Microsoft has been targeting Mac users with its Surface commercials recently, and it appears they might be paying off. From a report on The Verge: The software giant claims that November was the "best month ever for consumer Surface sales," following a number of Black Friday deals on the Surface Pro 4. Microsoft still isn't providing sales numbers, but the company claims "more people are switching from Macs to Surface than ever before." Microsoft cites "the disappointment of the new MacBook Pro" and its trade-in program for MacBooks for tempting people to switch to Surface. Again, Microsoft refuses to provide numbers but vaguely claims "our trade-in program for MacBooks was our best ever."

And "he's got several billionaire pals on board." An anonymous reader quotes Fortune: Nearly two dozen of the world's most successful business leaders, entrepreneurs, and venture capitalists will invest up to $1 billion in a fund led by Microsoft-co-founder Bill Gates that aims to reduce greenhouse gas emissions to almost zero by financing emerging clean energy technology. The Breakthrough Energy Ventures Fund includes John Doerr, chairman of venture firm Kleiner Perkins Caufield & Byers, Alibaba founder Jack Ma, Khosla Ventures founder Vinod Khosla, former energy hedge fund manager John Arnold, Amazon founder and CEO Jeff Bezos, and SAP co-founder Hasso Plattner...

The new fund, which will have a 20-year lifespan, is designed to be both broad and scientific -- two seemingly contradictory focuses -- in its investment approach. The fund will not be confined to a specific segment of the investment pipeline, which means it will put money into startups at the earliest of stages all the way to companies that have reached commercialization.
Gates said Sunday that "Our goal is to build companies that will help deliver the next generation of reliable, affordable, and emissions-free energy to the world."

An anonymous reader quotes Recode: Technology that replaces food service workers is already here. Sushi restaurants have been using machines to roll rice in nori for years, an otherwise monotonous and time-consuming task. The company Suzuka has robots that help assemble thousands of pieces of sushi an hour. In Mountain View, California, the startup Zume is trying to disrupt pizza with a pie-making machine. In Shanghai, there's a robot that makes ramen, and some cruise ships now mix drinks with bartending machines.

More directly to the heart of American fast-food cuisine, Momentum Machines, a restaurant concept with a robot that can supposedly flip hundreds of burgers an hour, applied for a building permit in San Francisco and started listing job openings this January, reported Eater. Then there's Eatsa, the automat restaurant where no human interaction is necessary, which has locations popping up across California.

"By convincing a user to visit a specially crafted web site, a remote attacker may execute arbitrary commands with root privileges on affected routers," warns a new vulnerability notice from Carnegie Mellon University's CERT. Slashdot reader chicksdaddy quotes Security Ledger's story about certain models of Netgear's routers: Firmware version 1.0.7.2_1.1.93 (and possibly earlier) for the R7000 and version 1.0.1.6_1.0.4 (and possibly earlier) for the R6400 are known to contain the arbitrary command injection vulnerability. CERT cited "community reports" that indicate the R8000, firmware version 1.0.3.4_1.1.2, is also vulnerable... The flaw was found in new firmware that runs the Netgear R7000 and R6400 routers. Other models and firmware versions may also be affected, including the R8000 router, CMU CERT warned.

With no work around to the flaw, CERT recommended that Netgear customers disable their wifi router until a software patch from the company that addressed the hole was available... A search of the public internet using the Shodan search engine finds around 8,000 R6450 and R7000 devices that can be reached directly from the Internet and that would be vulnerable to takeover attacks. The vast majority of those are located in the United States.
Proof-of-concept exploit code was released by a Twitter user who, according to the article, said "he informed Netgear of the flaw more than four months ago, but did not hear back from the company since then."

"[A]fter a particularly critical report earlier this week, the notoriously secretive company appears to be in damage control mode," writes Mashable. An anonymous reader summarizes their report: Thursday a reporter "highlighted the company's first promotional video as more Weta Workshop special effects than a direct example of Magic Leap technology," and announced on Reddit that "employees in the company were concerned about [the first video] being misleading to the public" -- which apparently provoked a response Friday from the company's CEO.

"The message at first appears to be a simple status update, but then Abovitz gets more specific, indicating that the blog post is almost certainly an indirect response to the previous day's critical story. 'The units we are building now are for engineering and manufacturing verification/validation testing, early reliability/quality testing, production line speed, and a bunch of other important parameters. There is also a lot more going in our development of software, applications, cool creative experiences and overall operational readiness. Stay tuned -- the fun is just beginning.'"
Mashable adds that when reached for a comment, "the company gave a similarly short 'stay tuned' message, hinting that something may finally be about to be revealed. Or not... [W]ith billions on the line, it's beginning to look like the secretive, NDA-fueled, hype-framed honeymoon is over."

An anonymous reader quotes CNN Money: Apple's latest deal in China doesn't have anything to do with smartphones. The tech giant is investing in the Chinese wind power industry, turning to the world's most populous country to help it achieve its goal of getting 100% of its energy from renewable sources. The iPhone maker struck a deal this week to buy a 30% stake in three subsidiaries of Goldwind, China's biggest wind-turbine manufacturer... it's Apple's largest clean energy project to date and the first of its kind in the wind power sector, Lisa Jackson, vice president of Apple's environment initiatives, told state-run newspaper China Daily...

Environmental group Greenpeace has warned that electronics manufacturing uses a lot of energy in China, drawing on the country's high number of polluting coal power stations. Apple's moves into renewable energy are an attempt to compensate for this... The new wind project will add 285 megawatts of clean energy to China's grid, which Apple says will offset some of the other sources used by its operations and those of its immediate suppliers Foxconn, Lens, Catcher and Solvay.

An anonymous reader quotes a report from Space.com: For several decades now, scientists from around the world have been pursuing a ridiculously ambitious goal: They hope to develop a nuclear fusion reactor that would generate energy in the same manner as the sun and other stars, but down here on Earth. Incorporated into terrestrial power plants, this "star in a jar" technology would essentially provide Earth with limitless clean energy, forever. And according to new reports out of Europe this week, we just took another big step toward making it happen. In a study published in the latest edition of the journal Nature Communications, researchers confirmed that Germany's Wendelstein 7-X (W7-X) fusion energy device is on track and working as planned. The space-age system, known as a stellerator, generated its first batch of hydrogen plasma when it was first fired up earlier this year. The new tests basically give scientists the green light to proceed to the next stage of the process. It works like this: Unlike a traditional fission reactor, which splits atoms of heavy elements to generate energy, a fusion reactor works by fusing the nuclei of lighter atoms into heavier atoms. The process releases massive amounts of energy and produces no radioactive waste. The "fuel" used in a fusion reactor is simple hydrogen, which can be extracted from water. The W7-X device confines the plasma within magnetic fields generated by superconducting coils cooled down to near absolute zero. The plasma -- at temperatures upwards of 80 million degrees Celsius -- never comes into contact with the walls of the containment chamber. Neat trick, that. David Gates, principal research physicist for the advanced projects division of PPPL, leads the agency's collaborative efforts in regard to the W7-X project. In an email exchange from his offices at Princeton, Gates said the latest tests verify that the W7-X magnetic "cage" is working as planned. "This lays the groundwork for the exciting high-performance plasma operations expected in the near future," Gates said.

Bose has launched a new pair of earbuds called Hearphones that augment the sounds of the world around you, letting you select what kinds of outside noises you'd like to listen to. "Hearphones users can also pick which direction those outside noises come from, with what appears to be specific emphasis on helping people hear voices better in crowded places," reports The Verge: A "Bose Hear" app was recently added to the App Store, and offers a little more detail about what Hearphones are capable of. You can turn the "world volume" up or down, and change the direction you're hearing those sounds from. There are preset modes like "television," "focused conversation," "airplane," "doctor's office," or "gym," all of which presumably block out different sounds from different directions while letting in things like speech. A user manual was also recently submitted to the FCC. No pricing or availability can be found anywhere on Bose's website or in the app. Here's some more from that app's description: "Innovative technologies amplify softer sounds, let you turn down the distractions in noisy environments and focus on what you want to hear -- like a conversation across the table. You can also use them as controllable noise cancelling [sic] wireless headphones for your music or calls or just for quiet. Take control of the noise, and hear the world better."

Samsung confirmed on Friday that it will indeed release an update to Galaxy Note7 smartphones in the United States to "prevent US Galaxy Note7 devices from charging and will eliminate their ability to work as mobile devices." In a new wrinkle to this whole situation, Verizon said today it will not be releasing Samsung's software update to Galaxy Note7 users on Verizon network. In a blog post, Verizon said: "Verizon will not be taking part in this update because of the added risk this could pose to Galaxy Note 7 users that do not have another device to switch to. We will not push a software upgrade that will eliminate the ability for the Note 7 to work as a mobile device in the heart of the holiday travel season. We do not want to make it impossible to contact family, first responders or medical professionals in an emergency situation." To recall, the Galaxy Note7 remains banned on airlines by the FAA and has also been prohibited from being used on many other public transit services in the United States. Elsewhere in the world, similar bans have been imposed on the phone.

Those who are still clinging on to their Galaxy Note 7, even after Samsung recalled the devices due to faulty batteries in mid-September, may want to seriously reconsider returning them to the Korean company. The Verge has obtained an image of an alert that went out to at least one Note 7 owner on U.S. Cellular today stating that, "As of December 15th, Samsung will modify the software to prevent the Galaxy Note 7 from charging. The phone will no longer work." The Verge reports: It's not clear whether Note 7s will be disabled across the major U.S. carriers as well, but it seems likely that'll be the case. In the past, updates disabling Note 7 features have rolled out across Verizon, ATT, and other carriers within a matter of days. That's probably what'll happen here, as well. By preventing the phone from charging, Samsung takes the final step to making the phone entirely unusable. It's still offering Note 7 owners the ability to fully return the phone or exchange it for another Samsung device. As of November 4th, when Samsung last provided an update, 85 percent of Note 7s sold in the U.S. had been recovered. That still left around 285,000 phones unaccounted for. Completely disabling the phone seems to be Samsung's last-ditch effort to either recover the remaining devices or remove what risk they still pose to consumers.

Google today announced it will open up Home to third-party developers, allowing all developers to start bringing their applications and services to the Google Assistant. Developers can start building "conversation actions" for the Google Assistant, which "allows developers to create back-and-forth conversations with users through the Assistant," writes Frederic Lardinois via TechCrunch. "Users can simply start these conversations by using a phrase like 'OK Google, talk to Eliza.'" TechCrunch reports: While the Assistant also runs on the Pixel phones and inside the Allo chat app, Google says it plans to bring actions to these other "Assistant surfaces" in the future, but it's unclear when exactly this will happen. To help developers who want to build these new Conversation Actions get started, Google has teamed up with a number of partners, including API.AI, GupShup, DashBot and VoiceLabs, Assist, Notify.IO, Witlingo and Spoken Layer. Google has also allowed a small number of partners to enable their apps on Google Home already. These integrations will roll out as early as next week. Given that users will be able to invoke these new actions with a simple command (and without having to first enable a skill, like on Alexa), Google's platform looks to be a rather accessible and low-friction way for developers to get their voice-enabled services to users. Google will have the final say over which actions will be enabled on Google Home.

The Center for Digital Democracy has filed a complaint with the Federal Trade Commission warning of security and privacy holes associated with a pair of smart toys designed for children. Mashable reports: "This complaint concerns toys that spy," reads the complaint, which claims the Genesis Toys' My Friend Cayla and i-QUE Intelligent Robot can record and collect private conversations and offer no limitations on the collection and use of personal information. Both toys use voice recognition, internet connectivity and Bluetooth to engage with children in conversational manner and answer questions. The CDD claims they do all of this in wildly insecure and invasive ways. Both My Friend Cayla and i-QUE use Nuance Communications' voice-recognition platform to listen and respond to queries. On the Genesis Toy site, the manufacturer notes that while "most of Cayla's conversational features can be accessed offline," searching for information may require an internet connection. The promotional video for Cayla encourages children to "ask Cayla almost anything." The dolls work in concert with mobile apps. Some questions can be asked directly, but the toys maintain a constant Bluetooth connection to the dolls so they can also react to actions in the app and even appear to identify objects the child taps on on screen. While some of the questions children ask the dolls are apparently recorded and sent to Nuance's servers for parsing, it's unclear how much of the information is personal in nature. The Genesis Privacy Policy promises to anonymize information. The CDD also claims, however, that My Friend Cayla and i-Que employ Bluetooth in the least secure way possible. Instead of requiring a PIN code to complete pairing between the toy and a smartphone or iPad, "Cayla and i-Que do not employ... authentication mechanisms to establish a Bluetooth connection between the doll and a smartphone or tablet. The dolls do not implement any other security measure to prevent unauthorized Bluetooth pairing." Without a pairing notification on the toy or any authentication strategy, anyone with a Bluetooth device could connect to the toys' open Bluetooth networks, according to the complaint.

When Google launched Cloud Print, it removed a lot of the hassle from using a printer. Instead of a printer only printing documents from the PC it was connected to, Cloud Print allowed any device, be it a Windows PC, Mac, Chromebook, smartphone, tablet, etc. to print to any printer either locally or remotely. However, Google Cloud Print has gone awry this week, as reports PCMag, and Epson printer owners are suffering because of it. From the article: A thread appeared on the Chromebook Central Help Forum explaining a problem where an Epson XP-410$185.00 at Amazon printer was turning itself off after 30 seconds. The printer worked without issue for two years, but now it wouldn't stay powered on. At first, this seems like a printer hardware problem, but the printer started working again once it was disconnected from the Internet. However, as soon as Google Print Cloud was enabled, the automatic power down happened again. Later in the support thread an Epson WF-4630 owner reports the same issue, as do XP-215, XP-415, XP-610, WF-545, WF-845, and WF-7610 owners.A change in Google's API for its cloud service triggered the issue, reports ArsTechnica. The change has caused a conflict between Cloud Print and printers' firmware.

Update: Epson has responded to Slashdot, pointing us to its support page that has instructions on how to fix the issue on many of Epson printers.

Samsung may have big plans to overcome the whammy of its disastrous Galaxy Note7 this year. The company is reportedly planning to push the boundaries of design with the next flagship smartphone, dubbed the Galaxy S8. The smartphone, which was recently pegged to ship without a headphone jack, will have an "all-screen" design, Bloomberg is reporting. The report adds that there might not be a home button -- at least the way we know it -- and that any part of the lower display will serve as a fingerprint scanner. From the report: The bezel-less displays will provide more viewing real estate while a virtual home button will be buried in the glass in the lower section. Samsung needs the Galaxy S8 to be a hit after suffering through the Note 7 debacle that tarnished its brand, led to an embarrassing recall and may cost the company more than $6 billion. While Samsung is targeting a March release of the S8, that could be delayed until April, the people said. Samsung is adopting tougher testing procedures in the wake of the Note 7 debacle that could push back the launch by about a month, one of the people said.

An anonymous reader quotes a report from AnandTech: Today at Microsoft's WinHEC event in Shenzhen, China, the company announced that it's working with Qualcomm to bring the full Windows 10 experience to future devices powered by Snapdragon processors. These new Snapdragon-powered devices should support all things Microsoft, including Microsoft Office, Windows Hello, Windows Pen, and the Edge browser, alongside third-party Universal Windows Platform (UWP) apps and, most interestingly, x86 (32-bit) Win32 apps. They should even be able to play Crysis 2. This announcement fits nicely with Microsoft's "Windows Everywhere" doctrine and should come as no surprise. It's not even the first time we've seen Windows running on ARM processors. Microsoft's failed Windows RT operating system was a modified version of Windows 8 that targeted the ARMv7-A 32-bit architecture. It grew from Microsoft's MinWin effort to make Windows more modular by reorganizing the operating system and cleaning up API dependencies. The major change with today's announcement over Windows RT and UWP is that x86 apps will be able to run on Qualcomm's ARM-based SoCs, along with support for all of the peripherals that are already supported with Windows 10. This alone is a huge change from Windows RT, which would only work with a small subset of peripherals. Microsoft is also focusing on having these devices always connected through cellular, which is something that is not available for many PCs at the moment. Support will be available for eSIM to avoid having to find room in a cramped design to accommodate a physical SIM, and Microsoft is going so far as to call these "cellular PCs" meaning they are expecting broad support for this class of computer, rather than the handful available now with cellular connectivity. The ability to run x86 Win32 apps on ARM will come through emulation, and to demonstrate the performance Microsoft has released a video of an ARM PC running Photoshop.

Mickeycaskill writes: Nintendo will pay up to $20,000 for system and software vulnerabilities in the Nintendo 3DS family of handheld gaming consoles. The company is looking to prevent activities such as piracy, cheating and the circulation of inappropriate content to children. The stated goal is to "provide a secure environment for our customers so that they can enjoy our games and services. In order to achieve this goal, Nintendo is interested in receiving vulnerability information that researchers may discover regarding Nintendo's platforms." Silicon.co.uk reports: "Rewards will range from $100 to $20,000, with one given per 'qualifying piece of vulnerability information.' Hackers looking to claim a reward will have to provide Nintendo with either a proof-of-concept or a piece of functional exploit code in order to qualify."

An anonymous reader quotes a report from Tom's Hardware: Qualcomm and its Qualcomm Datacenter Technologies subsidiary announced today that the company has already begun sampling its first 10nm server processor. The Centriq 2400 is the second generation of Qualcomm server SOCs, but it is the first in its new family of 10nm FinFET processors. The Centriq 2400 features up to 48 custom Qualcomm ARMv8-compliant Falkor cores and comes a little over a year after Qualcomm began developing its first-generation Centriq processors. Qualcomm's introduction of a 10nm server chip while Intel is still refining its 14nm process appears to be a clear shot across Intel's bow--due not only to the smaller process, but also its sudden lead in core count. Intel's latest 14nm E7 Broadwell processors top out at 24 cores. Qualcomm isn't releasing more information, such as clock speeds or performance specifications, which would help to quantify the benefit of its increased core count. The server market commands the highest margins, which is certainly attractive for the mobile-centric Qualcomm, which found its success in the relatively low-margin smartphone segment. However, Intel has a commanding lead in the data center with more than a 99% share of the world's server sockets, and penetrating the segment requires considerable time, investment, and ecosystem development. Qualcomm unveiled at least a small portion of its development efforts by demonstrating Apache Spark and Hadoop on Linux and Java running on the Centriq 2400 processor. The company also notes that Falkor is SBSA compliant, which means that it is compatible with any software that runs on an ARMv8-compliant server platform.

Google, HTC, Oculus, Samsung, Sony and Acer have teamed up to form the Global Virtual Reality Association (GVRA) in an effort to reduce fragmentation and failure in the industry. GVRA aims to "unlock and maximize VR's potential," but there are little details as to what this may mean for consumers. TechCrunch reports: What many in the VR community have been thirsting for is some unification of standards in terms of software and hardware. Games bought in the Oculus store don't play on the Vive or PS VR. Sensors for the Vive don't work on Oculus. Sony doesn't play nice with anyone else's standards etc. etc. Valve, which makes the Steam store and SteamVR platform for the HTC Vive and others, is notably not a member of this collective so any hopes of a unified standard (like its OpenVR platform) emerging from this collective is likely not in the cards. From the GVRA press release: "The goal of the Global Virtual Reality Association is to promote responsible development and adoption of VR globally. The association's members will develop and share best practices, conduct research, and bring the international VR community together as the technology progresses. The group will also serve a resource for consumers, policymakers, and industry interested in VR."

Foxconn, the biggest assembler of Apple devices, is in preliminary discussions to make an investment that would expand the company's U.S. operations. From a report on Bloomberg: The disclosure came hours after an announcement by U.S. President-elect Donald Trump and SoftBank Group's Masayoshi Son to invest $50 billion in the U.S. and create 50,000 jobs. The money will come from SoftBank's $100 billion technology fund, which was announced in October, a person familiar with the matter said. A document that Son held up after the meeting in Trump Tower also included the words "Foxconn," "$7 billion" and "50,000 new jobs" in addition to SoftBank's numbers. "While the scope of the potential investment has not been determined, we will announce the details of any plans following the completion of direct discussions between our leadership and the relevant U.S. officials," Foxconn said in a statement. "Those plans would be made based on mutually-agreed terms."

BrianFagioli quotes a report from BetaNews: The Nintendo NES Classic is quite an amazing console. True, it is not as powerful as modern game systems like Xbox One and PlayStation 4, but it comes pre-loaded with many classic NES titles. Unfortunately, its strength is also its weakness -- those pre-loaded titles are the only games you can play. You cannot load other games, so you are stuck with what you got. As an alternative, some folks use software emulation and ROMs on their computers to play countless video game titles. Of course, there are moral concerns here, as you are often downloading the games illegally -- unless you own the physical copy, that is. Even then, it is a gray area. Today, a company called Doyodo launched a new Linux-powered emulation console on Indiegogo. The device not only plays NES games, but Atari, Game Boy, PlayStation 1, Genesis, and more. You play using USB controllers. In addition, it can serve as a media player (with Kodi) or a full-fledged Linux desktop. Some other features include 4K video playback, Wi-Fi networking built in, and a compact and portable design. There's even a deluxe version that ships with Bluetooth, an extra controller and 32GB of storage; the basic configuration includes just one controller and 16GB of storage. You can view the Indiegogo page here.