Gregarius » BetaNews.Com » février 24, 2016

Canaux

108470 éléments (108470 non lus) dans 10 canaux

Actualités (48730 non lus)

• 01net. Actualités (48730 non lus)

Hoax (65 non lus)

• Top dix quotidien Sophos des canulars (65 non lus)

Logiciels (39066 non lus)

• BetaNews.Com (34382 non lus)
• Presence PC - Actualité Logiciels, jeux vidéos (3551 non lus)
• LeMondeInformatique.fr : Actualités Applications (1133 non lus)

Sécurité (1668 non lus)

• Actualités Sécurité Informatique (406 non lus)
• Les Nouvelles.net : sécurité informatique. (1262 non lus)

Referencement (18941 non lus)

• Secrets2moteurs (11793 non lus)
• Referencement Google WebRankInfo (2255 non lus)
• Abondance (4893 non lus)

BetaNews.Com (23 non lus)

• 

  I'm going to let you into a little secret about Windows 10

  Publié: février 24, 2016, 10:05pm CET par Mark Wilson

  

  Wait for it... wait for it... For all of the criticism I have levelled at Microsoft, I actually rather like Windows 10. It is, of course, not without its faults, but in the main it's a solid operating system and a reasonable upgrade from Windows 8.1. I have a (well-earned) reputation for negativity, cynicism, and pessimism, so what's with the sudden burst of positivity?

  In reality, nothing has changed, but I've settled into my stride. Rather than battling the bits I hate (and there are still plenty), I've learned to turn a blind eye. I've realized that I was trying to fit Windows 10, rather than making Windows 10 fit me. There's still plenty I don't like, but by simply learning not to focus on them, I've come to like the operating system much more. As with so many things in life, it's all about how you use it.

  I've made quite a lot of complaints about Windows 10. Let's face it, I have grumbled endlessly about it. That’s just the way I am; it's in my nature to be critical and negative. But having used Windows 10 for around a year now, I've decided that there's no need to get hung up on the bits I'm less keen on. This might seem a bit backward, but in order to move forward, I've decided to look back at the complaints I've made, and see how my opinion has changed.

  Modern apps

  I still don't like them. Not one little bit. Simple solution: don’t use the buggers! Easy and obvious -- like all the best solutions. I wish I could find something to love, but I can't. As the old adage goes, 'if you can't say anything nice, don't say anything at all'. So I'll say nothing about modern apps. They need not impact on my life in the slightest.

  Start menu

  I'll level with you: for all of the excitement that surrounded the return of the Start menu, I rarely find cause to use it. Maybe it's because I'm organized, or maybe it's because I don't -- generally -- have the need to use very many different applications, but it's a very rare occurrence for me to fire up the Start menu.

  I can't imagine, really, that I'm all that different to most people. I use a web browser (Chrome) for just about everything -- perhaps this says something about life in the cloud -- and writing is taken care of by Word. Image editing is catered for by the simply brilliant Paint.NET, I play the occasional game in BrettSpielWelt, I browse my hard drive with File Explorer, and I chat with my colleagues using Slack. That really is about it. My needs are pretty basic. Oh, there's also Snagit for screen grabbing.

  The taskbar is home to all of the shortcuts I need on a daily basis. There are few extras thrown in such as a shortcut to Settings, one to Edge (in case, heaven's preserve us, I ever need to use it), and one to Notepad (oh yes... keeping it old school!). Should I need to use Excel, Firefox, or something else, then I can hit the Start button.

  In terms of finding files -- I just know where things are! I'm organized, and my folder structure is such that it never takes me long to track down what I need -- it would almost certainly take me longer to perform searches through the Start menu.

  So, for the most part, I simply ignore the Start menu. It's an arrangement that suits us both down to the ground.

  Microsoft Edge

  My opinion hasn’t changed: Edge still looks like a kindergarten browser. It's still not only horrible-looking, but also lacking in features. Microsoft is working on bringing the features users are asking for, but my interest has already been lost. For now, I'll simply ignore Edge in the same way I did Internet Explorer.

  Start menu tiles

  Still something I completely fail to understand the need for, but if they bring joy to certain people, so be it. I'll continue to give them a wide berth. I've already explained how little time I spend in the Start menu, so Live Tiles and static modern app tiles are not seen very often. When I do fire up the Start menu, I might be irritated by a couple of tiles and delete them. I'm slowly whittling through them -- eventually they'll all be gone!

  Action center

  My loathing of the Windows 10 Mobile-style tile has waned slightly. I still don’t regard this as a triumph of design, but I can appreciate the neat simplicity. It provides handy way to toggle Bluetooth and adjust screen brightness, but I really do wish the problem with the incorrect reporting of Airplane mode could be addressed.

  Cortana

  Not important --another feature I find very, very easy to ignore these days. I just fail to see the point, so why get hung up on it. Move on... there's nothing to see here!

  Privacy

  Who am I kidding? I'm embedded in Google -- I'm used to (although still not entirely comfortable with) the idea of my personal data being collected for the purposes of advertising, personalization of experience and so on. With Google, it has been known about for years... it's what Google is about, after all. Somehow it felt different with Microsoft. Microsoft wasn't supposed to be playing these sorts of games, and when it cropped up in Windows 10 it felt, well, kind of dirty really.

  I'm still not fully reconciled with Windows 10's privacy and telemetry issues, but this is more to do with Microsoft's initial lack of transparency and the absolute fudge it made of communicating with users. Considering I have basically sold my soul to Google in using Gmail, Google Drive and Android, who am I to take umbrage with Microsoft. It's just taken some getting used to, that's all.

  I guess there's also the fact that it is much easier to find an alternative to Google products if I so chose. When it comes to Windows, sure I could switch to Linux or OS X -- I have done before, but I've come back for one reason or another -- but there's nothing quite like Windows in terms of usability, compatibility and familiarity.

  Settings vs Control Panel

  I'll be straight with you -- this is one gripe I'm having trouble letting go of. It still irks me that I have to go to different places to access different settings, but I appreciate that it's not the end of the world. I will occasional get caught off guard when Settings unceremoniously dumps me back into the Control Panel, but then I am fairly easily riled. This is one I'll have to continue to work on, as I hope that Microsoft is working on a way to combine the two into one neat repository for settings. Here's hoping... but I won't be holding my breath.

  I'm interested to know if I'm alone in finding that my view of Windows 10 has softened over the months. There are still things that take me by surprise, new revelations that take be aback, but for the most part I have made my peace with Windows 10 -- have you done the same?

  I can't promise that I won't bitch and moan again in future (what can I say? C'est moi!) but my base level opinion of Windows 10 has crept up.

  
• 

  Majority of data breaches occur in US

  Publié: février 24, 2016, 8:41pm CET par Sead Fadilpašić

  

  There have been 1,673 data breaches last year. They have led to 707 million data records being compromised. Those are the results of a new report by digital security firm Gemalto, entitled Breach Level Index.

  The Breach Level Index tracks all data breaches worldwide, looking at their size, severity, as well as the number of records compromised.

  Since the company began tracking data breaches in 2013, more than 3.6 billion data records have been exposed, Gemalto said. Last year, malicious outsiders were the number one source of these breaches, accounting for 58 percent. Accidental loss accounted for 36 percent, state-sponsored attacks two percent, and malicious insiders accounted for 14 percent.

  Looking at compromised records, malicious outsiders accounted for 38 percent, state-sponsored attacks for 15 percent and malicious insiders 7 percent.

  The majority of breaches (77 percent) occurred in North America, with 59 percent of those being in the United States.

  Europe accounted for 12 percent, and Asia Pacific for eight percent.

  "In 2014, consumers may have been concerned about having their credit card numbers stolen, but there are built-in protections to limit the financial risks", said Jason Hart, vice president and chief technology officer for data protection at Gemalto.

  "However, in 2015 criminals shifted to attacks on personal information and identity theft, which are much harder to remediate once they are stolen. As companies and devices collect ever-increasing amounts of customer information and as consumers’ online digital activities become more diverse and prolific, more data about what they do, who they are and what they like is at risk to be stolen from the companies that store their data. If consumers’ entire personal data and identities are being co-opted again and again by cyber thieves, trust will increasingly become the centerpiece in the calculus of which companies they do business with", added Hart.

  Published under license from ITProPortal.com, a Net Communities Ltd Publication. All rights reserved.

  Photo Credit: elwynn/Shutterstock

  
• 

  Windows 10 Insider Preview Redstone Build 14271 arrives on the Fast ring, and there's an update for Mobile too

  Publié: février 24, 2016, 7:22pm CET par Wayne Williams

  

  Windows 10 Insider Preview Build 14267 arrived on the Fast ring 6 days ago and brought some very welcome improvements with it, including three additions to Microsoft Edge, although sadly still no support for extensions.

  Today Microsoft rolls out another Fast ring update, Build 14271, and also an update for Mobile, Build 14267.1004. This is the first time the software giant has released new builds for PC and mobile on the same day.

  Starting with the PC build, there’s not a lot of new content to report but the frequency with which Windows asks for feedback is now locked to "Automatically (Recommended)" in the Settings app and managed by the Insider Program.

  Aside from that, the new build fixes a raft of issues:

  • Fixed an issue where the window borders on apps would change from accent color to black after every upgrade to a new build.
  • Updated the music control icons that are shown in taskbar previews in music apps like Groove to look more crisp and clean at higher resolutions.
  • Fixed an issue where the taskbar would sometimes not auto-hide and show unexpectedly on top of full screen windows such as showing above a PowerPoint presentation when in slideshow mode.
  • Fixed an issue where the "Hide notifications while presenting" setting preference is lost after upgrading to a new build.
  • The entire app header in Action Center is now right-clickable instead of just the app name or "x".
  • Now easier to dismiss all notifications from a specific app in Action Center by increasing the target area to encompass the entire app header.
  • Fixed an issue where interaction notifications would not show a button to input text in some cases.
  • Fast user switching should work now with Picture Password.
  • Fixed an issue where some desktop (Win32) apps look missing from Start.
  • Fixed an issue where the accent color does not automatically change when the slideshow option is chosen for your desktop background.

  But of course this is a Fast ring release, so there are some known problems to contend with too.

  • Microsoft is tracking an issue reported by Insiders where some PCs will freeze or bluescreen when resuming from hibernation. Disabling hibernation is a workaround in some cases until this is fixed.
  • If you have Kaspersky Anti-Virus, Internet Security, or the Kaspersky Total Security Suite installed on your PC there is a known driver bug that prevents these programs from working as expected in builds from the Development Branch. Microsoft is partnering with Kaspersky to fix this issue for a future release, but at this time there are no known workarounds. While this issue is present, we recommend using Windows Defender or another third party anti-virus product of your choice to remain protected.
  • Turning on the "always show all icons in the notification area" setting disrupts the layout of the notification area ("systray").
  • When browsing in Microsoft Edge, charts displayed using D3.js library will not display correctly -- e.g. render as black, positioned incorrectly. Known affected sites are Cortana, Bing.com, and PowerBI.com.

  As for the new Mobile build, this is essentially the same as the one Microsoft released last Friday, but fixes the problem of the Lumia 550 not charging or connecting via USB, and overcomes the issue of Visual Voicemail notifications failing to happen.

  The new build also contains one new feature -- the addition of Visual Voicemail for dual-SIM devices, such as the dual-SIM Lumia 950 XL. This was included in the Friday build, but because of the bug didn’t work correctly.

  There are some known issues for this build too:

  • If you have the Windows Feedback app pinned to Start, after upgrading from Build 10586.107 it will no longer show as pinned.
  • Microsoft is seeing reports from Windows Insiders of issues connecting to wireless displays and is investigating.
  • When using Continuum on the Lumia 950 XL the trackpad experience is not working correctly.

  Photo credit: charnsitr / Shutterstock

  
• 

  Alexa, find updates for Amazon Fire TV and Kindle

  Publié: février 24, 2016, 7:03pm CET par Alan Buckingham

  

  We knew updates were on the way to various Amazon products, but with a gradual roll out it was hard to say when things would arrive. Today the waiting is over, as both Fire TV and Kindle picked up the latest updates from the retail giant.

  So what is in the cards for these updates? Well, lots of cool things that can prove useful to the company's multitude of customers.

  We'll start with Amazon's Fire TV, the set-top box that takes on other heavyweights like Roku in this increasingly competitive market.

  To begin with you get a new "Your video" menu option, which consolidates the left side of the screen a bit. The option does as the name states and shows the latest offerings, a watchlist and your video library. There are also multiple Prime categories and a message at the bottom letting you know that you're subscribed to the service.

  This update also introduces Alexa to Fire TV -- you can access this by holding down the speaker button on your remote control. That's already possible with the actual Echo remote, but it doesn't work with third-party controllers like Harmony. Sadly, you can't just ask Alexa to search the device for content.

  

  As for the Kindle update, a quick walk-through of what's new reveals a home screen that now claims to improve navigation, help you find books and keeps track of what you wish to read. The update will walk you through all of the features and the appearance will be slightly different when you access the device for the first time.

  

  These updates may or may not have yet made it to your devices, but if you haven't received them then just sit tight, as it's all on the way.

  
• 

  Former employees are a major security threat

  Publié: février 24, 2016, 6:59pm CET par Sead Fadilpašić

  

  If you’re a business owner in the UK, chances are a good portion of your workers are looking for the first opportunity to ditch you.

  According to a new report by Ilex International, the identity and access management firm, 59 percent of workers are looking for a new job in 2016. Two reasons are behind this: first that the majority feels underpaid, and the second is that the economy is improving and better prospects are out there.

  But that’s not the issue Ilex is tackling -- it’s saying that people leaving work are a security threat for the company staying behind. That’s why the company is urging businesses to put strict security controls in place.

  According to Ilex’s report, entitled Staff migration: The security impact to business, 39 percent of large businesses take up to a month to close dormant accounts, leaving a lot of room for opportunistic hackers and disgruntled workers to strike.

  Large businesses are doing somewhat better -- 58 percent remove access to data on the day, or even a day before departure.

  The company urges businesses to shut down inactive accounts fast, to focus on protecting key data, to track and audit data access and implement a strong identity and access management solution.

  "Disgruntled employees or partners are unlikely to wait until a month after leaving to access confidential company information. Access is likely to be sought in a matter of days", warned Thierry Bettini, director of international strategy at Ilex International. "The findings highlight the importance of having a system in place that helps close inactive accounts immediately".

  Published under license from ITProPortal.com, a Net Communities Ltd Publication. All rights reserved.

  Photo credit: Olivier Le Moal / Shutterstock

  
• 

  Samsung using Android to fight breast cancer

  Publié: février 24, 2016, 6:48pm CET par Brian Fagioli

  

  Cancer sucks. All variants of the scourge are terrible, but for women breast cancer is one of the worst.

  Luckily, there are many resources being focused on curing and treating cancer. Today, Samsung announces a partnership with the American Cancer Society, and a company called Breezie, to support a pilot aimed at fighting breast cancer with specialized Android tablets. This pilot, called MyJourney Compass, will provide focused and relevant information to individual breast cancer patients.

  "Samsung's Galaxy Tab devices and KNOX security platform are essential to ensuring that patients are confident about the ease of use and the security of their personal data. The American Cancer Society's curated and easily distributable custom content will share information about treatment options, updates from an online support group, and news about the latest clinical trials on a highly personalized basis. Breast cancer patients will now have access to all of the information they need to improve their health and achieve better outcomes", says Samsung.

  Chuck Westbrook, Senior Vice President, Cancer Control Programs and Services for the American Cancer Society explains, "The American Cancer Society is excited to collaborate with Samsung and Breezie to improve the quality of life of breast cancer patients by providing easy access to educational tools and resources as they transition from diagnosis to treatment and through recovery. In addition to hospital resources, American Cancer Society content including treatment options, information on managing the physical and emotional side effects of cancer, and connections to local and online resources".

  

  Samsung shares the following patient benefits.

  • Patients in the pilot will have tailored information about their specific condition pushed out to them through the Breezie interface on their Samsung Galaxy Tab device.
  • Patients can monitor their long-term health and receive information on latest therapies and medical advances with just a few taps on their Samsung tablets.
  • Patients will be able to contact and collaborate with their medical team giving family members and caregivers the peace of mind knowing that their loved ones are getting the personalized care they need.
  • Patients will also have access to all apps available through the Android store using the Breezie interface

  This partnership is really heartwarming. What makes it particularly impressive, however, is seeing the Linux-based Android operating system being used to save lives. Many people simply view tablets as means for Facebook or games, but here is an example of it being used to benefit humanity. Awesome.

  What do you think of Samsung's efforts to fight breast cancer? Tell me in the comments.

  Image Credit: wavebreakmedia / Shutterstock

  
• 

  Canonical chooses Linux-friendly Dragonboard 410c as Ubuntu Core on ARM 64-bit reference

  Publié: février 24, 2016, 6:02pm CET par Brian Fagioli

  

  Linux is such a wonderful kernel for many reasons, but I find its adaptability to be the tops. You can get an operating system based on the kernel running on such a broad range of hardware -- something Microsoft can only dream about with its venerable Windows.

  Even though Linux can run on damn-near anything, it is beneficial for developers to have a reference platform to use for creating. Of course, they can always expand from that jumping point. Today, Canonical announces that the Dragonboard 410c hardware will be the reference platform for Ubuntu Core on ARM 64-bit.

  "This will be the very first ARM-based 64-bit development board and SoC available for Ubuntu Core, offering makers and Internet of Things (IoT) innovators an affordable, powerful yet flexible development environment, which can scale from ARM-based servers to embedded solutions. This offering builds on the DragonBoard 410c positioning as a standardised development board for the ARM ecosystem under the umbrella of Linaro’s open source 96Boards program", says Canonical.

  The company further says, "the Dragonboard 410c is the size of a credit card; originally designed to galvanise and inspire IoT developers and innovators by providing a high performance, affordable platform to form the basis of a host of scalable IoT solutions. This 'democratisation' of the business of IoT is designed to breathe life into great 'things' ideas that otherwise, without the proper funding, or access to technology, may never come to fruition. The 'c' in 410c stands for 'community' -- giving developers the tools to work on prototypes without the cost, and provide a smooth path to commercialization through production ready off-the-shelf or custom system-on-modules based on the Snapdragon 410 processor".

  Click to view slideshow.

  This developer board features the quad-core Snapdragon 410 ARM processor, clocked at 1.2 Ghz and 1GB of LPDDR3 RAM. It also has 8GB eMMC for storage and 4 USB ports. Owners can utilize microSD cards for expanding storage and the HDMI interface for connecting to a display.

  In addition to the upcoming (date to be determined) Ubuntu Core OS image, the Dragonboard 410c is also compatible with Android 5.1 and Windows 10 IoT, making this a very smart buy at only $75. If you want to buy this board in anticipation of Canonical's release, you can get it here.

  Will you buy it? Tell me in the comments.

  
• 

  Run a virtual Chromebook on your PC desktop

  Publié: février 24, 2016, 6:00pm CET par Mike Williams

  CloudReady is a custom version of Chromium OS which can transform your old PC into a sort-of Chromebook.

  You can run CloudReady standalone, dual boot with Windows in some situations, or use VirtualBox to run it in a window on your desktop.

  The initial download gets you the ChromeOS image only. If you’d like to install it on a PC, use the Chromebook Recovery Utility to write it to an empty 8 or 16GB USB key (beware, this wipes any other data on the device).

  Boot your target PC from the USB key and the installation program walks you through the setup process.

  If you’d rather use VirtualBox, the easiest approach is to convert the CloudReady image to a VDI disk file.

  VirtualBox’s VBoxManage.exe can handle this. It’s a console-based tool so you’ll need to open a command window, and enter something like the following, changing the paths as appropriate for your system:

  "c:\program files\oracle\virtualbox\VBoxManage.exe" convertfromraw "C:\Users\MyName\Downloads\cloudready-free-45.3.39.bin\chromiumos_image.bin" cloudready.vdi

  Create a new virtual machine, using the type "Other" and the version "Other/ Unknown".

  Assign 2GB RAM to the VM, more if you can spare it.

  At the "Hard Disk" screen select "Use an existing virtual hard disk file" and choose the disk you created earlier.

  Open the VM Settings dialog, click System > Motherboard and check "Enable I/O APIC" and "Enable EFI".

  Click the Processor tab and check "Enable PAE/NX". Increasing the number of processors is a good idea, too.

  For another performance boost, select Display > Screen, gave the system the full 128MB Video Memory and check "Enable 3D Acceleration".

  Boot the VM, a text line displaying the results of the memory test should appear immediately, with the installer popping up next. Follow its instructions and you’ll be ready to go in a couple of minutes.

  The end results have a few issues, like our time being wrong because location services don’t work and the system couldn’t assign our time zone automatically (we just set it manually instead).

  But for the most part CloudReady worked exactly as advertised, using our existing network, logging into Google, syncing our settings, and generally giving us the Chromebook-ish experience we were looking for.

  CloudReady is a free-for-personal-use product. An educator’s edition with Google Management Console enrollment and full technical support costs from $59 per device for a perpetual license.

  
• 

  CrowdStrike improves ability to combat breaches

  Publié: février 24, 2016, 5:13pm CET par Ian Barker

  

  Effective cyber security is all about seeing threats and being able to respond to them quickly and effectively. Increasingly this means using the cloud to deliver intelligence.

  CrowdStrike, a specialist in cloud-delivered protection, is launching a new version of its Falcon platform to deliver endpoint, detection and response functions along with advanced antivirus capabilities.

  CrowdStrike's fully cloud-based Threat Graph model analyzes and correlates billions of events in real-time, spots anomalies, and detects behavioral patterns to track and stop both known and unknown threats. This model allows Falcon Host to act like a 'DVR,' providing retrospective visibility and unlimited cloud-recall capabilities. This forensic capacity helps cut the time and cost of incident response, while increasing the chances of containing and mitigating damage by allowing customers to search and query all endpoints in seconds.

  Extension of the platform's APIs means customers can integrate existing third party intelligence and so don't waste their current security investments. Falcon Connector can also transmit Threat Graph information to a customer's preferred SIEM system.

  There's a new ransomware blocking feature too, and added protection for Linux systems with Linux-specific behavioral defenses based on indicators of attack.

  "Our enhancements of CrowdStrike's Falcon Platform reflect our core customer value for redefining next generation endpoint protection to stop breaches," says Dave Cole, CrowdStrike's chief product officer. "Continuing to advance IoA-based prevention with ransomware exploit blocking and machine learning capability are just a couple of the new features that we are announcing today. Expanding CrowdStrike Falcon’s sensor coverage to Linux platforms, combined with our established support for Windows and Mac, is another significant market-leading accomplishment that allows us to provide protection across all mainstream endpoint operating systems. We are committed to continuing to build new innovative capabilities to change the game in endpoint security and ensure that CrowdStrike customers are able to protect themselves against all threats, known and unknown, in the most effective and efficient manner possible".

  You can find out more about the latest release on the CrowdStrike website.

  Image Credit: Balefire / Shutterstock

  
• 

  Xiaomi announces Mi 4s, an updated version of its former flagship

  Publié: février 24, 2016, 5:04pm CET par Mihăiță Bamburic

  

  On top of unveiling its new Mi 5 flagship, at MWC 2016 Xiaomi has also announced an updated version of its previous top-of-the-line smartphone, Mi 4. Called Mi 4s, the new handset comes with an improved design, up to date hardware and, best of all, a price tag of around $260.

  Mi 4s utilizes the same processor as found in the more affordable Mi 4c, which I have reviewed here, namely a Qualcomm Snapdragon 808. That makes it significantly faster than Mi 4, but less impressive in this regard than the new Mi 5, which sports a top of the line Snapdragon 820 chip.

  As with its predecessor and other devices in the Mi 4 line, Mi 4s ships with a 5-inch display with a resolution of 1,080 by 1,920. It is paired with 3 GB of RAM and a 3,260 mAh battery. Storage capacity is 64 GB, and there is also a microSD card slot.

  Mi 4s has a fingerprint sensor, a feature that only Mi 5 and Redmi Note 3 have in Xiaomi's lineup. The sensor is found on the back, just like on Redmi Note 3; Mi 5 has it on the front, embedded in the home button.

  Mi 4s ships with a 13 MP camera on the rear with phase-detection autofocus. There is no information on the front shooter, however. But it is likely that it is on par with other devices in the Mi 4 line.

  The microSD card slot actually doubles as a SIM card slot so, if you do not need extra storage, you can slap two SIM cards in Mi 4s. It is an approach that we have seen before with other devices.

  Here are other things that you should know. There is support for 4G LTE+, which Xiaomi says that it enables download speeds of up to 600 Mbps, and USB Type-C. It runs Xiaomi's MIUI skin, atop of Android (presumably, Marshmallow). It comes in at 139.26 x 70.76 x 7.8 mm and 133 g.

  Xiaomi is likely to sell Mi 4s outside of China, but there is no information yet on international availability. Color options include black, gold, pink and white.

  
• 

  Identifying users with behavioral biometrics

  Publié: février 24, 2016, 4:22pm CET par Ian Barker

  

  As we're regularly being told, passwords on their own are no longer sufficient to ensure our security. Businesses are therefore on the lookout for new ways to identify users without making the sign in process overly complicated.

  Adaptive authentication specialist SecureAuth is launching the latest version of its product that includes behavioral biometrics, a new risk analysis technology that performs keystroke analysis and mouse movement analysis to determine a user's legitimacy and build a completely unique behavior-based profile on each user device.

  These profiles are compared to subsequent login attempts and if they don't match, SecureAuth IdP v9.0 will ask for multi-factor authentication (MFA) for that login to proceed. SecureAuth is the first identity management vendor to offer this capability as part of a comprehensive risk-based authentication process.

  "Think of SecureAuth IdP as a bullet proof vest," says Craig Lund, SecureAuth's CEO. "It has multiple layers of protection, which creates a strong bulwark against cyber attacks. It’s harder to break through multiple layers of authentication compared to just one. In this case, one of those layers is created by behavioral biometric technology, which is unique in that it is influenced by social and psychological attributes. This makes it nearly impossible to copy or imitate somebody else’s behavior when using a device".

  As well as using behavioral biometric technology to determine risk, SecureAuth IdP also uses device recognition, IP reputation, directory lookup, geo-location and geo-velocity. Features include a tailored login process so that organizations can adjust security requirements for different groups of users.

  IdP only requires multifactor authentication when it detects that risk factors are present -- such as a mismatched behavioral profile. It offers more than 20 authentication methods ranging from SMS, telephony, and e-mail one-time passwords to push notifications, so an appropriate method can be matched with each use.

  SecureAuth IdP will be on display at the RSA Conference in San Francisco next week or you can learn more on the company's website.

  Photo Credit: JMiks/Shutterstock

  
• 

  New platform improves efficiency of security operations

  Publié: février 24, 2016, 3:55pm CET par Ian Barker

  

  Security teams often have to spend a lot of their time investigating incidents, which is time consuming and can distract from other tasks.

  To improve the efficiency of security operations centers (SOCs), Israel-based SECDO is launching a new platform aimed at managed security service providers (MSSPs).

  It provides advanced alert validation, investigation and remediation capabilities. The platform dramatically improves the efficiency of the SOC by automatically validating alerts from security event and information management (SIEM) systems, using unique thread-level endpoint activity data to identify false positives and prioritize true positives. Using SECDO, MSSPs will be able to handle the thousands of alerts that they receive each day, while meeting ever-more competitive SLAs for their customers.

  "SECDO is a valuable platform for MSSPs who want to offer their customers advanced services while improving the efficiency and response times of their own SOC," says Shai Morag, CEO and Co-Founder of SECDO. "With SECDO's endpoint analytics, MSSP SOC teams can now understand the full context of every alert, visually investigate, and reduce the time and resources needed to identify and eradicate a breach".

  The platform’s interactive data visualization technology enables SOC analysts to understand the 'who, what, where, when, and how' of every incident by showing the entire attack chain timeline back to the root cause. This enables first and second tier analysts to easily investigate and respond to threats without having to escalate to the next level. When an in-depth investigation is required, SECDO provides multi-dimensional, interactive search capabilities that can reduce hundreds of manual queries into a single visual search.

  It uses SECDO's disruptive thread-level endpoint intelligence and causality analysis technologies to give service providers visibility into their customer’s environment. This allows MSSPs to offer the advanced threat protection, incident investigation and forensics services that are necessary to stay ahead in the security marketplace.

  The platform has been in use for three months, with customers reporting positive results, you can find out more and request a demo on the SECDO website.

  Photo credit: Alex Mit / Shutterstock

  
• 

  Enterprises have no protection against mobile malware

  Publié: février 24, 2016, 3:20pm CET par Sam Pudwell

  

  Mobile enterprise security firm MobileIron has released its Q4 2015 Mobile Security and Risk Review, discussing the threats and risks that enterprises face in their mobile deployments.

  The report reveals the worrying find that more than 50 percent of enterprises have at least one non-compliant device, creating a broader attack surface for malware and data theft.

  "Mobile threats, both internal and external, are on the rise and the enterprise security chain is only as strong as its weakest link", said Michael Raggo, director, MobileIron Security Labs. "A single, compromised device can introduce malware into the corporate network or enable the theft of sensitive corporate data that resides behind the firewall".

  "The real risk is that enterprises will underestimate the seriousness of the problem", Raggo continued. "A single compromised device that goes undetected constitutes a breach. Whether a company loses millions of records or just one record it’s still a breach. For all companies, but particularly ones in highly regulated industries, this is a huge problem".

  The incidence of compromised devices -- i.e. a jailbroken or rooted device -- rose significantly during the quarter by 42 percent and less than 10 percent of enterprises are enforcing patching, thus leaving the device vulnerable to data loss.

  Other key findings are that a massive 95 percent of enterprises have no protection against mobile malware and 22 percent had users who had removed the PIN from their mobile device which eliminates the first line of defense.

  Published under license from ITProPortal.com, a Net Communities Ltd Publication. All rights reserved.

  Photo credit: LoveFreedom / Shutterstock

  
• 

  Like! Facebook Reactions launch around the world

  Publié: février 24, 2016, 2:55pm CET par Mark Wilson

  

  Facebook is, at long, long last, rolling out Reactions globally. The limitations of the famous Like button which have been debated since its introduction are set to become a thing of the past at the social network. Like is now joined by Love, Haha, Wow, Sad, and Angry options.

  As we reported earlier in the year, the 'yay' option that had been tested is not being released at this stage -- apparently users found it difficult to interpret what it means. Reactions do not work exactly as you might expect them to, and this means you might need to be careful about how you use them to start with.

  For sometime now, Facebook has taken a Like as an indication that you would like to see more of the same type of content. You might think that if you used the Angry reaction on a story Facebook would take this to mean you did not want to see such posts -- but you'd be wrong. To start with, using any of the Reactions will be taken as an indication of wanting to see more of the same as Facebook explains:

  In the beginning, it won’t matter if someone likes, "wows" or "sads" a post -- we will initially use any Reaction similar to a Like to infer that you want to see more of that type of content. Over time we hope to learn how the different Reactions should be weighted differently by News Feed to do a better job of showing everyone the stories they most want to see.

  Page owners will be able to see the different reactions to posts, so this could still impact on the type of content individuals and companies put out there.

  Using Reactions is simple, whether you're using the desktop or mobile version of Facebook:

  To add a reaction, hold down the Like button on mobile or hover over the Like button on desktop to see the reaction image options, then tap either Like, Love, Haha, Wow, Sad or Angry.

  
• 

  Xiaomi's new Mi 5 offers flagship hardware at an affordable price

  Publié: février 24, 2016, 1:09pm CET par Mihăiță Bamburic

  

  Xiaomi is once again proving that you do not need to spend a lot of money to get your hands on a flagship smartphone. Its new Mi 5, which is the successor to the popular Mi 4, offers top of the line hardware for just over $300.

  Mi 5 offers just about anything you could want in a flagship smartphone. It makes you wonder whether it is worth ponying up for a similar device from LG or Samsung, which costs at least twice as much.

  The only place where Mi 5 falls short compared to the competition is in the display department. Its 5.15-inch screen has a resolution of "just" 1,080 by 1,920, which is not as impressive as the 1,440 by 2,560 resolution that some of its rivals have.

  That, however, might work in its favor, because typically higher-resolution displays come with a performance penalty, in terms of both battery life and graphics performance. Most people may not notice the difference in pixel density, but they will most certainly appreciate a few more hours of battery life, for instance.

  Inside, there is a 1.8 GHz or 2.15 GHz Qualcomm Snapdragon 820 processor paired with 3 GB or 4 GB of RAM, depending on the configuration. The base model, which costs around $306, ships with the lower specs, but the mid-range and high-end Mi 5 versions get paired with the faster processor and most RAM. Powering it all is a 3,000 mAh battery, which supports Qualcomm's Quick Charge 3.0 technology.

  The mid-range version offers 64 GB of internal storage and costs around $351, while the top of the line model has 128 GB of internal storage and can be had for around $458. The larger difference in price likely comes from the choice of back cover, which in the latter case is ceramic as opposed to glass.

  In the imaging department, Mi 5 offers a 16 MP camera on the back with four-axis image stabilization and phase-detection autofocus. There is support for 4K video, of course. On the front, it has a 4 MP shooter.

  Xiaomi points out that there is NFC on board, as well as UFS 2.0 storage, 4G LTE+ cellular connectivity, which enables speeds of up to 600 Mbps, VoLTE, and a fingerprint sensor, which is embedded in the home button under the screen. On top of this, there is also a microSD card slot. It comes in at 144.55 x 69.2 x 7.25 mm and 129 g.

  Mi 5 runs Xiaomi's MIUI skin, atop of Android 6.0 Marshmallow. If you are not familiar with Xiaomi's interpretation of Android, it is a bit over the top overall as it tries to be closer to how iOS looks and works. That is probably the only thing that will be polarizing about Mi 5.

  Xiaomi will offer Mi 5 in China first, but there is a very good chance that it will be made available in other markets as well, if its predecessor's availability is of any indication.

  
• 

  85 percent of enterprises keep sensitive data in the cloud

  Publié: février 24, 2016, 12:51pm CET par Ian Barker

  

  According to a new report by enterprise security specialist Vormetric, 85 percent of senior IT security executives worldwide say they are using sensitive data in the cloud, up from 54 percent last year.

  But even as they move to adopt cloud services, and in some cases believe that cloud environments are more secure than their local IT infrastructure, enterprises remain concerned about the security of their information.

  When respondents are asked about the top data security concerns for cloud services, 70 percent (75 percent in the US) name security breaches or attacks at the service provider. 66 percent cite increased vulnerabilities from shared infrastructure, 66 percent say lack of control over the location of data, and 65 percent select lack of a data privacy policy or privacy service level agreement.

  When asked about changes that would increase their willingness to adopt cloud services, 48 percent asked for encryption of data with enterprise key control on their premises. 36 percent wanted detailed physical and IT security implementation information, 35 percent selected encryption of their organization's data within the service provider's infrastructure, and 27 percent also wanted exposure of security monitoring data for their information.

  "Security is still an afterthought when it comes to adopting new technologies, often taking a back seat amidst the rush to stake a claim in a promising new market," says Garrett Bekker, senior analyst, information security, at 451 Research and the author of the report. "We found that enterprises are storing sensitive data in just these types of environments -- 85 percent in cloud, 50 percent in big data, and 33 percent in IoT. Many have strong concerns about the security of their data as a result".

  With half of all respondents planning to store sensitive information within big data environments (up from 31 percent on last year), these become a much greater concern for enterprises as a possible point of compromise, and as a focus for compliance efforts. The biggest worries are the Security of the reports produced -- as they may include sensitive data, named by 42 percent of respondents, and that sensitive information may reside anywhere within the environment (41 percent).

  The IoT raises similar concerns over the protection of sensitive data and privacy issues. Plus the overlap of IoT with big data has the potential to create a new class of risks.

  You can find more information in the full report which is available to download from the Vormetric website.

  Photo Credit: Jirsak/Shutterstock

  
• 

  Big Brother ist vatching you: Germany poised to use Trojans to spy on internet users

  Publié: février 24, 2016, 12:37pm CET par Mark Wilson

  

  German intelligence agencies are set to gain greater NSA-style surveillance powers after the German Interior Ministry announced plans to use Trojans to spy on the internet activities of suspects. Known as Bundestrojaner, the Trojan would give the government the ability to not only track which sites a target visits, but also record conversations, make use of webcams, access data and log keystrokes.

  The Trojan has been in testing since late last year, and having received governmental approval could now be widely dispatched. Widely described as malware and spyware, the tool cannot be used without a court order, but this will do little to assuage the fears of privacy groups.

  A spokesperson for the Interior Ministry said that "we now have the skills in an area where we did not have this kind of skill". A 2008 ruling by the German Constitutional Court said that remotely accessing citizens' computer is only permissible when there is suspicion of plans to commit crime against the state, or when there is a life-threatening situation.

  The announcement comes after the German government took part in European IT security talks at which Federal Minister of the Interior Thomas de Maizière said:

  I support the EU in its efforts to make rules for the Member States to ensure IT security. Our common goal must be to increase the level of IT security throughout the EU, on the basis of decisive national action. With its draft IT Security Act, the Federal Government has presented a number of specific measures to increase IT security in Germany. We have made similar proposals in the ongoing discussion of an EU directive on measures to ensure a high common level of network and information security in the Union. My impression is that the German position is also understood at European level. Germany has thus taken a leading role in an area that will become increasingly important at a time when digital vulnerability is growing.

  As is to be expected, the announcement has met with a great deal of opposition, including from the country's Green party. Konstantin von Notz, deputy head of the party, said:

  We do understand the needs of security officials, but still, in a country under the rule of law, the means don't justify the end.

  It is not yet clear how the German government would deploy the spying software, but this is not the first time this has been attempted. Back in 2011 the hacking group Chaos Computer Club discovered a government-made Trojan in circulation, but this was far more limited in its capabilities. The latest version is created by a company called FinFisher Gamma-International which has a history of creating surveillance and spying tools for European and Middle Eastern governments.

  Photo credit: Mardre / Shutterstock

  
• 

  Eat up! Google Maps 'Explore Around You' comes to 5 more countries

  Publié: février 24, 2016, 12:24pm CET par Alan Buckingham

  

  One of the great things about travel is the food you get to try, authentic dishes that can sometimes only be found in certain locations. If you aren't picky about new things then you just may find something to satisfy your culinary dreams, perhaps a dish you've never heard of.

  Google Maps has been guiding users to restaurants in both the US and UK for a while now, using a feature called "Explore Around You". Now the search giant is bringing this to more nations so both locals and travelers can find a location to satisfy their appetites.

  Countries being added include Japan, France, Italy, Spain and Germany. Google promises that "whether you’re a tourist looking for a top-rated dinner spot or a local trying to find a new neighborhood watering hole, Google Maps can help you make a delicious, timely discovery while you’re on the go".

  On Google Maps you can tap the "Explore Around You" icon to find out where you can head, regardless if it's a quick bite or a five course meal.

  "Options are organized by category, and once you pick the one that catches your eye (and stomach), you can easily swipe through photos and check out ratings and reviews from Google and previous diners", Google announces.

  There is one catch -- you'll have to be using an Android phone to take advantage of this feature. If you meet that requirement then get started on your next trip or find something you may have missed around your own home.

  
• 

  New platform enables real-time in-app support

  Publié: février 24, 2016, 11:55am CET par Ian Barker

  

  The pace of modern app development often means that support can be something of an afterthought. New startup RevTwo is launching a platform that allows support to be built in to any app on any device.

  The RevTwo In-App Support Platform modernizes the in-app support model by enabling users to connect with app evangelists and users from across the world for real-time support.

  Typically, when app users encounter an issue they can't solve, they are forced to leave the app, search online, trawl through message boards and hope that someone else encountered the same problem. RevTwo flips that model on its head, enabling people to connect with other users, in-app, with the push of a button.

  "Our in-app, community-based support will completely transform the user experience," says Jim Hansen, co-founder and chief technology officer of RevTwo. "From a teacher in Alabama helping a student in California solve a math problem to a professional gamer in Japan providing tips and tricks to a player in Holland, for the first time ever, users can get the help they need from their peers without ever leaving their apps".

  As well as the community model, the RevTwo platform provides universal support at all stages of the app lifecycle. It includes free tools for developer support throughout testing that provide insight into problems at the software level -- preventing issues before production. In-app professional help desk support services are also available to connect users to a help desk within the app through audio, video and screen share, driving faster problem resolution.

  To see inside an app, a developer simply bundles the RevTwo library into any iOS-based app (Android support on the way). Following the integration the app can open support sessions, initiate and respond to voice calls and interact with diagnostic tools like screen sharing, logging, database inspector and file browser.

  Developers can use RevTwo for free with developer support through testing and community support for production. To discover more visit the company's website.

  Image Credit: Rido / Shutterstock

  
• 

  How to stop Microsoft using your Windows 10 lock screen to show ads

  Publié: février 24, 2016, 11:17am CET par Mark Wilson

  

  Sometimes it can feel as though I'm just looking for things to dislike about Windows 10, but just as I'm warming to the operating system a little more (in the last week I went as far as starting to write an article about how my opinion of Windows 10 had changed for the better. It remains unfinished), something else comes along to irritate me. I know I'm not alone, and the most recent annoyance is the appearance of ads on the lock screen.

  You're probably more used to the idea of the lock screen being home to either a photo of your choice, or a randomly selected image from Microsoft that changes from time to time. Recently however, some users have noticed that these images have been replaced with ads for the game Rise of the Tomb Raider. If you want to ditch the lock screen ads, here's how to do it

  You may never have looked at the settings for your lock screen, but it defaults to Windows Spotlight mode. This give Microsoft permission to adorn your screen with images it thinks you might like as well as, sadly, ads. Thankfully, changing the option is a fairly simple affair.

  1. Start by opening up Settings and then head to the Personalization section.
  2. Click the Lock screen link to the left.
  3. From the Background drop down menu, select with Picture or Slideshow and then select the image or folder you'd like to use instead of Microsoft's choices.

  That's not the end of the story, however. Having opted to use your own imagery on your lock screen, there's a new option that you'll need to disable. The previously-hidden setting "Get fun facts, tips, tricks, and more on your lock screen" needs to be flipped to the Off position to prevent the appearance of anything else you might not be interested in seeing.

  Photo credit: Maryna Stamatova / Shutterstock

  
• 

  Google working with carriers to replace SMS

  Publié: février 24, 2016, 10:50am CET par Anthony Spadafora

  

  In an effort to modernize SMS messaging, Google and a number of mobile service providers are working together to expedite the release and adoption of Rich Communication Services (RCS).

  The company will be joined by the wireless standards group GSMA along with many global and regional carriers including America Movil, Bharti Airtel Ltd, Deutsche Telekom, Globe Telecom, Millicom, Orange, Sprint, Telenor Group, TeliaSonera, Telstra, Turkcell and Vodafone.

  RCS is a continuing program that was developed by the GSMA to create a new cross-operator messaging platform that functions similar to way SMS does. This new communication service would incorporate many of the features -- such as file sharing, IP voice calls, and group messaging -- that drove users away from SMS and towards Internet based messaging platforms such as iMessage, Skype, Facebook Messenger, WhatsApp, and Telegram.

  In recent years, many users have shunned SMS messaging in favor of these new messaging platforms. As a result, SMS has lost the popularity it once had while WhatsApp and Facebook Messenger have grown their user bases significantly.

  WhatsApp now has one billion monthly active users and Facebook Messenger is quite close to reaching that number as well.

  Google has taken note of how its Android users have moved away from SMS and it understands the importance messaging platforms have to its users. This is why the company recently acquired the startup Jibe Mobile, which works to help mobile operators include support for a number of messaging features into their services.

  Google will making the Jibe platform available to mobile operators to allow them to easily support RCS without having to develop their own infrastructure.

  Android and its users could stand to benefit from the new messaging options that RCS will allow across carriers while at the same time Google will put itself in a better position to compete with Facebook, which currently owns and operates both Messenger and WhatsApp.

  Published under license from ITProPortal.com, a Net Communities Ltd Publication. All rights reserved.

  Photo credit: Ken Wolter / Shutterstock

  
• 

  SanDisk announces 'world's fastest' Extreme PRO microSDXC UHS-II card

  Publié: février 24, 2016, 2:19am CET par Brian Fagioli

  

  When it comes to microSD cards, they are plenty small enough. We are at a point where making storage cards any smaller would be downright ridiculous -- they are too easily lost as-is. With that said, how can companies continue to push the envelope? Speed.

  SanDisk is one of the leaders for storage like cards and flash drives; its cards are reliable and fast. Quite frankly, I only trust my photos to its cards, but I digress. The company is making its microSD lineup even better, with the all new Extreme PRO microSDXC UHS-II, which it claims is the world's fastest such card.

  "The new card, available in 64GB and 128GB capacities, delivers transfer speeds of up to 275MB/s to offload high-quality content at record speeds. Featuring Class 10 and UHS Speed Class 3 (U3), the SanDisk Extreme PRO microSDXC UHS-II card is perfect for capturing Full HD and 4K Ultra HD video on the latest action cams, drones and smartphones. It also includes a USB 3.0 card reader to conveniently offload files to a PC", says SanDisk.

  Dinesh Bahal, vice president, product marketing, SanDisk explains, "action cameras are now the fastest-growing segment in digital imaging and drones are becoming increasingly popular, creating an opportunity for people to capture more high-capacity, high-quality 4K Ultra HD content. We designed this card specifically to address consumers’ needs for a faster solution when transferring massive files – and now, with nearly 3x the speed of our fastest microSD UHS-I card, this new offering dramatically reduces time spent transferring content".

  SanDisk shares the following specs.

  Capacity	128 GB	64 GB
  Read Speed	up to 275MB/s	up to 275MB/s
  Write Speed	up to 100MB/s	up to 100MB/s
  Form Factor	microSDXC	microSDXC
  Video Speed	Class 10 (C10) and UHS Speed Class 3 (U3)	Class 10 (C10) and UHS Speed Class 3 (U3)
  SD Adapter	Includes USB 3.0 Reader	Includes USB 3.0 Reader

  If you want to buy this cutting-edge technology, you had better be prepared to dig deep into your pockets, y'all. The 64GB card is $180, while the 128GB variant is a shocking $300 -- hey, at least a USB card reader is included!

  Of course, early adopters always pay a premium -- prices should come down on these cards over time, and in turn, previous generation cards should see a drop too. If you are ready to part with your cash, you won't have to wait too long, as SanDisk promises a Q216 release.

  
• 

  You'll have two chances to buy a $5 Raspberry Pi Zero on Wednesday

  Publié: février 24, 2016, 12:49am CET par Wayne Williams

  

  The Raspberry Pi Foundation’s $5 barebones computer remains ever-elusive for many would be buyers. Almost as quickly as the device goes back in stock it sells out again.

  On Wednesday 24 February, The Pi Hut is going to start selling a fresh batch of Pi Zero stock, and you’ll have not one, but two chances to get your hands on the desirable little piece of kit.

  The Pi Hut launched a poll on Twitter to find out when followers would like the stock to be made available, and the result was so close the company has decided to go for a "double launch".

  There will be two batches up for sale. 50 percent of the stock will be made available at 9.00am GMT/4.00am EST/1.00am PST, and the remaining 50 percent will be up for grabs later the same day at 7.00pm GMT/2.00pm EST/11.00am PST.

  As always, despite a one Pi Zero per customer limit, demand is sure to quickly outstrip supply so you might want to turn up early.

  If you manage to get a Pi Zero there’s a chance it will go out of stock before you get to the checkout. If that happens, The Pi Hut recommends hitting the F5 key which will refresh the page and might result in you getting stock allocated to you. Well, it’s worth a try.

  If all else fails, you can always use this trick to find where else the Pi Zero might be in stock.