msm1267 writes: Security researcher Joshua Drake today disclosed two more flaws in Stagefright, one that dates back to the first version of Android, and a second dependent vulnerability that was introduced in Android 5.0. The bugs affect more than one billion Android devices, essentially all of them in circulation. One of the vulnerabilities was found in a core Android library called libutils; it has been in the Android OS since it was first released and before there were even Android mobile devices. The second vulnerability was introduced into libstagefright in Android 5.0; it calls into libutils in a vulnerable way. An attacker would use a specially crafted MP3 or MP4 file in this case to exploit the vulnerabilities. Google has released patches into the Android Open Source Project tree, but public patches are not yet available.

New submitter cvdwl writes: A New York Times (mildly paywalled) article and associated analysis discuss the consumer cost of mobile ads, assuming a US$0.01/MB data plan. The article provides one of the only estimates I've seen of the the real cost in time and money (and time is money) of mobile advertising. Ethics of ad-blockers aside, this highlights the hidden costs of data-heavy (often lazy and poorly developed) web-design. In a nutshell, the worst sites took 10-30s load 10-20MB, costing $0.15-0.40, over 4G due to a blizzard of video, heavy images, and occasionally just massive scripts. The best sites had high content to ad ratios, typically loading 1-3MB of content and >500kB of advertising.

fyngyrz writes: Ultracaps offer significantly faster charge and discharge rates as well as considerably longer life than batteries. Where they have uniformly fallen short is in the amount of energy they can store as compared to a battery, and also the engineering backflips required to get higher voltages (which is the key to higher energy storage because the energy stored in a cap scales with the square of the cap's voltage, whereas doubling the cap's actual capacitance only doubles the energy, or in other words, the energy increase is linear.) This new development addresses these shortcomings all at once: considerably higher voltage, smaller size, higher capacitance, and to top it off, utilizes less corrosive internals. The best news of all: This new technology looks to be easy, even trivial, to manufacture, and uses inexpensive materials — and that is something neither batteries or previous types of ultracaps have been able to claim. After the debacle of EEStor's claims and failure to meet them for so long, and the somewhat related very slow advance of other ultracap technology, it's difficult not to be cynical. But if you read TFA (yes, I know, but perhaps you'll do it anyway) you may decide some optimism might actually be called for.

Dave Knott writes: One of the new features introduced in iOS9 is "Wi-Fi Assist." This enables your phone to automatically switch from Wi-Fi to a cellular connection when the Wi-Fi signal is poor. That's helpful if you're in the middle of watching a video or some other task on the internet that you don't want interrupted by spotty Wi-Fi service. Unfortunately, Wi-Fi Assist is enabled by default, which means that users may exceed their data cap without knowing it because their phone is silently switching their data connection from Wi-Fi to cellular.

sckirklan writes: Amazon has rolled out a new service called Amazon Flex. It lets people sign up to deliver packages using their mobile phone and their car, earning $18-25/hr while doing so. Think Uber, but for package delivery. Their goal is to fully support one-hour delivery within certain cities. The service is available in Seattle to start, and it'll soon expand to Manhattan, Baltimore, Miami, Dallas, Austin, Chicago, Indianapolis, Atlanta, and Portland. No news on what they think of bicycle couriers, but given their focus on being green, I'd imagine something is in the works.

Two of the products officially unveiled at Google's much-anticipated (at least much-hyped) release announcement were widely and correctly predicted: a pair of new Nexus phones. The flagship is the all-metal Huawei 6P, with a 5.7" AMOLED display (2,560x1,440), 3GB of RAM, and a Snapdragon 810 chip. The Huawei overshadows the nonetheless respectable second offering, the LG-made Nexus 5X, which makes concessions in the form of less RAM (2GB instead of the 6P's 3), smaller battery (2700mAh, instead of 3450) and a lesser Snapdragon chip inside (808, rather than 810). Both phones, though, come with USB-C and with a big upgrade for a line of phones not generally praised for its cameras: a large-pixel 12.3-megapixel Sony camera sensor. Much less predicted: Google announced a new bearer for the Pixel name, after its line of high-end Chromebooks; today's entrant is a tablet, not running Chrome, and it's running Android rather than Chrome OS. The Pixel C tablet will debut sometime later this year; google touts it as "the first Android tablet built end-to-end by Google." Also on the agenda today, news that Android 6 will start hitting Nexus devices next week.

Andy Smith writes: The annoying App Store redirect issue has blighted iPhone users for years, but now there's a new annoyance and it's already being exploited: Visit a web page on your iPhone and any advertiser can automatically open your messages app and create a new text message with the recipient and message already filled in. We can only hope they don't figure out how to automatically send the message, although you can bet they're trying.

itwbennett writes: Following agreements signed by the EU with South Korea in June 2014 and with Japan in May 2015, the EU and China "have agreed to agree by the end of the year on a working definition for 5G," reports Peter Sayer. "About the only point of agreement so far is that 5G is what we'll all be building or buying after 4G, so any consensus between the EU and China could be significant," says Sayer.

MojoKid writes: Underneath the hood of Apple's new iPhone 6s and iPhone 6s Plus models is a new custom designed System-on-Chip (SoC) that Apple has dubbed its A9 processor. It's a 64-bit chip that, according to Apple, is the most advanced ever built for any smartphone, and that's just one of many claims coming out of Cupertino. Apple is also claiming a level of gaming performance on par with dedicated game consoles and with a graphics engine that's 90 percent faster than the previous generation. For compute chores, Apple says the A9 chip improves overall CPU performance by up to 70 percent. These performance promises come without divulging too much about the physical makeup of the A9, though in testing its dual-core SoC does seem to compete well with the likes of Samsung's octal-core Exynos chips found in the Galaxy S6 line. Further, in intial graphics benchmark testing, the A9 also leads the pack in mosts tests, sometimes by a healthy margin, even besting Qualcomm's Snapdragon 810 in tests like 3DMark Ice Storm Unlimited.

The New York Times reports that the regulators of the Federal Trade Commission have a new target at Google: Android. Specifically, according to "two people involved in the [preliminary] inquiry," the FTC is looking askance at how Google treats its other software products and services (like Maps) in relation to the mobile OS. While Android itself can be bundled on phones, tablets, and other devices without charge, Google insists on a trade-off when it comes to its own services, like its app store, Google Play: to include access to those services, without which a typical Android device is far less valuable, hardware manufacturers must also include Google's designated apps (Gmail, Google Maps, and the Google search engine interface). Says the article: In recent months, a number of mobile application makers have complained to the Justice Department that this requirement — the “home-screen advantage” — makes it all but impossible for them to compete in a world where people are spending less time on desktop computers and more time on mobile phones. ... Since then, the F.T.C. has worked out an agreement with the Justice Department to investigate the claims, the people involved in the inquiry said.

Mark Wilson writes: One of the key features of iOS 9 — and one of the reasons 16GB iPhones were not killed — is app slicing. This innocuous-sounding feature reduces the amount of space apps take up on iPhones and iPads... or at least it does when it is working. At the moment Apple has a problem with iCloud which is preventing app slicing from working correctly. The feature works by only downloading the components of an app that are needed to perform specific tasks on a particular device, but at the moment regular, universal apps are delivered by default.

alphadogg writes: The U.S. has fallen to No. 55 in LTE performance as speeds rise rapidly in countries that have leapfrogged some early adopters of the popular cellular system. The average download speed on U.S. 4G networks inched up to 10Mbps (bits per second) in the June-August quarter, according to research company OpenSignal. That was an improvement from 9Mbps in the previous quarter, but the country's global ranking fell from 43rd as users in other countries enjoyed much larger gains.

An anonymous reader writes: I will be looking for a new laptop soon and I'm mostly interested in high reliability and Linux friendliness. I have been using an MSI laptop (with Windows 7) for the last five years as my main workhorse and did not have a single, even minor problem with the hardware nor the OS. It turned out to be a slam-dunk, although I didn't do any particular research before buying it, so I was just lucky. I would like to be more careful this time around, so this is a hardware question: What laptop do you recommend for high reliability with Linux? I will also appreciate any advice on what to avoid and any unfortunate horror stories; I guess we can all learn from those. Anti-recommendations are probably just as valuable, a lesson I learned when an HP laptop I bought (low-end, I admit) turned out to be notoriously fickle when it comes to Linux support. Since our anonymous submitter doesn't specify his budget, it would be good if you specify the price for any specific laptops you recommend.

Starting in April, the South Korean government required that cellphones sold to anyone below the age of 19 be equipped with approved monitoring software that would allow the user's parents to monitor their phone use, report their location, and more. Now, however, researchers have discovered that one of the most popular of the approved apps, called Smart Sheriff, may not actually be very smart to have on one's phone. Researchers from Citizen Lab and Cure53, at the request of the Open Technology Fund, have analyzed the code of Smart Sheriff, and found that it actually endangers, rather than protects, the users. Reports the Associated Press, in a story carried by the Houston Chronicle: Children's phone numbers, birth dates, web browsing history and other personal data were being sent across the Internet unencrypted, making them easy to intercept. Authentication weaknesses meant Smart Sheriff could easily be hijacked, turned off or tricked into sending bogus alerts to parents. Even worse, they found that many weaknesses could be exploited at scale, meaning that thousands or even all of the app's 380,000 users could be compromised at once.

Reuters reports that Apple is cleaning up hundreds of malicious iOS apps after what is described as the first major attack on its App Store. Hundreds of the stores apps were infected with malware called XcodeGhost, which used as a vector a counterfeit version of iOS IDE Xcode. Things could be a lot worse, though: Palo Alto Networks Director of Threat Intelligence Ryan Olson said the malware had limited functionality and his firm had uncovered no examples of data theft or other harm as a result of the attack. Still, he said it was "a pretty big deal" because it showed that the App Store could be compromised if hackers infected machines of software developers writing legitimate apps. Other attackers may copy that approach, which is hard to defend against, he said.

MojoKid writes: When Microsoft first announced the Surface Pro back in 2012, many Apple fans snickered. Here was Microsoft, releasing a somewhat thick and heavy tablet that not only had a kickstand, but also an odd cover that doubled as a keyboard. And to top things off, the device made use of a stylus. Steve Jobs famously said in 2010, "If you see a stylus, they blew it." But Microsoft forged ahead with the Surface Pro 2, and later with the Surface Pro 3. Not only were customers becoming more aware of the Surface but competitors were also taking note. We've seen Lenovo introduce the ideapad MIIX 700, which incorporates its own kickstand and an Intel Skylake-based Core m7 processor. And most recently, we've seen Apple pull a literal 180 on this design and platform approach, announcing the iPad Pro — a device that features a fabric keyboard cover similar in concept to the Surface Pro and a stylus. Dell and ASUS have also brought compelling offerings to the table as well. However, the big head-to-head competition will no doubt be between the Surface Pro 4, which is set to be unveiled early next month and Apple's iPad Pro when it finally goes on sale.

An anonymous reader writes: After revealing an improved version of Cardboard, the super-low cost virtual reality smartphone adapter, Google has now also freely released the detailed design documents, encouraging people to use them for projects ranging from DIY fun to full blown manufacturing. The v2 version of Cardboard is easier to assemble, has larger lenses, a universal input button, and is bigger overall to support larger phones.

An anonymous reader writes: What's your approach to detecting and dealing with Android malware? I have a fairly new, fairly fancy phone running Android Lollipop, the recently degraded performance of which leads me to believe that it's infected with malware. That, and a friend who noticed a lot of strange activity coming from my phone's IP — sorry, I don't have the logs, but he pointed out that there were pings coming from my phone to a lot of sketchy addresses — which pretty much seals the deal. There have been lots of stories lately about Android malware that remind me of the old saw about weather: everyone talks about it, but no one does anything about it. However, that can't be completely true, and before I reach a phone crisis, I'd like to get some sane, sage advice about diagnosing malware, and disposing of it, or at least mitigating its damage. When it comes to diagnosing, I don't know what software to trust. I've heard positive things from friends (and seen both positive reviews and terrible negative ones, raising even more meta questions about trust) about Malwarebytes, so I installed their mobile version. This dutifully scans my system, and reports no errors and malware. Which doesn't mean there isn't any, though I'd be happy to find out that I'm just being paranoid. The OS is stock (Motorola Nexus 6) and kept up to date. I have only very conventional apps, all downloaded from Google's Play store, and believe it or not I don't visit any dodgy websites on my phone, at least not intentionally. So: what's the most reliable way to get an accurate view of whether I am dealing with malware at all, and hopefully to eradicate it? Good malware hides well, I know, but is there any tool on the side of the righteous that is currently best at rooting it out? If I find a specific form of malware on my phone, how can I remove it?

alphadogg writes: AT&T said three of its employees secretly installed software on its network so a cellphone unlocking service could surreptitiously funnel hundreds of thousands of requests to its servers to remove software locks on phones. The locks prevent phones from being used on competing networks and have been an important tool used by cellular carriers to prevent customers from jumping ship.

walterbyrd writes with news that Apple has finally emerged victorious in a long-standing patent case against Samsung — though it's more of a moral victory than a practical one. Samsung is no longer allowed to sell some of its older phones unless the company disables features that infringe upon Apple patents. "The market impact will likely be limited, since the lawsuit was filed in 2012 and covers products that came out that year, like the Galaxy S3. Furthermore, software updates to Samsung software mean that the patents may not be infringed anymore. For instance, Samsung's Android phones no longer use a 'slide to unlock' feature on the bottom of the phone. In dissent, U.S. Circuit Judge Sharon Prost paints a sharply different picture (PDF) from the majority. 'This is not a close case,' she writes, noting that Apple's patents cover a spelling correction feature it doesn't use, and two others cover 'minor features' out of 'many thousands.'"