While Gmail on the web was significantly redesigned last year, the app for Android and iOS stayed relatively unchanged, with the exception of an update last year that removed the bold colors in favor of an almost entirely white look. Engadget reports that a redesigned Gmail for mobile is starting to roll out today and it will be available to all Android and iOS users in the coming weeks. Engadget reports: Functionally, the new Gmail mobile app isn't wildly different than what came before. There's a button in the lower-right corner to compose a new email, just like before -- it's just white with a multi-colored "plus" sign, the same glyph that shows up in Gmail and Drive on the web. The iconic top red bar is now white, and the whole top area is a search bar; the old app required tapping a smaller target to get into search. Finally, there's a shortcut right to the account switcher on the main page. Previously, switching accounts required opening the sidebar, but now that option is front and center.

A few features that came to the web version of Gmail make their way to mobile today. Probably most recognizable is that attachment previews will show up below the messages, making it easier to both find messages with attachments and get a sense of the content. For those that prefer to see more messages, Google also has "comfortable" and "compact" density options that remove attachment previews and avatars, respectively. The large red phishing warnings that Gmail on the web shows also now show up in the app. Visually, it looks just like you'd expect if you've tried any of Google's recent mobile apps -- it's basically all white, with the new Google font throughout.

Due to an economic slowdown in China and diminishing demand for new iPhones, Apple's profits in its most recent quarter were flat compared with a year earlier. "The disappointing financial performance had been expected since Jan. 2, when Apple, for the first time in 16 years, revised its forecast for the quarter," reports The New York Times. "But the announcement on Tuesday indicates a difficult road head for Apple, which just five months ago became the first company to be worth more than $1 trillion. The company said it expected between $55 billion and $59 billion in revenue in the current quarter, just below analysts' expectations for $59 billion. Apple's earnings per share were $4.18, beating analysts' expectations by a penny."

In addition to the quarterly earnings, Apple reported revenue of $84.3 billion, a decline of 5 percent from one year ago. "Revenue from iPhone declined 15 percent from the prior year, while total revenue from all other products and services grew 19 percent," Apple said in a press release. Analysts had estimated revenue of $83.97 billion and earnings of $4.17 per share. "While it was disappointing to miss our revenue guidance, we manage Apple for the long term, and this quarter's results demonstrate that the underlying strength of our business runs deep and wide," said Tim Cook. Apple's active install base of 1.4 billion is "a great testament to the satisfaction and loyalty of our customers, and it's driving our services business to new records thanks to our large and fast-growing ecosystem," Cook said. The Verge adds: "iPhones account for 900 million of those devices. iPad revenues were up 17 percent against the year-ago quarter; Mac was up 9 percent; and Wearables/Home/Accessories were up by 33 percent."

An anonymous reader quotes a report from The Intercept: Most of the data collected by urban planners is messy, complex, and difficult to represent. It looks nothing like the smooth graphs and clean charts of city life in urban simulator games like "SimCity." A new initiative from Sidewalk Labs, the city-building subsidiary of Google's parent company Alphabet, has set out to change that. The program, known as Replica, offers planning agencies the ability to model an entire city's patterns of movement. Like "SimCity," Replica's "user-friendly" tool deploys statistical simulations to give a comprehensive view of how, when, and where people travel in urban areas. It's an appealing prospect for planners making critical decisions about transportation and land use. In recent months, transportation authorities in Kansas City, Portland, and the Chicago area have signed up to glean its insights. The only catch: They're not completely sure where the data is coming from.

Typical urban planners rely on processes like surveys and trip counters that are often time-consuming, labor-intensive, and outdated. Replica, instead, uses real-time mobile location data. As Nick Bowden of Sidewalk Labs has explained, "Replica provides a full set of baseline travel measures that are very difficult to gather and maintain today, including the total number of people on a highway or local street network, what mode they're using (car, transit, bike, or foot), and their trip purpose (commuting to work, going shopping, heading to school)." To make these measurements, the program gathers and de-identifies the location of cellphone users, which it obtains from unspecified third-party vendors. It then models this anonymized data in simulations -- creating a synthetic population that faithfully replicates a city's real-world patterns but that "obscures the real-world travel habits of individual people," as Bowden told The Intercept. The program comes at a time of growing unease with how tech companies use and share our personal data -- and raises new questions about Google's encroachment on the physical world.

An update of the Bluetooth specification released today enables location services accurate to within 10 centimeters thanks to a new direction-finding capability. From a report: It arrives as a separate draft standard is nearly ready for an even faster and more accurate capability using ultra-wideband (UWB) radio, geared for use in smartphones. Bluetooth 5.1 describes ways to determine location using multiple antennas at either the transmitter or receiver. It uses measures of signal phase and amplitude to measure location, though profiles for application developers are still being finished.

In mid-March, the IEEE 802.15.4z standard for UWB should be in a stable draft form, opening the door for silicon designs. It enables location measures within a single centimeter and resolves in a nanosecond, a rate faster than Bluetooth. Smartphone giants Apple and Samsung have been active in the .4z meetings also attended by Huawei, leading some to suggest that the capability could be integrated in handsets within two years. NXP has also been active since the group started a year ago, giving rise to speculation that UWB could come into phones though an integrated NFC chip.

An anonymous reader shares a report: Despite a trade war between the United States and China and past admonishments from President Trump "to start building their damn computers and things in this country," Apple is unlikely to bring its manufacturing closer to home. A tiny screw illustrates why. [Editor's note: the link may be paywalled; alternative source.]

In 2012, Apple's chief executive, Timothy D. Cook, went on prime-time television to announce that Apple would make a Mac computer in the United States. It would be the first Apple product in years to be manufactured by American workers, and the top-of-the-line Mac Pro would come with an unusual inscription: "Assembled in USA." But when Apple began making the $3,000 computer in Austin, Tex., it struggled to find enough screws, according to three people who worked on the project and spoke on the condition of anonymity because of confidentiality agreements.

In China, Apple relied on factories that can produce vast quantities of custom screws on short notice. In Texas, where they say everything is bigger, it turned out the screw suppliers were not. Tests of new versions of the computer were hamstrung because a 20-employee machine shop that Apple's manufacturing contractor was relying on could produce at most 1,000 screws a day. The screw shortage was one of several problems that postponed sales of the computer for months, the people who worked on the project said. By the time the computer was ready for mass production, Apple had ordered screws from China.

New industry guidelines in South Korea will allow smartphone users the option of deleting unnecessary pre-installed bloatware. "The move aims to rectify an abnormal practice that causes inconvenience to smartphone users and causes unfair competition among industry players," said the Ministry of Science, ICT and Future Planning, in a press release. ZDNet reports: The measure will also help give users more data storage and improve battery life, said the ministry. Under the new guidelines, telcos are required to make most of their pre-installed apps deletable except for four necessary items related to Wi-Fi connectivity, near-field communication (NFC), the customer service center and the app store.

With Apple offering a clearance sale on the iPhone SE earlier this week, The Verge's Nick Statt decided that it was "the appropriate moment to hop on the backup phone bandwagon" and pick one up. He writes: I've always appreciated the classic 5S design, with its overtly rounded corners and its sturdy, not-so-delicate dimensions. It never felt like it really required a case, and its smaller screen and more comfortable, one-handed use is something I've thought far too much about as I've ferried around an iPhone X and now an XS over the past year and a half. Plus, it's got a headphone jack. Would you agree that the iPhone SE is "the best minimalist phone right now," or do you think that title belongs to a different device? Why or why not?

The Chinese government has developed a mobile app that tells users if they are near someone who is in debt. The app, called a "map of deadbeat debtors," flashes when the user is within 500 meters of a debtor and displays that person's exact location. TechSpot reports: News of the app has caused quite a bit of controversy after it was originally reported by the state-run China Daily. It is an extension to China's existing "social credit" system which scores people based on how they act in public. The app is available through the WeChat platform which has become immensely popular in China. The government stated that "Deadbeat debtors in North China's Hebei province will find it more difficult to abscond as the Higher People's Court of Hebei on Monday introduced" the app. Once a user is alerted that they are close to a debtor, the user can then view their personal information. This will reveal their name, national ID number, and why they were added to the debtor list. The debtor can then be publicly shamed or reported to the authorities if it is deemed that they are capable of repaying their debts.

Apple has hired an executive from the battery-making division of Samsung to help lead its own battery work. The new hire suggests that the company might start making its own batteries for iPhones and Macs. Bloomberg reports: Soonho Ahn joined Apple in December as global head of battery developments, after working as a senior vice president at Samsung SDI since 2015, according to his LinkedIn profile. At Samsung SDI, Ahn led development of lithium battery packs and worked on "next-generation" battery technology, the profile says. Apple has used batteries from Samsung SDI to power its own products in the past. The iPhone maker has been trying to reduce reliance on third-party components, and the notable battery technology hire suggests it may be doing the same for batteries. Apple has been working on its own MicroLED display technology for future devices, which would help wean itself off Samsung in other areas. It's also increasingly building its own processors and is investigating the development of its own cellular modems.

Applehu Akbar shares an old report raising a very good question for today's Congress: why not use today's videoconferencing tech to allow representatives to perform most Congressional activity from their home districts?" The ability to "work from home" would be especially beneficial during a government shutdown, like the one we're currently in, where money is tight and Congressional members are "sick and tired of Washington and don't want to show up anymore to vote." Slashdot reader Applehu Akbar writes: Because Congress people serve short terms and campaign largely on constituent service, they have to spend a large percentage of their time shuttling between home and Washington. Virtualizing most of their Washington presence would save fuel and energy while giving them more time with their constituents. In addition, there could be a long-term societal benefit in making Congress less vulnerable to lobbyist influence by keeping them out of the Beltway. Pearce told The Hill in a statement back in 2013: "Thanks to modern technology, members of Congress can debate, vote, and carry out their constitutional duties without having to leave the accountability and personal contact of their congressional districts. Keeping legislators closer to the people we represent would pull back Washington's curtain and allow constituents to see and feel, first-hand, their government at work. Corporations and government agencies use remote work technology; it's time that Congress does the same."

Trailrunner7 shares a report from Duo Security: From the beginning, Twitter's creators made the decision not to require real names on the service. It's a policy that's descended from older chat services, message boards and Usenet newsgroups and was designed to allow users to express themselves freely. Free expression is certainly one of the things that happens on Twitter, but that policy has had a number of unintended consequences, too. The service is flooded with bots, automated accounts that are deployed by a number of different types of users, some legitimate, others not so much. Many companies and organizations use automation in their Twitter accounts, especially for customer service. But a wide variety of malicious actors use bots, too, for a lot of different purposes. Governments have used bots to spread disinformation for influence campaigns, cybercrime groups employ bots as part of the command-and-control infrastructure for botnets, and bots are an integral part of the cryptocurrency scam ecosystem. This has been a problem for years on Twitter, but only became a national and international issue after the 2016 presidential election.

Twitter CEO Jack Dorsey said this week that he sees potential in biometric authentication as a way to help combat manipulation and increase trust on the platform. "If we can utilize technologies like Face ID or Touch ID or some of the biometric things that we find on our devices today to verify that this is a real person, then we can start labeling that and give people more context for what they're interacting with and ideally that adds some more credibility to the equation. It is something we need to fix. We haven't had strong technology solutions in the past, but that's definitely changing with these supercomputers we have in our pockets now," Dorsey said. Jordan Wright, an R&D engineer at Duo Labs writes: "I think it's a step in the right direction in terms of making general authentication usable, depending on how it's implemented. But I'm not sure how much it will help the bot/automation issue. There will almost certainly need to be a fallback authentication method for users without an iOS device. Bot owners who want to do standard authentication will use whichever method is easiest for them, so if a password-based flow is still offered, they'd likely default to that."

"The fallback is the tricky bit. If one exists, then Touch ID/Face ID might be helpful in identifying that there is a human behind an account, but not necessarily the reverse -- that a given account is not human because it doesn't use Touch ID," Wright adds.

Phone maker Meizu has announced a new phone called "Zero," which doesn't have a headphone jack, or a charging port, or a physical SIM card slot, or any buttons, or a speaker grill. From a report: It doesn't even come with a SIM card slot and buttons you'd usually see on a phone -- the only elements that disturb the surface of its all-display, 7.8mm-thick ceramic unibody are its 12MP and 20MP rear cameras and two pinholes. One is a microphone, while the other is for hard resets. To make up for the lack of ports, Meizu Zero will support Bluetooth 5.0 and a wireless USB connectivity that will reportedly be able to transfer files as fast as the USB 3.0 standard can.

Zero's 5.99-inch QHD OLED screen will act as some sort of a giant speaker and earpiece replacement. It does have a big enough bezel for a 20MP front camera, but its fingerprint reader is completely on-screen. The device, which is powered by a Snapdragon 845 processor, relies on 18W wireless charging due to the lack of a charger port. And it may not have the usual physical buttons, but it does have pressure-sensing ones with haptic feedback on its borders.

Everyone has a smartphone these days, therefore everyone should have access to at least one mobile payment service -- Apple Pay, Google Pay, or Samsung Pay. Personally, I've only used Apple Pay a handful of times because the vast majority of stores I visit don't support it. For me, the biggest problem with mobile payment services like Apple Pay and Google Pay isn't the potential security concerns or inconveniences (having to pull my phone out of my pocket or requiring the merchant to pull out an NFC reader while in a drive-thru) -- it's the lack of compatibility. I want to be able to leave my wallet at home and do all of my shopping with my phone, which is not possible due to the lack of support at most retailers. With that said, the support is improving. Today, Apple announced that Apple Pay is now available at 74 of the top 100 U.S. retailers. Quartz reports: Today (Jan. 22), Apple announced that it has also signed up Taco Bell and Target -- two years ago, Target said it had no plans to adopt Apple Pay -- meaning that 74 of the top 100 U.S. retailers by revenue now accept Apple's digital payment. The company added pharmacy chain CVS, along with 7-Eleven, late last year. They joined other major US retailers that include Best Buy, Starbucks, McDonald's, Walgreens, Costco, and Kohl's. (Some of the biggest holdouts: Walmart and Home Depot.) Do you use mobile payment services? Which service(s) do you use and why?

An anonymous reader quotes a report from 9to5Google: Over the weekend, four commits were posted to various parts of Android's Gerrit source code management, all entitled "Carrier restriction enhancements for Android Q." In them, we see that network carriers will have more fine-grained control over which networks devices will and will not work on. More specifically, it will be possible to designate a list of "allowed" and "excluded" carriers, essentially a whitelist and a blacklist of what will and won't work on a particular phone. This can be done with a fine-grained detail to even allow blocking virtual carrier networks that run on the same towers as your main carrier.

Restriction changes are also on the way for dual-SIM devices. At the moment, carriers can set individual restrictions for each SIM slot, but with Android Q, carriers will be able to lock out the second slot unless there's an approved SIM card in the first slot. This SIM lock restriction is applied immediately and will persist through restarting the phone, and even doing a factory reset. Thankfully, in both cases, emergency phone calls will still work as expected, regardless of any restrictions on the particular SIM cards in your phone.

TechCrunch's Devin Coldeway picks apart a new study by Oxford scientists that questions the basis of thousands of papers and analyses with conflicting conclusions on the effect of screen time on well-being. "The researchers claim is that the science doesn't agree because it's bad science," Coldeway writes. "So is screen time good or bad? It's not that simple." From the report: Their concern was that the large data sets and statistical methods employed by researchers looking into the question -- for example, thousands and thousands of survey responses interacting with weeks of tracking data for each respondent -- allowed for anomalies or false positives to be claimed as significant conclusions. It's not that people are doing this on purpose necessarily, only that it's a natural result of the approach many are taking. "Unfortunately," write the researchers in the paper, "the large number of participants in these designs means that small effects are easily publishable and, if positive, garner outsized press and policy attention."

In order to show this, the researchers essentially redid the statistical analysis for several of these large data sets (Orben explains the process here), but instead of only choosing one result to present, they collected all the plausible ones they could find. For example, imagine a study where the app use of a group of kids was tracked, and they were surveyed regularly on a variety of measures. The resulting (fictitious, I hasten to add) paper might say it found kids who use Instagram for more than two hours a day are three times as likely to suffer depressive episodes or suicidal ideations. What the paper doesn't say, and which this new analysis could show, is that the bottom quartile is far more likely to suffer from ADHD, or the top five percent reported feeling they had a strong support network. [...] Ultimately what the Oxford study found was that there is no consistent good or bad effect, and although a very slight negative effect was noted, it was small enough that factors like having a single parent or needing to wear glasses were far more important. "[T]he study does not conclude that technology has no negative or positive effect; such a broad conclusion would be untenable on its face," Coldeway writes. "The data it rounds up are simply inadequate to the task and technology use is too variable to reduce to a single factor. Its conclusion is that studies so far have in fact bee inconclusive and we need to go back to the drawing board."

Embedi security researcher Denis Selianin has discovered a vulnerability affecting the firmware of a popular Wi-Fi chipset deployed in a wide range of devices, such as laptops, smartphones, gaming rigs, routers, and Internet of Things (IoT) devices. According to Selianin, the vulnerability impacts ThreadX, a real-time operating system that is used as firmware for billions of devices. ZDNet reports: In a report published today, Selianin described how someone could exploit the ThreadX firmware installed on a Marvell Avastar 88W8897 wireless chipset to execute malicious code without any user interaction. The researcher chose this WiFi SoC (system-on-a-chip) because this is one of the most popular WiFi chipsets on the market, being deployed with devices such as Sony PlayStation 4, Xbox One, Microsoft Surface laptops, Samsung Chromebooks, Samsung Galaxy J1 smartphones, and Valve SteamLink cast devices, just to name a few.

"I've managed to identify ~4 total memory corruption issues in some parts of the firmware," said Selianin. "One of the discovered vulnerabilities was a special case of ThreadX block pool overflow. This vulnerability can be triggered without user interaction during the scanning for available networks." The researcher says the firmware function to scan for new WiFi networks launches automatically every five minutes, making exploitation trivial. All an attacker has to do is send malformed WiFi packets to any device with a Marvell Avastar WiFi chipset and wait until the function launches, to execute malicious code and take over the device. Selianin says he also "identified two methods of exploiting this technique, one that is specific to Marvell's own implementation of the ThreadX firmware, and one that is generic and can be applied to any ThreadX-based firmware, which, according to the ThreatX homepage, could impact as much as 6.2 billion devices," the report says. Patches are reportedly being worked on.

Windows 10 Mobile devices will be officially unsupported starting on December 10, 2019. As a result, Microsoft is recommending users move to an Android or iOS device instead. Mac Rumors reports: Microsoft made the recommendation in a Windows 10 Mobile support document (via Thurrott) explaining its plans to stop offering security updates and patches for Windows 10 Mobile: "With the Windows 10 Mobile OS end of support, we recommend that customers move to a supported Android or iOS device. Microsoft's mission statement to empower every person and every organization on the planet to achieve more, compels us to support our Mobile apps on those platforms and devices." All customers who have a Windows 10 Mobile device will be able to keep using it after December 10, 2019, but no further updates will be available.

An anonymous reader quotes a report from Ars Technica: Malicious apps hosted in the Google Play market are trying a clever trick to avoid detection -- they monitor the motion-sensor input of an infected device before installing a powerful banking trojan to make sure it doesn't load on emulators researchers use to detect attacks. The thinking behind the monitoring is that sensors in real end-user devices will record motion as people use them. By contrast, emulators used by security researchers -- and possibly Google employees screening apps submitted to Play -- are less likely to use sensors. Two Google Play apps recently caught dropping the Anubis banking malware on infected devices would activate the payload only when motion was detected first. Otherwise, the trojan would remain dormant.

Security firm Trend Micro found the motion-activated dropper in two apps -- BatterySaverMobi, which had about 5,000 downloads, and Currency Converter, which had an unknown number of downloads. Google removed them once it learned they were malicious. The motion detection wasn't the only clever feature of the malicious apps. Once one of the apps installed Anubis on a device, the dropper used requests and responses over Twitter and Telegram to locate the required command and control server. Once Anubis was installed, it used a built-in keylogger that can steal users' account credentials. The malware can also obtain credentials by taking screenshots of the infected users' screen.

A new report from The Wall Street Journal says the Motorola RAZR might be making a comeback as a $1,500 foldable screen smartphone, and it could launch as early as February. The Verge reports: The original RAZR was one of the most iconic cellphones ever made, and it seems that Motorola's parent company Lenovo is looking to cash in on that branding with an updated foldable phone (similar to the one that Samsung has teased for later this year). Per the WSJ, the new RAZR will be exclusive to Verizon in the U.S. with a planned February launch, although the device is still in testing and details have yet to be finalized.

Also unknown is nearly any concrete information about the phone. There's no word yet on things like screen size, specifications, or even form factor. Will the revived RAZR just borrow the name but use a more traditional landscape folding display? Will Lenovo follow the original RAZR design and have some sort of super long vertically folding screen? According to the WSJ report, Lenovo is hoping to manufacture over 200,000 of the new RAZRs, which may seem optimistic for a $1,500 luxury smartphone. But considering that the (admittedly much cheaper) RAZR V3 model sold 130 million units over its lifespan, if lightning does manage to strike twice, that goal might not be so hard to hit.

China may be slowing iPhone sales worldwide, but Chinese people are driving Apple's App Store business. From a report: China accounted for nearly 50 percent of all app downloads in 2018, pushing the global downloads count to reach a record 194 billion, according to research firm App Annie. China, which is the world's largest smartphone market, also accounted for nearly 40 percent of worldwide consumer spend in apps in 2018, App Annie said in its yearly "State of Mobile" report. (Note: Google Play Store is not available in China.) Global consumer spend in apps reached $101 billion last year, up 75 percent since 2016. And 74 percent of all money spent on apps last year came from games. The battle between Silicon Valley companies and Chinese tech giants generated more than half of total consumer spend in the top 300 parent companies in 2018, the report said. The top company for global consumer spend was China's Tencent, which owns stake in several startups, companies, and games -- including last year's sleeper hits PUBG and Fortnite.