The Insider News

Ars Technica[^]:

AT&T CEO Randall Stephenson today said that 5G will likely be priced similarly to wireline Internet, with customers paying more for faster speeds.

The Verge[^]:

Tesla lost $702 million in the first quarter of 2019, after posting back-to-back profits for the first time ever to finish out 2018, the company announced in an official filing Wednesday.

The Verge[^]:

Earlier this year, the Central Intelligence Agency informed its counterparts in Australia, Canada, New Zealand, and the UK that Chinese technology company Huawei has received funding from the Central National Security Commission of the Communist Party of China, the People’s Liberation Army, and a “third branch of the Chinese state intelligence network,” according to The Times.

The Verge[^]:

Microsoft has become the third US company to pass a market cap of $1 trillion. The software giant passed the milestone briefly today after a jump in stock price today following strong fiscal Q3 earnings.

Google V8 Development blog

Software mitigations are an unsustainable path

Fortunately or unfortunately, our offensive research advanced much faster than our defensive research, and we quickly discovered that software mitigation of all possible leaks due to Spectre was infeasible. This was due to a variety of reasons. First, the engineering effort diverted to combating Spectre was disproportionate to its threat level. In V8 we face many other security threats that are much worse, from direct out-of-bound reads due to regular bugs (faster and more direct than Spectre), out-of-bound writes (impossible with Spectre, and worse) and potential remote code execution (impossible with Spectre and much, much worse). Second, the increasingly complicated mitigations that we designed and implemented carried significant complexity, which is technical debt and might actually increase the attack surface, and performance overheads. Third, testing and maintaining mitigations for microarchitectural leaks is even trickier than designing gadgets themselves, since it’s hard to be sure the mitigations continue working as designed. At least once, important mitigations were effectively undone by later compiler optimizations. Fourth, we found that effective mitigation of some variants of Spectre, particularly variant 4, to be simply infeasible in software, even after a heroic effort by our partners at Apple to combat the problem in their JIT compiler.

Engadget

As the blog post explains, if a password is never stolen, there's no need to expire it. And if a password is suspected to be stolen, you would want to act immediately, not wait until the expiration date. Forced updates also lead to more users writing their passwords down or forgetting them altogether. Plus, as Microsoft puts it, "if your users are the kind who are willing to answer surveys in the parking lot that exchange a candy bar for their passwords, no password expiration policy will help you."