Google's Stadia game-streaming service, which has been limited to Android phones, computers and TVs, will launch for the iPhone in the coming weeks. The Verge reports: Google on Thursday announced iOS support for its Stadia cloud gaming service, following in the footsteps of Microsoft in turning to the mobile web to circumvent Apple's App Store restrictions. Google says it has been building a progressive web app version of Stadia that will run in the mobile version of Apple's Safari browser, similar to how Microsoft intends to deliver its competing xCloud service on iOS sometime next year. But Google intends to beat Microsoft to the punch with public testing of its version in the coming weeks. Nvidia also announced today that it a beta web app version of its GeForce Now cloud gaming service on iOS is available today.

Apple in late August clarified its rules around cloud gaming, telling providers like Google and Microsoft that their apps were not allowed on the App Store due to restrictions Apple imposes on software that streams games to the iPhone and iPad. Apple eventually loosened its restrictions after public criticism from Microsoft and others, but the App Store still requires companies to submit individual games for App Store review. Microsoft called the compromise a "bad experience for consumers" before deciding it would develop a web app version of xCloud for iOS instead. Now, Google is doing the same.

Go SMS Pro, one of the most popular messaging apps for Android, is exposing photos, videos and other files sent privately by its users. Worse, the app maker has done nothing to fix the bug. TechCrunch reports: Security researchers at Trustwave discovered the flaw in August and contacted the app maker with a 90-day deadline to fix the issue, as is standard practice in vulnerability disclosure to allow enough time for a fix. But after the deadline elapsed without hearing back, the researchers went public. Trustwave shared its findings with TechCrunch this week.

When a Go SMS Pro user sends a photo, video or other file to someone who doesn't have the app installed, the app uploads the file to its servers, and lets the user share a web address by text message so the recipient can see the file without installing the app. But the researchers found that these web addresses were sequential. In fact, any time a file was shared -- even between app users -- a web address would be generated regardless. That meant anyone who knew about the predictable web address could have cycled through millions of different web addresses to users' files. Go SMS Pro has more than 100 million installs, according to its listing in Google Play.

A group of state attorneys general, led by New York Attorney General Letitia James, is on track to file antitrust charges against Facebook in early December, according to a report Thursday from the Washington Post. CNET: The move comes as the US Federal Trade Commission is also reportedly finalizing its antitrust probe into the social media giant. State and federal investigators plan to bring antitrust charges against Facebook over its acquisitions of Instagram and WhatsApp, alleging that the deals "helped create an anti-competitive social networking juggernaut," according to the Post. Investigators may also reportedly argue that Facebook weaponized its vast trove of user data to help quash rivals.

An anonymous reader quotes a report from ZDNet: A team of academics has detailed this week novel research that converted a smart vacuum cleaner into a microphone capable of recording nearby conversations. Named LidarPhone, the technique works by taking the vacuum's built-in LiDAR laser-based navigational component and converting it into a laser microphone. [...] They tested the LidarPhone attack with various objects, by varying the distance between the robot and the object, and the distance between the sound origin and the object. Tests focused on recovering numerical values, which the research team said they managed to recover with a 90% accuracy. But academics said the technique could also be used to identify speakers based on gender or even determine their political orientation from the music played during news shows, captured by the vacuum's LiDAR.

But while the LidarPhone attack sounds like a gross invasion of privacy, users need not panic for the time being. This type of attack revolves around many prerequisites that most attacks won't bother. There are far easier ways of spying on users than overwriting a vacuum's firmware to control its laser navigation system, such as tricking the user on installing malware on their phone. The LidarPhone attack is merely novel academic research that can be used to bolster the security and design of future smart vacuum robots. In fact, the research team's main recommended countermeasure for smart vacuum cleaning robot makers is to shut down the LiDAR component if it's not rotating. Additional details about the research are available in a research paper titled "Spying with Your Robot Vacuum Cleaner: Eavesdropping via Lidar Sensors."

YouTube has updated its Terms of Service to include a new section that gives it the right to monetize videos from channels not big enough to be part of its Partner Program. Engadget reports: That doesn't mean new creators can start earning from their videos right away, though -- YouTube said in a forum post explaining the changes to its ToS that non-YPP members won't be getting a cut from those ads. To become eligible for the YouTube Partner Program, a creator has to be living in a country where it's active, has to have 4,000 public watch hours in the last 12 months and has to have over 1,000 subscribers. YouTube only used to run ads on videos from channels that don't meet those criteria under special circumstances, such as if the channel was previously a YPP member. Going forward, though, the website can monetize any video, so long as it meets its ad-friendly guidelines.

In addition to this change to its Right to Monetize section, YouTube has also added "faces" to the kinds of information people aren't allowed to collect from its service. It explained that the website never allowed the collection of personally identifiable information, but it altered its language in the ToS "to be extremely explicit about what kind of data users" can't collect. YouTube is rolling out these changes in the US first, but they will be effective worldwide by the end 2021.

Facebook for the first time on Thursday disclosed numbers on the prevalence of hate speech on its platform, saying that out of every 10,000 content views in the third quarter, 10 to 11 included hate speech. Reuters reports: The world's largest social media company, under scrutiny over its policing of abuses, particularly around November's U.S. presidential election, released the estimate in its quarterly content moderation report. On a call with reporters, Facebook's head of safety and integrity Guy Rosen said that from March 1 to the Nov. 3 election, the company removed more than 265,000 pieces of content from Facebook and Instagram in the United States for violating its voter interference policies.

Facebook also said it took action on 22.1 million pieces of hate speech content in the third quarter, about 95% of which was proactively identified. It took action on 22.5 million in the previous quarter. The company defines 'taking action' as removing content, covering it with a warning, disabling accounts, or escalating it to external agencies. Facebook's photo-sharing site Instagram took action on 6.5 million pieces of hate speech content, up from 3.2 million in Q2. About 95% of this was proactively identified, a 10% increase from the previous quarter. Facebook said it took action on 19.2 million pieces of violent and graphic content in the third quarter, up from 15 million in the second. On Instagram, it took action on 4.1 million pieces of violent and graphic content, up from 3.1 million in the second quarter. Rosen said the company expected to have an independent audit of its content enforcement numbers "over the course of 2021."

The Arecibo telescope's long and productive life has come to an end. From a report: The National Science Foundation (NSF) announced today it will decommission the iconic radio telescope in Puerto Rico following two cable breaks in recent months that have brought the structure to near collapse. The 57-year-old observatory, a survivor of numerous hurricanes and earthquakes, is now in such a fragile state that attempting repairs would put staff and workers in danger. "This decision was not an easy one to make," Sean Jones, NSF's assistant director for mathematical and physical sciences, said at a news briefing today. "We understand how much Arecibo means to [the research] community and to Puerto Rico." Ralph Gaume, director of NSF's astronomy division, said at the briefing the agency wants to preserve other instruments at the site, as well as the visitor and outreach center. But they are under threat if the telescope structure collapses. That would bring the 900-ton instrument platform, suspended 137 meters above the 305-meter-wide dish, crashing down. Flailing cables could damage other buildings on the site, as could the three support towers if they fell, too. "There is a serious risk of an unexpected and uncontrolled collapse," Gaume said. "A controlled decommissioning gives us the opportunity to preserve valuable assets that the observatory has." Over the next few weeks, engineering firms will develop a plan for a controlled dismantling. It may involve releasing the platform from its cables explosively and letting it fall.

Four years after offering special placement in a "top stories carousel" in search results to entice publishers to use a format it created for mobile pages, called AMP, Google announced last week that it will end that preferential treatment in the spring. "We will prioritize pages with great page experience, whether implemented using AMP or any other web technology, as we rank the results," Google said in a blog post. From a report: The company had indicated in 2018 that it would drop the preference eventually. Last week's announcement of a concrete timeline comes less than a month after the Department of Justice called Google a "monopoly gatekeeper to the internet" in a lawsuit alleging antitrust violations and as pressure mounts on officials in the European Union, which has already fined Google more than $9 billion for antitrust violations. "I did always think AMP posed antitrust concerns," said Sally Hubbard, author of the book "Monopolies Suck" and an antitrust expert with the Open Markets Institute. "It's, 'If you want to show up on the top of the search results, you have to play by our rules, you have to use AMP.'" Google spokesperson Meghann Farnsworth did not address the timing of the change but said AMP is not dead, saying the company is "fully committed to AMP as a technology." She said AMP continues to be required for certain features that "are not technically possible" without it, such as "swipe to visit" in Google Images, and that it's "preferred" in the "for you" feed in Google's news reading app, Google Discover.

Mozilla has opened today a public comment and consultation period about the ways it could enable support for the controversial privacy-centric DNS-over-HTTPS (DoH) protocol inside Firefox. From a report: The browser maker's decision to open a rare public consultation period comes after the organization faced criticism last year in the UK for its plans to support DoH inside Firefox. UK government officials, law enforcement agencies, and local internet service providers criticized Mozilla for developing and wanting to roll out DoH, a feature they said could have helped suspects bypass enterprise firewalls and parental controls blocklists -- even earning the browser maker a nomination for an "Internet Villain" award from a local ISP. All last year's hoopla was caused by DoH, a web protocol developed as an alternative to the classic DNS (Domain Name System). DoH works by encrypting DNS queries (which are normally sent out in clear text) and hiding them inside normal-looking HTTPS web traffic.

After two long, complicated years, every Android user worldwide (outside China) now has access to the next-gen texting standard that is replacing SMS. Google is directly offering RCS chat services through its Android Messages app to anybody who installs it and uses it as their default texting app, which partly bypasses a carrier rollout that, at times, has ranged from sluggish to incoherent to broken. From a report Just as importantly, Google has announced that it's finally beginning to enable a key privacy feature: end-to-end encryption. For Android users who use Android Messages, one-on-one chats will eventually be end-to-end encrypted by default, meaning neither carriers nor Google will be able to read the content of those messages. Even though encryption is only beginning to roll out to people who sign up for the public beta for Android Messages, turning on encryption for RCS is a very big deal. It's a massive privacy win, as it could mean that the de facto replacement for SMS will, by default, be private on the smartphone platform used by the vast majority of people worldwide.

As for the people who use that other smartphone platform -- the iPhone -- we have no word on whether Apple intends to adopt the RCS standard. But as every carrier worldwide gets on board, and now that there is a clearer path to ensuring private communication with RCS, the pressure on Apple to participate is likely to build. Unfortunately, SMS becoming fully deprecated and replaced by RCS will only happen if all goes to plan for Google. Since initially announcing plans to transition to RCS as the primary texting platform for Android, the standard's rollout has been mired in confusion. In attempting to be neutral and make Android's texting a standard shared by carriers worldwide, Google set itself up with the job of herding multibillion-dollar cats -- with sadly predictable results.

Researchers from the University of Michigan used their own automated censorship tracking system to collect more than 21 billion measurements over 20 months in 221 countries. They discovered that citizens in what are considered the world's freest countries aren't safe from internet censorship. From a press release: [Roya Ensafi, U-M assistant professor of electrical engineering and computer science who led the development of the tool, and her team] found that censorship is increasing in 103 of the countries studied, including unexpected places like Norway, Japan, Italy, India, Israel and Poland. These countries, the team notes, are rated some of the world's freest by Freedom House, a nonprofit that advocates for democracy and human rights. They were among nine countries where Censored Planet found significant, previously undetected censorship events between August 2018 and April 2020. They also found previously undetected events in Cameroon, Ecuador and Sudan. While the United States saw a small uptick in blocking, mostly driven by individual companies or internet service providers filtering content, the study did not uncover widespread censorship. However, Ensafi points out that the groundwork for that has been put in place here.

"When the United States repealed net neutrality, they created an environment in which it would be easy, from a technical standpoint, for ISPs to interfere with or block internet traffic," she said. "The architecture for greater censorship is already in place and we should all be concerned about heading down a slippery slope." It's already happening abroad, the researchers found. "What we see from our study is that no country is completely free," said Ram Sundara Raman, U-M doctoral candidate in computer science and engineering and first author of the study. "We're seeing that many countries start with legislation that compels ISPs to block something that's obviously bad like child pornography or pirated content. But once that blocking infrastructure is in place, governments can block any websites they choose, and it's a very opaque process. That's why censorship measurement is crucial, particularly continuous measurements that show trends over time." The study is titled "Censored Planet: An Internet-wide, Longitudinal Censorship Observatory."

According to Chrome product manager Mark Chang, Google's version of Chrome that support ARM Macs is now available to download. The Verge reports: In theory, a native version of the notoriously resource-hungry browser might run more efficiently on Apple's Arm-based computers. In our reviews of the MacBook Air, MacBook Pro, and Mac mini equipped with the new M1 chip, though, we found that the version of Chrome built for Intel chips already runs well on Apple's new Macs, so hopefully this native version runs even better. You'll be able to pick which version of Chrome to download from the browser's website.

Google began rolling out a new version of Chrome on Tuesday, touting the "the largest gain in Chrome performance in years" thanks to some under-the-hood changes. The company's blog about the new release didn't mention anything about a version optimized for Apple's Arm-based Macs.

In an open letter published Wednesday, a group of Facebook moderators say the company is putting them and their families at risk by asking them to go back to work in the midst of the pandemic. Engadget reports: The content reviewers say that while workers with a doctor's note can be excused from going to the office, those with high risk family members don't get the same opportunity. "In several offices, multiple COVID cases have occurred on the floor," the letter, states. "Workers have asked Facebook leadership, and the leadership of your outsourcing firms like Accenture and CPL, to take urgent steps to protect us and value our work. You refused. We are publishing this letter because we are left with no choice."

According to the letter-writers, the reason Facebook is pushing moderators to go back to the office is because the company's AI-based moderation is "years away" from being truly effective: "Without informing the public, Facebook undertook a massive live experiment in heavily automated content moderation. Management told moderators that we should no longer see certain varieties of toxic content coming up in the review tool from which we work -- such as graphic violence or child abuse, for example. The AI wasn't up to the job. Important speech got swept into the maw of the Facebook filter -- and risky content, like self-harm, stayed up. The lesson is clear. Facebook's algorithms are years away from achieving the necessary level of sophistication to moderate content automatically."

The letter also brings up several issues that predate the coronavirus pandemic, like the lack of mental healthcare for moderators as well as their status as contractors rather than full-time employees. Among the moderators demand from Facebook and the contracted companies that employ them: hazard pay, more flexibility to work from home and access to better mental healthcare. "We appreciate the valuable work content reviewers do and we prioritize their health and safety," a Facebook spokesperson said. "While we believe in having an open internal dialogue, these discussions need to be honest. The majority of these 15,000 global content reviewers have been working from home and will continue to do so for the duration of the pandemic. All of them have access to health care and confidential wellbeing resources from their first day of employment, and Facebook has exceeded health guidance on keeping facilities safe for any in-office work."

An anonymous reader quotes a report from VentureBeat: Cerebras Systems and the federal Department of Energy's National Energy Technology Laboratory today announced that the company's CS-1 system is more than 10,000 times faster than a graphics processing unit (GPU). On a practical level, this means AI neural networks that previously took months to train can now train in minutes on the Cerebras system.

Cerebras makes the world's largest computer chip, the WSE. Chipmakers normally slice a wafer from a 12-inch-diameter ingot of silicon to process in a chip factory. Once processed, the wafer is sliced into hundreds of separate chips that can be used in electronic hardware. But Cerebras, started by SeaMicro founder Andrew Feldman, takes that wafer and makes a single, massive chip out of it. Each piece of the chip, dubbed a core, is interconnected in a sophisticated way to other cores. The interconnections are designed to keep all the cores functioning at high speeds so the transistors can work together as one. [...] A single Cerebras CS-1 is 26 inches tall, fits in one-third of a rack, and is powered by the industry's only wafer-scale processing engine, Cerebras' WSE. It combines memory performance with massive bandwidth, low latency interprocessor communication, and an architecture optimized for high bandwidth computing.

Cerebras's CS-1 system uses the WSE wafer-size chip, which has 1.2 trillion transistors, the basic on-off electronic switches that are the building blocks of silicon chips. Intel's first 4004 processor in 1971 had 2,300 transistors, and the Nvidia A100 80GB chip, announced yesterday, has 54 billion transistors. Feldman said in an interview with VentureBeat that the CS-1 was also 200 times faster than the Joule Supercomputer, which is No. 82 on a list of the top 500 supercomputers in the world. [...] In this demo, the Joule Supercomputer used 16,384 cores, and the Cerebras computer was 200 times faster, according to energy lab director Brian Anderson. Cerebras costs several million dollars and uses 20 kilowatts of power.

After analyzing 275,699,516 passwords leaked during 2020 data breaches, NordPass and partners found that the most common passwords are incredibly easy to guess -- and it could take less than a second or two for attackers to break into accounts using these credentials. Only 44% of those recorded were considered "unique." ZDNet reports: On Wednesday, the password manager solutions provider published its annual report on the state of password security, finding that the most popular options were "123456," "123456789," "picture1," "password," and "12345678." With the exception of "picture1," which would take approximately three hours to decipher using a brute-force attack, each password would take seconds using either dictionary scripts -- which compile common phrases and numerical combinations to try -- or simple, human guesswork.

As one of the entrants on the 200-strong list describes the state of affairs when it comes to password security, "whatever," it seems many of us are still reluctant to use strong, difficult-to-crack passwords -- and instead, we are going for options including "football," "iloveyou," "letmein," and "pokemon." When selecting a password, you should avoid patterns or repetitions, such as letters or numbers that are next to each other on a keyboard. Adding a capital letter, symbols, and numbers in unexpected places can help, too -- and in all cases, you should not use personal information as a password, such as birthdates or names.

MojoKid writes: AMD officially launched its Radeon RX 6800 and Radeon RX 6800 XT graphics cards today, previously known in the PC gaming community as Big Navi. The company claimed these high-end GPUs would compete with NVIDIA's best GeForce RTX 30 series and it appears AMD made good on its claims. AMD's new Radeon RX 6800 XT and Radeon 6800 are based on the company's RDNA 2 GPU architecture, with the former sporting 72 Compute Units (CUs) and 2250MHz boost clock, while the RX 6800 sports 60 CUs at a 2105MHz boost clock. Both cards come equipped with 16GB of GDDR6 memory and 128MB of on-die cache AMD calls Infinity Cache, that improves bandwidth and latency, feeding the GPU in front of its 256-bit GDDR6 memory interface.

In the benchmarks, it is fair to say the Radeon RX 6800 is typically faster than an NVIDIA GeForce RTX 3070 just as AMD suggested. Things are not as cut and dry for the Radeon RX 6800 XT though, as the GeForce RTX 3080 and Radeon RX 6800 XT trade victories depending on the game title or workload, but the RTX 3080 has an edge overall. In DXR Ray Tracing performance, NVIDIA has a distinct advantage at the high-end. Though the Radeon RX 6800 wasn't too far behind and RTX 3070, neither the Radeon RX 6800 XT or 6800 card came close the GeForce RTX 3080. Pricing is set at $649 and $579 for the AMD Radeon RX 6800 XT and Radeon RX 6800, respectively and the cards are on sale as of today. However, demand is likely to be fierce as this new crop of high-end graphics cards from both companies have been quickly evaporating from retail shelves.

Google said today it plans to add a new section on the Chrome Web Store where extension developers will disclose what user data they're collecting from users and what they plan to do with the information. From a report: The new section is set to go into effect on January 18, 2021, and will appear as a "Privacy practices" button on each extension's Web Store listing. To aid the process, Google has added a new section today in the Web Store dashboard where extension developers will be able to disclose what data they collect from their users and for what purposes.

Google is launching a major redesign of its Google Pay app on both Android and iOS today. From a report: Like similar phone-based contactless payment services, Google Pay -- or Android Pay as it was known then -- started out as a basic replacement for your credit card. Over time, the company added a few more features on top of that but the overall focus never really changed. After about five years in the market, Google Pay now has about 150 million users in 30 countries. With today's update and redesign, Google is keeping all the core features intact but also taking the service in a new direction with a strong emphasis on helping you manage your personal finances (and maybe get a deal here and there as well). Google is also partnering with 11 banks to launch a new kind of bank account in 2021. Called Plex, these mobile-first bank accounts will have no monthly fees, overdraft charges or minimum balances. The banks will own the accounts but the Google Pay app will be the main conduit for managing these accounts. The launch partners for this are Citi and Stanford Federal Credit Union.

"What we're doing in this new Google Pay app, think of it is combining three things into one," Google director of product management Josh Woodward said as he walked me through a demo of the new app. "The three things are three tabs in the app. One is the ability to pay friends and businesses really fast. The second is to explore offers and rewards, so you can save money at shops. And the third is getting insights about your spending so you can stay on top of your money." Paying friends and businesses was obviously always at the core of Google Pay -- but the emphasis here has shifted a bit. "You'll notice that everything in the product is built around your relationships," Caesar Sengupta, Google's lead for Payments and Next Billion Users, told me. "It's not about long lists of transactions or weird numbers. All your engagements pivot around people, groups, and businesses."

Hmmmmmm shares a report: U.S. Federal Aviation Administration (FAA) chief Steve Dickson is "100% confident" in the safety of the Boeing 737 MAX but says the airplane maker has more to do as it works to improve its safety culture. Dickson on Wednesday signed an order to allow the best-selling plane to resume flights after it was grounded worldwide in March 2019 following two crashes that killed 346 people and led to Boeing's biggest crisis in decades. The order will end the longest grounding in commercial aviation history and paves the way for Boeing to resume U.S. deliveries and commercial flights by the end of the year. "We've done everything humanly possible to make sure" these types of crashes do not happen again," FAA Administrator Dickson told Reuters in a 30-minute telephone interview, adding the design changes "have eliminated what caused these particular accidents." The FAA is requiring new training to deal with a key safety system called MCAS that is faulted for the two fatal crashes as well as significant new safeguards and other software changes. "I feel 100% confident," said Dickson, a former airline and military pilot, who took over as FAA administration in August 2019 and took the controls for a 737 MAX test flight in September. In a video message released on Wednesday, he said that the 20-month review was "long and grueling, but we said from the start that we would take the time necessary to get this right." Dickson said he emphasized to Boeing the importance of safety. "I understand they have a business to run but they don't have anything if they don't have a safe product," Dickson said. Dickson suggested Boeing has more to do to improve safety.

An anonymous reader quotes a report from Ars Technica: Is one of Tesla's infotainment systems defective by design? That's a question the National Highway Traffic Safety Administration hopes to answer. It has started an engineering analysis after hundreds of customer complaints of bricked systems resulted in a preliminary investigation in June. NHTSA thinks it knows what the problem is: an 8GB eMMC NAND flash memory chip with a finite number of write cycles, fitted to its Media Control Unit. The MCU regularly writes logs to this chip and, within three or four years, reaches the lifetime number of cycles. At this point the touchscreen dies, taking with it functions like the car's backup camera, the ability to defog the windows, and also the audible alerts and chimes for the driver aids and turn signals.

After the regulator's Office of Defects Investigation received 537 complaints, it asked Tesla if it knew of any more problems with the Nvidia Tegra 3-based system, which is fitted to approximately 158,000 Models S (2012-2018) and X (2016-2018). Tesla did, handing over 2,399 complaints and field reports, 7,777 warranty claims, and 4,746 non-warranty claims. The finite -- and short -- lifespan of these infotainment systems is a relatively well-known problem within the Tesla community. "The automaker told NHTSA that as of firmware 2020.20, each block of NAND flash should only receive 0.7 read/write cycles a day, which would therefore take between 11 and 12 years before the chip reached its end of life," the report adds. "However, owners who use their cars more often could see this time before failure halved."

"However, Tesla also told NHTSA that 'the MCU failures are likely to continue to occur in subject vehicles as vehicles continue to operate and use available memory in the 8GB eMMC NAND flash memory until 100 percent of units have failed.'" Ars says an official recall may occur in the coming months.