Microsoft has raised the alarm today about a new malware strain that infects users' devices and then proceeds to modify browsers and their settings in order to inject ads into search results pages. From a report: Named Adrozek, the malware has been active since at least May 2020 and reached its absolute peak in August this year when it controlled more than 30,000 browsers each day. But in a report today, the Microsoft 365 Defender Research Team believes the number of infected users is much, much higher. Microsoft researchers said that between May and September 2020, they observed "hundreds of thousands" of Adrozek detections all over the globe. Based on internal telemetry, the highest concentration of victims appears to be located in Europe, followed by South and Southeast Asia. Microsoft says that, currently, the malware is distributed via classic drive-by download schemes. Users are typically redirected from legitimate sites to shady domains where they are tricked into installing malicious software. The boobytrapped software installs the Androzek malware, which then proceeds to obtain reboot persistence with the help of a registry key.

Read more of this story at Slashdot.

Amazon.com has added a competitor to its year-old coalition of companies pledging to reduce their contribution to climate change: Microsoft. From a report: The two technology giants, neighbors in the Seattle area and rivals in cloud computing and business software, have each spent much of the last two years announcing increasingly aggressive climate targets, including dueling umbrella organizations for companies willing to do their part to avert the catastrophic warming of the planet. On Wednesday, Microsoft said it had signed onto Amazon's pact, alongside consumer products giant Unilever and several other new signatories. Amazon, long a laggard among its peers in publicly addressing its impact on the environment, reversed course in recent years, bolstering an internal sustainability team and vowing to reach net zero greenhouse gas emissions by 2040. The company also invited others interested in matching that commitment to sign on to what it calls the Climate Pledge, a forum for comparing notes on best practices and climate-friendly investment opportunities.

Read more of this story at Slashdot.

An Amazon Web Services (AWS) virtualization engineer has shown what Windows 10 on Arm could be like if Microsoft licensed its Arm-based OS to the public rather than just to Windows 10 manufacturers. From a report: With Apple's new M1 Arm-based system on chip, Mac users who need to use Windows 10 can't run Microsoft's Arm-based version of Windows using Apple's Bootcamp. The key obstacle is that Microsoft doesn't license Windows 10 on Arm to any entities other than its own Surface group and Windows 10 on Arm OEMs like HP, Asus and Lenovo. Technically, there's nothing stopping owners of the M1 MacBook Air, MacBook Pro 13-inch or Mac mini from running Windows 10 on Arm, as Apple's software engineering chief Craig Federighi recently pointed out. [...] But Microsoft's reluctance to create a license for Windows 10 on Arm for end users hasn't stopped creative engineers from putting together a working example of what things could be like if it did. AWS principal engineer Alexander Graf did just that, using the open-source QEMU virtualization software for Windows on Arm. QEMU emulates access to hardware such as the CPU and GPU. [...] "Who said Windows wouldn't run well on #AppleSilicon? It's pretty snappy here," Graf wrote in a tweet. Graf previously worked on the Kernel Virtual Machine (KVM) for Linux distribution SUSE for over a decade. Now he's a KVM developer at AWS, which this week announced new Mac instances for AWS Elastic Compute Cloud (EC2) based on Nitro System, an AWS hypervisor for EC2 instances. [...] A developer using the handle @imbushuo on Twitter has posted Geekbench versions 4 and 5 scores that compare Windows 10 on Arm on an M1 computer with the Microsoft-made Surface Pro X. Windows on an M1 got a single-core score of 1,288 and multi-core score of 5,685 whereas the Surface Pro X's scores were roughly 800 and 3,000 in those respective benchmarks.

Read more of this story at Slashdot.

Microsoft has started testing smaller feature updates for Windows 10 in the form of a Windows Feature Experience Pack. The branding appeared inside Windows 10 earlier this year, but Microsoft has only confirmed what the packs will be used for this week. From a report: The Windows Feature Experience Pack will be used to "improve certain features and experiences that are now developed independently of the OS," according to Microsoft. The first feature pack has been released to Windows 10 beta testers this week, and it includes the ability to use the built-in screen snipping app to paste screenshots directly into folders within the File Explorer. The pack also includes a split keyboard mode for 2-in-1 touch devices.

Read more of this story at Slashdot.

Microsoft has removed 18 Edge browser extensions from the Edge Add-ons portal after the extensions were caught injecting ads into users' web search results pages. From a report: The extensions were removed between November 20 and November 25 after Microsoft received multiple complaints from users via Reddit. A subsequent investigation found multiple abusive extensions that had been uploaded on Microsoft's new fledgling Edge Add-ons portal. According to a list shared by a Microsoft community manager, the 18 extensions can be grouped into two categories. The first one is for extensions that tried to pass as the official versions of various apps, even if those apps didn't have official versions for Edge. This included: NordVPN, Adguard VPN, TunnelBear VPN, Ublock Adblock Plus, Greasemonkey, and Wayback Machine.

Read more of this story at Slashdot.

Long-time research analyst Wes Miller, who previously worked at Microsoft, believes that Windows-powered PCs are now stuck in the same rut that American cars grappled with in 1973 to 1983. He writes: I've said before that Windows has never escaped x86. I'm still not sure if it ever can. So the challenges then come down to three things: 1. Can Intel succeed where they've failed for the last 5+ years, at building hybrid processors? The next year to two years should answer this question. 2. Can Microsoft succeed at finally getting application developers to write platform-optimized, energy-respectful, halo applications for the PC? I've been writing about the Windows Store for a long, long time. A long time. And I'm still not sure how Microsoft can light a fire under Windows application developers when they've lost that mindshare. 3. Can Microsoft begin pushing the Surface platform forward again? This one's completely up to Microsoft. I've seen the rumors of the next Surface Pro... and it's more of the same -- evolutionary, not revolutionary. I guess we will see in the next 3-5 years whether Intel can cross this chasm; if they can't, then the future likely belongs to ARM, and that future will likely mean less and less to Microsoft, outside of running classic Win32 applications on x64/x86 Windows.

Read more of this story at Slashdot.

Remember when Microsoft was criticized for enabling "workplace surveillance" over "productivity scores" in its Microsoft 365 office software which gave managers highly detailed profiles of each individual employee's activity. Long-time Slashdot reader theodp writes: The Microsoft 365 Productivity Score apparently has roots in another Microsoft patent application for Systems, Methods, and Software for Implementing a Behavior Change Management Program, which also lays out plans for as yet unimplemented features to automatically schedule hundreds of employees for months of productivity re-education, including preventing employees from scheduling meetings with others if the service deems it counter-productive. So, could the HAL 9000's "I'm sorry Dave, I'm afraid I can't do that" be considered prior art? But Microsoft "has even bigger ideas for using technology to monitor workers in the interest of maximizing organizational productivity," reports GeekWire: Newly surfaced Microsoft patent filings describe a system for deriving and predicting "overall quality scores" for meetings using data such as body language, facial expressions, room temperature, time of day, and number of people in the meeting. The system uses cameras, sensors, and software tools to determine, for example, "how much a participant contributes to a meeting vs performing other tasks (e.g., texting, checking email, browsing the Internet)." The "meeting insight computing system" would then predict the likelihood that a group will hold a high-quality meeting. It would flag potential challenges when an organizer is setting the meeting up, and recommend alternative venues, times, or people to include in the meeting, for example... A patent application made public Nov. 12 notes, "many organizations are plagued by overly long, poorly attended, and recurring meetings that could be modified and/or avoided if more information regarding meeting quality was available." The approach would apply to in-person and virtual meetings, and hybrids of the two... The filings do not detail any potential privacy safeguards. A Microsoft spokesperson declined to comment on the patent filings in response to GeekWire's inquiry. To be sure, patents are not products, and there's no sign yet that Microsoft plans to roll out this hypothetical system. Microsoft has established an internal artificial intelligence ethics office and a companywide committee to ensure that its AI products live by its principles of responsible AI, including transparency and privacy. However, the filings are a window into the ideas floating around inside Microsoft, and they're consistent with the direction the company is already heading.

Read more of this story at Slashdot.

Microsoft has been criticised for enabling "workplace surveillance" after privacy campaigners warned that the company's "productivity score" feature allows managers to use Microsoft 365 to track their employees' activity at an individual level. From a report: The tools, first released in 2019, are designed to "provide you visibility into how your organisation works," according to a Microsoft blogpost, and aggregate information about everything from email use to network connectivity into a headline percentage for office productivity. But by default, reports also let managers drill down into data on individual employees, to find those who participate less in group chat conversations, send fewer emails, or fail to collaborate in shared documents. "This is so problematic at many levels," tweeted the Austrian researcher Wolfie Christl, who raised alarm about the feature. "Employers are increasingly exploiting metadata logged by software and devices for performance analytics and algorithmic control," Christl added. "MS is providing the tools for it. Practices we know from software development (and factories and call centres) are expanded to all white-collar work."

Read more of this story at Slashdot.

Microsoft has brought on the government affairs firm Lot Sixteen to lobby on sustainability and climate change, a newly public filing shows. From a report: While Microsoft has lots of in-house and outside lobbyists working on all sorts of things, it's the first time an outside firm will be lobbying only on climate and environmental topics, Microsoft confirmed. "The company made bold, new climate commitments this year. Adding a firm dedicated to this effort reflects this priority issue," said Kate Frischmann, a Microsoft spokeswoman. The company has made new environmental commitments and funding announcements this year including... in January, Microsoft pledged to become "carbon negative" by 2030 and announced a $1 billion fund for technologies and methods that pull CO2 directly from the atmosphere. They also set a goal of having "zero waste" from their operations, products and packaging by 2030.

Read more of this story at Slashdot.

Programming columnist Mike Melanson assesses the news that Guido Van Rossum, the creator of the Python programming language, has come out of retirement to join Microsoft's developer division: The news brought a flurry of congratulations and feature requests, though a few of the suggested features indeed, already exist. Others still were met with informative responses that make the resulting threads worth a perusal, especially if you're looking for a quick "who's who" on Twitter for the world of programming languages. Microsoft's Miguel de Icaza pointed out that this addition adds to the company's now growing list of language designers and contributors: "The developer division at Microsoft now employs the language designers and contributors to Python, Java, JavaScript, Typescript, F# C#, C++. We just need some PHP, Rust and Swift magic to complete the picture." [Microsoft senior software engineer Kat Marchán added "We actually have some early ex-moz Rust people too!"] So, what can we expect from all of this? Is it a corporate takeover of open source, as some further down in the long list of replies always seem to suggest? Or is Microsoft planning the Frankenstein of all languages, with a little bit of this, a little bit of that? In all likelihood, you Python developers using Microsoft products probably have some good features to look forward to in the near future, and that's that, but there's always lingering fears...especially when it comes to Microsoft. As van Rossum suggests, stay tuned. After Slashdot's earlier story, long-time reader alexgieg posted his own theory: "Several months ago the Excel folk within Microsoft asked users whether they'd like to have Python as an alternative scripting language in Office. Support for that was overwhelming, but nothing more was said on the matter since then. I guess this is Microsoft's answer."

Read more of this story at Slashdot.

Microsoft said Friday it has detected at least seven attacks on companies working to develop a COVID-19 vaccine or treatments. From a report: The company said attacks by three nation-state actors -- two from North Korea and one from Russia -- have targeted companies in Canada, France, India, South Korea and the United States. "Two global issues will help shape people's memories of this time in history -- COVID-19 and the increased use of the internet by malign actors to disrupt society," Microsoft deputy general counsel Tom Burt said in a blog post. "It's disturbing that these challenges have now merged as cyberattacks are being used to disrupt health care organizations fighting the pandemic." Attackers have used a range of approaches including phishing schemes and brute force to get needed passwords, with one group tied to North Korea posing as the World Health Organization in its spear-phishing effort. Microsoft said its built-in security protections stopped a majority of the attacks. "We've notified all organizations targeted, and where attacks have been successful, we've offered help," Burt said.

Read more of this story at Slashdot.

Microsoft is urging users to abandon telephone-based multi-factor authentication (MFA) solutions like one-time codes sent via SMS and voice calls and instead replace them with newer MFA technologies, like app-based authenticators and security keys. From a report: The warning comes from Alex Weinert, Director of Identity Security at Microsoft. For the past year, Weinert has been advocating on Microsoft's behalf, urging users to embrace and enable MFA for their online accounts. Citing internal Microsoft statistics, Weinert said in a blog post last year that users who enabled multi-factor authentication (MFA) ended up blocking around 99.9% of automated attacks against their Microsoft accounts. But in a follow-up blog post today, Weinert says that if users have to choose between multiple MFA solutions, they should stay away from telephone-based MFA. The Microsoft exec cites several known security issues, not with MFA, but with the state of the telephone networks today. Weinert says that both SMS and voice calls are transmitted in cleartext and can be easily intercepted by determined attackers, using techniques and tools like software-defined-radios, FEMTO cells, or SS7 intercept services.

Read more of this story at Slashdot.

"We believe that youtube-dl has substantial non-infringing uses," argues the non-profit Software Freedom Conservancy. But while that software faces a DMCA takedown notice from the Recording Industry Association of America (RIAA), GitHub's owner Microsoft is also a paying member of the RIAA. The Software Freedom Conservancy argues that this leaves Microsoft "stuck between their industry association's abuses of the law and the needs of FOSS projects for which they provide infrastructure." While under current law (which we object to), complying with the takedown notice is admittedly the fastest way to limit Microsoft's liability, we view Microsoft's membership in the RIAA as a much bigger liability to our community, now that Microsoft controls GitHub. We call on Microsoft to resign from the RIAA and remove their conflict of interest in this matter. This is an important opportunity for Microsoft to stand up for the values of software freedom... To build a strong community of FOSS developers, we need confidence that our software hosting platforms will fight for our rights. While we'd prefer that Microsoft would simply refuse to kowtow to institutions like the RIAA and reject their DMCA requests, we believe in the alternative Microsoft can take the easy first step of resigning from RIAA in protest. We similarly call on all RIAA members who value FOSS to also resign.

Read more of this story at Slashdot.

An anonymous reader shares a report: Microsoft has announced that it is ending the ability to cross-sign drivers, effective 1 July 2021. This will effectively make it impossible to release new or updated drivers for Windows 7, Windows 8, and Windows 8.1 systems, including Server 2012 R2. This is not an exaggeration. The only option that will remain available to devs who want to release drivers for versions of Windows other than Windows 10 will be to have those drivers pass HLK/WHQL testing. Unfortunately, not all drivers are even eligible for HLK/WHQL testing, and even for those that are eligible, getting some drivers to pass the HLK/WHQL tests is effectively impossible. [...]

Read more of this story at Slashdot.

An anonymous reader quotes a report from VentureBeat: Microsoft Teams is continuing to ride the remote work and learning wave kicked off by the coronavirus pandemic. During Microsoft's Q1 2021 earnings call, CEO Satya Nadella shared that Microsoft Teams has passed 115 million daily active users. That's up 53% from the 75 million daily active users in April. Some 15 months ago, Microsoft Teams had just 13 million daily active users. "Teams now has more than 115 million daily active users," Nadella said. "We are seeing increased usage and intensity as people communicate, collaborate, and coauthor content across work, life, and learning. Microsoft 365 users generated more than 30 billion collaboration minutes in a single day this quarter." On the call, Nadella highlighted how quickly features are being added to Teams. "We are accelerating our innovation for both first-line as well as knowledge workers, with over 100 new capabilities in the last six months," he said. "Including breakout rooms, meeting recaps, shift scheduling, and large scale digital events, up to 20,000 participants. To help people transcend both time and distance, employee health and wellbeing is a top concern for every CEO. We are innovating with new experiences to help people prioritize wellbeing in the flow of work. New insights in Teams provides personalized recommended actions, making it easier for employees to create healthy work habits and for leaders to build high performing teams."

Read more of this story at Slashdot.

Microsoft has privately told European competition authorities that Slack's antitrust complaint against the tech giant was motivated essentially by sour grapes [Editor's note: the link is paywalled; an alternative source was not available.]. From a report: In a recent confidential filing, Microsoft told the European Commission, which oversees competition regulation, that Slack brought its complaint against Microsoft because the lockdown prompted by the coronavirus pandemic has exposed deficiencies in Slack's messaging product, according to a person who has seen the complaint. In the filing, which runs about 40 pages, Microsoft said the sudden surge in people working from home this year has made more apparent shortcomings in Slack's product, including its handling of videoconferencing, while also benefiting Microsoft's competing Teams software, the person said. [...] Slack declined to comment directly on the "confidential exchange of documents" between Slack, Microsoft and the commission. But the company's vice president of policy and communications, Jonathan Prince, told The Information that Microsoft's argument was the equivalent of a schoolyard taunt. Further reading: Slack CEO: Microsoft is 'Unhealthily Preoccupied With Killing Us.'

Read more of this story at Slashdot.

Microsoft is teaming with Elon Musk's SpaceX and others as the software giant opens a new front in its cloud-computing battle with Amazon.com targeting space customers. From a report: Microsoft would help connect and deploy new services using swarms of low-orbit spacecraft being proposed by SpaceX [Editor's note: the link may be paywalled; alternative source], and more traditional fleets of satellites circling the earth at higher altitudes. Microsoft's initiative targeting commercial and government space businesses, formally launched Tuesday, comes about three months after Amazon Web Services, the e-retailer's cloud unit, disclosed its space-focused effort. Some analysts have projected that overall revenue from space-related cloud services could total about $15 billion by the end of the decade, at least several times higher than current levels. Competition in the cloud between Amazon, the market leader, and No. 2 Microsoft has been heating up in recent years. The pandemic has intensified the fight as companies accelerate their shift to the cloud and make vendor choices that could last for years. [...] SpaceX, which is in the process of deploying its Starlink project consisting of thousands of high-speed internet satellites intended to provide connectivity around the globe, makes a natural partner for Microsoft. A major reason is that Amazon founder Jeff Bezos is pursuing his own low-orbit satellite constellation. Mr. Bezos also owns Blue Origin, a rocket company competing with SpaceX.

Read more of this story at Slashdot.

Microsoft's flagship 2020 game Flight Simulator was supposed to showcase Bing Maps and Azure's streaming capabilities. There's just one small problem: gamers are overwriting Bing's in-game 3D photogrammetry with entire cities ripped from Google Earth. From a report: "When playing the game, you're essentially looking at an extremely high resolution image of the entire globe in 3D -- think Google Earth but of a much higher quality," gushed one Flight Simulator reviewer earlier this summer. It may come as a shock to him and Redmond alike that gamers are importing Google photogrammetry into the simulator to replace the default Bing 3D buildings. Microsoft made a big deal of how Flight Simulator's depiction of the entire world would be powered by Bing Maps and data extrapolated from Bing Maps to create reasonably accurate 3D buildings (stand fast, accidental skyscrapers) in the same places as their real-world counterparts.

Read more of this story at Slashdot.

The Verge's senior news editor complains that without permission, Windows 10 restarted to install "unsolicited, unwanted web app versions of Word, PowerPoint, Excel and Outlook onto my computer." OK, it's not as bad as when my entire computer screen got taken over by an unwanted copy of Microsoft Edge. That was truly egregious. No, this time Microsoft is merely sneaking unwanted web apps onto my PC — and using my Windows 10 Start Menu as free advertising space. Did I mention that icons for Microsoft Office apps have magically appeared in my Start Menu, even though I've never once installed Office on this computer? These aren't full free copies of Office, by the way. They're just shortcuts to the web version you could already access in any web browser of your choice, which double as advertisements to pay for a more fully featured copy... They're the latest proof that Microsoft doesn't respect your ownership of your own PC, the latest example of Microsoft installing anything it likes in a Windows update up to and including bloatware, and the latest example of Microsoft caring more about the bottom line than whether a few people might lose their work when Windows suddenly shuts down their PC. Luckily, I didn't lose any work today, but a friend of mine recently did... Microsoft seems to think our computers are free advertising space, a place where it can selfishly promote its other products — even though they were told roundly in the '90s that even bundling a web browser was not OK. Now, they're bundling a browser you can't uninstall, and a set of PWA web apps that launch in that same browser. (Yes, they fire up Edge even if you've set a different browser as default.)

Read more of this story at Slashdot.