Microsoft releases one of its smallest monthly security patch bundles

Microsoft has released its first batch of patches for this year, and it's one of the smallest ever for the company, with only three vulnerabilities fixed across its entire product portfolio.The patches are covered in four security bulletins, but one is dedicated to Flash Player, for which Microsoft distributed patches through Windows update.The only security bulletin rated as critical is the one for Microsoft Office and Office Services and Web Apps. It covers a memory corruption vulnerability that can be exploited by tricking users to open specially crafted files and can lead to remote code execution.To read this article in full or to leave a comment, please click here

Worth Reading: Bleaker times for DNS registrars?

Verisign’s spent the best part of 2016 putting out warnings. The .COM operator and domain industry heavyweight highlighted its Q3 earnings report with a stern “Ending Q4 ’16 Domain Name Base expected to decrease by between 1.5M to 2.8M registrations from the end of Q3 ’16”. A forecast which the company said was based on “on historical seasonality and current market trends.” As 2016 drew to a close, the downturn seemed to materialize with specialist blog The Domains running a story on December 29 entitled “.Com Registrations Loses Another 1 Million Domains In Less Than 2 Weeks; Now Under 127 Million”. —CircleID

The post Worth Reading: Bleaker times for DNS registrars? appeared first on 'net work.

Vintage data-transfer tech gets upgrade after 35 years

Tech artifacts like old Mac computers are finding their way to museums, but some never-say-die technologies continue to serve requirements important to computing. Inside wearables, smart devices, robots, and computers like Raspberry Pi are communications buses called I2C (Inter Integrated Circuits), which date back to 1982, and SPI (Serial Peripheral Interface), which was born in 1979. Those buses have driven short-range communication between circuits and microcontrollers for decades. They now serve as key interfaces for sensor-related communication on smart devices, wearables, and computers. But as devices get equipped with more powerful, bandwidth-hungry sensors like 360-degree cameras, these out-of-date buses won't be able to keep up in the long run. So standards-setting organization MIPI Alliance wants to bury I2C and replace it with the faster and modern I3C bus and also merge SPI into the new interface.To read this article in full or to leave a comment, please click here

Amazon Alexa ‘wins’ CES, but how well does the virtual assistant really perform?

According to multiple reports, Amazon’s Alexa voice assistant dominated last week’s Consumer Electronics Show (CES) in Las Vegas, despite the fact the company had little official presence. Spreading its wings far beyond Amazon’s own Echo, Dot and Tap devices, Alexa popped up on wide variety of new devices demo’d at the show—from refrigerators to air purifiers, baby monitors, headphones and even cars. But Alexa’s rapid spread begs the question: What is using the voice-controlled system really like? What can it actually do, and how well does it do it in real-world kitchens and bedrooms—not to mention cars? Alexa moves in!  Like a lot of other people, I acquired an Alexa-powered device from Amazon—the Amazon Echo Dot—over the holiday season. I know, I’m a bit late to the party, but frankly, I was not convinced any existing voice assistant system was really ready for prime time. To read this article in full or to leave a comment, please click here

Now Open: 2017 Docker Scholarship & Meet the 2016 Recipients!

Last year, Docker announced our inaugural Docker Scholarship Program in partnership with Hack Reactor. The 2017 scholarship to Hack Reactor’s March cohort is now open and accepting applications.

 

Docker Scholarship
 

The scholarship includes full tuition to Hack Reactor, pending program acceptance, and recipients will be paired with a Docker mentor.

Applications will be reviewed and candidates who are accepted into the Hack Reactor program and meet Docker’s criteria will be invited to Docker HQ for a panel interview with Docker team members. Scholarships will be awarded based on acceptance to the Hack Reactor program, demonstration of personal financial need and quality of application responses. The Docker scholarship is open to anyone who demonstrates a commitment to advancing equality in their community. All gender and gender identities are encouraged to apply. Click here for more information.

 

Apply Now

 

We are excited to introduce our 2016 Docker scholarship recipients, Maurice Okumu and Savaughn Jones!

In their own words, learn more about Maurice and Savaughn below:

Maurice Okumu 

 

My name is Maurice Okumu and I was born and raised in Kenya. I came to the USA about three years ago after having lived in Dubai for more than five Continue reading

Old networks can hobble IoT, even in tech paradise

IoT isn’t all brand-new, cutting-edge technology. In fact, some of it’s already suffering through painful upgrade cycles.A case in point is the system that tells transit passengers in the tech hub of San Francisco when the next train or bus will arrive. The NextMuni system, based on the third-party platform NextBus, recently began sending out wildly inaccurate forecasts on many lines.Why? Because most trains and buses had been communicating with NextMuni over AT&T’s 2G network, which was decommissioned on Jan. 1. The San Francisco Municipal Transportation Agency (SFMTA) said Friday that about 70 percent of its vehicles haven’t yet been upgraded with newer 3G technology. It was awkward timing, as that same day, the agency was playing up its innovation credentials as it announced a federal grant to fund six transit pilot projects.To read this article in full or to leave a comment, please click here

66% Off Nero 2017 Platinum HD Multimedia Suite Software, PC Disk or Download – Deal Alert

Create, edit, burn, convert, organize, stream, rip and play back videos, photos, and music like a professional, with the familiar maximum quality. Create audio CDs, DVDs, and Blu-ray Discs. Import and play back your videos in HEVC (H.265) and edit your films with full HD video-editing previews. In addition, the new, direct export of individual sections from long videos saves time and effort. For that special touch, add striking 4K templates and effects, as well as perfect transitions to your videos. Play videos with embedded subtitles and drag and drop extra ones to the playback functions. Use the new Gracenote integration to add and play back original album art for single songs and whole albums. And with the improved Nero MediaHome WiFi Sync App, you can easily transfer photos and videos wirelessly from your iOS and Android smartphone to your PC and vice versa. The PC version typically lists for $129.99, but its price has been discounted a significant 68% to just $44.72 on Amazon, making this a very good deal on the popular software package. See the discounted Nero Platinum 2017 on Amazon.To read this article in full or to leave a comment, please click here

21% off House of Marley Stir It Up Turntable with bonus Bob Marley Legend Album – Deal Alert

A classically designed turntable and category first for House of Marley, the Stir It Up Turntable is simple in form and rich in materials with natural bamboo details and a built-in pre-amp to sync with your favorite speakers and USB jack in back to record on PC.  This deal includes a BOB Marley legend album.  With a typical list price of $249.99, this 21% off deal is now $199.  See the discounted Stir It Up Turntable on Amazon.To read this article in full or to leave a comment, please click here

Why Google Is Driving Compute Diversity

In the ideal hyperscaler and cloud world, there would be one processor type with one server configuration and it would run any workload that could be thrown at it. Earth is not an ideal world, though, and it takes different machines to run different kinds of workloads.

In fact, if Google is any measure – and we believe that it is – then the number of different types of compute that needs to be deployed in the datacenter to run an increasingly diverse application stack is growing, not shrinking. It is the end of the General Purpose Era, which began …

Why Google Is Driving Compute Diversity was written by Timothy Prickett Morgan at The Next Platform.

On the ‘net: Is Proprietary Dead?

A new age of openness is coming upon us. At least that’s what we’re being told. For instance — “The reign of closed solution suites is over, shifting to the rise of open, heterogeneous software ecosystems.” Maybe it’s my 30 years in the information technology business (how many people remember Thomas-Conrad ARCnet hardware?), but I’m not convinced. It’s worth taking a moment to consider the case. —CircleID

The post On the ‘net: Is Proprietary Dead? appeared first on 'net work.

Oops, this Redditor accidentally deleted his company’s DNS in Microsoft Azure’s cloud

One Redditor has made a mistake that you can be assured he will not make again: He deleted an entire zone of his company’s Domain Name System in the Microsoft Azure cloud.“I meant to delete a single record, but it’s the same button in the same place as deleting a zone. As soon as I hit the button I knew what I had done, then all our websites start failing,” the Redditor confesses.That’s an oops. He goes on to describe how his unidentified company’s VOIP phones went offline and the backup domain controller began having issues resolving DNS.Meanwhile, in the 'when it rains it pours' line of thinking, an unrelated error occurred AT THE SAME TIME on the company’s Hyper-V server network interface cards (NICs).To read this article in full or to leave a comment, please click here

Microsoft releases only 4 security bulletins, 2 critical, on first 2017 Patch Tuesday

For the first Patch Tuesday of 2017, Microsoft is easing us into it by releasing only four security bulletins, half are of which are rated as critical for remote code execution flaws. In reality, only three of those are for Windows systems!This is the lightest load I can recall Microsoft handing us. It almost feels like this surely can’t be right, but hey – you didn’t want to work hard today anyhow, did you?CriticalMS17-002 resolves a remote code execution flaw in Microsoft Office. Microsoft Word 2016 32-bit and 64-bit editions and Microsoft SharePoint Enterprise Server 2016 are listed as the only affected software versions. The RCE bug is a result of Office software failing to properly handle objects in memory. If an attacker successfully exploited the flaw, and the user had admin rights, the attacker could take control of the box.To read this article in full or to leave a comment, please click here

Microsoft releases only 4 security bulletins, 2 critical, on first 2017 Patch Tuesday

For the first Patch Tuesday of 2017, Microsoft is easing us into it by releasing only four security bulletins, half are of which are rated as critical for remote code execution flaws. In reality, only three of those are for Windows systems!This is the lightest load I can recall Microsoft handing us. It almost feels like this surely can’t be right, but hey – you didn’t want to work hard today anyhow, did you?CriticalMS17-002 resolves a remote code execution flaw in Microsoft Office. Microsoft Word 2016 32-bit and 64-bit editions and Microsoft SharePoint Enterprise Server 2016 are listed as the only affected software versions. The RCE bug is a result of Office software failing to properly handle objects in memory. If an attacker successfully exploited the flaw, and the user had admin rights, the attacker could take control of the box.To read this article in full or to leave a comment, please click here

Tech luminaries team up on $27M AI ethics fund

Artificial intelligence technology is becoming an increasingly large part of our daily lives. While those developments have led to cool new features, they've also presented a host of potential problems, like automation displacing human jobs, and algorithms providing biased results.Now, a team of philanthropists and tech luminaries have put together a fund that's aimed at bringing more humanity into the AI development process. It's called the Ethics and Governance of Artificial Intelligence Fund, and it will focus on advancing AI in the public interest.A fund such as this one is important as issues arise during AI development. The IEEE highlighted a host of potential issues with artificial intelligence systems in a recent report, and the fund seems aimed at funding solutions to several of those problems.To read this article in full or to leave a comment, please click here

IT teams put conversations to work with ChatOps

Chat is an old tool that’s newly popular. From Slack and HipChat to Salesforce Chatter and Microsoft’s new Teams tool (and a myriad of others), these collaboration tools supplement rather than replace enterprise social networks like Yammer or Jive. Microsoft’s Office division director Richard Ellis likens it to the difference between Facebook and WhatsApp: “The chat-based workspace fills a gap where people can talk rapidly, share content and work as a team.”To read this article in full or to leave a comment, please click here(Insider Story)

Iran Leaks Censorship via BGP Hijacks

Last week, we reported via Twitter that the Iranian state telecom TIC hijacked address space containing a number of pornographic websites.  The relevant BGP announcement was likely intended to stay within the borders of Iran, but had leaked out of the country in a manner reminiscent of Pakistan’s block of Youtube via BGP hijack in 2008.  Over the weekend, TIC performed BGP hijacks of additional IP address space hosting adult content as well as IP addresses associated with Apple’s iTunes service.

In addition, in 2015 on this blog we reported that a new DNS root server instance in Tehran was being leaked outside Iran, a situation that was quickly rectified at that time.  Despite the fact that the Tehran K-root is intended to only be accessible within Iran, as we will see below, it is currently being accessed by one of the largest US telecommunications companies.

Iranian BGP-based Censorship

Last week, Iranian state telecom announced a BGP hijack of address space (99.192.226.0/24) hosting numerous pornographic websites.  Continue reading

1 … 2,379 2,380 2,381 2,382 2,383 … 3,818