Researchers at Google say they've developing an AI system that can automatically convert webpages into short videos. From a report: It extracts assets like text and images and their design styles including fonts, colors, and graphical layouts from HTML sources and organizes the assets into a sequence of shots, maintaining a look and feel similar to the source page as it does so. Google envisions the system could be useful to businesses that host websites containing rich visual representations about their services or products. These assets, the company says, could be repurposed for videos, potentially enabling those without extensive resources to reach a broader audience. A typical video costs between $880 and $1,200 and can take days to weeks to produce. URL2Video, which was presented at the 2020 User Interface Software and Technology Symposium, automatically selects key content from a page and decides the temporal and visual presentation of each asset.

An anonymous reader quotes a report from The Register: The Brave web browser will soon block CNAME cloaking, a technique used by online marketers to defy privacy controls designed to prevent the use of third-party cookies. The browser security model makes a distinction between first-party domains -- those being visited -- and third-party domains -- from the suppliers of things like image assets or tracking code, to the visited site. Many of the online privacy abuses over the years have come from third-party resources like scripts and cookies, which is why third-party cookies are now blocked by default in Brave, Firefox, Safari, and Tor Browser.

In a blog post on Tuesday, Anton Lazarev, research engineer at Brave Software, and senior privacy researcher Peter Snyder, explain that online tracking scripts may use canonical name DNS records, known as CNAMEs, to make associated third-party tracking domains look like they're part of the first-party websites actually being visited. They point to the site https://mathon.fr/ as an example, noting that without CNAME uncloaking, Brave blocks six requests for tracking scripts served by ad companies like Google, Facebook, Criteo, Sirdan, and Trustpilot. But the page also makes four requests via a script hosted at a randomized path under the first-party subdomain 16ao.mathon.fr. When Brave 1.17 ships next month (currently available as a developer build), it will be able to uncloak the CNAME deception and block the Eulerian script. Other browser vendors are planning related defenses. "Mozilla has been working on a fix in Firefox since last November," notes The Register. "And in August, Apple's Safari WebKit team proposed a way to prevent CNAME cloaking from being used to bypass the seven-day cookie lifetime imposed by WebKit's Intelligent Tracking Protection system."

Microsoft is overhauling Excel with the ability to support custom live data types. The Verge reports: You could import the data type for Seattle, for example, and then create a formula that references that single cell to pull out information on the population of Seattle. These data types work by cramming a set of structured data into a single cell in Excel that can then be referenced by the rest of the spreadsheet. Data can also be refreshed to keep it up to date. If you're a student who is researching the periodic table, for example, you could create a cell for each element and easily pull out individual data from there.

Microsoft is bringing more than 100 new data types into Excel for Microsoft 365 Personal or Family subscribers. Excel users will be able to track stocks, pull in nutritional information for dieting plans, and much more, thanks to data from Wolfram Alpha's service. This is currently available for Office beta testers in the Insiders program. Where these custom data types will be most powerful is obviously for businesses that rely on Excel daily. Microsoft is leveraging its Power BI service to act as the connector to bring sources of data into Excel data types on the commercial side, allowing businesses to connect up a variety of data. This could be hierarchical data or even references to other data types and images. Businesses will even be able to convert existing cells into linked data types, making data analysis a lot easier.

Power BI won't be the only way for this feature to work, though. When you import data into Excel, you can now transform it into a data type with Power Query. That could include information from files, databases, websites, and more. The data that's imported can be cleaned up and then converted into a data type to be used in spreadsheets. If you've pulled in data using Power Query, it's easy to refresh the data from its original source. [...] These new Power BI data types will be available in Excel for Windows for all Microsoft 365 / Office 365 subscribers that also have a Power BI Pro service plan. Power Query data types are also rolling out to subscribers. On the consumer side, Wolfram Alpha data types are currently available in preview for Office insiders and should be available to all Microsoft 365 subscribers soon.

An anonymous reader quotes a report from The New York Times: China's Communist Party emerged from four days of meetings behind closed doors in Beijing declaring the country's leader, Xi Jinping, a "helmsman" who would lead "the ship of socialism sailing into the wind and waves with determination." At a time when other world leaders remain consumed by the coronavirus pandemic, China promised an economic revival, greater technological self-reliance and a stronger military to protect the country's economic and political interests. The meeting underscored Mr. Xi's seemingly boundless political control, as well as his ambitions to propel China out of the current crisis into a new phase of growth, less vulnerable to external risks. Here are the main outcomes from the meeting, which outlined policy priorities for the coming years.

Economic revival: After the shock from the coronavirus crisis of the first months of this year, China's economy returned to4.9 percent growth in the July-to-September quarter, and exports have revived strongly. In its five-year plan, China aims to expand domestic markets and encourage innovation across the economy -- from cutting-edge technology to more efficient farming -- the party leaders said in an official summary of their meeting. That summary did not offer specific growth projections from 2021.

Homegrown technology: The meeting of the party's Central Committee declared that China would make enhanced technological self-reliance a priority over the next 15 years. "Insist on the core status of innovation across all of our national modernization," the leaders said. "Make technological self-sufficiency a strategic pillar of national development."

Military modernization and security: The Central Committee declared that China's military -- one of Mr. Xi's core priorities since taking office in 2012 -- had improved greatly, even as it promised to make still more "major steps" to enhance the country's security. The committee did not detail any new programs but called for "comprehensively strengthening military training and preparedness."

Top banks, including JPMorgan Chase and Goldman Sachs, are battening down their technology hatches for next week's presidential election. From a report (paywalled): Around next Tuesday, the final day of voting, JPMorgan and Goldman will both halt software updates to the retail and investment banking systems their customers use to manage accounts, The Information has learned. It's a precaution intended to minimize the risk of outages of their services during a period of potential market volatility surrounding the election. Banks have good reason to institute these software code "freezes." Faulty software updates are one of the main culprits behind online service outages. While suspending software updates is common for banks during times of heightened market volatility, this year's election could be especially turbulent, with wide fears over civil unrest and contested election results.

Long-time Slashdot reader imAck writes: Glenn Greenwald announced via Twitter recently that he has resigned from The Intercept (and First Look Media), the former being a media outlet that he co-founded [in February 2014]. Purportedly, a recent attempt to constrain his editorial freedom was the incident that pushed him to make the decision. "Not content to simply prevent publication of this article at the media outlet I co-founded, these Intercept editors also demanded that I refrain from exercising a separate contractual right to publish this article with any other publication," an anonymous Slashdot reader quotes him as saying.

As The New York Times notes, Mr. Greenwald is "best known for his role in making public the National Security Agency documents leaked by Edward Snowden in 2013," which Slashdot covered extensively. "For now, Mr. Greenwald will be part of a growing number of journalists who have left major media outlets to try their luck at Substack, a group that includes Andrew Sullivan, formerly of New York Magazine, and Matt Taibbi, formerly of Rolling Stone."

Betsy Reed, Editor-in-Chief of The Intercept, responded to Greenwald's departure, saying there's a "fundamental disagreement over the role of editors in the production of journalism and the nature of censorship."

An anonymous reader shares a report: If you're a Google One subscriber, there's a new reason to consider the service's $10 per month 2TB plan. Google is adding built-in virtual private network (VPN) functionality to the Google One app, but you'll need to subscribe to the 2TB and above plans to access the perk. While the feature is built into Google One, the company says you can take advantage of it while using any other app on your Android phone to protect your online privacy. Moreover, with the family sharing feature that comes with Google One, five other people can get access to a VPN as well.

Hackers stole $2.3 million from the Wisconsin Republican Party's account that was being used to help reelect President Donald Trump in the key battleground state, the party's chairman told The Associated Press on Thursday. From a report: The party noticed the suspicious activity on Oct. 22 and contacted the FBI on Friday, said Republican Party Chairman Andrew Hitt. Hitt said the FBI is investigating. The attack was discovered less than two weeks before Election Day as both Trump and Democratic rival Joe Biden made their final push to win Wisconsin and its 10 electoral votes. Trump won the state by fewer than 23,000 votes in 2016 and planned his third visit in seven days on Friday. Biden also planned to campaign in Wisconsin on Friday. Polls have consistently shown a tight race in the state, usually with Biden ahead by single digits and within the margin of error.

An anonymous reader shares a report from the BBC: Facebook is being sued for failing to protect users' personal data in the Cambridge Analytica breach. The scandal involved harvested Facebook data of 87 million people being used for advertising during elections. Mass legal action is being launched against Facebook for misuse of information from almost one million users in England and Wales. Facebook said it has not received any documents regarding this claim. The group taking action -- Facebook You Owe Us -- follows a similar mass action law suit against Google. Google You Owe Us, led by former Which? director Richard Lloyd, is also active for another alleged mass data breach. Both represented by law firm Millberg London, the Google case is being heard in the Supreme Court in April next year.

The Facebook case will argue that by taking data without consent, the firm failed to meet their legal obligations under the Data Protection Act 1998. Representative claimant in the case Alvin Carpio said: "When we use Facebook, we expect that our personal data is being used responsibly, transparently, and legally. By failing to protect our personal information from abuse, we believe that Facebook broke the law. Paying less than 0.01% of your annual revenue in fines -- pocket change to Facebook -- is clearly a punishment that does not fit the crime. Apologizing for breaking the law is simply not enough. Facebook, you owe us honesty, responsibility and redress. We will fight to hold Facebook to account."

An anonymous reader quotes a report from Ars Technica: Cadillac Super Cruise has retained its title as the best driver assistance system on the market, Consumer Reports declared in a new ranking. Super Cruise also won CR's last ranking in 2018. While Super Cruise started out as a Cadillac-only feature, GM is planning to bring it to 22 vehicles by 2023. Tesla's Autopilot came in second place -- a "distant second" according to Consumer Reports. The group says it saw "minor improvements in lane keeping performance" from Tesla's offering since the system was last evaluated in 2018.

Those minor improvements were enough for Autopilot to get the top spot in the "lane keeping and performance" category of CR's report. CR ranked Autopilot 9/10 for performance, while Super Cruise scored 8/10. Tesla also got top marks for Autopilot's ease of use. But Cadillac got a much better score -- seven points versus three for Tesla -- for its driver monitoring system. Cadillac Super Cruise uses a driver-facing camera to verify that the driver has their eyes on the road. The system uses lights and sounds to aggressively alert the driver if they stop paying attention. By contrast, Tesla uses a steering wheel torque sensor to determine whether the driver is holding the wheel. As CR points out, having hands on the wheel "does not necessarily mean the driver is actually looking at the road ahead."

CR also gave Cadillac credit for limiting the use of Super Cruise to pre-mapped highways. GM has made detailed maps of thousands of miles of highway across the US. The maps help Super Cruise understand the road and allows the vehicle to alert drivers ahead of time if they need to take the wheel. Tesla got dinged for allowing the use of Autopilot in residential areas -- areas where drivers need to pay especially close attention to avoid hitting pedestrians or other obstacles. Finally, CR found that Super Cruise did the best job of safely bringing the vehicle to a stop if the driver became unresponsive -- for example because she fell asleep or had a heart attack.

Microsoft has released a Windows update that removes Adobe's Flash Player before it reaches end of support on December 31, 2020. ZDNet reports: Update KB4577586 is part of Microsoft's effort to follow through with plans it announced along with Adobe, Apple, Facebook, Google, and Mozilla in 2017 to end support for Flash by December 2020. The Flash-removing update is available for all supported versions of Windows 10 and Windows Server, as well as Windows 8.1.

This new update removes Flash Player from Windows devices and cannot be uninstalled, Microsoft says in a new support note. However, it isn't rolling out via Windows Server Update Service (WSUS) just yet, and the update needs to be downloaded and installed from the Microsoft Update Catalog. It will become available to WSUS in early 2021, but admins can import it to WSUS manually today. Microsoft is releasing the Flash-removing update ahead of the end of support so that enterprise customers can test the impact on business applications when Flash is removed from a Windows PC or server. But the company says it will continue to deliver Flash security updates until support ends.

Microsoft has also detailed two methods that users and admins can follow to continue using Flash Player after the update is installed. Users can reset a device to an earlier system restore point. However, users need to explicitly enable this feature and a system restore point must have been created on the Windows device before the update is applied. The other option is to reinstall Windows without applying the update.

The Wikimedia Foundation, the American non-profit organization that owns the internet domain names of many movement projects and hosts sites like Wikipedia, has decided to migrate their code repositories from Gerrit to Gitlab. Slashdot reader nfrankel shares the announcement: For the past two years, our developer satisfaction survey has shown that there is some level of dissatisfaction with Gerrit, our code review system. This dissatisfaction is particularly evident for our volunteer communities. The evident dissatisfaction with code review, coupled with an internal review of our CI tooling and practice makes this an opportune moment to revisit our code review choices. While Gerrit's workflow is in many respects best-in-class, its interface suffers from usability deficits, and its workflow differs from mainstream industry practices. This creates barriers to entry for the community and slows onboarding for WMF technical staff. In addition, there are a growing number of individuals and teams (both staff and non-staff) who are opting to forgo the use of Gerrit and instead use a third-party hosted option such as GitHub. Reasons vary for the choice to use third-party hosting but, based on informal communication, there are 3 main groupings: lower friction to create new repositories; easier setup and self-service of Continuous Integration configuration; and more familiarity with pull-request style workflows.

All these explanations point to friction in our existing code-review system slowing development rather than fostering it. The choice to use third-party code-hosting hurts our collaboration (both internal and external), adds to the confusion of onboarding, and makes it more difficult to maintain code standards across repositories. At the same time, there is a requirement that all software which is deployed to Wikimedia production is hosted and deployed from Gerrit. If we fail to address the real usability problems that users have with Gerrit, people will continue to launch and build projects on whatever system it is they prefer -- Wikimedia's GitHub already contains 152 projects, the Research team has 127 projects.

This raises the question: if Gerrit has identifiable problems, why can't we solve those problems in Gerrit? Gerrit is open source (Apache licensed) software; modifications are a simple matter of programming. [...] Upstream has improved the UI in recent releases, and releases have become more frequent; however, upgrade path documentation is often lacking. The migration from Gerrit 2 to Gerrit 3, for example, required several upstream patchsets to avoid the recommended path of several days of downtime. This is the effort required to maintain the status quo. Even small improvements require effort and time as, often, our use-case is very different from the remainder of the Gerrit community.

Alphabet's Loon, the company focused on creating new networking capabilities using stratosphere-based infrastructure, has set a new world record for a continuous stratospheric flight. One of Loon's ultra high-altitude balloons flew for 312 days straight, beating the existing record of 223 days by a considerable margin, and nearly racking up a full year of sustained time aloft. From a report: The balloon in question took off from Puerto Rico in May 2019, and then made its way to Peru, where it took part in a service test for three months. It then headed south over the Pacific Ocean, and finally ended up in Baja, Mexico for a landing in March this year. Loon's CTO Sal Candido said in a blog post that the record-setting flight is the result of the company's continued work on advancing its technology and pushing both hardware and software forward in new and innovative ways. Part of that means learning as much as possible from balloons that break records like this one, and Candido points out that Loon has a unique advantage over more traditional high-altitude balloons designed for weather observation because it recovers just about all of them, and can study the best performers in extreme detail. That allows it to replicate and improve on what's going right when balloons are staying aloft for long periods.

Brian Krebs: In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents -- including schematics of client bank vaults and surveillance systems. The Gunnebo Group is a Swedish multinational company that provides physical security to a variety of customers globally, including banks, government agencies, airports, casinos, jewelry stores, tax agencies and even nuclear power plants. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually.

Acting on a tip from Milwaukee, Wis.-based cyber intelligence firm Hold Security, KrebsOnSecurity in March told Gunnebo about a financial transaction between a malicious hacker and a cybercriminal group which specializes in deploying ransomware. That transaction included credentials to a Remote Desktop Protocol (RDP) account apparently set up by a Gunnebo Group employee who wished to access the company's internal network remotely. Five months later, Gunnebo disclosed it had suffered a cyber attack targeting its IT systems that forced the shutdown of internal servers. Nevertheless, the company said its quick reaction prevented the intruders from spreading the ransomware throughout its systems, and that the overall lasting impact from the incident was minimal.

Windows Central reports: Microsoft is preparing a major OS update for Windows 10 in 2021 that sources say will bring with it a significant design refresh to the Windows UI. I'm told that Microsoft is planning to update many top-level user interfaces such as the Start menu, Action Center, and even File Explorer, with refreshed modern designs, better animations, and new features. This UI project is codenamed "Sun Valley" internally and is expected to ship as part of the Windows 10 "Cobalt" release scheduled for the holiday 2021 season. Internal documentation describes the project as "reinvigorating" and modernizing the Windows desktop experience to keep up with customer expectation in a world driven by other modern and lightweight platforms.

Windows 10 has remained much the same these last few years, with little to no changes in its design or feature set. Many other platforms on the market have gone through entire redesigns or UI refreshes in the last five years, and while Windows 10 has gone through minor design iterations with the introduction of Fluent Design, we've not seen a significant refresh or rethinking of its UI. The Sun Valley project appears to be spearheaded by the Windows Devices and Experiences team, lead by Chief Product Officer Panos Panay, who took charge of said division back in February. Microsoft announced in May that the company would be "reinvesting" in Windows 10 in the 2021 timeframe, and my sources say that Sun Valley is the result of that reinvestment.

An anonymous reader shares a report: Microsoft has announced that it is ending the ability to cross-sign drivers, effective 1 July 2021. This will effectively make it impossible to release new or updated drivers for Windows 7, Windows 8, and Windows 8.1 systems, including Server 2012 R2. This is not an exaggeration. The only option that will remain available to devs who want to release drivers for versions of Windows other than Windows 10 will be to have those drivers pass HLK/WHQL testing. Unfortunately, not all drivers are even eligible for HLK/WHQL testing, and even for those that are eligible, getting some drivers to pass the HLK/WHQL tests is effectively impossible. [...]

Apple is stepping up efforts to develop its own search technology as US antitrust authorities threaten multibillion-dollar payments that Google makes to secure prime placement of its engine on the iPhone, Financial Times reported Wednesday [Editor's note: the link may be paywalled; alternative source]. From the report: In a little-noticed change to the latest version of the iPhone operating system, iOS 14, Apple has begun to show its own search results and link directly to websites when users type queries from its home screen. That web search capability marks an important advance in Apple's in-house development and could form the foundation of a fuller attack on Google, according to several people in the industry. The Silicon Valley company is notoriously secretive about its internal projects, but the move adds to growing evidence that it is working to build a rival to Google's search engine. Two and a half years ago, Apple poached Google's head of search, John Giannandrea. The hire was ostensibly to boost its artificial intelligence capabilities and its Siri virtual assistant, but also brought eight years of experience running the world's most popular search engine. The company's growing in-house search capability gives it an alternative if regulators block its lucrative partnership with Google. When the US Department of Justice launched a case last week, over payments that Google makes to Apple to be the iPhone's default search tool, urgency was added to the initiative.

About half of Americans on both sides of the aisle back the Justice Department's antitrust lawsuit against Google, while fewer than a third oppose it, according to a new poll from progressive groups Demand Progress and Data for Progress shared exclusively with Axios. From a report: There's a growing pile of evidence that regulatory action against Big Tech has bipartisan support, as state and federal antitrust action circles companies like Google and Facebook. While there are many party-line splits on tech policy issues like content moderation, privacy and misinformation, more policymakers and average Americans than ever agree tech is too big and powerful. Winning antitrust suits represents a massive lift for the government and passing new antitrust legislation is hard. In an online survey of 979 likely voters polled by Demand Progress and the Demand Progress Education Fund from October 24-25 (with a margin of error of +-3.1 percentage points), 48% said they strongly or somewhat support the DOJ's lawsuit. 32% strongly or somewhat oppose it. The numbers were fairly consistent across both parties, with 52% of Republicans supporting the suit, compared to 49% of Democrats. 26% of Republicans polled opposed it, while 32% of Democrats did.

Judd Legum, reporting at Popular Information: In September, Facebook announced that it would stop accepting new political ads starting October 27. From October 27 through Election Day on November 3, political groups are permitted to run, subject to limitations, Facebook ads approved and running before October 27. In October, Facebook announced that after the polls close, it would ban all political ads indefinitely. The purpose of that policy is to prevent a campaign from declaring victory prematurely. Both policies were part of a high-profile effort to convince the public that the company was taking election integrity seriously. But on the first day of the moratorium, Facebook approved numerous Trump ads that appeared to violate its pre-election policies. At the same time, Facebook rejected scores of ads, many from groups aligned with Democrats, that do not violate its rules. Popular Information contacted Facebook regarding Trump's ads early Tuesday afternoon. Several hours later, Facebook told Popular Information that some of the ads did violate its policies and hundreds of Trump's ads were taken down.

The Trump campaign produced a number of ads that said "Election Day is Today." These ads violate Facebook's policies. Why? In order to comply with the moratorium, the ads need to begin delivering impressions prior to October 27. The Trump campaign spent a small amount of money delivering these ads to Facebook users in Ohio and elsewhere. But, while early voting has started in many states, it is not Election Day anywhere. These ads should not have been approved because they violate Faceboo's policy against misrepresenting the date of the election.

An anonymous reader quotes a report from VentureBeat: Microsoft Teams is continuing to ride the remote work and learning wave kicked off by the coronavirus pandemic. During Microsoft's Q1 2021 earnings call, CEO Satya Nadella shared that Microsoft Teams has passed 115 million daily active users. That's up 53% from the 75 million daily active users in April. Some 15 months ago, Microsoft Teams had just 13 million daily active users.

"Teams now has more than 115 million daily active users," Nadella said. "We are seeing increased usage and intensity as people communicate, collaborate, and coauthor content across work, life, and learning. Microsoft 365 users generated more than 30 billion collaboration minutes in a single day this quarter." On the call, Nadella highlighted how quickly features are being added to Teams. "We are accelerating our innovation for both first-line as well as knowledge workers, with over 100 new capabilities in the last six months," he said. "Including breakout rooms, meeting recaps, shift scheduling, and large scale digital events, up to 20,000 participants. To help people transcend both time and distance, employee health and wellbeing is a top concern for every CEO. We are innovating with new experiences to help people prioritize wellbeing in the flow of work. New insights in Teams provides personalized recommended actions, making it easier for employees to create healthy work habits and for leaders to build high performing teams."