×
Security

A Hacker is Wiping Git Repositories and Asking For a Ransom (zdnet.com) 213

An anonymous reader writes: Hundreds of developers have had had Git source code repositories wiped and replaced with a ransom demand. The hacker removes all source code and recent commits from vitcims' Git repositories, and leaves a ransom note behind that asks for a payment of 0.1 Bitcoin (~$570). The hacker claims all source code has been downloaded and stored on one of their servers, and gives the victim ten days to pay the ransom; otherwise, they'll make the code public.

Hundreds of users have had code repositories wiped and replaced with ransom notes. The coordinated attack has hit Git repositories stored across multiple platforms, such as GitHub, GitLab,and Bitbucket. Some users who fell victim to this hacker have admitted to using weak passwords for their GitHub, GitLab, and Bitbucket accounts, and forgetting to remove access tokens for old apps they haven't used for months --both of which are very common ways in which online accounts usually get compromised. Several users also tried to pin the issue on the hacker using an exploit in SourceTree, a Git GUI app for Mac and Windows made by Atlassian; however, there is no evidence to support this theory, for the time being.

Intel

Apple's Tim Cook and Luca Maestri on Intel (daringfireball.net) 174

Tim Cook and Luca Maestri's remarks on Apple's quarterly analyst call earlier this week: CEO Tim Cook: "For our Mac business overall, we faced some processor constraints in the March quarter, leading to a 5 percent revenue decline compared to last year. But we believe that our Mac revenue would have been up compared to last year without those constraints, and don't believe this challenge will have a significant impact on our Q3 results."

CFO Luca Maestri: "Next I'd like to talk about the Mac. Revenue was 5.5 billion compared to 5.8 billion a year ago, with the decline driven primarily by processor constraints on certain popular models."
Apple commentator John Gruber adds, "I asked an Apple source last fall why it took so long for Apple to release the new MacBook Air. Their one-word answer: "Intel." One of the big questions for next month's WWDC is whether this is the year Apple announces Macs with Apple's own ARM processors (and graphics?)."
Software

Apple Says Its Photo Editing Suite Aperture Won't Run in Future macOS Versions (macrumors.com) 268

In a new support document, Apple has indicated that its legacy photo editing suite Aperture will not run in future versions of macOS after macOS Mojave. From a report: The support document provides users with steps to migrate Aperture libraries to Apple's newer Photos app for Mac or Adobe Lightroom Classic. Apple ceased development of Aperture in June 2014 and removed the software from the Mac App Store in April 2015 after the launch of the Photos app for Mac. However, the application continues to function on macOS Mojave for users who still have it installed, albeit with some performance limitations.
Desktops (Apple)

Can You Build Your Own Mac? (vice.com) 315

"If you're sick of MacBooks but love MacOS, be brave and convert a new laptop into a Hackintosh with our exhaustive guide," writes Motherboard, in an article shared by eatmorekix: Perhaps it's the fact that Apple solders on all of its main parts on its laptops. Perhaps it's the inability for users to repair or upgrade their own machines. Maybe it's the keyboard. For whatever reason, laptops are looking mighty attractive for Hackintoshing these days, despite the knotty qualms some people have with it...

As frustrated by the keyboard and the price as by the fact that nothing was upgradeable on the current generation of MacBook Pros, I went on this journey myself a year ago -- and made it out on the other side much more knowledgeable about why MacOS is a great, quite flexible operating system, often (and unfortunately) placed in a not-so-perfect machine.

It's a long read, but it ends with the author saying he "gained a great appreciation for the process" and ended up with "a fairly stable machine that can handle much of what Apple's own offerings can -- without the incredibly high price to boot."

Despite the (many) technical challenges, "enough of the things that make MacOS worth installing work, and you can make a good weekend project out of this and get a good machine in the end -- one with better specs and more upgradability than many of Apple's own products."
Chrome

Chrome 74 Arrives With Less Motion Sickness, New JavaScript Features (venturebeat.com) 60

An anonymous reader quotes a report from VentureBeat: Google today launched Chrome 74 for Windows, Mac, Linux, Android, and iOS. The release includes support for a reduced motion media query, private class fields, feature policy improvements, and more developer features. You can update to the latest version now using Chrome's built-in updater or download it directly from google.com/chrome.

Motion sickness in the browser is a real thing. Android provides an accessibility option to reduce motion whenever possible, as shown above in the âoeremove animationsâ setting. Chrome is now taking that a step further so websites can limit motion sickness when viewing parallax scrolling, zooming, and other motion effects. Chrome 74 introduces prefers-reduced-motion (part of Media Queries Level 5) that allows websites to honor when an operating system is set to limit motion effects. This might not seem like a big deal today, but it could be very useful if websites start abusing motion effects.
Check out the full changelog for more information on this release.
Portables (Apple)

Apple is Working To Speed Up Repairs of Its Bad MacBook Keyboards (theverge.com) 64

Apple is now conducting repairs of MacBook, MacBook Air, and MacBook Pro keyboards on-site at its stores, and it's promising a next-day turnaround for pickup in many cases. From a report: The company previously sent machines out to its repair depot, but it's now telling its Genius Bar employees to handle "most" keyboard-related repairs at the store "until further notice." The company wrote in a service memo that "additional service parts have been shipped to stores to support the increased volume." Apple's attempt to expedite the keyboard repair process is just the latest development in the ongoing saga of the much-maligned butterfly keyboards that are found on all modern Mac laptops. The keys are vulnerable to sudden failure and unpredictable behavior if dust or outside debris makes its way into the mechanism.
Privacy

Corporate Surveillance: When Employers Collect Data on Their Workers (cnbc.com) 54

An anonymous reader quotes CNBC: The emergence of sensor and other technologies that let businesses track, listen to and even watch employees while on company time is raising concern about corporate levels of surveillance... Earlier this year, Amazon received a patent for an ultrasonic bracelet that can detect a warehouse worker's location and monitor their interaction with inventory bins by using ultrasonic sound pulses. The system can track when and where workers put in or remove items from the bins. An Amazon spokesperson said the company has "no plans to introduce this technology" but that, if implemented in the future, could free up associates' hands, which now hold scanners to check and fulfill orders.

Walmart last year patented a system that lets the retail giant listen in on workers and customers. The system can track employee "performance metrics" and ensure that employees are performing their jobs efficiently and correctly by listening for sounds such as rustling of bags or beeps of scanners at the checkout line and can determine the number of items placed in bags and number of bags. Sensors can also capture sounds from guests talking while in line and determine whether employees are greeting guests. Walmart spokesman Kory Lundberg said the company doesn't have any immediate plans to implement the system.

Logistics company UPS has been using sensors in their delivery trucks to track usage to make sure drivers are wearing seat belts and maintenance is up to date.

Companies are also starting to analyze digital data, such as emails and calendar info, in the hopes of squeezing more productivity out of their workers. Microsoft's Workplace Analytics lets employers monitor data such as time spent on email, meeting time or time spent working after hours. Several enterprises, including Freddie Mac and CBRE, have tested the system.

A senior staff attorney for the EFF argues that new consumer privacy laws may not apply to employees. The article also cites a recent survey by Accenture in which 62% of executives "said their companies are using new technologies to collect data on people -- from the quality of work to safety and well-being" -- even though "fewer than a third said they feel confident they are using the data responsibly."

Yet the leader of Accenture's talent and organization practice argues that workforce data "could boost revenue by 6.4%. This has encouraged workers to be open to responsible use of data, but they want to know that they will get benefits and return on their time."
IOS

iOS 13 To Feature Dark Mode and Interface Updates, Report Says (9to5mac.com) 97

9to5Mac has learned of several new features expected to be included in iOS 13. From the report: Dark Mode: There will be a system-wide Dark Mode that can be enabled in Settings, including a high contrast version, similar to what's already available on macOS. Speaking of macOS, iPad apps that run on the Mac using Marzipan will finally take advantage of the Dark Mode support on both systems.
Multitasking: There are many changes coming to iPad with iOS 13, including the ability for apps to have multiple windows. Each window will also be able to contain sheets that are initially attached to a portion of the screen, but can be detached with a drag gesture, becoming a card that can be moved around freely, similar to what an open-source project called "PanelKit" could do. These cards can also be stacked on top of each other, and use a depth effect to indicate which cards are on top and which are on the bottom. Cards can be flung away to dismiss them.
Undo gesture: With iOS 13, Apple is introducing a new standard undo gesture for text input on the iPad. The gesture starts as a three-finger tap on the keyboard area, sliding left and right allows the user to undo and redo actions interactively.
Safari improvements: Safari on iOS 13 for the iPad will automatically ask for a desktop version of websites when necessary, preventing a common issue where websites will render their iPhone version even when running on an iPad with a big screen. YouTube is notorious for this behavior, forcing users to rely on a 'Request Desktop Site' button.
Font management: Font management is getting a major upgrade on iOS 13. It will not be necessary to install a profile to get new fonts into the system anymore. Instead there will be a new font management panel in Settings. A new standard font picker component will be available for developers and the system will notify the user when they open a document that has missing fonts.
Smarter Mail: The upgraded Mail app will be able to organize messages into categories such as marketing, purchases, travel, "not important" and more, with the categories being searchable. Users will also be able to add messages to a "read later" queue similar to third-party email apps. Improved multiple item selection: The focus on productivity on iOS continues with the inclusion of new gestures to allow for the selection of multiple items in table views and collection views, which make up for most of the user interfaces found in apps that list large amounts of data. Users will be able to drag with multiple fingers on a list or collection of items to draw a selection, similar to clicking and dragging in Finder on the Mac.
New Volume HUD and other changes: Other features to come with iOS 13 include a redesigned Reminders app, which is also coming to the Mac, a new volume HUD, better "Hey Siri" rejection for common mistaken noises such as laughter and crying babies, better multilingual support for keyboards and dictation, and expanded in-app printing controls.
Apple is expected to officially unveil the next major iPhone and iPad OS at its annual Worldwide Developers Conference on June 3rd.
Music

Apple Will Likely Replace iTunes on macOS With Standalone Music, Podcasts, and TV Apps in Next Major Update (9to5mac.com) 51

Developer and blogger Guilherme Rambo, writing for 9to5Mac: Fellow developer Steve Troughton-Smith recently expressed confidence about some evidence found indicating that Apple is working on new Music, Podcasts, and perhaps Books apps for macOS, to join the new TV app. I've been able to independently confirm that this is true. On top of that, I've been able to confirm with sources familiar with the development of the next major version of macOS -- likely 10.15 -- that the system will include standalone Music, Podcasts, and TV apps, but it will also include a major redesign of the Books app.

The new Books app will have a sidebar similar to the News app on the Mac, it will also feature a narrower title bar with different tabs for the Library, Book Store, and Audiobook Store. On the library tab, the sidebar will list the user's Books, Audiobooks, PDFs and other collections, including custom ones. The new Music, Podcasts, and TV apps will be made using Marzipan, Apple's new technology designed to facilitate the porting of iPad apps to the Mac without too many code changes.
Further reading: Steven Troughton-Smith Thinks iTunes Breakup is Nigh (DaringFireball).
Desktops (Apple)

Apple Providing Free Data Migration With a Mac Purchase or Repair (macrumors.com) 68

Apple is now offering data migration services for free when customers purchase a new Mac or need to have a Mac replaced for repair reasons. Prior to this month, data migration was priced at $99. From a report: Beginning April 2, there will be no cost for Data Migrations with the purchase of a new Mac or Data Transfers with a repair. Data migration was included as a feature in Apple's One to One program, which was shut down in 2015. One to One allowed customers to pay $99 when purchasing a new Mac to get a year's worth of instruction and help. When Apple ended One to One, data migration was still available as a one-time $99 service.
Desktops (Apple)

BBEdit Returns To the Mac App Store (barebones.com) 22

Bare Bones Software this week announced the return of BBEdit, a popular text, code, and markup editor, to the Mac App Store after a nearly five year hiatus. Bare Bones Software: When the Mac App Store debuted in 2011, BBEdit was one of its first products available for sale. However, due to technical and business constraints we encountered in the store, we decided to withdraw BBEdit from the Mac App Store in 2014. Following BBEdit's exit from the Mac App Store, we had many conversations with our customers, and with Apple, regarding the issues that we had encountered with the store. In the spring of 2018, Bare Bones and Apple announced that, subsequent to the release of macOS Mojave (10.14) and the accompanying refresh of the Mac App Store, BBEdit would be returning to the store.

This was made possible by changes to the OS itself which allow Mac App Store versions of BBEdit to function to their fullest extent while complying with Mac App Store rules; as well as changes to the Mac App Store business mechanics which make it possible for us to distribute our software through the Mac App Store as part of a sustainable business model.
A limited features version of BBEdit is free to download and use, while the suite with all the features is priced at $3.99 a month or $39.99 a year. BBEdit remains available on a perpetual license basis for $49.99 via Bare Bones Software's online store and at participating resellers.

Further reading: The Old Guard of Mac Indy Apps Has Thrived For More Than 25 Years.
Microsoft

Microsoft and Canonical Launch Visual Studio Code Snap For Linux (betanews.com) 61

Following the release of Visual Studio 2019 for Windows and Mac platforms, Microsoft today is releasing a snap version of Visual Studio Code. A report adds: No, the source-code editor is not the Windows-maker's first snap -- it also released one for Skype, for instance. "As of today, Visual Studio Code is available for Linux as a snap, providing seamless auto-updates for its users. Visual Studio Code, a free, lightweight code editor, has redefined editors for building modern web and cloud applications, with built-in support for debugging, task running, and version control for a variety of languages and frameworks," says Canonical. Joao Moreno, Software Development Engineer, Microsoft Visual Studio Code offers the following statement: "The automatic update functionality of snaps is a major benefit. It is clear there is a thriving community around snaps and that it is moving forward at great pace. The backing of Canonical ensures our confidence in its ongoing development and long-term future."
Microsoft

Microsoft Launches Visual Studio 2019 For Windows and Mac (venturebeat.com) 93

An anonymous reader writes: Microsoft today announced that Visual Studio 2019 for Windows and Mac has hit general availability — you can download it now from visualstudio.microsoft.com/downloads. Visual Studio 2019 includes AI-assisted code completion with Visual Studio IntelliCode. Separately, real-time collaboration tool Visual Studio Live Share has also hit general availability, and is now included with Visual Studio 2019.
Microsoft

Microsoft's Collaboration On Google's Chromium Brings a New Feature To Chrome (mspoweruser.com) 95

Remember when Microsoft announced they'd be switching to Google's open source Chromium browser for developing their own Edge browser? At the time Google announced "We look forward to working with Microsoft and the web standards community to advance the open web, support user choice, and deliver great browsing experiences."

Now MSPoweruser reports Microsoft has indeed started collaborating on Chromium -- making suggestions like caret browsing and a native high-contrast mode -- and at least one of Microsoft's suggestions is already coming to Chrome. it looks like there is one feature that Chromium approved which will be making its way to Chrome soon. According to a new bug (via Techdows) filing on Chromium, Google is working on bringing text suggestions for hardware keyboard to Chrome soon. The feature will allow users to get suggestions as they type which is currently available on Windows 10 and on Microsoft Edge.

Google has just started working on the feature and has set the priority to 2 which suggests that the feature should be available sooner than later.

Portables (Apple)

Apple Still Hasn't Fixed Its MacBook Keyboard Problem (wsj.com) 125

Joanna Stern, writing for the Wall Street Journal [the link may be paywalled]: Why is the breaking of my MacBook Air keyboard so insanely maddening? Let's take a trip down Memory Lane.
April 2015: Apple releases the all-new MacBook with a "butterfly" keyboard. In order to achieve extreme thinness, the keys are much flatter than older generations but the butterfly mechanism underneath, for which the keyboard is named, aims to replicate the bounce of a more traditional keyboard.
October 2016: The MacBook Pro arrives with a second-generation butterfly keyboard. A few months later, some begin to report that letters or characters don't appear, that keys get stuck or that letters unexpectedly repeat.
June 2018: Apple launches a keyboard repair program for what the company says is a "small percentage" of MacBook and MacBook Pro keyboards impacted.
July 2018: Apple releases a new high-end MacBook Pro with the third-generation of the keyboard that's said to fix the issues.
October 2018: Apple's new MacBook Air also has the third-generation keyboard. I recommend it, and even get one for myself.

Which brings us to the grand year 2019 and my MacBook Air's faulty E and R keys. Others have had problems with Apple's latest laptops, too. A proposed nationwide class-action suit alleges that Apple has been aware of the defective nature of these keyboards since 2015 yet sold affected laptops without disclosing the problem. "We are aware that a small number of users are having issues with their third-generation butterfly keyboard and for that we are sorry," an Apple spokesman said in a statement. "The vast majority of Mac notebook customers are having a positive experience with the new keyboard." If you have a problem, contact Apple customer service, he added.
John Gruber, a long time Apple columnist: I consider these keyboards the worst products in Apple history. MacBooks should have the best keyboards in the industry; instead they're the worst. They're doing lasting harm to the reputation of the MacBook brand.
Businesses

McDonald's Bites on Big Data With $300 Million Acquisition (wired.com) 67

An anonymous reader shares a report: Mention McDonald's to someone today, and they're more likely to think about Big Mac than Big Data. But that could soon change: The fast-food giant has embraced machine learning, in a fittingly super-sized way. McDonald's is set to announce that it has reached an agreement to acquire Dynamic Yield, a startup based in Tel Aviv that provides retailers with algorithmically driven "decision logic" technology. When you add an item to an online shopping cart, it's the tech that nudges you about what other customers bought as well. Dynamic Yield reportedly had been recently valued in the hundreds of millions of dollars; people familiar with the details of the McDonald's offer put it at over $300 million. That would make it the company's largest purchase since it acquired Boston Market in 1999.
Desktops (Apple)

Apple Arcade Is a New Game Subscription Service For iOS, Mac, and Apple TV (theverge.com) 85

Apple has unveiled a few different subscription services today at its "show time" event, including a new Apple Arcade game subscription service for titles that can be installed from the App Store. The company is aiming to curate some of the 300,000 games currently available from the App Store into this new ad-free subscription service. "There will be 100 new and exclusive games available on Apple Arcade, which will launch on the iPhone, iPad, Mac, and Apple TV," reports The Verge. From the report: These games won't be available on any other mobile platform or any subscription service other than Apple Arcade. Games will be downloaded and played straight from the App Store, and subscribers will be able to try games whenever they want and resume them across devices. All of the game features, content, and future updates will be included, and there will be no ads shown within the games.

SimCity creator Will Wright is also making a game for the service. Apple is promising games from Annapurna Interactive, Bossa Studios, Cartoon Network, Finji, Giant Squid, Klei Entertainment, Konami, Lego, Mistwalker Corporation, SEGA, Snowman, ustwo games, and more. Apple isn't just curating the games for Apple Arcade; it's actually planning to contribute to the development costs of creating them. Apple might not have announced its own game studio today, but it's certainly a big step toward that. Apple Arcade is launching this fall in more than 150 countries, but Apple is not yet revealing pricing for this subscription service. Apple does say that "access for up to six family members," will be available, suggesting you'll be able to share the subscription.
While the full list of games isn't available yet, some of the titles revealed on Apple Arcade's website include: LEGO Brawls, HitchHiker, Kings of the Castle, Where Cards Fall, and Frogger in Toy Town. If you're a game developer, you can sign up for more information about the service here.
Privacy

Hackers Hijacked ASUS Software Updates To Install Backdoors on Thousands of Computers (vice.com) 114

ASUS is believed to have pushed malware to hundreds of thousands of customers through its trusted automatic software update tool after attackers compromised the company's server and used it to push the malware to machines. From a report: Researchers at cybersecurity firm Kaspersky Lab say that ASUS, one of the world's largest computer makers, was used to unwittingly to install a malicious backdoor on thousands of its customers' computers last year after attackers compromised a server for the company's live software update tool. The malicious file was signed with legitimate ASUS digital certificates to make it appear to be an authentic software update from the company, Kaspersky Lab says. ASUS, a multi-billion dollar computer hardware company based in Taiwan that manufactures desktop computers, laptops, mobile phones, smart home systems, and other electronics, was pushing the backdoor to customers for at least five months last year before it was discovered, according to new research from the Moscow-based security firm.

The researchers estimate half a million Windows machines received the malicious backdoor through the ASUS update server, although the attackers appear to have been targeting only about 600 of those systems. The malware searched for targeted systems through their unique MAC addresses. Once on a system, if it found one of these targeted addresses, the malware reached out to a command-and-control server the attackers operated, which then installed additional malware on those machines. Kaspersky Lab said it uncovered the attack in January after adding a new supply-chain detection technology to its scanning tool to catch anomalous code fragments hidden in legitimate code or catch code that is hijacking normal operations on a machine. The company plans to release a full technical paper and presentation about the ASUS attack, which it has dubbed ShadowHammer, next month at its Security Analyst Summit in Singapore.

Microsoft

Microsoft Ships Antivirus For macOS as Windows Defender Becomes Microsoft Defender (arstechnica.com) 58

Microsoft is bringing its Windows Defender anti-malware application to macOS -- and more platforms in the future -- as it expands the reach of its Defender Advanced Threat Protection (ATP) platform. From a report: To reflect the new cross-platform nature, the suite is also being renamed to Microsoft Defender ATP, with the individual clients being labelled "for Mac" or "for Windows." macOS malware is still something of a rarity, but it's not completely unheard of. Ransomware for the platform was found in 2016, and in-the-wild outbreaks of other malicious software continue to be found. Apple has integrated some malware protection into macOS, but we've heard from developers on the platform that Mac users aren't always very good at keeping their systems on the latest point release. Further reading: Microsoft launches previews of Windows Virtual Desktop and Defender ATP for Mac.
Firefox

Firefox 66 Arrives With Autoplaying Blocked by Default, Smoother Scrolling, and Better Search (venturebeat.com) 154

An anonymous reader writes: Mozilla today launched Firefox 66 for Windows, Mac, Linux, and Android. The release includes autoplaying content (audio and video) blocked by default, smoother scrolling, better search, revamped security warnings, WebAuthn support for Windows Hello, and improved extensions. The company says its main goal with this release is to reduce irritating experiences such as auto-playing videos, pop-ups, and page jumps. Firefox 66 for desktop is available for download now on Firefox.com, and all existing users should be able to upgrade to it automatically. The Android version is trickling out slowly on Google Play.

Slashdot Top Deals