×
Security

Ivanti Warns of Critical Vulnerability In Its Popular Line of Endpoint Protection Software (arstechnica.com) 19

Dan Goodin reports via Ars Technica: Software maker Ivanti is urging users of its end-point security product to patch a critical vulnerability that makes it possible for unauthenticated attackers to execute malicious code inside affected networks. The vulnerability, in a class known as a SQL injection, resides in all supported versions of the Ivanti Endpoint Manager. Also known as the Ivanti EPM, the software runs on a variety of platforms, including Windows, macOS, Linux, Chrome OS, and Internet of Things devices such as routers. SQL injection vulnerabilities stem from faulty code that interprets user input as database commands or, in more technical terms, from concatenating data with SQL code without quoting the data in accordance with the SQL syntax. CVE-2023-39336, as the Ivanti vulnerability is tracked, carries a severity rating of 9.6 out of a possible 10.

"If exploited, an attacker with access to the internal network can leverage an unspecified SQL injection to execute arbitrary SQL queries and retrieve output without the need for authentication," Ivanti officials wrote Friday in a post announcing the patch availability. "This can then allow the attacker control over machines running the EPM agent. When the core server is configured to use SQL express, this might lead to RCE on the core server." RCE is short for remote code execution, or the ability for off-premises attackers to run code of their choice. Currently, there's no known evidence the vulnerability is under active exploitation. Ivanti has also published a disclosure that is restricted only to registered users. A copy obtained by Ars said Ivanti learned of the vulnerability in October. [...]

Putting devices running Ivanti EDM behind a firewall is a best practice and will go a long way to mitigating the severity of CVE-2023-39336, but it would likely do nothing to prevent an attacker who has gained limited access to an employee workstation from exploiting the critical vulnerability. It's unclear if the vulnerability will come under active exploitation, but the best course of action is for all Ivanti EDM users to install the patch as soon as possible.

Microsoft

Microsoft Pulls the Plug on WordPad (theregister.com) 58

Microsoft has begun ditching WordPad from Windows and removed the editor from the first Canary Channel build of 2024. From a report: We knew it was coming, but the reality has arrived in the Canary Channel. A clean install will omit WordPad as of build 26020 of Windows 11. At an undisclosed point, the application will be removed on upgrade.

The People app is also being axed, as expected, and the Steps Recorder won't be getting any more updates and will instead show a banner encouraging users to try something else. Perhaps ClipChamp? WordPad was always an odd tool. Certainly not something one would want to edit text with, but not much of a word processor either. It feels like a throwback to a previous era. However, it was also free, came with Windows, and didn't insist on having a connection to the internet for it to work.

United States

Boeing Wants FAA To Exempt MAX 7 From Safety Rules To Get It in the Air (seattletimes.com) 83

Little noticed, days before the holiday break, Boeing petitioned the Federal Aviation Administration for an exemption from key safety standards for the 737 MAX 7 -- the still-uncertified smallest member of its newest jet family. Seattle Times: Since August, earlier models of the MAX currently flying passengers in the U.S. have had to limit use of the jet's engine anti-ice system after Boeing discovered a defect in the system with potentially catastrophic consequences. The flaw could cause the inlet at the front end of the pod surrounding the engine -- known as a nacelle -- to break and fall off.

In an August Airworthiness Directive, the FAA stated that debris from such a breakup could penetrate the fuselage, putting passengers seated at windows behind the wings in danger, and could damage the wing or tail of the plane, "which could result in loss of control of the airplane." Dennis Tajer, a spokesperson for the Allied Pilots Association, the union representing 15,000 American Airlines pilots, said the flaw in the engine anti-ice system has "given us great concern." He said the pilot procedure the FAA approved as an interim solution -- urging pilots to make sure to turn off the system when icing conditions dissipate to avoid overheating that within five minutes could seriously damage the structure of the nacelle -- is inadequate given the serious potential danger.

"You get our attention when you say people might get killed," Tajer said. "We're not interested in seeing exemptions and accommodations that depend on human memory. ... There's just got to be a better way." In its petition to the FAA, Boeing argues the breakup of the engine nacelle is "extremely improbable" and that an exemption will not reduce safety. "The 737 MAX has been in service since 2017 and has accumulated over 6.5 million flight hours. In that time, there have been no reported cases of parts departing aircraft due to overheating of the engine nacelle inlet structure," the filing states.

Operating Systems

Linux Hits Nearly 4% Desktop User Share on Statcounter (gamingonlinux.com) 146

From a report: According to Statcounter, which should be taken with a pinch of salt of course like any sampling, the Linux share on the desktop hit nearly 4% in December 2023. Last month was a record too and a clear trend over time, as going back a couple of years, it was rarely coming close to 2% but now it's repeatedly nearing 4% so it's quite a good sign overall.

The latest from Statcounter shows for all of 2023 below:

January - 2.91%
February - 2.94%
March - 2.85%
April - 2.83%
May - 2.7%
June - 3.07%
July - 3.12%
August - 3.18%
September - 3.02%
October - 2.92%
November - 3.22%
December - 3.82%

Looking at December it shows Windows rising too, with macOS dropping down. If we actually take ChromeOS directly into the Linux numbers for December 2023 the overall number would actually be 6.24% (ChromeOS is Linux after all).

Microsoft

Microsoft Adding New Key To PC Keyboards For First Time Since 1994 (arstechnica.com) 130

Microsoft is adding a dedicated "Copilot" key to PC keyboards, adjusting the standard Windows layout for the first time since 1994. The key will open its AI assistant Copilot on Windows 10 and 11. On Copilot-enabled PCs, users can already invoke Copilot by pressing Windows+C. On other PCs, the key will open Search instead. ArsTechnica adds: A quick Microsoft demo video shows the Copilot key in between the cluster of arrow keys and the right Alt button, a place where many keyboards usually put a menu button, a right Ctrl key, another Windows key, or something similar. The exact positioning, and the key being replaced, may vary depending on the size and layout of the keyboard.

We asked Microsoft if a Copilot key would be required on OEM PCs going forward; the company told us that the key isn't mandatory now, but that it expects Copilot keys to be required on Windows 11 keyboards "over time." Microsoft often imposes some additional hardware requirements on major PC makers that sell Windows on their devices, beyond what is strictly necessary to run Windows itself.

Hardware

Oldest-Known Version of MS-DOS's Predecessor Discovered (arstechnica.com) 70

An anonymous reader quotes a report from The Guardian: Microsoft's MS-DOS (and its IBM-branded counterpart, PC DOS) eventually became software juggernauts, powering the vast majority of PCs throughout the '80s and serving as the underpinnings of Windows throughout the '90s. But the software had humble beginnings, as we've detailed in our history of the IBM PC and elsewhere. It began in mid-1980 as QDOS, or "Quick and Dirty Operating System," the work of developer Tim Paterson at a company called Seattle Computer Products (SCP). It was later renamed 86-DOS, after the Intel 8086 processor, and this was the version that Microsoft licensed and eventually purchased.

Last week, Internet Archive user f15sim discovered and uploaded a new-old version of 86-DOS to the Internet Archive. Version 0.1-C of 86-DOS is available for download here and can be run using the SIMH emulator; before this, the earliest extant version of 86-DOS was version 0.34, also uploaded by f15sim. This version of 86-DOS is rudimentary even by the standards of early-'80s-era DOS builds and includes just a handful of utilities, a text-based chess game, and documentation for said chess game. But as early as it is, it remains essentially recognizable as the DOS that would go on to take over the entire PC business. If you're just interested in screenshots, some have been posted by user NTDEV on the site that used to be Twitter.

According to the version history available on Wikipedia, this build of 86-DOS would date back to roughly August of 1980, shortly after it lost the "QDOS" moniker. By late 1980, SCP was sharing version 0.3x of the software with Microsoft, and by early 1981, it was being developed as the primary operating system of the then-secret IBM Personal Computer. By the middle of 1981, roughly a year after 86-DOS began life as QDOS, Microsoft had purchased the software outright and renamed it MS-DOS. Microsoft and IBM continued to co-develop MS-DOS for many years; the version IBM licensed and sold on its PCs was called PC DOS, though for most of their history the two products were identical. Microsoft also retained the ability to license the software to other computer manufacturers as MS-DOS, which contributed to the rise of a market of mostly interoperable PC clones. The PC market as we know it today still more or less resembles the PC-compatible market of the mid-to-late 1980s, albeit with dramatically faster and more capable components.

Games

Tekken 8's 'Colorblind' Mode Is Causing Migraines, Vertigo, and Debate (arstechnica.com) 19

An anonymous reader quotes a report from Ars Technica: Modern fighting games have come quite a long way from their origins in providing accessibility options. Street Fighter 6 has audio cues that can convey distance, height, health, and other crucial data to visually impaired players. King of Fighters 15 allows for setting the contrast levels between player characters and background. Competitors like BrolyLegs and numerous hardware hackers have taken the seemingly inhospitable genre even further. Tekken 8, due later this month, seems to aim even higher, offering a number of color vision options in its settings. This includes an unofficially monikered "colorblind mode," with black-and-white and detail-diminished backgrounds and characters' flattened shapes filled in with either horizontal or vertical striped lines. But what started out as excitement in the fighting game and accessibility communities about this offering has shifted into warnings about the potential for migraines, vertigo, or even seizures.

You can see the mode in action in the Windows demo or in a YouTube video shared by Gatterall -- which, of course, you should not view if you believe yourself susceptible to issues with strobing images. Gatterall's enthusiasm for Tekken 8's take on colorblind accessibility ("Literally no game has done this") drew comment from Katsuhiro Harada, head of the Tekken games for developer and publisher Bandai Namco, on X (formerly Twitter). Harada stated that he had developed and tested "an accessibility version" of Tekken 7, which was never shipped or sold. Harada states that those "studies" made it into Tekken 8.

Not everybody in game accessibility circles was excited to see the new offerings, especially when it was shared directly with them by excited followers. Morgan Baker, game-accessibility lead at Electronic Arts, asked followers to "Please stop tagging me in the Tekken 8 'colorblind' stripe filters." The scenes had "already induced an aura migraine," Baker wrote, and she could not "afford to get another one right now." Accessibility consultant Ian Hamilton reposted a number of people citing migraines, nausea, or seizure concerns while also decrying the general nature of colorblind "filters" as an engineering-based approach to a broader design challenge. He added in the thread that shipping a game that contained a potentially seizure-inducing mode could result in people inadvertently discovering their susceptibility, similar to an infamous 1997 episode of the Pokemon TV series. Baker and Hamilton also noted problems with such videos automatically playing on sites like X/Twitter.
"Patterns of lines moving on a screen creates a contiguous area of high-frequency flashing, like an invisible strobe," explained James Berg, accessibility project manager at Xbox Game Studios. "Human meat-motors aren't big fans of that." People typically start to notice "flicker fusion frequency" at around 40 frames per second, notes Ars.

Tekken's Harada responded by saying a "very few" number of people misunderstood what his team was trying to do with this mode. There are multiple options, not just one colorblind mode, Harada wrote, along with brightness adjustments for effects and other elements.

"These color vision options are a rare part of the fighting game genre, but they are still being researched and we intend to expand on them in the future," Harada wrote. Developers "have been working with several research institutes and communities to develop this option," even before the unsold "accessibility version of Tekken 7," added Harada.
Security

Google Password Resets Not Enough To Stop These Info-Stealing Malware Strains (theregister.com) 13

Security researchers say info-stealing malware can still access victims' compromised Google accounts even after passwords have been changed. From a report: A zero-day exploit of Google account security was first teased by a cybercriminal known as "PRISMA" in October 2023, boasting that the technique could be used to log back into a victim's account even after the password is changed. It can also be used to generate new session tokens to regain access to victims' emails, cloud storage, and more as necessary. Since then, developers of infostealer malware -- primarily targeting Windows, it seems -- have steadily implemented the exploit in their code. The total number of known malware families that abuse the vulnerability stands at six, including Lumma and Rhadamanthys, while Eternity Stealer is also working on an update to release in the near future.

Eggheads at CloudSEK say they found the root of the exploit to be in the undocumented Google OAuth endpoint "MultiLogin." The exploit revolves around stealing victims' session tokens. That is to say, malware first infects a person's PC -- typically via a malicious spam or a dodgy download, etc -- and then scours the machine for, among other things, web browser session cookies that can be used to log into accounts.

Games

Steam Has Stopped Supporting Windows 7, Windows 8, and Windows 8.1 (theverge.com) 169

Steam: As of January 1 2024, Steam has officially stopped supporting the Windows 7, Windows 8 and Windows 8.1 operating systems. After that date, existing Steam Client installations on these operating systems will no longer receive updates of any kind including security updates. Steam Support will be unable to offer users technical support for issues related to the old operating systems, and Steam will be unable to guarantee continued functionality of Steam on the unsupported operating system versions.

In order to ensure continued operation of Steam and any games or other products purchased through Steam, users should update to a more recent version of Windows. We expect the Steam client and games on these older operating systems to continue running for some time without updates after January 1st, 2024, but we are unable to guarantee continued functionality after that date.
The Verge adds: 95.57 percent of surveyed Steam users are already on Windows 10 and 11, with nearly 2 percent of the remainder on Linux and 1.5 percent on Mac -- so we may be talking about fewer than 1 percent of users on these older Windows builds. Older versions of MacOS will also lose support on February 15th, just a month and a half from now.
Software

Since the Demise of Atom, 'Pulsar' Offers an Alternative Code Editor (pulsar-edit.dev) 24

On December 15 GitHub declared end-of-life for its "hackable text editor" Atom. But Long-time Slashdot reader BrendaEM wants to remind everyone that after the announcement of Atom's sunset, "the community came together to keep Atom alive."

First there was the longstanding fork Atom-Community. But "due to differences in long-term goals for the editor, a new version was born: Pulsar."

From the Pulsar web site: Pulsar [sometimes referred to as Pulsar-Edit] aims to not only reach feature parity with the original Atom, but to bring Pulsar into the 21st century by updating the underlying architecture, and supporting modern features.

With many new features on the roadmap, once Pulsar is stable, it will be a true, Community-Based, Hackable, Text Editor.

"Of course, the user interface is much of the same," writes the blog Its FOSS, and it's cross-platform (supporting Linux, macOS, and Windows).

"The essentials seem to be there with the documentation, packages, and features like the ability to install packages from Git repositories..."
Movies

'Aquaman 2' Has Made Just 12% of What 'Aquaman 1' Earned (forbes.com) 128

Forbes writes: "I am not sure there could have been a more ignominious end to the DCEU." Aquaman 2 opened with $27.7 million domestically, well under half the $67.8 million opening for the original Aquaman. But it's the overall box office totals that are especially dire, as the film has made just over $138.5 million worldwide. That is about 12% of Aquaman 1's final total of $1.1 billion in 2018, where it is the DCEU's highest grossing entry.

The counter to this is that it perhaps is too soon to run these numbers, as it just came out right? Well, a few extra factors to consider. It is already out in a ton of major markets, so there are relatively few potential surges that can still happen outside places like Korea and New Zealand, which can only add so much. Most importantly Aquaman 2 has already launched in China, where it made $30 million in its opening, again, far below the original's opening at $93 million there, doing even worse there than domestically, in context. Aquaman 1 went on to make $292 million in China, a figure Aquaman 2 will not come within a mile of. Next, what DC, and many blockbusters, have been doing lately are these incredibly short theatrical windows, so the clock is ticking quickly...

Of course this is not exclusive to DC, as we have an extremely direct comparison over at Marvel with The Marvels, which at a $205.6 million global gross, the final figure, that is 18% of Captain Marvel's $1.13 billion total. Aquaman 2 has the advantage of being a true sequel, not a team-up piece from other TV shows you theoretically needed to watch beforehand, but it also has the disadvantage of being the last dying gasp of the DCEU coming after a string of other high profile box office failures from Shazam 2 to Blue Beetle.

There was really no way it was going to avoid its fate, even if it did review well (which it didn't, as at 35% on Rotten Tomatoes, it's one of the DCEU's lowest rated films).

Debian

Peppermint OS Builds Single-Site Browsers for Debian Systems (linux-magazine.com) 14

They create a dedicated desktop icon for your favorite web-based application — a simplified browser that opens to that single URL. Yet while Linux usually offers the same functionality as other operating systems, "Peppermint OS's Ice and its successor Kumo are the only free software versions of Site-Specific Browsers available on Linux," according to Linux magazine.

"Fortunately for those who want this functionality, Peppermint OS is a Debian derivative, and both can be installed on Debian and most other derivatives." Since SSBs first appeared in 2005, they have been available on both Windows and macOS. On Linux, however, the availability has come and gone. On Linux, Firefox once had an SSB mode, but it was discontinued in 2020 on the grounds that it had multiple bugs that were time-consuming to fix and there was "little to no perceived user benefit to the feature." Similarly, Chromium once had a basic SSB menu item, Create Application Shortcut, which no longer appears in recent versions. As for GNOME Web's (Epiphany's) Install Site as Web Application, while it still appears in the menu, it is no longer functional. Today, Linux users who want to try SSBs have no choices except Ice or Kumo.

Neither Ice or Kumo appears in any repository except Peppermint OS's. But because Peppermint OS installs packages from Debian 12 ("bookworm"), either can be installed to Debian or a derivative... To install successfully, at least one of Firefox, Chrome, Chromium, or Vivaldi also must be installed... Because both Ice and Kumo are written in Python, they can be run on any desktop.

The article concludes that Site-Specific Browsers might make more sense "on a network or in a business where their isolation provides another layer of security. Or perhaps the time for SSBs is past and there's a reason browsers have tried to implement them, and then discarded them."
Microsoft

Microsoft Disables MSIX Protocol Handler Abused in Malware Attacks (bleepingcomputer.com) 11

Microsoft has again disabled the MSIX ms-appinstaller protocol handler after multiple financially motivated threat groups abused it to infect Windows users with malware. From a report: The attackers exploited the CVE-2021-43890 Windows AppX Installer spoofing vulnerability to circumvent security measures that would otherwise protect Windows users from malware, such as the Defender SmartScreen anti-phishing and anti-malware component and built-in browser alerts cautioning users against executable file downloads.

Microsoft says the threat actors use both malicious advertisements for popular software and Microsoft Teams phishing messages to push signed malicious MSIX application packages. "Since mid-November 2023, Microsoft Threat Intelligence has observed threat actors, including financially motivated actors like Storm-0569, Storm-1113, Sangria Tempest, and Storm-1674, utilizing the ms-appinstaller URI scheme (App Installer) to distribute malware," the company said.

Displays

Linux Is the Only OS To Support Diagonal PC Monitor Mode (tomshardware.com) 170

Melbourne-based developer xssfox has championed a unique "diagonal mode" for monitors by utilizing Linux's xrandr (x resize and rotate) tool, finding a 22-degree tilt to the left to be the ideal angle for software development on her 32:9 aspect ratio monitor. As Tom's Hardware notes, Linux is the "only OS to support a diagonal monitor mode, which you can customize to any tilt of your liking." It begs the question, could 2024 be the year of the Linux diagonal desktop? From the report: Xssfox devised a consistent method to appraise various screen rotations, working through the staid old landscape and portrait modes, before deploying xrandr to test rotations like the slightly skewed 1 degree and an indecisive 45 degrees. These produced mixed results of questionable benefits, so the search for the Goldilocks solution continued. It turns out that a 22-degree tilt to the left was the sweet spot for xssfox. This rotation delivered the best working screen space on what looks like a 32:9 aspect ratio monitor from Dell. "So this here, I think, is the best monitor orientation for software development," the developer commented. "It provides the longest line lengths and no longer need to worry about that pesky 80-column limit."

If you have a monitor with the same aspect ratio, the 22-degree angle might work well for you, too. However, people with other non-conventional monitor rotation needs can use xssfox's javascript calculator to generate the xrandr command for given inputs. People who own the almost perfectly square LG DualUp 28MQ780 might be tempted to try 'diamond mode,' for example. We note that Windows users with AMD and Nvidia drivers are currently shackled to applying screen rotations using 90-degree steps. MacOS users apparently face the same restrictions.

Microsoft

Microsoft Readies 'Next-Gen' AI-Focused PCs (windowscentral.com) 23

Microsoft is working on significant updates to its Surface Pro and Surface Laptop lines. According to Windows Central, new devices "will be announced in the spring and will be marketed as Microsoft's first true next-gen AI PCs." From the report: For the first time, both Surface Pro and Surface Laptop will be available in Intel and Arm flavors, and both will have next-gen NPU (neural processing unit) silicon. Sources are particularly excited about the Arm variants, which I understand will be powered by a custom version of Qualcomm's new Snapdragon X Series chips. Internally, Microsoft is calling next-generation Arm devices powered by Qualcomm's new chips "CADMUS" PCs. These PCs are purpose-built for the next version of Windows, codenamed Hudson Valley, and will utilize many of the upcoming next-gen AI experiences Microsoft is building into the 2024 release of Windows. Specifically, Microsoft touts CADMUS PCs as being genuinely competitive with Apple Silicon, sporting similar battery life, performance, and security. The next Surface Pro and Surface Laptop are expected to be some of the first CADMUS PCs to ship next year in preparation for the Hudson Valley release coming later in 2024.

So, what's changing with the Surface Laptop 6? I'm told this new Surface Laptop will finally have an updated design with thinner bezels, rounded display corners, and more ports. This will be the first time that Microsoft's Surface Laptop line is getting a design refresh, which is well overdue. The Surface Laptop 6 will again be available in two sizes. However, I'm told the smaller model will have a slightly larger 13.8-inch display, up from 13.5 inches on the Surface Laptop 5. Sources say the larger model remains at 15-inches. I'm told Surface Laptop 6 will also have an expanded selection of ports, including two USB-C ports and one USB-A port, along with the magnetic Surface Connect charging port. Microsoft is also adding a haptic touchpad (likely with Sensel technology) and a dedicated Copilot button on the keyboard deck for quick access to Windows Copilot.

The next Surface Pro is also shaping into a big update, although not as drastic as the Surface Laptop 6. According to my sources, the most significant changes coming to Surface Pro 10 are mostly related to its display, which sources say is now brighter with support for HDR content, has a new anti-reflective coating to reduce glare, and now also sports rounded display corners. I've also heard that Microsoft is testing a version of Surface Pro 10 with a slightly lower-resolution 2160 x 1440 display, down from the 2880 x 1920 screen found on previous Surface Pro models. Sources say this lower-resolution panel is only being considered for lower-tier models, meaning the more expensive models will continue to ship with the higher-resolution display. Lastly, I also hear Microsoft is equipping the next Surface Pro with an NFC reader for commercial customers and a wider FoV webcam, which will be enhanced with Windows Studio Effects. It should also be available in new colors. I've also heard we may get an updated Type Cover accessory with a dedicated Copilot button for quick access to Windows Copilot.

Windows

Windows 11 Will Let You Reinstall Your OS Through Windows Update Without Wiping Your Files (xda-developers.com) 111

An anonymous reader writes: If you've ever performed a fresh reinstall of Windows 11, you'll know how long it takes and how much effort you need to make to get it started. Fortunately, Microsoft is taking note. As spotted in a recent update to the Windows 11 beta branch, the company is working on a way to reinstall your operating system through Windows Update, and no files are lost in the process.

The newest update to the Windows Insider beta branch has added a new feature titled "Fix Problems using Windows Update." The feature is still a work in progress, so it doesn't work as it should right now. However, if you're on the Windows 11 Insider beta branch, you can see the button for yourself on the Recovery page, among the Windows 11 backup settings.

Google

Remembering 'The Tech That Died in 2023' (pcmag.com) 117

"10 years later, the demise of Google Reader still stings," writes PC Magazine. But "Time marches on and corporate priorities shift. Here are the products and services that took a final bow in 2023..."

Some of the highlights? 'Clubhouse' Clones
In the early days of the pandemic, when Zoom happy hours and sourdough starters proliferated, Clubhouse burst onto the scene with an app that facilitated audio-only chats between groups large and small. Tech giants quickly churned out their own Clubhouse clones, but these party-line throwbacks were not long for this world. Facebook was the first to go, ditching its Live Audio Rooms in December 2022, but 2023 also saw the end of Reddit Talk, Spotify Live, and Amazon's live radio DJ Amp app. [X Spaces is still around]

Amazon Smile
Launched in 2013, AmazonSmile saw Amazon donate 0.5% of the price of eligible purchases made through smile.amazon.com to charity, with consumers able to choose from over a million charitable organizations to support. On Feb. 20, however, the program shut down because it "has not grown to create the impact that we had originally hoped," Amazon said at the time.

NFTs on Facebook and Instagram
Remember non-fungible tokens (NFTs)? Somehow, crypto bros convinced people to spend big bucks on what are essentially JPEGs. (Don't try to convince me otherwise.) Meta got in on the action in 2022, allowing Instagram users to create NFTs and Facebook users to share them. It didn't exactly set either social network on fire and Meta said in March it would be "winding down digital collectibles."

Cortana on Windows
In June, AI claimed its latest victim by coming after Microsoft's Cortana. The voice assistant never really made a splash compared to Amazon's Alexa or Apple's Siri, and with the launch of Bing Chat (now Copilot), Microsoft removed Cortana as a built-in app on Windows.

Also on the list are Blizzard's Overwatch League, third-party Reddit clients, and Venmo as a payment option on Amazon (effective this January 10).

Looking further into the future, Gmail's Basic HTML View disappears in 2024, while Wordpad will eventually be removed in an unspecified future release of Windows.
Software

Meet Kosmik, a Visual Canvas With Built-In PDF Reader and Web Browser (techcrunch.com) 10

An anonymous reader quotes a report from TechCrunch: In recent years, tools such as Figma, TLDraw, Apple's Freeform and Arc browser's Easel functionality have tried to sell the idea of using an "infinite canvas" for capturing and sharing ideas. French startup Kosmik is building on that general concept with a knowledge-capturing tool that doesn't require the user to switch between different windows or apps to capture information. Kosmik was founded in 2018 by Paul Rony and Christophe Van Deputte. Prior to that, Rony worked at a video production company as a junior director, and he wanted a single whiteboard-type canvas instead of file and folders where he could put videos, PDFs, websites, notes and drawings. And that's when he started to build Kosmic, Rony told TechCrunch, drawing on a prior background in computing history and philosophy.

"It took us almost three years to make a working product to include baseline features like data encryption, offline-first mode and build a spatial canvas-based UI," Rony explained. "We have built all of this on IPFS, so when two people collaborate everything is peer-to-peer rather than relying on a server-based architecture." Kosmik offers an infinite canvas interface where you can insert text, images, videos, PDFs and links, which can be opened and previewed in a side panel. It also features a built-in browser, saving users from having to switch windows when they need to find a relevant website link. Additionally, the platform sports a PDF reader, which lets the user extract elements such as images and text.

The tool is useful for designers, architects, consultants, and students to build boards of information for different projects. The tool is useful for them as they don't need to open up a bunch of Chrome tabs and put details into a document, which is not a very visual medium for various media types. Some retail investors are using the app to monitor stock prices and consultants are using them for their project boards. Available via the web, Mac, and Windows, Kosmik ships with a basic free tier, though this has a limit of 50MB of files and 5GB of storage with 500 canvas "elements." For more storage and unlimited elements, the company offers a $5.99 monthly subscription, with plans in place to eventually offer a "pay-once" model for those who only want to use the software on a single device.

Windows

Microsoft Ending Support For Windows 10 Could Send 240 Million PCs To Landfills, Study Finds (reuters.com) 156

According to Canalys Research, Microsoft's plan to end support for Windows 10 could result in about 240 million computers being sent to landfills. "The electronic waste from these PCs could weigh an estimated 480 million kilograms, equivalent to 320,000 cars," adds Reuters. From the report: While many PCs could remain functional for years post the end of OS support, Canalys warned demand for devices without security updates could be low. Microsoft announced a plan to provide security updates for Windows 10 devices until October 2028 for an undisclosed annual price. If the pricing structure for extended Windows 10 support mirrors past trends, migrating to newer PCs could be more cost-effective, increasing the number of older PCs heading to scrap, Canalys said.
Microsoft

Microsoft is Killing its Windows VR Platform (windowscentral.com) 29

Microsoft has announced that it is deprecating Windows Mixed Reality, with plans to remove the feature in an upcoming release of the OS. From a report: Windows Mixed Reality was Microsoft's attempt at building out a VR ecosystem for Windows PCs, but unfortunately this effort has been mostly inactive for a number of years. While there have been several VR headsets built for Windows Mixed Reality, most of them launched between 2017 and 2021. It's been a long while since OEMs released new VR headsets for Windows Mixed Reality, likely because SteamVR is a much more successful platform with a much wider selection of games. Unfortunately, Microsoft says the deprecation of Windows Mixed Reality also includes support for using a Windows Mixed Reality headset with SteamVR, along with the dedicated Mixed Reality Portal app which acted as a launch environment for VR apps and games built for Windows Mixed Reality.

Slashdot Top Deals