Connect with us

Gadgets

Microsoft is adding Linux, Android, and firmware protections to Windows

Published

on

Microsoft is moving forward with its promise to extend enterprise security protections to non-Windows platforms with the general release of a Linux version and a preview of one for Android. The software maker is also beefing up Windows security protections to scan for malicious firmware.

The Linux and Android moves—detailed in posts published on Tuesday here, here, and here—follow a move last year to ship antivirus protections to macOS. Microsoft disclosed the firmware feature last week.

Premium pricing

All the new protections are available to users of Microsoft Advanced Threat Protection and require Windows 10 Enterprise Edition. Public pricing from Microsoft is either non-existent or difficult to find, but according to this site, costs range from $30 to $72 per machine per year to enterprise customers.

In February, when the Linux preview became available, Microsoft said it included antivirus alerts and “preventive capabilities.” Using a command line, admins can manage user machines, initiate and configure antivirus scans, monitor network events, and manage various threats.

“We are just at the beginning of our Linux journey and we are not stopping here!” Tuesday’s post announcing the Linux general availability said. “We are committed to continuous expansion of our capabilities for Linux and will be bringing you enhancements in the coming months.”

The Android preview, meanwhile, provides several protections, including:

  • The blocking of phishing sites and other high-risk domains and URLs accessed through SMS/text, WhatsApp, email, browsers, and other apps. The features use the same Microsoft Defender SmartScreen services that are already available for Windows so that decisions to block suspicious sites will apply across all devices on a network.
  • Proactive scanning for malicious or potentially unwanted applications and files that may be downloaded to a mobile device.
  • Measures to block access to network resources when devices show signs of being compromised with malicious apps or malware.
  • Integration to the same Microsoft Defender Security Center that’s already available for Windows, macOS, and Linux.

Last week, Microsoft said it had added firmware protection to the premium Microsoft Defender. The new offering scans Unified Extensible Firmware Interface, which is the successor to the traditional BIOS that most computers used during the boot process to locate and enumerate hardware installed.

The firmware scanner uses a new component added to virus protection already built into Defender. Hacks that infect firmware are particularly pernicious because they survive reinstallations of the operating system and other security measures. And because firmware runs before Windows starts, it has the ability to burrow deep into an infected system. Until now, there have been only limited ways to detect such attacks on large fleets of machines.

It makes sense that the extensions to non-Windows platforms are available only to enterprises and cost extra. I was surprised, however, that Microsoft is charging a premium for the firmware protection and only offering it to enterprises. Plenty of journalists, attorneys, and activists are equally if not more threatened by so-called evil maid attacks, in which a housekeeper or other stranger has the ability to tamper with firmware during brief physical access to a computer.

Microsoft has a strong financial incentive to make Windows secure for all users. Company representatives didn’t respond to an email asking if the firmware scanner will become more widely available.

Continue Reading

Gadgets

Meta highlights NFT, blockchain hopes as it shutters its Novi crypto wallet

Published

on

Meta will shut down its pilot of the Novi digital wallet, one of the last remnants of the company’s beleaguered cryptocurrency push, in September, Bloomberg reported this week.

Novi users in parts of the US and Guatemala will no longer be able to log in starting on September 1.

And as of July 21, they won’t be able to add to the wallets. In fact, Novi’s website urges users to empty their accounts “as soon as possible.” Novi says it will “attempt to transfer your balance to the bank account or debit card you’ve added to Novi” if you still have money in your account after the pilot ends.

The pilot for Novia, originally known as Calibra, launched in October, but Meta was already turning from its crypto dreams, which, at their height, included the company’s own stablecoin, Diem, formerly known as Libra. Novia launched with Paxos Trust Co.’s USDP stablecoin instead. It also had some integration with WhatsApp.

But last year, the head of the project, David Marcus, departed Meta. And in January, we detailed the fall of Meta’s cryptocurrency aspirations, signaled by the company selling off its assets (mostly intellectual property) and refunding investors.

Meta CEO Mark Zuckerberg announced his crypto hopes in 2019, with dreams of using crypto for easy transactions in WhatsApp and Facebook Messenger. But despite big-name investments, US regulators’ concerns about distribution, network policing, and fears of overly concentrated economic power going to member companies derailed Meta’s plans. Ultimately, it became unclear if the Federal Reserve would let the project’s bank issue the stablecoin.

Although Novi will soon be dead, Meta insists that the cryptocurrency wallet’s technologies aren’t. Despite skepticism around non-fungible tokens—pertaining to their necessity, reputation, and value (the largest NFT marketplace, OpenSea, fell 85 percent in the first half of 2022, according to Financial Times)—Meta is leveraging Novi technology for other metaverse-y projects, including building Meta’s capabilities around blockchain and “digital collectibles,” a company representative told Bloomberg.

“You can expect to see more from us in the web3 space because we are very optimistic about the value these technologies can bring to people and businesses in the metaverse,” the representative reportedly said.

Meta is already testing NFTs on Instagram as a purported way for creators to make money. In late June, Zuckerberg said the company will bring that testing to Facebook “soon.”

Continue Reading

Gadgets

YouTube flags horror video as “for kids,” won’t let creator change rating

Published

on

Enlarge / YouTube thinks the dark and creepy “Local58TV” series is for kids.

Google’s wonderful content moderation bots are at it again. After previously doing things like including suicide instructions in a children’s video, and the whole Elsagate problem, YouTube is now flagging a horror video as “for kids.” Worst of all, this is against the creator’s wishes. The video was previously flagged as for ages 18 and up, and YouTube decided it was for kids and won’t let the creator restore its content rating.

The video in question is from horror series Local58TV. The creator, Kirs Straub, checked his account over the weekend to find that his not-for-kids content has been spotted by YouTube’s content moderation AI, and automatically marked for kids.

“For kids” in this context means Google has flagged the video for inclusion in the “YouTube Kids” app, which is a separate interface for YouTube that is supposed to only show a “safe” curated slice of YouTube. The “Kids” flag also means the video is forced to comply with US Children’s Online Privacy Protection Act (COPPA), so comments are turned off.

Local58TV has millions of views across its nine videos and is famous enough to have a Wikipedia page. The channel’s about page describes itself as “ANALOG HORROR AT 476 MHz. Unsettling shorts in the found footage/VHS aesthetic from Kris Straub.” The channel’s most popular video, “Contingency,” is a faux public service announcement from the “US Department for the Preservation of American Dignity.” The message, set to an ultra-creepy rendition of The Star-Spangled Banner, declares that America has lost the war and was forced to surrender. Before the occupiers arrive though, you can “take America with you” by murder/suiciding your family. The video continues with instructions. This is obviously not the type of channel that is for kids!

YouTube, this title does not mean what you think it means.
Enlarge / YouTube, this title does not mean what you think it means.

YouTube doesn’t get the Local58TV vibe though. It automatically flagged one episode, titled “Show For Children” as for children. You can see how an AI bot might get its wires crossed from that title, but it immediately says “Not for Children” in the description, and the creator, Straub, originally set the video’s age rating as “18+” when it was uploaded.

The episode is a black-and-white cartoon where a cute cartoon skeleton wanders around a graveyard looking for a cute cartoon girlfriend skeleton, only to find horrifying, more realistic skeletons and other creatures in the open graves. At the end of the video, seemingly from depression, the cute skeleton lays down in a grave and dies, turning into a realistic skeleton. The cartoon is something an AI bot might not understand, but a human could immediately tell the unsettling video is not kid-friendly. YouTube is certainly not hurting for money having done $28.8 billion in revenue last year, but it does not hire a significant number of human moderators.

YouTube not only flagged a video explicitly marked as “inappropriate for kids” as “made for kids” it also won’t let the creator change it back. The video’s content is now labeled “Made for kids (set by YouTube)” and Straub is forced to file an appeal with YouTube to get the video’s age rating corrected.

Even if you’re using robots for moderation, it doesn’t make a ton of sense for YouTube to be in this position. For every single video upload, YouTube asks if a video is kid-friendly or not. Since YouTube already has this data, it’s not clear why it would ever try to automatically categorize videos, especially by lowering an age rating that was explicitly set as “adults only.” For something as delicate and subjective as whether or not certain content should be viewed by a kid, it seems like Google should be erring on the side of caution.

🎵 One of these things is not like the others! One of these things, doesn't belong! 🎵
Enlarge / 🎵 One of these things is not like the others! One of these things, doesn’t belong! 🎵

At press time, Straub went public with the issue 20 hours ago and it hasn’t been resolved. The “Team YouTube” Twitter account said it was “looking into” the complaint nine hours ago. You can tell the video is still flagged for children due to the disabled comments section and the “Try YouTube Kids!” ad at the bottom. You also only get suggestions for other “kids” content, which, at a glance, does not appear to feature as much death as the usual Local58TV content.

Continue Reading

Gadgets

IDC: “All eyes will be on Apple” as Meta’s VR strategy “isn’t sustainable”

Published

on

Enlarge / The Oculus Quest 2.

A recent media release from market research firm IDC predicts that Meta (the parent company of Facebook) may not be able to compete in the mixed-reality business in the long run if its strategy remains unchanged.

The media release offers a bird’s-eye view of the virtual reality hardware marketplace. In the release, IDC research manager Jitesh Ubrani said that, while “Meta continues to pour dollars into developing the metaverse, [the company’s] strategy of promoting low-cost hardware at the expense of profitability isn’t sustainable in the long run.”

A similar concern was raised by tech industry analyst Ming-Chi Kuo late last month. Kuo predicted that Meta would make moves to scale down investment in virtual reality, creating an opening for Apple and other competitors. He also wrote that Meta’s practice of selling VR headsets at a loss is unsustainable.

Currently, Meta owns 90 percent of the VR headset market, according to the IDC release. In distant second is ByteDance’s Pico, at just 4.5 percent. Overall, VR headset shipments jumped 241.6 percent year over year in the first quarter of 2022. But the industry faced significant supply issues in Q1 2021, contributing to “a favorable comparison” for this year’s Q1.

Like Kuo a couple of weeks ago, IDC research director Ramon Llamas said that “all eyes will be on Apple as it launches its first headset next year.” Apple’s headset is expected to be much more expensive than Meta’s offerings, driving up the average unit price for the product category across the board, and Llamas believes Apple’s offering “will appeal primarily to a small audience of early adopters and Apple fans.”

In other words, don’t expect the first Apple headset to ship vastly more units than Meta’s Oculus Quest 2 right out of the gate. It’s just a first step in a long-term plan to own the mixed-reality market. As several reports over the past couple of years have noted, that plan will ultimately involve low-cost AR glasses and other products that will seek to broaden the user base for mixed-reality hardware.

Apple and Meta are not the only companies working on mass-market mixed-reality hardware products. We reported in April that Amazon posted several job listings soliciting candidates who can help the company build an “advanced” AR/VR product. And in December, we learned from job listings that Google plans to build a new augmented-reality device and operating system.

Continue Reading

Trending