing the number of people running Windows 10 rather than mere revenues. Mehdi also divulged some other intriguing tidbits: More than “90, 000 unique PC or tablet models” have upgraded to Windows 10; over 122 years of gameplay have been streaming to Windows 10 PCs from Xbox One consoles; and, perhaps most intriguingly, the Windows 10 store “has seen 6x more app downloads “per device than Windows 8.” That last point is likely yet another big reason Microsoft chose to make Windows 10 a free upgrade. Microsoft worked hard to promote the Windows 8 app store, but it never managed to land a killer app (and in many cases, Windows 8 apps were simply worse than their iOS and Android counterparts). Developers waited until people actually started using Windows 8 apps, but that never really happened because there weren’t many to choose from. But with Windows 10, there’s an influx of new users eager to try out newer apps, and Microsoft has also made it easier for devs to bring over iOS and Android apps . 1. #Windows10 : More than 75 million devices running Windows 10 – and growing every day. 1/10 pic.twitter.com/g0kqGizU0c — Yusuf Mehdi (@yusuf_i_mehdi) August 26, 2015 Filed under: Software , Microsoft Comments Tags: microsoft, Windows10

Taken from:
Windows 10 is on 75 million PCs after only one month