Privacy

Russian Tech Giant Yandex's Data Harvesting Raises Security Concerns (ft.com) 26

Russia's biggest internet company has embedded code into apps found on mobile devices that allows information about millions of users to be sent to servers located in its home country. From a report: The revelation relates to software created by Yandex that permits developers to create apps for devices running Apple's iOS and Google's Android, systems that run the vast majority of the world's smartphones. Yandex collects user data harvested from mobiles, before sending the information to servers in Russia. Researchers have raised concerns the same "metadata" may then be accessed by the Kremlin and used to track people through their mobiles. Researcher Zach Edwards first made the discovery regarding Yandex's code as part of an app auditing campaign for Me2B Alliance, a non-profit. Four independent experts ran tests for the Financial Times to verify his work.

Yandex has acknowledged its software collects "device, network and IP address" information that is stored "both in Finland and in Russia," but it called this data "non-personalised and very limited." It added: "Although theoretically possible, in practice it is extremely hard to identify users based solely on such information collected. Yandex definitely cannot do this." The revelations come at a critical time for Yandex, often referred to as "Russia's Google," which has long attempted to chart an independent path without falling foul of Russian president Vladimir Putin's desire for greater control of the internet. The company said it followed "a very strict" internal process when dealing with governments: "Any requests that fail to comply with all relevant procedural and legal requirements are turned down."

Android

Google Working On New Nest Hub With Detachable Tablet Form Factor For 2022 (9to5google.com) 17

To date, Google has released three Assistant Smart Displays. 9to5Google can now report that the company is working on a new Nest Hub for 2022 with a dockable tablet form factor where the screen detaches from a base/speaker. From the report: According to a source that has proven familiar with Google's plans, the next Nest Smart Display will have a removable screen that can be used as a tablet. It attaches to the base/speaker for a more conventional-looking smart home device. This new form factor comes as Google has spent the last few months adding more interface elements to the 2nd-gen Nest Hub and Nest Hub Max. Swiping up from the bottom of the screen reveals a row of "apps" above the settings bar. You can open a fullscreen grid of icons from there. Applications and games on the Nest Hub are essentially web views, so this is technically a launcher for shortcuts.

Speaking of the web, Google also spent the end of last year adding a more feature-rich browser that even features a Gboard-esque keyboard. You can also send sites directly to your phone and enable text-to-speech. Both of these additions can be seen as laying the groundwork for a tablet-like experience, with web browsing obviously being a popular task on big screens. Many questions about the implementation remain unknown, including what OS/experience the undocked tablet will run. Chrome OS is likely too power-hungry (and as such costly) considering the affordability of Nest devices, while Android would open the door to existing apps and the Play Store.

Google

Google Will Remove the Movies and TV Tab From the Google Play Store (thestreamable.com) 8

An anonymous reader shares a report: Last year, the Google TV app user interface was completely redesigned and transformed into a hub for browsing movies and shows from your favorite streaming apps all in one place. It now appears that more changes are coming to the platform as Google has announced that in May 2022, movies or TV shows will no longer be available in the Google Play store. Instead, the Google TV app will be the official home for buying, renting, and watching movies and shows on your Android device. Other apps, games, and books will continue to live on the store. On Google TV, the experience of using Google Play Movies & TV will still be the same and users will get access to the latest new releases, rentals, and deals. When taking a look at the new Google TV app, customers will see a Shop tab where they can find all the titles that the tech giant offers.
Google

Google Play To Pilot Third-Party Billing Option Globally, Starting With Spotify (techcrunch.com) 4

Amid increasing global regulations over app stores and their commission structures, Google today announced the launch of a pilot program designed to explore what it calls "user billing choice." From a report: The program will allow a small number of participating developers, starting with Spotify, to offer an additional third-party billing option next to Google Play's own billing system in their apps. While Google already offers a similar system in South Korea following the arrival of new legislation requiring it, this will be the first time it will test the system in global markets.

As the debut pilot partner, Spotify will introduce both their own billing system alongside Google Play's own when the pilot goes live. Google did not say which other developers it has lined up for future tests, but noted Spotify was a "natural first partner" on the effort given its reach as one of the "world's largest subscription developers with a global footprint" and its "integrations across a wide range of device form factors." Spotify, of course, has also been one of the larger developers to push for regulatory changes to app stores' existing billing systems, having testified before Congress on the matter, joined lobbying groups, and backed app store legislation, including the Open Markets Act, that would require companies like Apple and Google to permit alternatives to existing app stores.

Security

How to Eliminate the World's Need for Passwords (arstechnica.com) 166

The board members of the FIDO alliance include Amazon, Google, PayPal, RSA, and Apple and Microsoft (as well as Intel and Arm). It describes its mission as reducing the world's "over-reliance on passwords."

Today Wired reports that the group thinks "it has finally identified the missing piece of the puzzle" for finally achieving large-scale adoption of a password-supplanting technology: On Thursday, the organization published a white paper that lays out FIDO's vision for solving the usability issues that have dogged passwordless features and, seemingly, kept them from achieving broad adoption....

The paper is conceptual, not technical, but after years of investment to integrate what are known as the FIDO2 and WebAuthn passwordless standards into Windows, Android, iOS, and more, everything is now riding on the success of this next step.... FIDO is looking to get to the heart of what still makes passwordless schemes tough to navigate. And the group has concluded that it all comes down to the procedure for switching or adding devices. If the process for setting up a new phone, say, is too complicated, and there's no simple way to log in to all of your apps and accounts — or if you have to fall back to passwords to reestablish your ownership of those accounts — then most users will conclude that it's too much of a hassle to change the status quo.

The passwordless FIDO standard already relies on a device's biometric scanners (or a master PIN you select) to authenticate you locally without any of your data traveling over the Internet to a web server for validation. The main concept that FIDO believes will ultimately solve the new device issue is for operating systems to implement a "FIDO credential" manager, which is somewhat similar to a built-in password manager. Instead of literally storing passwords, this mechanism will store cryptographic keys that can sync between devices and are guarded by your device's biometric or passcode lock. At Apple's Worldwide Developer Conference last summer, the company announced its own version of what FIDO is describing, an iCloud feature known as "Passkeys in iCloud Keychain," which Apple says is its "contribution to a post-password world...."

FIDO's white paper also includes another component, a proposed addition to its specification that would allow one of your existing devices, like your laptop, to act as a hardware token itself, similar to stand-alone Bluetooth authentication dongles, and provide physical authentication over Bluetooth. The idea is that this would still be virtually phish-proof since Bluetooth is a proximity-based protocol and can be a useful tool as needed in developing different versions of truly passwordless schemes that don't have to retain a backup password. Christiaan Brand, a product manager at Google who focuses on identity and security and collaborates on FIDO projects, says that the passkey-style plan follows logically from the smartphone or multi-device image of a passwordless future. "This grand vision of 'Let's move beyond the password,' we've always had this end state in mind to be honest, it just took until everyone had mobile phones in their pockets," Brand says....

To FIDO, the biggest priority is a paradigm shift in account security that will make phishing a thing of the past.... When asked if this is really it, if the death knell for passwords is truly, finally tolling, Google's Brand turns serious, but he doesn't hesitate to answer: "I feel like everything is coalescing," he says. "This should be durable."

Such a change won't happen overnight, the article points out. "With any other tech migration (ahem, Windows XP), the road will inevitably prove arduous."
Chrome

Google Casually Announces Steam For Chrome OS Is Coming In Alpha For Select Chromebooks (engadget.com) 19

At the 2022 Google for Games Developer Summit where its Stadia B2B cloud gaming platform was unveiled, Google announced the long-awaited availability of Steam on Chromebooks. 9to5Google reports: Google specifically said that the "Steam Alpha just launched, making this longtime PC game store available on select Chromebooks for users to try." That said, no other details appear to be live this morning, but we did reveal the device list last month. As we noted at the time: "At a minimum, your Chromebook needs to have an (11th gen) Intel Core i5 or i7 processor and a minimum of 7 GB of RAM. This eliminates almost all Chromebooks but those in the upper-mid range and high end."

Google today said "you can check that out on the Chromebook community forum." The post in question is now live, but without any actual availability timeline beyond "coming soon." However, we did learn that the "early, alpha-quality version of Steam" will first come to the Chrome OS Dev channel for a "small set" of devices.

Meanwhile, Google also said Chrome OS is getting a new "games overlay" on "select" Android titles to make them "playable with user-driven keyboard and mouse configurations on Chromebooks without developer changes." It will launch later this year in a public beta.
Further reading: The part of the keynote where this announcement was made can be viewed here.

Google's Domain Name Registrar is Out of Beta After Seven Years
Cellphones

Samsung Says It Will Release An Update To Address App Throttling Issues (techcrunch.com) 20

In a statement to TechCrunch, a Samsung spokesperson said the company will release a software update to allow users to have more control over throttling. "Samsung has not provided details about when the update will roll out to users," notes the report. From the report: "Our priority is to deliver the best mobile experience for consumers. We value the feedback we receive about our products and after careful consideration, we plan to roll out a software update soon so users can control the performance while running game apps," a spokesperson from Samsung said in an email.

Samsung's promise follows reports that the tech giant's phones are throttling the performance of around 10,000 apps, as first reported by Android Authority, and via Twitter complaints, plus Samsung's Korean community forums. The company's Game Optimizing Service (GOS) software, which optimizes the performance of CPU and GPU to prevent excessive heating when playing a game for a long time, appeared to be at the core of the issue, but the list of affected apps wasn't limited to games. However, Samsung has disputed claims that Game Optimizing Service was throttling non-gaming apps. "The Game Optimizing Service (GOS) has been designed to help game apps achieve a great performance while managing device temperature effectively. GOS does not manage the performance of non-gaming apps," the spokesperson said.

Cloud

Amazon's Luna Cloud Gaming Service Officially Launches In the US (engadget.com) 6

A year and a half later, Amazon's Luna cloud gaming service has formally launched in the U.S. for Android, iOS, Chrome OS, macOS and Windows. Engadget reports: The core Luna+ service with over 100 games will normally cost $10 per month, with the kid-friendly Family Channel and Ubisoft+ Channels available for a respective $6 and $18 per month. Amazon hopes to reel in newcomers by dropping the monthly fees of Luna+ and the Family channel to $6 and $3 for anyone who signs up during March. Existing users just have to maintain their subscriptions to lock in that pricing.

The official debut comes alongside some new channels. A Prime Gaming channel, as the name implies, gives Amazon Prime members a free, rotating mix of games. The March selection will include titles like Devil May Cry 5 and Flashback. Pay $5 per month for the Retro Channel and you'll get Capcom and SNK classics like Street Fighter II Hyper Fighting and Metal Slug 3, while a similar outlay for the Jackbox Games Channel provides access to all eight Jackbox Party Pack titles. Luna's latest update also makes it simpler to stream gameplay from a Fire TV device, Mac or Windows PC on Twitch.

Cellphones

Samsung Shattered Encryption On 100 Million Phones (threatpost.com) 20

Samsung shipped an estimated 100 million smartphones with botched encryption, including models ranging from the 2017 Galaxy S8 on up to last year's Galaxy S21. Threatpost reports: Researchers at Tel Aviv University found what they called "severe" cryptographic design flaws that could have let attackers siphon the devices' hardware-based cryptographic keys: keys that unlock the treasure trove of security-critical data that's found in smartphones. What's more, cyber attackers could even exploit Samsung's cryptographic missteps -- since addressed in multiple CVEs -- to downgrade a device's security protocols. That would set up a phone to be vulnerable to future attacks: a practice known as IV (initialization vector) reuse attacks. IV reuse attacks screw with the encryption randomization that ensures that even if multiple messages with identical plaintext are encrypted, the generated corresponding ciphertexts will each be distinct.

The design flaws primarily affect devices that use ARM's TrustZone technology: the hardware support provided by ARM-based Android smartphones (which are the majority) for a Trusted Execution Environment (TEE) to implement security-sensitive functions. TrustZone splits a phone into two portions, known as the Normal world (for running regular tasks, such as the Android OS) and the Secure world, which handles the security subsystem and where all sensitive resources reside. The Secure world is only accessible to trusted applications used for security-sensitive functions, including encryption.

Matthew Green, associate professor of computer science at the Johns Hopkins Information Security Institute, explained on Twitter that Samsung incorporated "serious flaws" in the way its phones encrypt key material in TrustZone, calling it "embarrassingly bad." "They used a single key and allowed IV re-use," Green said. "So they could have derived a different key-wrapping key for each key they protect," he continued. "But instead Samsung basically doesn't. Then they allow the app-layer code to pick encryption IVs." The design decision allows for "trivial decryption," he said.

Samsung responded to the academics' disclosure by issuing a patch for affected devices that addressed CVE-2021-25444: an IV reuse vulnerability in the Keymaster Trusted Application (TA) that runs in the TrustZone. Keymaster TA carries out cryptographic operations in the Secure world via hardware, including a cryptographic engine. The Keymaster TA uses blobs, which are keys "wrapped" (encrypted) via AES-GCM. The vulnerability allowed for decryption of custom key blobs. Then, in July 2021, the researchers revealed a downgrade attack -- one that lets attacker trigger IV reuse vulnerability with privileged process. Samsung issued another patch -- to address CVE-2021-25490 -- that remoged the legacy blob implementation from devices including Samsung's Galaxy S10, S20 and S21 phones.

Blackberry

OnwardMobility is Dead, and So Are Its Plans To Release a 5G BlackBerry Phone (engadget.com) 13

There's won't be a big revival for BlackBerry phones anytime soon. OnwardMobility, the Austin-based startup that announced its plans to release a 5G BlackBerry device with a physical keyboard back in 2020, is shutting down. From a report: The company posted a notice of its closure on its website, making it clear that it won't be proceeding with the development of the smartphone. This comes a month after it responded to people asking about the status of the project with a blog post entitled "contrary to popular belief, we are not dead." While OnwardMobility didn't expound on the reason behind its closure, Android Police reported a few days ago that its license to use the BlackBerry name had been canceled. Apparently, BlackBerry wants to distance itself from its past as a smartphone manufacturer after it sold off its remaining mobile patents for $600 million in the beginning of February. OnwardMobility reportedly decided not to push through with the development of a new smartphone without the BlackBerry name, especially since it won't be easy entering the market with an ongoing global component shortage.
Advertising

Google to Overhaul Ad-Tracking on Android Phones Used by Billions (msn.com) 22

The Washington Post reports: Google announced it will begin the process of getting rid of long-standing ad trackers on its Android operating system, upending how advertising and data-collection work on phones and tablets used by more than 2.5 billion people around the world.

Right now, Google assigns special IDs to each Android device, allowing advertisers to build profiles of what people do on their phones and serve them highly targeted ads. Google will begin testing alternatives to those IDs this year and eventually remove them completely, the company said in a Wednesday blog post. Google said the changes will improve privacy for Android users, limiting the massive amounts of data that app developers collect from people using the platform.

But the move also could give Google even more power over digital advertising, and is likely to deepen concerns regulators have already expressed about the company's competitive practices... It made $61 billion in advertising revenue in the fourth quarter of 2021 alone....

The announcement comes over a year after Apple began blocking trackers on its own operating system, which runs on its iPhones, giving customers more tools to limit the data they share with app developers.... Google contrasted its plan with Apple's, saying it would make the changes over the next two years, working closely with app developers and the advertising industry to craft new ways of targeting ads and measuring their effectiveness before making any drastic changes.

"We realize that other platforms have taken a different approach to ads privacy, bluntly restricting existing technologies used by developers and advertisers," said Anthony Chavez, vice president of product management for Android security and privacy, in the blog post. "We believe that without first providing a privacy-preserving alternative path such approaches can be ineffective and lead to worse outcomes for user privacy and developer businesses."

The Post also includes this quote from the chief security office of Mozilla (which began restricting ad tracking in Firefox several years ago). "Google's two year plan is too long. People deserve better privacy now."
Blackberry

BlackBerry's 5G Phone Is Officially Dead (cnet.com) 19

An anonymous reader quotes a report from CNET: The delayed 5G BlackBerry phone is dead, OnwardMobility has confirmed on its website. "It is with great sadness that we announce that OnwardMobility will be shutting down, and we will no longer be proceeding with the development of an ultra-secure smartphone with a physical keyboard," OnwardMobility said in a message posted Friday, as spotted earlier by CrackBerry. "Please know that this was not a decision that we made lightly or in haste. We share your disappointment in this news and assure you this is not the outcome we worked and hoped for." Android Police and CrackBerry originally reported the phone had been cancelled on Feb. 11, saying OnwardMobility, a Texas-based startup seeking to revitalize the iconic brand through an Android-based, next-gen Wi-Fi device, lost the license from BlackBerry Ltd. to use the BlackBerry brand name. OnwardMobility did not expand on why it is shutting down and cancelling production of the phone. The news comes after BlackBerry ended service for its legacy devices in early January. "Before OnwardMobility picked up the license, Chinese manufacturer TCL was the most recent maker of BlackBerry-branded phones," adds CNET.

Most recently, the company sold its prized patent portfolio to "Catapult IP Innovations Inc." for $600 million.
Operating Systems

Windows 11 Pro Now Requires Microsoft Account and Internet During Setup (arstechnica.com) 207

An anonymous reader quotes a report from Ars Technica: Now that Windows 11's first major post-release update has been issued, Microsoft has started testing a huge collection of new features, UI changes, and redesigned apps in the latest Windows Insider preview for Dev channel users. By and large, the changes are significant and useful -- there's an overhauled Task Manager, folders for pinned apps in the Start menu, the renewed ability to drag items into the Taskbar (as you could in Windows 10), improvements to the Do Not Disturb and Focus modes, new touchscreen gestures, and a long list of other fixes and enhancements.

But tucked away toward the bottom of the changelog is one unwelcome addition: like the Home edition of Windows 11, the Pro version will now require an Internet connection and a Microsoft account during setup. In the current version of Windows 11, you could still create a local user account during setup by not connecting your PC to the Internet -- something that also worked in the Home version of Windows 10 but was removed in 11. That workaround will no longer be available in either edition going forward, barring a change in Microsoft's plans. While most devices do require a sign-in to fully enable app stores, cloud storage, and cross-device sharing and syncing, Windows 11 will soon stand alone as the only major consumer OS that requires account sign-in to enable even basic functionality.

Privacy

Silenced AirTags With Disabled Speakers Are Popping Up for Sale Online (gizmodo.com) 72

To make it harder for stalkers to abuse them, Apple included (and has since upgraded) several safety features that will alert someone to the presence of a nearby AirTag that's not their own, including an audible beep. But according to PCMag, one Etsy seller was, up until very recently, selling AirTags with the speaker physically disabled, raising privacy concerns once again. From a report: The AirTag, a small, easy-to-carry device about the size of a quarter, relies on Apple's Find My network which leverages millions of Apple devices to discreetly keep tabs on the location of the trackers and report that information back to each tag's registered user. The general idea behind the AirTag was that users could attach one to their keys, their backpack, or to other valuable items, and be able to quickly locate them if lost. To prevent their misuse, such as using an AirTag to track someone without their knowledge, iOS users would be eventually notified if a tracker registered to someone else was nearby, while Android users would have to rely on an audible beep that would start chirping three days after an AirTag was separated from its owner.

The product was ripe for abuse -- a concern we emphasized in our initial review of the AirTags -- and a couple of months after their debut Apple addressed those concerns with promised updates that would see Android users getting similar notifications as iOS users when an AirTag was nearby through a new Tracker Detect app that allowed Android users to more easily spot the devices. And the timeframe for when the trackers would start beeping after being away from its registered owner was shortened to a "random time inside a window that lasts between 8 and 24 hours," according to a CNET report.

Android

Android Malware BRATA Wipes Your Device After Stealing Data (bleepingcomputer.com) 32

The Android malware known as BRATA has added new and dangerous features to its latest version, including GPS tracking, the capacity to use multiple communication channels, and a function that performs a factory reset on the device to wipe all traces of malicious activity. BleepingComputer reports: BRATA was first spotted by Kaspersky back in 2019 as an Android RAT (remote access tool) that mainly targeted Brazilian users. In December 2021, a report by Cleafy underscored the emergence of the malware in Europe, where it was seen targeting e-banking users and stealing their credentials with the involvement of fraudsters posing as bank customer support agents. Analysts at Cleafy continued to monitor BRATA for new features, and in a new report published today, illustrate how the malware continues to evolve.

The latest versions of the BRATA malware now target e-banking users in the UK, Poland, Italy, Spain, China, and Latin America. Each variant focuses on different banks with dedicated overlay sets, languages, and even different apps to target specific audiences. The authors use similar obfuscation techniques in all versions, such as wrapping the APK file into an encrypted JAR or DEX package. This obfuscation successfully bypasses antivirus detections [...]. On that front, BRATA now actively seeks signs of AV presence on the device and attempts to delete the detected security tools before proceeding to the data exfiltration step.

The best way to avoid being infected by Android malware is to install apps from the Google Play Store, avoid APKs from shady websites, and always scan them with an AV tool before opening. During installation, pay close attention to the requested permissions and avoid granting any that appear unnecessary for the app's core functionality. Finally, monitor battery consumption and network traffic volumes to identify any inexplicable spikes that may be attributed to malicious processes running in the background.

Android

'Google Is Forcing Me To Dump a Perfectly Good Phone' (vice.com) 285

An anonymous reader quotes a report from Motherboard, written by Aaron Gordon: Not quite three years ago, I bought a Pixel 3, Google's flagship phone at the time. It has been a good phone. I like that it's not too big. I dropped it a bunch, but it didn't break. And the battery life has not noticeably changed since the day I got it. I think of phones in much the same way I think of refrigerators or stoves. It's an appliance, something I need but feel no attachment to, and as long as it keeps fulfilling that need, I don't want to spend money replacing it for no real reason. The Pixel 3 fulfills my needs, so I don't want to spend $600 on the Pixel 6, which seems to be just another phone that does all the phone things.

But I have to get rid of it because Google has stopped supporting all Pixel 3s. Despite being just three years old, no Pixel 3 will ever receive another official security update. Installing security updates is the one basic thing everyone needs to do for their own digital security. If you don't even get them, then you're vulnerable to every security flaw discovered since your last patch. In response to an email asking Google why it stopped supporting the Pixel 3, a Googles spokesperson said, "We find that three years of security and OS updates still provides users with a great experience for their device."

This has been a problem with Android for as long as Android has existed. In 2015, my colleague Lorenzo Franceschi-Bicchierai wrote a farewell to Android because of its terrible software support and spotty upgrade rollouts. Android has long blamed this obvious issue on the fact that updates need to run through the cellphone company and phone manufacturer before being pushed to the user. At the time, Google didn't make any Android phones; the Nexus line was the closest thing, a partnership with other manufacturers like Motorola and HTC (I had one of those, too). But for the past six years, Google has made the Pixel line of phones. They are Google-made phones, meaning Google can't blame discontinuing security updates on other manufacturers, and yet, it announced that's exactly what it would do.
Gordon goes on to say that he's "switching to an iPhone for the first time," noting how the most recent version of iOS can be installed on phones going as far back as the iPhone 6s, which was released more than six years ago.

"Unless you routinely destroy your phone within two or three years, there's no justification from a sustainability perspective to keep using Android phones," he adds. "Of course, Apple is only good by comparison, as it also manufactures devices that are difficult to repair with an artificially short shelf life. It just happens to have a longer shelf life than Google."
Privacy

Google Gets Hit With a New Lawsuit Over 'Deceptive' Location Tracking (techcrunch.com) 23

Washington DC, Texas, Washington state and Indiana announced the latest lawsuit against Big Tech Monday, alleging that Google deceived users by collecting their location data even when they believed that kind of tracking was disabled. TechCrunch reports: "Google falsely led consumers to believe that changing their account and device settings would allow customers to protect their privacy and control what personal data the company could access," DC Attorney General Karl Racine said. "The truth is that contrary to Google's representations it continues to systematically surveil customers and profit from customer data." Racine described Google's privacy practices as "bold misrepresentations" that undermine consumer privacy. His office began investigating how Google handles user location data after reporting from the Associated Press in 2018 found that many Google apps across iOS and Android recorded location data even when users have chosen privacy options that explicitly say they won't. The AP coordinated with computer science researchers at Princeton to verify its findings.

The lawsuit argues that Google created a location tracking system that's impossible for users to opt out of and that it misled users about how privacy settings could protect their data within apps and at the device level on Android. It also accuses Google of relying on deceptive dark pattern design to force users into making choices counter to their own interests. Racine's office is pursuing an injunction against Google as well as seeking to force the company to pay out profits that it made from user data collected by misleading consumers about their privacy.

Windows

Hands-On Microsoft's Canceled Andromeda OS (windowscentral.com) 13

Windows Central got their hands on a pre-release build of Microsoft's canceled Andromeda OS running on a Lumia 950. As noted in the article, "Andromeda OS was never intended to ship on the Lumia 950, or any Windows phone on the market at that time." They're using a 950 because Microsoft used them to help develop Andromeda OS internally. Also worth mentioning is the fact that Andromeda OS is no longer in development. Android is the OS that will be powering future Microsoft devices, such as the future Surface Duo devices. Here's an excerpt from the report: Microsoft decided to do something rather unique with Andromeda OS, and build out OS experience around a journaling/inking experience. On the lockscreen, the user is able to begin taking notes directly onto the lockscreen UI just by putting pen to screen. You don't have to initiate a special mode, or enter an app first, just take your Surface Pen and begin writing, and the lockscreen will store that ink for you to see every time you unlock your device. [...] Unlocking the device would take you to your home screen, which on Andromeda OS is another inking canvas. This canvas is called the Journal (though this later became the Microsoft Whiteboard app) which acted as a digital notebook with the ability to take notes with a pen, add sticky notes, insert images and 3D objects, and more. The Journal experience would always be running in the background, with your phone apps running above it.

Andromeda OS was also gesture based. The on-screen Start and Cortana buttons would disappear when opening an app to provide a full-screen experience, so to access those areas, you'd swipe in from the left for Start, and from the right for Cortana, which is also where your notifications were stored. Yes, Cortana and your Notifications were one of the same on Andromeda OS, with Cortana becoming your "manager" of notifications missed or stored for dealing with later. A swipe down from the top would reveal the Control Center, which is feature that's now shipping on Windows 11, but started life here on Andromeda OS. Feature-wise, it's exactly the same, with the ability to control things like Wi-Fi, brightness, volume, and music playback. It also features Fluent Design acrylic blur effects, as do many other parts of the UI, even in this unfinished state.

[...] There was also an experimental "Radial UX Menu" mode, where instead of gestures swiping in things like Start and Cortana, swiping would present you with a UI full of circular buttons for things like Start, switching apps, and more. This may have been an alternative to on-screen navigation, as not everyone was familiar with full gesture navigation at the time just yet. Or, it could have been an alternative method of navigation for when you were using a pen. Who knows. One thing we're not able to show you is the Continuum mode that Microsoft was also working on for Andromeda OS, as unfortunately it appears to be broken in the build we have. That said, we do know what it was going to be like. Essentially, Microsoft was building out Continuum to be a true desktop experience, with windowed app experiences, the ability to store icons on the desktop, and more.
If you'd prefer to see Andromeda OS in action instead of read about it, you can watch Windows Central's video here.
Google

Google is Building an AR Headset (theverge.com) 52

Meta may be the loudest company building AR and VR hardware. Microsoft has HoloLens. Apple is working on something, too. But don't count out Google. The Verge: The search giant has recently begun ramping up work on an AR headset, internally codenamed Project Iris, that it hopes to ship in 2024, according to two people familiar with the project who requested anonymity to speak without the company's permission. Like forthcoming headsets from Meta and Apple, Google's device uses outward-facing cameras to blend computer graphics with a video feed of the real world, creating a more immersive, mixed reality experience than existing AR glasses from the likes of Snap and Magic Leap. Early prototypes being developed at a facility in the San Francisco Bay Area resemble a pair of ski goggles and don't require a tethered connection to an external power source.

Google's headset is still early in development without a clearly defined go-to-market strategy, which indicates that the 2024 target year may be more aspirational than set in stone. The hardware is powered by a custom Google processor, like its newest Google Pixel smartphone, and runs on Android, though recent job listings indicate that a unique OS is in the works. Given power constraints, Google's strategy is to use its data centers to remotely render some graphics and beam them into the headset via an internet connection. I'm told that the Pixel team is involved in some of the hardware pieces, but it's unclear if the headset will ultimately be Pixel-branded.

Cellphones

Pine64's Newest Linux Smartphone 'PinePhone Pro Explorer Edition' Now Available for Pre-Order (pine64.org) 27

"Linux fans rejoice!" writes Hot Hardware. " Pine64's newest smartphone is officially available for pre-order." PinePhone Pro Explorer Edition pre-orders opened up Tuesday. Devices that are pre-ordered before January 18th will be shipped from Pine64's Hong Kong warehouse by January 24th and should arrive by early February.... According to Pine64, the PinePhone Pro Explorer Edition is the "fastest mainline Linux smartphone on the market." It uses a Rockchip RK3399S SoC that is composed of two ARM A72 cores (1.5GHz) and four A53 efficiency cores (1.5GHz)....

Consumers will also likely be pleased with the price of the device. The PinePhone Pro Explorer Edition currently rings in at $399 USD. The production run is purportedly "large" and interested consumers should therefore be able to easily purchase the device at this price.

Liliputing adds: While the PinePhone Pro has better hardware than the original PinePhone, Pine64 plans to continue selling both phones indefinitely. The first-gen phone will continue to sell for $150 to $200, offering an entry-level option for folks that want to experiment with mobile Linux, while the higher-priced PinePhone Pro should offer a hardware experience closer to what folks would expect from a modern mid-range phone....

In addition to the PinePhone Keyboard, the recently launched PinePhone wireless charging case, fingerprint reader case, and LoRa cases should all work with either phone.

But the new phone has a faster processor, more memory and storage, higher-resolution cameras, a higher-speed USB-C port and support for WiFi 5 and Bluetooth 4.1. And those features should make it a little more viable as a replacement for an iPhone or Android device... if you're comfortable running work-in-progress software.

They also add that "Thanks to the recent launch of the $50 PinePhone Keyboard, you can also think of the PinePhone Pro as a $400 phone that can be used as a $449 mini-laptop...."

And the Pine64 site's January update also points out that "Pico 8 Raspberry Pi port works on the PinePhone," adding "yes, it does run DOOM."

Slashdot Top Deals