An anonymous reader quotes a report from Tom's Hardware: Microsoft EVP Yusuf Mehdi said in a blog post last week that Windows powers over a billion active devices globally. This might sound like a healthy number, but according to ZDNET, the Microsoft annual report for 2022 said that more than 1.4 billion devices were running Windows 10 or 11. Given that these documents contain material information and have allegedly been pored over by the tech giant's lawyers, we can safely assume that Windows' user base has been quietly shrinking in the past three years, shedding around 400 million users.
This is probably why Microsoft has been aggressively pushing users to upgrade to Windows 11 after the previous version of the OS loses support -- so that its users would install the latest version of Windows on their current system (or get a new PC if their system is incapable of running the latest version). Although macOS is a threat to Windows, especially with the launch of Apple Silicon, we cannot say that those 400 million users all went and bought a MacBook. That's because, as far back as 2023, Mac sales have also been dropping, with Statista reporting the computer line, once holding more than 85% of the company revenue, now making up just 7.7%. The shrinking Windows user base can be attributed to a combination of factors -- a major one being the global move toward a mobile-first world, where smartphones and tablets are increasingly replacing traditional PCs for everyday computing needs.
At the same time, Microsoft's strict hardware requirements for Windows 11 have alienated users with perfectly functional older machines, prompting some to stick with unsupported versions or abandon Windows entirely. Additionally, many users find Windows 11 less intuitive than its predecessor and are frustrated by Microsoft's push toward data collection and Apple-style design changes.
Read more of this story at Slashdot.
HP is developing a "PCFax" system similar to CarFax for used cars that securely collects and stores detailed device usage and health data at the firmware level to extend the life of PCs and reduce e-waste. A team of HP experts outlines the system in a recent IEEE Spectrum report: The secure telemetry protocol we've developed at HP works as follows. We gather the critical hardware and sensor data and store it in a designated area of the SSD. This area is write-locked, meaning only authorized firmware components can write to it, preventing accidental modification or tampering. That authorized firmware component we us is the Endpoint Security Controller, a dedicated piece of hardware embedded in business class HP PCs. It plays a critical role in strengthening platform-level security and works independently from the main CPU to provide foundational protection.
The endpoint security controller establishes a secure session by retaining the secret key within the controller itself. This mechanism enables read data protection on the SSD -- where telemetry and sensitive data are stored -- by preventing unauthorized access, even if the operating system is reinstalled or the system environment is otherwise altered. Then, the collected data is recorded in a timestamped file, stored within a dedicated telemetry log on the SSD. Storing these records on the SSD has the benefit of ensuring the data is persistent even if the operating system is reinstalled or some other drastic change in software environment occurs. The telemetry log employs a cyclic buffer design, automatically overwriting older entries when the log reaches full capacity. Then, the telemetry log can be accessed by authorized applications at the operating system level.
The telemetry log serves as the foundation for a comprehensive device history report. Much like a CarFax report for used cars, this report, which we call PCFax, will provide both current users and potential buyers with crucial information. The PCFax report aggregates data from multiple sources beyond just the on-device telemetry logs. It combines the secure firmware-level usage data with information from HP's factory and supply chain records, digital services platforms, customer support service records, diagnostic logs, and more. Additionally, the system can integrate data from external sources including partner sales and service records, refurbishment partner databases, third-party component manufacturers like Intel, and other original equipment manufacturers. This multi-source approach creates a complete picture of the device's entire lifecycle, from manufacturing through all subsequent ownership and service events.
Read more of this story at Slashdot.
Security updates have been issued by AlmaLinux (mod_proxy_cluster), Debian (catdoc, chromium, nagvis, and sudo), Fedora (chromium, gum, kubernetes1.32, moodle, podman, python3-docs, python3.13, salt, and tigervnc), Mageia (x11-server, x11-server-xwayland & tigervnc), Oracle (apache-commons-beanutils, exiv2, expat, firefox, git, git-lfs, gstreamer1-plugins-bad-free, ipa, java-21-openjdk, kea, kernel, libarchive, libblockdev, libsoup3, libvpx, libxslt, mod_auth_openidc, nodejs22, osbuild-composer, perl, perl-File-Find-Rule, php, python-jinja2, python-tornado, sqlite, thunderbird, valkey, varnish, weldr-client, xorg-x11-server-Xwayland, xz, and yggdrasil), Red Hat (apache-commons-beanutils, javapackages-tools:201801, kernel, and python3.11), SUSE (apache-commons-fileupload, gimp, glib2, himmelblau, nvidia-open-driver-G06-signed, sqlite3, thunderbird, yelp, and yelp-xsl), and Ubuntu (samba).