An anonymous reader quotes TechCrunch: A renowned iPhone hacking team has released a new "jailbreak" tool that unlocks every iPhone, even the most recent models running the latest iOS 13.5. [9to5Mac points out it also works on iPads.]

For as long as Apple has kept up its "walled garden" approach to iPhones by only allowing apps and customizations that it approves, hackers have tried to break free from what they call the "jail," hence the name "jailbreak...." The jailbreak, released by the unc0ver team, supports all iPhones that run iOS 11 and above, including up to iOS 13.5, which Apple released this week. Details of the vulnerability that the hackers used to build the jailbreak aren't known, but it's not expected to last forever...

Security experts typically advise iPhone users against jailbreaking, because breaking out of the "walled garden" vastly increases the surface area for new vulnerabilities to exist and to be found.

An anonymous reader quotes a report from Ars Technica: A man from Washington state was arrested in May 2019 and was indicted on several charges related to robbery and assault. The suspect, Joseph Sam, was using an unspecified Motorola smartphone. When he was arrested, he says, one of the officers present hit the power button to bring up the phone's lock screen. The filing does not say that any officer present attempted to unlock the phone or make the suspect do so at the time. In February 2020, the FBI also turned the phone on to take a photograph of the phone's lock screen, which displayed the name "Streezy" on it. Sam's lawyer filed a motion arguing that this evidence should not have been sought without a warrant and should therefore be suppressed.

District Judge John Coughenour of the U.S. District Court in Seattle agreed. In his ruling (PDF), the judge determined that the police looking at the phone at the time of the arrest and the FBI looking at it again after the fact are two separate issues. Police are allowed to conduct searches without search warrant under special circumstances, Coughenour wrote, and looking at the phone's lock screen may have been permissible as it "took place either incident to a lawful arrest or as part of the police's efforts to inventory the personal effects" of the person arrested. Coughenour was unable to determine how, specifically, the police acted, and he ordered clarification to see if their search of the phone fell within those boundaries. But where the police actions were unclear, the FBI's were both crystal clear and counter to the defendant's Fourth Amendment rights, Coughenour ruled. "Here, the FBI physically intruded on Mr. Sam's personal effect when the FBI powered on his phone to take a picture of the phone's lock screen." That qualifies as a "search" under the terms of the Fourth Amendment, he found, and since the FBI did not have a warrant for that search, it was unconstitutional.

Attorneys for the government argued that Sam should have had no expectation of privacy on his lock screen -- that is, after all, what everyone who isn't you is meant to see when they try to access the phone. Instead of determining whether the lock screen is private or not, though, Coughenour found that it doesn't matter. "When the Government gains evidence by physically intruding on a constitutionally protected area -- as the FBI did here -- it is 'unnecessary to consider' whether the government also violated the defendant's reasonable expectation of privacy," he wrote. Basically, he ruled, the FBI pushing the button on the phone to activate the lock screen qualified as a search, regardless of the lock screen's nature.

Security researchers and hackers have had access to a leaked early version of iOS 14, the iPhone's next operating system, since at least February, Motherboard reported Friday. From the report: That's almost eight months before the expected official release of iOS 14, given that Apple usually publishes the new iOS in September along with the announcement of new phones. Sometimes, screenshots and descriptions of new features leak before the official reveal. This time, however, an entire version of the operating system has leaked and is being widely circulated among hackers and security researchers. Motherboard has not been able to independently verify exactly how it leaked, but five sources in the jailbreaking community familiar with the leak told us they think that someone obtained a development iPhone 11 running a version of iOS 14 dated December 2019, which was made to be used only by Apple developers. According to those sources, someone purchased it from vendors in China for thousands of dollars, and then extracted the iOS 14 internal build and distributed it in the iPhone jailbreaking and hacking community.

An anonymous reader quotes a report from ZDNet: Academics from Germany and Italy say they developed a new practical attack that breaks the separation between Wi-Fi and Bluetooth technologies running on the same device, such as laptops, smartphones, and tablets. Called Spectra, this attack works against "combo chips," specialized chips that handle multiple types of radio wave-based wireless communications, such as Wi-Fi, Bluetooth, LTE, and others. More particularly, the Spectra attack takes advantage of the coexistence mechanisms that chipset vendors include with their devices. Combo chips use these mechanisms to switch between wireless technologies at a rapid pace. [The new Spectra attack allows attackers to break the barrier between these technologies to launch denial-of-service (DoS), arbitrary code execution (ACE), or information disclosure attacks.] Additional details are not available, but the research team plans to provide a technical rundown during a virtual session at the Black Hat security conference in August. An academic paper will also be available at that time.

Many high school students around the country completed Advanced Placement tests online last week but were unable to submit them at the end because the testing portal doesn't support HEIC images -- the default format on iOS devices and some newer Android phones. The Verge reports: For the uninitiated: AP exams require longform answers. Students can either type their response or upload a photo of handwritten work. Students who choose the latter option can do so as a JPG, JPEG, or PNG format according to the College Board's coronavirus FAQ. But the testing portal doesn't support the default format on iOS devices and some newer Android phones, HEIC files. HEIC files are smaller than JPEGs and other formats, thus allowing you to store a lot more photos on an iPhone. Basically, only Apple (and, more recently, Samsung) use the HEIC format -- most other websites and platforms don't support it. Even popular Silicon Valley-based services, such as Slack, don't treat HEICs the same way as standard JPEGs.

[Nick Bryner, a high school senior in Los Angeles] says many of his classmates also tried to submit iPhone photos and experienced the same problem. The issue was so common that his school's AP program forwarded an email from the College Board to students on Sunday including tidbits of advice to prevent submission errors. "What's devastating is that thousands of students now have an additional three weeks of stressful studying for retakes," Bryner said. The email Bryner received doesn't mention the HEIC format, though it does link to the College Board's website, which instructs students with iPhones to change their camera settings so that photos save as JPEGs rather than HEICs. The company also linked to that information in a tweet early last week. In a statement emailed to The Verge, the College Board said that "the vast majority of students successfully completed their exams" in the first few days of online testing, "with less than 1 percent unable to submit their responses." The company also noted that "We share the deep disappointment of students who were unable to submit responses."

AT&T says it will stop advertising its wireless network as "5G Evolution" after a division of the Better Business Bureau determined that its language was misleading. The Associated Press reports: While AT&T and other wireless carriers in the U.S. have now begun rolling true 5G wireless networks, AT&T in December 2018 began talking about a "5G Evolution" service that was already available in hundreds of markets, and placed a "5G E" icon on phones when they connected to the network. But it was not 5G. It was merely the existing 4G network with minor speed boosts, at least compared to the fastest type of 5G networks.

Now, a division of the Better Business Bureau that regulates the ad industry has recommended that AT&T stop using "5G Evolution" and "5G Evolution, The First Step to 5G" claims in its marketing. Rival T-Mobile had brought a complaint about AT&T's language. The panel found that this language "will mislead reasonable consumers into believing that AT&T is offering a 5G network." AT&T said it disagreed with the group's reasoning but will comply with the decision.

T-Mobile has launched a new initiative called "Connecting Heroes" that gives free wireless service to first responders for 10 years, which T-Mobile estimates could save $7.7 billion if all first responder agencies sign up. PhoneDog reports: Connecting Heroes will give unlimited talk, text, and smartphone data to first responders. That includes 5G access at no extra charge as well as 1GB of 4G LTE mobile hotspot data plus 3G speeds after that. Streaming video at 480p is included, as is Mobile Without Borders which offers unlimited calling and texting between the US, Canada, and Mexico. First responders can choose to upgrade their plan for $15 per month and get 20GB of mobile hotspot usage, unlimited texting and up to 256Kbps data in 210+ countries and destinations, plus free texting and in-flight Wi-Fi through Gogo. T-Mobile's Connecting Heroes initiative is open to every public and non-profit, state and local police, fire, and EMS first responders. If you feel that you qualify, you can learn more and begin the signup process right here.

TF International Securities' reliable analyst Ming-Chi Kuo is at it again with another ominous note on the iPhone 12: it won't come with wired EarPods included in the box. From a report: We can already feel the palpable anger bubbling up inside of you as you read these words, shaking your head in disbelief and crossing your fingers in hopes it's not true. But this is news coming from Kuo, an analyst who rarely misses when he spreads his gospel, so there's a good chance the information is right and Apple is summoning up its infamous courage once again. Every version of the iPhone has shipped with wired earbuds in the box and removing them would make the iPhone 12 less accessible. Imagine ponying up the big bucks for a shiny new iPhone 12 and not being able to listen to music in private unless you shell out separately for wired or wireless earbuds.

An anonymous reader quotes a report from Ars Technica: The Department of Homeland Security is reportedly issuing alerts to wireless telecom providers and law enforcement agencies about potential attacks on cell towers and telecommunications workers by 5G/coronavirus conspiracy theorists. The DHS warned that there have already been "arson and physical attacks against cell towers in several U.S. states." The preposterous claim that 5G can spread the coronavirus, either by suppressing the immune system or by directly transmitting the virus over radio waves, led to dozens of tower burnings in the UK and mainland Europe. Now, the DHS "is preparing to advise the U.S. telecom industry on steps it can take to prevent attacks on 5G cell towers following a rash of incidents in Western Europe fueled by the false claim that the technology spreads the pathogen causing COVID-19," The Washington Post reported last week.

The DHS alert will include "advice on ways to reduce the risk of attack, including installing appropriate sensing and barriers, cyber-intrusion detection systems, closed-circuit television and monitoring drone activity near towers," the Post article said. A telecom-industry official said that carriers in the U.S. "have seen sporadic attacks on their cell towers that were apparently prompted by COVID-19 disinformation" over the past few weeks, the Post wrote. In addition to warning telecoms, DHS reportedly issued an intelligence report on the topic "to senior federal officials and law enforcement agencies around the country," ABC News reported Saturday. DHS also teamed with the FBI and National Counterterrorism Center to issue a joint intelligence bulletin to federal officials and law enforcement agencies, the ABC News report said.

Samsung and South Korean telecom giant SK Telecom have debuted the Galaxy A Quantum 5G smartphone, sporting a quantum random number generation (RNG) chipset. It's the first commercialization of quantum technology for mobile phones, and it will serve as a significant bellwether for full quantum encryption's chances of going mainstream. Threatpost reports: Quantum encryption in general has been touted as being "unhackable" because it generates random numbers and secure keys that cannot be predicted, via particles that can't be intercepted, eavesdropped upon or spoofed. The very laws of physics themselves prevent successful cracking, the theory goes. However, researchers have proven more than once that this isn't the case -- though hacks so far have required sustained physical access to a device.

In any event, the Samsung phone will provide an interesting test case for the technology -- though details are scant in terms of how the chipset actually works. The Galaxy will use quantum security in a few different scenarios, according to an SK press release (translated with Google Translate). These include logging into carrier accounts on the device; securely storing personal documents via a blockchain-enabled "Quantum Wallet" and for biometric-based mobile payments at retail stores. Online payment protection is also on the roadmap. SK Telecom also plans to roll out open APIs for developers to begin incorporating the technology on an OEM and application basis.

Huawei has found a neat workaround to keep bundling Google apps on its smartphones: Launch new variants of old smartphones. From a report: The way the export ban has worked in practice is that Huawei devices that launched before the export ban (and some that launched even slightly after) can still be sold with Google apps. Devices that launched well after the ban, like the Mate 30 Pro, are stuck without the Google apps. So Huawei's solution, and its interpretation of the law, is that re-releases of old devices can still ship with Google apps. So meet the "New Editions" of old Huawei phones. This week, the company announced that the Huawei P30 Pro would be returning as the "Huawei P30 Pro New Edition," and earlier this year it re-launched the P30 Lite as the "P30 Lite New Edition." Both of these phones are from March 2019, so they're well over a year old now, but they both have Google app licenses, so welcome back!

According to The Information, two top executives left Google's Pixel team following the poor reception of the Pixel 4 and "rare internal criticism" of the phone. Ars Technica reports: Pixel general manager Mario Queiroz and "the mastermind behind Google's Pixel camera," Marc Levoy, have both left the Pixel team in the past year. Both Queiroz and Levoy have been visible members of the Pixel team at launch events, where they usually give lengthy presentations about the new features. Levoy, in particular, is cause for concern, since the Pixel's camera has been one of the major bright spots of the phone line. The Pixel 4 has not been a huge success. It has sold less than the Pixel 3 and Pixel 3a in its first two quarters. Osterloh was not confident about the device in the leadup to launch, either. The report says that "ahead of the [Pixel 4] October launch in New York," Osterloh called an all-hands meeting and shared his misgivings about the phone. He reportedly "did not agree with some of the decisions made about the phone" and that "in particular, he was disappointed in its battery power." Osterloh runs the Pixel team, so this reporting gives some insight into his management style. For a Steve Jobs type, approving these kinds of broad directions would be a big part of his day-to-day decision making. Osterloh, apparently, is more of a hands-off delegator.

The report says that, following "sluggish sales and tepid reviews" for the Pixel 4, "the company's hardware division needs to maintain favor and funding as Google's top brass look to rein in costs because of a recent slowdown in advertising revenue." Seeing Google Hardware in the same sentence as Google's cost-cutting efforts is a bit scary -- Google has been aggressively killing products that don't regularly pull in millions of users, and it's hard to make an argument that the Pixel line has been doing well or is even getting better over its four years of existence. We've already seen some branches of Google Hardware get the ax: Osterloh has admitted the team has quit the tablet business after poor performance from the Pixel Slate.

[R]esearchers at MIT's Computer Science and Artificial Intelligence Lab (CSAIL) have developed a new system (PDF) that can figure out when and where in-home appliances like hair dryers, stoves, microwaves and washing machines are being used, and they believe that info could help inform healthcare practitioners about the habits and challenges of people under their care. TechCrunch reports: The researchers devised a system called "Sapple" that uses just two sensors placed in a person's home to determine use patterns of devices including stoves, hair dryers and more. There's one location sensor that works using radio signals to figure out placement, with a user able to calibrate it to cover their area by simply walking the bounds of their space. A second sensor measures energy usage through the home, and combines that data with movement information to matching energy use signals with physical locations of specific applicants, to provide data both when a person is using the appliances around the house, and for how long.

This gets around a lot of the issues raised by similar systems, including more simple voltage meters used on their own. While appliances do tend to have specific energy use patterns that mean you can identify them just based on consumption, it's hard to tell when and how they're being used with that data on its own. This info can let health professionals know if a patient is taking proper care of hygiene, food preparation and intake and more.

Belkin International, the company that makes iPhone charging cables and home routers, has started making what it calls "low-cost" ventilators at manufacturing plants in Providence, Rhode Island. USA Today reports: These are sub-$200 units aimed for emergencies and less severe cases of COVID-19, compared to more full-featured units that cost in the tens of thousands of dollars. "This is one of the most urgent humanitarian crises we have experienced in our lifetimes and the number one responsibility for each of us in this moment is the care and compassion for others in need," said Chet Pipkin, CEO and founder of Belkin. "It was obvious there's a critical need for ventilators and not just for the short term," says Pipkin. "We have no excuse not to get prepared." It's looking to make at least 10,000 ventilators.

So how did it learn how to go outside of their zone to medical supplies? "We felt a responsibility to be helpful to others," he says, but acknowledges that Belkin didn't have the expertise to design a ventilator. "We reached out to the network," and found experts to guide the way. The University of Illinois at Urbana-Champaign's Grainger College of Engineering had the design, and Belkin also consulted with Carle Health of Urbana, Illinois, for what's being called the FlexVent. It's under production now, but pending the review and approval of its Emergency Use Authorization application by the Food and Drug Administration. Belkin's pitch: the FlexVent will be used as a single-use emergency ventilator that can provide constant-flow, pressure-cycled ventilation automatically to patients in respiratory distress.

An anonymous reader quotes a report from AnandTech: Today alongside with the launch of the Xiaomi Redmi K30 5G Racing Edition, Qualcomm is announcing the new Snapdragon 768G SoC which powers the device. The new SoC is a direct follow-up to the Snapdragon 765G announced last December, and the two chips are very likely the same silicon design, with the new variant increasing the clock frequencies.

The new chip features the same Cortex-A76 cores in a 1+1 configuration (one Prime high-clocked core, and one medium clocked core), alongside 6 Cortex-A55 cores. The difference in CPU performance lies in the frequencies of the big cores which are now at up to 2.8GHz and 2.4GHz for the Performance and Middle core -- a more notable uplift from the 2.4 and 2.2GHz clocks of the Snapdragon 765G. GPU clock frequencies have also been increased, resulting in at 15% performance boost over the Snapdragon 765. The rest of the chip is seemingly identical to the Snapdragon 765 series.

Cryptocurrency investor Michael Terpin sued AT&T over a SIM card attack in 2018 that lost him control over $23 million.

Now Bloomberg reports that he's suing the "15-year-old hacker and his crew of 'evil computer geniuses'" behind the attack. (Alternate source) Terpin, the founder and chief executive officer of blockchain advisory firm Transform Group, is suing Ellis Pinsky, now 18, for $71 million under a federal racketeering law that allows for triple damages. "Pinsky and his other cohorts are in fact evil computer geniuses with sociopathic traits who heartlessly ruin their innocent victims' lives and gleefully boast of their multi-million-dollar heists," Terpin said in his complaint filed Thursday in federal court in Manhattan.

Pinsky, of Irvington, New York, couldn't be reached for comment....

According to Terpin. Pinsky's ring identifies people with large cryptocurrency holdings and gains control of their phones by bribing or fooling employees of their wireless carriers. The hackers are then able to intercept authentication messages, gain information and drain the victims' cryptocurrency accounts.

Pinsky has boasted to friends that, starting at age 13, he stole more than $100 million worth of cryptocurrency, hundreds of thousands of dollars of which has been converted into cash stored in his bedroom, the lawsuit alleges. Terpin also claims that, after confronting Pinsky about his alleged role in the theft, the teenager sent him cryptocurrency, cash and a watch with a combined value of $2 million. He claims this was an admission by Pinsky that he had stolen from Terpin.

Google's move to put Javier Soltero, VP and GM of G Suite, in charge of Messages, Duo, and the phone app on Android, puts all of Google's major communication products under one umbrella: Soltero's team. Dieter Bohn reports via The Verge: Soltero tells me that there are no immediate plans to change or integrate any of Google's apps, so don't get your hopes up for that (yet). "We believe people make choices around the products that they use for specific purposes," Soltero says. Still, Google's communications apps are in dire need of a more coherent and opinionated production development, and Soltero could very well be the right person to provide that direction. Prior to joining Google, he had a long career that included creating the much-loved Acompli email app, which Microsoft acquired and essentially turned into the main Outlook app less than two months after signing the deal.

Soltero has also moved rapidly (at least by the standards of Google's communication apps) to clean up the Hangouts branding mess, converting Hangouts Video to Google Meet and Hangouts Chat to Google Chat -- at least on the enterprise side. Google Meet also became free for everybody far ahead of the original schedule because of the pandemic. Cleaning up the consumer side of all that is more complicated, but Soltero says, "The plan continues to be to modernize [Hangouts] towards Google Meet and Google Chat." "Soltero will remain on the cloud team but will join Hiroshi Lockheimer's leadership team," Dieter adds. While Lockheimer believes there are opportunities to better integrate Google's apps into its platforms, he says it doesn't make sense to force integration or interoperability too quickly.

"It's not necessarily a bad thing that there are multiple communications applications if they're for a different purpose," Lockheimer says. "Part of what might be confusing, what we've done to confuse everyone, is our history around some of our communications products that have gone from one place or another place. But we're looking forward now, in a way that has a much more coherent vision."

Three U.S. senators today urged Comcast to open all of its Wi-Fi hotspots to children who lack Internet access at home during the pandemic. Ars Technica reports: A letter (PDF) from Sens. Ron Wyden (D-Ore.), Kamala Harris (D-Calif.), and Cory Booker (D-N.J.) says that Comcast recently refused a request to do so because it would cause congestion for subscribers. But the senators argue that "Comcast's excuse simply does not add up." Comcast has been praised by advocates for its pandemic response, which includes two free months of home-Internet service for new low-income subscribers, temporary suspension of its data cap, and making many of its hotspots free to the general public. But while Comcast opened up 1.5 million hotspots located at businesses and other public areas, there's another category of Comcast Wi-Fi hotspots that still require a Comcast login and subscription. Those are the hotspots that are enabled by default on Xfinity routers used by home-Internet subscribers.

Since 2013, Xfinity gateways have broadcasted a separate network that other Comcast subscribers can log in to with a Comcast username and password. Unless you've disabled the functionality, anyone within range of your Comcast router can get Internet access if they have a Comcast subscription or have paid for a temporary Wi-Fi pass. Wyden, Harris, and Booker argue that Comcast should open these hotspots to children without Internet access during the pandemic so that kids can get free broadband at home instead of having to go to a parking lot or other public places. In the letter, the senators ask Comcast to answer a list of questions by May 22. They also want the company to provide specific details on how opening up the hotspots would affect network performance.

"Please identify the specific performance issues that you anticipate would impact Comcast subscribers and their ability to get the level of service for which they pay if Comcast removed the paywall on its residential public Wi-Fi networks," the senators wrote. "For each issue you identify, please explain why the use today of a subscriber's public network by someone who has purchased an access pass from Comcast does not cause the same problem."

An anonymous reader quotes a report from ZDNet: The details of 44 million Pakistani mobile subscribers have leaked online this week, ZDNet has learned. The leak comes after a hacker tried to sell a package containing 115 million Pakistani mobile user records last month for a price of $2.1 million in bitcoin. Data contains names, phone numbers, national IDs, and home addresses among others, and is believed to have originated from Jazz, a local mobile provider. According to our analysis of the leaked files, the data contained both personally-identifiable and telephony-related information. This includes the likes of: Customer full names; Home addresses (city, region, street name); National identification (CNIC) numbers; Mobile phone numbers; Landline numbers; and Dates of subscription.

Based on the dates of subscription, the oldest entries in the leaked files are from late 2013, suggesting that hackers either got their hands on an older backup file, or the breach took place in 2013, and only now surfaced online. The vast majority of entries in the leaked files contained mobile phone numbers belonging to Jazz (formerly Mobilink), a Pakistani mobile operator. However, ZDNet also identified phone numbers that appeared to belong to other mobile operators. [...] The incident is already under investigation in Pakistan, where the Pakistan Telecommunication Authority (PTA) and the Federal Investigation Agency (FIA) are looking into the matter since last month when the hacker first tried to sell the entire 115 million batch on a hacker forum.

Apple's platforms like the iPhone are set to open up more, Spotify CEO Daniel Ek said Tuesday. The firm has criticized Apple in the past, taking legal action against what it perceives as unfair treatment of third-party services. From a report: "Long term, we do expect Apple to open up," Ek told Bloomberg in a TV interview. "We're very encouraged about being able to now finally use Siri as a way of building in voice support and also being available to build products for the Apple TV and Apple Watch, something that we haven't been able to do until very recently." It's a bold claim, particularly as Apple is famed for maintaining close control over its platforms. The iPhone only officially supports downloading apps through its App Store, for example, and developers have to abide by strict rules that can leave firms giving a percentage of user subscription fees to Apple.