Microsoft

Microsoft Surface Duo review: Is this the new normal?

Microsoft Surface Duo $1,399 View Product The Good Gorgeous design • Super lightweight and thin • Flexible and sturdy hinge • Compose / tent / book postures add versatility The Bad Buggy • Lack of a front-facing notification panel • Lack of water resistance • Steep navigation learning curve • Hard to control one-handed The…

Microsoft Surface Duo
$1,399

View Product

The Good

Gorgeous design • Super lightweight and thin • Flexible and sturdy hinge • Compose / tent / book postures add versatility

The Bad

Buggy • Lack of a front-facing notification panel • Lack of water resistance • Steep navigation learning curve • Hard to control one-handed

The Bottom Line

The Surface Duo is a right step in a different direction for Microsoft’s mobile efforts. This dual-screen Android device is far from perfect, but it’s a great starting point for what is surely to come.

⚡ Mashable Score 4.0

😎 Cool Factor 5.0

📘Learning Curve 1.5

💪Performance 3.5

💵Bang for the Buck 4.0

The Surface Duo is an odd duck.

I’m not drinking the Microsoft marketing Kool-Aid when I say this, but this thing doesn’t feel like a phone, although it runs Android. It’s not even an effective tablet, thanks to that screen-swallowing metal hinge. No, this “thing” is more like a laptop with two connected, touchscreen monitors — except it’s not a sufficient laptop replacement. So what is it then?

It’s important to preface this review by scrubbing your brain of any “mobile phone” associations because, aside from the fact that you hold the Duo in your hands, the comparisons are not entirely appropriate. This is not an apples-to-apples situation; it’s more like apples-to-durian fruit. In my short time with the device, I’ve come to realize that it does rightly occupy its own space within the larger foldables category without actually being one of those full-fledged foldables. Its dual 5.6-inch 1800×1350 AMOLED screens open in a book-like manner to form a bisected 8.1-inch display, making the Duo an outlier — while its “cousins,” Samsung’s Galaxy Z Flip and Z Fold 2, embrace single bendable displays. 

There’s one other inescapable thing about the Duo you’ll come to realize within your first few hours with it: a steep learning curve. You won’t use the Duo like you use your current phone, though you will try. Instead, the Duo will teach you how it wants to be used through trial and frustrating errors, most of which are navigation-based. But as with all new things, it’ll eventually become familiar and you’ll settle into a rhythm with it.

The question is whether it’s worth the hassle.

A premium feel to match the price

It's a book. It's a phone. It's a ... Surface Duo.

It’s a book. It’s a phone. It’s a … Surface Duo.

Image: zlata ivleva / mashable

Starting at $1,400, the Surface Duo is far from impulse-buy territory, but it’s also more affordably priced than something like the bank-breaking, $2,000 Galaxy Z Fold 2. Its Android core and related suite of pre-installed Google apps, including Gmail, Maps, and more, help to lower the risk/novelty factor some, allowing curious early adopters to dabble in Microsoft’s new Android-pond without ditching the mobile ecosystem their virtual lives have come to depend upon. 

But that doesn’t mean Microsoft has ceded the show entirely to Google. The company’s left its imprint on the Duo, packing it with all of the Office apps you expect (i.e., Outlook, OneDrive, OneNote, Teams, OneDrive), plus others like Skype, LinkedIn, and Edge.

For the price, Microsoft is giving users 128GB of storage — upgradeable to 256GB for an additional cost — paired with 6GB of RAM, a Snapdragon 855 CPU, and a 3,577mAh battery that never once posed a problem throughout my time testing the device. (In fact, I hardly worried about battery life at all since it lasted over 10 hours on a single charge with heavy use. Normal use gets you more than a day.) 

All of this is housed inside of an elegantly thin and lightweight device that weighs just a little more than half a pound and measures just under 5mm when unfolded. This emphasis on a featherweight build means the Duo is truly portable — you can slide it easily into your pants pocket or toss it in a bag without weighing down your shoulder. But the Duo’s slight profile also works against it to a degree. By emphasizing thinness, the product team behind the Duo also sacrificed some much-needed convenience in the form of a front-facing notification panel.

This may seem like a minor design omission, but losing the ability to check notifications at a glance actually heightened my anxieties. I found myself reaching more often for the Duo, not because I wanted to play around with it, but because I was paranoid I’d missed an email or text. Microsoft has positioned this as the working professional’s device — you know, those multitasking A-types who have no problem emailing you after work hours, and are ready to respond to Slack pings while on the treadmill past 10pm on the weekend. And it’s done that group a disservice in this regard. 

Sure, you could argue that a connected smartwatch would alleviate this pain point (and it’s possible many of those overachieving A-types already use one), but that’s not included in the box. So that excuse doesn’t really factor in here.

The Surface Duo "hinges" on this sturdy fella.

The Surface Duo “hinges” on this sturdy fella.

Image: zlata ivleva / mashable

I’d assumed the Duo’s “peek” posture, which allows you to slightly open the device to glance at the time, would rectify this misstep. I was wrong. This mode only shows the current time — that is when you manage to open the device to the exact degree to trigger it — not the number of unread emails and texts, or whatever other notifications you rely on. If you really want to know what you’ve been missing out on, you have to fully open the Duo. It’s not ideal. And that’s just the way it is.

Its convenience shortcomings notwithstanding, the Duo is undeniably a thing of beauty. It’s a solid, premium piece of engineering, and for that Microsoft deserves credit. You’ll know this cost $1,400 because it feels like it cost $1,400 — it’s just sturdy. And you can tell the Duo belongs to the Surface family, too, because of the minimalist design at work. When closed, the only noticeable embellishment is the silvery Windows logo on its front. The rest is a sea of glacier white that’s broken only by its silent 360-degree metal hinge. 

Everything you need to physically control the Duo is placed along the right edge of the right display. Here is where you’ll find the reliable fingerprint sensor sandwiched between the volume rocker and power button above it, and the SIM card tray below. The USB-C port, which can be used for fast charging with the included 18W power supply or for connecting to a PC or laptop, lives on the bottom edge of the right display.

Assume the single-screen posture.

Assume the single-screen posture.

Image: zlata ivleva / mashable

As for its cameras, well… the Duo only has one. (I know — gasp, clutch your pearls, shake your head — whatever helps you process this departure from normalcy.) This lone 11-megapixel camera (f/2.0) sits above the right display and does double duty as your main and selfie cam, depending on the posture. Fold the left display back into single-screen mode with the right screen facing outwards, and you can shoot “rear” photos like you normally would with a regular smartphone. If you need to swap into selfie mode, just flip the Duo around and it should automatically adjust, lighting up the display you’re facing. This doesn’t always work seamlessly, however, and in those instances an onscreen prompt will instruct you to double-tap your desired display to “wake” it.

Your guide to ‘good’ postures

By now, you’ve surely come to realize that “posture” is just Microsoft’s fancy way of describing how you hold and fold the Duo. There are five of these modes to choose from — book, compose, single screen, tent, and peek — though I came to rely on just two. 

Compose

Compose mode works best for scrolling through social media or watching Twitch.

Compose mode works best for scrolling through social media or watching Twitch.

Image: zlata ivleva / mashable

Of the bunch, the most enticing and useful posture is compose — but not for the reasons Microsoft intended. This mode allows you to flip the Duo into a laptop-like orientation, freeing up the bottom display to function as a fullscreen keyboard, with the “compose” window (for emails or texts) up top.  

I managed to pleasantly while away a couple of hours with the Duo in this posture as I listened to Spotify on my Surface Earbuds and slowly thumb-typed out a journal entry. But the experience wasn’t without frustration. Due to the power button’s placement on the right side of the fingerprint sensor — a natural resting place for your right pinky finger when holding the Duo in the compose posture — I found that I kept accidentally triggering it and turning o

Read More

Be the first to write a comment.

Leave a Reply

Your email address will not be published. Required fields are marked *

Microsoft

The Outer Worlds 2 is now $10 cheaper, as Obsidian details how to get a refund on your pre-order

If you click on a link and make a purchase we may receive a small commission. Read our editorial policy. The Outer Worlds 2 is now $10 cheaper, as Obsidian details how to get a refund on your pre-order Cash in hand. Image credit: Obsidian News by Connor Makar Staff Writer Published on July 23

If you click on a link and make a purchase we may receive a small commission. Read our editorial policy.

The Outer Worlds 2 is now $10 cheaper, as Obsidian details how to get a refund on your pre-order

Cash in hand.

A character in a leafy ghilli suit leaps over a platform towards the camera while being shot at from afar.
Image credit: Obsidian

The Outer Worlds 2, the upcoming sci-fi FPS by Obsidian Entertainment will now be sold at $70 dollars, rather than the planned $80. This follows a statement by Microsoft confirming the U-turn earlier today.

Those who have already purchased the game at the $80 price point on Steam will have the purchase refunded and re-bought at the lower figure. On Battle.net, those who pre-ordered the game will have their orders cancelled and refunded, and will have to re-buy the game. Those on Xbox and PlayStation will have the difference refunded in the upcoming days.

This announcement was made on The Outer Worlds official social media accounts, with a cute in-universe statement and graphic. On the official Obsidian website, further explanation on how the price change will affect those who’ve already spent money has been provided.

Cover image for YouTube videoThe Outer Worlds 2 – Official Gameplay Trailer

Watch the gameplay trailer

Read More

Continue Reading
Microsoft

Microsoft reverses $80 first-party price hike to keep “full priced holiday releases in line with current conditions”

If you click on a link and make a purchase we may receive a small commission. Read our editorial policy. Home News Microsoft reverses $80 first-party price hike to keep “full priced holiday releases in line with current conditions” Starting with The Outer Worlds 2 Image credit: Obsidian Entertainment News by Vikki Blake Contributor Published

If you click on a link and make a purchase we may receive a small commission. Read our editorial policy.

Microsoft reverses $80 first-party price hike to keep “full priced holiday releases in line with current conditions”

Starting with The Outer Worlds 2

Image credit: Obsidian Entertainment

Just weeks after confirming The Outer Worlds 2 will be the first Microsoft game to retail for $80, Microsoft has reversed the decision, revealing the highly-anticipated sequel will now launch for $69.99 in keeping with typical AAA pricing.

This will apply not just to The Outer Worlds 2, but indeed other “full priced holiday releases” launched across the period.

In a statement, a Microsoft spokesperson said Xbox was “focused on bringing players incredible worlds to explore, and will keep our full priced holiday releases, including The Outer Worlds 2, at $69.99, in line with current market conditions.”

On social media, developer Obsidian posted: “We have received your SOS via skip drone about the pricing. As an organization devoted to making sure that corporations do not go unfettered, we at the Earth Directorate have worked with [REDACTED] to revise the price of The Outer Worlds 2. While this will not bring peace to the galaxy, or even your local colony, we assure you all that we are here to fight for all colonies in every way that we can.”

Microsoft announced last month that The Outer Worlds 2 would be the first Xbox title to retail at $80 following Microsoft’s planned price rises in May.

“We understand that these changes are challenging, and th

Read More

Continue Reading
Microsoft

Coyote malware abuses Windows accessibility framework for data theft

A new variant of the banking trojan ‘Coyote’ has begun abusing a Windows accessibility feature, Microsoft’s UI Automation framework, to identify which banking and cryptocurrency exchange sites are accessed on the device for potential credential theft. …

A new variant of the banking trojan ‘Coyote’ has begun abusing a Windows accessibility feature, Microsoft’s UI Automation framework, to identify which banking and cryptocurrency exchange sites are accessed on the device for potential credential theft. …
Read More

Continue Reading
Microsoft

Microsoft Server Software Comes Under Widespread Cyberattack

Breadcrumb Trail Links Home PMN Business Share this Story : Microsoft Rushes to Stop Hackers from Wreaking Global Havoc Copy Link Email X Reddit Pinterest LinkedIn Tumblr Microsoft Rushes to Stop Hackers from Wreaking Global Havoc Hackers exploited a security flaw in common Microsoft Corp. software to breach governments, businesses and other organizations across the

Microsoft Rushes to Stop Hackers from Wreaking Global Havoc

Hackers exploited a security flaw in common Microsoft Corp. software to breach governments, businesses and other organizations across the globe and steal sensitive information, according to officials and cybersecurity researchers.

Article content

(Bloomberg) — Hackers exploited a security flaw in common Microsoft Corp. software to breach governments, businesses and other organizations across the globe and steal sensitive information, according to officials and cybersecurity researchers.

Article content

Microsoft over the weekend released a patch for the vulnerability in servers of the SharePoint document management software. The company said it was still working to roll out other fixes after warnings that hackers were targeting SharePoint clients, using the flaw to enter file systems and execute code.

Article content
Article content

Story continues below

Article content

Multiple different hackers are launching attacks through the Microsoft vulnerability, according to representatives of two cybersecurity firms, CrowdStrike Holdings, Inc. and Google’s Mandiant Consulting.

Article content
Article content

Hackers have already used the flaw to break into the systems of national governments in Europe and the Middle East, according to a person familiar with the matter. In the US, they’ve accessed government systems, including ones belonging to the US Department of Education, Florida’s Department of Revenue and the Rhode Island General Assembly, said the person, who spoke on condition that they not be identified discussing the sensitive information.

Article content

Representatives of the Department of Education and Rhode Island legislature didn’t respond to calls and emails seeking comment Monday. A Florida Department of Revenue spokesperson, Bethany Wester Cutillo, said in an email that the SharePoint vulnerability is being investigated “at multiple levels of government” but that the state agency “does not comment publicly on the software we use for operations.”

Article content

Story continues below

Article content

The hackers also breached the systems of a US-based health-care provider and targeted a public university in Southeast Asia, according to a report from a cybersecurity firm reviewed by Bloomberg News. The report doesn’t identify either entity by name, but says the hackers have attempted to breach SharePoint servers in countries including Brazil, Canada, Indonesia, Spain, South Africa, Switzerland, the UK and the US. The firm asked not to be named because of the sensitivity of the information. 

Article content

In some systems they’ve broken into, the hackers have stolen sign-in credentials, including usernames, passwords, hash codes and tokens, according to a person familiar with the matter, who also spoke on condition that they not be identified discussing the sensitive information.

Article content

“This is a high-severity, high-urgency threat,” said Michael Sikorski, chief technology officer and head of threat intelligence for Unit 42 at Palo Alto Networks Inc. 

Article content

“What makes this especially concerning is SharePoint’s deep integration with Microsoft’s platform, including their services like Office, Teams, OneDrive and Outlook, which has all the information valuable to an attacker,” he said. “A compromise doesn’t stay contained—it opens the door to the entire network.” 

Article content

(Bloomberg) — Hackers exploited a security flaw in common Microsoft Corp. software to breach governments, businesses and other organizations across the globe and steal sensitive information, according to officials and cybersecurity researchers.

Article content

Microsoft over the weekend released a patch for the vulnerability in servers of the SharePoint document management software. The company said it was still working to roll out other fixes after warnings that hackers were targeting SharePoint clients, using the flaw to enter file systems and execute code.

Article content
Article content

Story continues below

Article content

Multiple different hackers are launching attacks through the Microsoft vulnerability, according to representatives of two cybersecurity firms, CrowdStrike Holdings, Inc. and Google’s Mandiant Consulting.

Article content
Article content

Hackers have already used the flaw to break into the systems of national governments in Europe and the Middle East, according to a person familiar with the matter. In the US, they’ve accessed government systems, including ones belonging to the US Department of Education, Florida’s Department of Revenue and the Rhode Island General Assembly, said the person, who spoke on condition that they not be identified discussing the sensitive information.

Article content

Representatives of the Department of Education and Rhode Island legislature didn’t respond to calls and emails seeking comment Monday. A Florida Department of Revenue spokesperson, Bethany Wester Cutillo, said in an email that the SharePoint vulnerability is being investigated “at multiple levels of government” but that the state agency “does not comment publicly on the software we use for operations.”

Article content

Story continues below

Article content

The hackers also breached the systems of a US-based health-care provider and targeted a public university in Southeast Asia, according to a report from a cybersecurity firm reviewed by Bloomberg News. The report doesn’t identify either entity by name, but says the hackers have attempted to breach SharePoint servers in countries including Brazil, Canada, Indonesia, Spain, South Africa, Switzerland, the UK and the US. The firm asked not to be named because of the sensitivity of the information. 

Article content

In some systems they’ve broken into, the hackers have stolen sign-in credentials, including usernames, passwords, hash codes and tokens, according to a person familiar with the matter, who also spoke on condition that they not be identified discussing the sensitive information.

Article content

“This is a high-severity, high-urgency threat,” said Michael Sikorski, chief technology officer and head of threat intelligence for Unit 42 at Palo Alto Networks Inc. 

Article content

“What makes this especially concerning is SharePoint’s deep integration with Microsoft’s platform, including their services like Office, Teams, OneDrive and Outlook, which has all the information valuable to an attacker,” he said. “A compromise doesn’t stay contained—it opens the door to the entire network.” 

Advertisement 2
Advertisement
Article content

Tens of thousands — if not hundreds of thousands — of businesses and institutions worldwide use SharePoint in some fashion to store and collaborate on documents. Microsoft said that attackers are specifically targeting clients running SharePoint servers from their own on-premise networks, as opposed to being hosted and managed by the tech firm. That could limit the impact to a subsection of customers.

Article content

A Microsoft spokesperson declined to comment beyond an earlier statement.

Article content

“It’s a dream for ransomware operators,” said Silas Cutler, a researcher at Michigan-based cybersecurity firm Censys. He estimated that more than 10,000 companies with SharePoint servers were at risk. The US had the largest number of such firms, followed by the Netherlands, the UK and Canada, he said. 

Article content

The breaches have drawn new scrutiny to Microsoft’s efforts to shore up its cybersecurity after a series of high-profile failures. The firm has hired executives from places like the US government and holds weekly meetings with senior executives to make its software more resilient. The company’s tech has been subject to several widespread and damaging hacks in recent years, and a 2024 US government report described the company’s security culture as in need of urgent reforms.

Article content

Story continues below

Article content

The Center for Internet Security, which operates a cybersecurity information sharing system for state and local governments in the US, found more than 1,100 servers that are at risk from the SharePoint vulnerability, said Randy Rose, the organization’s vice president of security operations and intelligence. Rose said more than 100 were likely hacked.

Article content

The Washington Post reported that the breach had affected US federal and state agencies, universities, energy companies and an Asian telecommunications company, citing state officials and private researchers.

Article content

Eye Security was the first to identify that attackers were actively exploiting the vulnerabilities in a wave of cyberattacks that began on Friday, said Vaisha Bernard, the company’s chief hacker and co-owner.

Article content

Eye Security said the vulnerability allows hackers to access SharePoint servers and steal keys that can let them impersonate users or services even after the server is patched. It said hackers can maintain access through backdoors or modified components that can survive updates and reboots of systems.

Article content

Story continues below

Article content

The SharePoint vulnerabilities, known as “ToolShell,” were first identified in May by researchers at a Berlin cybersecurity conference. In early July, Microsoft issued patches to fix the security holes, but hackers found another way in.

Article content

“There were ways around the patches,” which enabled hackers to break into SharePoint servers by tapping into similar vulnerabilities, said Bernard. “That allowed these attacks to happen.” The intrusions, he said, were not targeted and instead were aimed at compromising as many victims as possible. After scanning about 8,000 SharePoint servers, Bernard said he has so far identified at least 50 that were successfully compromised.

Article content

He declined to identify the identity of organizations that had been targeted, but said they included government agencies and private companies, including “bigger multinationals.” The victims were located in countries in North and South America, the EU, South Africa, and Australia, he added.

Article content
Article content

—With assistance from Lynn Doan, Cameron Fozi, Daniel Cancel, Aashna Shah, Jane Lanhee Lee and Patrick Howell O’Neill.

Article content

(Updates with additional information beginning in third paragraph.)

Article content

Comments
You must be logged in to join the discussion or read more comments.
Create an AccountSign in
Join the Conversation

Postmedia is committed to maintaining a lively but civil forum for discussion. Please keep comments relevant and respectful. Comments may take up to an hour to appear on the site. You will receive an email if there is a reply to your comment, an update to a thread you follow or if a user you follow comments. Visit our Community Guidelines for more information.

Read More

Continue Reading