Programming

Bret Taylor Urges Rethink of Software Development as AI Reshapes Industry 111

Software development is entering an "autopilot era" with AI coding assistants, but the industry needs to prepare for full autonomy, argues former Salesforce co-CEO Bret Taylor. Drawing parallels with self-driving cars, he suggests the role of software engineers will evolve from code authors to operators of code-generating machines. Taylor, a board member of OpenAI and who once rewrote Google Maps over a weekend, calls for new programming systems, languages, and verification methods to ensure AI-generated code remains robust and secure. From his post: In the Autonomous Era of software engineering, the role of a software engineer will likely transform from being the author of computer code to being the operator of a code generating machine. What is a computer programming system built natively for that workflow?

If generating code is no longer a limiting factor, what types of programming languages should we build?

If a computer is generating most code, how do we make it easy for a software engineer to verify it does what they intend? What is the role of programming language design (e.g., what Rust did for memory safety)? What is the role of formal verification? What is the role of tests, CI/CD, and development workflows?

Today, a software engineer's primary desktop is their editor. What is the Mission Control for a software engineer in the era of autonomous development?
Hardware

South Korea Mulls Creating 'KSMC' Contract Chipmaker To Compete With TSMC (tomshardware.com) 11

An anonymous reader quotes a report from Tom's Hardware: Although Samsung Foundry is a major chip contract manufacturer, the South Korean government mulls creating a government-funded contract chipmaker tentatively called Korea Semiconductor Manufacturing Company, KSMC, reports The Korea Biz Wire. Industry experts and academics have proposed the initiative.

The Semiconductor Industry Association's Ahn Ki-hyun called for a long-term government investment. Experts project that an investment of KRW 20 trillion ($13.9 billion) in KSMC could result in economic gains of KRW 300 trillion ($208.7 billion) by 2045. However, the big question is whether $13.9 billion is enough to establish a chipmaker. Another concern about publicly funded corporations like KSMC is whether they could develop advanced manufacturing technologies and land enough orders from clients to be profitable. It turns out that in addition to semiconductor makers, Korea needs more fabless software developers.

The proposal was introduced during a seminar hosted by the National Academy of Engineering of Korea (NAEK). The plan aims to address structural weaknesses in the industry, such as an over-reliance on Samsung's advanced nodes under 10nm amid the lack of mature process technologies. Smaller system semiconductor firms struggle to thrive as Korea lacks manufacturing diversity, as seen in Taiwan, where companies like UMC and PSMC that focus on mature and specialty nodes complement TSMC's advanced process technologies.

United Kingdom

Post Office Creates CTO Role To Support 'Extensive and Complex' Plans (computerweekly.com) 10

The UK Post Office has appointed Paul Anastassi as interim CTO amid efforts to replace its controversial Horizon IT system, which led to hundreds of wrongful convictions of subpostmasters due to software errors since 1999.

The appointment, the news of which an anonymous reader shared, comes as the Post Office grapples with its $1.25 billion over-budget New Branch IT project, which was recently paused after being deemed "unachievable" in a government report. The organization is reportedly considering purchasing the Horizon system from Fujitsu while combining it with in-house and commercial software solutions.
Robotics

OpenAI Has Discussed Making a Humanoid Robot, Report Says (theinformation.com) 28

An anonymous reader shares a report: Over the past year, OpenAI has dropped not-so-subtle hints about its revived interest in robotics: investing in startups developing hardware and software for robots such as Figure and Physical Intelligence and rebooting its internal robotics software team, which it had disbanded four years ago.

Now, OpenAI could be taking that interest to the next level. The company has recently considered developing a humanoid robot, according to two people with direct knowledge of the discussions. As a refresher, humanoid robots typically have two arms and two legs, distinguishing them from typical robots in a warehouse or factory that might have a single arm repeatedly performing the same task on an assembly line. Developers of humanoid robots think it will be easier for them to handle tasks in the physical world -- which is tailored to humans -- than it would be to change our physical environments to suit new robots.

Windows

ASUS Christmas Campaign Sparks Malware Panic Among Windows Users 59

ASUS computer owners have been reporting widespread alarm after a Christmas-themed banner suddenly appeared on their Windows 11 screens, accompanied by a suspicious "Christmas.exe" process in Task Manager.

The promotional campaign, first reported by WindowsLatest, was delivered through ASUS' pre-installed Armoury Crate software. It displays a large wreath banner that covers one-third of users' screens. The unbranded holiday display, which can interrupt gaming sessions and occasionally crashes applications, has triggered security concerns among users who initially mistook it for malware.
The Courts

Netflix Sues Broadcom's VMware Over US Virtual Machine Patents (reuters.com) 12

Netflix has sued Broadcom in California federal court, accusing the chipmaker's cloud computing subsidiary VMware of violating its patent rights in virtual machines. From a report: The lawsuit said VMware's cloud software infringes five Netflix patents covering aspects of operating virtual machines. Broadcom and Netflix have been embroiled in a separate patent dispute since 2018 over Netflix's alleged infringement of Broadcom patents related to video streaming technology, with cases in California, Germany and the Netherlands.
Security

Apple Sends Spyware Victims To Nonprofit Security Lab 'Access Now' (techcrunch.com) 14

Since 2021, Apple has been sending threat notifications to certain users, informing them that they may have been individually targeted by mercenary spyware attacks. When victims of spyware reach out to Apple for help, TechCrunch reports, "Apple doesn't tell the targets to get in touch with its own security engineers." Instead, Apple directs them to the nonprofit security lab Access Now, "which runs a digital helpline for people in civil society who suspect they have been targets of government spyware."

While some view this as Apple sidestepping responsibility, cybersecurity experts agree that Apple's approach -- alerting victims, directing them to specialized support, and recommending tools like Lockdown Mode -- has been a game changer in combating mercenary spyware threats. From the report: For people who investigate spyware, Apple sharing spyware notifications with victims represented a turning point. Before the notifications, "We were just like in the dark, not knowing who to check," according to Access Now's legal counsel Natalia Krapiva. "I think it's one of the greatest things that's happened in the sphere of this kind of forensic investigations and hunting of sophisticated spyware," Krapiva told TechCrunch.

Now, when someone or a group of people get a notification from Apple, they are warned that something potentially anomalous is happening with their device, that someone is targeting them, and that they need to get help. And Apple tells them exactly where to get it, according to Scott-Railton, who said Access Now's helpline is the right place to go because "the helpline is able to do good, systematic triage work and support." Krapiva said that the helpline is staffed by more than 30 people, supported by others who work in other departments of the nonprofit. So far in 2024, Krapiva said Access Now received 4,337 tickets through the helpline.

For anyone alerted by a notification, Apple tells those targets and victims of spyware to update their iOS software and all their apps. Apple also suggests the user switches on Lockdown Mode, an opt-in iOS security feature that has stopped spyware attacks in the past by limiting device features that are often exploited to plant spyware. Apple said last year that it is not aware of any successful spyware infection against someone who used Lockdown Mode.

Books

Encyclopedia Britannica Is Now an AI Company 59

An anonymous reader quotes a report from Gizmodo: Once an icon of the 20th century seen as obsolete in the 21st, Encyclopedia Britannica -- now known as just Britannica -- is all in on artificial intelligence, and may soon go public at a valuation of nearly $1 billion, according to the New York Times.

Until 2012 when printing ended, the company's books served as the oldest continuously published, English-language encyclopedias in the world, essentially collecting all the world's knowledge in one place before Google or Wikipedia were a thing. That has helped Britannica pivot into the AI age, where models benefit from access to high-quality, vetted information. More general-purpose models like ChatGPT suffer from hallucinations because they have hoovered up the entire internet, including all the junk and misinformation.

While it still offers an online edition of its encyclopedia, as well as the Merriam-Webster dictionary, Britannica's biggest business today is selling online education software to schools and libraries, the software it hopes to supercharge with AI. That could mean using AI to customize learning plans for individual students. The idea is that students will enjoy learning more when software can help them understand the gaps in their understanding of a topic and stay on it longer. Another education tech company, Brainly, recently announced that answers from its chatbot will link to the exact learning materials (i.e. textbooks) they reference.

Britannica's CEO Jorge Cauz also told the Times about the company's Britannica AI chatbot, which allows users to ask questions about its vast database of encyclopedic knowledge that it collected over two centuries from vetted academics and editors. The company similarly offers chatbot software for customer service use cases. Britannica told the Times it is expecting revenue to double from two years ago, to $100 million.
Facebook

WhatsApp Scores Historic Victory Against NSO Group in Long-Running Spyware Hacking Case (techcrunch.com) 9

A U.S. judge has ruled that Israeli spyware maker NSO Group breached hacking laws by using WhatsApp to infect devices with its Pegasus spyware. From a report: In a historic ruling on Friday, a Northern California federal judge held NSO Group liable for targeting the devices of 1,400 WhatsApp users, violating state and federal hacking laws as well as WhatsApp's terms of service, which prohibit the use of the messaging platform for malicious purposes.

The ruling comes five years after Meta-owned WhatsApp sued NSO Group, alleging the spyware outfit had exploited an audio-calling vulnerability in the messaging platform to install its Pegasus spyware on unsuspecting users' devices. WhatsApp said that more than 100 human rights defenders, journalists and "other members of civil society" were targeted by the malware, along with government officials and diplomats. In her ruling, Judge Phyllis Hamilton said NSO did not dispute that it "must have reverse-engineered and/or decompiled the WhatsApp software" to install its Pegasus spyware on devices, but raised questions about whether it had done so before agreeing to WhatsApp's terms of service.

AI

Software Revenue Lags Despite Tech Giants' $292 Billion AI Spend (indiadispatch.com) 69

Silicon Valley is betting the farm on AI. Data centers are straining power grids. Model training costs are heading toward billions. Yet across the software industry, AI revenue remains theoretical. From a report: Hyperscalers -- combined with Meta and Oracle -- plan to spend $292 billion on AI infrastructure by 2025 -- an 88% increase since 2023. Two-thirds of software companies, however, still report decelerating growth in 2024.

Semiconductor stocks have surged 43% year-to-date on AI expectations, while the software index IGV is up 30%. Microsoft, despite its OpenAI investment, has underperformed the IGV by 19% since ChatGPT's release. Microsoft's AI revenue run rate is 3% of total revenue, according to estimates by investment bank Jefferies. Snowflake expects immaterial AI contribution in fiscal 2025. Salesforce isn't factoring in material contribution from new AI products into FY25 guidance. Adobe's Firefly AI, launched in March 2023, hasn't accelerated revenue.

AI

'Human Vs. Autonomous Car' Race Ends Before It Begins (arstechnica.com) 26

A demonstration "race" between a (human) F1 race car driver Daniil Kvyat and an autonomous vehicle was just staged by the Abu Dhabi Autonomous Racing League.

Describing the league and the "man vs. machine" showdown, Ars Technica writes, "Say goodbye to the human driver and hello to 95 kilograms of computers and a whole suite of sensors." But again, racing is hard, and replacing humans doesn't change that. The people who run and participate in A2RL are aware of this, and while many organizations have made it a sport of overselling AI, A2RL is up-front about the limitations of the current state of the technology. One example of the technology's current shortcomings: The vehicles can't swerve back and forth to warm up the tires. Giovanni Pau, Team Principal of TII Racing, stated during a press briefing regarding the AI system built for racing, "We don't have human intuition. So basically, that is one of the main challenges to drive this type of car. It's impossible today to do a correct grip estimation. A thing my friend Daniil (Kvyat) can do in a nanosecond...."

Technology Innovation Institute (TII) develops the hardware and software stack for all the vehicles. Hardware-wise, the eight teams receive the same technology. When it comes to software, the teams need to build out their own system on TII's software stack to get the vehicles to navigate the tracks. In April, four teams raced on the track in Abu Dhabi. As we've noted before, how the vehicles navigate the tracks and world around them isn't actually AI. It's programmed responses to an environment; these vehicles are not learning on their own. Frankly, most of what is called "AI" in the real world is also not AI.

Vehicles driven by the systems still need years of research to come close to the effectiveness of a human beyond the wheel. Kvyat has been working with A2RL since the beginning. In that time, the former F1 driver has been helping engineers understand how to bring the vehicle closer to their limit. The speed continues to increase as the development progresses. Initially, the vehicles were three to five minutes slower than Kvyat around a lap; now, they are about eight seconds behind. That's a lifetime in a real human-to-human race, but an impressive amount of development for vehicles with 90 kg of computer hardware crammed into the cockpit of a super formula car. Currently, the vehicles are capable of recreating 90-95 percent of the speed of a human driver, according to Pau. Those capabilities are reduced when a human driver is also on the track, particularly for safety reasons....

The "race" was to be held ahead of the season finale of the Super Formula season... The A2RL vehicle took off approximately 22 seconds ahead of Kvyat, but the race ended before the practice lap was completed. Cameras missed the event, but the A2RL car lost traction and ended up tail-first into a wall...

Khurram Hassan, commercial director of A2RL, told Ars that the cold tires on the cold track caused a loss of traction.

AI

OpenAI's Next Big AI Effort GPT-5 is Behind Schedule and Crazy Expensive (msn.com) 120

"From the moment GPT-4 came out in March 2023, OpenAI has been working on GPT-5..." reports the Wall Street Journal. [Alternate URL here.] But "OpenAI's new artificial-intelligence project is behind schedule and running up huge bills. It isn't clear when — or if — it'll work."

"There may not be enough data in the world to make it smart enough." OpenAI's closest partner and largest investor, Microsoft, had expected to see the new model around mid-2024, say people with knowledge of the matter. OpenAI has conducted at least two large training runs, each of which entails months of crunching huge amounts of data, with the goal of making Orion smarter. Each time, new problems arose and the software fell short of the results researchers were hoping for, people close to the project say... [And each one costs around half a billion dollars in computing costs.]

The $157 billion valuation investors gave OpenAI in October is premised in large part on [CEO Sam] Altman's prediction that GPT-5 will represent a "significant leap forward" in all kinds of subjects and tasks.... It's up to company executives to decide whether the model is smart enough to be called GPT-5 based in large part on gut feelings or, as many technologists say, "vibes."

So far, the vibes are off...

OpenAI wants to use its new model to generate high-quality synthetic data for training, according to the article. But OpenAI's researchers also "concluded they needed more diverse, high-quality data," according to the article, since "The public internet didn't have enough, they felt." OpenAI's solution was to create data from scratch. It is hiring people to write fresh software code or solve math problems for Orion to learn from. [And also theoretical physics experts] The workers, some of whom are software engineers and mathematicians, also share explanations for their work with Orion... Having people explain their thinking deepens the value of the newly created data. It's more language for the LLM to absorb; it's also a map for how the model might solve similar problems in the future... The process is painfully slow. GPT-4 was trained on an estimated 13 trillion tokens. A thousand people writing 5,000 words a day would take months to produce a billion tokens.

OpenAI's already-difficult task has been complicated by internal turmoil and near-constant attempts by rivals to poach its top researchers, sometimes by offering them millions of dollars... More than two dozen key executives, researchers and longtime employees have left OpenAI this year, including co-founder and Chief Scientist Ilya Sutskever and Chief Technology Officer Mira Murati. This past Thursday, Alec Radford, a widely admired researcher who served as lead author on several of OpenAI's scientific papers, announced his departure after about eight years at the company...

OpenAI isn't the only company worrying that progress has hit a wall. Across the industry, a debate is raging over whether improvement in AIs is starting to plateau. Sutskever, who recently co-founded a new AI firm called Safe Superintelligence or SSI, declared at a recent AI conference that the age of maximum data is over. "Data is not growing because we have but one internet," he told a crowd of researchers, policy experts and scientists. "You can even go as far as to say that data is the fossil fuel of AI."

And that fuel was starting to run out.

Space

Voyager 1 Signals from Interstellar Space Detected by Amateur Astronomers on 1950s Telescope (camras.nl) 26

"Voyager 1 is currently exploring interstellar space at a distance of 15.5 billion miles (24.9 billion kilometers) away from Earth," writes Gizmodo.

And yet a team of amateur astronomers in the Netherlands was able to receive Voyager's signals on a 1950s-era telescope... The astronomers used orbital predictions of Voyager 1's position in space to correct for the Doppler shift in frequency caused by the motion of Earth, as well as the motion of the spacecraft through space... [The signal] was found live, and further analysis later confirmed that it corresponded to the position of Voyager 1.
"I did the experiment," mathematician/scientific software engineer Tammo Jan Dijkema told Slashdot in an email, as "one of a crew of four." He works at ASTRON (the Netherlands Institute for Radio Astronomy) while volunteering at the Dwingeloo radio telescope, and wants to clarify any suggestion in Gizmodo's article "that we received signals at S-band, which is not true. We received the 'normal' Voyager-1 signal at 8.4 GHz. See our blog post... The Dwingeloo reception was not related to Voyager's temporary glitch at all."

And Scientific American shares an interesting perspective on the Voyager probes: we everyday Earthlings may simplistically think of the sun as a compact distant ball of light, in part because our plush atmosphere protects us from our star's worst hazards. But in reality the sun is a roiling mass of plasma and magnetism radiating itself across billions of miles in the form of the solar wind, which is a constant stream of charged plasma that flows off our star. The sun's magnetic field travels with the solar wind and also influences the space between planets. The heliosphere grows and shrinks in response to changes in the sun's activity levels over the course of an 11-year cycle... [Jamie Rankin, a space physicist at Princeton University and deputy project scientist of the Voyager mission] notes, astronomers of all stripes are trapped within that chaotic background in ways that may or may not affect their data and interpretations. "Every one of our measurements to date, until the Voyagers crossed the heliopause, has been filtered through all the different layers of the sun," Rankin says.

On their trek to interstellar space, the Voyagers had to cross a set of boundaries: first a termination shock some seven billion or eight billion miles away from the sun, where the solar wind abruptly begins to slow, then the heliopause, where the outward pressure from the solar wind is equaled by the inward pressure of the interstellar medium. Between these two stark borders lies the heliosheath, a region where solar material continues to slow and even reverse direction. The trek through these boundaries took Voyager 1, the faster of the twin probes, nearly eight years; such is the vastness of the scale at play.

Beyond the heliopause is interstellar space, which Voyager 1 entered in 2012 and Voyager 2 reached in 2018. It's a very different environment from the one inside our heliosphere — quieter but hardly quiescent. "It's a relic of the environment the solar system was born out of," Rankin says of the interstellar medium. Within it are energetic atomic fragments called galactic cosmic rays, as well as dust expelled by dying stars across the universe's eons, among other ingredient.

Earlier this month Wired noted " The secret of the Voyagers lies in their atomic hearts: both are equipped with three radioisotope thermoelectric generators, or RTGs — small power generators that can produce power directly on board. Each RTG contains 24 plutonium-238 oxide spheres with a total mass of 4.5 kilograms..." But as time passes, the plutonium on board is depleted, and so the RTGs produce less and less energy. The Voyagers are therefore slowly dying. Nuclear batteries have a maximum lifespan of 60 years. In order to conserve the probes' remaining energy, the mission team is gradually shutting down the various instruments on the probes that are still active...

Four active instruments remain, including a magnetometer as well as other instruments used to study the galactic environment, with its cosmic rays and interstellar magnetic field. But these are in their last years. In the next decade — it's hard to say exactly when — the batteries of both probes will be drained forever.

Programming

Microsoft Integrates a Free Version of Its 'Copilot' Coding AI Into GitHub, VS Code (techcrunch.com) 32

An anonymous reader shared this report from TechCrunch: Microsoft-owned GitHub announced on Wednesday a free version of its popular Copilot code completion/AI pair programming tool, which will also now ship by default with Microsoft's popular VS Code editor. Until now, most developers had to pay a monthly fee, starting at $10 per month, with only verified students, teachers, and open source maintainers getting free access...

There are some limitations to the free version, which is geared toward occasional users, not major work on a big project. Developers on the free plan will get access to 2,000 code completions per month, for example, and as a GitHub spokesperson told me, each Copilot code suggestion will count against this limit — not just accepted suggestions. And while GitHub recently added the ability to switch between different foundation models, users on the free plan are limited to Anthropic's Claude 3.5 Sonnet and OpenAI's GPT-4o. (The paid plans also include Google's Gemini 1.5 Pro and OpenAI's o1-preview and -mini.) For Copilot Chat, the number of chat messages is limited to 50, but otherwise, there aren't any major limitations to the free service. Developers still get access to all Copilot Extensions and skills.

The free Copilot SKU will work in a number of editors, including VS Code, Visual Studio, and JetBrains, as well as on GitHub.com.

GitHub's announcement ends with the words "Happy coding!" and calls the service "GitHub Copilot Free." But TechCrunch points out there's already competition from services like Amazon Q Developer, as well as from companies like Tabnine and Qodo (previously known as Codium) — and they typically offer a free tier. But in addition, "With Copilot Free, we are returning to our freemium roots," GitHub CEO Thomas Dohmke told TechCrunch, as well as "laying the groundwork for something far greater: AI represents our best path to enabling a GitHub with one billion developers.

"There should be no barrier to entry for experiencing the joy of creating software. Now six years after being acquired by Microsoft, it indeed appears GitHub is still GitHub — and we are doing our thing."

Or, as GitHub CEO Satya Nadella said in a video posted on LinkedIn, "The joy of coding is back! And we are looking forward to bringing the same experience to so many more people around the world."
Open Source

'Open Source Software Funding Report' Finds 86% of Corporate Contributions are Employees' Time (linuxfoundation.org) 15

The Linux Foundation partnered with GitHub and Harvard's Laboratory for Innovation Science to research organization-driven investments in open source software — the how and the why — surveying over 500 organizations around the world.

So what are the highlights from the published report? The median responding organization invests $520,600 (2023 USD) of annual value to OSS.

Responding organizations annually invest $1.7 billion in open source, which can be extrapolated to estimate that approximately $7.7 billion is invested across the entire open source ecosystem annually. 86% of investment is in the form of contribution labor by employees and contractors working for the funding organization, with the remaining 14% being direct financial contributions.

But the ultimate goal of the research was ideas "to improve monitoring and investing in open source" (to "create a more sustainable and impactful open source economy...") In this research, we discovered a few key obstacles that make this kind of data capture challenging... [O]rganizations have blind spots when it comes to the specifics of their contributions. Many respondents knew where they contribute, but only a portion of those could answer how many labor hours went into their OSS contributions or the percentage of budget that went to OSS. Second, the decentralized nature of organizational contributions, without explicit policies or centralized groups that encourage and organize this effort, make reporting even more challenging...

[W]e recommend that policies and practices are put in place to encourage employees to self-report their contributions, and do so using their employee email addresses to leave fingerprints on their work. We also suggest that open source work is consolidated under a single banner, such as an Open Source Program Office (OSPO). Finally, we suggest incorporating contribution monitoring into the organization's pipeline. We developed a toolkit to help improve data capture and monitoring.

AI

'Yes, I am a Human': Bot Detection Is No Longer Working 91

The rise of AI has rendered traditional CAPTCHA tests increasingly ineffective, as bots can now "[solve] these puzzles in milliseconds using artificial intelligence (AI)," reports The Conversation. "How ironic. The tools designed to prove we're human are now obstructing us more than the machines they're supposed to be keeping at bay." The report warns that the imminent arrival of AI agents -- software programs designed to autonomously interact with websites on our behalf -- will further complicate matters. From the report: Developers are continually coming up with new ways to verify humans. Some systems, like Google's ReCaptcha v3 (introduced in 2018), don't ask you to solve puzzles anymore. Instead, they watch how you interact with a website. Do you move your cursor naturally? Do you type like a person? Humans have subtle, imperfect behaviors that bots still struggle to mimic. Not everyone likes ReCaptcha v3 because it raises privacy issues -- plus the web company needs to assess user scores to determine who is a bot, and the bots can beat the system anyway. There are alternatives that use similar logic, such as "slider" puzzles that ask users to move jigsaw pieces around, but these too can be overcome.

Some websites are now turning to biometrics to verify humans, such as fingerprint scans or voice recognition, while face ID is also a possibility. Biometrics are harder for bots to fake, but they come with their own problems -- privacy concerns, expensive tech and limited access for some users, say because they can't afford the relevant smartphone or can't speak because of a disability. The imminent arrival of AI agents will add another layer of complexity. It will mean we increasingly want bots to visit sites and do things on our behalf, so web companies will need to start distinguishing between "good" bots and "bad" bots. This area still needs a lot more consideration, but digital authentication certificates are proposed as one possible solution.

In sum, Captcha is no longer the simple, reliable tool it once was. AI has forced us to rethink how we verify people online, and it's only going to get more challenging as these systems get smarter. Whatever becomes the next technological standard, it's going to have to be easy to use for humans, but one step ahead of the bad actors. So the next time you find yourself clicking on blurry traffic lights and getting infuriated, remember you're part of a bigger fight. The future of proving humanity is still being written, and the bots won't be giving up any time soon.
Microsoft

Microsoft Won't Let Customers Opt Out of Passkey Push (theregister.com) 203

Microsoft has lauded the success of its efforts to convince customers to use passkeys instead of passwords, without actually quantifying that success. From a report: The software megalith credits passkey adoption to its enrolment user experience, or UX, which owes its unspecified uptake to unavoidable passkey solicitations -- sometimes referred to as "nudges."

"We're implementing logic that determines how often to show a nudge so as not to overwhelm users, but we don't let them permanently opt out of passkey invitations," explained Sangeeta Ranjit, group product manager, and Scott Bingham, principal product manager, in a blog post. The corporation's onboarding strategy seems to suit its corporate address: One Microsoft Way.

Ranjit and Bingham describe that strategy in a post titled "Convincing a billion users to love passkeys: UX design insights from Microsoft to boost adoption and security." But they don't disclose how many customers love passkeys enough to actually use them.

Security

Hackers Can Jailbreak Digital License Plates To Make Others Pay Their Tolls, Tickets (wired.com) 72

Longtime Slashdot reader sinij shares a report from Wired with the caption: "This story will be an on-going payday for traffic ticket lawyers. I am ordering one now." From the report: Digital license plates, already legal to buy in a growing number of states and to drive with nationwide, offer a few perks over their sheet metal predecessors. You can change their display on the fly to frame your plate number with novelty messages, for instance, or to flag that your car has been stolen. Now one security researcher has shown how they can also be hacked to enable a less benign feature: changing a car's license plate number at will to avoid traffic tickets and tolls -- or even pin them on someone else.

Josep Rodriguez, a researcher at security firm IOActive, has revealed a technique to "jailbreak" digital license plates sold by Reviver, the leading vendor of those plates in the US with 65,000 plates already sold. By removing a sticker on the back of the plate and attaching a cable to its internal connectors, he's able to rewrite a Reviver plate's firmware in a matter of minutes. Then, with that custom firmware installed, the jailbroken license plate can receive commands via Bluetooth from a smartphone app to instantly change its display to show any characters or image. That susceptibility to jailbreaking, Rodriguez points out, could let drivers with the license plates evade any system that depends on license plate numbers for enforcement or surveillance, from tolls to speeding and parking tickets to automatic license plate readers that police use to track criminal suspects. "You can put whatever you want on the screen, which users are not supposed to be able to do," says Rodriguez. "Imagine you are going through a speed camera or if you are a criminal and you don't want to get caught."

Worse still, Rodriguez points out that a jailbroken license plate can be changed not just to an arbitrary number but also to the number of another vehicle -- whose driver would then receive the malicious user's tickets and toll bills. "If you can change the license plate number whenever you want, you can cause some real problems," Rodriguez says. All traffic-related mischief aside, Rodriguez also notes that jailbreaking the plates could also allow drivers to use the plates' features without paying Reviver's $29.99 monthly subscription fee. Because the vulnerability that allowed him to rewrite the plates' firmware exists at the hardware level -- in Reviver's chips themselves -- Rodriguez says there's no way for Reviver to patch the issue with a mere software update. Instead, it would have to replace those chips in each display. That means the company's license plates are very likely to remain vulnerable despite Rodriguez's warning -- a fact, Rodriguez says, that transport policymakers and law enforcement should be aware of as digital license plates roll out across the country. "It's a big problem because now you have thousands of licensed plates with this issue, and you would need to change the hardware to fix it," he says.

Iphone

Apple Reportedly Won't Launch an iPhone Subscription Service (theverge.com) 9

According to Bloomberg's Mark Gurman, Apple is no longer developing a hardware subscription service for iPhones that would let subscribers upgrade devices every year. Gurman first reported Apple's work on the service in 2022, noting it was delayed due to "software bugs and regulatory concerns." The Verge reports: While the hardware subscription service apparently won't see the light of day, Apple offers installment plans you can use to pay for an iPhone over time. The iPhone Upgrade Program spreads the payments of a loan for a new iPhone (and AppleCare Plus) over 24 months, and you can upgrade to a new phone after you pay the equivalent of 12 months. If you have an Apple Card, you can also pay for a new iPhone (and other Apple products) using Apple Card Monthly Installments.
Businesses

Salesforce Will Hire 2,000 People To Sell AI Products (cnbc.com) 19

An anonymous reader quotes a report from CNBC: Salesforce will hire 2,000 people to sell artificial intelligence software to clients, CEO Marc Benioff said on Tuesday, double the number the company indicated it was planning to add a month ago. The cloud software company, which targets sales reps, marketers and customer service agents, is among the many technology companies hoping to boost revenue with generative AI features. "We're adding another couple of thousand salespeople to help sell these products," Benioff said at a company event in San Francisco. "We already had 9,000 referrals for the 2,000 positions that we've opened up. It's amazing."

Last month, Benioff told Bloomberg that it planned to hire 1,000 salespeople focusing on AI. On Tuesday, Salesforce said the second generation of its Agentforce technology creating and operating AI agents will become available to customers in February 2025. Agentforce will be able to tackle sophisticated questions in Salesforce's Slack communications app, based on all available data. [...] Benioff said Salesforce's homepage now features an experimental AI agent that can respond to user queries about the company's products. Salesforce customers in need of assistance can visit a chat-based help page that conducts 32,000 conversations a week. About 5,000 are getting escalated to humans as a result of current AI capabilities, down from 10,000 before, Benioff said.

Slashdot Top Deals