Keep OSNews alive by becoming a Patreon, by donating through Ko-Fi, or by buying merch!

Monthly Archive:: September 2017

The enduring influence of Metroid

Metroid, which debuted in 1986, would go on to spawn one of Nintendo's most-revered franchises. The ongoing adventures of bounty hunter Samus Aran differed quite a bit from the company's other big names, like Zelda and Mario. In comparison, Metroid was dark and solemn, with a looming feeling of isolation and a powerfully alien sense of place, inspired in large part by the first Alien film. It was also a game that felt unique in its structure. While Metroid was a 2D, side-scrolling game, it took place in an expansive, interconnected world. Players could explore in a nonlinear fashion, and would often have to return to areas using newfound abilities.

The game went on to spawn a number of beloved follow-ups, including the sublime Super Metroid in 1994, and the Metroid Prime spinoff series that transformed the 2D adventures into a first-person, 3D experience. Most recently, Nintendo is set to release Metroid: Samus Returns on the Nintendo 3DS, the first traditional side-scrolling Metroid in nearly a decade. But the importance of Metroid can be seen in more than the games released by Nintendo. The series has also had a profound influence on gaming as a whole, inspiring a generation of designers along the way.

I ordered a special edition New 3DS XL just for the new Samus Returns. The Metroid series is one of my favourite series in gaming, and many of them are classics all of us have played at some point in our lives. Personally, I greatly prefer the 2D, side-scrolling Metroid games, as the series foray into 3D/FPS - the Prime series - fell a bit flat to me.

The dystopia we signed up for

The world has become like an eerily banal dystopian novel. Things look the same on the surface, but they are not. With no apparent boundaries on how algorithms can use and abuse the data that's being collected about us, the potential for it to control our lives is ever-growing.

Our drivers' licenses, our keys, our debit and credit cards are all important parts of our lives. Even our social media accounts could soon become crucial components of being fully functional members of society. Now that we live in this world, we must figure out how to maintain our connection with society without surrendering to automated processes that we can neither see nor control.

Why you shouldn’t unlock your phone with your face

If you value the security of your data - your email, social media accounts, family photos, the history of every place you've ever been with your phone - then I recommend against using biometric identification.

Instead, use a passcode to unlock your phone.

Can't argue with that - especially in place where law enforcement often takes a... Liberal approach to detainees.

Apple’s A11 Bionic SoC is kind of insane

With the iPhone X revealed, we really have to start talking about its processor and SoC - the A11 Bionic. It's a six-core chip with two high-power cores, four low-power cores, and this year, for the first time, includes an Apple-designed custom GPU. It also has what Apple calls a Neural Engine, designed to speed up tasks such as face recognition.

Apple already had a sizeable performance lead over competing chips from Qualcomm (what Android phones use) in single-core performance, and the A11 blasts past those in multicore performance, as well. Moreover, the A11 also performs better than quite a number of recent desktop Intel chips from the Core i5 and i7 range, which is a big deal.

For quite a few people it's really hard to grasp just how powerful these chips are - and to a certain extent, it feels like much of that power is wasted in an iPhone, which is mostly doing relatively mundane tasks anyway. Now that Apple is also buildings its own GPUs, it's not a stretch to imagine a number of mobile GPU makers feeling a bit... Uneasy.

At some point, these Apple Ax chips will find their way to something more sizable than phones and tablets.

Apple sets release dates for macOS High Sierra, iOS 11

Aside from new iPhones, theres more Apple news - the company has set release dates for iOS 11 - 19 September - and macOS High Sierra - 25 September. I can't say much about High Sierra - I don't have a Mac - but iOS 11 is an absolute must, especially for iPad users. I've been using it for a long time now on my 2017 iPad Pro 12.9", and I haven't looked back to my laptop since buying it and installing iOS 11 on it.

iOS 11 is a huge leap forward for the iPad, and it'll make your tablet feel like a new, and much more capable device.

Apple introduces iPhone 8, iPhone X

Apple held its iPhone event today, but since the three major leaks got everything right - read our previous items on the leaks to get the full details - there's really not much to add here, other than the pricing for the new iPhones. The 'regular' iPhone 8 will be about €50 more expensive this year, so take that into account when planning your upgrade. The iPhone X (pronounced "ten" by Apple, "ex" by people with good taste), however, carries a very hefty pricetag, especially in Europe and the UK - the base 64GB model is $999 in the US, and a staggering €1159 in Europe (and an equally staggering £999 in the UK).

I think it's definitely a nice looking phone, and can certainly hold its own against other small-bezel phones from Samsung, LG, and others (especially others), but especially outside of the US, that's one hell of a price tag. Going over the magic €1000 mark feels like crossing a psychological threshold from high-end brand new smartphone territory into high-end brand new laptop territory, and that's a tough pill to swallow.

The additional problem here is that the iPhone 8 simply looks outdated compared to all the minimal bezel phones of this year, and certainly so next to the iPhone X in stores for the iOS users among us. I'm up for contract renewal, and since I'm the kind of person to switch platforms about once a year, I was definitely interested in switching to iOS again by buying the iPhone X. However, that €1159 price tag is way, way beyond the outer limit of my comfort zone.

iOS 11 GM leak confirms D22

9to5Mac is reporting on a leak of the iOS 11 GM release, which details quite a few things about the new iPhone we could only rumour and guess about up until now.

Here we go. W're digging through the iOS 11 GM we received this evening to unpack what we can learn about the D22 'iPhone 8' and the rest of the lineup ahead of Apple's big unveiling on Tuesday. It looks like the infamous HomePod leak left a few surprises for us after all.

The first discovery is a stunning set of new wallpapers coming with iOS 11 and the first look at the LTE Apple Watch. Next up: new and confirmed features coming to the OLED iPhone.

This is a major leak, and confirms several of the final details regarding the iPhone Pro or iPhone X or whatever the more expensive iPhone will be called. The leak confirms the removal of any form of home button - phyisical or virtual - replacing it with a gesture-based UI, as we talked about before. The power switch will also gain some new features, allowing you to set it up to control things like Siri and Apple Pay. iOS 11 also comes with animated animal emojis, which is a sentence that makes me sad. Among many more things I could link to, the leak also reveals how Face ID - the replacement for Touch ID - will work, and how to set it up.

The HomePod leak, the recent Bloomberg story by Mark Gurman, and now this GM leak basically leaves nothing left to the imagination - aside from the name and perhaps pricing. Update: and we have the name too: iPhone X. Apple listened to me (this is a joke).

Data of 143 million Americans stolen from Equifax

Equifax Inc. today announced a cybersecurity incident potentially impacting approximately 143 million U.S. consumers. Criminals exploited a U.S. website application vulnerability to gain access to certain files. Based on the company's investigation, the unauthorized access occurred from mid-May through July 2017. The company has found no evidence of unauthorized activity on Equifax's core consumer or commercial credit reporting databases.

Names, social security numbers, birthdays, addresses, driver's license numbers, credit card numbers - this is a very big breach.

Interestingly enough, three executives of the credit reporting agency sold their shares in the company days after the breach was discovered.

Bringing back the iPhone headphone jack – in China

Remember when Scotty Allen built his own iPhone from parts bought in Shenzhen? This time around, he ups the ante and adds a headphone jack to an iPhone 7. He had to design his own custom circuit board, have it printed, and build it into his iPhone 7. It's an amazing project, and it's an incredibly interesting 30 minute video.

I've spent the past four months in Shenzhen, China, modifying an iPhone 7 to add a fully functional headphone jack. To the best of my knowledge, this is the first time anyone has done anything like this.

In April, I decided to finally upgrade my iPhone 6s to an iPhone7 to get better camera quality for the videos I was shooting when I was out on adventures in the industrial markets and manufacturing world. But I was super annoyed that it doesn't have a headphone jack! I already have headphones I really liked, and I didn’t like the idea of having to keep track of an adapter just to use them.

So I figured I'd add my own - after all, how hard could it be?

It turns out, really really hard. But possible.

He sent the circuit board he designed and built to Apple, and open sourced all the schematics needed so those with the right tools and expertise can build it at home.

Google: it is time to return to not being evil

Jon von Tetzchner, CEO of Vivalvi (and former CEO of Opera):

Recently, our Google AdWords campaigns were suspended without warning. This was the second time that I have encountered this situation. This time, however, timing spoke volumes.

I had several interviews where I voiced concerns about the data gathering and ad targeting practices - in particular, those of Google and Facebook. They collect and aggregate far too much personal information from their users. I see this as a very serious, democracy-threatening problem, as the vast targeting opportunities offered by Google and Facebook are not only good for very targeted marketing, but also for tailored propaganda. The idea of the Internet turning into a battlefield of propaganda is very far away from the ideal.

Two days after my thoughts were published in an article by Wired, we found out that all the campaigns under our Google AdWords account were suspended - without prior warning. Was this just a coincidence? Or was it deliberate, a way of sending us a message?

Large technology companies have an immense amount of control over and influence on our society, far more than they - or anyone else, for that matter - care to admit. We're way past the point where governments should step in and start to correct this dangerous situation. It's time for another breakup of the Bell System. It's time we, as society, take a long, hard look at corporations - in tech and elsewhere - and ask ourselves if we really want to be subject to the control of organisations we effectively have no democratic control over.

I'm not a proponent of nationalisation, but I am a proponent of breaking up Google, Facebook, Amazon, Apple, Microsoft, and possibly others (I'm sticking to technology for now) to severely limit their power and influence. The products and services these companies create have become too important and too vital to the functioning of our society, and they should be treated as such.

It wouldn't be the first time we, as society, decide a certain product has become too vital to leave in corporations' unrestricted hands.

Ars Technica’s Android 8.0 review

Ars has a very detailed review - more of an in-depth deconstruction, to be honest, and that's a good thing - of Android 8.0 Oreo.

Take a closer look at Oreo and you really can see the focus on fundamentals. Google is revamping the notification system with a new layout, new controls, and a new color scheme. It's taking responsibility for Android security with a Google-branded security solution. App background processing has been reined in, hopefully providing better battery life and more consistent performance. There's even been some work done on Android's perpetual update problem, with Project Treble allowing for easier update development and streaming updates allowing for easier installation by users. And, as with every release, more parts of Android get more modularized, with emojis and GPU driver updates now available without an OS update.

Saving this one for tomorrow.

Oracle kills Solaris

Remember, back in December 2016, when there were rumours Oracle was killing Solaris? And how a month later, Solaris effectively switched to maintenance mode, and then to a "continuous deliver model"?

The news from the ex-Sun community jungle drums is that the January rumours were true and Oracle laid off the core talent of the Solaris and SPARC teams on Friday. That surely has to mean a maintenance-only future for the product range, especially with Solaris 12 cancelled. A classic Oracle "silent EOL", no matter what they claim.

With the hardware deprecated, my guess is that's the last of the Sun assets Oracle acquired written off. Just how good were Oracle's decisions on buying Sun?

Sun's Solaris is dead.

Bryan Cantrill on this news (this Bryan Cantrill):

As had been rumored for a while, Oracle effectively killed Solaris on Friday. When I first saw this, I had assumed that this was merely a deep cut, but in talking to Solaris engineers still at Oracle, it is clearly much more than that. It is a cut so deep as to be fatal: the core Solaris engineering organization lost on the order of 90% of its people, including essentially all management.

Judging merely by its tombstone, the life of Solaris can be viewed as tragic: born out of wedlock between Sun and AT&T and dying at the hands of a remorseless corporate sociopath a quarter century later. And even that may be overstating its longevity: Solaris may not have been truly born until it was made open source, and - certainly to me, anyway - it died the moment it was again made proprietary. But in that shorter life, Solaris achieved the singular: immortality for its revolutionary technologies. So while we can mourn the loss of the proprietary embodiment of Solaris (and we can certainly lament the coarse way in which its technologists were treated!), we can rejoice in the eternal life of its technologies - in illumos and beyond!

100 days of postmarketOS

We talked about postmarketOS back in late May, and this weekend the project published a summary of all the work they've done over the past 100 days.

What you see here is only the tip of the iceberg. So much work has gone into fixing bugs, and little improvements, that it would be ridiculous to go through the effort and list them all. The community has grown so fast in such a short time and we have people with all kinds of skills on board, ranging from Linux experts to kernel hackers to people who reverse engineer bootloaders (hi @McBitter!). We collaborate with people from other projects as well, such as @pavelmachek, who is close to using his N900 as a daily driver with his own distribution, recently just reached out to us.

So if you read through the whole post, you are probably interested in what we do. Consider contributing to the project, the entry barrier is really low. pmbootstrap automates everything for you and we are more than happy to help you through any issues you encounter in the chat. There are also a lot of opportunities to help with development, so there's plenty to do. And plenty of fun to have.

That's a lot of work for just 100 days.

ReactOS 0.4.6 released

0.4.6 is a major step towards real hardware support. Several dual boot issues have been fixed and now partitions are managed in a safer way avoiding corruption of the partition list structures. ReactOS Loader can now load custom kernels and HALs.

Printing Subsystem is still greenish in 0.4.6, however Colin Finck has implemented a huge number of new APIs and fixed some of the bugs reported and detected by the ReactOS automated tests.

Regarding drivers, Pierre Schweitzer has added an NFS driver and started implementing RDBSS and RXCE, needed to enable SMB support in the future, Sylvain Petreolle has imported a Digital TV tuning device driver and the UDFS driver has been re-enabled in 0.4.6 after fixing several deadlocks and issues which was making it previously unusable. Critical bugs and leakages in CDFS, SCSI and HDAUDBUS have been also fixed.

That's some solid progress.

The first commercial Asteroid OS smartwatch revealed

The first ever commercial Asteroid OS smartwatch, Connect Watch, was revealed today by a French company going by the same name. A Wi-Fi only model and a 3G model were unveiled with prices 99€ and 129€ respectively. Sales for these watches will commence tomorrow. Connect watch aims to provide a free watch alternative to the Android Wear and Tizen watches. The watches are capable to function on their own without the need for a smartphone and the 3G model can perform calls as well.

Asteroid OS, for those of you who don't know, is a Nemo Mobile based open source smartwatch OS and thus shares a lot of blood with Sailfish OS. Spearheaded by a talented young programmer Florent Revest, The project has matured a lot in 2 years since it inception and garnered lot of interest around the world. Jolla's Sailfish OS for smartwatch demo displayed in Slush 2016 and MWC 2017 was also based on Asteroid OS. No Asteroid OS sync application for Sailfish OS is yet to be in development.

It's 2017, and I can post a news item about an alternative operating system shipping on a smartwatch.

Today was a good day.

The next big Windows 10 update will be out on October 17

The Windows 10 Fall Creators Update now has a release date: October 17. Microsoft started finalizing the release last week, and we'd expect this release to follow the pattern seen in previous Windows updates: the final build will be done some time in September and roll out to members of the Windows Insider program's fast, slow, and release preview rings. Then it will hit Windows Update. From there, we'd expect a slow ramp up in availability.

Not the most substantial Windows update for regular users, but I do like the faster update cycle for Windows. I'm glad the monolithic releases of yore are gone for most users, while enterprise users are still able to opt for the Long Term Servicing Branch for the more monolithic approach.

Hardening the kernel in Android Oreo

The hardening of Android's userspace has increasingly made the underlying Linux kernel a more attractive target to attackers. As a result, more than a third of Android security bugs were found in the kernel last year. In Android 8.0 (Oreo), significant effort has gone into hardening the kernel to reduce the number and impact of security bugs.

Android Nougat worked to protect the kernel by isolating it from userspace processes with the addition of SELinux ioctl filtering and requiring seccomp-bpf support, which allows apps to filter access to available system calls when processing untrusted input. Android 8.0 focuses on kernel self-protection with four security-hardening features backported from upstream Linux to all Android kernels supported in devices that first ship with this release.

Is it common to have to backport security features of newer Linux versions to older ones? Or is this just a peculiarity of Android's Linux kernel being so far behind the times?

Genode 17.08 supports Intel Gen-8 GPUs

With version 17.08, the Genode OS project conquers the highly complex topic of hardware-accelerated graphics. In true microkernel fashion, Genode's new Intel-GPU multiplexer provides the bare minimum of functionality to enable (potentially untrusted) components to use the GPU without interfering with each other. Further highlights of the new release are the broadened support for the seL4 microkernel on ARM and 64-bit x86, the ability to boot via UEFI, and Genode's use as Xen DomU domain.

Seven years ago, the Genode developers took their first baby steps with the use of hardware-accelerated graphics. However, their original port of the Intel graphics execution manager along with Mesa/Gallium to the Genode user land never outgrew an experimental stage. One particular limitation was that the GPU could only be used by a single application exclusively. At that time, the secure sharing of GPUs among multiple - and potentially malicious - applications was an afterthought in the predominant driver architectures like Linux' DRI. A port of this driver architecture to Genode would not magically solve that.

In the meanwhile, hardware features like per-process graphics translation tables (PPGTT) and hardware contexts have proliferated and are now present in all modern Intel GPUs. What MMU-based virtual memory is to a CPU, these features are to a GPU. They in principle allow the sandboxed execution of GPU commands under the regime of a potentially very small GPU driver, analogously to how a microkernel facilitates an MMU to sandbox user-level components. However, with about 100K lines of code, Intel's official i915 driver stack as used in the Linux kernel is far from being small and simple. To put the number in perspective, modern microkernels like seL4 or NOVA consist of merely 10K lines of code. Inflating Genode's trusted computing base by on order of magnitude would be a tough decision. There had to be another way. Hence, one year ago, an experiment was started to develop a clean-slate GPU multiplexer as a Genode component. In contrast to the i915 driver stack that needs to accommodate a mind boggling number of legacy hardware that is still in broad use, Genode's custom GPU multiplexer could do a clear cut by only supporting very recent GPUs. The result is quite reassuring. At far less than 10K of code, Genode's new user-land GPU multiplexer is able to accommodate trusted and untrusted OpenGL applications side by side. The current release features the first version of this component along with several examples.

Besides the GPU topic, the new release comes with numerous other improvements. Most noteworthy is the ability to use Genode with the seL4 kernel on the ARM and 64-bit x86 architectures. The upgraded seL4 support also enables SMP on x86, priorities, and Genode's CPU-monitoring facilities. Following up on the big infrastructural changes of the previous releases, the current release comes with gradual refinements of the VFS infrastructure, the timing accuracy, and the package-management tools. The complete picture is presented in the official release documentation.

Apple finally openly supports net neutrality

Apple finally has something to say about net neutrality. In its first comment to the FCC about proposed upcoming rollbacks to net neutrality rules, Apple writes:

Our deep respect for our customers' security, privacy, and control over personal information extends to our customers' broadband connectivity choices. We work hard to build great products, and what consumers do with those tools is up to them - not Apple, and not broadband providers. Apple therefore believes that the Federal Communications Commission should retain strong, enforceable open internet protections that advance the following key policy principles:

The comment's a good - albeit late - start, but it does leave some wiggle room, as it, for instance, doesn't advocate for keeping internet traffic under Title II. Apple is, at the very least, in good company, as a staggering 98.5% of all comments to the FCC were in favour of maintaining the United States' current strong net neutrality rules.