A picture is worth a thousand permissions requests

What’s happening here is that Migration Assistant has migrated all my apps, and has automatically launched any of them that are listed in Login Items or are set to automatically launch in the background. They all launch, all at once, and every single one of them then prompts me for permission to do all the things they already had permission to do on my previous Mac. In this screen shot, I’ve dragged them apart, but in reality most of these windows appeared on top of each other. They float above every other window, and most of them want to open various portions of the Settings app. In the background, a few apps have launched with their own alert prompts, requesting that I perform more tasks in order to get the system ready. You will be protected.

Google argues iMessage should be regulated by the EU’s Digital Markets Act

Google is hoping regulators will bail it out of the messaging mess it has created for itself after years of dysfunctional product reboots. The Financial Times reports that Google and a few cell carriers are asking the EU to designate Apple’s iMessage as a “core” service that would require it to be interoperable under the new “Digital Markets Act.” The EU’s Digital Markets Act targets Big Tech “gatekeepers” with various interoperability, fairness, and privacy demands, and while iMessage didn’t make the initial cut of services announced in September, Apple’s messenger is under a “market investigation” to determine if it should qualify. The criteria for gatekeeper services all revolve around business usage. The services the EU wants to include would have more than 45 million monthly active EU users and more than 10,000 yearly active business in the EU, a business turnover of at least 7.5 billion euros, or a market cap of 75 billion euros, with the caveat that these are just guidelines and the EU is open to arguments in both directions. When the initial list was announced back in September, the EU said that iMessage actually met the thresholds for regulation, but it was left off the list while it listens to Apple’s arguments that it should not qualify. The sooner the various messaging services are forced to interoperate – preferably via completely open specifications anyone can build for – the better. These services should not be locking users in.

Fedora Linux 39 released

Fedora Workstation now features GNOME 45, which brings better performance and many usability enhancements, including a new workspace switcher and a much-improved image viewer. If you’re looking for a different desktop experience, our Budgie Special Interest Group has created Fedora Onyx, a Budgie-based “Atomic” desktop in the spirit of Fedora Silverblue.  Of course, that’s not all — we also have updated desktop flavors featuring KDE Plasma Desktop, Xfce, Cinnamon, and more. As with every Fedora release, it comes with the latest and greatest every one of the Linux desktops has to offer, as well as all the newest versions of the various frameworks and underlying layers, down to the kernel. Fedora KDE is my desktop of choice, so I’m definitely a bit biased, but I can’t wait to load up the upgrade and install it.

ReactOS gets initial UEFI and NT6+ application support

The ReactOS project has published another newsletter filled with news about their progress, and two things stand out. First, there’s now initial support for booting using UEFI. Work has been underway since the beginning of the year to transition FreeLoader, our default bootloader for ReactOS, to support UEFI on x86 and AMD64, as well as ARM32 and ARM64. Hermès has been developing a system for passing the UEFI framebuffer information in a fashion that allows Windows XP to run on UEFI systems, while Justin Miller (TheDarkFire) has been developing the UEFI freeloader build. On top of supporting booting ReactOS, other features are being built such as EFI chainloading and a bootmgfw-compatible build of FreeLoader. These features would add boot management capabilities and allow modern Windows systems to bootstrap our favorite bootloader. Second, and this is a big one: work has been done to add initial support for running Windows applications targeting newer systems than Windows Server 2003. Up until now, ReactOS was limited to running Windows applications targeting NT 5.2 found in Server 2003, but now work is being done to support appications targeting NT 6.0 and newer, as found in Windows Vista and newer. A group made up of Timo Kreuzer, Justin Miller, and other developers and contributors alike are developing the necessary APIs for compatibility with modern programs. While Timo is still working on implementing a dynamic versioning system for DLLs (#3239) that allows exporting of routines to applications depending on their compatibility settings, he has added the option for ReactOS bot builders to compile builds with NT6 exports which makes it possible to experiment with NT6+ application compatibility. There are also various improvements to the shell and debugger, but a new release is still a ways away, so unless you want to dive into unstable builds, there’s no way to test any of this just yet. Still, hose are some massive projects being undertaken, and makes ReactOS a bit more prepared for the future.

Browsing the WWW on a 1980s IBM PC using MicroWeb

Do you ever sit at your 1981 vintage IBM PC and get the urge to pop onto that newfangled ‘WWW’ to stay up to date on all the goings-on in the world? Fret not, because Al’s Geek Lab has you covered with a new video, which you will unfortunately have to watch on a device that was made at the very least in the late 1990s. What makes this feat possible is a miniscule web browser called MicroWeb, created by jhhoward, that will happily run on an 8088 CPU or compatible, without requiring any fiddling with EMS or similar RAM extensions. Anything is possible, if you just want it hard enough.

Ironclad 0.5.0 released

Ironclad is a formally verified, hard real-time capable kernel for general-purpose and embedded uses, written in SPARK and Ada. It is comprised of 100% free software, free in the sense that it respects the user’s freedom. Version 0.5.0 has been released. This release brings a lot of improvements to mainly the scheduling, time keeping, userland, and networking subsystems. The easiest way to try Ironclad, either virtually or on real hardware, is to use a distribution that uses it – Gloire seems to be the recommended option. Gloire is an OS built with the Ironclad kernel and using GNU tools for the userland, along with some original applications like gwm. This repository holds scripts and tools to build the OS from the ground up. I had never heard of this project before, but it seems incredibly cool.

OmniOS Community Edition r151048 released

OmniOS Community Edition r151048 has been released. For those of us that lost track of the Solaris world – OmniOS is a distribution of illumos, which in turn is a fork of the last release of OpenSolaris before Oracle did what Oracle does and screwed everyone over by taking Solaris closed source again. OmniOS focuses on being a server operating system. For this release, the userland is now built with gcc 13, and it contains various improvements for AMD Zen 4 support. The which command has been replaced by an implementation in C rather than csh, dtrace has seen some improvements on machines with a lot of CPUs, and so, so much more.

LXQt 1.4.0 released

LXQt, the Lightweight Qt Desktop Environment, version 1.4.0 has been released, and this one marks an important milestone – it’s the last release based on Qt5, before the next release moves to Qt6. LXQt 1.4.0 is based on Qt 5.15, the last LTS version of Qt5. If everything goes as planned, this is the last Qt5-based release – we’ll do our best to port the next release to Qt6, even if we’ll have to delay it. It’s loaded with new features, bugfixes, and improvements, and, as always, will find its way to your distribution of choice soon enough.

Why Cities: Skylines 2 performs poorly

Cities: Skylines 2 like its predecessor is made in Unity, which means the game can be decompiled and inspected quite easily using any .NET decompiler. I used JetBrains dotPeek which has a decent Visual Studio -like UI with a large variety of search and analysis options. However static analysis doesn’t really tell us anything concrete about the rendering performance of the game. To analyze what’s going with rendering I used Renderdoc, an open source graphics debugger which has saved my bacon with some of my previous GPU-y personal projects. An incredibly detailed look at just what’s going on under the hood to make the new Cities: Skylines 2 behave so poorly.

US lawmakers press Biden for plans on Chinese use of open chip technology

A wider bipartisan group of U.S. lawmakers is asking the Biden administration about its plans to respond to China’s rising use of RISC-V chip design technology after Reuters last month reported on growing concerns about it in both houses of Congress. Now, a broader group of 18 lawmakers that includes five Democrats is asking the Biden administration for how it plans to prevent China “from achieving dominance in … RISC-V technology and leveraging that dominance at the expense of U.S. national and economic security,” according to a letter the group sent to Raimondo and seen by Reuters. A rather shortsighted take, and without even looking I wouldn’t be surprised if some of these lawmakers have chip factories or whatever in their districts.

Microsoft’s flawed approach to application updates wreaks havoc on Windows PCs

WinRAR has a massive security hole that’s still being actively exploited, and it’s one of many Windows applications that do not auto-update. The developer boasts of more than 500 million WinRAR installations around the world, so it’s likely that hundreds of millions of PCs are vulnerable to malicious ZIP files today. How is it that, in 2023, the world’s most popular desktop operating system doesn’t provide an easy way to update your installed applications? It baffles me that Windows and macOS users still have to manually keep track of and update each and every one of their applications individually, like it’s 1997 or something. Stay safe. It’s the wild west out there for some of you.

Google rewriting Android’s Binder in Rust with promising results

Google engineers on Wednesday posted an initial “request for comments” set of patches that re-implement Android’s Binder code within the Linux kernel in the Rust programming language rather than C. Binder remains a critical piece of Android’s software stack and for increasing the robustness and security, Google is pursuing a rewrite of the C code in Rust. Binder is responsible for inter-process communication (IPC) and other tasks on Android while replacing it with memory-safe Rust code should be a big step-up for system security. Rust is everywhere.

Want to name my Wi-Fi network and computer? Want to troll me with stickers on my PC? Now’s your chance!

Update 2: At a staggering 176% of the original goal within 2 days, I think it’s time to end this crazy ride. Rests me to thank all of you – donor or not – for the incredible support and generosity. This will enable me to go far beyond “mid-tier” and build something that’s going to set me for close to a decade. I’m absolutely stunned. Update: I did not expect this to take off, but within a few hours we’ve already reached the goal! Thanks, everyone – I’m stunned and at a loss for words, which, I can assure you, is a rather rare occurrence. The goal sits at 110% now, and I’ll leave it up for the night so this story doesn’t suddenly stop making sense (it’s 02:26 where I live). I’ll also contact the two largest donors privately and work out the details with them. Since we started our more visible push for donations to ensure we can keep OSNews running as an independent technology news website without having to resort to SEO spam, ad overload, and worse, a number of people have expressed interest in donating to specific goals instead of donating generically. A possible goal for this has recently come up, so I’m stepping out of my comfort zone (this whole thing terrifies me): you can now donate specifically towards a much, much-needed upgrade for my PC – and troll me along the way. Read on! After almost 8 years of loyal service, my PC, with a 7700K and GTX 1070, is starting to show some serious signs of old-age and constant use. This machine is the main computer I have, used for both my work on OSNews as well as gaming, and it’s getting long in the tooth. As such, I’m planning a relatively conservative, mid-tier upgrade for the machine, retaining as many parts as possible to keep costs down. I will retain the case, power supply, CPU cooler, and the various SSDs and hard drives. My intention is to purchase the following parts: In Sweden, this would add up to SEK 10900 (incl. all applicable taxes), or €921/$978, so I set the goal at an even €1000. With the state of the world as it is, as well as having a family with two young children, investments like this simply aren’t something I can do out of pocket, and that’s why people have been suggesting for months to take this step. However, I want to make things a bit more interesting, and provide you lovely nerds with some ways to troll me. As such, I will give the two largest combined donations (as in, you can donate multiple times and it’ll count) some extra perks, designed to give you the opportunity to mess with me: Obviously, there are some ground rules here – no pornography, no hateful stuff like racism, no gore, stuff like that. We’re all adults here, and I’m pretty sure we all instinctively know what I mean. Other than that – anything goes! Any required stickers I’ll buy myself, as long as you can provide me a link. Any donation made through our Ko-Fi will count towards this goal, and you can keep track of the progress there as well. Since I have absolutely no idea how this will go (like I said, I’m terrified), I haven’t set a time limit on the goal. So, hop on over to our Ko-Fi page and donate away! In the meantime, I’m going to curl up in a corner because I have no clue how anyone is going to respond to this.

Apple’s EU legal shenanigans laughed out of the room by EU

Bruce Lawson writes: This week, I’ve had the pleasure to read the post-modernist triumph that is CASES DMA.100013 Apple – online intermediation services – app stores, DMA.100025 Apple – operating systems and DMA.100027 Apple – web browsers (PDF), which details some of Apple’s attempts to avoid being regulated. I call it a “post-modernist triumph” because its prose is almost as incomprehensible as James Joyce’s Finnegans Wake, and it is so full of preposterous lies and contradictions that it can only be sanely read as a metatextual joke like the Illuminatus! Trilogy. In order to avoid having Safari being deemed a Core Platform Service (and thus falling under the remit of DMA), Apple argues “Look, those Safaris on iOS, iPadOS, MacOS, TvOS, WatchOS are TOTALLY DIFFERENT PRODUCTS and none of them have enough users in the EU for you to even think about regulating us, alright? We’re a tiny start-up! Will nobody think of the children?!?”. (I paraphrase somewhat). Entirely unsurprisingly, Apple’s legal contortions did not work – the EU basically tossed this nonsense out right away, using Apple’s own marketing claims about Safari against them.

Enable MTE on Pixel 8

The Pixel 8 hardware (Tensor G3) supports the ARM Memory Tagging Extension (MTE), and software support is available both in Android userspace and the Linux kernel. This feature is a powerful defense against linear buffer overflows and many types of use-after-free flaws. I’m extremely happy to see this hardware finally available in the real world. You can enable this feature in both Android and the kernel, as the post explains. Sadly, the post does not explain if there’s any downsides to enabling this extension, and I’m certainly not the right person to investigate that. Does anyone in our audience know?

M3 Macs: there’s more to performance than counting cores

I was yet again spectacularly wrong in speculating that we had another eight months to wait before Apple would release the first Macs with M3 chips. Another few days and the first will be upon us, and the fortunate few will start bragging or moaning about their performance. That has suddenly grown more complex: the number of each CPU core type has diversified with the M3 Pro in particular. This article looks at some of the factors involved in comparing CPU performance across Apple’s expanded range of M-series chips. As Apple’s line-up of processors grows, it’s becoming harder to keep track of all the details. This article does a good job of highlighting some of the changes coming inside M3-based Macs.

Google drops Web Environment Integrity proposal

Google has announced it’s going to drop the Web Environment Integrity proposal – the controversial proposal that set the internet on fire a few months ago. Instead, the company intends to offer a much more limited version of the proposal that only targets Android WebViews embedded in applications, targeting only media streams running inside Android applications. We’ve heard your feedback, and the Web Environment Integrity proposal is no longer being considered by the Chrome team. In contrast, the Android WebView Media Integrity API is narrowly scoped, and only targets WebViews embedded in apps. It simply extends existing functionality on Android devices that have Google Mobile Services (GMS) and there are no plans to offer it beyond embedded media, such as streaming video and audio, or beyond Android WebViews. I might be ye of little faith, but this feels a lot like a case of proposing something overtly horrible first, to pave the way for something that now seems benign in comparison. On top of that, that scope might be limited now, but does anyone have any faith left that Google won’t just… Widen the scope later, once we’re all not looking?

Facebook and Instagram to offer subscription for no ads in Europe

Facebook has unveiled the prices it’s going to charge European users who want to have an ad-free experience on Facebook and Instagram. People in these countries will be able to subscribe for a fee to use our products without ads. Depending on where you purchase it will cost €9.99/month on the web or €12.99/month on iOS and Android. Regardless of where you purchase, the subscription will apply to all linked Facebook and Instagram accounts in a user’s Accounts Center. As is the case for many online subscriptions, the iOS and Android pricing take into account the fees that Apple and Google charge through respective purchasing policies. Until March 1, 2024, the initial subscription covers all linked accounts in a user’s Accounts Center. However, beginning March 1, 2024, an additional fee of €6/month on the web and €8/month on iOS and Android will apply for each additional account listed in a user’s Account Center. That’s a high price to pay to read your racist uncle’s rants and see the heavily photoshopped photos of some random influencer peddling vitamin pills.

Firefox lost users during “failed” Yahoo search deal, says Mozilla CEO

This week, Mozilla CEO Mitchell Baker rose as a key figure in Google’s defense against the Justice Department’s monopoly claims. Providing a video deposition for the landmark trial, Baker testified that Mozilla’s popular browser Firefox tried to switch from using Google as a default search engine but reverted back after a “failed” bet on Yahoo made it clear that Google was Firefox users’ preferred search engine. That fits in a long string of similar claims – namely, that defaulting to anything but Google is impossible, because nothing else is even remotely as good as Google Search, because none of the others are the default, meaning they don’t get the amount of queries needed to improve search quality, and on the spiral goes. What’s spicy here is that this trial could potentially turn out to be Mozilla’s downfall, since Google’s search deals with, among others, Mozilla, are up for debate. Desktop Linux’ Firefox problem could explode sooner than we might think.