Microsoft wants to make a potentially huge change to JavaScript

Microsoft has backed a proposal to bring optional and erasable type syntax to JavaScript in an effort to make its TypeScript language both faster and easier to use.

In a new blog post, the software giant provided further insight on the proposal and what it aims to do. Essentially, the proposal is calling for type annotations to be added to JavaScript code that can be checked by external type checkers and treated as comments by a JavaScript engine at runtime.

A set of syntax for types that engines would ignore but TypeScript, Flow and other tools could use would also need to be created as part of the proposal.

If the proposal is approved, developers would be able to run programs in TypeScript, Flow and other static typing supersets of JavaScript without the need for transpilation according to InfoWorld.

Type syntax in JavaScript

The new Stage 0 proposal was written and put forth by Gil Tayar, Microsoft's Daniel Rosenwasser, Igalia's Romulo Cintra and Bloomberg's Rob Palmer and is available to read in its entirety on GitHub.

The reason behind the proposal is that over the past decade, static type checking has proven to be fairly successful. In addition to Microsoft's TypeScript, Google created its Closure Compiler while Facebook built Flow to provide syntax for declaring and using types in JavaScript.

At the same time, 69 percent of respondents in the 2021 State of JavaScript survey said that they use TypeScript to compile JavaScript and static typing was voted as the number one feature missing from the programming language.

It's worth noting that Microsoft isn't calling for TypeScript's type checking to be added to every browser and JavaScript runtime. Instead, the company has proposed a JavaScript syntax compatible with TypeScript that could be used by any type checker while being ignored by JavaScript engines.

Via InfoWorld

TechRadar – All the latest technology news

Read More

Bitdefender wants to take a bite out of the password manager market

Bitdefender has announced the launch of its new password manager which aims to simplify the creation and management of secure passwords across all of a user's online accounts on both desktop and mobile.

While the company is known for its antivirus software, its new Bitdefender Password Manager offering also includes a password generator to create and save unique, highly complex passwords for each online account. These passwords can then be accessed by using a single master password. Bitdefender Password Manager is also backed by strong end-to-end encryption along with simple set-up, easy installation and an intuitive user interface designed to be accessible to all.

According to the recent 2021 Bitdefender Global Report: Cybersecurity and Online Behaviors, half of the over 10,000 consumers surveyed use a single password for all of their online accounts while nearly one-third (32%) reuse just a few passwords across multiple online accounts. 

Vice president of Bitdefender's consumer solutions division, Ciprian Istrate explained why the company decided to create its new password manager in a press release, saying:

“Cybercriminals rely on weak passwords to compromise accounts, steal user identities and profit from selling credentials on the dark web. Despite understanding the importance of strong passwords as a security best practice, the ease of memorizing a few passwords and reusing them everywhere outweighs increased security risk for most. We built Bitdefender Password Manager with this in mind, delivering what we believe is one of the best-in-class password protection without sacrificing user convenience.”

Bitdefender Password Manager

In addition to allowing users to store their passwords, Bitdefender Password Manager can also be used to manage and auto-fill payment data. All of this data is encrypted and decrypted locally and the account holder alone has access to the master password so that no third party has access to their financial information.

While there are mobile apps available for Android and iOS, Bitdefender has also created browser extensions for Windows and macOS that support a wide range of browsers including Chrome, Firefox and Edge with support for Safari launching soon.

If you already use another password manager like 1Password or LastPass, Bitdefender Password Manager allows you to easily import data and passwords from other platforms including browsers like Chrome and Firefox which have their own built-in password managers.

An annual subscription to Bitdefender Password Manager costs $ 29.99 per year but the company is currently offering an introductory discount where new customers can save 33 percent and pay $ 19.99 for the year or as little as $ 1.66 per month.

TechRadar – All the latest technology news

Read More

Google Docs wants to help you spot when you’re being phished

Spotting potential security threats such as phishing scams on Google Workspace should soon be a lot easier thanks to a new update to the software suite.

Google has revealed it is releasing an upgrade to its online collaboration platform that will provide more information on who is tagging you in comments or questions.

This means that whenever you are mentioned in a comment on a Google Docs document, Sheets spreadsheet or Slides slideshow, it should be easier to spot that the notification is legitimate.

Workspace email alerts

Previously, only the name of the commenter was included in email alerts sent to a user after they had been mentioned in a comment. Google says that in order to provide more security and insight, it will now also include the commenter's email address, showing they are a legitimate user.

Google Workspace comment email

(Image credit: Google)

“We hope that by providing this additional information, this will help you feel more confident that you’re receiving a legitimate notification rather than a spam or phishing attempt by a bad actor,” the company noted in a blog post announcing the news.

The feature is rolling out now, and is available to all Google Workspace customers, as well as legacy G Suite Basic and Business customers, and users with personal Google accounts.

The move is the latest addition from Google Workspace to improve security for its users. The company added end-to-end encryption to the platform back in June 2021 in what was a slightly late move, but one that added a significant protection boost for its entire software collection.

This launch also saw Google enabling businesses to set up their own in-house key service, enabling them to take charge of their encryption keys.

The company is also looking to draw in more new users with the launch of Workspace Migrate, which offers an easier way for admins to assess and plan migration projects to its platform.

This includes looking to move a large amount of enterprise data, such as that from Microsoft Exchange, Microsoft OneDrive, file shares, and Box migrations.

TechRadar – All the latest technology news

Read More

Google Meet wants to try and fix patchy video calls for good

Identifying the issues behind a sketchy or badly-connecting Google Meet video call could soon be a thing of the past thanks to a new update.

The video conferencing platform has introduced a new service that will let admins monitor call quality and single out any issues or bandwidth bottlenecks.

The new Meet quality tool will even allow admins to monitor connections over time, spotting if there are any specific times when bandwidth may be in high demand.

Google Meet bandwidth

In a blog post announcing the new tool, Google notes that the service will monitor both inbound and outbound bandwidth, covering both used and available.

“Surfacing this information helps admins visualize participants bandwidth compared to the quality of a call, making it easier for them to determine where a bandwidth bottleneck could be causing low quality,” the company noted.

Google added that knowing which bitrates are available or being used for specific endpoints can be crucial when performing troubleshooting or working to improve call quality in your domain. However such data was previously only available as an average across entire calls, which can make it difficult to narrow down problems during specific points in time. 

“We hope by surfacing this detailed information, Admins can easily troubleshoot or improve call quality for their users,” it said.

The tool is available by default to all Google Workspace customers now, as well as legacy G Suite Basic and Business customers.

The news is the latest in a series of updates as Google looks to ensure its video calling tool stays up to speed with competitors such as Microsoft Teams and Zoom.

Some of its most recent upgrades include allowing up to 500 participants to join a video call at the same time to make it easier to connect and collaborate with colleagues, clients and customers.

Users can also enable live streaming in Google Meet which will allow up to 100,000 viewers to watch at once.

TechRadar – All the latest technology news

Read More

New Windows 11 update shows Microsoft still wants to take down the iPad

Microsoft has released a software preview for Windows 11 that will make using the operating system on tablet devices, and 2-in-1 laptops, much better.

As DigitalTrends reports, Windows 11 Insider Preview Build 22563, which has just been released to people signed up to receive early versions of Windows 11 to test, optimizes the taskbar on tablets and 2-in-1 devices.

In the new update, the taskbar now has two states: a collapsed and expanded mode. When the taskbar is collapsed, it appears much thinner, giving you more screen real estate and helping to prevent accidental presses of taskbar buttons.

Meanwhile, the expanded mode makes the taskbar wider, allowing you to select items more easily, such as apps, using the touch screen.

Switching between the two modes looks pretty easy as well, and is done by simply swiping your finger up or down at the bottom of the tablet’s screen where the taskbar resides.

It seems that this version of the taskbar will only be available on Windows 11 tablets and 2-in-1 laptops, which have touchscreens that either detach from the keyboard, or can be folded back, and used as a tablet. Desktop PCs and traditional laptops won’t get this new taskbar.

As it’s currently in a Preview Build, it also means that regular Windows 11 users won’t see it just yet. However, if testing goes well and there’s a positive reaction from Windows Insiders, we could see the feature appear in a Windows 11 update sometime in the future.


Analysis: Microsoft’s tablet ambitions remain

Pics of Microsoft 8 2-in-1 PC

(Image credit: Microsoft India)

This new update shows that Microsoft’s tablet ambitions remain undeterred. While its rivals Apple and Google have found immense success with tablet devices, Microsoft has yet to do the same. Its attempts to take on the mighty iPad and gain tablet market share have been a mixed bag.

There was the deeply unpopular Windows 8, which dropped much of the classic interface of Windows, including the taskbar and Start menu, for an interface with large icons that was aimed at tablet use. The problem was, Windows 8 tablets were largely ignored, and desktop and laptop users hated having to put up with an interface that was designed for touchscreens they didn’t have.

Microsoft found more success with its Surface Pro line of 2-in-1 devices, alongside Windows 10, which struck a more even balance with an interface that was better suited to traditional PCs, while also having a tablet mode.

However, Surface Pro sales still lag behind iPad and Android tablet sales, but it seems Microsoft isn’t giving up. If Windows 11 continues to evolve to work even better on tablet devices, then this could be Microsoft’s best bet yet to take on Apple and Google.

TechRadar – All the latest technology news

Read More

GitHub wants to help developers spot security issues before they get too serious

In an effort to further secure open source software, GitHub has announced that the GitHub Advisory Database is now open to community contributions.

While the company has its own teams of security researchers that carefully review all changes and help keep security advisories up to date, community members often have additional insights and intelligence on CVEs but lack a place to share this knowledge.

This is why GitHub is publishing the full contents of its Advisory Database to a new public repository to make it easier for the community to leverage this data. At the same time, the company has built a new user interface for security researchers, academics and enthusiasts to make contributions.

All of the data in the GitHub Advisory Database is licensed under a Creative Commons license and has been since the database was first created to ensure that it remains free and usable by the community.

Contributing to a security advisory

In order to provide a community contribution to a security advisory, GitHub users first need to navigate to the advisory they wish to contribute to and submit their research through the “suggest improvements for this vulnerability” workflow. Here they can suggest changes or provide more context on packages, affected versions, impacted ecosystems and more.

The form will then walk users through opening a pull request that details their suggested changes. Once this done, security researchers from the GitHub Security Lab as well as the maintainer of the project who filed the CVE  will be able to review the request. Contributors will also get public credit on their GitHub profile once their contribution has been merged.

In an attempt to further interoperability, advisories in the GitHub Advisory Database repository use the Open Source Vulnerabilities (OSV) format. Software engineer for Google's Open Source Security Team, Oliver Chang provided further details on the OSV format in a blog post, saying:

“In order for vulnerability management in open source to scale, security advisories need to be broadly accessible and easily contributed to by all. OSV provides that capability.”

We'll likely more on this change to the GitHub Advisory Database once security researchers, academics and enthusiasts begin making their own contributions to the company's database.

TechRadar – All the latest technology news

Read More

The US government wants to ban targeted ads for good

A new bill has been put forth by Democrats in the US House and Senate that could drastically change the entire online advertising industry if passed.

The bill in question, known as the Banning Surveillance Advertising Act, was introduced by Anna Eshoo and Jan Schakowsky in the House and Cory Booker in the Senate. If passed, it would severely limit the way in which Google, Facebook and tech companies serve targeted ads to users.

The Banning Surveillance Advertising Act would prohibit targeted advertising using protected class information such as race, gender and religion. However, it would also prevent online advertisers from using personal data purchased from data brokers.

Google, Facebook, Twitter and other tech platforms would still be able to serve targeted ads based on a user's general location at the city or state level though. At the same time, “contextual advertising” based on the online content a user has interacted with would also still be allowed.

Surveillance advertising

In addition to banning targeted advertising, the bill would give the FTC and state attorneys general the power to enforce violations with fines of up to $ 5,000 per incident. These fines could quickly add up for large advertising firms and tech companies which would serve as an incentive for them to no longer serve targeted ads using a user's personal information.

Data brokers have the most to lose though as their entire business revolves around collecting data on users and selling it to companies so that they can deliver targeted ads. 

Democratic congresswoman from California and the bill's lead sponsor, Anna Eshoo provided further insight on the dangers posed by the business model currently used by online advertisers in a statement, saying:

“The ‘surveillance advertising’ business model is premised on the unseemly collection and hoarding of personal data to enable ad targeting. This pernicious practice allows online platforms to chase user engagement at great cost to our society, and it fuels disinformation, discrimination, voter suppression, privacy abuses, and so many other harms. The surveillance advertising business model is broken.”

We'll have to wait and see if the Banning Surveillance Advertising Act passes but in the meantime, you can still force data brokers to give up the data they have on you by using Surfshark's new privacy tool Incogni.

We've also highlighted the best VPN and the best privacy apps

Via TechCrunch

TechRadar – All the latest technology news

Read More

Google wants secure open-source software to be the future

After attending the recent White House Open Source Software Security Summit, Google is now calling for a public-private partnership to not only fund but also staff essential open-source projects.

In a new blog post, president of global affairs and chief legal officer at both Google and Alphabet, Kent Walker laid out the search giant's plans to better secure the open-source software ecosystem.

For too long, businesses and governments have taken comfort in the assumption that open source software is generally secure due to its transparent nature. While many believe that more eyes watching can help detect and resolve problems in the open source community, some projects actually don't have many eyes on them while others have few or none at all.

To its credit, Google has been working to raise awareness of the state of open source security and the company has invested millions in developing frameworks and new protective tools. However, the Log4j vulnerability and others before it have shown that more work is needed across the ecosystem to develop new models to maintain and secure open source software.

Public-private partnership 

In his blog post, Kent proposes creating a new public-private partnership to identify a list of critical open source projects to help prioritize and allocate resources to ensure their security.

In the long term though, new ways of identifying open source software and components that may pose a system risk need to be implemented so that the level of security required can be anticipated and the appropriate resources can be provided.

At the same time, security, maintenance and testing baselines need to be established across both the public and private sector. This will help ensure that national infrastructure and other important systems can continue to rely on open source projects. These standards also should be developed through a collaborative process according to Kent with an “emphasis on frequent updates, continuous testing and verified integrity”. Fortunately, the software community has already started this work with organizations like OpenSFF working across industry to create these standards.

Now that Google has weighed in on the issue of open source security, expect other tech giants like Microsoft and Apple to propose their own ideas regarding the matter.

We've also rounded up the best open source software and the best business laptops

TechRadar – All the latest technology news

Read More

DuckDuckGo wants to be more than a search engine

DuckDuckGo may be best known for its privacy-focused search engine but following the success of its all-in-one privacy apps and extensions, the company is now developing its own browser.

Since making the decision to move beyond private search in 2018, the company's privacy apps and extensions have been downloaded over 150m times. In addition to providing users with a search engine, DuckDuckGo's mobile app also allows you to browse the web privately.

Now in a new blog post, DuckDuckGo CEO Gabriel Weinberg has revealed that the company is working on a desktop browser that will redefine user expectations of everyday online privacy. Unlike with other browsers, DuckDuckGo for desktop won't have any complicated settings, misleading warnings or “levels” of privacy protection. Instead, the company's browser will feature robust privacy protection that works by default across search, browsing, email and more.

While browsers like Google Chrome, Microsoft Edge, Vivaldi, Brave and others use Chromium, DuckDuckGo is building its desktop app around OS-provided rendering engines just like the company does on mobile. This will allow it to strip away the clutter that has accumulated over the years in most major browsers.

DuckDuckGo year-in-review

While we'll likely hear more about DuckDuckGo's desktop browser next year, the company spent 2021 strengthening its all-in-one privacy solution with new improvements and features designed to help users take back their privacy.

The company announced the beta release of its free email forwarding service Email Protection this year which removes trackers in your email and protects the privacy of your personal email address without asking users to switch to another email service.

Just last month, DuckDuckGo released its App Tracking Protection feature into beta in its Android app to block third-party trackers from companies like Google and Facebook that often lurk in other apps. Interested users can join the waitlist through the company's DuckDuckGo Android app to test App Tracking Protection out for themselves.

Finally, DuckDuckGo made a lot of improvements to its search results this year including giving its search results page a more simple and modern design while it continued to refine and improve its local, maps and directions results. However, other improvements made by the company include a new translations instant answer, revamped definitions and weather answers, custom data range filtering, more filters on images and upgrades to advanced search.

With 2022 just around the corner, you may be trying to come up with a New Year's Resolution and if you're struggling to think of one, why not improve your privacy and security by giving DuckDuckGo a try, installing an antivirus, using a VPN and storing your credentials securely with a password manager?

We've also highlighted the best browser, best VPN and best SEO tools

TechRadar – All the latest technology news

Read More