Communications

Phone Companies, State Attorneys General Announce Broad Campaign To Fight Robocalls (washingtonpost.com) 40

Twelve of the country's largest telephone companies on Thursday pledged to implement new technology to spot and block robocalls, part of an agreement brokered between the industry and 51 attorneys general to combat the growing telecom scourge. From a report: The new effort to be announced in Washington commits a wide array of companies in the absence of regulation to improving their defenses and aiding law enforcement in its investigations into illegal spam calls, which rang Americans' phones an estimated 4.7 billion times in July alone. Under the agreement, the 12 carriers have agreed to implement call-blocking technology, make anti-robocall tools available for free to consumers and deploy a new system that would label calls as real or spam. Known by its acronym, STIR/SHAKEN, the technology takes aim at a practice known as spoofing, where fraudsters mask their identities by using phone numbers that resemble those that they're trying to contact in a bid to get victims to pick up and surrender their personal information. Signing the pledge are larger mobile carriers, such as AT&T, Comcast, Sprint, T-Mobile and Verizon, which already have said they would implement such robocall protections and in some cases have started testing them around the country. Other carriers adopting the pledge include Bandwidth, CenturyLink, Charter, Consolidated, Frontier, U.S. Cellular and Windstream.
Businesses

Verizon To Sell Tumblr To WordPress Owner (wsj.com) 18

According to The Wall Street Journal, Verizon has agreed to sell its blogging website Tumblr to the owner of popular online-publishing tool WordPress. Tumblr was acquired by Yahoo for $1.1 billion in 2013, and was later included in Verizon's $4.5 billion purchase of Yahoo's web assets in 2017. Bloomberg reports: Automattic Inc. will buy Tumblr for an undisclosed sum and take on about 200 staffers, the companies said. Tumblr is a free service that hosts millions of blogs where users can upload photos, music and art, but it has been dwarfed by Facebook, Reddit and other services. The Tumblr acquisition is the largest ever in terms of price and head count for Automattic, the company's Chief Executive Matt Mullenweg said in an interview. The San Francisco company has a stable of brands focused on online publishing, including longform site Longreads, comment-filtering service Akismet, and avatar-managing service Gravatar.

Mr. Mullenweg said his company intends to maintain the existing policy that bans adult content. He said he has long been a Tumblr user and sees the site as complementary to WordPress.com. "It's just fun," he said of Tumblr. "We're not going to change any of that." Tumblr has a strong mobile interface and dashboard where users follow other blogs, he said. Executives will look for ways WordPress.com and Tumblr can share services and functionality.

The Courts

Judges Begin Ruling Against Some Porn Purveyors' Use of Copyright Lawsuits (bloombergquint.com) 39

Slashdot reader pgmrdlm quotes Bloomberg: Pornography producers and sellers account for the lion's share of copyright-infringement lawsuits in the U.S. -- and judges may have seen enough. The courts are cracking down on porn vendors that file thousands of lawsuits against people for downloading and trading racy films on home computers, using tactics a judge called a "high tech shakedown." [Alternate link here.] In one case, two men were jailed in a scheme that netted $6 million in settlements.

The pornography companies have "a business model that seeks to profit from litigation and threats of litigation rather than profiting from creative works," said Mitch Stoltz, a senior attorney with the Electronic Frontier Foundation, a San Francisco group that has waged a campaign against companies it thinks abuse the copyright system.

Two companies that make and sell porn are responsible for almost half of the 3,404 copyright lawsuits filed in the U.S. in the first seven months of this year, according to an analysis by Bloomberg Law's Tommy Shen... The companies say they are protecting their movies from piracy and infringement under U.S. copyright law, as major movie studios have done for decades, and suggest that the content of their films is the reason for the wrath of the judges. But some of the tactics used in their infringement suits to identify targets and force settlements have critics -- and some jurists -- up in arms and may require congressional actions to fix.

The suits don't initially name names. They identify the Internet Protocol addresses using peer-to-peer networks like BitTorrent to download or distribute the movies and then file suits against âoeJohn Doesâ and ask the courts to order internet service providers, like Verizon Communications Inc. or Comcast Corp., to identify the account subscribers. Those people are then contacted by the porn company lawyers.

One lawyer notes that the lawsuits target users in wealthier areas, reports Bloomberg, which adds that in December one district judge even refused to grant the request for identities, ruling that the porn company "treats this court not as a citadel of justice, but as an ATM."

And last month a federal judge cited that ruling when refusing to enter a judgment in another case.
Verizon

Verizon Demands $880 From Rural Library For Just 0.44GB of Roaming Data (arstechnica.com) 66

Verizon is refusing to waive or reduce $880 of charges accidentally ran up from someone who borrowed a mobile hotspot from a small library. "The library has an 'unlimited' data plan for the hotspots, but Verizon says it has to pay the $880 to cover less than half a gigabyte of data usage that happened across the border with Canada," reports Ars Technica. From the report: Tully Free Library in Tully, New York, a town of fewer than 3,000 people, lends out three Verizon hotspots to a rural population that has limited Internet access. The library started the hotspot-lending program with a grant from the Central New York Library Resources Council, which paid the bill for two years. Crucially, the service plan with Verizon blocked international roaming so that library borrowers wouldn't rack up unintentional charges if they happened to cross the Canadian border. But when the grant ran out, Tully Free Library had to get a new contract and service plan, and the organization began paying the bill itself. The new plan seemed to be identical to the old one, but it enabled international roaming. "They never said to us, 'Do you want international roaming blocked?'" Tully Free Library Director Annabeth Hayes told Ars. "That wasn't something that occurred to me because it was blocked before." The person who borrowed the hotspot used it while driving through Canada for a few hours to take his brother to the airport. "He was only over the border for about four hours and he said he wasn't even using the hotspot," Hayes said. "It was just on in the car and apparently it was pinging a tower so that tower was incurring all these fees."

The bill from Verizon included an $880.30 charge for about 440MB of international data. "I ended up contacting their executive communications department, and the person there said she had to contact their legal team because our contract was under the government/educational department," Hayes said. "She contacted the legal team and they went back and forth and finally decided that no, we couldn't have our fee waived."
Communications

Verizon: 5G Speeds On Low-Spectrum Bands Will Be More Like 'Good 4G' (arstechnica.com) 84

An anonymous reader quotes a report from Ars Technica: 5G won't be much different from 4G outside dense urban areas, a Verizon executive said yesterday. The massive hype around 5G has focused on speed improvements expected on millimeter-wave spectrum, which wasn't previously used on mobile broadband networks. But 5G on lower-spectrum bands will be like "good 4G," Verizon Consumer Group CEO Ronan Dunne said at Oppenheimer's annual Technology, Internet & Communications Conference (webcast link).

"While we can deploy and we will deploy a 5G nationwide offering, the lower down the spectrum tiers you go, the more that will approximate to a good 4G service," Dunne said. "The truth is, we have a very good 4G LTE service in parts of the US where our competitors don't. So if someone else is rushing to bring out 5G nationwide, it may be because they don't have credible 4G LTE coverage in those areas to start with."
Dunne noted yesterday that the amount of spectrum in each band will play a huge role in determining the speeds available over 5G. The more spectrum you have, "the more of the features and capabilities of 5G that you can enable," Dunne said yesterday.

He continued: "We want to have both a coverage strategy and a capability strategy, and a very large majority of the volume of data that we carry on our networks goes to large, dense urban environments. From a population point of view, [big cities have] significantly less than half of customers, but from a data traffic point of view, it's significantly more than half. When it comes to the ability to use 5G as a significant capacity enhancement, there's more of an opportunity to leverage that in urban areas."
Businesses

Experts Say the DOJ Justification For T-Mobile/Sprint Merger Approval Is a Joke (vice.com) 98

An anonymous reader quotes a report from Motherboard: The Department of Justice has approved T-Mobile's controversial $26 billion merger with Sprint. And while the agency proposed a number of remedies it says will mitigate the competition and job-eroding impact of the deal, experts say the fixes will do nothing of the sort. From the beginning, the biggest issue with T-Mobile's planned $26 billion merger with Sprint was the fact that it would reduce the number of major U.S. carriers from four to three. Historically, (say in Canada or Ireland) such consolidation results in two things: much higher prices, and a significant culling of jobs as redundant positions are eliminated. The DOJ says it will impose requirements offsetting the competitive harm of the deal. More specifically, the DOJ says that T-Mobile and Sprint will need to offload Sprint's Boost Mobile and some spectrum to Dish Network, who'll then attempt to build a new, viable fourth competitor from these scraps to offset the elimination of Sprint from the market. But experts consulted by Motherboard say the proposal isn't likely to work, and the end result of the merger will still very likely be higher prices and worse service for all. Gigi Sohn, a former FCC lawyer and telecom expert, says the deal "certainly won't lead to a viable fourth competitor any time soon, if ever." She notes that Boost Mobile only has just 8.8 million subscribers, a far cry from the 158 million and 156 million subscribers of AT&T and Verizon, respectively. Building a viable fourth competitor requires far more than just a small prepaid company and some spectrum.

Consumer groups like Public Knowledge blasted the proposal, noting that a far more simpler solution would be to block the deal and force Sprint to find a suitor outside of the merger process. "Sprint is a significantly stronger competitor today than a new fourth competitor could be for the foreseeable future," the groups said. The struggles that Dish and other would-be new entrants have consistently faced underscore that even with the best of intentions and a full commitment to deploy and compete, nothing is certain. Consumers will face considerable harm if the marketplace does not develop as the DOJ envisions."
AT&T

EFF Hits AT&T With Class-Action Lawsuit For Selling Customers' Location To Bounty Hunters (vice.com) 53

An anonymous reader quotes a report from Motherboard: Tuesday, the Electronic Frontier Foundation (EFF) filed a class action lawsuit against AT&T and two data brokers over their sale of AT&T customers' real-time location data. The lawsuit seeks an injunction against AT&T, which would ban the company from selling any more customer location data and ensure that any already sold data is destroyed. The move comes after multiple Motherboard investigations found AT&T, T-Mobile, Sprint, and Verizon sold their customers' data to so-called location aggregators, which then ended up in the hands of bounty hunters and bail bondsman.

The lawsuit, focused on those impacted in California, represents three Californian AT&T customers. Katherine Scott, Carolyn Jewel, and George Pontis are all AT&T customers who were unaware the company sold access to their location. The class action complaint says the three didn't consent to the sale of their location data. The complaint alleges that AT&T violated the Federal Communications Act by not properly protecting customers' real-time location data; and the California Unfair Competition Law and the California Consumers Legal Remedies Act for misleading its customers around the sale of such data. It also alleges AT&T and the location aggregators it sold data through violated the California Constitutional Right to Privacy.
The lawsuit highlights AT&T's Privacy Policy that says "We will not sell your personal information to anyone, for any purpose. Period."

An AT&T spokesperson said in a statement "While we haven't seen this complaint, based on our understanding of what it alleges we will fight it. Location-based services like roadside assistance, fraud protection, and medical device alerts have clear and even life-saving benefits. We only share location data with customer consent. We stopped sharing location data with aggregators after reports of misuse."
Communications

Initial Tests of the Samsung Galaxy S10 5G and 5G Networks in US Cities Find The Phone Often Overheats and Switches To 4G (wsj.com) 71

Joanna Stern, reporting for the Wall Street Journal: One of the biggest findings of my multi-city 5G review tour: The Samsung Galaxy S10 5G isn't reliable in the summer -- unless, well, you summer in Iceland. When I ran tests, the phone's 5G often switched off due to overheating, leaving me with a 4G connection. Cellular carriers demo-ing or testing the phone have taken to cooling the devices with ice packs and air conditioners. The phone does this when the temperature reaches a certain threshold to minimize energy use and optimize battery, a Samsung spokeswoman said. "As 5G technology and the ecosystem evolve, it's only going to get better," she added. But there is good part, too. The report adds: After nearly 120 tests, more than 12 city miles walked and a couple of big blisters, I can report that 5G is fasten-your-seat-belt fast...when you can find it. And you're standing outdoors. And the temperature is just right. As my findings show, 5G is absolutely not ready for you. But like any brand new network technology, it provides a glimpse of the future. "Holy spit!" I said the first time I saw a speed test hit 1,800 megabits per second on Verizon's network in downtown Denver. [...] Don't speak megabits? I downloaded the whole new season of "Stranger Things" from Netflix -- 2.1 gigabytes of video -- in 34 seconds. The same averaged more than an hour on my 4G connections. And I downloaded a huge, 10GB file full of video and images from Google Drive in 2.5 minutes.
The Almighty Buck

FCC Gives ISPs Another $563 Million To Build Rural-Broadband Networks (bloomberg.com) 115

An anonymous reader quotes a report from Ars Technica: More than 220,000 unserved rural homes and businesses in 24 states will get broadband access because of funding authorized yesterday by the Federal Communications Commission, the agency said. In all, the FCC authorized more than $563 million for distribution to ISPs over the next decade. It's the latest payout from the commission's Connect America Fund, which was created in 2011. Under program rules, ISPs that receive funding must build out to 40 percent of the required homes and businesses within three years and an additional 20 percent each year until completing the buildout at the end of the sixth year.

The money is being distributed primarily to smaller ISPs in Alabama, Arkansas, California, Colorado, Delaware, Illinois, Indiana, Iowa, Kansas, Kentucky, Maryland, Michigan, Minnesota, Mississippi, Missouri, Nebraska, Nevada, New York, North Carolina, North Dakota, Ohio, Oklahoma, Texas, and Virginia. Verizon, which is getting $18.5 million to serve 7,767 homes and businesses in New York, is the biggest home Internet provider on the list. All the ISPs committed to provide speeds of at least 25Mbps downstream and 3Mbps upstream, but many of the funded projects are for higher speeds of 100Mbps/20Mbps or 1Gbps/500Mbps. Speeds promised by each ISP are detailed in the two announcements.

Network

Frontier Refuses To Waive Router Rental Fee For Customer Who Brought His Own (arstechnica.com) 254

Ever since Frontier bought Verizon's Texas network in 2016, the company has been charging some customers a $10-per-month router rental fee even if they're using their own router. Rich Son of Texas purchased Verizon's FiOS Quantum Gateway router for $200 in order to avoid monthly rental fees. He said: "[the router] worked well for me until the takeover happened with Frontier and I began getting charged for using my own equipment. I have continued to call Frontier and was repeatedly assured that the fees will be taken off my bill." But that didn't happen. Ars Technica reports: Son filed a complaint with the Federal Communications Commission; Frontier responded to the complaint but stuck to its position that he has to pay the fee. A voicemail that Frontier left with Son and his wife said the company informed the FCC that "the router monthly charge is an applicable fee, and it will continue to be billed." Another voicemail from Frontier told them they can avoid the monthly rental fees if they purchase a Frontier router.

"We can reimburse you if you purchase a Frontier router. We cannot reimburse you if you have a Verizon router -- we are not Verizon," the voicemail said. "You can choose to use your own router, however you will be still charged the monthly fee... the difference is we do not service the router that you choose to use." "It's $10 today -- but how much will it cost us tomorrow?" Son said. "I'd consider letting it go if their customer service blew me out of the water, but they've been terrible ever since Verizon forced Frontier on us."
When contacted by Ars Technica, Frontier said that it refuses to stop charging the Wi-Fi router rental fee even when customers use their own router and claimed it does so in order to cover higher support costs for customers like Son."
The Internet

The Infrastructure Mess Causing Countless Internet Outages (wired.com) 64

Border Gateway Protocol has served the internet well for decades. But when it goes wrong, you notice it. From a report: In a weeks-long stretch in 2014, hackers stole thousands of dollars a day in cryptocurrency from owners. In 2017, internet outages cropped up around the United States for hours. Last year, Google Cloud suffered hours of disruptions. Earlier this month, a large swath of European mobile data was rerouted through the state-backed China Telecom. And on Monday, websites and services around the world -- including the internet infrastructure firm Cloudflare -- experienced hours of outages. These incidents may sound different, but they actually all resulted from problems -- some accidental, some malicious -- with a fundamental internet routing system called the Border Gateway Protocol. The web is distributed, but it's also interconnected. It needs to be so that data can move around worldwide without all being controlled by a single entity. So every time you load a website or send an email, BGP is the system responsible for optimizing the route that data takes across these sprawling, intertwined networks. And when it goes wrong, the whole internet feels it.

Originally conceived in 1989 (on two napkins), the version of BGP used today remains largely unchanged since 1994. And though BGP has scaled surprisingly well, there's no denying that the internet is very different than it was 25 years ago. In fact, the way BGP was designed introduces risk of outages, manipulations, and data interception -- all of which have come to pass. The internet's backbone routers -- massive industrial nodes usually run by internet service providers, not the Linksys at your house -- each control a set of IP addresses and routes. ISPs and other large organizations use BGP to announce these routes to the world and calculate paths. Think of it like planning a cross-country drive: You need to know the different route options in each area, so you can stop at all the right corn mazes and the world's largest rocking chair without adding too much extra driving each day. But if your GPS is outdated, you could wind up at a dead end or on a new road that totally bypasses the salt flats.

Businesses

Ericsson To Build 'Fully-Automated' 5G Factory In the US By Early 2020 (zdnet.com) 108

Ericsson announced its plans to build a 5G factory in the U.S. sometime early next year. "The factory will be the Swedish telco equipment maker's first fully-automated factory, the company said, and will be used to produce 5G radios designed for urban areas," reports ZDNet. "It will also make Advanced Antenna System radios that it said are components for large-scale deployments of 4G and 5G networks for both rural and urban coverage." From the report: Ericsson did not provide details about where the factory will be located, but the company has plans to initially employ around 100 people at the factory, which will have "highly automated operations." Ericsson is currently signed on by T-Mobile, Verizon, Sprint, AT&T, US Cellular, and GCI to help build out their respective 5G mobile networks. According to the Ericsson's latest mobility report, North America is expected to lead in the adoption of 5G, with the company predicting that 63% of North American mobile subscriptions will be 5G-based in 2024. Fierce Wireless says the company has made a direct investment of about $100 million, "which will kick in during the third quarter of this year."
Cellphones

FCC Says Verizon Can SIM Lock Phones Again (droid-life.com) 53

The FCC has granted Verizon a partial waiver to start SIM locking new handsets to its network for 60 days. "This news out of the FCC is the response to Verizon requesting back in February that it be allowed to lock devices to help deter fraud and theft," reports Droid Life. From the report: Why did they need to ask the FCC about locking? As we have explained a couple of times now, Verizon agreed to specific usage terms when it licensed 700MHz C Block spectrum for its LTE network years ago. One of the individual terms concerned handset locking, where Verizon had to acknowledge that it would leave its phones open for use on other networks at all times. Unlike AT&T or T-Mobile phones, where you have to fulfill a number of criteria in order to get either to unlock a phone for use elsewhere, Verizon's phones were to remain unlocked.

The FCC's partial waiver permits Verizon to lock a customer's handset for 60 days from the date someone activates it on Verizon's network. Once the 60 days are up, this is what should happen: "After the expiration of the 60-day period, Verizon must automatically unlock the handsets at issue here regardless of whether: (1) the customer asks for the handset to be unlocked, or (2) the handset is fully paid off. Thus, at the end of the initial 60 days, the unlocking rule will operate just as it does now, and Verizon's customers will be able to use their unlocked handsets on other technologically compatible networks."
The only exception is for fraud. "Verizon will not have to automatically unlock handsets that it determines within the 60-day period to have been purchased through fraud," the FCC says. Verizon has since issued a statement thanking the FCC and confirming that this new 60-day lock policy will go live "very soon."
Facebook

How Verizon and a BGP Optimizer Knocked Large Parts of the Internet Offline Today 73

Cloudflare issued a blog post explaining how Verizon sent a large chunk of the internet offline this morning after it wrongly accepted a network misconfiguration from a small ISP in Pennsylvania. The outages affected Cloudflare, Facebook, Amazon, and others. The Register reports: For nearly three hours, network traffic that was supposed to go to some of the biggest online names was instead accidentally rerouted through a steel giant based in Pittsburgh. More than 20,000 prefixes -- roughly two per cent of the internet -- were wrongly announced by regional U.S. ISP DQE Communications: this announcement informed the sprawling internet's backbone equipment to thread netizens' traffic through one of DQE's clients, steel giant Allegheny Technologies, a rerouting that was then, mindbogglingly, accepted and passed on to the world by Verizon, a trusted major authority on the internet's highways and byways. And so, systems around the planet automatically updated, and connections destined for Facebook, Cloudflare, and others, ended up going to Allegheny, which black holed the traffic.

Internet engineers suspect that a piece of automated networking software -- a BGP optimizer called Noction -- used by DQE was to blame for the problem. But even though these kinds of misconfigurations happen every day, there is significant frustration and even disbelief that a U.S. telco as large as Verizon would pass on this amount of incorrect routing information. The sudden, wrong, change should have been caught by filters and never accepted. [...] One key industry group called Mutually Agreed Norms for Routing Security (MANRS) has four main recommendations: two technical and two cultural for fixing the problem. The two technical approaches are filtering and anti-spoofing, which basically check announcements from other network operators to see if they are legitimate and remove any that aren't; and the cultural fixes are coordination and global validation -- which encourage operators to talk more to one another and work together to flag and remove any suspicious looking BGP changes. Verizon is not a member of MANRS.
Government

Senator Rubio Targets Huawei Over Patents (reuters.com) 178

hackingbear writes: While intellectual property violation is a major accusation against China in the on-going US-China trade war, U.S. Senator Marco Rubio filed legislation on Monday that would prevent Huawei from seeking damages in U.S. patent courts, after the Chinese firm demanded that Verizon Communications pay $1 billion to license the rights to patented technology. Under the amendment -- seen by Reuters -- companies on certain U.S. government watch lists, which would include Huawei, would not be allowed to seek relief under U.S. law with respect to U.S. patents, including bringing legal action over patent infringement.
Verizon

Huawei Asks Verizon To Pay Over $1 Billion For Over 230 Patents (reuters.com) 184

hackingbear writes: Huawei has told Verizon that the U.S. carrier should pay licensing fees for more than 230 of the Chinese telecoms equipment maker's patents and in aggregate is seeking more than $1 billion, a person briefed on the matter said on Wednesday. Verizon should pay to "solve the patent licensing issue," a Huawei intellectual property licensing executive wrote in February, the Wall Street Journal reported earlier. The patents cover network equipment for more than 20 of the company's vendors including major U.S. tech firms but those vendors would indemnify Verizon, the person said. Some of those firms have been approached directly by Huawei, the person said. The patents in question range from core network equipment, wireline infrastructure to internet-of-things technology, the Journal reported. The licensing fees for the more than 230 patents sought is more than $1 billion, the person said. Huawei has been battling the U.S. government for more than a year. National security experts worry that "back doors" in routers, switches and other Huawei equipment could allow China to spy on U.S. communications. Huawei has denied that it would help China spy.
Businesses

Salesforce Bets on Big Data With $15.3 Billion Tableau Buy (cnbc.com) 26

Salesforce on Monday decided to buy big data firm Tableau Software for $15.3 billion, marking the biggest acquisition in the company's history as it looks to offer more data insights to its clients. From a report: Seattle-based Tableau has more than 86,000 customers, including tech heavyweights such as Verizon and Netflix. As part of the all-stock deal, Tableau shareholders will get 1.103 Salesforce shares, valuing the offer at $177.88 per share, representing a premium of 42% to Tableau's Friday closing price. Salesforce's deal comes days after Alphabet's Google big-data analytics company Looker for $2.6 billion and surpasses the $5.9 billion that the cloud-based software company paid to buy U.S. software maker MuleSoft in 2018.
Businesses

New Law Could Make Verizon Pay a Decade's Worth of Taxes It Avoided (arstechnica.com) 98

Verizon has avoided paying local taxes on telecom equipment in many New Jersey municipalities over the past decade, but a proposed state law would force the company to pay back taxes for all the payments it didn't make. Ars Technica reports: The bill, filed on May 23 by Assemblyman John Burzichelli (D. Paulsboro), "would force Verizon to pay local taxes on telephone poles, lines, land, and other equipment that the telecom giant has refused to fork over in an increasing number of New Jersey municipalities, starving them of tens of millions of dollars a year in tax revenue," The Philadelphia Inquirer reported. As of 2015, Verizon had reportedly stopped paying the tax in more than 150 of the 565 municipalities in New Jersey.

The tax Verizon has avoided ranges from $15,000 to more than $1 million a year for each municipality, taking revenue away from local budgets or forcing residents and other businesses to cover the shortfalls. Despite not paying tax in many cities and towns, local officials point out that Verizon "continues to benefit from the use of municipalities' poles, utility lines, and switching facilities even when it no longer pays taxes," a 2015 Inquirer article said.
"The tax dispute centers on a 1997 amendment to state tax law that required 'business personal property' payments from landline phone companies that provide 'dial tone and access to 51 percent of a local telephone exchange,'" the report adds. Verizon said in 2008 that it would stop paying the tax because it said its market share had dropped below the 51 percent threshold. In reality, Verizon's share was closer to 90 percent.
Security

Should Companies Abandon Their Password Expiration Policies? (techcrunch.com) 132

In his TechCrunch column, software engineer/journalist Jon Evans writes that last month "marked a victory for sanity and pragmatism over irrational paranoia." I'm talking about Microsoft finally -- finally! but credit to them for doing this nonetheless! -- removing the password expiration policies from their Windows 10 security baseline... Many enterprise-scale organizations (including TechCrunch's owner Verizon) require their users to change their passwords regularly. This is a spectacularly counterproductive policy.

To quote Microsoft: "Recent scientific research calls into question the value of many long-standing password-security practices such as password expiration policies, and points instead to better alternatives... If a password is never stolen, there's no need to expire it. And if you have evidence that a password has been stolen, you would presumably act immediately rather than wait for expiration to fix the problem... If an organization has successfully implemented banned-password lists, multi-factor authentication, detection of password-guessing attacks, and detection of anomalous logon attempts, do they need any periodic password expiration? And if they haven't implemented modern mitigations, how much protection will they really gain from password expiration...?"

Perfect security doesn't exist. World-class security is hard. But decent security is generally quite accessible, if you faithfully follow some basic rules. In order to do so, it's best to keep those rules to a minimum, and get rid of the ones that don't make sense. Password expiration is one of those. Goodbye to it, and good riddance.

Instead the column recommends password managing software to avoid password re-use across sites, as well as two-factor authentication. "And please, if you work with code or data repositories, stop checking your passwords and API keys into your repos."

But if your company still has a password expiration policy, he suggests mailing Microsoft's blog post to your sys-admin. "They will ignore you at first, of course, because that's what enterprise administrators do, and because information security (like transportation security) is too often an irrational one-way ratchet because our culture of fear incentivizes security theater rather than actual security -- but they may grudgingly begin to accept that the world has moved on."
Microsoft

After 10 Years, Bing Is 'Not the Laughingstock of Technology Anymore' (bnnbloomberg.ca) 129

Bloomberg remembers the launch of Bing ten years ago -- "It was all a little sad". There was even a jingle-writing contest in which song-a-day writer Jonathan Mann won a $500 gift card for his song "Bing Goes the Internet". (After TechCrunch called it "awful" and compared it to the sound of dying cows, the songwriter released a second song which consisted of nothing but the text of TechCrunch's article.)

Now Bloomberg asks, "How did Bing go from a joke to generating nearly three times the advertising revenue of Twitter?" What seemed like a typical Microsoft reaction to fear of Google has become -- with the help of blood, sweat, tears and the Nadellaissance -- a nice business. Microsoft now generates about $7.5 billion in annual revenue from web search advertising. That is a pipsqueak compared with Google's $120 billion in ad sales over the last 12 months. But it's more revenue brought in by either Microsoft's LinkedIn professional network or the company's line of Surface computers and other hardware...

Microsoft in recent years outsourced chunks of its advertising business and stuck Bing in spots that Microsoft controls or that Google couldn't grab. Importantly, Microsoft made Bing front and center for people using search boxes on Windows computers and Office software, practically guaranteeing that a healthy share of PC owners would wittingly or unwittingly use the "decision engine." Research firm comScore estimates Microsoft accounts for a little under one-quarter of U.S. web searches conducted on desktop computers. Microsoft's market share is far smaller outside the U.S. and practically nonexistent on smartphones... [T]his year it struck a deal to handle searches and ads tied to searches on Yahoo, AOL and other Verizon Communications Inc. internet properties. Those aren't glamorous corners of the internet, but they have a lot of traffic and therefore a lot of people searching for running shoes and local dentists. All that helps use of Bing and lifts the ad revenue that flows through Microsoft's accounts.

Microsoft has also pared costs to the point where Bing stopped bleeding red ink... Bing at least stands on its own two feet, and company executives have said that Microsoft has learned from the search business how to run big data-collecting and crunching technologies.

The article argues that Bing's success has been good for Google, since it keeps them from looking like a monopoly.

Slashdot Top Deals