Xiaomi released software updates for its browser apps on Monday amid fresh accusations it's been collecting private data from people who use its phones and browser apps. CNET reports: In a blog post, Xiaomi said the update will allow you to switch off aggregated data collection while on incognito mode in its three browser apps: Mi Browser, Mi Browser Pro, and Mint Browser. The software update was rolled out on Google Play. "We believe this functionality, in combination with our approach of maintaining aggregated data in non-identifiable form, goes beyond any legal requirements and demonstrates our company's commitment to user privacy," the company said in its post.

The release of the software update comes after a Forbes report published last Thursday raised concerns about the Chinese phone-maker's use of private data. It suggested Xiaomi may be collecting data on the websites users visit as well as granular information about apps used and files opened on devices. In response to the report, Xiaomi defended its practices last week saying it's "fully compliant with user privacy protection laws and regulations in the countries and regions we operate in."

According to an analysis from Decision Data, the average broadband-connected U.S. household will surpass current 1TB ISP data caps before 2024. What this could translate to is more overage fees for customers, unless ISPs like Comcast and CenturyLink abandon data caps or continue to waive fees, like some are doing due to the pandemic. From the report: As we reported this month, the average home internet customer is now using close to 400GB of data a month, a number that would have surpassed the original ISP data caps from 2016 by over 50-100GB. At current fee structures for overages (which vary by provider), this would add between $200-$250 a year to the average household cable bill. Our newest analysis of historical FCC data and trending usage data predicts that within the next three years, or before the year 2024, the average household will use over 1TB of broadband data a month, putting them above the current caps. The mean will likely remain below current cap numbers, but as more households turn into power users, the average will continue to spike.

Interestingly, we started conducting research on this trend prior to the COVID-19 pandemic. Toward the end of our research and as self-isolation policy started peaking, we are now seeing the largest spikes in home internet usage in history, far beyond what we could have previously predicted or analyzed. ISPs have properly responded by placing temporary holds on their overage fees for breaching data caps, which reflect that many more consumers have reached or exceeded the 1TB monthly data cap during the pandemic. While we believe this spike will mellow as people return to a more normal life in the next 12 months, it will still settle considerably above pre-outbreak levels. As policy gravitates toward more generalized self-isolation and work-from-home, we expect a substantial overall increase of demand on home internet to remain.

Last year, Apple accused a cybersecurity startup based in Florida of infringing its copyright by developing and selling software that allows customers to create virtual iPhone replicas. Critics have called the Apple's lawsuit against the company, called Corellium, "dangerous" as it may shape how security researchers and software makers can tinker with Apple's products and code. From a report: The lawsuit, however, has already produced a tangible outcome: very few people, especially current and former customers and users, want to talk about Corellium, which sells the eponymous software that virtualizes iPhones and Android devices. During the lawsuit's proceedings, Apple has sought information from companies that have used the tool, which emulates iOS on a computer, allowing researchers to probe potential iPhone vulnerabilities in a forgiving and easy-to-use environment.

"Apple has created a chilling effect," a security researcher familiar with Corellium's product, who asked to remain anonymous because he wasn't allowed to talk to the press, told Motherboard. "I don't know if they intended it but when they name individuals at companies that have spoken in favor [of Corellium], I definitely believe retribution is possible," the researcher added, referring to Apple's subpoena to the spanish finance giant Santander Bank, which named an employee who had Tweeted about Corellium. Several other cybersecurity researchers expressed fear of retribution from Apple for using Corellium.

An anonymous reader quotes a report from Bloomberg: Facebook's Oculus division is building a new version of its Quest standalone virtual reality headset, but the device is facing potential delays due to the impact of Covid-19 on product development and the global supply chain. The social-networking giant is working on multiple potential successors to the Quest. Some models in advanced testing are smaller, lighter, and have a faster image refresh rate for more realistic content, according to people familiar with the matter. These headsets also have redesigned controllers, said the people, who asked not to be identified discussing unannounced products.

The company hasn't finalized which new version of the Quest it will release, and the final product may have different features. Facebook originally planned to launch the new model at the end of 2020, around its annual Oculus Connect conference, but the coronavirus pandemic could delay the headset from shipping until 2021, the people said. Some versions in testing are 10% to 15% smaller than the current Quest. That, in addition to being lighter, makes them more comfortable to wear, one of the people said. The existing model weighs about 1.25 pounds, which is too heavy for some users wearing the device for extended periods. The models in testing are closer to a pound, the person said. The company could sell the new model alongside the current Quest, or choose to fully replace it.

An anonymous reader quotes a report from Ars Technica: No two airlines are handling the uncertain future in quite the same way. Frontier Airlines, though, is going all in on the industry's worst nickel-and-diming impulses and is happy to let you gain a few precious inches of space from your neighbor and their bodily fluids -- for an additional fee. Frontier touts the new charge as the "more room" pledge. "While we believe the best measure to keep everyone healthy is to require face coverings, for those who want an empty seat next to them for extra peace of mind or simply additional comfort, we are now offering 'More Room,'" Frontier CEO Barry Biffle said in a written statement.

The extra fee for a guaranteed empty middle seat will be between $39 and $89, depending on the route. It will be in effect starting this Friday and run at least through the end of August, if not later. Frontier is also requiring face coverings for all passengers in the gate area as well as aboard aircraft, and it will be implementing mandatory hand-washing and health screenings before boarding. Every other major U.S. airline is also mandating face coverings for passengers, but none of them is as yet charging passengers for trying to avoid being breathed on.

Mozilla today launched Firefox 76 for Windows, Mac, and Linux. Firefox 76 includes new Firefox Lockwise password functionality, Zoom improvements, and a handful of developer features. From a report: Lockwise, the password management service formerly known as Firefox Lockbox, is getting smarter. The Firefox feature already lets you generate, manage, and protect all those passwords for streaming services, grocery deliveries, and anything else that helps during the pandemic. If you share your device with family or roommates, Lockwise in Firefox 76 can now protect your saved passwords. When you try to view or copy a password from your "Logins and Passwords" page, you will be prompted for your device's account password.

[...] Firefox 76 adds support for Audio Worklets, which run custom JavaScript audio processing code for applications like VR and gaming on the web. Unlike their predecessor, ScriptProcessorNode, worklets run off the main thread in a similar way to web workers. Mozilla also notes Audio Worklets are "being adopted by some of your favorite software programs." The company specifically called out Zoom, which has become a phenomenon of its own during the pandemic. In short, you now join Zoom calls in Firefox without having to download or install the Zoom client.

Chipmaker Intel has bought Israeli public transit app maker Moovit for about $900 million to help it develop self-driving "robotaxis" that could take to the streets in early 2022, the company said. From a report: Moovit will remain independent while its technology and the data it collects from more than 800 million users in 102 countries will be integrated into Intel's Israel-based autonomous car unit Mobileye. The deal talks started with Moovit seeking to do a capital raise before the novel coronavirus outbreak globally, according to a source familiar with the negotiations. Moovit had enough cash to sustain itself for about a year, and when the economic impact of the pandemic became evident, it decided to explore an outright sale to Intel, the source added. The deal was negotiated in 40 days through virtual meetings, according to the source.

Apple and Alphabet's Google on Monday said they would ban the use of location tracking in apps that use a new contact tracing system the two are building to help slow the spread of the novel coronavirus. From a report: Apple and Google, whose operating systems power 99% of smart phones, said last month they would work together to create a system for notifying people who have been near others who have tested positive for COVID-19, the disease caused by the coronavirus. The companies plan to allow only public health authorities to use the technology. Both companies said privacy and preventing governments from using the system to compile data on citizens was a primary goal. The system uses Bluetooth signals from phones to detect encounters and does not use or store GPS location data. But the developers of official coronavirus-related apps in several U.S. states told Reuters last month it was vital they be allowed to use GPS location data in conjunction with the new contact tracing system to track how outbreaks move and identify hotspots.

coondoggie writes: A glimpse into what that future means for IT networking professionals can be found in Cisco's 2020 Global Networking Trends Report. It was completed before COVID-19 changed the way company's do business, but the predicted impacts have been hastened by the pandemic's impact. From the networking study, Cisco put forward a number of new or developing roles it expects to see in the future, including:

Business translator: The business translator works to better turn the needs of business into service-level, security and compliance requirements that can be applied and monitored across the network. The translator also works to use network and network data for business value and innovation, and their knowledge of networking and application APIs will help them glue the business to the IT landscape.
Network guardian: A network guardian works to bridge network and security architectures. They build the distributed intelligence of the network into security architecture and the SecOps process. This is where networking and security meet, and the guardian is at the center of it all, pulling in and pushing out vast amounts of data, distilling it and then taking action to identify faults or adapt to shutdown attackers.
Network commander: Intent-based networking builds on controller-based automation and orchestration processes. The network commander takes charge of these processes and practices that ensure the health and continuous operation of the network controller and underlying network.
Network orchestrator: This position translates business needs into network policy. It focuses on policy translation and automation, and policy alignment across network and IT domains.
Network detective: A network detective uses and tunes network assurance tools that employadvanced analytics and AI to ensure that the network delivers on business intent. They work with IT service-management processes and SecOps teams to identify network anomalies and close potential security holes. Like the network guardian, they use data proactively to identify faults and attacks.

Microsoft is confirming today that it's planning to refocus Windows 10X on single-screen devices. "The world is a very different place than it was last October when we shared our vision for a new category of dual-screen Windows devices," explains Panos Panay, Microsoft's Windows and devices chief. From a report: "With Windows 10X, we designed for flexibility, and that flexibility has enabled us to pivot our focus toward single-screen Windows 10X devices that leverage the power of the cloud to help our customers work, learn and play in new ways." Microsoft isn't saying exactly when single-screen devices like laptops will support Windows 10X, nor when dual-screen devices will launch with the OS. However, Windows 10X will launch on single-screen devices first. "We will continue to look for the right moment, in conjunction with our OEM partners, to bring dual-screen devices to market," says Panay. Microsoft is reprioritizing Windows 10X for laptops and single-screen devices because of the coronavirus pandemic. The software maker has seen a 75 percent year-over-year increase in the time spent in Windows 10. More people are turning to using their laptops or PCs instead of a smartphone or tablet during the lockdowns we've seen worldwide to work or study.

Academics from an Israeli university have published new research last week showing how an attacker could turn a computer's power supply unit into a rudimentary speaker that can secretly transmit data from an infected host using audio waves. From a report: The technique, named POWER-SUPPLaY, is the work of Mordechai Guri, the head of R&D at the Ben-Gurion University of the Negev, in Israel. Over the last half-decade, Guri has been pioneering research into new covert data exfiltration channels. The techniques Guri has been developing can be used for stealing data through unconventional means. Guri has been developing these techniques specifically for extracting data from air-gapped systems -- computers isolated on local networks with no internet access. Such computers are often used on government or corporate networks to store sensitive data, such as classified files or intellectual property. Air-gapped systems are protected by several layers of defenses, on top of the "air gap," and you need novel data transmission techniques to go around these defenses. For example, some air-gapped systems don't have speakers, because it's been proven in the past that speakers could be abused to leak information from a secure system using inaudible sound waves.

In June 2019, a group of cybersecurity researchers notified Google of more than 1,000 potentially malicious apps on the company's Play Store that can be used to surveil, monitor, and harass users. Their findings, which have not previously been reported, eventually led to one of the largest ever mass removals of Android apps. Less than a year later, there are signs that the "creeperware," as the researchers called it, is returning. From a report: The label comprises a broad category of abusable apps, including tools for spying, spoofing phone numbers, and secretly recording video and audio. Some of those programs banned by Google have now rebranded or added disclaimers and returned to the Play Store. Meanwhile, new programs with overtly abusive purposes have slipped through the company's automated monitoring systems. The initial 1,095 apps flagged by researchers came in a variety of forms. Catch Cheating Spouse and its ilk offered stalkerware packages: Once installed on a victim's phone, the user could track the device's location, read messages, listen to calls, remotely record through the microphone, or log passwords. Many of the programs had innocuous names but hostile purposes. Spoof Text Message, for example, advertised itself with a video using the tagline "Don't like your buddy's girlfriend? Well, break them up!" Others, like GirlFriend Cell Tracker, were more explicit in their motivation. "When we reported these apps to Google initially, it felt like they didn't really know what to do with them," said Kevin Roundy, the technical director of NortonLifeLock's research group, and one of the lead members of the team that uncovered the malicious apps last June.

An anonymous reader quotes Infosecurity magazine: New research from Barracuda Networks has revealed that cyber-criminals are increasingly using official reCAPTCHA walls to disguise malicious content from email security systems and trick unsuspecting users... [S]ophisticated scammers are beginning to use the Google-owned service to prevent automated URL analysis systems from accessing the actual content of phishing pages, and to make phishing sites more believable in the eyes of the victim, Barracuda Networks warned.

In fact, the security solutions provider observed a single phishing campaign that sent out 128,000 emails to a variety of organizations and employees using reCAPTCHA walls to conceal fake Microsoft log-in pages. This campaign used the lure of a voicemail receipt to fool users into solving the reCAPTCHA wall before being redirected to the malicious page, with any log-in info entered then sent straight to the scammers.

After the pandemic is over, "The tech giants could have all the power," warns Recode co-founder Kara Swisher, " and absolutely none of the accountability — at least all the power that will truly matter." This is the conclusion that many are coming to as the post-pandemic future begins to come into focus. Wall Street sure is signaling that the power lies with tech companies, vaulting the stock of Amazon to close to $2,400 a share earlier this week, from $1,838 at the end of January. While the price fell on Friday to $2,286 a share, after Amazon's chief executive, Jeff Bezos, said he would spend future profits on the coronavirus response, that still gives the company a value of $1.14 trillion. And all the other Big Tech stocks, which were hit in the first weeks of the pandemic, also are on an upward march to the top of the market-cap heap. Microsoft at $1.32 trillion. Apple at $1.26 trillion. Alphabet at $900 billion. And Facebook at $577 billion. This group now makes up just over 20 percent of the S.&P. 500, which is a flashing yellow signal of what is to come.

That is to say, we live in a country in which the very big tech firms will be the very big winners in the economy of the future, which still does not look like it will be so pretty for most people and many companies, too...

I neither hate tech nor think most people who work in tech are bad people. But when this crisis is over, I can say that we most certainly should fear Big Tech more because these companies will be freer than ever, with many fewer strictures on them from regulators and politicians. The effort to rein in tech companies had been building decent momentum before coronavirus outbreak, but it will be harder when focus needs to be on building up rather than breaking apart.

Now, as we turn to the healthy companies to help us revive the economy, it could be that the only ones with real immunity are the tech giants. In this way, Covid-19 has accelerated their rise and tightened their grip on our lives. And this consolidation of power, combined with Big Tech's control of data, automation, robotics, artificial intelligence, media, advertising, retail and even autonomous tech, is daunting.

Syfy Wire's "Bad Astronomy" column is written by astronomer Phil Plait, head science writer of Bill Nye Saves the World. This week he looked at the recently-declassified videos taken by the U.S. Navy's fighter jets showing unidentified flying objects "moving in weird and unexpected ways." ("The 'aura' around the object in some of the footage could simply be the camera overexposing around a bright object; infrared cameras can do that, creating an odd glow.")

But to prove they're not aliens, Plait ultimately cites an analysis on the site MetaBunk, "run by former video game programmer and critical thinker Mick West" -- and his videos summarizing discussions on the site's bulletin board:

[I]n this one he argues, convincingly to me, that the FLIR video just shows a passenger plane seen from a distance. He also shows that the rotation of the object in the GIMBAL video is almost certainly due to the motion of the camera itself as it tracks the objects. The fighter jet is turning, and at the same time the camera is mounted on a rotating mechanism that allows it to track. These two motions combine to make a somewhat confusing series of rotations in the image, which is why the object in the video appears to rotate around.

But my favorite bit is a video where he gives a single, simple explanation that accounts for two things seen in the Navy videos, specifically, why the object in the GOFAST video appears to scream across the water so rapidly, and how in the GIMBAL video the object seems to travel against a strong wind. The answer: It's an illusion due to parallax, how an object close to you seems to move more rapidly against a more distant background as the camera moves... Given the distance, angle, and motion, it's likely that the GOFAST video shows a balloon.
As a kind of consolation prize, the column concludes by sharing the cheesy opening credits to a 1970 precursor to the TV show Space: 1999 -- called UFO.

The Los Angeles Times published an op-ed by the executive director of Access Now, a global organization that works to protect privacy, free expression, digital security and human rights among internet users. Now that the sale of the .org registry has been blocked, he explains why that matters. As the pandemic has shown, it has been left to civil society organizations, and individual volunteers, to step up and fill the gaps left by governments and corporations. Large organizations such as Doctors Without Borders, the International Red Cross and the United Nations provide direct, immediate support to hospitals and healthcare professionals. Neighborhood and grass-roots organizations have distributed meals and provided accommodation and friendship to the sick and vulnerable. These organizations range in size, mission, effectiveness and reach, but have two elements in common: They're working toward the betterment of society, and their websites end in dot-org...

From downloading government health guidelines to online learning to connecting with isolated friends and family, the internet has become a lifeline. It has become the town square, the hospital and the schoolyard all at once. Now was clearly the time to protect it, not sell it off to private equity.... Private companies cannot be trusted to not "increase the rent" on small organizations. Private companies do not spend $1.1 billion on an internet domain unless there is profit to be made...

What happens next isn't clear. If the Internet Society no longer wants to control the dot-org domain, an alternative will need to be found... To find this special home, we'll need an open process, innovative ideas and committed partners — all of which we've built over the last few, wild months.

One of the advisors to the #SaveDotOrg campaign was Jacob Malthouse, co-founder of the.eco top-level domain (and also a former ICANN vice president). "Here's what needs to happen next," he writes in an essay on Medium: As of today, the #savedotorg campaign has nearly 27,000 supporters and 2,000 nonprofits behind it. It dwarfs any campaign Internet governance has ever seen. There's no way to de-legitimize such an outpouring of concern... ISOC and PIR leadership must recognize and apologize for the harm and uncertainty that they have caused both nonprofits and Internet governance. There never should have needed to be a #savedotorg campaign, because dot-org should never have been put at risk.

Second, The ISOC board should invite the leadership of the organizations that led the #SaveDotOrg campaign to an open dialogue to understand their concerns and priorities for the future of dot-org. This dialogue should recognize that it may be agreed that ISOC and PIR may no longer be the appropriate stewards for dot-org... [A]ll parties should agree to work together with ICANN to chart a course of action that builds confidence and faith in the multi-stakeholder model of Internet governance. While there are many challenges with this model, one being how messy it seems, in the end the right decisions were taken.

We must all come together to defend the model that has built and will continue to sustain a single global Internet... Now is the time to think about how we can move forward together.

Before it rolled back net neutrality protections in 2017, America's Federal Communications Commission requested public comments online. But they're still facing criticism over how they handled them, Gizmodo reports: A Manhattan federal judge has ruled the Federal Communications Commission must provide two reporters access to server logs that may provide new insight into the allegations of fraud stemming from agency's 2017 net neutrality rollback.... The logs will show, among other details, the originating IP addresses behind the millions of public comments sent to the agency ahead of the December 2017 net neutrality vote.

The FCC attempted to quash the paper's request but failed to persuade District Judge Lorna Schofield, who wrote that, despite the privacy concerns raised by the agency, releasing the logs may help clarify whether fraudulent activity interfered with the comment period, as well as whether the agency's decision-making process is "vulnerable to corruption... In this case, the public interest in disclosure is great because the importance of the comment process to agency rulemaking is great," she said, adding: "If genuine public comment is drowned out by a fraudulent facsimile, then the notice-and-comment process has failed."

An anonymous reader quotes a report from ZDNet: Google has raised a handful of concerns with Australia's pending Telecommunications Legislation Amendment (International Production Orders) Bill 2020 (IPO Bill), including the Commonwealth's choice of phrasing, the avenues proposed for record-sharing, and the Bill being at odds with the purpose of the United States' Clarifying Lawful Overseas Use of Data Act (CLOUD Act). [...] In a submission [PDF] to the Parliamentary Joint Committee on Intelligence and Security (PJCIS) and its review of the IPO Bill, Google said while it encourages and supports efforts by the Australian government to negotiate an executive agreement, it said there are certain elements of the Bill that give it cause for concern.

"Especially when considering how the interception powers under this Bill could be used in tandem with technical capability notices under the controversial Telecommunications and Other Legislation (Assistance and Access) Act," it wrote. Making a recommendation to the PJCIS, Google said the Bill should not apply to service providers in their capacity as infrastructure providers to corporations or government entities, saying corporations or government entities are best placed to produce the requested records themselves. Under the Bill, designated communications providers are instructed to provide any requested communications and data to the requesting agency or the Australian Designated Authority. Google would prefer the authority to be a two-way channel.

Google also poked holes in the Bill's enforcement threshold. Civil penalties for non-compliance with an IPO establishes a framework for compliance. If a designated communications provider receives a valid IPO and the designated communications provider meets the "enforcement threshold" when the IPO is issued, the designated communications provider must comply with the IPO. Google labelled the two-step test that is the threshold, a "relatively low bar to meet." "Failure to comply with an IPO may lead to a civil penalty of up to AU$10 million for body corporates. The imposition of a mandatory obligation to comply with an IPO is contrary to the purpose of the CLOUD Act which is to lift blocking statutes, but explicitly does not create a compulsory obligation on service providers," it said. Specifically, the search giant said it was concerned by the attempt to impose a mandatory obligation on overseas-based designated communications providers that exists "only in the construct of an otherwise non-compulsory international agreement." Google is seeking further information about the role that eligible judges will play in approving IPOs that involve the interception of communications. It also wants the appeal options contained within the Bill to be strengthened.

An anonymous reader quotes a report from IEEE Spectrum: The city of Carmel, Ind., has trucks for plowing snow, salting streets, and carrying landscaping equipment. But one cherry-red pickup can do something no other vehicle can: produce its own hydrogen. A 45-kilogram metal box sits in the bed of the work truck. When a driver starts the engine, the device automatically begins concocting the colorless, odorless gas, which feeds into the engine's intake manifold. This prevents the truck from guzzling gasoline until the hydrogen supply runs out. The pickup has no fuel cell module, a standard component in most hydrogen vehicles. No high-pressure storage tanks or refueling pumps are needed, either.

Instead, the "hydrogen-on-tap" device contains six stainless steel canisters. Each contains a 113-gram button of an aluminum and gallium alloy. A small amount of water drips onto the buttons, causing a chemical reaction that splits the oxygen and hydrogen contained in the water. The hydrogen releases, and the rest turns into aluminum oxide, a waste product that can be recycled to create more buttons. Back in the garage, the driver can replace spent canisters with news ones to replenish the hydrogen supply. AlGalCo -- short for Aluminum Gallium Company -- has spent 14 years refining the technology, which is based on a process developed by distinguished engineer Jerry Woodall. In 2013, AlGalCo partnered with the Carmel Street Department to build a prototype for one of the city's Ford F-250 trucks. In tests, the red pickup has seen a 15 percent improvement in gas mileage and a 20 percent drop in carbon dioxide emissions.