Notice for developers using Azure AD B2C tenants configured for Google sign-ins

On April 20th 2017, Google will start blocking OAuth requests from embedded browsers, called "web-views". If you are using Google as an identity provider in Azure Active Directory B2C, you might need to make changes to your applications to avoid downtime. For more information about Google&;s plans, see Google&039;s blog post.

Applications not impacted

We do not expect any impact for applications that:

Only use local accounts or do not have Google as an social identity provider
Web applications / Web APIs
Desktop (Windows) applications

Applications impacted

Applications impacted are those that have configured Google as an social identity provider in Azure AD B2C and support Android or iOS using:

Xamarin and MSAL Preview

Given it&039;s preview status, MSAL should not be in use in production, but in case you did, contact Azure Support and we&039;ll help you out.

Any library that uses embedded web-views such as AndroidAuthClient/OIDCAndroidLib (Android), NXOAuth2Client (iOS) and ADAL Experimental (iOS & Android) or codes against the protocol using embedded web-views directly, WebView (Android) and UIWebView (iOS). Android and iOS B2C samples posted before today used some of these libraries.

Our updated Android and iOS samples have instructions and working code with AppAuth, an open source library that uses the system web-views.

Azure AD B2C support for System Web-Views

Traditionally, applications using embedded web-views send an OAuth request to an identity provider with a redirect URN such as urn:ietf:wg:oauth:2.0:oob. Once the user signed in with the identity provider and the identity provider attempted to redirect the user back to the URN, the application, having full control of the web-view, would intercept the response and grab the authorization code.

Conversely, applications using system web-views do not have control over the web-view and thus can&039;t intercept the OAuth response, they need a way for the system web-view when to return control back to the application. To support system web-views, Azure AD B2C has added support for custom redirect URIs for native clients (e.g. com.onmicrosoft.fabrikamb2c.exampleapp://oauthredirect) which developers can set up in their application configurations to ensure that the system web-view sends the response back to the application. Also, to ensure that only the application that generated the OAuth request can redeem the authentication code, Azure AD B2C added support for Proof Key for Code Exchange (PKCE).

If you run into any issues please contact Azure Support or if you have coding questions, don&039;t hesitate to post on StackOverflow using the azure-ad-b2c tag.
Quelle: Azure

Now Supported in Cloud Foundry: Azure Blob Storage and Managed Disks

Cloud Foundry on Azure keeps getting better.

We now support the use of Azure Blob Storage and Managed Disks with Cloud Foundry.

These enhancements come on the heels of the launch of Pivotal Cloud Foundry on Azure and a series of Azure Service Broker releases. We continue to invest in deeper integration of Azure’s enterprise grade services with the open source Cloud Foundry platform.

Here’s how to get started with these new capabilities!

1.Use Azure Blob Storage for the Cloud Foundry Cloud Controller Blobstore

The Cloud Controller blobstore is a critical data store. Buildpacks, droplets, packages, and resource pools are all hosted this way. Operators can now use Azure Blob Storage for this component. Consequently,they will enjoy greater availability and scalability. Previously, an NFS server was required.

By default, the blobstore configuration uses the Fog Ruby gem. The Azure team worked with Fog community updating the Fog Azure RM gem to support this new feature.

Check out the Cloud Foundry documentation for background and configuration instructions. The BOSH deployment template (multi-node) is updated, using Azure Blob storage by default. This is also integrated with the upcoming Pivotal Cloud Foundry 1.10 release.

2. Use Azure Managed Disks

The Azure CPI V21 now supports  the Azure Managed Disk Service in BOSH.

This simplifies VM/disk deployment and management. It also provides superior scalability, security and reliability.

Operators can choose to create new deployments using managed disks. They can also migrate existing deployments to managed disks. Just make a quick edit to the BOSH manifest file and you’re done! Check the guidance for Using Managed Disks for detailed steps.

This enhancement will be baked into the BOSH and Pivotal Cloud Foundry deployment templates soon. Look for those to be published in the coming months.

We’ve seen tremendous interest in Cloud Foundry running atop Azure. As a result, we are making additional investments. Engineers are working to bring more Azure database services to the Cloud Foundry runtime and service broker. And soon, you&;ll be able to interact with logs and metrics from your Cloud Foundry apps using Azure OMS. Let us know if you have any suggestions by entering your ideas here.

 
Quelle: Azure

Facebook Bans Developers From Using Its Data To Make Surveillance Tools

Stephen Lam / Reuters

Facebook and Instagram developers are no longer allowed to siphon information about you from public posts and package that information into surveillance tools for law enforcement, Facebook announced Monday.

The social networking giant updated its policy, clarifying that developers can&;t “use data obtained from us to provide tools that are used for surveillance.” Facebook said the new policy now makes the ban on surveillance tools explicit. “Over the past several months we have taken enforcement action against developers who created and marketed tools meant for surveillance, in violation of our existing policies; we want to be sure everyone understands the underlying policy and how to comply,” Facebook said.

The announcement follows a widely discussed American Civil Liberties Union investigation last year that uncovered a partnership between law enforcement officials across the country and a social media monitoring company called Geofeedia. Through public records requests, the ACLU learned that Geofeedia had been providing law enforcement with information gathered from social media, including people&039;s location data. Geofeedia, which works with hundreds of local police departments, also specifically targeted people on Facebook, Instagram, and Twitter who had participated in demonstrations against police violence and abuse, the ACLU found.

The investigation raised serious concerns about Twitter and Facebook&039;s role in aiding government surveillance, and it undercut the companies&039; public commitments to supporting activism and free speech. Since the results of the ACLU&039;s investigation went public, Facebook, Instagram, and Twitter have cut off Geofeedia&039;s access to their users&039; data.

The ACLU praised Facebook&039;s updated developer policy as a positive change. “Now more than ever, we expect companies to slam shut any surveillance side doors and make sure nobody can use their platforms to target people of color and activists,” said Nicole Ozer, the director of technology and civil liberties at the ACLU of California, in a statement.

Still, the ACLU, the Center for Media Justice, and Color of Change have urged Facebook to do more to enforce their prohibition on surveillance. In a statement Monday, the advocacy groups described the updated policy as a “first step.”

Facebook enforces its developer rules through both automated and human audits. The company told BuzzFeed News that developers must disclose what they are using Facebook data for, and that Facebook can conduct broader audits after they receive a complaint of potential violations. But the advocacy groups emphasized the need for strict enforcement of Facebook&039;s policies to suss out developers who break surveillance rules, and “swift action for violations.”

Quelle: <a href="Facebook Bans Developers From Using Its Data To Make Surveillance Tools“>BuzzFeed

Austin's Uber Replacements Flunked An Important Test During SXSW

A screenshot of Fasten&;s app on Saturday.

William Alden / Via BuzzFeed News

Austin&039;s homegrown ride-hailing services, which sprung up after Uber and Lyft left the city in protest of a local rule, had hoped to ace the task of shuttling the global tech and media elite around the SXSW Conference and Festivals here this weekend.

But these apps — which claim Uber can be replaced, and that there&039;s no “secret sauce” behind its spectacular success — failed a major stress test during their moment in the spotlight last night.

With rain pouring down and crowds of festival attendees hopping from party to party, RideAustin and Fasten, two popular ride-hail apps in town, went totally dead for at least portions of the evening. Fasten, a small startup from Boston that paid to be the “official” ride-hail service of SXSW, experienced a 12-times increase in demand Saturday night that forced it offline for at least an hour. RideAustin, a nonprofit that&039;s especially popular among locals, was down for “several hours,” it said in a Facebook post, after its database was overloaded.

The local ride-hail apps still have a week to try to redeem themselves, but this weekend was supposed to be a triumph for them. RideAustin, Fasten, and others emerged in the Texas capital after Uber and Lyft exited last May, protesting a requirement that their drivers be fingerprinted for background checks. The local services portrayed the departure of the two behemoths as typical of the bullying capitalists from Silicon Valley.

But on Sunday, these homespun upstarts found themselves weathering a storm of customer rage that is all too familiar to Uber and Lyft.

“Spent an hour trying to find a ride,” tweeted Ryan Hoover, a well-known techie from San Francisco who founded Product Hunt. “Austin is broken w/o Uber or Lyft. Other ridesharing apps aren&039;t working and all the taxis are full.”

Others went on Twitter to post screenshots of the flatlining apps or of the breathtakingly high fares they had to pay when service was available. Fasten says it doesn&039;t use surge pricing — instead letting customers choose to pay more to attract drivers, with so-called “boost pricing” — but that claim rang hollow to riders who paid, in one example, more than $60 to go less than 5 miles on Saturday.

Fasten and RideAustin both made public apologies, saying the outages wouldn&039;t happen again. The CEO of Fasten, Kirill Evdakov, told BuzzFeed News that the higher prices, determined by algorithm, are necessary to attract drivers during busy times. (Fasten takes only 99 cents from each fare, even when prices reach the stratosphere — meaning drivers stand to make a serious killing if the app can stay online in the coming week.)

“We&039;re confident that it was a great idea to invest in support of SXSW,” Evdakov told BuzzFeed News on Sunday morning. Referring to the outage, he added, “We definitely don&039;t think it&039;s going to ruin SXSW in general. It&039;s just one hour out of 240 hours of the event.”

According to Austin locals interviewed by BuzzFeed News, the apps perform well in normal circumstances, and they&039;ve won devoted fans. The nonprofit RideAustin, which lets drivers keep the entirety of their fares for standard rides, invites customers to round their fares up to the nearest dollar and donate the balance to charity. Had the outages not happened, the SXSW festival might have provided a convincing argument against the effective duopoly enjoyed by Uber and Lyft.

“RideAustin now works as well as Uber. And the fact that it&039;s nonprofit and supports local charities I love,” said Rajiv Bala, an Austin-based venture capitalist at S3 Ventures.

“I like them better than Uber or Lyft,” said Chris Shonk, another Austin venture capitalist who is a general partner at ATX Seed Ventures. He said he especially appreciated how Fare, another local app, lets customers schedule a ride in advance.

Austin&039;s mayor, Steve Adler, told BuzzFeed News in an interview on Sunday that Uber can have issues, too. He recalled being unable to hail an Uber during the start of the Democratic National Convention in Philadelphia last year, and having to take a long bus ride back to his hotel.

He said he was rooting for Austin&039;s local ride-hail apps.

“I am hopeful and anxious for them, to see how they do tonight, and I hope that they do well,” Adler said. “This obviously was a test of capacity and capability that they hadn&039;t seen yet.”

The local apps had sought to make the most of the SXSW spotlight with a marketing push. In promotional cards at hotels, and in stickers plastered above urinals, RideAustin advertised the “lowest rate per mile” and declared, “NO UBER, NO PROBLEM&;” Near the Austin Convention Center, marketers working for Fare wore branded t-shirts and handed out water bottles.

At hotels, official signage included a code for attendees to get $5 off their first Fasten ride. A Fasten ad in the SXSW guidebook says, “Uber Left” — with “Left” styled to look like Lyft&039;s logo — “it&039;s alright.”

William Alden / Via BuzzFeed News

But on Saturday night, many partygoers downtown were forced to walk in the rain or try to hail a traditional cab — though it seemed at times that hardly any were available.

Leaving the Andreessen Horowitz party, and unable to get a car in the pouring rain, Chris Messina and his friends found a creative solution. Messina, a well-known tech figure who until recently was an executive at Uber, hopped in a taxi that turned out to be occupied. The passenger, sitting shotgun, graciously allowed the group to squeeze in the back. It became a carpool, or as Messina declared, a makeshift UberPool.

LINK: Post-Uber Austin Has A Chance To Rebuild Ride-Hail

LINK: In An Austin Without Uber, Drivers Are Left Wondering What’s Next

Quelle: <a href="Austin&039;s Uber Replacements Flunked An Important Test During SXSW“>BuzzFeed

This Guy's Mini Cooper Got Stolen Twice In Two Days And He Live Streamed Tracking It Down

This Guy's Mini Cooper Got Stolen Twice In Two Days And He Live Streamed Tracking It Down

Ben Yu, a startup cofounder who lives in San Francisco, had his Mini Cooper stolen on Wednesday.

His car has already been through some trauma. “There&;s a lot of vehicle crime and property theft where I am,” he told BuzzFeed News. He lives in San Francisco&039;s Mission neighborhood. “I&039;ve had the windows smashed, the convertible roof slashed, and the battery drained by homeless people sleeping in it with the heat on several times.” According to SFGate, reported car break-ins nearly tripled from 2010 to 2015, when there were nearly 26,000. That&039;s more than 70 per day.

When Yu saw that his car was gone Wednesday morning, he realized he could track its location using the GPS in his Getaround app, which Yu uses to earn extra money when he doesn&039;t need his car. Getaround is a service that allows people to rent their personal cars to other people.

After he opened the app and saw exactly where the thief was joyriding around San Francisco, he called 911 and told police that his car had been stolen, and that he knew where it was. The cops told him he needed to file a police report before they could do anything, so he went to the station and waited three hours for the report to be filed. Meanwhile, his car ran out of gas a whole city away in Brisbane, CA. The thief left it on the side of the road and stole the key.

He retrieved the car with no gas and no key… Then it got jacked again on Thursday.

According to his Facebook, Yu woke up at 8:15 am on Thursday and found that his car had been stolen again from almost the exact same spot. He guessed it was the same perpetrator as Wednesday&039;s theft because that person would have already had a key.

How that happened: If you&039;re letting people rent your car through Getaround, you leave your keys in your car, and the Getaround app locks the doors and disables the engine in case of a break-in. Yu&039;s friend Travis Herrick had been using the Mini, and Herrick had used the normal key to lock the car instead of the Getaround app, though he still left the spare key in the car for renters. When the thief broke in for the second time, they could start the car and make away with it because the app hadn&039;t hobbled the engine.

Yu called the San Francisco police again, and they told him he&039;d have to file another report before law enforcement could take action, despite the fact that he knew the exact location of the car again. After waiting at the station for an hour, an officer told him the police would intervene if he could see his stolen car. So Yu rented a car from Getaround, sped off to find his car himself, and livestreamed it.

~The Chase~

View Video ›

Facebook: video.php

In the live stream, he follows the GPS signal of the car as his friend Herrick drives. When they find it in a Safeway parking lot, they call the cops, who then apprehend the thief.

“I didn&039;t think it would become violent,” he told BuzzFeed News. “When I established visual contact, the police came. But if this hadn&039;t been the world&039;s most incompetent criminal, he would&039;ve gotten away with my car.”

More than anything, Yu said, the encounter obliterated any faith he had in the police.

The first time the car was stolen, he told BuzzFeed News, he was willing to give police the benefit of the doubt. When police said he would have to file a report on the second day, though, he began to believe that police procedure did more harm than good.

As he wrote on Facebook, “What *really* gets me, and what *really* bothers me, is that if it&039;s *this* hard and this ludicrously ridiculous to get the police to help me chase down a car that is literally being driven by the perpetrators for the past 2 hours that I have a literal GPS tracker for that shows exactly where the car is, and that ultimately they fail to apprehend the suspect or do anything about it for 1.5 hours while I&039;m mired in filing a police report, and that I have to literally track the suspects down myself is some absurd vigilante justice situation before the cops are able to apprehend them, how can I possibly have faith that the police will be able to competently accomplish their stated mission and responsibilities when it comes to far more important, serious, pressing, and traumatic crimes that are not material, superficial, and economic in nature, but threaten life and bodily harm and violation?”

View Video ›

Facebook: intenex

He said his immediate plans for his car are to remove it from Getaround and to install security measures.

“Even with the engine disabled, people can still steal the key. That&039;s $200 right there,” he said. “I want to put in an alarm and security cameras, which I&039;d have to disable every time someone wanted to rent it from Getaround.”

His Mini is with SFPD now; they&039;re dusting it for prints, but he does not know what charges the thief will face, or if they will face any at all.

Getaround and the San Francisco Police Department did not immediately respond to request for comment.

Quelle: <a href="This Guy&039;s Mini Cooper Got Stolen Twice In Two Days And He Live Streamed Tracking It Down“>BuzzFeed

This Guy's Mini Cooper Got Stolen Twice In Two Days And He Live Streamed Tracking It Down

This Guy's Mini Cooper Got Stolen Twice In Two Days And He Live Streamed Tracking It Down

Ben Yu, a startup cofounder who lives in San Francisco, had his Mini Cooper stolen on Wednesday.

His car has already been through some trauma. “There&;s a lot of vehicle crime and property theft where I am,” he told BuzzFeed News. He lives in San Francisco&039;s Mission neighborhood. “I&039;ve had the windows smashed, the convertible roof slashed, and the battery drained by homeless people sleeping in it with the heat on several times.” According to SFGate, reported car break-ins nearly tripled from 2010 to 2015, when there were nearly 26,000. That&039;s more than 70 per day.

When Yu saw that his car was gone Wednesday morning, he realized he could track its location using the GPS in his Getaround app, which Yu uses to earn extra money when he doesn&039;t need his car. Getaround is a service that allows people to rent their personal cars to other people.

After he opened the app and saw exactly where the thief was joyriding around San Francisco, he called 911 and told police that his car had been stolen, and that he knew where it was. The cops told him he needed to file a police report before they could do anything, so he went to the station and waited three hours for the report to be filed. Meanwhile, his car ran out of gas a whole city away in Brisbane, CA. The thief left it on the side of the road and stole the key.

He retrieved the car with no gas and no key… Then it got jacked again on Thursday.

According to his Facebook, Yu woke up at 8:15 am on Thursday and found that his car had been stolen again from almost the exact same spot. He guessed it was the same perpetrator as Wednesday&039;s theft because that person would have already had a key.

How that happened: If you&039;re letting people rent your car through Getaround, you leave your keys in your car, and the Getaround app locks the doors and disables the engine in case of a break-in. Yu&039;s friend Travis Herrick had been using the Mini, and Herrick had used the normal key to lock the car instead of the Getaround app, though he still left the spare key in the car for renters. When the thief broke in for the second time, they could start the car and make away with it because the app hadn&039;t hobbled the engine.

Yu called the San Francisco police again, and they told him he&039;d have to file another report before law enforcement could take action, despite the fact that he knew the exact location of the car again. After waiting at the station for an hour, an officer told him the police would intervene if he could see his stolen car. So Yu rented a car from Getaround, sped off to find his car himself, and livestreamed it.

~The Chase~

View Video ›

Facebook: video.php

In the live stream, he follows the GPS signal of the car as his friend Herrick drives. When they find it in a Safeway parking lot, they call the cops, who then apprehend the thief.

“I didn&039;t think it would become violent,” he told BuzzFeed News. “When I established visual contact, the police came. But if this hadn&039;t been the world&039;s most incompetent criminal, he would&039;ve gotten away with my car.”

More than anything, Yu said, the encounter obliterated any faith he had in the police.

The first time the car was stolen, he told BuzzFeed News, he was willing to give police the benefit of the doubt. When police said he would have to file a report on the second day, though, he began to believe that police procedure did more harm than good.

As he wrote on Facebook, “What *really* gets me, and what *really* bothers me, is that if it&039;s *this* hard and this ludicrously ridiculous to get the police to help me chase down a car that is literally being driven by the perpetrators for the past 2 hours that I have a literal GPS tracker for that shows exactly where the car is, and that ultimately they fail to apprehend the suspect or do anything about it for 1.5 hours while I&039;m mired in filing a police report, and that I have to literally track the suspects down myself is some absurd vigilante justice situation before the cops are able to apprehend them, how can I possibly have faith that the police will be able to competently accomplish their stated mission and responsibilities when it comes to far more important, serious, pressing, and traumatic crimes that are not material, superficial, and economic in nature, but threaten life and bodily harm and violation?”

View Video ›

Facebook: intenex

He said his immediate plans for his car are to remove it from Getaround and to install security measures.

“Even with the engine disabled, people can still steal the key. That&039;s $200 right there,” he said. “I want to put in an alarm and security cameras, which I&039;d have to disable every time someone wanted to rent it from Getaround.”

His Mini is with SFPD now; they&039;re dusting it for prints, but he does not know what charges the thief will face, or if they will face any at all.

Getaround and the San Francisco Police Department did not immediately respond to request for comment.

Quelle: <a href="This Guy&039;s Mini Cooper Got Stolen Twice In Two Days And He Live Streamed Tracking It Down“>BuzzFeed

Alphabet's Waymo Asks Judge To Halt Uber’s Self-Driving Program

Anthony Levandowski

Afp / AFP / Getty Images

Waymo, Alphabet’s autonomous car company, on Friday asked a federal judge to stop Uber from using technology it alleges the ride-hail giant stole from it.

The motion for preliminary injunction comes about two weeks after Waymo sued Uber alleging that Anthony Levandowski, the leader of Uber’s self-driving program, stole a crucial part of Waymo’s self-driving technology before leaving Waymo parent company Alphabet (Levandowski joined Uber when it acquired his self-driving truck startup, Otto, last summer).

Waymo’s motion includes sworn testimony from one of Google’s forensic engineers, alleging Levandowski downloaded more than 14,000 files related to its self-driving car efforts. It also includes allegations against two other former Alphabet employees who decamped to Otto and later joined Uber which it claims allegedly downloaded proprietary data as well. Waymo’s filing requests a preliminary injunction that would stop Uber from using what it claims is proprietary technology.

Waymo’s lawsuit centers around laser technology called LiDAR (Light Detection And Ranging), which helps self-driving cars see and navigate the world. Waymo filed suit against Uber after inadvertently receiving an attachment from a supplier, which showed drawings of Uber’s laser technology. In its original complaint against Uber, Waymo argued that those designs bear “striking resemblance” to its own proprietary design.

“Competition should be fueled by innovation in the labs and on the roads, not through unlawful actions,” a Waymo spokesman said in a statement. “Given the strong evidence we have, we are asking the court step in to protect intellectual property developed by our engineers over thousands of hours and to prevent any use of that stolen IP.”

Uber said it was reviewing the latest court filings and reiterated an earlier statement decrying Waymo’s lawsuit as “a baseless attempt to slow down a competitor.”

Waymo&;s request for a preliminary injunction is clearly bad news for Uber — more so should it be granted by a judge. But the lawsuit is far from a death knell for the ride-hail giant&039;s self-driving ambitions. Though Uber is working to develop its own self-driving technologies, it&039;s also using some tech developed by others. The self-driving cars the company is piloting in Pittsburgh and Arizona, for example, both use Velodyne LiDAR.

Lisa Larrimore Ouellette, a professor at Stanford Law School, told BuzzFeedNews that in trade secret cases, courts often decide whether to grant a request for an injunction based on “how quickly the accused infringer brings a product to market and whether that timeline is reasonable if they weren&039;t relying on the trade secret information.”

In Otto’s case, Levandowski started the company in May and sold it to Uber in August. In October, just five months after Otto launched, it made headlines for driving a trailer of 2,000 cases of Budweiser more than 120 miles across Colorado with a driver in the back seat.

Ouellette said it&039;s possible Levandowski could argue that since he has worked on multiple self-driving projects, he was able to quickly produce new self-driving technology for Otto. Employees who switch companies take the skills they acquired with them. “But they can’t take files,” she said, referring to allegations that Levandowski downloaded proprietary data before leaving Google. “That’s clearly not permissible.”

Quelle: <a href="Alphabet&039;s Waymo Asks Judge To Halt Uber’s Self-Driving Program“>BuzzFeed