Zorro shares a report from The Register: Smart speakers are always listening for wake words, and recording everything they hear to improve their neural networks and target their masters with marketing. It's, frankly, creepy. Academics at the University of Washington in Seattle, USA, however, believe there are benefits to installing a cyber-assistant at home that listens in all the time. "A lot of people have smart speakers in their homes, and these devices have amazing capabilities that we can take advantage of," said Shyam Gollakota, coauthor of the research published this week in npj Digital Medicine. "We envision a contactless system that works by continuously and passively monitoring the bedroom for an agonal breathing event, and alerts anyone nearby to come provide CPR. And then if there's no response, the device can automatically call 911." "When the researchers tested their system on samples from the positive dataset, the devices correctly identified the noises associated with heart attacks about 96 percent of the time when they were placed six meters away from the source of the sound," the report adds. "But there's a catch: it only really works when the researchers apply a noise cancellation algorithm to drown out background noise. The percentage for identifying heart attacks rapidly drops to just below five per cent if a noise cancellation algorithm isn't applied."

Amazon's delivery drones may also be used to offer "surveillance as a service." According to The Verge, "Amazon was recently granted a patent that outlines how its UAVs could keep an eye on customers' property between deliveries while supposedly maintaining their privacy." From the report: The patent was originally filed in June 2015 and became public earlier this month. It describes how the company's drones could be hired to look out for open garage doors, broken windows, graffiti, or even a fire, before alerting the owner of the property. The patent was originally filed in June 2015 and became public earlier this month. It describes how the company's drones could be hired to look out for open garage doors, broken windows, graffiti, or even a fire, before alerting the owner of the property.

An anonymous reader quotes a report from ZDNet: A report published this week by the NASA Office of Inspector General reveals that in April 2018 hackers breached the agency's network and stole approximately 500 MB of data related to Mars missions. The point of entry was a Raspberry Pi device that was connected to the IT network of the NASA Jet Propulsion Laboratory (JPL) without authorization or going through the proper security review. NASA described the hackers as an "advanced persistent threat," a term generally used for nation-state hacking groups.

The latest Google product coming to an end is "Hangouts on Air," a fairly popular service for broadcasting a group video call live over the internet. "Notices saying the service is 'going away later this year' have started to pop up for users when they start a Hangout on Air," reports Ars Technica, noting that Hangouts on Air is completely different from "Google Hangouts," which just so happens to also be shutting down in the not-too-distant future. From the report: Hangouts on Air was popular with podcasters, since it was a super easy way to get a group of people together, on video, and have the conversation broadcasted live. Hangouts on Air started life on Google+ and transitioned to a part of YouTube in 2016, where live group video conversations could be created in the YouTube interface and then be recorded as a video for your YouTube channel. The service had great features like chat, screenshare, and an automatic camera system that would switch to the person that was talking, making it perfect for easy podcast videos. With Hangouts on Air dying, there really is no equivalent, easy way to do a live streamed group video chat. Google's shutdown message points people to YouTube.com/webcam, but that page is only for a single person on a local webcam, not a group video chat.

An anonymous reader quotes a report from TechCrunch: The online behavioral advertising industry is illegally profiling internet users. That's the damning assessment of the U.K.'s data protection regulator in an update report published today, in which it sets out major concerns about the programmatic advertising process known as real-time bidding (RTB), which makes up a large chunk of online advertising. In what sounds like a knock-out blow for highly invasive data-driven ads, the Information Commissioner's Office (ICO) concludes that systematic profiling of web users via invasive tracking technologies such as cookies is in breach of U.K. and pan-EU privacy laws. The U.K. watchdog has not yet issued a formal legal decision against RTB. But with this report it's giving the industry a clear signal that practices must change.

secwatcher shares a report from Threatpost: Millions of PCs made by Dell and other OEMs are vulnerable to a flaw stemming from a component in pre-installed SupportAssist software. The flaw could enable a remote attacker to completely takeover affected devices. The high-severity vulnerability (CVE-2019-12280) stems from a component in SupportAssist, a proactive monitoring software pre-installed on PCs with automatic failure detection and notifications for Dell devices. That component is made by a company called PC-Doctor, which develops hardware-diagnostic software for various PC and laptop original equipment manufacturers (OEMs). A patch has been issued by PC-Doctor that fixes impacted devices. Impacted customers can find the latest version of SupportAssist here (for single PC users) or here (for IT managers).

Freshly Exhumed shares a report from The Georgia Straight: The Quebec-based Desjardins Group has admitted to being victimized by one of the largest data breaches in Canadian history. Laval police informed the financial-services giant that personal information of more than 2.9 million members has been shared with people outside of the organization. This includes 2.7 million people and 173,000 businesses. "This situation is the outcome of unauthorized and illegal use of our internal data by an employee who has since been fired," Desjardins said in a statement. "In light of these events, and given the circumstances, additional security measures were put in place on all accounts." Desjardins, which is the largest federation of credit unions in North America, will be informing people by letters if they've been affected. The leaked data included first and last names, birthdates, social insurance numbers, addresses, phone numbers, email addresses, and details about banking habits. However, passwords, security questions, and PINs were not disclosed.

An anonymous reader quotes a report from Motherboard: The Oregon Department of Corrections has banned prisoners from reading a number of books related to technology and programming, citing concerns about security. According to public records obtained by the Salem Reporter, the Oregon Department of Corrections has banned dozens of books related to programming and technology as they come through the mail room, ensuring that they don't get to the hands of prisoners. At least in official department code, there is no blanket ban on technology-related books. Instead, each book is individually evaluated to assess potential threats. Many programming-related books are cited as "material that threatens," often including the subject matter ("computer programming") as justification. The Oregon Department of Corrections (DOC) worries that prisoners could use the tools mentioned in some of the programming-related books to compromise their systems. But what's odd is the scope of the ban. Justin Seitz's Black Hat Python book failed the prison's security test since it's geared towards hacking, but so did the book Windows 10 for Dummies, Microsoft Excel 16 for Dummies which simply teaches proficiency in Excel and Windows 10.

Officials at the DOC argue that knowledge of even these basic programs can pose a threat to prisons. "Not only do we have to think about classic prison escape and riot efforts like digging holes, jumping fences and starting fires, modernity requires that we also protect our prisons and the public against data system breaches and malware," DOC spokesperson Jennifer Black said in an emailed statement. "It is a balancing act we are actively trying to achieve."

In May, Facebook co-founder Chris Hughes shocked many when he expressed grave concerns about Facebook's CEO, its business and its impact on the world. He went as far as suggesting that Facebook should be broken up. Two months later, Hughes has another interesting remark to share. He has warned that Facebook's new planned digital currency Libra would shift monetary power to corporate giants. [Editor's note: the link may be paywalled; alternative source.] In an op-ed he wrote today: If even modestly successful, Libra would hand over much of the control of monetary policy from central banks to these private companies, which also include Visa, Uber, and Vodafone. If global regulators don't act now, it could very soon be too late. I've been a cryptocurrency sceptic, believing that the instability and regulatory challenges are just too sizeable. But Libra is different because it is a "stablecoin", with a value pegged to a basket of currencies and other assets. Anyone, whether they use Facebook or not, can buy in with a local currency and cash back out at any time. Vital decisions about Libra's administration, security and underlying assets will be made by the Switzerland-based Libra Association -- essentially Facebook and its largely corporate partners. To avoid complaints that setting up this coin would give a single company dangerous powers, Facebook has smartly limited itself to a single vote on the commission.

That doesn't make the prospect of Libra's success any less frightening. This currency would insert a powerful new corporate layer of monetary control between central banks and individuals. Inevitably, these companies will put their private interests -- profits and influence -- ahead of public ones. [...] The Libra Association's goals specifically say that ability will encourage "decentralised forms of governance." In other words, Libra will disrupt and weaken nation states by enabling people to move out of unstable local currencies and into a currency denominated in dollars and euros and managed by corporations. The Libra Association promises to choose stable currencies and assets unlikely to suffer inflationary crises. The sponsors are right that a liquid, stable currency would be attractive to many in emerging markets. So attractive, in fact, that if enough people trade out of their local currencies, they could threaten the ability of emerging market governments to control their monetary supply, the local means of exchange, and, in some cases, their ability to impose capital controls.

It's just over two weeks until AMD's full Ryzen 3000 family of processors arrive, and it appears Intel is concerned about the effect they may have on its own chip sales. From a report: As such, the company is reportedly planning to reduce the price of its eighth- and ninth-generation CPUs by 10 to 15 percent. The report comes from DigiTimes, citing sources from motherboard makers. It claims Intel has already notified its downstream PC and motherboard partners about the processor price drops, which could see anything from $25 to $75 knocked off the CPUs. If the report is accurate, the enthusiast eight-core/16-thread Core i9 9900K will be one of the chips to see a price reduction, as will the i7-9700K, and the i5-9600K.

WeTransfer, a popular online service to transfer and share files, has informed some of its customers of a security incident that resulted in it sharing emails with download links to wrong recipients. BetaNews reports: In the email to customers, WeTransfer said: "We are writing to let you know about a security incident in which a number of WeTransfer service emails were sent to the wrong people. This happened on June 16th and 17th. Our team has been working tirelessly to correct and contain this situation and find out how it happened. We have learned that a transfer you sent or received was also delivered to some people it was not meant to go to. Our records show those files have been accessed, but almost certainly by the intended recipient. Nevertheless, as a precaution we blocked the link to prevent further downloads.

As Facebook grapples with the spread of hate speech on its platform, it is introducing changes that limit the spread of messages in two countries where it has come under fire in recent years: Sri Lanka and Myanmar. From a report: In a blog post on Thursday evening, Facebook said that it was "adding friction" to message forwarding for Messenger users in Sri Lanka so that people could only share a particular message a certain number of times. The limit is currently set to five people. In Myanmar, social media platforms have faced a similar, long-lasting challenge. Facebook said it has started to reduce the distribution of content from people in Myanmar who have consistently violated its community standards with previous posts.

Even though Google launched confidential mode over a year ago, people are still confused about what it does. Is it actually secure or private? Is it encrypted? From a report: When you turn it on, does it prevent Google from reading your messages? The answer to these questions is 'no.' In fact, the decision to call it "confidential" suggests a level of security and privacy that doesn't exist in Gmail confidential mode. Gmail's confidential mode does not mean your messages are end-to-end encrypted. Google can still read them. Expiring messages aren't erased for good, and the recipient can always take a screenshot of your message.

Gmail's confidential mode does not make emails private because Google can always read them. When you send an email with confidential mode turned on, Google keeps the email contents on its servers. Other Gmail users can read the email in their inbox, but outside users only receive an email notifying them that a sender "has sent you an email via Gmail confidential mode" along with a link to a page on google.com.

Aerospace firms are joining forces to tackle their industry's growing contribution to greenhouse gas emissions, with electric engines seen as one solution. But will this be enough to offset the growing demand for air travel? From a report: This week's Paris Airshow saw the launch of the world's first commercial all-electric passenger aircraft -- albeit in prototype form. Israeli firm Eviation says the craft -- called Alice -- will carry nine passengers for up to 650 miles (1,040km) at 10,000ft (3,000m) at 276mph (440km/h). It is expected to enter service in 2022. Alice is an unconventional-looking craft: powered by three rear-facing pusher-propellers, one in the tail and two counter-rotating props at the wingtips to counter the effects of drag. It also has a flat lower fuselage to aid lift.

[...] Eviation has already received its first orders. US regional airline Cape Air, which operates a fleet of 90 aircraft, has agreed to buy a "double-digit" number of the aircraft. The firm is using Siemens and magniX to provide the electric motors, and magniX chief executive Roei Ganzarski says that with two billion air tickets sold each year for flights of under 500 miles, the business potential for small electric passenger aircraft is clear. Crucially, electricity is much cheaper than conventional fuel. A small aircraft, like a turbo-prop Cessna Caravan, will use $400 on conventional fuel for a 100-mile flight, says Mr Ganzarski. But with electricity "it'll be between $8-$12, which means much lower costs per flight-hour".

An anonymous reader shares a report: The news that Ubuntu will drop support for the 32-bit x86 architecture was discussed recently by the Wine developers, on the Wine-devel mailing list. The Wine developers are concerned with this news because many 64-bit Windows applications still use a 32-bit installer, or some 32-bit components. "In practice, the only cases where 64-bit only wine will be useful are when 64-bit applications are packaged some other way (such as a .zip, Steam Play, or packaging specifically for Wine) or for running Wine builtins like msidb." Ubuntu's solution for using Wine on 32-bit going forward, which is to publish applications as snaps, or use an Ubuntu 18.04 LTS based LXD container that has full access to multiarch 32-bit WINE and related libraries, was also discussed by the Wine developers, with Vincent Povirk of CodeWeavers saying that there's no point putting much effort into this temporary solution. The maintainer of the Wine OBS repository also mentioned that he has no interest in maintaining so many libraries.

An anonymous reader quotes a report from The Wall Street Journal: Google's ubiquitous internet platform shapes what's real and what isn't for more than two billion monthly users. Yet Google Maps is overrun with millions of false business addresses and fake names, according to advertisers, search experts and current and former Google employees. The ruse lures the unsuspecting to what appear to be Google-suggested local businesses, a costly and dangerous deception. Once considered a sleepy, low-margin business by the company and known mostly for giving travel directions, Google Maps in recent months has packed more ads onto its search queries. It is central to Google parent Alphabet's hope to recharge a cresting digital-advertising operation.

Often, Google Maps yields mirages, visible in local business searches of U.S. cities, including Mountain View, Calif., Google's hometown. Of a dozen addresses for personal-injury attorneys on Google Maps during a recent search, only one office was real. A Viennese patisserie was among the businesses at addresses purported to house lawyers. The fakes vanished after inquiries to Google from The Wall Street Journal. The false listings benefit businesses seeking more customer calls by sprinkling made-up branches in various corners of a city. In other cases, as Ms. Carter discovered, calls to listed phone numbers connect to unscrupulous competitors, a misdirection forbidden by Google rules but sporadically policed by the company. Hundreds of thousands of false listings sprout on Google Maps each month, according to experts. Google says it catches many others before they appear. According to the report, Google Maps is estimated to carry "roughly 11 million falsely listed businesses on any given day," and a majority of the listings "aren't located at their pushpins."

Google didn't provide its own figure, but they did say that false map listings are a small percentage of the total. A 2017 academic study that the company paid for found that 0.5% of local searches examined on the service had yielded fake results. But that's likely because "Google provided limited data and diluted the study with listings for restaurants, hotels and other businesses that rarely post false locations," the report says.

PolygamousRanchKid shares a report from Reuters: The United States has told India it is considering caps on H-1B work visas for nations that force foreign companies to store data locally, three sources with knowledge of the matter told Reuters, widening the two countries' row over tariffs and trade. India, which has upset companies such as Mastercard and irked the U.S. government with stringent new rules on data storage, is the largest recipient of these temporary visas, most of them to workers at big Indian technology firms.

A Washington-based industry source aware of India-U.S. negotiations also said the United States was deliberating capping the number of H-1B visas in response to global data storage rules. The move, however, was not solely targeted at India, the source said. Most affected by any such caps would be India's more than $150 billion IT sector, including Tata Consultancy Services (TCS) and Infosys Ltd, which uses H-1B visas to fly engineers and developers to service clients in the United States, its biggest market. Major Silicon Valley tech companies also hire workers using the visas. Since last year, the Trump administration has been upset that U.S. companies such as Mastercard and Visa suffer due to regulations in several countries that it says are protectionist and increasingly require companies to store more data locally. India last year mandated foreign firms to store their payments data 'only in India' for supervision, and New Delhi is working on a broad data protection law that would impose strict rules for local processing of data it considers sensitive. Senior Indian government officials were briefed last week on a U.S. plan to cap H-1B visas issued each year to Indians at between 10% and 15% of the annual quota. Currently, there is no country-specific limit on the 85,000 H-1B work visas granted each year, and an estimated 70% go to Indians.

"Signify, the company formerly known as Philips Lighting that produces Hue-branded smart lights, has announced a new range of internet-transmitting Li-Fi lights called Truelifi," reports The Verge. The lights are capable of transmitting data to devices at speeds of up to 150 Mbps using light waves, rather than the radio signals used by 4G or Wi-Fi. The technology, which can be retrofitted into existing lighting, "can also be used to wirelessly connect two fixed points with data speeds of up to 250 Mbps." From the report: Li-Fi technology has been around for years but so far it's failed to take off. Most internet-connected devices like laptops and smartphones need an external adapter to receive data over Li-Fi, and even then the signal can be blocked when the receiver is in shadow. Signify says you'll need to plug a USB access key into a laptop to receive a Li-Fi signal from its Truelifi products. In the right circumstances, however, Li-Fi's use of light rather than radio signals to transmit data has its advantages. For example, it can be used in areas where there might be a lot of radio frequency interference, or in places like hospitals where RF could interfere with sensitive machines. While Li-Fi signals can be easily blocked, this disadvantage can be a boon to security applications since you have a lot more control over where the network spreads.

mrspoonsi shares a report from the Guardian: Facebook usage has plummeted over the last year, according to data seen by the Guardian, though the company says usage by other measures continues to grow. Since April 2018, the first full month after news of the Cambridge Analytica scandal broke in the Observer, actions on Facebook such as likes, shares and posts have dropped by almost 20%, according to the business analytics firm Mixpanel. Taking that month as a baseline, total actions fell by more that 10% within a month, recovered a bit over the summer and then fell again over the autumn and winter of 2018, except for a brief rally over the period of the U.S. midterm elections.

The decline coincided with a series of data, privacy and hate speech scandals. In September the company discovered a breach affecting 50 million accounts, in November it admitted that an executive hired a PR firm to attack the philanthropist George Soros, and it has been repeatedly criticized for allowing its platform to be used to fuel ethnic cleansing in Myanmar. "On top of that, Facebook has continued to lose younger users, who are spreading their time and attention across other social platforms and digital activities," eMarketer said.

Google on Thursday confirmed that a bug in its Nest security cameras could have allowed users to be spied on. The Daily Dot reports: The issue was first raised by a user on Facebook who recently sold his Nest Cam Indoor yet was still able to access its feed. The problem involves Wink, an app that lets people manage multiple smart devices regardless of their developer. The Facebook user noted that despite carrying out a factory reset on his Nest camera before selling it, his Wink account remained connected to the device, allowing him to view snapshots of the buyer's live feed.

Wirecutter tested the vulnerability on its own Nest Cam by linking it to a Wink account and then performing a factory reset. The publication also found it was receiving "a series of still images snapped every several seconds" via its Wink account. "In simpler terms: If you buy and set up a used Nest indoor camera that has been paired with a Wink hub, the previous owner may have unfettered access to images from that camera," Wirecutter says. "And we currently don't know of any cure for this problem." Google responded to the report and said it has fixed the problem. "We were recently made aware of an issue affecting some Nest cameras connected to third-party partner services via Works with Nest," a spokesperson told Wirecutter. "We've since rolled out a fix for this issue that will update automatically, so if you own a Nest camera, there's no need to take any action."