×
Cloud

LinkedIn Shelved Planned Move To Microsoft Azure, Opting To Keep Physical Data Centers (cnbc.com) 62

LinkedIn has set aside an effort to relocate its data center technology out of its physical facilities and into Microsoft's Azure cloud, CNBC reported Thursday, citing people familiar with the matter. From a report: The decision not to proceed with the project, code-named "Blueshift," marks a major reversal for LinkedIn, which announced its plan to move to Azure in 2019, three years after Microsoft acquired the company for $27 billion. LinkedIn had been using Azure for specific tasks.

The U-turn represents a setback for Microsoft, which is chasing Amazon Web Services in the lucrative cloud infrastructure market and has been counting on cloud technology and services to fuel much of its growth. Microsoft CEO Satya Nadella ran the cloud business before elevation to his current job in 2014. Mohak Shroff, LinkedIn's vice president of engineering, wrote in a 2019 blog post announcing Blueshift that "moving to Azure will give us access to a wide array of hardware and software innovations, and unprecedented global scale." Staffers started to learn of the decision not to follow through with the Azure migration last year, said the sources, who asked not to be named because of confidentiality. Executives stressed that the project was being put on hold, rather than getting canceled altogether, they said.

Privacy

Google Maps Ditches Cloud-Based Location History (androidpolice.com) 48

Google Maps will soon give you the option to store your location data on your device instead of in the cloud. Android Police reports: In the coming year, Google is planning to switch things up by defaulting to saving your Timeline directly on your device instead of the cloud. You'll also have the option to wipe out bits or the whole information dossier whenever you want and disable location history completely. When you're jumping ship to a new device and want to keep your data close, you always have the option to back it up in the cloud. Google assures you that it'll lock it up with encryption.

Another significant update is the shorter default amount of time before your location history is auto-deleted. Soon, when you turn on location history, the default auto-delete time shrinks to three months. In the past, it used to hang around for 18 months by default. If you're the sentimental type, you can extend the Timeline's lifespan or turn off the auto-delete option. Google Maps has another nifty trick up its sleeve: soon, you can erase all traces of your trips with just a few taps. Say you've got a favorite hangout spot and you want to keep it to yourself. You can wipe the slate clean right from the app, whether it's searches, directions, visits, or shares. This handy feature is making its debut on Maps for Android and iOS in the next few weeks.

Finally, you will soon be able to click on the blue dot on the map to view your Location History and Timeline at a glance. It allows you to tweak what you share and store on Maps, all without having to dive into the settings. Currently, the blue dot only gives you some neat shortcuts for parking saves and location sharing.

Cloud

Xbox Cloud Gaming Is Now Available On Meta's Quest VR Headsets (theverge.com) 5

A beta version of the Xbox Cloud Gaming app is now available for the Meta Quest headsets, allowing you to stream hundreds of Xbox games with an Xbox Game Pass Ultimate subscription. The Verge reports: The beta app is available from the Meta Quest Store, and you'll simply need to pair a supported Bluetooth controller to start playing. You can use an Xbox controller (that supports Bluetooth), a PS4 one, or even Nintendo's Switch Pro controllers. Support for PS5 controllers is "coming in the future," according to Meta.

There are a variety of display sizes for an immersive VR environment to stream Xbox games in or even an Xbox-themed virtual space on the latest Quest 3 and Pro headsets that takes advantage of full-color passthrough.

Google

Google Debuts Imagen 2 With Text and Logo Generation (techcrunch.com) 13

Google's making the second generation of Imagen, its AI model that can create and edit images given a text prompt, more widely available -- at least to Google Cloud customers using Vertex AI who've been approved for access. From a report: But the company isn't disclosing which data it used to train the new model -- nor introducing a way for creators who might've inadvertently contributed to the data set to opt out or apply for compensation.

Called Imagen 2, Google's enhanced model -- which was quietly launched in preview at the tech giant's I/O conference in May -- was developed using technology from Google DeepMind, Google's flagship AI lab. Compared to the first-gen Imagen, it's "significantly" improved in terms of image quality, Google claims (the company bizarrely refused to share image samples prior to this morning), and introduces new capabilities including the ability to render text and logos. "If you want to create images with a text overlay -- for example, advertising -- you can do that," Google Cloud CEO Thomas Kurian said during a press briefing on Tuesday.

Crime

Cloud Engineer Gets 2 Years For Wiping Ex-Employer's Code Repos (bleepingcomputer.com) 121

Bill Toulas reports via BleepingComputer: Miklos Daniel Brody, a cloud engineer, was sentenced to two years in prison and a restitution of $529,000 for wiping the code repositories of his former employer in retaliation for being fired by the company. According to the U.S. Department of Justice (DoJ) announcement, Brody was fired on March 11, 2020, from First Republic Bank (FRB) in San Francisco, where he worked as a cloud engineer. The court documents state that Brody's employment was terminated after he violated company policies by connecting a USB drive containing pornography to company computers.

Following his dismissal, Brody allegedly refused to return his work laptop and instead used his still-valid account to access the bank's computer network and cause damages estimated to be above $220,000. "Among other things, Brody deleted the bank's code repositories, ran a malicious script to delete logs, left taunts within the bank's code for former colleagues, and impersonated other bank employees by opening sessions in their names," describes the U.S. DOJ announcement. "He also emailed himself proprietary bank code that he had worked on as an employee, which was valued at over $5,000."

After the incident, Brody falsely reported to the San Francisco Police Department that the FRB-issued laptop had been stolen from his car. He continued to uphold this story when interviewed by United States Secret Service agents following his arrest in March 2021. Eventually, in April 2023, Brody pleaded guilty to lying about the laptop and to two charges concerning violation of the Computer Fraud and Abuse Act. In addition to the two-year prison term and the payment of the restitution, Brody will serve three years of supervised release.

Software

Broadcom Is Killing Off VMware Perpetual Licenses, Strong-Arming Users Onto Subscriptions (www.thestack.technology) 196

Ed Targett reports via The Stack: Broadcom is killing off VMware's on-premises perpetual licenses -- and getting set to strong-arm VMware customers onto subscriptions, by also ending the sale of Support and Subscription renewals for such customers. VMware described this to customers as part of its plan to "complete the transition of all VMware by Broadcom solutions to subscription licenses." "We are [also] ending the sale of Support and Subscription (SnS) renewals for perpetual offerings beginning today" SVP Krish Prasad said in a FAQ.

VMware perpetual licenses were described by its own Office of the CTO earlier this year in a short blog as its "most renowned licenses." The on-premises licenses for the virtualization software come with a license key, with SnS separately licensing users for support and software updates. Perpetual license keys never expire but the SnS lapses and now will not, seemingly, be renewed -- meaning that customers reluctant to shift to an alternative licensing model will be left without support or updates.

VMware customers "may continue using perpetual licenses with active support contracts. We will continue to provide support as defined in contractual commitments. We encourage customers to review their inventory of perpetual licenses, including Support Services renewal and expiration dates," Broadcom said rather menacingly, on December 10. The company is also announcing a new "bring-your-own-subscription license option, providing license portability to VMware validated hybrid cloud endpoints running VMware Cloud Foundation," it added, without initially sharing details.

AI

Wendy's Expanding Use of AI Chatbot To Take Orders At Drive-Thrus 154

According to Bloomberg, Wendy's is expanding its test of an AI-powered chatbot that takes orders at the drive-thru. From the report: Franchisees will get the chance to test the product in 2024, the Dublin, Ohio-based chain said Monday. The tool, powered by Google Cloud's AI software, is currently active in four company-operated restaurants near Columbus. More locations are slated to start using it soon. Wendy's announced the pilot in May, joining the AI race as fast-food joints contended with elevated labor costs and the enduring popularity of drive-thrus.

In writing for the chain, Matt Spessard, senior vice president and global chief technology officer, said Monday the software could on average take 86% of orders without intervention from restaurant staff, just exceeding the 85% target outlined earlier this year. The system, called Wendy's FreshAI, uses generative AI to create responses and adapt to customers in real time, Wendy's said. In one location, service times were 22 seconds faster than the average for Columbus.
United States

Is There a Mass Exodus of Former Silicon Valley Tech Companies From Austin, Texas? (mysanantonio.com) 228

"Over the years, Austin has seen a huge migration of tech companies moving to the city, from billionaire owners of Twitter (X) to the largest search engine in the world," according to a local news site in Texas.

"But many startups are now choosing to leave the capital city they once flocked to because of the rising cost of living, low funding, and lack of diversity, according to TechCrunch. " On Thursday, December 7, the cloud computing company VMWare announced it was laying off 577 employees in Austin as part of a nationwide job reduction to cut costs, according to the Austin American-Statesman. TechCrunch is reporting that startup founders, like Techstars Managing Director Amos Schwartzfarb, are announcing their decisions to leave Austin's "lackluster" startup scene... In 2022, Meta abandoned plans to move into the biggest skyscraper in Austin, and Google froze plans to move into 35 floors of a different downtown building, despite paying rent to the developer, according to the Washington Post...

In January, CEO Don Ward of Laundris, a B2B enterprise industrial software platform, announced he would be relocating his company to Tulsa because it reminded him "of where Austin was 10 years ago in terms of the tech ecosystem being built," according to Tulsa World. Last month, startup unicorn Cart, an e-commerce business, announced it was moving its headquarters back to Houston after relocating to Austin in late 2021, according to TechCrunch.

Iphone

Apple Blocks 'Beeper Mini', Citing Security Concerns. But Beeper Keeps Trying (engadget.com) 90

A 16-year-old high school student reverse engineered Apple's messaging protocol, leading to the launch of an interoperable Android app called "Beeper Mini".

But on Friday the Verge reported that "less than a week after its launch, the app started experiencing technical issues when users were suddenly unable to send and receive blue bubble messages." Reached for comment, Beeper CEO Eric Migicovsky did not deny that Apple has successfully blocked Beeper Mini. "If it's Apple, then I think the biggest question is... if Apple truly cares about the privacy and security of their own iPhone users, why would they stop a service that enables their own users to now send encrypted messages to Android users, rather than using unsecure SMS...? Beeper Mini is here today and works great. Why force iPhone users back to sending unencrypted SMS when they chat with friends on Android?"
Apple says they're unable to verify that end-to-end encryption is maintained when messages are sent through unauthorized channels, according to a statement quoted by TechCrunch: "At Apple, we build our products and services with industry-leading privacy and security technologies designed to give users control of their data and keep personal information safe. We took steps to protect our users by blocking techniques that exploit fake credentials in order to gain access to iMessage. These techniques posed significant risks to user security and privacy, including the potential for metadata exposure and enabling unwanted messages, spam, and phishing attacks. We will continue to make updates in the future to protect our users."
Beeper responded on X: We stand behind what we've built. Beeper Mini is keeps your messages private, and boosts security compared to unencrypted SMS. For anyone who claims otherwise, we'd be happy to give our entire source code to mutually agreed upon third party to evaluate the security of our app.
Ars Technica adds: On Saturday, Migicovsky notified Beeper Cloud (desktop) users that iMessage was working again for them, after a long night of fixes. "Work continues on Beeper Mini," Migicovsky wrote shortly after noon Eastern time.
Engadget notes: The Beeper Mini team has apparently been working around the clock to resolve the outage affecting the new "iMessage on Android" app, and says a fix is "very close." And once the fix rolls out, users' seven-day free trials will be reset so they can start over fresh.
Meanwhile, at around 9 p.m. EST, Beeper CEO Eric Migicovsky posted on X that "For 3 blissful days this week, iPhone and Android users enjoyed high quality encrypted chats. We're working hard to return to that state."
Google

Google Weighs Gemini AI Project To Tell People Their Life Story Using Their Photos and Searches (cnbc.com) 18

The Gemini LLMs developed by Google Deepmind can process more than text, including images, video and audio. So a team at Google has proposed using AI to create a "bird's-eye" view of users' lives, reports CNBC, "using mobile phone data such as photographs and searches." Dubbed "Project Ellmann," after biographer and literary critic Richard David Ellmann, the idea would be to use LLMs like Gemini to ingest search results, spot patterns in a user's photos, create a chatbot and "answer previously impossible questions," according to a copy of a presentation viewed by CNBC. Ellmann's aim, it states, is to be "Your Life Story Teller."

It's unclear if the company has plans to produce these capabilities within Google Photos, or any other product. Google Photos has more than 1 billion users and 4 trillion photos and videos, according to a company blog post... A product manager for Google Photos presented Project Ellman alongside Gemini teams at a recent internal summit, according to documents viewed by CNBC. They wrote that the teams spent the past few months determining that large language models are the ideal tech to make this bird's-eye approach to one's life story a reality. Ellmann could pull in context using biographies, previous moments and subsequent photos to describe a user's photos more deeply than "just pixels with labels and metadata," the presentation states...

"We trawl through your photos, looking at their tags and locations to identify a meaningful moment," a presentation slide reads. "When we step back and understand your life in its entirety, your overarching story becomes clear...." The team also demonstrated "Ellmann Chat," with the description: "Imagine opening ChatGPT but it already knows everything about your life. What would you ask it?"

Reached for a comment, a Google spokesperson told CNBC that Google Photos "has always used AI to help people search their photos and videos, and we're excited about the potential of LLMs to unlock even more helpful experiences.

"This was an early internal exploration and, as always, should we decide to roll out new features, we would take the time needed to ensure they were helpful to people, and designed to protect users' privacy and safety as our top priority."
Programming

Go Programmers Surveyed: Most Use Linux or MacOS (go.dev) 29

The Go team conducted a survey of Go Developers in August — and has just released the results. Among the findings: "90% of survey respondents saying they felt satisfied while working with Go during the prior year," while 6% said they were dissastified. Further, the number of people working with Go continues to increase; we see evidence of this from external research like Stack Overflow's Developer Survey (which found 14% of professional developers worked with Go during the past year, a roughly 15% year-over-year increase), as well as analytics for go.dev (which show an 8% rise in visitors year-over-year). Combining this growth with a high satisfaction score is evidence that Go continues to appeal to developers, and suggests that many developers who choose to learn the language feel good about their decision long afterwards...

As in prior years, the majority of survey respondents told us they work with Go on Linux (63%) and macOS (58%) systems... We do continue to see that newer members of the Go community are more likely to be working with Windows than more experienced Go developers. We interpret this as a signal that Windows-based development is important for onboarding new developers to the Go ecosystem, and is a topic our team hopes to focus on more in 2024...

While x86-compatible systems still account for the majority of development (89%), ARM64 is also now used by a majority of respondents (56%). This adoption appears to be partly driven by Apple Silicon; macOS developers are now more likely to say they develop for ARM64 than for x86-based architectures (76% vs. 71%). However, Apple hardware isn't the only factor driving ARM64 adoption: among respondents who don't develop on macOS at all, 29% still say they develop for ARM64.

The most-preferred code editors among the surveyed Go programmers were VS Code (44%), GoLand (31%), Vim/Neovim (16%), and Emacs (3%). 52% of the survey's respondents actually selected "very satisfied" for their feelings about Go — the highest possible rating.

Other interesting findings:
  • " The top requests for improving toolchain warnings and errors were to make the messages more comprehensible and actionable; this sentiment was shared by developers of all experience levels, but was particularly strong among newer Go developers."
  • "Three out of every four respondents work on Go software that also uses cloud services; this is evidence that developers see Go as a language for modern, cloud-based development."
  • The experimental gonew tool (which offers predefined templates for instantiating new Go projects) "appears to solve critical problems for Go developers (especially developers new to Go) and does so in a way that matches their existing workflows for starting a new project. Based on these findings, we believe gonew can substantially reduce onboarding barriers for new Go developers and ease adoption of Go in organizations."
  • And when it comes to AI, "Go developers said they are more interested in AI/ML tooling that improves the quality, reliability, and performance of code they write, rather than writing code for them."

United Kingdom

UK Signals Microsoft's Partnership With OpenAI Faces Scrutiny 6

The UK's antitrust watchdog is considering whether Microsoft and OpenAI's partnership should be called in for a merger probe. From a report: The Competition and Markets Authority said Friday it was seeking views from interested parties to comment on whether the two firms recent collaboration could result in competition issues in the UK. The move from the UK watchdog comes less than two months since it eventually approved Microsoft's acquisition of Activision Blizzard.

Microsoft is the largest investor in OpenAI, having invested $13 billion into the startup so far. The software giant has incorporated several of OpenAI's products into its suite of enterprise tools, and the startup spends considerable amounts on Microsoft's cloud services. The CMA said it will look at whether the the balance of power between the two firms has fundamentally shifted to give one side more control or influence over the other. When asked to comment on the CMA's move a spokesperson at the European Commission said the regulator had been "following very closely the situation of control over OpenAI."
Power

Project Cuts Emissions By Putting Data Centers Inside Wind Turbines (cnn.com) 168

CNN reports on a new German-based project called WindCORES that operates data centers inside existing wind turbines, making them almost completely carbon neutral. "If you look at the sustainability pyramid, the highest form of sustainability is using things that already exist," said Fiete Dubberke, managing director of windCORES, which was founded in 2018. From the report: The concept uses existing wind turbines to power data centers on site, while fiber optic cables provide a constant internet connection. Planning for a project like this began 10 years ago, Dubberke said, when WestfalenWIND realized the electricity grid was too weak to handle the huge capacities of electricity being produced by its wind turbines during peak wind hours, resulting in their windfarms being switched off due to grid security issues. WindCORES estimates that the unused electricity generated during this period could power one-third of all German data centers.

Its solution was to bypass the "middleman" (the grid) altogether, and instead, power IT servers from directly inside the large concrete wind turbine towers. Each tower is 13 meters wide and could potentially hold server racks up to 150 meters high. As the area is mostly empty space, Dubberke calls the concept a "no-brainer." According to Dubberke, an average of 85-92% of the power needed to sustain a windCORES data center comes directly from the host turbine. When there is no wind, electricity is obtained from other renewable sources, including solar farms and hydroelectric power plants, via the electricity grid. "The German data center average is 430 grams of CO2 released per kilowatt hour," he said. "For windCORES, it is calculated at just 10 grams per kilowatt hour."

Since launching, windCORES has acquired around 150 clients through co-location and cloud solutions, from very small start-up companies to bigger, more established ones, such as Zattoo, a leading carbon-neutral Swiss TV streaming platform with several million monthly users. Zattoo joined windCORES in 2020, when it moved one of its six data centers into a wind turbine in Paderborn. Currently, 218 channels are encoded with windCORES, and by the end of next year, the company hopes to relocate more existing servers to the wind farm, making it Zattoo's main data center location. [...] WindCORES has recently opened a larger, second location called "windCORES II" at the Huser Klee windfarm in Lichtenau, Germany. Built for a new large automotive client from Munich (the name is yet to be revealed), it is over three levels and around 20 meters high.

AMD

Meta and Microsoft To Buy AMD's New AI Chip As Alternative To Nvidia's (cnbc.com) 16

Meta, OpenAI, and Microsoft said at an AMD investor event today that they will use AMD's newest AI chip, the Instinct MI300X, as an alternative to Nvidia's expensive graphic processors. "If AMD's latest high-end chip is good enough for the technology companies and cloud service providers building and serving AI models when it starts shipping early next year, it could lower costs for developing AI models and put competitive pressure on Nvidia's surging AI chip sales growth," reports CNBC. From the report: "All of the interest is in big iron and big GPUs for the cloud," AMD CEO Lisa Su said Wednesday. AMD says the MI300X is based on a new architecture, which often leads to significant performance gains. Its most distinctive feature is that it has 192GB of a cutting-edge, high-performance type of memory known as HBM3, which transfers data faster and can fit larger AI models. Su directly compared the MI300X and the systems built with it to Nvidia's main AI GPU, the H100. "What this performance does is it just directly translates into a better user experience," Su said. "When you ask a model something, you'd like it to come back faster, especially as responses get more complicated."

The main question facing AMD is whether companies that have been building on Nvidia will invest the time and money to add another GPU supplier. "It takes work to adopt AMD," Su said. AMD on Wednesday told investors and partners that it had improved its software suite called ROCm to compete with Nvidia's industry standard CUDA software, addressing a key shortcoming that had been one of the primary reasons AI developers currently prefer Nvidia. Price will also be important. AMD didn't reveal pricing for the MI300X on Wednesday, but Nvidia's can cost around $40,000 for one chip, and Su told reporters that AMD's chip would have to cost less to purchase and operate than Nvidia's in order to persuade customers to buy it.

On Wednesday, AMD said it had already signed up some of the companies most hungry for GPUs to use the chip. Meta and Microsoft were the two largest purchasers of Nvidia H100 GPUs in 2023, according to a recent report from research firm Omidia. Meta said it will use MI300X GPUs for AI inference workloads such as processing AI stickers, image editing, and operating its assistant. Microsoft's CTO, Kevin Scott, said the company would offer access to MI300X chips through its Azure web service. Oracle's cloud will also use the chips. OpenAI said it would support AMD GPUs in one of its software products, called Triton, which isn't a big large language model like GPT but is used in AI research to access chip features.

Google

Google Just Unveiled Gemini (wired.com) 32

Increasing talk of AI developing with potentially dangerous speed is hardly slowing things down. A year after OpenAI launched ChatGPT and triggered a new race to develop AI technology, Google today revealed an AI project intended to reestablish the search giant as the world leader in AI. From a report: Gemini, a new type of AI model that can work with text, images, and video, could be the most important algorithm in Google's history after PageRank, which vaulted the search engine into the public psyche and created a corporate giant.

An initial version of Gemini starts to roll out today inside Google's chatbot Bard for the English language setting. It will be available in more than 170 countries and territories. Google says Gemini will be made available to developers through Google Cloud's API from December 13. A more compact version of the model will from today power suggested messaging replies from the keyboard of Pixel 8 smartphones. Gemini will be introduced into other Google products including generative search, ads, and Chrome in "coming months," the company says. The most powerful Gemini version of all will debut in 2024, pending "extensive trust and safety checks," Google says.

"It's a big moment for us," Demis Hassabis, CEO of Google DeepMind, told WIRED ahead of today's announcement. "We're really excited by its performance, and we're also excited to see what people are going to do building on top of that." Gemini is described by Google as "natively multimodal," because it was trained on images, video, and audio rather than just text, as the large language models at the heart of the recent generative AI boom are. "It's our largest and most capable model; it's also our most general," Eli Collins, vice president of product for Google DeepMind, said at a press briefing announcing Gemini.

Windows

Windows 10 Gets Three More Years of Security Updates, If You Can Afford Them (arstechnica.com) 80

An anonymous reader quotes a report from Ars Technica: Windows 10's end-of-support date is October 14, 2025. That's the day that most Windows 10 PCs will receive their last security update and the date when most people should find a way to move to Windows 11 to ensure that they stay secure. As it has done for other stubbornly popular versions of Windows, though, Microsoft is offering a reprieve for those who want or need to stay on Windows 10: three additional years of security updates, provided to those who can pay for the Extended Security Updates (ESU) program.

The initial announcement, written by Windows Servicing and Delivery Principal Product Manager Jason Leznek, spends most of its time encouraging users and businesses to upgrade to Windows 11 rather than staying on 10, either by updating their current computers, upgrading to new PCs or transitioning to a Windows 365 cloud-based PC instead. But when Leznek does get to the announcement of the ESU program, the details are broadly similar to the program Microsoft offered for Windows 7 a few years ago: three additional years of monthly security updates and technical support, paid for one year at a time. The company told us that "pricing will be provided at a later date," but for the Windows 7 version of the ESU program, Microsoft upped the cost of the program each year to encourage people to upgrade to a newer Windows version before they absolutely had to; the cost was also per-seat, so what you paid was proportional to the number of PCs you needed updates for.

One difference this time is that Microsoft told us it would be offering Windows 10 ESU updates to individuals, though the company didn't offer particulars. More details should be available on Windows 10's lifecycle support page soon. Leznek reiterated that Windows 10 22H2 would be the final version of Windows 10 and that the operating system would not receive any additional features during the ESU period.

Cloud

Amazon Latest To Criticise Microsoft in UK Cloud Market Probe (reuters.com) 6

Amazon has told Britain's antitrust authority its rival Microsoft uses business practices that restrict customer choice in the cloud computing market, the second major company to criticise the U.S. tech giant's operations. From a report: Britain's Competition and Markets Authority (CMA) launched an investigation into the country's cloud computing industry in October, following a referral from media regulator Ofcom that highlighted Amazon and Microsoft's dominance of the market.

In a letter published on the CMA's website on Tuesday, Amazon said changes to Microsoft's terms of services had made it difficult for customers to switch to alternative cloud providers, or run competitors' services alongside. "To use many of Microsoft's software products with these other cloud services providers, a customer must purchase a separate license even if they already own the software," Amazon said. "This often makes it financially unviable for a customer to choose a provider other than Microsoft."

Encryption

Beeper Mini is an iMessage-for-Android App That Doesn't Require Any Apple Device at All (liliputing.com) 122

An anonymous reader shares a report: Beeper has been offering a unified messaging platform for a few years, allowing users to open a single app to communicate with contacts via SMS, Google Chat, Facebook Messenger, Slack, Discord, WhatsApp, and perhaps most significantly, iMessage. Up until this week though, Android users that wanted to use Beeper to send "blue bubble" messages to iMessage users had their messages routed through a Mac or iOS device. Now Beeper has launched a new app called Beeper Mini that handles everything on-device, no iPhone or Mac bridge required.

Beeper Mini is available now from the Google Play Store, and offers a 7-day free trial. After that, it costs $2 per month to keep using. [...] previously the company had to rely on a Mac-in-the-cloud? The company explains the method it's using in a blog post, but in a nutshell, Beeper says a security researcher has reverse engineered "the iMessage protocol and encryption," so that "all messages are sent and received by Beeper Mini Android app directly to Apple's servers" and "the encryption keys needed to encrypt these messages never leave your phone." That security researcher, by the way, is a high school student that goes by jjtech, who was hired by Beeper after showing the company his code. A proof-of-concept Python script is also available on Github if you'd like to run it to send messages to iMessage from a PC.

HP

HP Exec Says Quiet Part Out Loud When It Comes To Locking in Print Customers (theregister.com) 86

HP is squeezing more margin out of print customers, the result of a multi-year strategy to convert unprofitable business into something more lucrative, and says its subscription model is "locking" in people. From a report: Tech vendors -- software, hardware, and cloud services -- generally avoid terms that suggest they're perhaps in some way pinning down customers in a strategic sales hold. But as Marie Myers, chief financial officer at HP, was this week talking to the UBS Global Technology conference, in front of investors, the thrust of the message was geared toward the audience. "We absolutely see when you move a customer from that pure transactional model ... whether it's Instant Ink, plus adding on that paper, we sort of see a 20 percent uplift on the value of that customer because you're locking that person, committing to a longer-term relationship."

Instant Ink is a subscription in which ink or toner cartridges are dispatched when needed, with customers paying for plans that start at $0.99 and run to $25.99 per month. As of May last year, HP had more than 11 million subscribers to the service. Since then it has banked double-digit percentage figures on the revenues front. By pre-pandemic 2019, HP had grown weary of third-party cartridge makers stealing its supplies business. It pledged to charge more upfront for certain printer hardware ("rebalance the system profitability, capturing more profit upfront").

Security

Is There Really a Shortage of Information Security Workers? (medium.com) 87

What's behind a supposed shortage of cybersecurity workers? Last month cybersecurity professional Ben Rothke questioned whether a "shortage" even existed. Instead Rothke argued that human resources "needs to understand how to effectively hire information security professionals. Expecting an HR generalist to find information security specialists is a fruitless endeavor at best."

Rothke — a founding member of the Cloud Security Alliance — contacted Slashdot this week with "a follow-up piece" arguing there's another problem. "How can you know how many security jobs there are if there's no real statistical data available?" (Most articles on the topic cite the exact same two studies, which Rothke sees as "not statistically defendable.") Which begs the question — how many information security jobs are there? The short answer is that no one has a clue. The problem is that there is no statistically verifiable and empirically researched data on the number of current information security jobs and what the future holds. All data to date is based on surveys and extrapolations, which is a poor way to do meaningful statistical research... Based on LinkedIn job postings, veteran industry analyst Richard Stiennon found 15,849 job openings at 1,433 cybersecurity vendors. As to the millions of security jobs, he notes that the same could be extrapolated for office administrators. There are millions of companies, but it's not like they all will need full-time security people.

Helen Patton is a veteran information security professional and CISO at Cisco Security Business Group, and the author of Navigating the Cybersecurity Career Path. As to the security jobs crisis, she notes that there are plenty of talented and capable people looking for jobs, and feels there's in fact, no crisis at all. Instead, she says part of the issue is hiring managers who don't truly stop to think about the skills required for a role, and how a candidate can demonstrate those skills. What they do is post jobs that ask for false proxies for experience — degrees, certifications, work experience — and as a consequence, they are looking for candidates that don't exist. She suggests that fixing the hiring process will go a lot further to close the skills gap, than training a legion of new people.

Challenging this supposed glut of unfilled positions, Rothke also shares some recent stories from people who've recently looked for information security jobs. ("He tried to explain to the CIO that Agile was not an appropriate methodology for security projects unless they were primarily software-based. The CIO replied, 'oh the CIO at Chase would tell you differently.' Not realizing that most projects at the bank are software-based.") If you want to know how few information security jobs there really are — speak to people who have graduated from security bootcamps and master's degree programs, and they will tell you the challenges they are facing... That's not to say there are not lots of information security jobs. It's just that there are not the exaggerated and hyperbolic amounts that are reported.

Slashdot Top Deals