An anonymous reader shares a report: Are smartphones ever entirely secure? It depends on one's definition of "secure," particularly when dealing with corporate environments. Most companies with bring-your-own-device policies install apps or agents on workers' smartphones to help secure them, leveraging the management capabilities built into operating systems like Android and iOS. But those might not be sufficient. That's what Cloudflare argues, anyway, in the pitch for the new services it's launching this week. Today, the company announced Zero Trust SIM and Zero Trust for Mobile Operators, two product offerings targeting smartphone users, the companies securing corporate phones and the carriers selling data services. Let's start with Zero Trust SIM. Designed to secure all data packets leaving a smartphone, Zero Trust SIM -- once launched in the U.S. (to start) -- will be available as an eSIM deployable via existing mobile device management platforms to both iOS and Android devices. It'll be locked to a specific device, mitigating the risk of SIM-swapping attacks, and usable either in a standalone configuration or in tandem with Cloudflare's mobile agent, WARP.

In a recent email interview, Cloudflare CTO John Graham-Cumming made the case that Zero Trust SIM can accomplish what VPNs and other secure layers can't: cell-level protection. A SIM card can act as another security factor, and -- in combination with hardware keys -- make it nearly impossible to impersonate an employee, he argued. "Zero Trust SIM provides defense in depth. A VPN layer is one of those components, but doesn't remove the need to still deploy cellular connectivity across all of your mobile devices today, and traditional 'AnyConnect-style' VPNs do nothing to stop attackers moving laterally once they're inside the VPN," Graham-Cumming said. "We continue to see organizations breached due to challenges securing their applications and networks, and what was once a real-estate budget is quickly becoming a 'secure my remote and distributed workforce' budget from an IT security perspective." Specifically, Graham-Cumming said that Zero Trust SIM will enable Cloudflare to rewrite DNS requests leaving a device to instead use Cloudflare Gateway for DNS filtering.

New submitter cj9er writes: Considering all the privacy issues in today's online climate (all the issues with Meta right now), what is the best high-end smartphone to select?

Apple: No way they don't sell your data... Sure, they have privacy for third-party apps, but what about the data they collect from the phone itself? Consider what the revenue is on a single smartphone (say $150), how do you think they have all that cash on hand?

Google: Yeah right, Pixel is probably collecting [data] 24/7 considering their main business is selling ads on Search. They have developed the Pixel line because they probably realized they were missing out on the direct collection of data from their own hardware (cut out the middle players using Android).

Samsung: Their TVs even collect and sell data on you. I don't really understand the price premium on Galaxy phones anyways.

I have kept my data and Wi-Fi turned off on my phones for years. Initially it was for battery reasons but now add in data collection. Ultimately, if we could turn off the GPS feature at will on our phones, maybe we could prevent all tracking (except for cellular triangulation). If we then think about safety, GPS is great and now with satellite-tracking on Apple phones, even better. But then what is going on behind the scenes 99.99% of the rest of the time when you don't require those options for safety reasons?

What phone manufacturer can be trusted?

As antitrust regulators around the world dial up scrutiny of platform power, Mozilla has published a piece of research digging into the at times subtle yet always insidious ways operating systems exert influence to keep consumers locked to using their own-brand browsers rather than seeking out and switching to independent options -- while simultaneously warning that competition in the browser market is vital to ensure innovation and choice for consumers and, more broadly, protect the vitality of the open web against the commercial giants trying to wall it up. TechCrunch: "Billions of people across the globe are dependent on operating systems from the largest technology companies. Amazon, Apple, Google, Microsoft and Meta each provide their own browser on their operating systems and each of them uses their gatekeeper position provider to preference their own browsers over independent rivals. Whether it is Microsoft pushing Firefox users to switch their default on Windows computers, Apple restricting the functionality of rival browsers on iOS smartphones or Google failing to apply default browser settings across Android, there are countless examples of independent browsers being inhibited by the operating systems on which they are dependent," Mozilla writes in a summary of its findings. "This matters because American consumers and society as a whole suffer. Not only do people lose the ability to determine their own online experiences but they also receive less innovative and lower quality products. In addition, they can be forced to accept poorer privacy outcomes and even unfair contracts. By contrast, competition from independent browsers can help to drive new features, as well as innovation in areas like privacy and security."

Weeks after Twitter's ex-security chief accused the company of cybersecurity mismanagement, Twitter has now informed its users of a bug that didn't close all of a user's active logged-in sessions on Android and iOS after an account's password was reset. From a report: This issue could have implications for those who had reset their password because they believed their Twitter account could be at risk, perhaps because of a lost or stolen device, for instance. Assuming whoever had possession of the device could access its apps, they would have had full access to the impacted user's Twitter account. In a blog post, Twitter explains that it had learned of the bug that had allowed "some" accounts to stay logged in on multiple devices after a user reset their password voluntarily. Typically, when a password reset occurs, the session token that keeps a user logged into the app is also revoked -- but that didn't take place on mobile devices, Twitter says. Web sessions, however, were not impacted and were closed appropriately, it noted.

Microsoft on Tuesday said it's starting to release the first major update to Windows 11, the current version of its PC operating system. The company said the update is aimed at making PCs easier and safer to use and improve productivity. Some excerpts detailing new features from Windows blog: Windows 11 brought a sense of ease to the PC, with an intuitive design people love. We're building on that foundation with new features to ensure the content and information you need is always at your fingertips, including updates to the Start menu, faster and more accurate search, Quick Settings, improved local and current events coverage in your Widgets board, and the No. 1 ask from you, tabs in File Explorer. All of this helps Windows anticipate your needs and save you time. [...] The PC has always been where people come to get things done -- especially when it comes to tackling complex tasks. With enhancements to Snap layouts, the new Focus feature, and performance and battery optimizations, the new Windows 11 2022 update will help you be your most productive yet. Snap layouts on Windows 11 have been a game changer for multitasking, helping people optimize their view when they need to have multiple apps or documents in front of them at the same time. With the new update, we're making Snap layouts more versatile with better touch navigation and the ability to snap multiple browser tabs in Microsoft Edge. We're introducing Focus sessions and Do Not Disturb to help you minimize distractions that pull you away from the task at hand.

[...] We also want to continue to make Windows the best place to play games. This update will deliver performance optimizations to improve latency and unlock features like Auto HDR and Variable Refresh Rate on windowed games. And with Game Pass built right into Windows 11 through the Xbox app, players can access hundreds of high-quality PC games. Having the right content fuels a great PC experience. A year ago, we redesigned the Microsoft Store on Windows to be more open and easier-to-use -- a one-stop shop for the apps, games and TV shows you love. Today, through our partnership with Amazon, we are expanding the Amazon Appstore Preview to international markets, bringing more than 20,000 Android apps and games to Windows 11 devices that meet the feature-specific hardware requirements. In addition to a growing catalog of apps and games, we are also excited to share that we are moving to the next stage of the Microsoft Store Ads pilot -- helping developers get content in front of the right customers. [...] Windows 11 provides layers of hardware and software integrated for powerful, out-of-the box protection from the moment you start your device -- and we're continuing to innovate. The new Microsoft Defender SmartScreen identifies when people are entering their Microsoft credentials into a malicious application or hacked website and alerts them.

Long-time Slashdot reader n3hat writes: The BBC reports that a thief has been emptying gym patrons' accounts by stealing their bank card and mobile phone, registering the account to the thief's own mobile, and emptying the victims' bank accounts. The thief works around 2-factor authentication by taking advantage of the victim's phone having been configured to show notifications on the lock screen, so the thief can view the 2FA credential even though they don't have the unlock code.

The article gives instructions on how to disable notifications on the lock screen, for both iPhone and Android.

An anonymous reader shares a report: Here's a fun new feature for Chrome for Android: fingerprint-protected Incognito tabs. 9to5Google discovered the feature in the Chrome 105 stable channel, though you'll have to dig deep into the settings to enable it at the moment. If you want to add a little more protection to your private browsing sessions, type "chrome://flags/#incognito-reauthentication-for-android" into the address bar and hit enter. After enabling the flag and restarting Chrome, you should see an option to "Lock Incognito tabs when you leave Chrome." If you leave your Incognito session and come back, an "unlock Incognito" screen will appear instead of your tabs, and you'll be asked for a fingerprint scan.

Google lost most of the first round of its battle to topple a record $4.3 billion European Union antitrust fine that struck at the heart of the US tech giant's power over the Android mobile-phone ecosystem. From a report: In a boost for EU antitrust chief Margrethe Vestager, judges upheld the vast majority of the European Commission's arguments, but cut the penalty to 4.1 billion euros after finding faults in some of the regulator's analysis and that Google's right to a fair hearing had partly been infringed. "The General Court largely confirms the commission's decision that Google imposed unlawful restrictions on manufacturers of Android mobile devices and mobile network operators in order to consolidate the dominant position of its search engine," the Luxembourg-based EU tribunal said in a statement. The Android case is one of a trio of decisions that have been the centerpiece of Vestager's bid to rein in the growing dominance of Silicon Valley. She's fined Alphabet's Google more than 8 billion euros and has since opened new probes into the company's suspected stranglehold over digital advertising.

"The GNOME desktop environment is one of the most popular user interfaces and suites of apps available for desktop Linux distributions," writes Liliputing.

"Now a team of developers have been working to bring GNOME to mobile devices running Linux-based operating systems." GNOME Shell for mobile provides a touch-friendly user interface optimized for smartphones and tablets. And while it looks a bit like Android or iOS at first glance, there are a few key differences. The GNOME team have outlined some of them in an article about recent updates to GNOME Shell on mobile.

Like other modern mobile user interfaces, you interact with GNOME shell using taps, swipes, and other gesture-based navigation. What's different is that Android has three different views for navigation: a home screen, app drawer, and multitasking view. iOS has two: home screen and multitasking. But GNOME Shell has a single screen that allows you to view and launch apps and switch between running apps using gestures. There's no need to wait for a new screen to load. In a nutshell, you can swipe up from the bottom of the any screen to view a list of installed apps, thumbnail images showing all currently running apps, and a search box. You can tap an app icon to launch a new app, enter a term in the search box to find an app, or swipe between running apps to switch which app runs in the foreground.

You can also keep swiping upward to shrink the multitasking thumbnails and provide more room for app icons. And you can flick thumbnail previews upward to remove an app from the multitasking section. Typing in the search box will bring up relevant results including apps and settings.
"One interesting new feature here is that notifications can be swiped away horizontally to close, and notification bubbles can be swiped up to hide them..." the developers point out. "While the current version is definitely still work in progress, it's quite usable overall, so we feel it would make sense to start having experimental GNOME OS Nightly images with it."

But Liliputing also notes that it's not the only GNOME-based UI for mobile devices. There's also Purism's Phosh UI — the default UI for the PureOS on its Librem 5 smartphone (and available for other mobile Linux distros including Debian).

And Purism recently bragged that its smartphone is now also "the first mobile computer with a truly convergent OS" — meaning it can run on multiple hardware platforms, with apps adapting to their hardware. The Librem 5 [smartphone] uses the same convergent PureOS as our Librem 14 laptop and Mini PCs, with the same adaptive applications that make the Librem 5 more than merely a phone, it's a mobile computer in your pocket that can shape shift into a laptop, tablet, desktop, or even a server.... Scale your Librem 5 up to be a full laptop by attaching the Nexdock. Because our core apps are adaptive, they are ready to run on whatever screen you have....

With phosh-mobile-settings installed, you can flip the nexdock around and use the big screen just like a tablet.... Don't have a laptop dock? The Librem 5 can also act like a desktop computer when connected to a screen, keyboard, and mouse using our USB-C dock. Using the beta phom virtual mouse app, you can turn your Librem 5 into a touchpad mouse while it's connected to the big screen.

With the Librem 5, you can keep your desktop computer in your pocket and connect to a bigger screen at home or at the office and use the same apps on the bigger screen without restarting....

With the Librem 5 phone, you're getting much more than smartphone to run mobile-only apps; you're getting a laptop, tablet, desktop, all running software that respects your privacy and freedom.

Android 13 has recently hit the streets, and with it, Google is raising the minimum requirements for Android phones. From a report: Google's latest blog post announced that the minimum amount of RAM for Android Go, the low-end version of Android, is now 2GB for Android 13, whereas previously, it was 1GB. Esper's Mishaal Rahman and Google Product Expert Jason Bayton also claim the minimum storage requirements have been bumped up to 16GB, though Google doesn't seem to have publicly documented this anywhere. The increase in system requirements means any phone that doesn't meet the minimum specs won't be able to update to Android 13. New phones launching with Android 13 will need to meet the minimum requirements to be eligible for Play Store licensing, though launching with an older version of Android (with lower requirements) will still be an option for a while. Technically, anyone can grab the Android source code and build anything with it, but if you want to license the Google apps and have access to the Google-trademarked brand "Android," you'll need to comply with Google's rules.

The first beta for the Android 13 quarterly release includes a new "clear calling" feature that "reduces background noises during calls." From a report: It was first spotted by Mishaal Rahman on Twitter who also tweeted directions to enable it for yourself without root, if you're feeling bold. The images shared by Rahman note that Clear Calling works "on most mobile networks," is "not available for Wi-Fi calling," and "content from your call is not sent to Google."

Today is Disney+ Day, and, as part of its perks, the company is offering Disney+ subscribers a new AR experience in conjunction with the short film "Remembering," starring and produced by "Captain Marvel" Brie Larson and directed and written by filmmaker Elijah Allan-Blitz. The eight-minute-long movie features a companion augmented reality app that allows users to scan their TV with an iOS device to watch an extension of the movie on the small screen. TechCrunch reports: In "Remembering," Larson plays a writer who forgets an idea she had when her phone rings and interrupts her thoughts. The writer's inner child -- played by the young actress Dusty Peak -- helps her recover her lost idea, which is represented as a flying and talking cluster of light, also voiced by Larson. The inner child lives in "The World of Imagination," a fantastical wonderland full of rainbows, shooting stars and dolphin-shaped clouds. The movie aims to spark a discussion about why it is essential to remember your younger self and all the creativity you once had. In doing so, it explores concepts like the origin of ideas and why adults can sometimes be reluctant to use their imaginations.

In years past, Disney has created a number of AR experiences, but this is the first AR app that connects directly to content on the Disney+ platform, the company told TechCrunch. It's an experiment in seeing if AR can serve to enhance movie storytelling even when viewers are watching in their living rooms. The "Remembering" AR component itself is designed to bring "The World of Imagination" alive to viewers by having them engage with the film using their smartphones. [...] The AR app is only available on iOS devices. There are currently no confirmed plans for the app to become available on Android devices. Viewers aren't required to download the app to watch the film and can choose to have a passive viewing experience instead.

Apple CEO Tim Cook dismissed the idea of adopting RCS messaging to put an end to the green bubbles that surround messages when iPhone users text someone on an Android device. From a report: "I don't hear our users asking that we put a lot of energy in on that at this point," Cook said when asked how Apple founder Steve Jobs would feel about using the RCS standard in iMessage during Vox Media's Code 2022 event on Wednesday night. Instead, Cook said, "I would love to convert you to an iPhone."

But the person who asked the question, Vox Media's LiQuan Hunt, came back with a valid complaint, saying that his mother can't see the videos he sends her. It all comes down to a lack of interoperability between iMessage and RCS, both messaging systems that could allow higher-quality images and videos -- if they worked together. If you've tried to send a video from Android to iOS (or vice versa) using your regular text messaging app, then you know that your videos come out completely fuzzy on the other end. Cook's suggestion to fix this annoying issue? "Buy your mom an iPhone."

Google has started sending out invites for its fall hardware event, which is set to take place on Thursday, October 6th, at 10AM ET. The Verge reports: The event will launch the upcoming Pixel 7 phones, as well as the Pixel Watch -- the company showed off both devices at its I/O event earlier this year, announcing they're coming in the fall. Since Google's last event, purported leaks have revealed even more about the devices, with both the Watch and phones seemingly making their way into people's hands.

The Pixel 7 seems like it'll be a pretty straightforward continuation of the previous generation of phones, but there's a bit of pressure with the Watch as the "first smartwatch built by Google, inside and out," as its product page on Google's online store says. Google's competitors (namely Samsung and Apple) have been making wearables for years, so the company's entry has to be competent and at least somewhat competitive right out of the gate. So far, details about it are scant -- we don't even know what chip it'll use -- but we should get a clearer picture come October 6th.

An anonymous reader quotes a report from Ars Technica: Google is slowly opening up the Play Store's billing policies. The "user choice billing" pilot program that was announced in March is now accepting sign-ups. Google describes the program in a support article, saying, "This pilot is designed to test offering an alternative billing option next to Google Play's billing system and to help us explore offering this choice to users. We are looking to gain feedback in different countries and ensure we can maintain a positive user experience." Developers interested in billing through an alternative provider can fill out Google's sign-up form, and it sounds like Google will manually review each application. Google won't let developers use the pilot program for games -- the biggest money makers -- but only for apps.

Barring a few promotional tiers, Google and Apple both take around 30 percent not just for purchases of newly downloaded apps but also for digital purchases inside already downloaded apps. Many developers view these fees as excessive, and the push inside both ecosystems to allow third-party billing was originally pitched as a solution to high app store fees. Various regulatory bodies have forced the Google/Apple app store duopoly to open up payments, but Google and Apple have each done so without fixing the core problem of high app store fees. Apple takes a 27 percent cut of purchases processed outside the app store -- basically the original 30 percent fee minus the typical 3 percent processing fee charged by credit card companies. Google is doing something similar with this new program and will only reduce its fees by 4 percent. You'll still need to pay some kind of fee to your third-party payment processor, so with only a 4 percent reduction from Google, developers won't really save money.

Lenovo is finally selling AR glasses for consumers with the recently-announced Lenovo Glasses T1, which Ars Technica's Scharon Harding got to demo. Here's an excerpt from her report: With their Micro OLED displays and required tether to Windows, macOS, Android, or iOS devices, they bring some notable features to a space that has piqued industry-wide interest but is still likely far from becoming ubiquitous. The early version of the T1 I tried had limited features; I was mostly only able to view a homepage with basic menu options and a desktop with icons for apps, like web browsing. Although the glasses weren't ready for me to watch a movie or hop around apps, I was impressed at how clear text and menu items were. This was in a sunny room with exceedingly tall windows. Even when facing sunlight, the few colors on display seemed vibrant and the text legible.

Lenovo specs the displays with 10,000:1 contrast and 1920x1080 pixels per eye. The glasses are also TUV-certified for low blue light and flicker reduction, according to Lenovo. Much more time is needed to explore and challenge the Micro OLED displays before I pass final judgment. But the combination of smaller pixels and, from what I saw thus far, strong colors, should accommodate screens so close to the eyes. More broadly speaking, brightness can be a concern with OLED technologies, but the small demo I saw fared well in a sun-flushed room.

I used the Glasses T1 while it was connected to an Android smartphone via its USB-C cable, but it's also supposed to work with PCs, macOS devices, and, via an adapter sold separately, iPhones. [...] With no processor or battery, it's easier for the glasses to stay trim. There are also no sensors or cameras like the Lenovo ThinkReality A3, announced last year, has. Other T1 features include a pair of speakers (one near each temple) and the ability to add prescription lenses. [...] The Glasses T1 are expected to be available in select markets in 2023 after debuting in China (as the Lenovo Yoga Glasses) this year. Lenovo didn't set a price, but I was told it's hoping to keep the glasses under $500.

An anonymous reader quotes a report from The Register: Google in November will prohibit Android VPN apps in its Play store from interfering with or blocking advertising, a change that may pose problems for some privacy applications. The updated Google Play policy, announced last month, will take effect on November 1. It states that only apps using the Android VPNService base class, and that function primarily as VPNs, can open a secure device-level tunnel to a remote service. Such VPNs, however, cannot "manipulate ads that can impact apps monetization."

The rules appear to be intended to deter data-grabbing VPN services, such as Facebook's discontinued Onavo, and to prevent ad fraud. The T&Cs spell out that developers must declare the use of VPNservice in their apps' Google Play listing, must encrypt data from the device to the VPN endpoint, and must comply with Developer Program Policies, particularly those related to ad fraud, permissions, and malware.

Blokada, a Sweden-based maker of an ad-blocking VPN app, worries this rule will hinder at least the previous iteration of its software, v5, and other privacy-oriented software. "Google claims to be cracking down on apps that are using the VPN service to track user data or rerouting user traffic to earn money through ads," Reda Labdaoui, marketing and sales manager at Blokada, wrote last week in a a forum post. "However, these policy changes also apply to apps that use the service to filter traffic locally on the device." Labdaoui suggests Blokada v6, which launched in June, should not be affected because it does filtering in the cloud without violating Google's device policies. But other apps may not be so fortunate.

Just over two years after its launch, Facebook is shutting down the Facebook Gaming app on October 28, 2022. Now, when you open the app, you'll see a banner stating that the app will no longer be available on iOS and Android after that date. The app also won't be available on the Google Play Store or the Apple App Store. From a report: "Despite this news, our mission to connect players, fans and creators with the games they love hasn't changed, and you'll still be able to find your games, streamers and groups when you visit Gaming in the Facebook app," the notice reads. "We want to extend our heartfelt thanks to all of you for everything that you've done to build a thriving community for gamers and fans since this app first launched."

If you've been using the app, you can download your search data before the app is discontinued. The app launched in April 2020 toward the start of the COVID-19 pandemic as a way for users to watch their favorite streamers, play instant games and take part in gaming groups. Facebook experienced some hurdles trying to launch the app, as Apple rejected the app numerous times, citing its rules that prohibit apps with the main purpose of distributing casual games. Apple's rules forced Facebook to remove actual gameplay functionality from the app.

Google hasn't yet approved Truth Social's Android app for distribution via its Play Store because of insufficient content moderation, a Google spokesperson tells Axios. From the report: Truth Social CEO Devin Nunes last week claimed the decision about when the app would be available on Android "is up to Google," but Google insists that the ball is in Truth Social's court. What Nunes is saying: "I don't know what's taking them so long."

What Google is saying: "On Aug. 19, we notified Truth Social of several violations of standard policies in their current app submission and reiterated that having effective systems for moderating user-generated content is a condition of our terms of service for any app to go live on Google Play." "Last week Truth Social wrote back acknowledging our feedback and saying that they are working on addressing these issues." A source says that Google's concerns relate to content such as physical threats and incitements to violence.

An anonymous reader quotes a report from The Register: Germany has ordered overnight shutdowns for non-essential digital signage, to save its reserves of natural gas for more important purposes. Like many European nations, Germany relies on natural gas imported from Russia. And thanks to Russia's illegal invasion of Ukraine, that gas is currently in short supply. The European Union has therefore implemented an energy saving plan. One of Germany's tactics is requiring digital signage in shop windows and other non-essential locations to be turned off between 10:00PM and 6:00AM. Germany will also stop external lighting of some public buildings and implement many other power-saving measures. The plan [PDF] requiring the switch-off was published on August 12, with a deadline of September 1.

But as German outlet Invidis reports, the regulation was unhelpfully vague. For starters an updated ordinance [PDF] appears to have made the simple mistake of substituting 06:00 and 16:00 -- meaning digital signage could only run from 4PM to 10PM. Invidis also pointed out that digital signage at bus stops and train stations can do double duty displaying ads and timetable information. Exceptions for such dual-purpose signs have been arranged. Those errors and ambiguities have reportedly left those who run digital signs unsure of what they needed to do and worried they might miss the deadline.

Further complicating matters is a requirement to turn off the screens altogether rather than leaving the displays blank. Digital signage is seldom switched off, and retail staff will have to learn how to do that. Many digital signs also include a computer -- some are Android machines, others use compute sticks, the Intel NUC and even the Raspberry Pi. Admins will therefore need to cope with extra reboots. And then there's the matter of content updates, which are often scheduled overnight. All of which adds up to a stressful moment for admins of digital signage, and not much time to get things right.