Google

Senator Urges Apple, Google To Remove TikTok From App Stores (axios.com) 61

Sen. Michael Bennet (D-Colo.) wrote to Google and Apple on Thursday, urging both companies to remove TikTok from their app stores. From a report: In a letter addressed to Apple CEO Tim Cook and Google CEO Sundar Pichai, Bennet urges both leaders to boot TikTok immediately, calling the popular video-sharing app "an unacceptable threat to the national security of the United States." Bennet's letter marks the first time a member of Congress has suggested TikTok, owned by Chinese company ByteDance, should not be available for download via the Google Play or Apple App store. "No company subject to [Chinese Communist Party] dictates should have the power to accumulate such extensive data on the American people or curate content to nearly a third of our population," Bennet wrote in the letter.
Google

ChromeOS and Microsoft 365 Will Start Playing Nicer With Each Other This Year (arstechnica.com) 13

An anonymous reader shares a report: Google and Microsoft don't always take pains to make sure their products work great together -- Google originally declared Microsoft's Chromium-based Edge browser "not supported" by the Google Drive web apps; Microsoft is always trying to make you use Bing -- but it looks like Google's ChromeOS will start working a bit better with the Microsoft 365 service later this year. Google says ChromeOS will add a "new integration" for Microsoft 365, making it easier to install the app and adding built-in support for OneDrive in ChromeOS' native Files app.

This should allow users to search for and access OneDrive files the same way they get to local files, or files stored in their Google Drive account. The integration will be added in "the coming months," and users in ChromeOS' dev and beta channels will be able to access it before it rolls out to all ChromeOS users later this year. ChromeOS users can currently access OneDrive and other Microsoft 365 services through their web interfaces or Android apps installed via the Google Play Store, but they don't integrate with the built-in ChromeOS Files app the way that Google Drive does. This integration will help close that gap for people who, for example, use Google products at home but Microsoft products at work or vice versa.

Privacy

GoodRx Leaked User Health Data To Facebook and Google, FTC Says (nytimes.com) 31

An anonymous reader quotes a report from The New York Times: Millions of Americans have used GoodRx, a drug discount app, to search for lower prices on prescriptions like antidepressants, H.I.V. medications and treatments for sexually transmitted diseases at their local drugstores. But U.S. regulators say the app's coupons and convenience came at a high cost for users: wrongful disclosure of their intimate health information. On Wednesday, the Federal Trade Commission accused the app's developer, GoodRx Holdings, of sharing sensitive personal data on millions of users' prescription medications and illnesses with companies like Facebook and Google without authorization. [...]

From 2017 to 2020, GoodRx uploaded the contact information of users who had bought certain medications, like birth control or erectile dysfunction pills, to Facebook so that the drug discount app could identify its users' social media profiles, the F.T.C. said in a legal complaint. GoodRx then used the personal information to target users with ads for medications on Facebook and Instagram, the complaint said, "all of which was visible to Facebook." GoodRx also targeted users who had looked up information on sexually transmitted diseases on HeyDoctor, the company's telemedicine service, with ads for HeyDoctor's S.T.D. testing services, the complaint said. Those data disclosures, regulators said, flouted public promises the company had made to "never provide advertisers any information that reveals a personal health condition."

The company's information-sharing practices, the agency said, violated a federal rule requiring health apps and fitness trackers that collect personal health details to notify consumers of data breaches. While GoodRx agreed to settle the case, it said it disagreed with the agency's allegations and admitted no wrongdoing. The F.T.C.'s case against GoodRx could upend widespread user-profiling and ad-targeting practices in the multibillion-dollar digital health industry, and it puts companies on notice that regulators intend to curb the nearly unfettered trade in consumers' health details. [...] If a judge approves the proposed federal settlement order, GoodRx will be permanently barred from sharing users' health information for advertising purposes. To settle the case, the company also agreed to pay a $1.5 million civil penalty for violating the health breach notification rule.

Google

Samsung, Google and Qualcomm Team Up To Build a New Mixed-Reality Platform (cnet.com) 24

During Samsung's Unpacked event on Wednesday where it unveiled its new Galaxy S23 smartphones, the company said it'll work with Google and Qualcomm on an upcoming mixed-reality platform. Samsung didn't mention any specific products or timeline. CNET reports: "It's more of a declarative announcement about how we are going to get it right in trying to build the XR ecosystem," TM Roh, president of Samsung's mobile division, said in an interview with CNET through a translator ahead of the event. "Google's been investing for a long time across both experiences and technology in AR and VR," Lockheimer said onstage. "Delivering this next generation of experiences requires cutting-edge advanced hardware and software. That's why our collaboration with Samsung and Qualcomm is so exciting."

Samsung has been relatively quiet about virtual reality aside from its Gear VR headset, which it launched several iterations of between 2015 and 2017. That device is a head-mounted holster for smartphone-powered VR experiences. Roh says there's been more demand from consumers for augmented and virtual reality, which is why the company chose this time to start discussing its plans. He says that the company has been researching the category for a while. "And now we believe that we have reached a certain threshold," he said.

The collaboration makes sense since Samsung, Google and Qualcomm already work together to develop smartphones. Samsung builds the hardware of its Galaxy phones, while Qualcomm supplies the processor and Google manages the software's underlying Android operating system. Roh said Google and Qualcomm will play similar roles in the development of this upcoming XR platform, although they will likely overlap in certain areas. Even though Qualcomm would supply the processor, for example, Samsung might make some optimizations, just as it's done for the chip inside the Galaxy S23 lineup. "Each player is taking leadership in each category, and then we will be working very closely together across the different categories," Roh said.

Cellphones

The Samsung Galaxy S23 Ultra Is a Minor Update To a Spec Monster (theverge.com) 18

At Samsung's first Galaxy Unpacked event of the year, the company unveiled its new Galaxy S23 devices: the Galaxy S23, S23 Plus, and Galaxy S23 Ultra. Here's what The Verge's Allison Johnson says about the most premium phone of the bunch, the Galaxy S23 Ultra: Compared to the outgoing model, it comes with an updated processor, a new 200-megapixel main camera sensor, and a tweak to the form factor. The built-in S Pen is still here, naturally. And thankfully the price hasn't inflated. In fact, the starting MSRP of $1,199.99 now comes with 256GB of storage -- double last year's base model. It's a little extra shine on what was already Samsung's star smartphone. [...]

The S23 Ultra also features a very slight exterior redesign. The long edges of the phone are slightly less curved, so there's more of a flat surface to grip when you're holding the device. The back panel and the screen also curve around the sides a bit less, so you might be less likely to run your S Pen off the edge of the device, which tended to happen with the more rounded design. [...] That's the short list of what's new. What's not new is basically everything else: a 5,000mAh battery, IP68 dust and water resistance, and either 8GB or 12GB of RAM depending on the configuration. Your color options this year are phantom black, lavender, green, and cream [...]. [T]he S23 Ultra is up for preorder today and starts shipping on February 17th.
"Samsung's trio of flagships for 2023 offer some refined designs -- which look a little iPhone-like, if I'm being candid -- with some camera, battery, and processor improvements over last year's S22 generation," adds The Verge's Antonio G. Di Benedetto. You can view a full list of specs here.
The Internet

Netflix Unveils Plans To Prevent Password Sharing (ign.com) 150

Netflix has unveiled its plans to prevent password sharing between people in households outside of an account owner's primary location. From a report: As reported by gHacks, the streaming service has detailed how it aims to crackdown on account sharing in an updated FAQ. The information varies between countries, but it looks like the company will be paying careful attention to the devices used to log in to accounts from now on. The FAQ pages for US and UK subscribers currently highlight that devices may require verification if they are not associated with the Netflix household or if they attempt to access an account outside the subscriber's primary location for an extended period of time.

The FAQ pages for countries where Netflix is testing extra membership fees for account sharing have tweaked the rules. The Costa Rican Help Center states that devices must connect to the Wi-Fi at the primary location and watch something on Netflix "at least once every 31 days." The company will use information "such as IP addresses, device IDs, and account activity" to determine whether a device signed into an account is connected to the primary location. A device may be blocked from watching Netflix if it's deemed to fall outside of the household. As further set out in the guidelines, if you are the primary account owner and you find yourself travelling between locations, you can request a temporary code to access Netflix for seven consecutive days. Alternatively, you can update your primary location if it has changed.

Technology

A 3D Printer Isn't Cool. You Know What's Cool? A 3D-Printing Factory (bloomberg.com) 41

A startup founded by SpaceX veterans aims to realize the potential of a technology whose big promises have never quite come through. From a report: 3D printers -- which create objects by layering materials according to a plan sent by a computer -- have gained a reputation for being unwieldy, expensive and slow. There has been more progress on industrial uses, although there, too, major players have fallen into a multiyear funk. Venture capitalists continue to dedicate significant resources to startups promising innovations to fix the technology's underlying flaws. One particularly radical approach comes from Freeform Future, a five-year-old startup based in Los Angeles. The company has raised $45 million so far from investors including Founders Fund, Threshold Ventures and Valor Equity Partners. Instead of trying to build a single machine that can print three-dimensional objects, Freeform is looking to turn entire buildings into automated 3D-printing factories that would use dozens of lasers to create rocket engine chambers or car parts from metal powder.

The company, which has never before discussed its approach publicly, says the technique could allow it to make metal parts 25 to 50 times faster than is possible with current methods and at a fraction of the cost. Freeform's co-founder and chief executive officer, Erik Palitsch, spent a 10-year stint at SpaceX, Elon Musk's aerospace company. [...] Freeform, on the other hand, is creating machines that can fill a warehouse. Its current factory, in Hawthorne, California, used to serve as Keanu Reeves's motorcycle storage facility. (Freeform still ends up with some of the actor's mail.)

Inside, machines shuffle objects back and forth along rapidly moving conveyors, so the system can work on many things at once. Other companies have set up multiple printers in a single facility, but this strategy doesn't improve their speed, it just increases scale by having them work in parallel. Freeform, by contrast, is redesigning the process by which 3D printing can turn raw materials into finished products. In a sense, it's akin to the establishment of the assembly-line process pioneered by 20th century industrialists like Henry Ford. "We have to achieve a state of mass production to open this up to more industries," says Palitsch. "And you simply can't get there with a conventional machine."

Google

Google Begins Testing Its Own ChatGPT-Style AI (gizmodo.com) 19

Google is rushing to release its own artificial intelligence products in the wake of OpenAI's ChatGPT. From a report: The search engine pioneer is working hard and fast on a "code red" effort to respond to ChatGPT with a large language chatbot and testing new ways to incorporate that AI-powered bot into search, according to a report from CNBC. The new report backs up earlier news from the New York Times and elsewhere, which outlined a rapid re-alignment in Google's priorities in direct response to the rise of ChatGPT. CEO Sundar Pichai reportedly re-assigned employees and "upended" meetings to boost the amount of resources going towards the company's AI development.

CNBC's Tuesday account offers further details. Google's new chatbot, reportedly named "Apprentice Bard," is based on the company's pre-existing LaMDA (Language Model for Dialogue Applications) technology. The application looks and functions similarly to ChatGPT: Users input a question in natural language and receive a generated text response as an answer. But Apprentice Bard seemingly has a couple of important skills beyond what ChatGPT can do. For one, it can draw on recent events and information, according to CNBC, unlike ChatGPT which is limited to online information from before 2021. And it may be better at achieving that elusive AI accuracy. For instance, LaMDA correctly responded to a math riddle that ChatGPT failed to grasp, as recorded in company documents viewed by CNBC.

United States

Biden Admin Report Criticizes Apple, Google App Stores (axios.com) 63

A new Biden administration report describes Apple and Google as "gatekeepers" of mobile app stores and suggests legislation is needed to spur competition and give app makers and consumers more choices. From a report: The White House is pushing for tech antitrust action in the new Congress, with a new Department of Commerce report laying out what it sees as a harmful app store environment for both consumers and app makers. The report, from the National Telecommunications and Information Administration, is the Biden administration's fullest effort to lay out concerns about the app store ecosystem.

There is "real potential harm for consumers" in the way Apple and Google run their app stores, with the companies "inflating prices and reducing innovation," Alan Davidson, NTIA administrator, said in a call with reporters. "We're looking forward to seeing what legislation gets introduced on Capitol Hill.... Our hope is that this analysis can inform how people are thinking about these issues," he said. "We have a real opportunity to make progress on tech and competition in this Congress," said Bharat Ramamurti, deputy director of the National Economic Council. "We're highly committed to reform in this space and we will work closely with Congress to see whatever is possible."

Microsoft

Microsoft Plans To Update Bing With a Faster Version of ChatGPT in the Coming Weeks (techcrunch.com) 43

Microsoft is working to incorporate a faster version of OpenAI's ChatGPT, known as GPT-4, into Bing in the coming weeks in a move that would make the search engine more competitive with Google, according to a new report from Semafor. From a report: The integration would see Bing using GPT-4 to answer search queries. People familiar with the matter told Semafor that the main difference between ChatGPT and GPT-4 is speed. Although ChatGPT sometimes takes a up to a few minutes to form a response, GPT-4 is said to be a lot quicker in responding to queries. The latest software's responses are also said to be more detailed and more humanlike. The planned incorporation of ChatGPT into Microsoft products is expected to trigger new competition in internet search, which has largely been dominated by Google. By using GPT-4, Bing would be able to provide users with humanlike answers, as opposed to just simply displaying a list of links.
United Kingdom

Britain's Semiconductor Plan Goes AWOL as US and EU Splash Billions (politico.eu) 79

As nations around the world scramble to secure crucial semiconductor supply chains over fears about relations with China, the U.K. is falling behind. From a report: The COVID-19 pandemic exposed the world's heavy reliance on Taiwan and China for the most advanced chips, which power everything from iPhones to advanced weapons. For the past two years, and amid mounting fears China could kick off a new global security crisis by invading Taiwan, Britain's government has been readying a plan to diversify supply chains for key components and boost domestic production. Yet according to people close to the strategy, the U.K.'s still-unseen plan -- which missed its publication deadline last fall -- has suffered from internal disconnect and government disarray, setting the country behind its global allies in a crucial race to become more self-reliant.

A lack of experience and joined-up policy-making in Whitehall, a period of intense political upheaval in Downing Street, and new U.S. controls on the export of advanced chips to China, have collectively stymied the U.K.'s efforts to develop its own coherent plan. The way the strategy has been developed so far "is a mistake," said a former senior Downing Street official. During the pandemic, demand for semiconductors outstripped supply as consumers flocked to sort their home working setups. That led to major chip shortages -- soon compounded by China's tough "zero-COVID" policy. Since a semiconductor fabrication plant is so technologically complex -- a single laser in a chip lithography system of German firm Trumpf has 457,000 component parts -- concentrating manufacturing in a few companies helped the industry innovate in the past. But everything changed when COVID-19 struck.

Intel

Intel Slashing CEO and Managers' Pay in a Bid To Preserve Cash (yahoo.com) 38

Intel, struggling with a rapid drop in revenue and earnings, is cutting management pay across the company to cope with a shaky economy and to preserve cash for an ambitious turnaround plan. From a report: Chief Executive Officer Pat Gelsinger is taking a 25% cut to his base salary, the chipmaker said Tuesday. His executive leadership team will see their pay packages decrease by 15%. Senior managers will take a 10% reduction and mid-level managers a 5% cut. Intel shares climbed 0.1% in premarket trading in New York Wednesday. The stock lost almost half its value last year. "As we continue to navigate macroeconomic headwinds and work to reduce costs across the company, we've made several adjustments to our 2023 employee compensation and rewards programs," Intel said in a statement. "These changes are designed to impact our executive population more significantly and will help support the investments and overall workforce needed to accelerate our transformation and achieve our long-term strategy." The move follows a gloomy outlook from Intel last week, when the company predicted one of the worst quarters in its more than 50-year history. Stiffer competition and a sharp slowdown in personal-computer demand has wiped out profits and eaten into Intel's cash reserves. At the same time, Gelsinger wants to invest in the company's future. He's two years into a turnaround effort aimed at restoring Intel's technological leadership in the $580 billion chip industry.
China

US Stops Granting Export Licenses For China's Huawei (reuters.com) 36

An anonymous reader quotes a report from Reuters: The Biden administration has stopped approving licenses for U.S. companies to export most items to China's Huawei, according to three people familiar with the matter. Huawei has faced U.S. export restrictions around items for 5G and other technologies for several years, but officials in the U.S. Department of Commerce have granted licenses for some American firms to sell certain goods and technologies to the company. Qualcomm in 2020 received permission to sell 4G smartphone chips to Huawei.

One person familiar with the matter said U.S. officials are creating a new formal policy of denial for shipping items to Huawei that would include items below the 5G level, including 4G items, Wifi 6 and 7, artificial intelligence, and high-performance computing and cloud items. Another person said the move was expected to reflect the Biden administration's tightening of policy on Huawei over the past year. Licenses for 4G chips that could not be used for 5g, which might have been approved earlier, were being denied, the person said. Toward the end of the Trump administration and early in the Biden administration, officials had still granted licenses for items specific to 4G applications.
Chinese foreign ministry spokesperson Mao Ning said that China opposes the United States abusing an overly broad notion of national security to suppress Chinese firms unreasonably. The move "goes against the principles of the market economy and rules of international trade and finance, hurts the confidence the international community has in the U.S business environment and is blatant technological hegemony," Mao said during a press conference in Beijing on Tuesday.
AI

OpenAI Releases Tool To Detect Machine-Written Text (axios.com) 34

An anonymous reader quotes a report from Axios: ChatGPT creator OpenAI today released a free web-based tool designed to help educators and others figure out if a particular chunk of text was written by a human or a machine. OpenAI cautions the tool is imperfect and performance varies based on how similar the text being analyzed is to the types of writing OpenAI's tool was trained on. "It has both false positives and false negatives," OpenAI head of alignment Jan Leike told Axios, cautioning the new tool should not be relied on alone to determine authorship of a document.

Users copy a chunk of text into a box and the system will rate how likely the text is to have been generated by an AI system. It offers a five-point scale of results: Very unlikely to have been AI-generated, unlikely, unclear, possible or likely. It works best on text samples greater than 1,000 words and in English, with performance significantly worse in other languages. And it doesn't work to distinguish computer code written by humans vs. AI. That said, OpenAI says the new tool is significantly better than a previous one it had released.

IT

Mobile Phone, PC Shipments To Fall Again in 2023, Gartner Says (reuters.com) 25

Shipments of personal computers and mobile phones are expected to fall for the second straight year in 2023, with phone shipments slumping to a decade low, IT research firm Gartner said on Tuesday. From a report: Mobile phone shipments are projected to fall 4% to 1.34 billion units in 2023, down from 1.40 billion units in 2022, Gartner said. They totaled 1.43 billion in 2021. That was close to the 2009 shipments level when Blackberry and Nokia phones were the market leaders as Apple tried to dent their dominance.

The mobile phone market peaked in 2015 when shipments touched 1.9 billion units. The pandemic led to a fundamental change where people working from home didn't feel the need to change phones frequently, Ranjit Atwal, research director at Gartner, said in an interview.

The Internet

W3C Re-launched as a Public-Interest Non-Profit Organization (w3.org) 10

The World Wide Web Consortium: The World Wide Web Consortium began the year 2023 by forming a new public-interest non-profit organization. The new entity preserves our member-driven approach, existing worldwide outreach and cooperation while allowing for additional partners around the world beyond Europe and Asia. The new organization also preserves the core process and mission of the Consortium to shepherd the web, by developing open web standards as a single global organization with contributions from W3C Members, staff, and the international community.

Our Director, Tim Berners-Lee, noted: "Today, I am proud of the profound impact W3C has had, its many achievements accomplished with our Members and the public, and I look forward to the continued empowering enhancements W3C enables as it launches its own public-interest non-profit organization, building on 28 years of experience." Our vision for the future is a web that is truly a force for good. A World Wide Web that is truly international and more inclusive, more respectful of its users. A web that supports truth better than falsehood, people more than profits, humanity rather than hate. A web that works for everyone, because of everyone.

Social Networks

Instagram's Co-founders Are Mounting a Comeback (platformer.news) 54

Kevin Systrom and Mike Krieger are back. From a report: The Instagram co-founders, who departed Facebook in 2018 amid tensions with their parent company, have formed a new venture to explore ideas for next-generation social apps. Their first product is Artifact, a personalized news feed that uses machine learning to understand your interests and will soon let you discuss those articles with friends. Artifact -- the name represents the merging of articles, facts, and artificial intelligence -- is opening up its waiting list to the public today. The company plans to let users in quickly, Systrom says. You can sign up yourself here; the app is available for both Android and iOS.

The simplest way to understand Artifact is as a kind of TikTok for text, though you might also call it Google Reader reborn as a mobile app, or maybe even a surprise attack on Twitter. The app opens to a feed of popular articles chosen from a curated list of publishers ranging from leading news organizations like the New York Times to small-scale blogs about niche topics. Tap on articles that interest you and Artifact will serve you similar posts and stories in the future, just as watching videos on TikTok's For You page tunes its algorithm over time.

Security

GitHub Says Hackers Cloned Code-Signing Certificates in Breached Repository (arstechnica.com) 19

GitHub said unknown intruders gained unauthorized access to some of its code repositories and stole code-signing certificates for two of its desktop applications: Desktop and Atom. From a report: Code-signing certificates place a cryptographic stamp on code to verify it was developed by the listed organization, which in this case is GitHub. If decrypted, the certificates could allow an attacker to sign unofficial versions of the apps that had been maliciously tampered with and pass them off as legitimate updates from GitHub. Current versions of Desktop and Atom are unaffected by the credential theft.

"A set of encrypted code signing certificates were exfiltrated; however, the certificates were password-protected and we have no evidence of malicious use," the company wrote in an advisory. "As a preventative measure, we will revoke the exposed certificates used for the GitHub Desktop and Atom applications." The revocations, which will be effective on Thursday, will cause certain versions of the apps to stop working.

Businesses

The Junkification of Amazon (nymag.com) 158

Why does it feel like Amazon is making itself worse? From a report: Efforts to find independent reviews of Amazon-exclusive products rarely turn up high-quality content; many sites just summarize Amazon reviews in an effort to collect search traffic from Google and eventually affiliate commissions from Amazon itself. You read a little feedback to quell your doubts or ease your mind, then eventually, or quickly, you pluck a spatula out of the cascade. There's a good chance, however, that it won't actually be sold by Amazon but rather by a third-party seller that has spent months or years and many thousands of dollars hustling for search placement on the platform -- its "store," to use Amazon's term, is where you will have technically bought this spatula. There's an even better chance you won't notice this before you order it. In any case, it'll be at your door in a couple of days.

The system worked. But what system? In your short journey, you interacted with a few. There was the '90s-retro e-commerce interface, which conceals a marketplace of literally millions of sellers, each scrapping for relevance, using Amazon as a sales channel for their own semi-independent businesses. It subjected you to the multibillion-dollar advertising network planted between Amazon users and the things they browse and buy. It was shipped to you through a sprawling, submerged logistics empire with nearly a million employees and contractors in the United States alone. You were guided almost entirely by an idiosyncratic and unreliable reputation system, initially designed to review books, that has used years of feedback from hundreds of millions of customers to help construct an alternative universe of sometimes large but often fleeting brands that have little identity or relevance outside of the platform. You found what you were looking for, sort of, through a process that didn't feel much like shopping at all.

This is all normal in that Amazon is so dominant that it sets norms. But its essential weirdness -- its drift from anything resembling shopping or informed consumption -- is becoming harder for Amazon's one-click magic trick to hide. Interacting with Amazon, for most of its customers, broadly produces the desired, expected, and generally unrivaled result: They order all sorts of things; the prices are usually reasonable, and they don't have to think about shipping costs; the things they order show up pretty quickly; returns are no big deal. But, at the core of that experience, something has become unignorably worse. Late last year, The Wall Street Journal reported that Amazon's customer satisfaction had fallen sharply in a range of recent surveys, which cited COVID-related delivery interruptions but also poor search results and "low-quality" items. More products are junk. The interface itself is full of junk. The various systems on which customers depend (reviews, search results, recommendations) feel like junk. This is the state of the art of American e-commerce, a dominant force in the future of buying things. Why does it feel like Amazon is making itself worse? Maybe it's slipping, showing its age, and settling into complacency. Or maybe -- hear me out -- everything is going according to plan.

Facebook

Hacker Finds Bug That Allowed Anyone To Bypass Facebook 2FA (techcrunch.com) 13

An anonymous reader quotes a report from TechCrunch: A bug in a new centralized system that Meta created for users to manage their logins for Facebook and Instagram could have allowed malicious hackers to switch off an account's two-factor protections just by knowing their phone number. Gtm Manoz, a security researcher from Nepal, realized that Meta did not set up a limit of attempts when a user entered the two-factor code used to log into their accounts on the new Meta Accounts Center, which helps users link all their Meta accounts, such as Facebook and Instagram.

With a victim's phone number, an attacker would go to the centralized accounts center, enter the phone number of the victim, link that number to their own Facebook account, and then brute force the two-factor SMS code. This was the key step, because there was no upper limit to the amount of attempts someone could make. Once the attacker got the code right, the victim's phone number became linked to the attacker's Facebook account. A successful attack would still result in Meta sending a message to the victim, saying their two-factor was disabled as their phone number got linked to someone else's account.

Manoz found the bug in the Meta Accounts Center last year, and reported it to the company in mid-September. Meta fixed the bug a few days later, and paid Manoz $27,200 for reporting the bug. Meta spokesperson Gabby Curtis told TechCrunch that at the time of the bug the login system was still at the stage of a small public test. Curtis also said that Meta's investigation after the bug was reported found that there was no evidence of exploitation in the wild, and that Meta saw no spike in usage of that particular feature, which would signal the fact that no one was abusing it.

Slashdot Top Deals