The next version of Android could give you an estimate of your battery's remaining capacity, which naturally degrades over time. "Android 14 laid the initial groundwork for the OS to track battery health information, but Android 15 could actually bring that information in front of users," reports Android Authority. It could also tell you whether your device's battery has been replaced. From the report: The manufacture date and cycle count aren't the only battery-related statistics that Android 14 exposes to apps through new APIs, though. Other battery health details like the date of first use, charging policy, charging status, and state of health are also available. The state of health is particularly interesting because it's an estimate of the battery's current full charge capacity, expressed as a percentage relative to the battery's rated capacity. For example, if your Pixel 8 battery's state of health is measured at 90%, that means its remaining full charge capacity is estimated to be about 4118mAh (compared to the rated 4575mAh).

The Settings app currently doesn't show the battery state of health, but that's set to change in the future, as the latest version of the Settings Services app (an extension to the Settings app on Pixel and other devices) found within Android 14 QPR2 Beta 2 has a new "battery health" page that is set to show the state of health. [...] Strings within the APK suggest this page will show you the "estimated percentage of charge the battery can currently hold compared to when it was new" (i.e. the state of health) before and after "recalibration" of the battery. We don't have the exact details on what "recalibration" entails, but given that one string suggests the "process may take a few weeks," we're guessing that it's simply the system collecting data over a longer period to provide a more accurate estimate of the battery capacity. Meanwhile, the "initial battery health values" are "based on lab results" and hence "may vary from your actual battery state."

[...] We also learned that the Settings app itself will surface "tips" to the user when either the battery capacity is degraded or can't be detected, so the user doesn't have to manually check the "battery health" page. Lastly, we learned that Google is working on exposing more battery-related information to the OS, such as the part status and the serial number. [...] At the very least, we do know that Android will support reading the battery's part status and serial number, provided the battery exposes that information to the OS, and the vendor implements the new version of the Android health HAL. The health HAL is the software responsible for bridging the gap between the OS APIs that read battery/charging information (i.e. everything we talked about before) with the software that controls the battery/charging chips. Version 2.0 of the health HAL needs to be implemented to support all the new Android 14 battery health APIs like state of health, which is why so few devices support that right now.

An anonymous reader quotes a report from Ars Technica: It's no secret that TV makers are seriously invested in pushing ads. Using TVs for advertising goes back to 1941 when the first TV commercial aired. But as we trudge our way through the 21st century, TV vendors are becoming more involved in ensuring that their hardware is used to sell stuff and add to their own recurring revenue. This has taken various forms, but in some cases, we're seeing increasingly invasive strategies for turning TVs into a primary place for shopping. The latest approach catching attention comes from the startup Displace. Its upcoming TVs will use integrated webcams and NFC payment readers to make it easy for people to buy stuff they see on TV. [...]

The two new TVs Displace is adding to its 2024 release plans, the Displace Flex and Displace Mini, are all about making TV shopping better. According to Displace's announcement, the Displace Flex (a 55-inch 4K OLED TV) and Displace Mini (a 27-inch 4K OLED TV) will use proprietary gesture technology and each TV's integrated 4K camera to tell when a user is raising their hand. It's unclear how accurate that will be (could the shopping experience accidentally be activated if I raised my hand to tie my hair up, for example?), but at that point, the TV is supposed to pause the content being played. Then, it uses computer vision to "analyze the screen to find products available for sale. Once they see something they want to purchase, viewers drag and drop the product into the global Displace Shopping Cart," the announcement says. Displace Shopping will work at any moment the TV is on, and users can buy stuff they see in commercials by using the TVs.

Displace's December 14 announcement said: "As soon as the viewer is ready to checkout, Displace Payments makes paying as easy as bringing a user's smartphone or watch near the TV's built-in NFC payment reader, a fully secure process that requires no credit card info. Viewers can also pay from within the Displace app." If the TV can't find a specific product for sale, it will "search for similar items" without user intervention, according to Displace. The TV will show products from any available online retailers, allowing users to select where they want to make their purchase. Displace hasn't provided full details about how it will make money off these transactions, but when reached for comment, founder and CEO Balaji Krishnan told Ars Technica that Displace has "different business models, and one of them is to take a transaction fee," and that Displace will share more details "later." Displace also sees people using Displace Payments to pay for telehealth applications and equipped the Flex and Mini with thermal cameras. To ease privacy concerns, Krishnan says the integrated cameras can be folded into the TVs if a user needs privacy.

Eventually, Displace sees itself working with content publishers to lay its shopping UI over actively playing content. "Users would see a workable buy button right on top of the playing video," adds Ars.

Forbes recently published this article by author/speaker Nina Xiang, who reports that Huawei is pushing forward with "an amibitious plan to dethrone Android." Hundreds of technical experts from many of China's biggest state-owned and private companies, including the Industrial and Commercial Bank of China (ICBC), China Telecom, Meituan, and Baidu, all gathered in Beijing last month. The purpose behind the meeting was for their staff to receive training so they could be certified as developers on Huawei's Harmony Operation System (OS).

While most observers were looking the other way, Huawei has been quietly building an independent Chinese operating system that isn't subject to U.S. sanctions. In the four years after the telecom giant was banned from using Google apps, the Shenzhen-based company has been making significant strides toward achieving its long-term goal: To dethrone Android and make its HarmonyOS the default operating system in China.

Looking at the data for smartphone sales in China shows that HarmonyOS had the third-largest share with 10% in the second quarter of 2023, thanks to a strong resurgence in sales of Huawei smartphones. Although it's still well below Android's dominant 72%, it's not far from iOS's 17%... Huawei already says more than 700 million devices (including phones, smart devices, computers, and others) were equipped with HarmonyOS as of August this year, with over 2.2 million developers actively building within the ecosystem...

A key moment will come next year, when Huawei says HarmonyOS will no longer be compatible with Android apps.

An anonymous reader quotes this report from Bloomberg: The U.S. doubts whether Huawei Technologies Co. can produce the advanced chip in its new smartphone at the scale or performance threshold necessary to meet market demand, a senior Commerce Department official told lawmakers Tuesday. "Neither the performance nor yields may match the market of the device," Thea Kendler, assistant secretary for export administration, said during testimony before a House Foreign Affairs Committee oversight panel.

"Moreover, the semiconductor chip that is inside that phone is a poorer performance than what they had years ago," Kendler said. "So our export controls are meaningful in slowing China's advanced technology acquisition...."

The [U.S. Commerce Department's Bureau of Industry and Security] is under pressure from Republicans to be tougher on Huawei and its chipmaking partner Semiconductor Manufacturing International Corp [or SMIC]. Foreign Affairs Committee Chairman Michael McCaul and others have called for the Bureau of Industry and Security to fully cut off both firms from their American suppliers. U.S. Commerce Secretary Gina Raimondo told Bloomberg News in a Monday interview that the U.S. will take the "strongest possible" action to protect its national security following the breakthrough, while declining to confirm the existence of an investigation into Huawei or SMIC.

Solana Saga smartphones sales are surging after arbitrage traders realized every phone comes with an airdrop of BONK meme coins valued at more than the cost of the hardware. "Saga sales have >10x'd in the past 48 hours, and are now on track to sell out before the new year," said Solana co-founder Raj Gokal in a post on X. As a result, Gokal's counterpart, Anatoly Yakovenko, said they'll need to raise the price. CoinDesk reports: The euphoria around BONK -- Solana's dog-themed equivalent to Dogecoin -- has led to a turnaround story for Saga, which just one week ago faced dimming prospects amid forgettable sales figures. Saga is a blockchain-enabled smartphone with special features for storing one's crypto securely on the phone's own hardware. The Saga Discord server exploded on Thursday with newcomers declaring they just bought the phone and wanted to get the airdrop.

According to posts on the Discord server, the BONK airdrop is available to those who download the BONK app from Saga's crypto-forward custom app store. "When you physically have the phone you will be able to mint 'Genesis token' through the 'dApp store, [this] token is eligible to claim the bonk drop," said a user who identified themselves as an employee of Solana Mobile in the Discord server. "The bonk drop is NOT forever, at some point that promotion will end," the user, whose screen name was Jax, said in the Discord. "As of right now the claim is live and is up to the bonk team on when they'd want to close it. No end date yet."

Researchers from the City University of Hong Kong have developed a special antenna that can control all five important aspects of electromagnetic waves using computer software. Interesting Engineering reports: The antenna, which they have named 'microwave universal metasurface antenna,' is capable of dynamically, simultaneously, independently, and precisely manipulating all the essential properties of electromagnetic waves through software control. [...] The antenna adjusts how strong the waves are, their timing, frequency, direction, and even the way they vibrate, all at the same time. It's the first time anyone has made an antenna that can do all these things simultaneously, marking a significant breakthrough in this field.

The antenna is special because it can be used in advanced information systems, like the ones we might have in the future. It's great for handling a lot of data and keeping that data very safe. It can also transfer power wirelessly, meaning it can charge devices without physical connections. One cool thing about this antenna is that it can control the direction of its signals, adding an extra layer of privacy and security. This makes it a good choice for communication systems where we want to ensure nobody can eavesdrop or secretly listen in on our conversations.

Although demonstrated in the microwave band, the UMA's concept can be expanded to terahertz frequencies using specific technologies, enabling applications in augmented reality, holography, integrated sensing and communications for 6G, quantum optics, and quantum information science, noted the researchers in their study. The study has been published in the journal Nature Communications.

An anonymous reader quotes a report from Ars Technica: Criminal suspects can refuse to provide phone passcodes to police under the US Constitution's Fifth Amendment privilege against self-incrimination, according to a unanimous ruling issued (PDF) today by Utah's state Supreme Court. The questions addressed in the ruling could eventually be taken up by the US Supreme Court, whether through review of this case or a similar one. The case involves Alfonso Valdez, who was arrested for kidnapping and assaulting his ex-girlfriend. Police officers obtained a search warrant for the contents of Valdez's phone but couldn't crack his passcode.

Valdez refused to provide his passcode to a police detective. At his trial, the state "elicited testimony from the detective about Valdez's refusal to provide his passcode when asked," today's ruling said. "And during closing arguments, the State argued in rebuttal that Valdez's refusal and the resulting lack of evidence from his cell phone undermined the veracity of one of his defenses. The jury convicted Valdez." A court of appeals reversed the conviction, agreeing "with Valdez that he had a right under the Fifth Amendment to the United States Constitution to refuse to provide his passcode, and that the State violated that right when it used his refusal against him at trial." The Utah Supreme Court affirmed the court of appeals ruling.

The Valdez case does not involve an order to compel a suspect to unlock a device. Instead, "law enforcement asked Valdez to verbally provide his passcode," Utah justices wrote. "While these circumstances involve modern technology in a scenario that the Supreme Court has not yet addressed, we conclude that these facts present a more straightforward question that is answered by settled Fifth Amendment principles." Ruling against the state, the Utah Supreme Court said it "agree[s] with the court of appeals that verbally providing a cell phone passcode is a testimonial communication under the Fifth Amendment."

An anonymous reader quotes a report from Ars Technica: Thirty years ago, a botanist in Germany had a simple wish: to see the inner workings of woody plants without dissecting them. By bleaching away the pigments in plant cells, Siegfried Fink managed to create transparent wood, and he published his technique in a niche wood technology journal. The 1992 paper remained the last word on see-through wood for more than a decade, until a researcher named Lars Berglund stumbled across it. Berglund was inspired by Fink's discovery, but not for botanical reasons. The materials scientist, who works at KTH Royal Institute of Technology in Sweden, specializes in polymer composites and was interested in creating a more robust alternative to transparent plastic. And he wasn't the only one interested in wood's virtues. Across the ocean, researchers at the University of Maryland were busy on a related goal: harnessing the strength of wood for nontraditional purposes.

Now, after years of experiments, the research of these groups is starting to bear fruit. Transparent wood could soon find uses in super-strong screens for smartphones; in soft, glowing light fixtures; and even as structural features, such as color-changing windows. "I truly believe this material has a promising future," says Qiliang Fu, a wood nanotechnologist at Nanjing Forestry University in China who worked in Berglund's lab as a graduate student. Wood is made up of countless little vertical channels, like a tight bundle of straws bound together with glue. These tube-shaped cells transport water and nutrients throughout a tree, and when the tree is harvested and the moisture evaporates, pockets of air are left behind. To create see-through wood, scientists first need to modify or get rid of the glue, called lignin, that holds the cell bundles together and provides trunks and branches with most of their earthy brown hues. After bleaching lignin's color away or otherwise removing it, a milky-white skeleton of hollow cells remains. This skeleton is still opaque, because the cell walls bend light to a different degree than the air in the cell pockets does -- a value called a refractive index. Filling the air pockets with a substance like epoxy resin that bends light to a similar degree to the cell walls renders the wood transparent.

The material the scientists worked with is thin -- typically less than a millimeter to around a centimeter thick. But the cells create a sturdy honeycomb structure, and the tiny wood fibers are stronger than the best carbon fibers, says materials scientist Liangbing Hu, who leads the research group working on transparent wood at the University of Maryland in College Park. And with the resin added, transparent wood outperforms plastic and glass: In tests measuring how easily materials fracture or break under pressure, transparent wood came out around three times stronger than transparent plastics like Plexiglass and about 10 times tougher than glass. "The results are amazing, that a piece of wood can be as strong as glass," says Hu, who highlighted the features of transparent wood in the 2023 Annual Review of Materials Research.

With iOS 17.2 rolling out today, Apple is giving users the ability to record spatial videos on their iPhone 15 Pro and iPhone 15 Pro Max. "The new feature lets users film in three dimensions and experience their favorite memories and special moments on Apple Vision Pro, the upcoming mixed-reality headset," reports TechCrunch. From the report: In order to create a three-dimensional video, Apple explains that the iPhone uses both the main and ultrawide cameras when recording. This is then saved as a single file within a new album in the Photos app titled "Spatial." The videos will also sync across devices with iCloud. Spatial videos are captured in 1080p resolution at 30 frames per second. Spatial video recording can be enabled in Settings by toggling on "Spatial Video for Apple Vision Pro" in the Camera section under Formats. Apple suggests holding the iPhone in landscape orientation for optimal results. Spatial videos can be viewed on all iPhones and other devices; however, they'll appear as regular, 2D videos.

The new feature allows users to record videos that Apple's senior vice president of worldwide marketing, Greg Joswiak, describes as "magical" and "setting a new bar for what's possible." While that's marketing speak, it's a differentiator for Apple's high-end iPhone, and will deepen users' connections with Apple's latest product, the AR/VR headset, launching next year. As part of today's release, Apple also launched its Journal app, which is designed to allow iOS users to record key moments in their lives.

A 16-year-old high school student reverse engineered Apple's messaging protocol, leading to the launch of an interoperable Android app called "Beeper Mini".

But on Friday the Verge reported that "less than a week after its launch, the app started experiencing technical issues when users were suddenly unable to send and receive blue bubble messages." Reached for comment, Beeper CEO Eric Migicovsky did not deny that Apple has successfully blocked Beeper Mini. "If it's Apple, then I think the biggest question is... if Apple truly cares about the privacy and security of their own iPhone users, why would they stop a service that enables their own users to now send encrypted messages to Android users, rather than using unsecure SMS...? Beeper Mini is here today and works great. Why force iPhone users back to sending unencrypted SMS when they chat with friends on Android?"
Apple says they're unable to verify that end-to-end encryption is maintained when messages are sent through unauthorized channels, according to a statement quoted by TechCrunch: "At Apple, we build our products and services with industry-leading privacy and security technologies designed to give users control of their data and keep personal information safe. We took steps to protect our users by blocking techniques that exploit fake credentials in order to gain access to iMessage. These techniques posed significant risks to user security and privacy, including the potential for metadata exposure and enabling unwanted messages, spam, and phishing attacks. We will continue to make updates in the future to protect our users."
Beeper responded on X: We stand behind what we've built. Beeper Mini is keeps your messages private, and boosts security compared to unencrypted SMS. For anyone who claims otherwise, we'd be happy to give our entire source code to mutually agreed upon third party to evaluate the security of our app.
Ars Technica adds: On Saturday, Migicovsky notified Beeper Cloud (desktop) users that iMessage was working again for them, after a long night of fixes. "Work continues on Beeper Mini," Migicovsky wrote shortly after noon Eastern time.
Engadget notes: The Beeper Mini team has apparently been working around the clock to resolve the outage affecting the new "iMessage on Android" app, and says a fix is "very close." And once the fix rolls out, users' seven-day free trials will be reset so they can start over fresh.
Meanwhile, at around 9 p.m. EST, Beeper CEO Eric Migicovsky posted on X that "For 3 blissful days this week, iPhone and Android users enjoyed high quality encrypted chats. We're working hard to return to that state."

Apple and its suppliers aim to build more than 50 million iPhones in India annually within the next two to three years, with additional tens of millions of units planned after that, WSJ reported Friday, citing people familiar with the situation. From the report: If the plans are achieved, India would account for a quarter of global iPhone production and take further share toward the end of the decade. China will remain the largest iPhone producer. Apple has gradually boosted its reliance on India in recent years despite challenges including rickety infrastructure and restrictive labor rules that often make doing business harder than in China. Among other issues, labor unions retain clout even in business-friendly states and are pushing back on an effort by companies to get permission for 12-hour work days, which Apple suppliers find helpful during crunch periods.

Apple and its suppliers, led by Taiwan-based Foxconn Technology Group, generally believe the initial push into India has gone well and are laying the groundwork for a bigger expansion, say people involved in the supply chain. Apple is emblematic of a move among companies worried about overdependence on China to move parts of their supply chains elsewhere, most often to Southeast Asia and South Asia. Diplomatic efforts by the U.S. and its allies to block Beijing's access to advanced technology and strengthen ties with New Delhi have accelerated the trend.

The iFixit team pulled apart the newest Fairphone 5 smartphone and awarded its highest score for repairability: 10 out of 10. With the exception of one or two compromises, the Fairphone 5 is just as repairable as its predecessors. The Register reports: As before, opening the phone is a simple matter of popping off the back of the case. The beefier battery -- 4200 mAh instead of the previous 3905 mAh -- remains easy to remove, although the bigger size has implications elsewhere in the device. Replacing the USB-C port remains simple thanks to a metal lip that allows it to be removed easily. Individual cameras can also be replaced, a nice upgrade from the all-in-one unit of the preceding phone.

However, rather than something along the lines of the Core Module of the previous phone, the iFixit team found a motherboard and daughterboard more akin to other Android handsets. According to Fairphone, the bigger battery made the change necessary, but it's still a little disappointing. Still, the teardown team noted clear labeling to stop cables from being accidentally plugged into the wrong places. It said: "That's what intuitive repair design is all about: it should be easy to do the right thing and complicated to do the wrong thing." According to iFixit co-founder and CEO Kyle Wiens: "Fairphone's promise of five Android version upgrades and over eight years of security updates with the Fairphone 5 is a bold statement in an industry that leans towards fleeting product life cycles. This is a significant stride towards sustainability and sets a new benchmark for smartphone lifespan."

"At iFixit, we believe in tech that lasts, and Fairphone is making that belief a reality. Fairphone's effort to attain a 10-year lifespan is not just impressive; it's unparalleled."

The first wireless charging public roadway in the United States has been installed in Detroit's Corktown neighborhood. Electrek reports: Wireless charging provider Electreon provided inductive-charging copper coils that were installed below the road's surface. The coils will charge EVs equipped with Electreon receivers as they drive over the road. The road's charging segments transfer electricity wirelessly through a magnetic field, which is then transferred as energy to the vehicle's battery, charging it. Detroit's wireless charging roadway is a pilot that will test and aim to perfect the wireless charging technology in a real-world environment. Researchers are using a Ford E-Transit equipped with an Electreon receiver.

The plan is to open it up to the public in the next few years. MDOT and Electreon have entered a five-year commitment to develop and pilot the electric road system on Michigan roads. The pilot is on a quarter-mile stretch on 14th Street between Marantette and Dalzelle Streets in Detroit's historic Corktown. It runs alongside the Newlab at Michigan Central Building, home to more than 60 tech and mobility startups, where the wireless charging tech will be further tested and developed beginning in early 2024. In 2024, MDOT will begin seeking bids to rebuild part of Michigan Avenue (US-12) and will install additional inductive charging.

An anonymous reader quotes a report from TechCrunch: Both Apple and Google today announced their best apps and games of the year, with the hiking and biking companion AllTrails winning as Apple's iPhone App of the Year in 2023, while the educational app Imprint: Learn Visually won as Google Play's best app. Meanwhile, Apple and Google agreed on their Game of the Year, as both picked Honkai: Star Rail as their winner.

These year-end "best of" lists aren't just a way to drive interest in new apps and games, but serve as a way to gauge the status of the app marketplaces, what the platforms themselves wanted to celebrate and what drew consumers' attention in the year. Surprisingly, however, Apple this year bucked the trend of highlighting apps that were new to the store or that had taken advantage of a recently released technology in an innovative way. Instead, its finalists for iPhone App of the Year included apps that have long deserved accolades as well-built and well-designed mobile companions, including the language learning app Duolingo and travel app Flighty, in addition to winner AllTrails. Still, it's worth noting that this is a different type of selection than in previous years, when App Store winners included the breakout social hit BeReal in 2022 and the well-received children's app Toca Life World the year prior.

It's also worth noting that neither Apple nor Google chose an AI app as its app of the year, despite the incredible success of ChatGPT's mobile app and others. That's particularly odd given that ChatGPT became the fastest-growing consumer application in history earlier this year when it reached 100 million users shortly after its launch. That record was later broken by Instagram Threads, which hit 100 million users within just five days, and as of October had still maintained an active user base of just under 100 million. (However, the 100 million users Threads initially counted were sign-ups, not monthly active users, we should note. Meanwhile, ChatGPT's rise to 100 million users included its web app, so it's not an apples-to-apples comparison.) Either one of these picks would represent a mobile app success story, but both app store platforms looked to others as the top winners this year. Plus, outside of ChatGPT, many other AI apps are raking in millions in revenue as well, so the decision to avoid the AI category seems a deliberate choice on Apple's part.

Microsoft Phone Link, previously known as Microsoft Your Phone, lets you control your Android phone from your computer. Now, the company appears to be working on letting you use your Android phone as a webcam with Windows computers, similar to how you can use your iPhone as a webcam on Mac. Android Authority reports: Microsoft's Link to Windows v1.23102.190.0 for Android app includes code that suggests that the company is working on letting your Android phone provide a video stream to your Windows PC. This would effectively allow it to be used as a webcam. [...] These strings indicate that once Microsoft's Phone Link app is working on both connected devices, users would be able to start a camera stream that lets their phone's camera be available to their Windows PC. The strings do not explicitly mention "webcam," but other clues indicate that the feature would be related to video calls in some ways.

Phone Link can already access your camera and video conferencing apps, but this is just mirroring apps running on your phone. What you see on your phone screen is what you see on the computer. If you record a video, it gets saved to your phone as typical video recordings do. With the new functionality spotted above, Phone Link could potentially compete against Apple's Continuity Camera features. With Continuity Camera, users can mount their iPhone to their Mac and then use the iPhone's camera and microphone for FaceTime or other camera apps.

On December 14, 2023, three Grand Theft Auto games will officially become available for Netflix members on the App Store, Google Play, and in the Netflix mobile app. IGN reports: Those who can't wait to jump into Grand Theft Auto III - The Definitive Edition, Grand Theft Auto: Vice City - The Definitive Edition, and Grand Theft Auto: San Andreas - The Definitive Edition can pre-register today to get ready for December 14 and play as soon as they are available. The addition of these three classic Grand Theft Auto games will bring Netflix's gaming library to over 80 titles, and all of these games are available to all Netflix subscribers without any ads, in-app purchases, or extra fees.

OpenAI's "ChatGPT with voice" feature announced in September is now rolling out to all free users on mobile. Engadget reports: When the company first introduced voice chats, it admitted that the capability to create "realistic synthetic voices from just a few seconds of real speech" presents new risks. It could, for instance, allow bad actors to impersonate public figures or anybody they want. As a result, it decided that ChatGPT's voice feature will focus on conversations. It's powered by a text-to-speech model that can generate "human-like audio from just text and a few seconds of sample speech." OpenAI worked with voice actors to create the capability and offers five different voices to choose from.

An anonymous reader quotes a report from Ars Technica: Miscreants are actively exploiting two new zero-day vulnerabilities to wrangle routers and video recorders into a hostile botnet used in distributed denial-of-service attacks, researchers from networking firm Akamai said Thursday. Both of the vulnerabilities, which were previously unknown to their manufacturers and to the security research community at large, allow for the remote execution of malicious code when the affected devices use default administrative credentials, according to an Akamai post. Unknown attackers have been exploiting the zero-days to compromise the devices so they can be infected with Mirai, a potent piece of open source software that makes routers, cameras, and other types of Internet of Things devices part of a botnet that's capable of waging DDoSes of previously unimaginable sizes.

Akamai researchers said one of the zero-days under attack resides in one or more models of network video recorders. The other zero-day resides in an "outlet-based wireless LAN router built for hotels and residential applications." The router is sold by a Japan-based manufacturer, which "produces multiple switches and routers." The router feature being exploited is "a very common one," and the researchers can't rule out the possibility it's being exploited in multiple router models sold by the manufacturer. Akamai said it has reported the vulnerabilities to both manufacturers, and that one of them has provided assurances security patches will be released next month. Akamai said it wasn't identifying the specific devices or the manufacturers until fixes are in place to prevent the zero-days from being more widely exploited.

The Akamai post provides a host of file hashes and IP and domain addresses being used in the attacks. Owners of network video cameras and routers can use this information to see if devices on their networks have been targeted. [...] In an email, Akamai researcher Larry Cashdollar wrote: "The devices don't typically allow code execution through the management interface. This is why getting RCE through command injection is needed. Because the attacker needs to authenticate first they have to know some login credentials that will work. If the devices are using easy guessable logins like admin:password or admin:password1 those could be at risk too if someone expands the list of credentials to try." He said that both manufacturers have been notified, but only one of them has so far committed to releasing a patch, which is expected next month. The status of a fix from the second manufacturer is currently unknown. Cashdollar said an incomplete Internet scan showed there are at least 7,000 vulnerable devices. The actual number of affected devices may be higher.

An anonymous reader quotes a report from SecurityWeek: Moving to clamp down on the growing scourge of SIM-swapping and port-out fraud, the Federal Communications Commission (FCC) has unveiled new rules mandating telcos to give consumers greater control of their mobile phone accounts. Under the new rules, wireless carriers are required to notify customers of any SIM transfer requests, a measure designed to thwart fraudulent attempts by cybercriminals. The FCC has also revised its customer proprietary network information and local number portability rules, making it more challenging for scammers to access sensitive subscriber information.

The new protective measures (PDF) are meant to address SIM-swapping and port-out attacks widely documented in cybercriminal attacks against businesses and consumers. The attack technique is used to hijack mobile accounts, change and steal passwords, bypass MFA roadblocks and raid bank accounts. Studies have found that major mobile carriers in the US are vulnerable to SIM-swapping with the Federal Bureau of Investigation (FBI) receiving thousands of consumer complaints every year.

An anonymous reader quotes a report from Ars Technica: If you've only ever used standard Qi chargers with devices that don't have their own schemes, the Wireless Power Consortium's announcement today of the first Qi 2.0 devices being ready to launch before the holidays, with more than 100 in the queue behind them, is great. Qi2 sports a "Magnetic Power Profile" (MPP), created with help by Apple's MagSafe team, to help align devices and chargers' coils for faster, more efficient charging. Qi2-certified devices set onto Qi2 chargers can achieve 15 W charging, up from 7.5 W in the standard Qi scheme.

That brings Qi2 devices up to the same speed as iPhones on MagSafe chargers, and it clears up some consumer confusion about how fast a device might charge on Qi, MagSafe, or proprietary chargers. Should a phone and charger be Qi2 certified, you can now expect about 15 W out of it, regardless of whatever Google, Apple, or third party is behind them. Android and iPhone users alike are no longer beholden to their primary hardware vendor if they want 15 W of wireless juice. This announcement does not, however, bring the Qi2 standard close to the far-out speeds that proprietary setups now offer. [...]

A number of accessory makers, including stalwarts Anker and Belkin, had already lined up their Qi2-compatible offerings, waiting for the certification to drop. It will be interesting to see if Qi2 brings a wave of magnet mania to Android phones, akin to the MagSafe-induced blitz a few years back. Magnetic charging packs, wallets, wireless charging for a non-wireless-charging phone -- there's a lot to work with, especially at now somewhat more respectable charging speeds. Regarding speed, the WPC told Android Authority back in January that the Qi2 standards group intends to standardize charging speeds above 15 W by mid-2024. If you need a fast charge, plugging in the right cable to a well-powered source is still the most certain route. But with magnetic alignment and a good deal more universal compatibility, Qi2 drags the broader wireless charging market forward.