Facebook was exposed to hiring companies to discredit TikTok; Spring admits major RCE loopholes; Chrome 100 released | Think Weekly

40s Newsletter

• It is rumored that Apple will hold a global developer conference on June 6, or return to the scene
• Microsoft: The Metaverse will also be full of hackers and criminal groups, and a "police framework" needs to be formulated in advance
• Apple, Meta exposed to providing user data to hackers posing as law enforcement officials
• Douban sued Weibo for unfair competition, claiming that it "has long tolerated users' illegal transfer of content", and demanded compensation of 1 yuan
• Apple iOS 15.4.1 official version released: fix battery life bug
• Facebook reportedly hired consulting firm to discredit TikTok
• World's first: Engineers build an Android phone with a Lightning port
• Apple's new patent is authorized: 3D documents can be edited in VR
• Data shows Windows 11 growth stalls
• deepin 20.5 released
• Spring admits big RCE vulnerability, offers solution
• Fedora 36 beta released
• Chrome 100 released
• Linux 5.18 starts and stops supporting ReiserFS

Industry information

It is rumored that Apple will hold a global developer conference on June 6, or return to the scene

According to whistleblower Joe Prosser, Apple will hold this year’s Global Developers Conference on June 6, 2022 local time, and it may also be held live. The last time Apple held a live event was on September 10, 2019. At the time, Apple released the iPhone 11 and Apple Watch Series 5. But starting from WWDC in 2020, Apple has switched to holding events online because of the epidemic, until now. With the easing of the epidemic in the United States, the outside world has begun to speculate whether Apple will return to live events.

Microsoft: The Metaverse will also be full of hackers and criminal groups, and a "police framework" needs to be formulated in advance

According to reports, a few days ago, the head of Microsoft's cybersecurity called for the Metaverse platforms to be "armed" to stop hackers and criminal groups from sabotaging the new technology when it first began to develop. Charlie Bell, Microsoft's newly appointed head of security, said that there will be many innovations in the metaverse, and of course, in the face of some problems (such as security issues), the industry also needs to find ways to deal with it. Bell also suggested that Metaverse adopt technological innovations emerging in the field of metacomputing security, that is, multiple platform service providers launching a unified tool to centrally manage user security and user access to different applications from different vendors.

Apple, Meta exposed to providing user data to hackers posing as law enforcement officials

Internet giants such as Apple and Meta have been asked by hackers to provide user data, according to multiple people familiar with the matter. Hackers first attacked the accounts of law enforcement agencies and then made "urgent data requests" to companies such as Apple. The requests were hacked emailed by law enforcement officials in multiple countries and crafted with forged signatures from real or fictitious law enforcement officials.

Douban sued Weibo for unfair competition, claiming that it "has long tolerated users' illegal transfer of content", and demanded compensation of 1 yuan

Yesterday evening, Douban officially released a number of pictures on Weibo, and Beijing Douwang Technology Co., Ltd. (Douban) sued Beijing Weimeng Chuangke Network Technology Co., Ltd. (Weibo) for unfair competition. Douban’s official civil complaint shows that Douban sued Weibo for long-term condoning platform users (many of whom are marketing account users who rely on traffic to make profits) to illegally transfer content and use Douban’s trademark without authorization. In the indictment, Douban requires Weibo: 1. Immediately stop the infringement, including but not limited to deleting the infringing link and stopping the recruitment of the "Chaohua Nova Project". 2. Make a public apology. 3. Compensate the plaintiff (Douban) RMB 1. 4. The defendant (Weibo) shall bear all the litigation costs in this case.

Apple iOS 15.4.1 official version released: fix battery life bug

Recently, Apple officially pushed the iOS/iPadOS 15.4.1 update to iPhone and iPad users. One of the most important improvements is to fix the problem that the battery power consumption of iOS 15.4 was too fast.

Previously, the power consumption of the official version of iOS 15.4 caused dissatisfaction among many users. The iPhone 11 consumed 80% of the power in 24 hours, while the screen was turned on for only 2 hours, and the iPhone 13 Pro Max could only last for half a day. Apple mentioned in the travel system update that it is recommended for all users to install it.

Facebook reportedly hired consulting firm to discredit TikTok

US media recently broke the news that Facebook parent company Meta is paying a consulting firm called Targeted Victory to plan a national campaign aimed at turning the American public against TikTok. According to The Washington Post, the consulting firm is trying to spread the word across the United States touting the threat TikTok poses to American children and society

World's first: Engineers build an Android phone with a Lightning port

Last year engineer Ken Pillonel built the world's first iPhone with a working USB-C port. Now, Pillonel has a new project: the first Android phone with a Lightning port. Sure, an Android phone with a Lightning port isn't nearly as attractive as an iPhone with a USB-C port, but the point is the fiddling. Pillonel said the device was more of a fun project to "balance" his previous device, which was deliberately released on April Fools' Day.

Apple's new patent is authorized: 3D documents can be edited in VR

Relevant information shows that Apple's "3D document editing system" patent has been authorized. The abstract shows that the present invention discloses a 3D document editing system and graphical user interface including a virtual reality and/or augmented reality device and an input device (eg, a keyboard) implementing sensing techniques for detecting gestures made by a user (GUI). Using this system, parts of the document can be placed or moved to various Z depths in the 3D virtual space provided by the VR device to provide 3D effects in the document. This sensing technology may allow the user to make gestures when entering text via the keypad, allowing the user to specify a 3D effect in the document while typing. The system can also monitor entries made using the keypad, apply rules to entries to detect specific types of entries such as URLs, and automatically shift detected entries forward or backward on the Z axis relative to the rest of the document type of entry.

Data shows Windows 11 growth stalls

Windows 11 adoption has stagnated, according to AdDuplex, a Windows Store ad service. In one month, Windows 11 penetration increased from 19.3% to 19.4%, almost zero growth, while Windows 10 21H2 increased from 21% to 28.5%, Windows 10 21H1 accounted for 26.5%, and the two Windows 10 versions released last year accounted for more than half of the share. Microsoft has yet to release official figures. Part of the stagnant Windows 11 growth can be attributed to high hardware demand, meaning future growth is dependent on the purchase of new hardware.

Latest technical developments

deepin 20.5 released

Recently, deepin 20.5, the world's highest-ranked domestic team Linux distribution, was officially released, upgrading the Stable kernel to 5.15.24, fixing the underlying vulnerabilities, and further improving system compatibility and security.

Spring admits big RCE vulnerability, offers solution

Previously, rumors about the Spring RCE vulnerability continued to ferment.

Recently, the Spring community acknowledged the existence of a vulnerability that primarily affects Spring MVC and Spring WebFlux applications running on JDK 9+. Affected users can avoid this vulnerability risk by the following methods: Spring 5.3.x users upgrade to 5.3.18+, Spring 5.2.x users upgrade to 5.2.20+, Spring Boot 2.6.x users upgrade to 2.6.6+, Spring Boot 2.5.x users upgrade to 2.5.12+.

Fedora 36 beta released

Fedora 36 beta release, the official version is expected to be released at the end of April. Fedora 36 Workstation Beta includes the just-released desktop environment GNOME 42, which includes a global dark-style UI setting, a redesigned screenshot tool, many core GNOME applications switched to the latest GTK toolkit, improved performance and Adopted a modern appearance. The lightweight desktop environment LXQt has been updated to version 1.0.

Chrome 100 released

On Wednesday, Google released a new version of its Chrome browser, version 100, which finally reached three digits. Chrome 100 has a new icon, although the changes are not very obvious, and according to Google, the new version continues to significantly reduce memory, CPU usage, and is faster.

Linux 5.18 starts and stops supporting ReiserFS

The kernel developers discussed removing the ReiserFS filesystem last month on the kernel developers mailing list. ReiserFS was introduced 21 years ago as the first journaling file system, and SUSE distributions had it as the default file system until 2006. But since ReiserFS author Hans Reiser was convicted of murder, development and user interest in the filesystem have stalled, and only former Namesys (Hans Reiser's company) developer Edward Shishkin has done some bug fixes on Reiser4 a few years ago. class maintenance.

With the release of Linux 5.18 RC1, kernel developers have begun preparations for the end of support for ReiserFS, with plans to officially remove it from the mainline kernel by 2025.