An anonymous reader quotes a report from ZDNet: For the past three months, a cybercrime group has been hacking into home routers -- mostly D-Link models -- to change DNS server settings and hijack traffic meant for legitimate sites and redirect it to malicious clones. The attackers operate by using well-known exploits in router firmware to hack into vulnerable devices and make silent changes to the router's DNS configuration, changes that most users won't ever notice. Targeted routers include the following models (the number to the side of each model lists the number of internet-exposed routers, as seen by the BinaryEdge search engine): D-Link DSL-2640B - 14,327; D-Link DSL-2740R - 379; D-Link DSL-2780B - 0; D-Link DSL-526B - 7; ARG-W4 ADSL routers - 0; DSLink 260E routers - 7; Secutech routers - 17; and TOTOLINK routers - 2,265.

Troy Mursch, founder and security researcher at internet monitoring firm Bad Packets, said he detected three distinct waves during which hackers have launched attacks to poison routers' DNS settings --late December 2018, early February 2019, and late March 2019. Attacks are still ongoing, he said today in a report about these attacks. A normal attack would look like this:

1. User's computer or smartphone receives wrong DNS server settings from the hacked router.
2. User tries to access legitimate site.
3. User's device makes a DNS request to the malicious DNS server.
4. Rogue server returns an incorrect IP address for the legitimate site.
5. User lands on a clone of the legitimate site, where he might be required to log in and share his password with the attackers. Update: 04/05 16:45 GMT by M : The story adds, "According to Stefan Tanase, security researcher at Ixia, these campaigns have hijacked traffic meant for Netflix, Google,PayPal, and some Brazilian banks, and have redirected users to clone sites, hosted over HTTP, on the networks of known bulletproof hosting providers."

Verizon announced today that it has turned on its 5G wireless network in Chicago and Minneapolis -- two of the first markets in the world to receive this next-gen network. Verizon CEO Hans Vestberg told CNBC that the company will activate 30 additional markets this year. From a report: Vestberg added that Verizon is unlikely to see any impact on revenue from people who upgrade to new 5G phones until around 2021. This network complements Verizon's existing "5G Home" service which launched in October in select areas and is a wireless alternative to a traditional cable-based home internet connection, but does not work far beyond the walls of your home.

Verizon said the wireless network will give customers access to peak speeds up to 1 Gbps. That's about 10 times faster than you might traditionally find on the LTE connection you have now. Put plainly: You'll be able to download movies in seconds instead of minutes. Only a select number of phones will support the network at first. Samsung will launch a Galaxy S10 5G model later this quarter that will be exclusive to Verizon to start. AT&T, T-Mobile and Sprint will begin to sell it in the second half of the year. That leaves the Motorola Z3 as the only phone that supports Verizon's new 5G network right now, and it requires a separate accessory to work on it.

In addition to shutting down Google+, Google URL Shortener, and Inbox by Gmail this week, the company has stopped selling its Pixel 2 and Pixel 2 XL smartphones through its online store, which means whatever remaining stock at other retailers will likely be extremely limited. It also means that the $799 Pixel 3 is now the cheapest phone Google sells. PCWorld summarizes the other three products coming to an end this week: Inbox by Gmail: When the Inbox by Gmail app launched in 2015, it was a revelation. A completely new way to view and organize your messages, Inbox boiled your emails down to a smart task manager, with bundles, pins, scheduling, and shortcuts that made managing your inbox a breeze. But over the years, Google's interest in Inbox faded, and it never really got the attention it deserved. Most of its unique features are now part of the Gmail app (though we're still waiting for bundles), and several third-party apps have adopted Inbox's style. Apparently that's good enough for Google, because as of this week you won't be able to use it anymore.

Google URL Shortener (goo.gl): Back in 2009, link shortening was still a novel idea, and Google was one of the first to bring the concept to the masses with the Google URL Shortener. It was a simple way to turn a lengthy web address into a short one that consisted of goo.gl and a short string of letter and numbers. With the rise of bit.ly and similar services, Google's own URL shortener became less important to people's work flow and now, nearly 10 years later, it's gone for good.

Google+: Google+ was once supposed to be the one-stop shop for social and support among Google users, but it never really caught on. And then it was revealed that some 50 million users may have had their name, email address, occupation, and age exposed to third-party developers, which accelerated its demise. Now it's going away for good, but we can't imagine that anyone will actually notice.

Sony is cutting up to half its smartphone workforce as sales shrink in the face of stiff global competition. From a report: The job cuts come as the global smartphone industry suffers one of the severest downturns of recent years. Worldwide shipments are expected to decline for the third straight year in 2019 to about 1.3 billion units, according to U.S. research company IDC. Sony's share of the smartphone market has fallen sharply in recent years -- from more than 3% in 2010, according to the research portal Statistica -- to less than 1% currently. It has struggled to compete against leaders Apple, Samsung Electronics and Huawei Technologies, all of which are racing to develop new 5G devices. The decision to scale back its smartphone workforce, which could see up to 2,000 of the total 4,000 jobs cut by March 2020, is part of a move to reduce fixed costs in the business, and also includes procurement reform.

An anonymous reader quotes the Associated Press: Federal legislation proposed Thursday would give state prison officials the ability they have long sought to jam the signals of cellphones smuggled to inmates within their walls... The legislation could help provide a solution to a problem prison officials have said represents the top security threat to their institutions.

Corrections chiefs across the country have long argued for the ability to jam the signals, saying the phones -- smuggled into their institutions by the thousands, by visitors, errant employees, and even delivered by drone -- are dangerous because inmates use them to carry out crimes and plot violence both inside and outside prison.

Friday CNN reported on "what you can do right now to stop robocalls."

"Short of throwing your phone in the garbage, there's no way to avoid them altogether. But wireless providers and smartphone developers offer tools to filter out at least some unwanted calls." - Verizon's Call Filter app is free to download on iPhones and Android devices. The company announced Thursday the app will offer some free features -- including auto-blocking calls from known fraudsters, showing warning banners for suspicious calls, and a spam reporting tool. For $2.99 a month per line, the Call Filter app can use a phonebook feature to look up the names of unknown callers, and it can show a "risk meter" for spam calls.

- AT&T's Call Protect has similar free features and add-ons with a $3.99 per month subscription. (iOS and Android)

- T-Mobile phones come loaded with Scam ID, which warns customers about suspicious phone numbers. It's also free to activate Scam Block, which automatically rejects calls from those numbers. An additional app called Name ID offers premium caller identification for $4 per line monthly. (iOS and Android)

- Sprint's Premium Caller ID , which comes pre-installed, looks up unknown numbers and filters and blocks robocalls for $2.99 per line.

- Google's Pixel phones also give you the option to have your voice assistant answer suspicious calls for you. The phone can transcribe the conversation and lets you decide whether to answer.

An anonymous reader quotes a report from TechCrunch: Moolah Mobile is teaming up with SurgePhone Wireless to offer people a new way to pay their cell phone bills -- by putting ads on their homescreens. Moolah CEO Vernell Woods (pictured above) said the startup has already been offering gift cards and other rewards to users who view its homescreen ads. So this is a similar model, except instead of earning gift cards, the ads are subsidizing cell phone service from Surge. The ads show up on users' homescreens during interstitial moments between using apps, so the goal is to offer free service without consumers having to change their behavior. Woods said all that ad time adds up, with "the average person who's using their phone on a consistent basis" viewing "easily between two to three hours" of homescreen ads each day. And that's enough to pay for the "equivalent" of Surge's $10 monthly plan. On the other hand, if for some reason a subscriber isn't hitting the necessary total, Woods said they can also earn more points by accepting offers or taking surveys. The subsidized wireless service will roll out in Florida, Virginia, Georgia and Texas initially, with an aim of reaching 40,000 locations by the end of the year.

An anonymous reader quotes a report from ZDNet: A group of academics from South Korea have identified 36 new vulnerabilities in the Long-Term Evolution (LTE) standard used by thousands of mobile networks and hundreds of millions of users across the world. The vulnerabilities allow attackers to disrupt mobile base stations, block incoming calls to a device, disconnect users from a mobile network, send spoofed SMS messages, and eavesdrop and manipulate user data traffic. They were discovered by a four-person research team from the Korea Advanced Institute of Science and Technology Constitution (KAIST), and documented in a research paper they intend to present at the IEEE Symposium on Security and Privacy in late May 2019.

The Korean researchers said they found 51 LTE vulnerabilities, of which 36 are new, and 15 have been first identified by other research groups in the past. They discovered this sheer number of flaws by using a technique known as fuzzing --a code testing method that inputs a large quantity of random data into an application and analyzes the output for abnormalities, which, in turn, give developers a hint about the presence of possible bugs. The resulting vulnerabilities, see image below or this Google Docs sheet, were located in both the design and implementation of the LTE standard among the different carriers and device vendors. The KAIST team said it notified both the 3GPP (industry body behind LTE standard) and the GSMA (industry body that represents mobile operators), but also the corresponding baseband chipset vendors and network equipment vendors on whose hardware they performed the LTEFuzz tests.

Joseph Tsidulko, writing for CRN: Oracle asked the U.S. Supreme Court on Wednesday to not review an appellate court's decision finding Google violated Oracle's copyright of the Java platform when building the Android mobile operating system. In that opposition brief, Oracle's attorneys said Google's copyright violation shut Oracle, the Java platform owner, out of the emerging smartphone market, causing incalculable harm to its business. The complex case pitting two Silicon Valley giants against each other has raged on since 2010, and already saw many twists in turns before a circuit court last year reversed a jury decision in favor of Oracle. That prompted Google's appeal to the nation's highest court. Oracle notes Google had previously asked for a writ of certiorari -- the legal term for review by the high court -- in 2015 without success in an earlier phase of the case, and the company argues nothing has changed in the time since.

Oracle believes Google destroyed its hopes of competing as a smartphone platform developer with the Java platform, which enables development and execution of software written in Java, including through APIs that access a vast software library. The lawsuit alleged Google copied those APIs without a proper license. Java was developed at Sun Microsystems, which Oracle acquired in 2010. "Google's theory is that, having invested all those resources to create a program popular with platform developers and app programmers alike, Oracle should be required to let a competitor copy its code so that it can coopt the fan base to create its own best-selling sequel," Oracle's brief states.

Xiaomi is teasing a new 100W quick-charging solution for mobile phones that can fully charge a large 4,000mAh battery in just 17 minutes. Ars Technica reports: The video shows a charging race between two phones, Xiaomi's unnamed "100W" prototype and a phone with "50W" charging from "Brand O," which looks like it's an Oppo RX17 Pro. I put both of these wattage ratings in quotations because neither phone actually hits its rated charging speed. Xiaomi's video shows a live, in-line power reading, and the "100W" charging shows a sustained ~80W (18V / 4.5A) from about 5-30 percent, with a peak of 88W. The competing 50W Oppo quick-charge solution caps out at around 40W.

Branding aside, what matters is the actual charging speed, and Xiaomi's ability to fully charge a phone battery in 17 minutes is impressive. The test stops when the Xiaomi phone fills up, leaving the Oppo battery stuck at a mere 65 percent. Considering that Xiaomi was charging a 4000mAh battery and that Oppo only had a 3700mAh battery, Xiaomi's solution is about 1.6 times faster than Oppo's quick charge, which is currently the fastest charging scheme on the market. Unfortunately, Xiaomi didn't offer any specifics on how its charging solution works.

An anonymous reader quotes a report from Ars Technica: Huawei officially announced the Huawei P30 Pro smartphone today. While it has a new Huawei-made SoC, an in-screen optical fingerprint reader, and lots of other high-end features, the highlight is definitely the camera's optical zoom, which is up to a whopping 5x. Not digital zoom. Real, optical zoom. Space, of course, is at a premium in smartphones. Imagine a smartphone sitting face down, and you would have to fit a vertical stack of the display, the CMOS sensor, and the lens all in about an 8mm height. There is just not a lot of room. But what if we didn't have to stack all the components vertically? The trick to Huawei's 5x optical zoom is that it uses a periscope design.

From the outside, it looks like a normal camera setup, albeit with a funky square camera opening. Internally, though, the components make a 90-degree right turn after the lens cover, and the zoom lens components and CMOS sensor are arranged horizontally. Now instead of having to cram a bunch of lenses and the CMOS chip into 8mm of vertical phone space, we have acres of horizontal phone space to play with. We've seen prototypes of periscope cameras from Oppo, but as far as commercial devices go, the Huawei P30 Pro is the first. While the optical zoom is the big new camera feature, there are four total cameras on the back of the P30 Pro. A 40MP main camera, a 20MP wide angle, the 8MP 5X telephoto, and a Time of Flight depth-sensing camera. The main 40MP camera uses a 1/1.7 inch-type sensor that, when measured diagonally, would make it 32 percent larger than the 1/2.55 inch-type sensors in the Galaxy S10 or iPhone XS. The P30 Pro also has a new "RYYB" pixel layout, which swaps out the two green pixels in most CMOS "RGGB" sensors for yellow pixels. "Huawei claims it can capture 40 percent more light, as the yellow filter captures green and red light," Ars Technica reports. "Of course, this will make the color wonky, but Huawei claims it can correct for that in software."

Other specifications include a Kirin 980 octa-core processor with 6GB or 8GB RAM, up to 512GB storage, IP68 water and dust resistance, NFC, wireless charging, 40W wired charging, and a 4,200mAh battery. It starts at a price of $1,125.

Engineers at the University of Michigan have built the first millimeter-scale stand-alone device that meets Bluetooth Low Energy (BLE) specifications. "Consuming just 0.6 milliwatts during transmission, it would broadcast for 11 years using a typical 5.8-mm coin battery," reports IEEE Spectrum. "Such a millimeter-scale BLE radio would allow these ant-sized sensors to communicate with ordinary equipment, even a smartphone." From the report: The transmitter chip, which debuted last month at IEEE International Solid-State Circuits Conference, had to solve two problems. The first is power consumption, and the second is the size of the antenna. An ordinary transmitter circuit requires a tunable RF oscillator to generate the frequency, a power amplifier to boost its amplitude, and an antenna to radiate the signal. The Michigan team combined the oscillator and the antenna in a way that made the amplifier unnecessary. They called their invention a power oscillator. The key part of an oscillator is the resonant tank circuit: an inductor and a capacitor. Energy sloshes back and forth between the inductor's magnetic field and the capacitor's electric field at a resonant frequency determined by the capacitance and inductance. In the new circuit, the team used the antenna itself as the inductor in the resonant tank. Because it was acting as an inductor, the antenna radiated using changing magnetic field instead of an electric field; that meant it could be more compact.

However, size wasn't the only thing. Quality factor, or Q, is a dimensionless quantity that basically says how efficient your resonator is. As a 14-mm long loop of conductor, the antenna was considerably larger than an on-chip inductor for a millimeter-scale radio could be. That led to a Q was that was about five times what an on-chip inductor would deliver. Though it was a much more efficient solution, in order to meet BLE specifications, the team needed a better way to power the power oscillator. Their solution was to build an on-chip transformer into the circuit that supplies power to it. The transformer looks like two nested coils. One coil is attached to the supply voltage end of the oscillator circuit, and the other is attached to ground side. Pumping the transformer at a frequency twice that of the power amplifier wound up efficiently boosting the flow of power to the antenna.

An anonymous reader quotes a report from The Verge: The latest chapter in the ongoing and messy Apple versus Qualcomm legal battle might mean a U.S. import ban on some iPhone models. A U.S. trade judge has found Apple guilty of infringing on two Qualcomm patents related to power management and data download speeds. As a result, the judge -- International Trade Commission Judge MaryJoan McNamara -- says some iPhone models containing competing Intel modems might be blocked from shipping from China, where they're manufactured, to the U.S. The judgment is still pending review by the ITC. Qualcomm is expecting another ruling in a second case it brought to the ITC later today that is not expected to include an import ban on iPhones. Regardless, this ruling is another blow to Apple, which, earlier this month, was found to have infringed on three separate Qualcomm patents in one of many other legal skirmishes playing out between the two companies. Next month the two companies will square off in court to discuss Qualcomm's alleged anti-competitive licensing strategies and the patent royalties it claims Apple owes for disputing the terms of their long-standing relationship.

Some of the same podcasters who first extolled AirPods are now complaining about them, reports the Atlantic: The battery can no longer hold a charge, they say, rendering them functionally useless. Apple bloggers agree: "AirPods are starting to show their age for early adopters," Zac Hall, an editor at 9to5Mac, wrote in a post in January, detailing how he frequently hears a low-battery warning in his AirPods now. Earlier this month, Apple Insider tested a pair of AirPods purchased in 2016 against a pair from 2018, and found that the older pair died after two hours and 16 minutes. "That's less than half the stated battery life for a new pair," the writer William Gallagher concluded. Desmond Hughes, who is 35 and lives in Newport News, Virginia, has noticed a similar thing about his own set: At first, their charge lasted five hours, but now they sometimes last only half an hour. He frequently listens to one while charging the other -- not optimal conditions for expensive headphones. He's now gearing up to plunk down more money on another pair....

The lithium-ion batteries that power AirPods are everywhere. One industry report forecast that sales would grow to $109.72 billion by 2026, from $36.2 billion in 2018. They charge faster, last longer, and pack more power into a small space than other types of batteries do. But they die faster, too, often after just a few years, because every time you charge them, they degrade a little. They can also catch fire or explode if they become damaged, so technology companies make them difficult, if not impossible, for consumers to replace themselves. The result: A lot of barely chargeable AirPods and wireless mice and Bluetooth speakers are ending up in the trash as consumers go through products -- even expensive ones -- faster than ever....

Of the 3.4 million tons of electronic waste generated in America in 2012 -- an 80 percent increase from 2000 -- just 29 percent was recycled.
The article notes that Wednesday Apple announced a new generation of AirPods -- but "did not say whether the devices would have longer lives."

They also report that Apple "does allow consumers to pay for what it calls a 'battery replacement' for AirPods, but each 'replaced' AirPod is $49."

Google's Play Store made a bad mistake on Tuesday, long-time Slashdot reader sombragris writes: KDE Connect, a project designed to enable seamless communcation and control between a desktop computer and a mobile phone, was suddenly removed from Android's Google Play store. According to a Twitter thread by Albert Vaca, KDE Connect's maintainer, the removal was allegedly because the app was in breach of Google's new SMS policy.

There's an exemption which applies to KDE Connect, but the maintainer was unable to contact anyone at Google to provide support. "There is simply no way to talk to a human being at @Google", he said.
Cintora also announced on Twitter that while trying to comply with the Play Store's new policy, he'd initially been stopped again by technical problems. "The @GooglePlay console gives me an internal error, so I can't upload the version without SMS support."

But on Thursday Cintora tweeted that KDE Connect "finally got approved, and SMS support is back in version 1.12.4, both on the Play Store and F-Droid!" Cintora credits this resolution partly to his Twitter thread, which got over half a million impressions.

Its last tweet now features a picture of a celebrating parrot.

"The fight against robocalls can even bring telecom rivals together," reports USA Today: AT&T and Comcast said Wednesday that they can authenticate calls made between the two different phone providers' networks, a potential industry first and the latest in the long-running battle against spam calls... The system, which uses a method developed in recent years, verifies that a legitimate call is being made instead of one that has been spoofed by spammers, scammers or robocallers with a "digital signature." The recipient network then confirms the signature on its side. The companies said consumers will get a notification that a call is verified, but exactly what that will look like is not yet known.

Both AT&T and Comcast will roll out the system to home phone users later this year at no extra charge. AT&T also said it will introduce the feature to its mobile users this year... Other major wireless and traditional home voice providers have pledged support for the verification method, including Verizon, T-Mobile, Sprint, Charter, Cox and Vonage, with several announcing plans to roll out or test the feature in 2019.
The day Comcast and AT&T made their announcement, AT&T's CEO was giving a live interview that was interrupted by a robocall.

A new study finds that states with bans on texting while driving saw an average 4% reduction in emergency department visits after motor vehicle crashes, an equivalent of 1,632 traffic-related emergency department visits per year. CNN reports: Researchers examined emergency department data across 16 US states between 2007 and 2014. The states were picked based on the availability of information regarding motor vehicle accident injuries for which emergency department treatment was needed. In the United States, 47 out of 50 states currently have laws restricting texting while driving. Of the 16 states researchers looked at in the study, all but one (Arizona) had one of these laws.

The states that had texting bans, regardless of the type or who it applied to, saw a 4% average reduction in emergency department visits, according to the results published Thursday in the American Journal of Public Health. The states that chose to implement primary bans on all drivers saw an 8% reduction in crash-related injuries. Drivers of all ages, even those older 65, who are typically not known for texting while driving, saw reductions in the number of injuries following crashes.

An anonymous reader quotes a report from ExtremeTech: MIT researchers have reportedly developed an algorithm that can accelerate [neural networks] by up to 200x. The NAS (Neural Architecture Search, in this context) algorithm they developed "can directly learn specialized convolutional neural networks (CNNs) for target hardware platforms -- when run on a massive image dataset -- in only 200 GPU hours," MIT News reports. This is a massive improvement over the 48,000 hours Google reported taking to develop a state-of-the-art NAS algorithm for image classification. The goal of the researchers is to democratize AI by allowing researchers to experiment with various aspects of CNN design without needing enormous GPU arrays to do the front-end work. If finding state of the art approaches requires 48,000 GPU arrays, precious few people, even at large institutions, will ever have the opportunity to try.

Algorithms produced by the new NAS were, on average, 1.8x faster than the CNNs tested on a mobile device with similar accuracy. The new algorithm leveraged techniques like path level binarization, which stores just one path at a time to reduce memory consumption by an order of magnitude. MIT doesn't actually link out to specific research reports, but from a bit of Google sleuthing, the referenced articles appear to be here and here -- two different research reports from an overlapping group of researchers. The teams focused on pruning entire potential paths for CNNs to use, evaluating each in turn. Lower probability paths are successively pruned away, leaving the final, best-case path. The new model incorporated other improvements as well. Architectures were checked against hardware platforms for latency when evaluated. In some cases, their model predicted superior performance for platforms that had been dismissed as inefficient. For example, 7x7 filters for image classification are typically not used, because they're quite computationally expensive -- but the research team found that these actually worked well for GPUs.

An anonymous reader quotes a report from Bloomberg: Last summer, the Trump administration started a campaign to convince its European allies to bar China's Huawei from their telecom networks. Bolstered by the success of similar efforts in Australia and New Zealand, the White House sent envoys to European capitals with warnings that Huawei's gear would open a backdoor for Chinese spies. The U.S. even threatened to cut off intelligence sharing if Europe ignored its advice. So far, not a single European country has banned Huawei. Europe, caught in the middle of the U.S.-China trade war, has sought to balance concerns about growing Chinese influence with a desire to increase business with the region's second-biggest trading partner. With no ban in the works, Huawei is in the running for contracts to build 5G phone networks, the ultra-fast wireless technology Europe's leaders hope will fuel the growth of a data-based economy.

The U.K.'s spy chief has indicated that a ban on Huawei is unlikely, citing a lack of viable alternatives to upgrade British telecom networks. Italy's government has dismissed the U.S. warnings as it seeks to boost trade with China. In Germany, authorities have proposed tighter security rules for data networks rather than outlawing Huawei. France is doing the same after initially flirting with the idea of restrictions on Huawei. Governments listened to phone companies such as Vodafone Group Plc, Deutsche Telekom AG, and Orange SA, who warned that sidelining Huawei would delay the implementation of 5G by years and add billions of euros in cost. While carriers can also buy equipment from the likes of Ericsson AB, Nokia Oyj, and Samsung Electronics Co., industry consultants say Huawei's quality is high, and the company last year filed 5,405 global patents, more than double the filings by Ericsson and Nokia combined. And some European lawmakers have been wary of Cisco Systems Inc., Huawei's American rival, since Edward Snowden leaked documents revealing the National Security Agency's use of U.S.-made telecom equipment for spying.

An anonymous reader quotes the Associated Press: Most states ban texting behind the wheel, but a legislative proposal could make Nevada one of the first states to allow police to use a contentious technology to find out if a person was using a cellphone during a car crash... If the Nevada measure passes, it would allow police to use a device known as the "textalyzer," which connects to a cellphone and looks for user activity, such as opening a Facebook messenger call screen. It is made by Israel-based company Cellebrite, which says the technology does not access or store personal content. It has not been tested in the field and is not being used by any law enforcement agencies. The company said the device could be tested in the field if the Nevada legislation passes...

Opponents air concerns that the measure violates the Fourth Amendment, which protects against unreasonable search and seizure. Jay Stanley, a senior policy analyst at the American Civil Liberties Union, also raised questions over how the software will work and if it will be open sourced so the public can ensure it doesn't access personal content...

Law enforcement officials argue that distracted driving is underreported and that weak punishments do little to stop drivers from texting, scrolling or otherwise using their phones. Adding to the problem, they say there is no consistent police practice that holds those drivers accountable for traffic crashes, unlike drunken driving.