Privacy

Amazon Boss Jeff Bezos' Phone 'Hacked By Saudi Crown Prince' (theguardian.com) 73

According to the Guardian, Amazon CEO Jeff Bezos had his phone "hacked" in 2018 after receiving a WhatsApp message from the personal account of the crown prince of Saudi Arabia. From the report: The encrypted message from the number used by Mohammed bin Salman is believed to have included a malicious file that infiltrated the phone of the world's richest man, according to the results of a digital forensic analysis. This analysis found it "highly probable" that the intrusion into the phone was triggered by an infected video file sent from the account of the Saudi heir to Bezos, the owner of the Washington Post.

The two men had been having a seemingly friendly WhatsApp exchange when, on May 1 of that year, the unsolicited file was sent, according to sources who spoke to the Guardian on the condition of anonymity. Large amounts of data were exfiltrated from Bezos's phone within hours, according to a person familiar with the matter. The Guardian has no knowledge of what was taken from the phone or how it was used. [...] The disclosure is likely to raise difficult questions for the kingdom about the circumstances around how U.S. tabloid the National Enquirer came to publish intimate details about Bezos's private life -- including text messages -- nine months later. It may also lead to renewed scrutiny about what the crown prince and his inner circle were doing in the months prior to the murder of Jamal Khashoggi, the Washington Post journalist who was killed in October 2018 -- five months after the alleged "hack" of the newspaper's owner.

Security

Notorious Crime Gang Targets Internet Routers Using Tomato Firmware (arstechnica.com) 51

An anonymous reader quotes a report from Ars Technica: Internet routers running the Tomato alternative firmware are under active attack by a self-propagating exploit that searches for devices using default credentials. When credentials are found, the exploit then makes the routers part of a botnet that's used in a host of online attacks, researchers said on Tuesday. The Muhstik botnet came to light about two years ago when it started unleashed a string of exploits that attacked Linux servers and Internet-of-things devices. It opportunistically exploited a host of vulnerabilities, including the so-called critical Drupalgeddon2 vulnerability disclosed in early 2018 in the Drupal content management system. Muhstik has also been caught using vulnerabilities in routers that use Gigabit Passive Optical Network (GPON) or DD-WRT software. The botnet has also exploited previously patched vulnerabilities in other server applications, including the Webdav, WebLogic, Webuzo, and WordPress.

On Tuesday, researchers from Palo Alto Networks said they recently detected Muhstik targeting Internet routers running Tomato, an open-source package that serves as an alternative to firmware that ships by default with routers running Broadcom chips. The ability to work with virtual private networks and provide advanced quality of service control make Tomato popular with end users and in some cases router sellers. The exploits use already infected devices to scan the Internet for Tomato routers and, when found, to check if they use the default username and password of "admin:admin" or "root:admin" for remote administration. The exploit causes Tomato routers that haven't been locked down with a strong password to join an IRC server that's used to control the botnet. The infection also causes the routers to scan the Internet for servers or devices running WordPress, Webuzo, or WebLogic packages that are vulnerable.

AI

AR is the 'Next Big Thing', Says Apple CEO Tim Cook (siliconrepublic.com) 123

Apple chief executive Tim Cook believes augmented reality, or technology that overlays virtual objects onto the real world, is "the next big thing" that is poised to "pervade our entire lives." From a report: Shanahan asked Cook about major developments in tech he expects in the next five to 10 years. "I'm excited about AR," said the Big Tech CEO, citing augmented reality as an emerging tech space to watch. "My view is it's the next big thing, and it will pervade our entire lives." [...] Cook also sees applications for AR helping with hands-on tasks. "You may be under the car changing the oil, and you're not sure exactly how to do it. You can use AR," he said. Interestingly, the tech CEO sees benefits for AR and connecting people, more than other available technologies. "I think it's something that doesn't isolate people. We can use it to enhance our discussion, not substitute it for human connection, which I've always deeply worried about in some of the other technologies."
Android

14% of Android App Privacy Policies Contain Contradictions About Data Collection (zdnet.com) 30

A large number of Android mobile apps listed on the official Google Play Store contain self-contradictory language in their privacy policies in regards to data collection practices. From a report: In an academic study published last year, researchers created a tool named PolicyLint that analyzed the language used in the privacy policies of 11,430 Play Store apps. They found that 14.2% (1,618 apps) contained a privacy policy with logical contradicting statements about data collection. Examples include privacy policies that stated in one section that they do not collect personal data, only to contradict themselves in subsequent sections, where they state they collect emails or customer names -- which are clearly personally-idenfiable information. While the research team could not determine the app maker's intent in using contradicting statements in their privacy policy, researchers feel the primary purpose was to mislead users if they ever took the time to read the policies.
United States

Federal Workers Kept Clicking on Tech Jobs Months After Shutdown (bloomberg.com) 78

The U.S. government's longest shutdown to date ended a year ago, but the memory may have kept lingering in the minds of federal workers looking for greener pastures in the technology world. From a report: A report released Tuesday by recruiting website Indeed compared clicks by federal employees on private tech jobs against clicks by users not on the federal payroll. That comparison found federal employees' clicks on such jobs were up on average almost 11% in the first 11 months of 2019 compared with 2017. Clicks from the general public fell 7.8% in the same period. The gap is more dramatic between tech workers in the government and private sector. Clicks by federal tech employees on those private-sector jobs were up 6.1% from January 2017 as of November, while clicks from private-sector tech employees fell 21% in the same period. Potential explanations for the divide included advantages for private-sector jobs like higher salaries and the ability to work remotely. Certain tech companies pay an almost 50% premium compared to the federal government, Indeed said.
Businesses

Using 'Legacy' Sonos Devices With Modern Ones Will Prevent Any Future Software Updates (inputmag.com) 134

Sonos has announced that come May 2020, a number of its older products will no longer receive software updates. From a report: That's fair enough, especially considering some of the devices were introduced as far back as 2005. What's likely to raise the heckles of affected Sonos customers, though, is that should they choose to continue using their legacy products, they won't be able to get updates for their contemporary ones. The reason this is the case is that a multi-speaker Sonos system requires all devices to operate on the same software and older products "do not have enough memory or processing power to sustain future innovation." Thus, as Sonos explains in an email to customers, "If modern products remain connected to legacy products after May, they also will not receive software updates and new features."
Businesses

Uber Tests a Feature That Lets Some California Drivers Set Fares (wsj.com) 51

Uber is testing a new feature that gives some drivers in California the ability to set their fares, the latest in a series of moves to give them more autonomy in response to the state's new gig-economy law. From a report: Starting Tuesday morning, drivers who ferry passengers from airports in Santa Barbara, Palm Springs and Sacramento can charge up to five times the fare Uber sets on a ride, according to a person involved in developing the feature. Uber confirmed in an emailed statement that it is doing an "initial test" that "would give drivers more control over the rates they charge riders." The ride-hailing giant has made many changes to the way it works in response to California's passage of Assembly Bill 5. The law requires companies to treat workers as employees -- eligible for sick days and other benefits -- rather than independent contractors if they are controlled by their employer and contribute to its usual course of business.
Privacy

LastPass Is In the Midst of a Major Outage (zdnet.com) 73

LastPass has been suffering from a major outage as users are reporting being unable to log into their accounts and autofill passwords. What's odd is the company insists that everything is working properly, even though there's an unusually high number of users reporting issues. ZDNet reports: User reports about login issues have been flooding Twitter, but also the company's forum, Reddit, and DownDetector. Users are reporting receiving the following error when trying to log in: "An error has occurred while contacting the LastPass server. Please try again later." Both home and enterprise users are impacted. According to reports, LastPass' support staff has been either non-responsive, or denying reports of any technical issue happening at all. Despite issues being reported as far back as three days, the company has not updated its status page to reflect the incident, nor do they provided any type of explanation or useful help to their userbase.

According to multiple user on Twitter, the problems appear to impact only users with LastPass accounts dating to 2014, or prior. On DownDetector, a company spokesperson said the company was still investigating the incident, stating that there are no glaring issues with its servers -- which suggests the roots of this outage might be in a software component. "We are aware of and actively investigating reports from some LastPass customers who are experiencing issues and receiving errors when attempting to log in. At this time no service issues have been identified." Contacted by ZDNet, the company described the outage as "an isolated issue with limited impact" and said that "engineers are working to resolve the issue."

Science

Ultrafast Camera Takes 1 Trillion Frames Per Second of Transparent Objects, Phenomena (phys.org) 36

After developing the world's fastest camera a little over a year ago, Caltech's Lihong Wang decided that wasn't good enough and started working on an even faster device. A new paper published in the journal Science Advances details a new camera from Wang that can take up to 1 trillion pictures per second of transparent objects. Phys.Org reports: The camera technology, which Wang calls phase-sensitive compressed ultrafast photography (pCUP), can take video not just of transparent objects but also of more ephemeral things like shockwaves and possibly even of the signals that travel through neurons. Wang explains that his new imaging system combines the high-speed photography system he previously developed with an old technology, phase-contrast microscopy, that was designed to allow better imaging of objects that are mostly transparent such as cells, which are mostly water.

The fast-imaging portion of the system consists of something Wang calls lossless encoding compressed ultrafast technology (LLE-CUP). Unlike most other ultrafast video-imaging technologies that take a series of images in succession while repeating the events, the LLE-CUP system takes a single shot, capturing all the motion that occurs during the time that shot takes to complete. Since it is much quicker to take a single shot than multiple shots, LLE-CUP is capable of capturing motion, such as the movement of light itself, that is far too fast to be imaged by more typical camera technology. In the new paper, Wang and his fellow researchers demonstrate the capabilities of pCUP by imaging the spread of a shockwave through water and of a laser pulse traveling through a piece of crystalline material.

PlayStation (Games)

Huge PS5 Leak Spills a Bunch of Info On Sony's Reveal Event (techradar.com) 46

A PS5 leak posted on 4Chan, which was later reposted on Reddit, spills a bunch of information on the PlayStation 5 reveal event which is expected to take place in February. According to the leak, the PS5 will be unveiled on February 5 at a PlayStation Meeting event for the media. "The console design, controller, UI/home screen, certain features, console specs, talk from third parties/indie publishers, as well as announcements for PS5 exclusives will be shown," says the leaker.

The leak says the PS5 will support backwards compatibility with games from all 5 PlayStation platforms; PS4 accessories will be compatible on the new console as well; and the specs will rival Microsoft's Xbox Series X console. Furthermore, it states that the PS5 will launch worldwide in October 2020, priced at $499 in the U.S. It'll also be launched with several exclusive titles. You can read the full list of details here.
Social Networks

Instagram Drops IGTV Button Because Nobody Was Using It (techcrunch.com) 13

Instagram is removing the annoying orange IGTV button from its homepage because hardly anyone was using it.

"As we've continued to work on making it easier for people to create and discover IGTV content, we've learned that most people are finding IGTV content through previews in Feed, the IGTV channel in Explore, creators' profiles and the standalone app. Very few are clicking into the IGTV icon in the top right corner of the home screen in the Instagram app," a Facebook company spokesperson tells TechCrunch. "We always aim to keep Instagram as simple as possible, so we're removing this icon based on these learnings and feedback from our community." TechCrunch reports: Instagram users don't need the separate IGTV app to watch longer videos, as the IGTV experience is embedded in the main app and can be accessed via in-feed teasers, a tab of the Explore page, promo stickers in Stories, and profile tabs. Still, the fact that it wasn't an appealing enough destination to warrant a home page button shows IGTV hasn't become a staple like past Instagram launches including video, Stories, augmented reality filters, or Close Friends.

Now users need to tap the IGTV tab inside Instagram Explore to view long-form video. Another thing absent from IGTV? Large view counts. The first 20 IGTV videos I saw today in its Popular feed all had fewer than 200,000 views. BabyAriel, a creator with nearly 10 million Instagram followers that the company touted as a top IGTV creator has only post 20 of the longer videos to date with only one receiving over 500,000 views. [...] In another sign that Instagram is folding IGTV deeper into its app rather than providing it more breathing room of its own, and that it's eager for more content, you can now opt to post IGTV videos right from the main Instagram feed post video uploader. AdWeek Social Pro reported this new "long video" upload option yesterday. A Facebook company spokesperson tells me "We want to keep our video upload process as simple as possible" and that "Our goal is to create a central place for video uploads."

The Internet

Feds Seize WeLeakInfo.com For Selling Access To Stolen Data (pcmag.com) 13

JustAnotherOldGuy shares a report from PC Magazine: The FBI has shut down a website that offered hackers easy access to 12 billion records stolen in thousands of data breaches. On Thursday, the Justice Department announced it had seized the internet domain to WeLeakInfo.com, a site that was cataloging data taken from more than 10,300 data breaches at various companies and websites over the years. Customers could pay as little as $2 to gain access to the massive trove of data, which was carefully indexed and searchable. In return, subscribers could look up a person's email address to find out what previously leaked passwords, names, phone numbers, and IP addresses had been associated with it. It isn't entirely clear how WeLeakInfo.com was obtaining the data breach records. But hackers routinely sell, trade, and collect such information on dark web marketplaces and forums.
Medicine

Hospitals Give Tech Giants Access To Detailed Medical Records (wsj.com) 21

An anonymous reader quotes a report from The Wall Street Journal: Hospitals have granted Microsoft, IBM and Amazon the ability to access identifiable patient information under deals to crunch millions of health records, the latest examples of hospitals' growing influence in the data economy. This breadth of access wasn't always spelled out by hospitals and tech giants when the deals were struck. The scope of data sharing in these and other recently reported agreements reveals a powerful new role that hospitals play -- as brokers to technology companies racing into the $3 trillion health-care sector. Rapid digitization of health records in recent years and privacy laws enabling companies to swap patient data have positioned hospitals as a primary arbiter of how such sensitive data is shared.

Microsoft and Providence, a Renton, Wash., hospital system with data for about 20 million patient visits a year, are developing cancer algorithms by using doctor's notes in patient medical records. The notes haven't been stripped of personally identifiable information, according to Providence. And an agreement between IBM and Brigham and Women's Hospital, in Boston, to jointly develop artificial intelligence allows the hospital to share personally identifiable data for specific requests, people involved in the agreement said -- though so far the hospital hasn't done so and has no current plans to do so, according to hospital and IBM officials. Microsoft executive Peter Lee in July described how his company would use Providence patient data without identifying information for algorithm development. In a December statement, he said patients' personal health data remains in Providence's control and declined to comment further.
As for Amazon, the Fred Hutchinson Cancer Research Center, in Seattle, granted certain AWS employees access to health information that identifies individual patients. "The Hutch, a research institution with ties to hospitals, trained and tested Amazon Web Services software designed to read medical notes," the report says. "An AWS spokeswoman said it doesn't use personally identifiable data protected under federal privacy laws to develop or improve its services."
Businesses

Frontier, an ISP In 29 States, Plans To File For Bankruptcy (arstechnica.com) 62

An anonymous reader quotes a report from Ars Technica: Frontier Communications is planning to file for bankruptcy within two months, Bloomberg reported last week. The telco "is asking creditors to help craft a turnaround deal that includes filing for bankruptcy by the middle of March, according to people with knowledge of the matter," Bloomberg wrote. Frontier CEO Bernie Han and other company executives "met with creditors and advisers Thursday and told them the company wants to negotiate a pre-packaged agreement before $356 million of debt payments come due March 15," the report said. The move would likely involve Chapter 11 bankruptcy to let Frontier "keep operating without interruption of telephone and broadband service to its customers." Frontier reported having $16.3 billion in long-term debt as of September 30, 2019.

Frontier offers residential and business services in 29 states over its fiber and copper networks. Frontier offers broadband, TV, and phone services and reported revenue of $2 billion and a net loss of $345 million in the most recent quarter. Frontier has been losing customers and reducing its staff. Its residential-customer base dropped from 4.15 million to 3.81 million in the 12-month period ending September 30, 2019, including a loss of 90,000 customers in the most recent quarter. Also in that 12-month period, Frontier's business-customer base declined from 422,000 to 381,000. Meanwhile, Frontier had 19,132 employees as of September 30, 2019, down from 21,375 one year earlier. Frontier's financial performance last year was so bad that it refused to take any questions from investors during its quarterly earnings call in August. Frontier is in the process of selling its operations in Washington, Oregon, Idaho, and Montana to WaveDivision Capital.

China

China Reports More Than 200 Infections With New Coronavirus From Wuhan (sciencemag.org) 36

The outbreak of a new virus that began in the Chinese city of Wuhan last month appears to be far from over. Today, Chinese health authorities reported that over 130 new pneumonia cases caused by the virus were identified over the weekend, bringing the total in China alone to 201, including three outside Wuhan. From a report: There has also been a third death from the infection, and South Korea now has reported a case as well -- the third country outside China to do so. Meanwhile, the pattern of spread makes it increasingly unlikely that the virus does not transmit between people, some experts say. "Uncertainty and gaps remain, but it's clear that there is some level of person-to-person transmission," Jeremy Farrar, head of the Wellcome Trust in London, said in a statement today. "The sudden spike in cases is disconcerting, but not entirely unexpected," says Adam Kamradt-Scott, an infectious diseases specialist at the University of Sydney. As more people learn about the disease, more will go to doctors, Kamradt-Scott says, even with mild symptoms, whereas previously they might have just stayed home. And doctors are now on the lookout for the new disease. "The result is that you see a sudden surge in cases," he says. But âoeif we continue to see this trend continue over the next week where there are 50 to 100 new cases every day, then that would be cause for further concern."
Music

People Can Be Identified By the Way They Dance (newatlas.com) 57

Might it be possible that someday in the near future, an official might get you to dance around a bit, in order to confirm that you're really you? Perhaps not, but nonetheless, a recent study has determined that people's identities can be matched to their unique style of dancing. From a report: Scientists at Finland's University of Jyvaskyla started out by using motion capture technology to see if test subjects' psychological traits could be ascertained from the way in which they danced -- such traits included their mood, their level of empathy, and how extroverted or neurotic they were. The researchers were also interested in seeing if simply by watching a person dance, it would be possible to determine what sort of music they were dancing to. This only worked about 30 percent of the time. What they unintentionally discovered, however, was that regardless of the type of music, each person has a characteristic style of dancing that can be identified and matched specifically to themselves. Doing so is accomplished utilizing machine learning algorithms, in conjunction with the motion capture tech. In the study, a total of 73 volunteers each danced to eight genres of music â" these included Blues, Country, Dance/Electronica, Jazz, Metal, Pop, Reggae and Rap. The participants received no instructions, other than to "move any way that felt natural."
Businesses

Huawei Signs Maps Deal With TomTom (scmp.com) 31

Dutch navigation and digital mapping company TomTom said on Friday it had closed a deal with China's Huawei Technologies for the use of its maps and services in smartphone apps. From a report: The deal with TomTom means that the Chinese telecoms and technology giant can now use the Dutch company's maps, traffic information and navigation software to develop apps for its smartphones, according to a Reuters report. A TomTom spokesman said the deal had been closed some time ago but had not been made public by the company and he declined to provide further details, according to the Reuters report. China's largest smartphone vendor has been forced to develop its own operating systems (OS) for both smartphones and computers after being added to a US blacklist in May on national security grounds, barring it from buying US-origin technology and blocking access to widely used apps such as Google Maps in Huawei's new devices.
AI

Google's Sundar Pichai Doesn't Want You To Be Clear-Eyed About AI's Dangers (techcrunch.com) 71

Alphabet and Google CEO, Sundar Pichai, is the latest tech giant kingpin to make a public call for AI to be regulated while simultaneously encouraging lawmakers towards a dilute enabling framework that does not put any hard limits on what can be done with AI technologies. From a report: In an op-ed published in today's Financial Times, Pichai makes a headline-grabbing call for artificial intelligence to be regulated. But his pitch injects a suggestive undercurrent that puffs up the risk for humanity of not letting technologists get on with business as usual and apply AI at population-scale -- with the Google chief claiming: "AI has the potential to improve billions of lives, and the biggest risk may be failing to do so" -- thereby seeking to frame 'no hard limits' as actually the safest option for humanity. Simultaneously the pitch downplays any negatives that might cloud the greater good that Pichai implies AI will unlock -- presenting "potential negative consequences" as simply the inevitable and necessary price of technological progress. It's all about managing the level of risk, is the leading suggestion, rather than questioning outright whether the use of a hugely risk-laden technology such as facial recognition should actually be viable in a democratic society.
Businesses

Apple CEO Calls For Global Corporate Tax System Overhaul (venturebeat.com) 130

Everyone knows that the global corporate tax system needs to be overhauled, Apple Chief Executive Tim Cook said on Monday, backing changes to global rules that are currently under consideration. From a report: The growth of internet giants such as Apple has pushed international tax rules to the limit, prompting the Organization for Economic Cooperation and Development (OECD) to pursue global reforms over where multinational firms should be taxed. The reforms being examined center around the booking of profits by multinational firms in low-tax countries such as Ireland where they have bases -- and where Cook was speaking on Monday -- rather than where most of their customers are.

"I think logically everybody knows it needs to be rehauled, I would certainly be the last person to say that the current system or the past system was the perfect system. I'm hopeful and optimistic that they (the OECD) will find something," Cook said. "It's very complex to know how to tax a multinational... We desperately want it to be fair," the Apple CEO added after receiving an inaugural award from the Irish state agency responsible for attracting foreign companies recognizing the contribution of multinationals in the country.

Transportation

127 Tesla Owners Complain The Cars Accelerate On Their Own (go.com) 179

UPDATE (1/21/2021): "This petition is completely false and was brought by a Tesla short-seller," says a blog post on Tesla's web site, adding they've investigated every complaint and where data is available it always shows that, as CNN puts it, "Teslas only accelerate when you want them to."

An anonymous reader quoted the Associated Press's report Sunday: The U.S. government's auto safety agency is looking into allegations that all three of Tesla's electric vehicle models can suddenly accelerate on their own. Brian Sparks of Berkeley, California, petitioned the National Highway Traffic Safety Administration asking for an investigation. An agency document shows 127 owner complaints to the government that include 110 crashes and 52 injuries.

The agency said it will look into allegations that cover about 500,000 Tesla vehicles including Model 3, Model S and Model X vehicles from the 2013 through 2019 model years. The agency's investigations office will evaluate the petition and decide if it should open a formal probe...

Frank Borris, a former head of safety defect investigations for NHTSA, said the number of complaints cited in the petition is unusual and warrants further investigation. "The sheer number of complaints would certainly catch my eye," said Borris, who now runs an auto safety consulting business. Tesla owners communicate with other owners on Internet forums and social media, and that could influence the number of complaints, he said. He said the timing of the petition is good, because the agency needs to do a "deeper dive" into Tesla safety.

Some of the unintended acceleration complaints, which have yet to be verified by NHTSA, allege that the cars' electronics malfunctioned.

CNBC points out that Brian Sparks, the man asking for the investigation, "is currently shorting Tesla stock, but has hedged his bets and been long shares of Tesla in the past."

Slashdot Top Deals