HP admitted Thursday that a big goof on the part of a vendor caused a number of its laptop models to log every key being typed. The flaw stemmed from development code in an audio driver that was never intended to be included on shipping computers, HP vice president Mike Nash told Axios late Thursday.

"It was something that was there in the development process and should have been removed," Nash said.

HP issued a fix for 2016 models on Thursday via Windows Update and plans today to issue one for affected 2015 models through Windows Update and on its website.

Why it matters: Although HP never accessed the data and the logs weren't sent anywhere, just having them created a security threat. The fix not only deletes the key-logging code but also the files that stored keystrokes. (However, in theory, customers using PC backup software might have copies elsewhere.)

A federal judge late Thursday denied Uber's effort to have Waymo's case transferred to arbitration. In denying the motion, Judge William Alsop also smacked down the company for its efforts and referred the case to the U.S. Attorney's office for possible prosecution. Kia has more on Uber's legal troubles.

Meanwhile: Alsop has also apparently partially granted Waymo's request for an injunction, but the details are under seal so it's hard to say how far-reaching the order will be. That's important because Uber had already agreed to keep former Waymo employee Anthony Levandowski away from Uber's LiDAR work, but Waymo has been seeking a broader order. The ruling should become public once both sides agree what, if any, parts of the ruling need to be redacted.

President Donald Trump finally signed a long-anticipated executive order on cybersecurity on Thursday, calling for reviews of federal agency plans for handling cybersecurity risks and gathering information on what agencies need to do to protect critical infrastructure like communications networks and energy grids. Of course, how it's implemented will determine its real effectiveness.

Why it matters: Federal agencies are fighting an uphill battle when it comes to data security. Most of them are using very old systems and have tight budgets, yet they are prime cyber crime targets. The order is far from comprehensive, but cybersecurity experts we talked to see the White House directions as a starting point on how they should deal with mounting cybersecurity challenges.

By the numbers: According to a recent federal government edition of the Thales Data Threat Report, 34% of federal respondents experienced a data breach in the last year and 65% experienced a data breach in the past. Almost all (96%) consider themselves 'vulnerable,' with half (48%) stating they are 'very' or 'extremely' vulnerable.

Since the election, The Wall Street Journal, The New York Times, Tronc, The Boston Globe, The Washington Post, and Gannett have all reported jumps in subscriptions. Now, a new study from the AP NORC Center and American Press Institute finds that a majority of Americans (53%) pay for news, and of those, a majority (54%) subscribe to newspapers in print or online.

Why it matters: A surge in subscription numbers across all types of newspapers, combined with the recent AP/API report, dispel the notions that people are unwilling to pay for news and that people are abandoning newspaper coverage. The report also found a clear association between trust of news sources and willingness to pay for news.

The upside: If newspapers want to charge more, now's the time to do it.

The downside: Subscription revenue is still a long way from replacing plunging ad revenue.

On tap: Microsoft's Build conference wraps up in Seattle. Check here for our overview of Day 2's news, which included the announcement that iTunes is coming to the Windows Store later this year.

Trading places: Phil Weiser, Obama's former senior advisor for technology and innovation and dean of the University of Colorado's Law School, has announced his bid to run for Colorado Attorney General.

ICYMI: The Wall Street Journal has a fascinating look at Howard Jonas, who sold a company to AT&T for $1.1 billion in 2000 and just sold his latest firm, Straight Path Communications, to Verizon for $3.1 billion...British virtual world creator Improbable raised a whopping $500 million from SoftBank and others in a round that values the company at more than $1 billion...A Russian blogger was sentenced to three and a half years in jail for playing Pokémon Go in church.

Two bits of good news. 1) Scientists have discovered a new shade of blue and 2) Crayola is making it into a crayon.