×
IOS

Apple's New iOS 17 Will Warn You If Someone Tries To Send Unsolicited Nudes (businessinsider.com) 70

Apple's new iOS 17 includes a Sensitive Content Warning feature that notifies users when they receive unsolicited nude images. Insider reports: Apple said in a press release that the Sensitive Content Warning would help adult users avoid seeing unwanted nude images and videos. The company would not get access to the content as processing for the new feature occurred on the user's device, the press release added. The tech giant is also expanding Communication Safety, a feature aimed at protecting children, to cover sending and receiving content via AirDrop, Contact Posters, and FaceTime messages. The privacy feature will also expand to cover video content, as well as images. Further reading: Apple Announces iOS 17 With StandBy Charging Mode, Better Autocorrect
IOS

Apple Announces iOS 17 With StandBy Charging Mode, Better Autocorrect (theverge.com) 44

At WWDC today, Apple debuted iOS 17. "Highlights include new safety features, a built-in journaling app, a new nightstand mode, redesigned contact cards, better auto-correct and voice transcription, and live voicemail," reports The Verge. "And you'll be able to drop the 'hey' from 'Hey Siri.'" From the report: Your contact book is getting an update with a new feature called posters, which turns contact cards into flashy marquee-like images that show up full-screen on your recipient's iPhone when you call them. They use a similar design language as the redesigned lock screens, with bold typography options and the ability to add Memoji, and will work with third-party VoIP apps. There's also a new live transcription feature for voicemail that lets you view a transcript of the message a caller is leaving in real time. You can choose to ride it out or pick up the call, and it's all handled on-device. You'll also be able to leave a message on FaceTime, too.

Some updates to messages include the ability to filter searches with additional terms, a feature that jumps to the most recent message so you can catch up more easily, transcriptions of voice messages -- similar to what the Pixel 7 series introduced -- and a series of new features called Check In that shares your live location and status with someone else. It can automatically send a message to a friend when you've arrived home, and it can share your phone's battery and cell service status to help avoid confusion if you're in a dead zone. Stickers are getting an overhaul, too, with the ability to add any emoji or photo cutout as a "sticker" positioned on iMessages or anywhere within the system. Live photos can be turned into animated stickers, too, and you can now add effects to stickers.

AirDrop gets an update to send contact information -- cleverly called NameDrop -- which will send your selected email addresses and phone numbers (and your poster) just by bringing two iPhones near each other. It also works between an iPhone and an Apple Watch. Photos can be shared the same way, and if the file is a big one, it's now possible to move out of range while continuing the download. iOS 17 also includes keyboard updates, including enhancements to autocorrect. It now relies on a new language model for better accuracy, plus an easier shortcut to revert to the original word you wrote if necessary. There's now in-line predictive typing and sentence-level autocorrections to correct more grammatical mistakes. It'll finally learn your favorite cuss words, too; Apple's Craig Federighi even made a "ducking" joke onstage. Dictation uses a new AI model, too, that's more accurate.

A new app called Journal automatically suggests moments that you might want to commemorate in a journal entry. Your entries can include photos, music, and activities, and you can schedule reminders for yourself to start writing. It's end-to-end encrypted, too, to keep things private. StandBy is a new mode for charging that turns the screen into a status display with the date and time. It can show information from Live Activities, widgets, and smart stacks and automatically turns on when your phone is in landscape mode while charging. You can swipe to the right to see some of your highlighted photos, and it comes with customizable clockfaces. Siri will surface visual results in StandBy, and the display shifts to a red tone at night to avoid disrupting sleep. Last but not least, Siri gets a boost, too, and finally lets you drop the "hey" from "Hey Siri." It will also recognize back-to-back commands.
iOS 17 is available to developers today, with a public beta released next month.
Cellphones

Progressive Web Apps 'Don't Spy or Clog Your Phone'. Do You Use Them? (msn.com) 94

"It's worth questioning the status quo of technology," argues the Washington Post's Tech Friend newsletter, "including apps as we know them."

Then they tout the benefits of the "non-app app... a hybrid of a website and a conventional app, with features of each" — the unappreciated Progressive Web App (which many still don't know can be installed on your phone's home screen): Web apps look and function pretty much like the conventional apps for your phone or computer, but they clog less space on your device and are less pushy about surveilling you. People who make web apps also say they are easier to create and update than conventional apps... But web apps have been around for years, and most people don't know they exist...

[Traditional apps] come with profound downsides, including Big Tech control, privacy compromises and high development costs. It would be healthy if there were palatable alternative paths to our current app system. Web apps might be part of the solution... At their core, web apps are "the web with an app-like cover," said Rob Kochman, senior product manager for Google's Chrome. Kochman and other web app fans say these apps are less demanding and less intrusive than a conventional app. The web app for Starbucks, for example, takes up just 429 kilobytes of storage on my phone — or less than 1 percent of the storage taken by the standard Starbucks Android app...

And by design, once a conventional app is on your phone, it can access your phone's guts and peek under the hood of your internet network. Web apps are stingier about access, Kochman and other experts told me. "If you're worried about installing some app, you'd probably prefer that as a web app," said a veteran tech executive who helped develop the original technology for web apps. He referred to a web app as "just a website that took all the right vitamins...."

It's difficult to figure out which companies make web apps or find them. There's not an app store for web apps, although there are some attempts like Store.App and Appscope. They're not ideal... Some technologists told me that Apple has held back web apps by limiting their capabilities for Apple devices. The company has said that's not true. And this year, Apple added iPhone feature options for web apps...

We should keep challenging what can feel like immutable parts of digital life, including apps. We have to keep asking: What if there's something better?

It's as easy as "press the three-dot icon, then select 'Add to home screen.'" But it'd be interesting to hear the perspective of Slashdot readers. So share your thoughts and experiences in the comments.

Are you using progressive web apps?
Communications

Amazon Is in Talks To Offer Free Mobile Service To US Prime Members (bloomberg.com) 49

Amazon has been talking with wireless carriers about offering low-cost or possibly free nationwide mobile phone service to Prime subscribers, Bloomberg News reported Friday, citing people familiar with the situation. From a report: The company is negotiating with Verizon, T-Mobile US and Dish Network to get the lowest possible wholesale prices. That would let it offer Prime members wireless plans for $10 a month or possibly for free and bolster loyalty among its biggest spending customers, the people said, who requested anonymity to discuss a private matter. The talks have been going on for six to eight weeks and have also included AT&T at times, but the plan may take several more months to launch and could be scrapped, one person said.
Android

Motorola Unveils Its 4th-Gen Foldable, the Moto Razr+ (arstechnica.com) 39

An anonymous reader quotes a report from Ars Technica: After endless leaks, Motorola made its fourth-generation lineup of foldables official today. The flagship is the Moto Razr+, which will launch in the US on June 23 for $999. There's also a cheaper phone called only the "Moto Razr" with a smaller outside screen, slower SoC, and no clear US price or release date. Internationally, these phones are called the Moto Razr 40 Ultra and Moto Razr 40. The Ultra model's SoC is a Snapdragon 8+ Gen 1 -- that's not the best you can get from Qualcomm, which would be the 8 Gen 2 -- this is a year-old mid-cycle upgrade chip. The phone has 8GB of RAM, 256GB of storage, and a 3800 mAh battery with 30 W quick charging. The leaked display specs have been all over the place, but officially, the interior display is a 6.9-inch, 2640x1080 OLED that runs at a smoking 165 Hz. The exterior display is super big on the Ultra model and is a 3.6-inch, 144 Hz OLED at a nearly square 1066x1056. Motorola has the phone's dust and water ingress protection rated at IP52, which typically only protects from "direct sprays of water up to 15 degrees from the vertical" and is far from qualifying the Razr as a water-resistant phone.

The design has been better. The original foldable Moto Razr reboot from 2020 had beautiful throwback looks that screamed "Moto Razr." It looked just like the old-school flip phone from the early 2000s but modernized. This fourth foldable generation tones things down a lot and is more of a generic rectangle. You could easily confuse it for Samsung's Galaxy Z Flip. This fourth generation seems more mature, though. Motorola will now let you run any app you want on the ultra's giant front screen, complete with the option of a super tiny Android navigation bar tucked away in the bottom left corner, to the left of the two front cameras. You can peruse the app drawer, use Google Pay, or play media on the front display. You can even type on the keyboard: Google GBoard has a special full-screen mode that will show a single line of input text.

Those front cameras give this font display one of the strangest display shapes on the market. With two big dead spots in the bottom right corner, the workable display area is kind of an upside-down L shape. By default, apps will stay out of the non-rectangular part of the screen, but it's possible to enable a "full screen" mode for the front apps. This will force apps to use the lower part of the display, and you just have to hope that they will somehow deal with that. Android has APIs to identify dead areas of the display for apps to work around, but usually, that's for a top camera notch. Not many apps are built for this, but you're apparently welcome to try to make them work with the feature. [...] If you're interested in the Razr+, preorders start June 16.

Space

Hubble Network Wants To Connect a Billion Devices With Space-Based Bluetooth Network (techcrunch.com) 60

Seattle-based startup Hubble Network plans to launch a constellation of 300 satellites to create a global satellite network that any Bluetooth-enabled device can connect to, anywhere in the world. The network aims to provide real-time updates for devices equipped with Bluetooth low energy (BLE) chips, offering connectivity to over a billion devices. TechCrunch reports: Hubble Network CEO Alex Haro says the company has engineered "technical tricks" to make this scale of connectivity possible for the first time, like lowering the bitrate, or the amount of data transferred per second. Hubble has also rethought the design of the satellite antenna. Instead of sticking a single antenna on the side of a satellite bus, the company is using hundreds of antennae per satellite. This means that each satellite can support millions of connected devices. The result is a radio signal that can be detected around 1,000 kilometers away -- or almost 10 orders of magnitude longer than what can be detected from a Bluetooth chip over terrestrial networks.

Hubble Network plans to launch an initial batch of four satellites on SpaceX's Transporter-10 rideshare mission in January 2024, and onboard early pilot customers after. The startup is fully funded through this mission, Haro said, thanks to a $20 million Series A round that closed in March. That round was led by Transpose Platform, with additional participation from 11.2 Capital, Y Combinator, Yes.VC, Convective Capital, Seraphim Space, Type One Ventures, Soma, AVCF5, Space.VC, Jett McCandless, John Kim, Chris Nguyen, Alan Keating and Don Dodge.

After launching four satellites next January, Hubble plans to build out its constellation to 68 satellites total over the next two-and-a-half years. While the first four satellites will provide global coverage on their own, Haro said that it will be about a six-hour gap until devices can update on the ground. Increasing the constellation to 68 birds means that a satellite will be overhead every 15 minutes or so -- an update rate that is sufficient for "the vast majority" of customer use cases, Haro said. While Hubble is clearly targeting existing Bluetooth devices -- of which billions exist all over the world already -- Haro is confident that the company's network will solicit developers to build applications that don't even exist yet.

Electronic Frontier Foundation

Federal Judge Makes History In Holding That Border Searches of Cell Phones Require a Warrant (eff.org) 79

In a groundbreaking ruling, a district court judge in New York, United States v. Smith (S.D.N.Y. May 11, 2023), declared that a warrant is necessary for cell phone searches at the border, unless there are urgent circumstances. The Electronic Frontier Foundation (EFF) reports: The Ninth Circuit in United States v. Cano (2019) held that a warrant is required for a device search at the border that seeks data other than "digital contraband" such as child pornography. Similarly, the Fourth Circuit in United States v. Aigbekaen (2019) held that a warrant is required for a forensic device search at the border in support of a domestic criminal investigation. These courts and the Smith court were informed by Riley v. California (2014). In that watershed case, the Supreme Court held that the police must get a warrant to search an arrestee's cell phone. [...]

The Smith court's application of Riley's balancing test is nearly identical to the arguments we've made time and time again. The Smith court also cited Cano, in which the Ninth Circuit engaged extensively with EFF's amicus brief even though it didn't go as far as requiring a warrant in all cases. The Smith court acknowledged that no federal appellate court "has gone quite this far (although the Ninth Circuit has come close)."

We're pleased that our arguments are moving through the federal judiciary and finally being embraced. We hope that the Second Circuit affirms this decision and that other courts -- including the Supreme Court -- are courageous enough to follow suit and protect personal privacy.

United States

App That Lets Homeowners Rent Their Swimming Pools Draws Backlash (msn.com) 152

Somewhere in Maryland, an app that lets homeowners rent their swimming pools "has sharply divided suburban residents of Montgomery County as the local government considers formally regulating the short-term amenity rentals," reports the Washington Post, "potentially becoming the first in the nation to do so." Neighbors have spied on neighbors, reporting unwanted outsiders flocking to their quiet residential streets. "Our entire block has been disturbed," Constance Kiggans, a Chevy Chase resident, said in written testimony to the Montgomery County Council. "It is, for all intents and purposes, like having a pool club on the street..." Unlike long-established home rental and ride sharing apps, newer apps that let people rent out their pools, home gyms and backyards have largely been unregulated across the United States so far. In fact, several jurisdictions, from the city of San Jose to towns across New Jersey to the state of Wisconsin, have tried over the past three years to ban the rentals or set up strict rules that require private pools to meet the same standards as a public pool...

Many homeowners are eager to earn easy money by renting out a backyard pool, despite a murky legal landscape that does not offer clear guidance on whether the rentals are legal or not...

Chief among the complaints detailed by pool sharing opponents is the noise... [36 residents who signed a letter of complaint] argued that the rentals turn quiet residential neighborhoods into bustling business districts, without the infrastructure to support commercial activity. They raised dozens of concerns, largely over the added nuisance of strangers pouring into their neighborhoods because of the apps, congested roads, scarce parking, and noise and safety. Their complaints have shut down at least one pool rental in the county.

Government

50 US Senators Issued Satellite Phones (cbsnews.com) 115

Long-time Slashdot reader SonicSpike shared this report from CBS News: Amid growing concerns of security risks to members of Congress, over 50 senators have been issued satellite phones for emergency communication, people familiar with the measures told CBS News... [Senate Sergeant at Arms] Gibson said satellite communication is being deployed "to ensure a redundant and secure means of communication during a disruptive event." Gibson said the phones are a security backstop in the case of an emergency that "takes out communications" in part of America.
Android

Lawsuit Accuses DoorDash of Charging iPhone Users More For Identical Orders (arstechnica.com) 77

A class-action lawsuit has been filed against DoorDash, alleging that the company uses deceptive and fraudulent practices to charge higher delivery fees to iPhone users compared to Android users. Ars Technica reports: The lawsuit (PDF), filed May 5 in the District of Maryland, came in hot. Plaintiff Ross Hecox, in addition to his two children and a presumptive class of similarly situated customers, briefly defines DoorDash as an online marketplace with 32 million users and billions of dollars in annual revenue. "Yet, DoorDash generates its revenues not only through heavy-handed tactics that take advantage of struggling merchants and a significant immigrant driver workforce, but also through deceptive, misleading, and fraudulent practices that illegally deprive consumers of millions, if not billions, of dollars annually," the suit adds. "This lawsuit details DoorDash's illegal pricing scheme and seeks to hold DoorDash accountable for its massive fraud on consumers, including one of the most vulnerable segments of society, minor children."

Specifically, the suit claims that DoorDash misleads and defrauds customers by

- Making its "Delivery Fee" seem related to distance or demand, even though none of it goes to the delivery person.
- Offering an "Express" option that implies faster delivery, but then changing the wording to "Priority" in billing so it is not held to delivery times.
- Charging an "Expanded Range Delivery" fee that seems based on distance but is really based on a restaurant's subscription level and demand.
- Adding an undisclosed 99 cent "marketing fee," paid by the customer rather than the restaurant, to promote menu items that customers add to their carts.
- Obscuring minimum order amounts attached to its "zero-fee" DashPass memberships and coupon offers.
- Generally manipulating DashPass subscriptions to appear like substantial savings, when the company is "engineering" fees to seem reduced.

One of the more interesting and provocative claims is that DoorDash's fees, based in part on "other factors," continually charge iPhone users of its app more than Android users placing the same orders. The plaintiffs and their law firm conducted a few tests of DoorDash's system, using different accounts to order the same food, from the same restaurant, at almost the same exact time, delivered to the same address, with the same account type, delivery speed, and tip. [...] The plaintiffs are asking for $1 billion in damages for those who "fell prey to DoorDash's illegal pricing" over the past four years. The suit also includes allegations that DoorDash improperly allows children to enter into contract with the company without proper vetting.
"The claims put forward in the amended complaint are baseless and simply without merit," said a DoorDash spokesperson in a statement. "We ensure fees are disclosed throughout the customer experience, including on each restaurant storepage and before checkout. Building this trust is essential, and it's why the majority of delivery orders on our platform are placed by return customers. We will continue to strive to make our platform work even better for customers, and will vigorously fight these allegations."
Cellphones

Are Smartphones Costing Gen Z Crucial Life Experiences? (cnn.com) 158

CNN's chief medical correspondent spoke to psychology professor Jean Twenge from San Diego State University who in 2018 published a book which, even before lockdowns, warned that teenagers were missing crucial life experiences. Its title? "iGen: Why Today's Super-Connected Kids Are Growing Up Less Rebellious, More Tolerant, Less Happy — and Completely Unprepared for Adulthood — and What That Means for the Rest of Us."

From CNN's report: In her book, Twenge makes the case that Gen Z (or iGen, as she calls them) is growing up in a way that is fundamentally different from previous generations. She told me that some of the biggest behavioral changes ever recorded in human history coincided with the release of the smartphone.

Twelfth-graders now are more like eighth-graders from previous generations, waiting longer to take part in activities associated with independence and adulthood, according to Twenge. They are less likely to go out with friends, drive, go to prom or drink alcohol than Gen X 12th-graders were. They are more likely to lie on their beds and scroll through endless social media feeds. They may be physically safer, but the long-term effect on their mental and brain health is a big question mark.

Twenge told me that she "saw just a very, very sudden change, especially in mental health but also in optimism and expectations ... between millennials and iGen or Gen Z."

CNN's chief medical correspondent ultimately recommends parents talk to teenagers about how they're using social media. But the article also recommends: "don't catastrophize." In all likelihood, you'll find out your kids are on some type of screen or device more often than you would like, but — this is key — not everyone develops a problem. In other words, don't assume the worst about the impact that use of technology will have on your child's brain and development. Most people may not develop catastrophic problems, but it can be challenging to predict who is most vulnerable...

And lastly, in the words of author and science journalist Catherine Price, remember that life is what we pay attention to. Think about that for a moment; it is such a simple idea, but it is so true. I find it both deeply inspirational and empowering because it implies that we have it within our control to determine what our lives are like. The next time you go to pick up your phone, Price wants us to remember the three Ws: What for? Why now? What else?

Price also wrote a book — titled "How to Break Up With Your Phone: The 30-Day Plan to Take Back Your Life.". Here's how CNN ends their article: As Dr. Keneisha Sinclair-McBride, a clinical psychologist at Boston Children's Hospital and an assistant professor of psychology at Harvard Medical School, pointed out, we possess something very valuable that Big Tech companies want: our time and attention. We need to be judicious about how we allocate these precious resources — not just because they are important to TikTok, Snap or Instagram but because they are priceless for us, too.
The Courts

Lawsuit Alleges DoorDash Charges iPhone Users More Than Android (sfgate.com) 127

SFGate reports: A proposed class-action lawsuit levels broad allegations that DoorDash, the San Francisco-headquartered food delivery giant, is engaging in fraudulent behavior — in part by charging iPhone users more than Android havers.

The complaint, a hefty 134-page airing of grievances about the fees and upsells faced while ordering on the app, filed by Maryland resident Ross Hecox and his children, contends that DoorDash conducts "price discrimination" by allegedly charging iPhone users an "expanded range fee" more often than their Android counterparts.

According to the suit, posted by Gizmodo, the fee — a markup to any deliveries outside of the user's immediate radius set by DoorDash — is arbitrarily applied without actually taking into account users' locations. At least seven tests with separate iPhone and Android devices were conducted by the plaintiffs to prove this point in the suit.

In one set of tests, an Android phone and an iPhone were used to place the same order — a breakfast sandwich with avocado and egg whites and a chocolate chip bagel from a nearby Panera Bread — to the same address simultaneously. In the first order, according to the suit, the iPhone was at the delivery location and the Android was 15 miles away; the iPhone user received the expanded range fee. In the second, the phones' locations were reversed, with the iPhone being used 15 miles away from the delivery site; the iPhone user, the suit alleges, was still charged the fee. In a third test involving Panera, the phones were both at the delivery location — the iPhone not only allegedly received the expanded range fee but was charged an additional dollar in delivery fees. Other tests allege that delivery fees on iPhone orders are "greatly" inflated.

DoorDash called the complaints "baseless and simply without merit," in a statement to Gizmodo.
AI

OpenAI Launches Free ChatGPT App For iOS 15

An official ChatGPT app is now available for iOS, with an Android version coming "soon." It can be downloaded from the App Store here. The Verge reports: The app is free to use, syncs chat history with the web, and features voice input, supported by OpenAI's open-source speech recognition model Whisper. The app works on both iPhones and iPads and can be downloaded from the App Store. OpenAI says it's rolling out the app in the US first and will expand to other countries "in the coming weeks."

OpenAI didn't previously hint that a mobile app was coming, but it makes sense given the incredible popularity of ChatGPT. The AI chatbot launched last November but rocketed in use. Some outside estimates suggest the app attracted 100 million users by January this year, though OpenAI has never confirmed these figures.
Android

Google Will Soon Let Pixel Phones Double As Dashcams (9to5google.com) 35

Google mistakenly released a test version of its Personal Safety app that includes a new feature called "Dashcam" on select Android devices. As the name suggests, it allows users to record video and audio while driving in the event of an accident or unexpected situation, with automatic recording triggered when connecting to a specific Bluetooth device and videos automatically deleted after three days unless saved. 9to5Google reports: Once available, the feature can be launched through a new "Dashcam" shortcut in the "Be prepared" section of the home page. Here, you can begin recording manually or view your recent videos. While Dashcam is recording, your phone is still fully usable, including for navigating with Google Maps. Alternatively, you can save power by locking your screen, and the recording will continue. More importantly, Google has built this feature to work without you needing to think much about it. When setting up, you can choose to have recordings begin automatically when you connect to a particular Bluetooth device (e.g., your car stereo or infotainment system) and end when you disconnect.

To conserve storage space, your recordings are automatically deleted after three days unless you save them. Additionally, the app says that the videos themselves are compressed, averaging "30 MB per minute," with a maximum recording length of 24 hours. Overall, this feature seems to be impressively well thought out and looks essentially ready to launch. Using a smartphone as a dashcam also makes quite a bit of sense, as your phone probably has a better camera than some cheaper dashcams would offer.
It's unclear if this feature will be available on other phones with Google's Personal Safety or exclusive to Pixel phones.
Security

Malware Turns Home Routers Into Proxies For Chinese State-Sponsored Hackers (arstechnica.com) 28

An anonymous reader quotes a report from Ars Technica: Researchers on Tuesday unveiled a major discovery -- malicious firmware that can wrangle a wide range of residential and small office routers into a network that stealthily relays traffic to command-and-control servers maintained by Chinese state-sponsored hackers. A firmware implant, revealed in a write-up from Check Point Research, contains a full-featured backdoor that allows attackers to establish communications and file transfers with infected devices, remotely issue commands, and upload, download, and delete files. The implant came in the form of firmware images for TP-Link routers. The well-written C++ code, however, took pains to implement its functionality in a "firmware-agnostic" manner, meaning it would be trivial to modify it to run on other router models.

The main purpose of the malware appears to relay traffic between an infected target and the attackers' command and control servers in a way that obscures the origins and destinations of the communication. With further analysis, Check Point Research eventually discovered that the control infrastructure was operated by hackers tied to Mustang Panda, an advanced persistent threat actor that both the Avast and ESET security firms say works on behalf of the Chinese government.

The researchers discovered the implant while investigating a series of targeted attacks against European foreign affairs entities. The chief component is a backdoor with the internal name Horse Shell. The three main functions of Horse Shell are: a remote shell for executing commands on the infected device; file transfer for uploading and downloading files to and from the infected device; and the exchange of data between two devices using SOCKS5, a protocol for proxying TCP connections to an arbitrary IP address and providing a means for UDP packets to be forwarded. The SOCKS5 functionality seems to be the ultimate purpose of the implant. By creating a chain of infected devices that establish encrypted connections with only the closest two nodes (one in each direction), it's difficult for anyone who stumbles upon one of them to learn the origin or ultimate destination or the true purpose of the infection. As Check Point researchers wrote:
"Learning from history, router implants are often installed on arbitrary devices with no particular interest, with the aim to create a chain of nodes between the main infections and real command and control," Check Point researchers wrote in a shorter write-up. "In other words, infecting a home router does not mean that the homeowner was specifically targeted, but rather that they are only a means to a goal."
Cellphones

Re-Victimization From Police-Auctioned Cell Phones (krebsonsecurity.com) 31

An anonymous reader quotes a report from KrebsOnSecurity: Countless smartphones seized in arrests and searches by police forces across the United States are being auctioned online without first having the data on them erased, a practice that can lead to crime victims being re-victimized, a new study found (PDF). In response, the largest online marketplace for items seized in U.S. law enforcement investigations says it now ensures that all phones sold through its platform will be data-wiped prior to auction.

Researchers at the University of Maryland last year purchased 228 smartphones sold "as-is" from PropertyRoom.com, which bills itself as the largest auction house for police departments in the United States. Of phones they won at auction (at an average of $18 per phone), the researchers found 49 had no PIN or passcode; they were able to guess an additional 11 of the PINs by using the top-40 most popular PIN or swipe patterns. Phones may end up in police custody for any number of reasons -- such as its owner was involved in identity theft -- and in these cases the phone itself was used as a tool to commit the crime. "We initially expected that police would never auction these phones, as they would enable the buyer to recommit the same crimes as the previous owner," the researchers explained in a paper released this month. "Unfortunately, that expectation has proven false in practice."

Beyond what you would expect from unwiped second hand phones -- every text message, picture, email, browser history, location history, etc. -- the 61 phones they were able to access also contained significant amounts of data pertaining to crime -- including victims' data -- the researchers found. [...] Also, the researchers found that many of the phones clearly had personal information on them regarding previous or intended targets of crime: A dozen of the phones had photographs of government-issued IDs. Three of those were on phones that apparently belonged to sex workers; their phones contained communications with clients.
"We informed [PropertyRoom] of our research in October 2022, and they responded that they would review our findings internally," said Dave Levin, an assistant professor of computer science at University of Maryland. "They stopped selling them for a while, but then it slowly came back, and then we made sure we won every auction. And all of the ones we got from that were indeed wiped, except there were four devices that had external SD [storage] cards in them that weren't wiped."
Iphone

France Opens Investigation Into Apple Over 'Planned Obsolescence' For iPhones (france24.com) 47

According to Agence France-Presse, France has opened an investigation into planned obsolescence of Apple products. From the report: The probe into purported misleading commercial practices and planned obsolescence has been under way since December, the Paris prosecutor's office said. It follows a complaint filed by the Halt Planned Obsolescence (HOP) association.

HOP said it hoped the investigation would demonstrate the iPhone maker was "associating the serial numbers of spare parts to those of a smartphone, including via microchips, giving the manufacturer the possibility of restricting repairs by non-approved repairers or to remotely degrade a smartphone repaired with generic parts." The association called on Apple "to guarantee the right to repair devices under the logic of real circular economy."

AI

iPhones Will Be Able To Speak in Your Voice With 15 Minutes of Training (theverge.com) 63

Apple today previewed a bundle of new features designed for cognitive, vision, hearing, and mobility accessibility. That includes a new Personal Voice feature for people who may lose their ability to speak, allowing them to create "a synthesized voice that sounds like them" to talk with friends or family members. From a report: According to Apple, users can create a Personal Voice by reading a set of text prompts aloud for a total of 15 minutes of audio on the iPhone or iPad. Since the feature integrates with Live Speech, users can then type what they want to say and have their Personal Voice read it to whomever they want to talk to. Apple says the feature uses "on-device machine learning to keep users' information private and secure."

Additionally, Apple is introducing streamlined versions of its core apps as part of a feature called Assistive Access meant to support users with cognitive disabilities. The feature is designed to "distill apps and experiences to their essential features in order to lighten cognitive load." That includes a combined version of Phone and FaceTime as well as modified versions of the Messages, Camera, Photos, and Music apps that feature high contrast buttons, large text labels, and additional accessibility tools.

Google

Pixel Users are Reporting Newest Google App Causes Overheating, Battery Drain (engadget.com) 47

One cellphone owner reports their Pixel 6 Pro "has recently been overheating and excessively draining its battery," reports Endgadget.

"They suspect the culprit is the Google app and an update that began rolling out on May 12th..." And they're not the only ones, judging by comments left in the Reddit and Google support forums. "It just started yesterday. Massive battery usage from Google app and to a lesser degree Android System Intelligence...." one Reddit user wrote. Beyond the battery not lasting the phone is getting really warm so I know it's harming the battery and potentially the CPU."

Those who have tried contacting Google report the company's support staff haven't been very helpful. Some users say rolling back to an older version of the Google app hasn't fixed the problem for them. "Actually ended up with an even older version from May 10, still draining the battery," writes one Redditor. The reader who contacted us suspects the problem may be server-side. "Google app keeps wrecking the battery regardless of version, and I've rolled all the way back to May 1st," they write. "I don't know how to see if the app is trying to call home or on a loop with something like that, but the symptoms remain the same."

Google did not immediately respond to Engadget's comment request.

Cellphones

As Wireless Carriers 'Rip and Replace' Chinese-Made Telecom Equipment, Who Pays? (sanjuandailystar.com) 82

"Deep in a pine forest in Wilcox County, Alabama, three workers dangled from the top of a 350-foot cellular tower," reports the New York Times. "They were there to rip out and replace Chinese equipment from the local wireless network..." As the United States and China battle for geopolitical and technological primacy, the fallout has reached rural Alabama and small wireless carriers in dozens of states. They are on the receiving end of the Biden administration's sweeping policies to suppress China's rise, which include trade restrictions, a $52 billion package to bolster domestic semiconductor manufacturing against China and the divestiture of the video app TikTok from its Chinese owner. What the wireless carriers must do, under a program known as "rip and replace," has become the starkest physical manifestation of the tech Cold War between the two superpowers. The program, which took effect in 2020, mandates that American companies tear out telecom equipment made by the Chinese companies Huawei and ZTE. U.S. officials have warned that gear from those companies could be used by Beijing for espionage and to steal commercial secrets.

Instead, U.S. carriers have to use equipment from non-Chinese companies. The Federal Communications Commission, which oversees the program, would then reimburse the carriers from a pot of $1.9 billion intended to cover their costs. Similar rip-and-replace efforts are taking place elsewhere. In Europe, where Huawei products have been a key part of telecom networks, carriers in Belgium, Britain, Denmark, the Netherlands and Sweden have also been swapping out the Chinese equipment because of security concerns, according to Strand Consult, a research firm that tracks the telecom industry. "Rip-and-replace was the first front in a bigger story about the U.S. and China's decoupling, and that story will continue into the next decade with a global race for A.I. and other technologies," said Blair Levin, a former F.C.C. chief of staff and a fellow at the Brookings Institution.

But cleansing U.S. networks of Chinese tech has not been easy. The costs have already ballooned above $5 billion, according to the F.C.C., more than double what Congress appropriated for reimbursements. Many carriers also face long supply chain delays for new equipment. The program's burden has fallen disproportionately on smaller carriers, which relied more on the cheaper gear from the Chinese firms than large companies like AT&T and Verizon. Given rip-and-replace's difficulties, some smaller wireless companies now say they may not be able to upgrade their networks and continue serving their communities, where they are often the only internet providers. "For many rural communities, they are faced with the disastrous choice of having to continue to use insecure networks that are ripe for surveillance or having to cut off their services," said Geoffrey Starks, a Democratic commissioner at the F.C.C.

Last month, Senator Deb Fischer, a Republican of Nebraska, introduced a bill to close the gap in rip-and-replace funding for carriers... In January, the F.C.C. said it had received 126 applications seeking funding beyond what it could reimburse. Lawmakers had underestimated the costs of shredding Huawei and ZTE equipment, and new equipment and labor costs have risen. The F.C.C. said it could cover only about 40 percent of the expenses. Some wireless carriers immediately paused their replacement efforts. "Until we have assurance of total project funding, this project will continue to be delayed as we await the necessary funding required to build and pay for the new network equipment," United Wireless of Dodge City, Kansas, wrote in a regulatory filing to the F.C.C. in January.

Slashdot Top Deals