Hardware Hacking

Apple Is Fighting A Secret War To Keep You From Repairing Your Phone (huffingtonpost.com) 364

It's no secret that Apple makes a ton of money by charging 'astronomical' fee for replacing and fixing display and other components of iPhone and iPad (as well as Mac line). For instance, the company charges $599 for replacing the display on the iPad Pro tablet. Which sounds insane when you realize that you can almost certainly purchase a new iPad Pro under $700. And this is what most people do. A Huffington Post article notes that this behavior has contributed significantly in "generating heaps of e-waste." Citing many advocates, the publication claims that Apple has "opposed legislation that could help curb it." From the report: The Huffington Post spoke with politicians in two states who support such legislation, and confirmed through government filings that Apple has lobbied on the issue. Four states -- Minnesota, Nebraska, Massachusetts and New York -- have considered adopting "right to repair" amendments, which would update existing laws regarding the sale of electronic equipment. Amending these laws would make it easier to fix your devices and would help reduce "e-waste," a catch-all term for any electronic detritus. The New York State Senate and Assembly could approve one of these amendments next week. This would help unofficial repair shops get the information they need to fix your iPad, ideally driving down repair costs and encouraging you to squeeze more life out of your old devices -- thus cutting down on the e-waste generated by our voracious appetites for new gadgets. Apple asserts that it helps recycle millions of pounds of electronics equipment every year. But it won't support right to repair amendments.One would ask what is preventing a user from getting their device repaired by unofficial service person? In addition to the security implication, you also run a risk of getting your device bricked by Apple. To recall, the iPhone maker was found bricking the handsets that had been repaired by third-party vendors earlier this year.
Wireless Networking

Bluetooth 5 With 2x More Range and 4x Better Speed Coming Next Week (arstechnica.com) 94

Bluetooth is about to get more powerful. Mark Powell, executive director of the Bluetooth Special Interest Group noted in a newsletter that Bluetooth 5 will debut on June 16. The new incarnation of wireless standard offers "double the range and quadruple the speed of low energy Bluetooth transmissions." From an Ars Technica report: It also adds "significantly more capacity to advertising transmissions," which is more exciting than it sounds because it doesn't necessarily have anything to do with what you normally think of when you think of "advertising." In the Bluetooth spec, an "advertising packet" allows Bluetooth devices to send small snippets of information to other Bluetooth devices even if the two aren't actually paired or connected to one another.It's currently unclear whether existing devices will be able to support the new standard.
Iphone

Woman Uses 'Hey Siri' To Call An Ambulance and Help Save Her Child's Life (networkworld.com) 208

An anonymous reader quotes a report from Networkworld: When Apple released the iPhone 6s, it included a great new Siri feature which enables users to activate the intelligent assistant via voice. Dubbed 'Hey Siri,' the feature is particularly convenient because the iPhone 6s' M9 motion co-processor is 'always listening' and thereby lets users use 'Hey Siri' even when the device isn't connected to a power source. Recently, Stacey Gleeson of Australia used the 'Hey Siri' feature to successfully call an ambulance while she was tending to her daughter Giana who had stopped breathing. "I picked her up and sat down with her on the floor," Gleeson said in an interview. "And as I checked her airways, I looked over and remembered my phone." Thinking quick on her feet, Gleeson said, "Hey Siri, call the ambulance." Fortunately, Gleeson managed to resuscitate her daughter while the ambulance was in route. And while it's impossible to know for sure, it's entirely possible that the time Gleeson saved by not having to call an ambulance manually helped save her daughter's life. "Saving me the trouble of having to physically dial emergency services was a godsend," Gleeson said.
Cellphones

Lenovo and Motorola Unveil PHAB2 Tango AR and Modular Moto Z Smartphones (hothardware.com) 25

MojoKid quotes a report from HotHardware: Google has been teasing its Project Tango augmented reality (AR) platform for years but no OEMs have stepped up to the plate to deliver Tango-enabled hardware until now. Lenovo just came out with its PHAB2 Pro 6.4-inch phablet smartphone which packs a full-fledged AR experience. The PHAB2 Pro will be the first commercially available Lenovo smartphone in the U.S. and it leverages Tango AR technology in three ways. The smartphone's "eye" uses motion-tracking to determine its location in 3D. Area learning can also feed location information to the phone, and depth perception allows the phone to analyze the world around it. The PHAB2 Pro is also huge with a 6.4" QHD display covered in 2.5D curved glass. Powering the PHAB2 Pro is a Snapdragon 652 processor with 4GB of RAM, a generous 64GB of storage and a microSD slot. There's also a 16MP rear camera, 8MP front camera and a 4050 mAh battery. Lenovo's Motorola Mobility division also announced the Moto Z and Moto Z Force, which are next generation Android flagships. The Moto Z is the standard model and measures just 5.2mm thick and comes with a 5.5" QHD AMOLED display, a Snapdragon 820 processor with 4GB of RAM and up to 64GB of storage. Its 13MP rear camera features optical image stabilization and laser autofocus, while its 5MP front camera with wide-angle lens takes care of selfies. Then there's the new Moto Z Force, which ups the ante with a 3500 mAh battery, a 21MP rear camera and a shatterproof screen. But what truly makes the Moto Z and Moto Z Force stand out are Moto Mods. These are modular accessories that attach to the back of the smartphones via four magnets and a 16-pin connector. It's much more elegant than what LG has employed with the G5 (which requires you to remove the bottom of the smartphone). Instead, Moto Z users can simply attach an accessory, like the JBL SoundBoost Mod which brings high-end sound, with a quick snap.
Network

A Solution To the Security Guidelines Proposed By FCC For Home Routers (imgtec.com) 55

An anonymous reader writes: Back in March 2015, the United States Federal Communications Commission (FCC) issued a security document that included a series of provisions related to the use of wireless devices. In order to comply with these security guidelines, some manufacturers of home routers and other networking equipment decided to lock down the software powering these devices. This caused an outcry from the open source community who demanded that the FCC and manufacturers would not restrict the free use of the operating system and associated software running on their devices. Now Imagination Technologies is presenting a proof of concept demonstration that addresses the next-generation security requirements mandated by the FCC and other similar agencies. The demo makes use of a feature of MIPS Warrior CPUs called multi-domain, secure hardware virtualization. This technology allows developers to create system-wide, hardware-enforced trusted environments that are much secure compared to current solutions. The platform used for the demonstration runs three virtual machines (VMs) on a MIPS P-class CPU integrated in a router-type evaluation kit; this approach securely separates the OpenWrt operating system from the Wi-Fi driver, allowing them to co-exist in isolation and thus comply with the FCC guidelines.Ars Technica has more details.
Android

Maru OS Exits Private Beta, Lets You Use an Android Phone As a Linux Desktop (liliputing.com) 60

Maru OS has exited beta, and is now available to anyone who wants to give it a try. For those unaware, Maru OS offers a platform that runs Android as well as Debian Linux on a smartphone. When you connect a Maru OS-powered smartphone to an external display, you get "full-fledged Linux desktop environment." Maru OS was unveiled in February, and currently supports only one smartphone: Nexus 5. The developers behind it have also started to work on making the project open source. They hope that doing this will help them support other devices as well. Brad Linger, writes for Liliputing: Work has also begun on making Maru OS an open source project, which could allow additional developers to contribute to the project or port it to run on other phones, although the current version of the Maru OS does require phones that support HDMI via MHL or SlimPort, which means not all phones will be able to run the software unless wireless display support is added in the future.
Google

Google Matches Apple's Plan To Give Developers A Bigger Cut of The Revenue (recode.net) 44

An anonymous reader writes from a report via Recode: Apple announced a new revenue sharing model on Wednesday that would give developers more money when users subscribe to a service via their apps. Instead of keeping 70 percent of all revenue generated from subscriptions, publishers will be able to keep 85 percent of revenue, once a subscriber has been paying for a year. Google has decided to match Apple's latest offering. It too will move from a 70/30 split to a 85/15 split for subscriptions. However, instead of requiring developers to hook a subscriber for 12 months before offering the better split, it will make it available right away. Sources have said Google has been testing the new model over a year ago with video services in a way to get Play subscriptions to work with its TV streaming offerings like the Chromecast. Google has yet to announce when their new pricing plan will roll out. In other Google and Apple related news, Google's AI 'TensorFlow' software is coming to iOS to allow the iPhone to be able to run more sophisticated apps.
Bitcoin

Russian Hacker Selling Information of 32 Million Twitter Accounts, Report Says (zdnet.com) 54

An anonymous reader writes: The hacker who has links to the recent Myspace, LinkedIn, and Tumblr data breaches, is claiming to have obtained a database of millions of Twitter accounts. The data reportedly includes addresses, usernames, and plain-text passwords of 379 million Twitter accounts. The hacker, Tessa88, wants 10 bitcoins, or about $5,820 for the cache. On Wednesday, LeakedSource claimed that the real number of accounts was just under 33 million, which is more than 10 percent of Twitter's monthly active accounts. This follows the hacking of Mark Zuckerberg's Twitter and Pinterest accounts.
The Internet

Qualcomm's Connected Car Reference Platform To Connect Smart Cars To Everything (networkworld.com) 110

An anonymous reader writes: Qualcomm wants to supply the next generation of autonomous and connected cars with networking to connect everything inside and outside of the cars. That means 5G, WiFi, Bluetooth, GNSS, DSRC, V2X, OABR, CAN, etc. ... [Networkworld reports: "Qualcomm today announced its Connected Car Reference Platform intended for the car industry to use to build prototypes of the next-generation connected car. Every category from economy to luxury car will be much smarter than the connected luxury car of today, creating a big opportunity for Qualcomm to supply semiconductors to automakers and suppliers. Qualcomm described the following features of the Connected Car Reference Platform in its release:

Scalability: Using a common framework that scales from a basic telematics control unit (TCU) up to a highly integrated wireless gateway, connecting multiple electronic control units (ECUs) within the car and supporting critical functions, such as over-the-air software upgrades and data collection and analytics.
Future-proofing: Allowing the vehicleâ(TM)s connectivity hardware and software to be upgraded through its life cycle, providing automakers with a migration path from Dedicated Short Range Communications (DSRC) to hybrid/cellular V2X and from 4G LTE to 5G.
Wireless coexistence: Managing concurrent operation of multiple wireless technologies using the same spectrum frequencies, such as Wi-Fi, Bluetooth and Bluetooth Low Energy.
OEM and third-party applications support: Providing a secure framework for the development and execution of custom applications."]

EU

EU Exploring Idea of Using Government ID Cards As Mandatory Online Logins (softpedia.com) 367

An anonymous reader writes from a report via Softpedia: Fears that fake online reviews might ruin the consumer market and damage legitimate businesses are making the European Commission consider the idea of forcing all EU citizens to log into online accounts using their government-issued ID cards. Details about these plans can be found in a proposal named "Online Platforms and the Digital Single Market Opportunities and Challenges," announced on May 25, 2016. According to this document, "online platforms should accept credentials issued or recognized by national public authorities, such as electronic or mobile IDs, national identity cards, or bank cards." The reasoning, according to the EU, is that "online ratings and reviews of goods and services are helpful and empowering to consumers, but they need to be trustworthy and free from any bias or manipulation. A prominent example is fake reviews."
Google

Google's AI 'TensorFlow' Software Is Coming To iOS (cnet.com) 33

An anonymous reader writes: Google published an early version of TensorFlow that adds support for iOS. TensorFlow is "neural network" software that lets computers process data in a way similar to our own brain cells. Google CEO Sundar Pichai recently said it advances machine learning capability by a factor of three generations. With the software running on your iPhone, its capabilities will allow for more sophisticated apps to run on iOS. We can expect the apps to be released later this year and into next year from Google and others who use TensorFlow. Some of the tasks TensorFlow can allow for include being able to recognize subjects in photographs or being able to teach your phone what a particular object looks like, which is what another neural network software project called MemKite aims to do. Google has released its TensorFlow software as open source, where anyone can use or modify it for free.
Republicans

Ted Cruz Proposes Bill To Keep US From Giving Up Internet Governance Role (washingtontimes.com) 280

An anonymous reader quotes a report from Washington Times: Internet legislation proposed Wednesday in the Senate would prohibit the U.S. government from relinquishing its role with respect to overseeing the web's domain name system, or DNS, unless explicitly authorized by Congress. The National Telecommunications and Information Administration (NTIA), a division of the Commerce Department, currently oversees control of the DNS, a virtual phonebook of sorts that allows internet users to easily browse the web by allocating domain names to websites the world over. The NITA has long been expected to give up its oversight role to a global multi-stakeholder community, however, prompting lawmakers to unleashed a proposal this week that would assure the U.S. government maintains control unless Congress votes otherwise. The bill, the Protecting Internet Freedom Act, "would prevent the Obama administration from giving the Internet away to a global organization that will allow over 160 foreign governments to have increased influence over the management and operation of the Internet," according to a statement issued Wednesday by the office of the bill's co-sponsor, Sen. Ted Cruz. Specifically, the bill aims to ensure that the NTIA's relationship with the DNS doesn't terminate, lapse, expire or otherwise end up cancelled unless authorized by Congress, while a separate provision would guarantee that the U.S. government's exclusive control over .gov and .mil domains remains intact. In the UK, the controversial Snooper's Charter -- or the Investigatory Powers Bill as it's officially known -- has been passed through the House of Commons by UK MPs.
Windows

Windows 10 Insider Preview Build 14361 Released (betanews.com) 135

An anonymous reader writes from a report via BetaNews: Windows Insider chief Dona Sarkar announced in a blog post that they are releasing Windows 10 Insider Preview Build 14361 for both PC and Mobile to Windows Insiders in the Fast ring. This new release includes new features, some improvements to existing features, and various bug fixes that the company hopes to iron out before the Windows 10 Anniversary Update. A LastPass extension for the Microsoft Edge browser, and Hyper-V Container, which will let you use Docker natively on Windows 10, has been added. A series of improvements have been made to Windows Ink, and the Settings app, which includes changes to the colors so it's more obvious where you are. The Blu-ray icon and Network Quick Action icon have also been updated. You can read the full list of improvements and fixes for PC here.
Cellphones

Smartphone Sales Growth Will Drop To Single Digits In 2016, Says Gartner (techcrunch.com) 78

An anonymous reader writes from a report via TechCrunch: According to a report from Gartner, smartphone sales growth is expected to shrink from 14.4 percent growth in 2015 to just 7 percent in 2016, with only 1.5 billion smartphone units expected to ship globally this year. Gartner notes the market grew 73 precent in 2010, which was a high-point for the industry. One of the main reasons why the growth is shrinking is because consumers have less of a reason to upgrade their devices each year. Gartner notes that new devices offer only incremental upgrades over existing hardware and carriers have been moving away from subsidizing upgrades. The lifetime of a premium smartphone is between 2.2 and 2.5 years in emerging markets. The biggest smartphone growth is expected in India, where an estimated 139 million smartphones will be sold this year alone. The industry is growing 29.5 percent year-over-year in India. As for China, Gartner expects "little growth" in the region in the next five years calling it a "saturated yet highly competitive" market. Last week, it was reported that Microsoft is selling about 1,500 of its patents to Chinese device maker Xiaomi to build a 'long-term partnership.'
Power

Future Phones May Use Vacuum Tube Chips As Silicon Hits Moore's Law Extremes (inverse.com) 147

An anonymous reader writes: A team of researchers want to replace transistors with vacuum tubes. Vacuum tubes are nothing new, however the ones in development at Caltech's Nanofabrication Group are a million times smaller than the ones in use 100 years ago. "Computer technologies seem to work in cycles," Alan Huang, a former electrical engineer for Bell Laboratories, told the New York Times. "Some of the same algorithms that were developed for the last generation can sometimes be used for the next generation." Dr. Axel Scherer, head of the Nanofabrication Group, said to the New York Times on Sunday, "Ten years ago, silicon transistors could meet all our demands. In the next decade, that will no longer be true." He argues silicon transistors can only take us so far. Vacuum tubes, for comparison, use tiny metal tubes that can control the flow of electricity. They're especially intriguing to researchers as they can provide a better solution to silicon transistors as they can consume less power and take-up a much smaller footprint. The report mentions they have the potential to bring an end to Moore's Law, even if silicon transistors show no signs of disappearing. For example, Lockheed Martin published new cooling methods in March that could help cool chips with tiny drops of water. With that said, Boeing has invested in researching vacuum tube chips. They may appear in the aviation industry before 2020, but it's unlikely we'll see Caltech's research appear in smartphones anytime soon.
Facebook

Facebook Says It's Not Secretly Recording You (fb.com) 148

An anonymous reader writes: In 2014 Facebook introduced a feature which can use your phone's microphone to identify songs you're listening to -- but "we don't record your conversations," they're reminding users. A mass communication professor at the University of South Florida tried discussing specific topics near her phone, then discovered Facebook appeared to be showing ads related to what she'd said. Though she wasn't convinced there was a link, the Independent newspaper reported that "The claim chimes with anecdotal reports online that the site appears to show ads for things that people have mentioned in passing."

An official statement Thursday reiterated that "Facebook does not use your phone's microphone to inform ads or to change what you see in News Feed." But another news site sees these concerns as a reminder of all the permissions users routinely grant to their apps. "Go into your phone's application settings and you'll see a whole list of what an app like Facebook has access to: your camera, your location, your contacts, and, yes, your microphone too. How about this for a warning? By downloading Facebook you give the app 'permission to record audio at any time without your confirmation.' Tom's Guide security editor Paul Wagenseil says Facebook can...listen to your conversations...but it would be illegal to do so."

Meanwhile, the FBI "can neither confirm nor deny" that it's ever tapped an Amazon Echo device.
Medicine

Seattle App Summons Help When You Need CPR (geekwire.com) 55

An anonymous reader writes:Sudden cardiac arrest is usually fatal. But Seattle's Fire Department has joined with the city's Medic One Foundation to develop an app which alerts emergency dispatchers and also CPR-trained bystanders when someone needs CPR. The PulsePoint app also shows the location of the nearest defibrillator, and Seattle's mayor says he hopes it will save lives. A Spokane version of the app is already credited with helping to save the life of an infant, and the Medic One Foundation hopes to work with more local fire department to bring the app to the rest of Washington State.
Advertising

Password App Developer Overlooks Security Hole to Preserve Ads (engadget.com) 96

An anonymous reader quotes this report from Engadget: Think it's bad when companies take their time fixing security vulnerabilities? Imagine what happens when they avoid fixing those holes in the name of a little cash. KeePass 2 developer Dominik Reichl has declined to patch a flaw in the password manager's update check as the 'indirect costs' of the upgrade (which would encrypt web traffic) are too high -- namely, it'd lose ad revenue...

To his credit, Reichl notes that he'd like to move to encryption as soon as he believes it's possible. You can also verify that you're getting a signed download, if you're worried. However, it's still contradictory to develop a security-centric app and decide that security should take a back seat.

An update on the site says the software's version information file is now digitally signed, adding that KeePass "neither downloads nor installs any new version automatically. Users have to do this manually... users should check whether the file is digitally signed... HTTPS cannot prevent a compromise of the download server; checking the digital signature does."
Encryption

RSA Keys Can Be Harvested With Microphones (theregister.co.uk) 157

Researchers have now demonstrated that even with modern laptop, desktop, and server computers, an inexpensive attack can harvest 4,096-bit encryption keys using a parabolic microphone within 33 feet -- or even from 12 inches away, using a cellphone microphone. An anonymous reader quotes this article from The Register: In both cases it took an hour of listening to get the 4,096-bit RSA key... As a computer's processor churns through the encryption calculations, the machine emits a high-frequency "coil whine" from the changing electrical current flowing through its components... The team recommends encryption software writers build in "blinding" routines that insert dummy calculations into cryptographic operations. After discussions with the team, GNU Privacy Guard now does this.
Government

FTC Has Serious Concerns About IoT Security and Privacy (onthewire.io) 41

Trailrunner7 quotes a report from On The Wire: The Federal Trade Commission has sent comments to the Department of Commerce, outlining a list of concerns about the security and privacy of connected and embedded devices, saying that while many IoT devices have tangible benefits for consumers, "these devices also create new opportunities for unauthorized persons to exploit vulnerabilities." One of the key security problems that researchers have cited with IoT devices is the impracticality of updating them when vulnerabilities are discovered. Installing new firmware on light bulbs or refrigerators is not something most consumers are used to, and many manufacturers haven't contemplated those processes either. The FTC said the lack of available updates is a serious problem for consumers and businesses alike. "Although similar risks exist with traditional computers and computer networks, they may be heightened in the IoT, in part because many IoT chips are inexpensive and disposable, and many IoT devices are quickly replaceable with newer versions. As a result, businesses may not have an incentive to support software updates for the full useful life of these devices, potentially leaving consumers with vulnerable devices. Moreover, it may be difficult or impossible to apply updates to certain devices," the FTC comments say. In early May, the FTC issued a 10-page letter to eight leading players in the mobile communications arena requiring them to tell the agency how they issue security patches.

Slashdot Top Deals