wiredmikey writes "A new Windows kernel zero-day vulnerability is being exploited in targeted attacks against Windows XP users. Microsoft confirmed the issue and published a security advisory to acknowledge the flaw after anti-malware vendor FireEye warned that the Windows bug is being used in conjunction with an Adobe Reader exploit to infect Windows machines with malware. Microsoft described the issue as an elevation of privilege vulnerability that allows an attacker to run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights."
Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!
rtoz sends word that a French court has ordered Google, Yahoo, and Microsoft to remove 16 unauthorized video streaming sites from their search results. Many ISPs were also ordered to block access to the sites. According to TorrentFreak, "The court ruled that the film industry had clearly demonstrated that the sites in question are 'dedicated or virtually dedicated to the distribution of audiovisual works without the consent of their creators,' thus violating their copyrights. As a result the search services of Google, Microsoft, Yahoo and local company Orange are now under orders to 'take all necessary measures to prevent the occurrence on their services of any results referring to any of the pages' on these sites. Several ISPs – Orange, Free, Bouygues Télécom, SFR, Numéricable and Darty Télécom were also ordered to 'implement all appropriate means including blocking' to prevent access to the infringing sites."
onyxruby writes "Microsoft may finally be ready to put Windows RT out to pasture. After ignoring pundits, the public, and a staggering $900 writedown, the subsequent lack of sales for the second edition of the RT have finally gotten the message through. Speaking at a UBS seminar, Microsoft VP Julie Larson-Green said, 'It just didn't do everything that you expected Windows to do. So there's been a lot of talk about it should have been a rebranding. We should not have called it Windows (.DOCX). How should we have made it more differentiated? I think over time you'll see us continue to differentiate it more. We have the Windows Phone OS. We have Windows RT and we have full Windows. We're not going to have three.'"
theodp writes "Take a gander at the 2013 Black Friday ads and your head will be spinning with deals that seem too good to be true. And while the WSJ will try to slap you back to reality with a story on The Dirty Secret of Black Friday 'Discounts', it's still hard not to get jazzed over the prospect of picking up an iPad Mini w/$100 gift card for $299 (Walmart), a 16GB Nexus 7 for $199 (Staples), or a 32GB Microsoft Surface for $199.99 (Best Buy). So, if you're playing the game this year — either online or in-person (hey, what could go wrong?), — what are your top tech picks for Black Friday? Any strategy for improving your odds of getting them?"
Hugh Pickens DOT Com writes, quoting USA Today "The NASDAQ has topped 4000 for the first time in 13 years, but much has changed since then. ... Tech investors in 2000 were right about the possibilities of the Internet and mobile computing. But they were dead wrong about which companies would be in the vanguard ... The recovery of the NASDAQ has been a complex tale of creative destruction, where old companies that once fueled the index have been pushed aside by new players. Back in 2000, Microsoft, Cisco Systems, Intel, Oracle, and Sun accounted for 8.9%, 8.5%, 7.1%, 3.6% and 2.6%, respectively, of the value of the NASDAQ composite. Today, companies that were just starting out or didn't even exist — think Google, Amazon, and Facebook — are in the top 10, accounting for 4.7%, 2.7% and 1.5% of NASDAQ's value. Microsoft, Cisco and Intel's weight has fallen sharply. Apple, which wasn't in the top 10 in 2000, is a behemoth at 7.9%. So is the NASDAQ enjoying a long overdue catch-up with the rest of the market, or is the broad market overpriced, with the NASDAQ being pulled along for the ride? 'The reality is that the only thing that's the same from Nasdaq 4000 in 1999 and Nasdaq 4000 in 2013,' says Doug Sandler, 'is the number 4000.'"
Nerval's Lobster writes "In a previous posting, developer and programmer Jeff Cogswell compared a few C++ compilers on Linux. Now he's going to perform a similar set of tests for Windows. "Like all things Windows, it can get costly doing C++ development in this environment," he writes. "However, there are a couple notable exceptions" such as free and open-source cygwin, mingW, Express Versions of Visual Studio, and Embacadero. He also matched up the Intel C++ Compiler, Microsoft C++ Compiler, and the Embarcadero C++ 6.70 Compiler. He found some interesting things — for example, Intel's compiler is pretty fast, but its annoying habit of occasionally "calling home" to check licensing information kept throwing off the rests. Read on to see how the compilers matched up in his testing."
nk497 writes "Only 25% of Yahoo staff have obeyed the company's request to 'eat their own dog food' and switch to Yahoo Mail, a colorful internal memo has revealed. The leaked email, acquired by All Things Digital, implores staff to move over to the corporate version of Yahoo's webmail system, gently lambasting staff who refuse to part with Microsoft Outlook. The message goes on to take a swipe at what appears to be Yahoo employees' preferred mail client, Microsoft Outlook, describing it as 'anachronism of the now defunct 90s PC era, a pre-web program written at a time when NT Server terrorized the data center landscape with the confidence of a T-Rex born to yuppie dinosaur parents who fully bought into the illusion of their son's utter uniqueness because the big-mouthed, tiny-armed monster infant could mimic the gestures of The Itsy-Bitsy Pterodactyl.'"
theodp writes "The same cast of billionaire characters — Mark Zuckerberg, Bill Gates, Steve Ballmer, Eric Schmidt — is backing FWD.us, which is lobbying Congress for more visas to 'meet our workforce needs,' as well as Code.org, which aims to popularize Computer Science education in the U.S. to address a projected CS job shortfall. In laying out the two-pronged strategy for the Senate, Microsoft General Counsel and Code.org Board member Brad Smith argued that providing more kids with a STEM education — particularly CS — was 'an issue of critical importance to our country.' But with its K-8 learn-to-code program which calls for teachers to receive 25% less money if fewer than 40% of their CS students are girls, Smith's Code.org is sending the message that training too many boys isn't an acceptable solution to the nation's CS crisis. 'When 10 or more students complete the course,' explains Code.org, "you will receive a $750 DonorsChoose.org gift code. If 40% or more of your participating students are female, you'll receive an additional $250, for a total gift of $1,000 in DonorsChoose.org funding!" The $1+ million Code.org-DonorsChoose CS education partnership appears to draw inspiration from a $5 million Google-DoonorsChoose STEM education partnership which includes nebulous conditions that disqualify schools from AP STEM funding if projected participation by female students in AP STEM programs is deemed insufficient. So, are Zuckerberg, Gates, Ballmer, and Schmidt walking-the-gender-diversity-talk at their own companies? Not according to the NY Times, which just reported that women still account for only about 25% of all employees at Code.org supporters Apple, Google, Facebook, and Microsoft. By the way, while not mentioning these specific programs, CNET reports that Slashdot owner Dice supports the STEM efforts of Code.org and Donors Choose."
First time accepted submitter conoviator writes "The NY Times has just published a piece providing more background on the healthcare.gov software project. One interesting aspect: 'Another sore point was the Medicare agency's decision to use database software, from a company called MarkLogic, that managed the data differently from systems by companies like IBM, Microsoft and Oracle. CGI officials argued that it would slow work because it was too unfamiliar. Government officials disagreed, and its configuration remains a serious problem.'" The story does not say that MarkLogic's software is bad in itself, only that the choice meant increased complexity on the project.
Microsoft released the Xbox One today, putting the next-gen console war into full swing. A common theme throughout most of the reviews is that properly evaluating the system is going to take time. Not only are updates for the console continuing to roll out, but the usefulness of some of its technology will depend on what game-makers and other content producers can do with it. Digital Foundry says, "It is willing to make the trades on gaming power in order to potentially revolutionize the way we interact with entertainment in the living room." The Penny Arcade Report calls the hardware and UI a "confusing mess" — until you learn to use it, at which point the hands-free navigation is fast and convenient. Polygon's review is once again visually-oriented, providing a good look at the UI, comparing the controller with the Xbox 360's controller, and giving a demonstration of how Kinect recognizes users. Their conclusion is that while "Kinect isn't a fully realized product yet," "the Xbox One feels like it's from the future." iFixit has a full teardown of the Xbox One, giving it a repairability score of 8/10 (the Kinect sensor gets 6/10). HotHardware has more details about the console's internals, including power consumption and temperature readings. Eurogamer has a compilation of launch coverage, including launch title reviews.
kanad writes "High school students in Queensland, Australia would be able to do Microsoft certifications online and get credits. The exam fees will be free for students and courses include Microsoft's products like Sharepoint and SQL Server. Ostensibly this is for making kids ready for the workforce. but Australian IT entrepreneur Matt Barrie CEO of freelancer.com has criticised it for vendor lock-in and Microsoft's influence in the educational system."
shutdown -p now writes "Coming from the team that had previously brought you Python Tools for Visual Studio, Microsoft has announced Node.js Tools for Visual Studio, with the release of the first public alpha. NTVS is the official extension for Visual Studio that adds support for Node.js, including editing with Intellisense, debugging, profiling, and the ability to deploy Node.js websites to Windows Azure. An overview video showcases the features, and Scott Hanselman has a detailed walkthrough. The project is open source under Apache License 2.0. While the extension is published by Microsoft, it is a collaborative effort involving Microsoft, Red Gate (which previously had a private beta version of similar product called Visual Node), and individual contributors from the Node.js community."
rjmarvin writes "A new surge of callers posing predominately as Microsoft technicians are attempting and sometimes succeeding in scamming customers, convincing them their PCs are infected and directing them to install malware-ridden software or give the callers remote access to the computer. The fraudsters also solicit payment for the fake services rendered. This comes only a year after the FTC cracked down on fake tech support calls, charging six scam operators last October."
An anonymous reader writes "The Washington post reports on the progress of a piece of legislation many hoped would address the glut of meaningless software patents used as weapons by patent trolls. Unfortunately, the provision that would have helped the USPTO nix these patents has been nixed itself. The article credits IBM, Microsoft, and other companies with huge patent portfolios for the change, citing an 'aggressive lobbying campaign' that apparently succeeded. Quoting: 'A September letter signed by IBM, Microsoft and several dozen other firms made the case against expanding the program. The proposal, they wrote, "could harm U.S. innovators by unnecessarily undermining the rights of patent holders. Subjecting data processing patents to the CBM program would create uncertainty and risk that discourage investment in any number of fields where we should be trying to spur continued innovation." ... Last week, IBM escalated its campaign against expanding the CBM program. An IBM spokesman told Politico, "While we support what Mr. Goodlatte's trying to do on trolls, if the CBM is included, we'd be forced to oppose the bill." Insiders say the campaign against the CBM provisions of the Goodlatte bill has succeeded. The House Judiciary Committee is scheduled to hold a markup of the legislation Wednesday, and Goodlatte will introduce a "manager's amendment" to remove the CBM language from his own bill. IBM hailed that change in a Monday letter to Goodlatte.'"
An anonymous reader writes "TechRepublic has the story behind Munich City Council's decision to ditch Microsoft Windows and Office in favor of open source software. The project leader talks about why the shift was primarily about freedom, in this case freeing itself from being tied into Microsoft's infrastructure and having control over the software it uses. He talks about how the council managed to keep such a large project on track, despite affecting 15,000 people and spanning nine years. He also warns against organizations justifying the shift to open source software on the grounds that it will save money, arguing this approach is always likely to fail."
mrspoonsi writes "Nokia shareholders met today at an extraordinary general meeting (EGM) to vote on whether or not to accept the terms of the company's proposed sale of its devices and services business to Microsoft. The deal, which was first announced in September, is worth €5.44bn EUR ($7.35bn USD / £4.57bn GBP), and also includes provisions for Microsoft to license patents from the Finnish company. 78% of those eligible to vote had already voted before the EGM. Of those early votes, a staggering 99% had voted in favour of the sale to Microsoft."
An anonymous reader writes "Users of Silverlight, Microsoft's answer to Adobe Flash, are in danger of having malware installed on their computers and being none the wiser, as an exploit for a critical vulnerability (CVE-2013-0634) in the app framework has been added to the Angler exploit kit. The vulnerability could allow remote code execution if an attacker hosts a website that contains a specially crafted Silverlight application that could exploit this vulnerability and then convinces a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements." You'd think something like Silverlight would automatically upgrade itself.
mrspoonsi writes "Leading search engine companies Google and Microsoft have agreed measures to make it harder to find child abuse images online. As many as 100,000 search terms will now return no results that find illegal material, and will trigger warnings that child abuse imagery is illegal. The Google chairman said he hired a 200-strong team to work out a solution over the last three months. Google's previous set of measures, which displayed a warning to people attempting to search for illegal material and caused a 20 percent drop in illicit activity."
Several sources, including this report at Forbes, and this one at All Things Digital, say that Apple has bought (or is in the process of buying) Tel-Aviv based PrimeSense, the company behind the 3-D sensing technology in Microsoft's Kinect, for $345 million. The Forbes piece also gives a compact but interesting summary of the possibilities of ubiquitous 3-D hardware, and the sudden, recent drop in price of the components necessary for that to happen. Devices like the Lynx 3-D scanner that I saw at last year's SXSW (targeting the cheap and portable end of the 3-D scanning market) may have a lot of competition in the near future.
Nathan Myhrvold's six-volume foodie encyclopedia, Modernist Cuisine, writes reader SmartAboutThings, is one of the most expensive cooking encyclopedias, the original six-volume version retailing for $500, with the two-volume addition that followed after that selling for $115. "Now, Nathan and his team have transformed their huge food encyclopedia into an iPhone/iPad app. It's not just a digital book, but rather an expensive $80 interactive app that can do more than just provide recipes. The interactive digital cookbook is the fruit of a development team of 10-15 people that have worked over nine months on the project. The app contains 37 technique videos, 416 recipes and 1,683 photos."