IOS

iPadOS Discoverability Trouble (mondaynote.com) 41

Apple this year differentiated the iPad by creating a superset of iOS that only works on the company's tablet, the cleanly named iPadOS. In theory, iPadOS fixes the many shortcomings of previous iOS versions that tried to serve two masters, the iPad and the iPhone. But some fundamental issues remain. From a column: Apple's iPadOS page is adamant that a world of possibilities is now "ours." The "Features" section provides a long, long list of new iPad talents. Without getting into the embarrassing details about the klutziness that makes me a good product tester because I tend to do things that knowledgeable users already know how to do, I'm confused and frustrated by all of these "possibilities." For relatively simple tasks such as using multiple apps side by side or opening more than one window for an app such as Pages, the iPad support site is cryptic and, in some cases, just plain wrong. As just one example, the on-line guidance advises: "go to Settings > General > Multitasking & Dock..." Trouble is, the General section of Settings on my iPad Pro doesn't have a Multitasking & Dock section. A little bit of foraging gets me to the Home Screen & Dock section where, yes, the Multitasking adjustments are available.

On the positive side, one now has a real Safari browser, equivalent in most regards to the "desktop" version, and the ability to open two independent windows side by side. Because I feel self-conscious about my mental and motor skills, I compared notes with a learned friend, a persistent fellow who forced himself to learn touch typing by erasing the letters on his keyboard. He, too, finds iPadOS discoverability to be severely lacking. There are lot of new and possibly helpful features but, unlike the 1984 Mac, not enough in the way of the hints that menu bars and pull-down menus provide. It all feels unfinished, a long, long list of potentially winning features that are out of the reach of this mere mortal and that I assume will remain undiscovered by many others. Kvetching aside, we know that Apple plays the long game. Today's stylus equipped and mouse-capable iPad shows great promise. (I connected my trusted Microsoft Mouse and its two buttons and wheel -- no problem.) It clearly has the potential to become a multifaceted device capable of a wide range of interactions. From the simplest one-finger control enjoyed by children and adults alike to the windows and pointing device interactions "power users" hope for, the iPad shows great potential -- and the need for more work to make the new features more discoverable.

Chrome

Chrome 78 Arrives With New APIs, Dark Mode Improvements On Android and iOS 45

An anonymous reader quotes a report from VentureBeat: Google today launched Chrome 78 for Windows, Mac, Linux, Android, and iOS. The release includes the CSS Properties and Values API, Native File System API, new Origin Trials, and dark mode improvements on Android and iOS. You can update to the latest version now using Chrome's built-in updater or download it directly from google.com/chrome. With over 1 billion users, Chrome is both a browser and a major platform that web developers must consider. In fact, with Chrome's regular additions and changes, developers often have to stay on top of everything available -- as well as what has been deprecated or removed. Chrome 78, for example, removes the XSS Auditor due to privacy concerns. Chrome 78 implements the CSS Properties and Values API to let developers register variables as full custom properties. There's a new Native File System API that lets developers build web apps that interact with files on the user's local device. Chrome 78 adds to the Original Trials introduced in Chrome 77, such as Signed Exchanges and SMS Receiver API. "The former allow a distributor to provide content signed by a publisher," reports VentureBeat. "The latter allows websites to access SMS messages that are delivered to the user's phone."

Other features that are rolling out gradually include the ability to be able to highlight and right-click a phone number link in Chrome and forward the call to their Android device. "Some users might also see an option to share their clipboard content between their computers and Android devices," adds VentureBeat. "Chrome is also getting Google Drive integration. From Chrome's address bar, you will be able to search for Google Drive files that you have access to."
Microsoft

Multifactor Authentication Issue Hitting North American Azure, Office 365 Users (zdnet.com) 40

A widespread multifactor authentication (MFA) issue is hitting a number of Microsoft customers in North America this morning. From a report: The exact cause of the problem is not clear at the moment, but Microsoft's engineering team says it is working on it. "Customers in North America are experiencing issues with Sign-in when Multi-Factor Authentication is enabled. Engineering team is currently investigating the issue and will send out an update as soon as possible." The Microsoft 365 Status twitter account, as of 10:45 a.m. ET, said: "We're investigating issues where users may be unable to access the admin center when using MFA. We'll provide an update shortly." I've asked Microsoft for an update. No word back so far. Users are reporting they cannot sign into Office 365 or access any of their Office 365 apps and services. Office 365 uses Azure Active Directory for authentication.
The Courts

Supreme Court Allows Blind People To Sue Retailers If Their Websites Are Not Accessible (latimes.com) 196

The Supreme Court on Monday cleared the way Monday for blind people to sue retailers if their websites are not accessible to these people. "In a potentially far-reaching move, the justices turned down an appeal from Domino's and let stand a 9th Circuit Court of Appeals ruling holding that the Americans With Disabilities Act protects access not just to restaurants and stores, but also to the websites and apps of those businesses," reports Los Angeles Times. From the report: Guillermo Robles, who is blind, filed suit in Los Angeles three years ago and complained he had been unable to order a pizza online because the Domino's website lacked the software that would allow him to communicate. He cited the ADA, which guarantees to persons with a disability "full and equal enjoyment the goods and services ... of any place of public accommodations." Lawyers for Domino's agreed this provision applied to its pizza stores, but not its website.

Last year, however, the 9th Circuit ruled for Robles and said the law applied to its online services as well as the store. "The ADA mandates that places of public accommodation, like Domino's, provide auxiliary aids and services to make visual materials available to individuals who are blind," the appeals court said in January. The U.S. Chamber of Commerce and business groups who said they represented 500,000 restaurants and 300,000 businesses joined in an appeal urging the high court to review the 9th Circuit's decision. They said they feared a "tsunami of litigation," and worried that judges nationwide would see the appeals court's decision as "imposing a nationwide website-accessibility mandate." But without comment or dissent on Monday, the high court said it would not hear the case of Domino's Pizza vs. Robles.

Android

The Privacy Trade-Offs of Cheap Android Smartphones (fastcompany.com) 22

Fast Company highlights some of the "privacy nightmares" surrounding low-cost Android smartphones, which can be very attractive for those on a tight budget. One example is the MYA2 MyPhone: According to an analysis by the advocacy group Privacy International, a $17 Android smartphone called MYA2 MyPhone, which was launched in December 2017, has a host of privacy problems that make its owner vulnerable to hackers and to data-hungry tech companies. First, it comes with an outdated version of Android with known security vulnerabilities that can't be updated or patched. The MYA2 also has apps that can't be updated or deleted, and those apps contain multiple security and privacy flaws. One of those pre-installed apps that can't be removed, Facebook Lite, gets default permission to track everywhere you go, upload all your contacts, and read your phone's calendar. The fact that Facebook Lite can't be removed is especially worrying because the app suffered a major privacy snafu earlier this year when hundreds of millions of Facebook Lite users had their passwords exposed.

Philippines-based MyPhone said the specs of the MYA2 limited it to shipping the phone with Android 6.0, and since then it says it has "lost access and support to update the apps we have pre-installed" with the device. Given that the MYA2 phone, like many low-cost Android smartphones, runs outdated versions of the Android OS and can't be updated due to their hardware limitations, users of such phones are limited to relatively light privacy protections compared to what modern OSes, like Android 10, offer today. The MYA2 is just one example of how cheap smartphones leak personal information, provide few if any privacy protections, and are incredibly easy to hack compared to their more expensive counterparts.

Cellphones

Purism's Librem 5 Phone Starts Shipping. It Can Run Linux Desktop Apps (arstechnica.com) 46

On Tuesday Purism announced their first Librem 5 smartphones were rolling off the assembly line and heading to customers. "Seeing the amazing effort of the Purism team, and holding the first fully functioning Librem 5, has been the most inspirational moment of Purism's five year history," said their founder and CEO Todd Weaver.

On Wednesday they posted a video announcing that the phones were now shipping, and Friday they posted a short walk-through video. "The crowdsourced $700 Linux phone is actually becoming a real product," reports Ars Technica: Purism's demand that everything be open means most of the major component manufacturers were out of the question. Perhaps because of the limited hardware options, the internal construction of the Librem 5 is absolutely wild. While smartphones today are mostly a single mainboard with every component integrated into it, the Librem 5 actually has a pair of M.2 slots that house full-size, off-the-shelf LTE and Wi-Fi cards for connectivity, just like what you would find in an old laptop. The M.2 sockets look massive on top of the tiny phone motherboard, but you could probably replace or upgrade the cards if you wanted...

[Y]ou're not going to get cutting-edge hardware at a great price with the Librem 5. That's not the point, though. The point is that you are buying a Linux phone, with privacy and open source at the forefront of the design. There are hardware kill switches for the camera, microphone, WiFi/Bluetooth, and baseband on the side of the phone, ensuring none of the I/O turns on unless you want it to. The OS is the Free Software Foundation-endorsed PureOS, a Linux distribution that, in this case, has been reworked with a mobile UI. Purism says it will provide updates for the "lifetime" of the device, which would be a stark contrast to the two years of updates you get with an Android phone.

PureOS is a Debian-based Linux distro, and on the Librem 5, you'll get to switch between mobile versions of the Gnome and KDE environments. If you're at all interested in PureOS, Purism's YouTube page is worth picking through. Dozens of short videos show that, yes, this phone really runs full desktop-class Linux. Those same videos show the dev kit running things like the APT package manager through a terminal, a desktop version of Solitaire, Emacs, the Gnome disk utility, DOSBox, Apache Web Server, and more. If it runs on your desktop Linux computer, it will probably run on the Librem 5, albeit with a possibly not-touch-friendly UI. The Librem 5 can even be hooked up to a monitor, keyboard, and mouse, and you can run all these Linux apps with the normal input tools...

Selling a smartphone is a cutthroat business, and we've seen dozens of companies try and fail over the years. Purism didn't just survive long enough to ship a product -- it survived in what is probably the hardest way possible, by building a non-Android phone with demands that all the hardware components use open code. Making it this far is an amazing accomplishment.

Android

The /e/ Google-Free, Pro-Privacy Android Clone Is Now Available (zdnet.com) 43

An anonymous reader quotes a report from ZDNet: Gael Duval, creator of the popular early Linux distribution, Mandrake Linux, wanted a smartphone, which was open source, would run a wide variety of popular software, and protect your privacy. His answer was the Android-based /e/ operating system and smartphones. While it's still in beta, both its code and refurbished Samsung phones running it are now available. Duval's approach hasn't been to reinvent the mobile operating system wheel, but instead to clean up Android of its Google privacy-invading features and replace them with privacy-respecting one, in which, as Duval said in an interview, "Your data is your data."

To do this, he's started with LineageOS. This is an Android-based operating system, which is descended from the failed CyanogenMod Android fork. According to Duval, the /e/ operating system is a Lineage OS fork. It also blends in features from the Android Open Source Project (AOSP) 7, 8, and 9 source-code trees. In the /e/ OS all Google services have been removed and replaced with MicroG services. MicroG replaces Google's libraries with purely open-source implementations without hooks to Google's services. This includes libraries and apps which provide Google Play, Maps, Geolocation, and Messaging services for the Android applications when they need them. What this means is that you can run some Android apps, which normally only work on a fully Google-enabled Android phone on an /e/ phone. These compatible apps are available via the /e/ app store.
The /e/ platform also comes with its own services, the report notes. For example, its search program uses Qwant, a popular, privacy-first European-based search engine, and for cloud storage, you get /e/'s own cloud, which is based on the open-source NextCloud.

You can download and install /e/ on 85 different smartphone models. You can also buy an /e/ phone today if you're in the EU.
Businesses

Wunderlist Founder Wants To Buy His App Back (venturebeat.com) 31

More than four years after selling his company to Microsoft, 6Wunderkinder cofounder Christian Reber wants to buy the core product back from the software giant. VentureBeat reports: Reber helped start 6Wunderkinder out of Berlin back in 2010, and alongside his 5 cofounders they managed to create one of the most popular productivity apps on the market in the form of Wunderlist, raising some $35 million in investors' cash along the way. Fast forward to 2015, and Microsoft came a-callin', snapping up the startup for a figure reported to be in the region of $100-$200 million. As is typical when any popular independent service is acquired by a corporate giant, the Wunderlist community soon wondered whether Microsoft would kill or otherwise ruin the app, with rival Todoist going all out to lure over worried Wunderlist users. Users' fears were justified -- Microsoft announced in 2017 that it would eventually retire Wunderlist, as it transitioned its best features to a new productivity app called To-Do. No time frame was ever given for this transition, and there were some technical complications with this transfer of features between the apps -- as recently as a few days ago, Wunderlist was still unable to provide a date for its final demise.

Now, however, Reber has taken to Twitter to ask Microsoft and even CEO Satya Nadella to sell the Wunderlist app back to him. "Still sad @Microsoft wants to shut down @Wunderlist, even though people still love and use it," he said. "I'm serious @satyanadella @marcusash, please let me buy it back." It's unclear what Microsoft's near-term plans are for Wunderlist, or whether it would really consider helping one of the original creators rescue the app from the scrap heap.

United States

Feds Order Apple and Google To Hand Over Names of 10,000+ Users of Gun Scope App (forbes.com) 123

An anonymous reader quotes a report from Forbes: Own a rifle? Got a scope to go with it? The government might soon know who you are, where you live and how to reach you. That's because Apple and Google have been ordered by the U.S. government to hand over names, phone numbers and other identifying data of at least 10,000 users of a single gun scope app, Forbes has discovered. It's an unprecedented move: never before has a case been disclosed in which American investigators demanded personal data of users of a single app from Apple and Google. And never has an order been made public where the feds have asked the Silicon Valley giants for info on so many thousands of people in one go.

According to a court order filed by the Department of Justice (DOJ) on 5 September, investigators want information on users of Obsidian 4, a tool used to control rifle scopes made by night vision specialist American Technologies Network Corp. The app allows gun owners to get a live stream, take video and calibrate their gun scope from an Android or iPhone device. According to the Google Play page for Obsidian 4, it has more than 10,000 downloads. Apple doesn't provide download numbers, so it's unclear how many iPhone owners have been swept up in this latest government data grab. The Immigration and Customs Enforcement (ICE) department is seeking information as part of a broad investigation into possible breaches of weapons export regulations. It's looking into illegal exports of ATN's scope, though the company itself isn't under investigation, according to the order. As part of that, investigators are looking for a quick way to find out where the app is in use, as that will likely indicate where the hardware has been shipped. ICE has repeatedly intercepted illegal shipments of the scope, which is controlled under the International Traffic in Arms Regulation (ITAR), according to the government court filing. They included shipments to Canada, the Netherlands and Hong Kong where the necessary licenses hadn't been obtained.
The two companies must hand over names, telephone numbers and IP addresses of anyone who downloaded the scope app from August 1, 2017, to the current date. The government also wants to know when users were operating the app.
Facebook

Facebook Wants To Be the Hot New Dating App (fastcompany.com) 87

An anonymous reader quotes a report from Fast Company: In spring 2018, Facebook announced that it was launching its own version of Tinder -- but designed for people who are interested in meaningful relationships. Now, after rolling out in 19 countries including Colombia, Thailand, and Canada, Facebook's dating service is available in the United States. Instead of the rapid-fire swiping found in many dating apps like Tinder and Bumble, Facebook Dating users have to tap into each profile before they can "pass" on someone or express interest by sending them a message (there is no mutual interest necessary for someone to start a conversation, which could cause problems for women who already face harassment and unsolicited messages on dating apps). The company's algorithm selects matches for you based on location -- which you verify using location services on your phone -- along with your stated preference and interests that you've indicated on Facebook. The service is entirely opt-in, for people ages 18 and over, and you won't ever be matched with your friends.

A key element of helping people get to know potential matches is Instagram. For the U.S. launch, Facebook Dating will enable you to include photos from your Instagram feed inside your dating profile, and by the end of the year, users will be able to directly add Instagram stories to Dating as well, allowing potential future matches and people you're already conversing with to be able to get a sense of the slightly less filtered version of your life. "We think it's incredibly important to go where people are and allow them to bring all of these different networks and types of content to help them get the things they're trying to do done," says Fidji Simo, a vice president at Facebook and head of the Facebook app.
Even though Dating is integrated directly into Facebook's app, the company has worked to create an entirely separate experience, including a separate profile and separate message thread.

"Facebook also says that none of your activity on Dating will be used for advertising, based on people's feedback about privacy (something Facebook has historically failed to provide)," reports Fast Company. "Facebook does put that data to use though: Information the company collects on you will be used to inform future matches that it shows you."
China

Chinese Deepfake App Zao Sparks Privacy Row After Going Viral (theguardian.com) 32

A Chinese app that lets users convincingly swap their faces with film or TV characters has rapidly become one of the country's most downloaded apps, triggering a privacy row. From a report: Released on Friday, the Zao app went viral as Chinese users seized on the chance to see themselves act out scenes from well-known movies using deepfake technology, which has already prompted concerns elsewhere over potential misuse. Users provide a series of selfies in which they blink, move their mouths and make facial expressions, which the app uses to realistically morph the person's animated likeness on to movies, TV shows or other content.

The company was forced to issue a statement on Sunday pledging changes after critics attacked the app's privacy policy, which it had "free, irrevocable, permanent, transferable, and relicenseable" rights to all user-generated content. There has been growing concern over deepfakes, which use artificial intelligence to appear genuine. Critics say the technology can be used to create bogus videos to manipulate elections, defame someone, or potentially cause unrest by spreading misinformation on a massive scale. "We understand the concerns about privacy. We've received the feedback, and will fix the issues that we didn't take into consideration, which will take some time," a statement released by Zao said. Zao is owned by Momo Inc, a Tinder-like dating service that is listed on the US Nasdaq.

Android

Huawei's Next Phone Will Not Have Google Apps 42

Huawei's next flagship smartphone will not come with Google's popular apps, such as Maps, YouTube, and Drive. The BBC reports: Google confirmed that due to a U.S. government ban on sales to Huawei, it could not license its apps to the Chinese smartphone giant. It also means the next Huawei phone will not have access to the Google Play app store, which could leave customers without access to other popular apps. The U.S. government restricted American companies from selling products and services to Huawei in May, citing national security concerns, which Huawei rejects.

Huawei is just weeks away from launching its next flagship phone, the Mate 30 Pro. It will be Huawei's first major phone launch since the U.S. restrictions were applied in May. But analysts say launching without Google's apps in Europe will be a major blow. Consumers expect to have access to all the major apps they are used to - including Maps and YouTube. Without them, Huawei's phones will seem a lot less appealing. And losing the Play Store means Huawei will need to provide another way for customers to access other popular apps such as Facebook, Twitter and BBC News.
Huawei said in a statement: "Huawei will continue to use the Android OS and ecosystem if the U.S. government allows us to do so. Otherwise, we will continue to develop our own operating system and ecosystem."

Tom's Guide notes that consumers can still download apps from APK repositories like APKmirror.com. "While this is certainly a nuisance, it's far from crippling."
Businesses

DoorDash Still Pockets Workers' Tips Almost a Month After It Promised To Stop (vox.com) 81

DoorDash, the leading food delivery app in the U.S., is still pocketing workers' tips, despite announcing last month that it would stop the practice and change its tipping policies. The announcement was made after a report from The New York Times highlighted how the company uses tips to make up the worker's base pay -- essentially stealing the money you're trying to give someone to maximize their profits. Vox reports: At the time, CEO Tony Xu announced in a series of tweets that DoorDash would institute a new model to ensure workers' earnings would "increase by the exact amount a customer tips on every order." Xu promised to provide "specific details in the coming days." The next day, Xu sent out a note to DoorDash workers, broadly outlining changes and letting them know âoewhat to expect in the days ahead."

But 27 days later, current DoorDash workers tell Recode that the company's pay and tipping policies have stayed the same. The company has not made any public statements about its worker pay and how it plans to institute the changes, nor has it offered a specific date when it will fulfill its promise. A spokesperson declined to comment about the company's plans to change its tipping policy.
Soon after DoorDash's years-long tipping scheme was mentioned in the NYT's report, a class-action lawsuit was filed against the company for misleading its customers about how their tips were used. The lawsuit, filed at the end of July, claims that DoorDash failed to make clear to its customers that tips they gave through its app to couriers were not being allocated as they were intended to be, and that had customers known this, they would not have tipped through the app.
Microsoft

Windows Update To Fix Critical 'Wormable' Flaws May Break VB Apps (zdnet.com) 20

"This week's Windows updates fix critical 'wormable' [Bluekeep] flaws but may also break Visual Basic apps, macros, and scripts," warns ZDNet: "After installing this update, applications that were made using Visual Basic 6 (VB6), macros using Visual Basic for Applications (VBA), and scripts or apps using Visual Basic Scripting Edition (VBScript) may stop responding and you may receive an 'invalid procedure call error'," Microsoft says. The issue affects all supported versions of Windows 10, Windows 7, Windows 8.1, and their corresponding server versions. "Microsoft is presently investigating this issue and will provide an update when available," the company said.

Microsoft didn't offer an explanation for the problem but it did flag earlier this month that it will move ahead with sunsetting VBScript, by disabling it in IE11 by default via an update in this week's patch. "The change to disable VBScript will take effect in the upcoming cumulative updates for Windows 7, 8, and 8.1 on August 13, 2019," Microsoft warned in a blog post. The change brought these versions of Windows in line with Windows 10. However, it's not clear that the issues under investigation are related to this measure. Regardless of the cause, the error could be a hassle for organizations that rely on Microsoft's various incarnations of Visual Basic...

In a blog post shared by Slashdot reader CaptainDork, Microsoft warned that "any future malware that exploits these could propagate from vulnerable computer to vulnerable computer without user interaction."

"The affected versions of Windows are Windows 7 SP1, Windows Server 2008 R2 SP1, Windows Server 2012, Windows 8.1, Windows Server 2012 R2, and all supported versions of Windows 10, including server versions."
Youtube

Watch Out Google, YouTubers Are Unionizing (bloomberg.com) 116

IG Metall, Europe's largest trade union with 2.3 million members, has joined forces with a German YouTuber who set up a Facebook group called The YouTubers Union after his videos started getting "de-monetized." The German metalworkers union is throwing itself in the battle between Google and the millions of people whose income derives from uploading videos to the site. It's inviting YouTubers to become members and is running a campaign called FairTube to press for better terms.

IG Metall has "given Google a deadline of August 23 to come to the negotiating table," reports Bloomberg. "If it refuses, IG Metall plans to use its deep pockets and army of lawyers to pursue legal options." From the report: So what exactly can IG Metall do? A lawsuit is the most likely next step. The union claims that decisions made to de-monetize a video with no explanation contravene the European Union's General Data Protection Regulation. One strand of the rules, introduced last year, gives people the right to know whether their personal data is being processed, for what purpose, and to request a copy of it all. The union argues that algorithms deciding to stop ads being attached to a clip generate such data. It's a smart play. With the deep pockets afforded by its huge membership, IG Metall is able to contest issues where an individual would struggle.

Notably, the union is trying to use the same tool of its members' atomization -- the online platform -- to organize them. Even before it joined forces with the YouTubers Union Facebook group, IG Metall had launched an initiative called FairCrowd, a website where gig economy workers provide feedback on the apps they work for. It's not that far from its home turf: IG Metall already represents employees at tech companies like SAP SE.

Operating Systems

Why Canonical Views the Snap Ecosystem as a Compelling Distribution-Agnostic Solution (techrepublic.com) 93

Canonical's Martin Wimpress addresses Snaps, Flatpak, and other competing standards, and community unease around Canonical's control of the Snap store. intensivevocoder writes: With these advances in hardware support, the last significant challenge users face when switching from Windows or Mac to a Linux distribution is app distribution and installation. While distribution-provided repositories are useful for most open source software, the release model of distributions such as Ubuntu or Fedora lock in users to a major version for programs for the duration of a particular release. Because of differences in how they interact with the underlying system, certain configuration tasks are different between Snaps or Flatpaks than for directly-installed applications. Likewise, initial commits for the Snap and Flatpak formats were days apart -- while the formats were developed essentially in parallel, the existence of two 'universal' package formats has led to disagreement about competing standards. TechRepublic interviewed Martin Wimpress, engineering manager for Snapcraft at Canonical, about Ubuntu's long term plans for Snaps, its adoption and support in other Linux distributions, Canonical's position as the operator of the Snap Store, and the benefits Snaps provide over Flatpak. An excerpt from the interview: TechRepublic: Practically speaking, there are two competing standards for cross-platform application packaging -- three, if you count AppImage. What's the practical benefit that Canonical's Snap format offers over Flatpak or AppImage?
Martin Wimpress: If you look at the initial commits of both of those projects, Snaps have a lineage back to Click packages, which were developed for [Ubuntu Phone] originally. The Snap project developed out of what had been learned from doing the phones, with a view to solving problems in IoT. So, although technically snapd and xdg-apps -- and consequently Flatpak -- look like they emerged around the same time, Snaps can trace their lineage back to the Click project from several years previous. If we're looking at Flatpak specifically, we can probably include AppImage in most of these comparisons as well. Some of the similarities are that Snaps are self-contained software packages, which is something that Flatpak and AppImage strive to be as well. I think that Flatpak achieves that better than AppImage. I think AppImage still makes some assumptions on what's installed on the host operating system. It doesn't bundle everything inside the AppImage. Similarly, Snaps, Flatpak, and AppImage work across all the major Linux distributions without modification. We haven't all arrived at this solution by accident. We've clearly, independently, all realized that this is a problem that we need to solve in order to encourage software vendors to publish their applications on Linux, because Linux is a very broad platform to target. If you can lower the hurdles... to getting your software in front of users on Linux, then that's a good thing. And we're all aiming to do the same thing there.

Facebook

Did WhatsApp Backdoor Rumor Come From 'Unanswered Questions ' and 'Leap of Faith' For Closed-Source Encryption Products? (forbes.com) 105

On Friday technologist Bruce Schneier wrote that after reviewing responses from WhatsApp, he's concluded that reports of a pre-encryption backdoor are a false alarm. He also says he got an equally strong confirmation from WhatsApp's Privacy Policy Manager Nate Cardozo, who Facebook hired last December from the EFF. "He basically leveraged his historical reputation to assure me that WhatsApp, and Facebook in general, would never do something like this."

Schneier has also added the words "This story is wrong" to his original blog post. "The only source for that post was a Forbes essay by Kalev Leetaru, which links to a previous Forbes essay by him, which links to a video presentation from a Facebook developers conference." But that Forbes contributor has also responded, saying that he'd first asked Facebook three times about when they'd deploy the backdoor in WhatsApp -- and never received a response.

Asked again on July 25th the company's plans for "moderating end to end encrypted conversations such as WhatsApp by using on device algorithms," a company spokesperson did not dispute the statement, instead pointing to Zuckerberg's blog post calling for precisely such filtering in its end-to-end encrypted products including WhatsApp [apparently this blog post], but declined to comment when asked for more detail about precisely when such an integration might happen... [T]here are myriad unanswered questions, with the company declining to answer any of the questions posed to it regarding why it is investing in building a technology that appears to serve little purpose outside filtering end-to-end encrypted communications and which so precisely matches Zuckerberg's call. Moreover, beyond its F8 presentation, given Zuckerberg's call for filtering of its end-to-end encrypted products, how does the company plan on accomplishing this apparent contradiction with the very meaning of end-to-end encryption?

The company's lack of transparency and unwillingness to answer even the most basic questions about how it plans to balance the protections of end-to-end encryption in its products including WhatsApp with the need to eliminate illegal content reminds us the giant leap of faith we take when we use closed encryption products whose source we cannot review... Governments are increasingly demanding some kind of compromise regarding end-to-end encryption that would permit them to prevent such tools from being used to conduct illegal activity. What would happen if WhatsApp were to receive a lawful court order from a government instructing it to insert such content moderation within the WhatsApp client and provide real-time notification to the government of posts that match the filter, along with a copy of the offending content?

Asked about this scenario, Carl Woog, Director of Communications for WhatsApp, stated that he was not aware of any such cases to date and noted that "we've repeatedly defended end-to-end encryption before the courts, most notably in Brazil." When it was noted that the Brazilian case involved the encryption itself, rather than a court order to install a real-time filter and bypass directly within the client before and after the encryption process at national scale, which would preserve the encryption, Woog initially said he would look into providing a response, but ultimately did not respond.

Given Zuckerberg's call for moderation of the company's end-to-end encryption products and given that Facebook's on-device content moderation appears to answer directly to this call, Woog was asked whether its on-device moderation might be applied in future to its other end-to-end encrypted products rather than WhatsApp. After initially saying he would look into providing a response, Woog ultimately did not respond.

Here's the exact words from Zuckerberg's March blog post. It said Facebook is "working to improve our ability to identify and stop bad actors across our apps by detecting patterns of activity or through other means, even when we can't see the content of the messages, and we will continue to invest in this work. "
Cellphones

The Hottest Phones For the Next Billion Users Aren't Smartphones (wsj.com) 95

Millions of first-time internet consumers from the Ivory Coast to India and Indonesia are connecting to the web on smart feature phones that cost only about $25. "[T]hese hybrid phones, fueled by inexpensive mobile data, provide some basic apps and internet access in addition to calling and texting," the Wall Street Journal reports. From the report: While global smartphone sales began sliding last year as markets became saturated, smart feature phone shipments tripled to around 75 million from 2017, according to research firm Counterpoint. Some 84 million are likely to be shipped this year. Even as rich nations start to roll out 5G technologies, some 3.4 billion people around the world remain cut off from the internet, according to We Are Social, another research firm. Most of them already use traditional, unconnected mobile phones, meaning they can easily make the transition to similarly shaped devices capable of high-speed web connections.

Smart feature phones aren't only inexpensive, but they also have physical keypads that are less intimidating than touch screens for those new to the technology. Meanwhile, their batteries last for days, a bonus in places where electricity is unreliable. There is a trade-off for the low price. The devices typically have slower and less powerful components, only basic cameras and their screens are usually just a few inches in size, factors that contribute to their longer battery life. There also are fewer apps available for smart feature phones.

Microsoft

Making the Case For a Microsoft Surface Phone That Runs Android (windowscentral.com) 73

Zac Bowden from Windows Central makes the case for why Microsoft may want to make a Surface phone that runs Android. An anonymous reader shares an excerpt from the report: While a Surface Phone running Android would never sell to the quantity that Samsung smartphones do (or at least not a first- or second-generation phone), Microsoft could utilize the Surface brand to showcase the best of Microsoft's Android efforts all in one place, just like it has done for Windows PCs. I'm picturing a Surface-branded, Microsoft-built smartphone that comes with Microsoft Launcher, Edge, Office, Your Phone phone-mirroring integration, and more, out of the box. In fact, that's one of four unique selling points that a Surface Phone running Android could have:

-- Showcase the best of Microsoft's efforts on Android.
-- Seamless integration with Windows PCs using Your Phone.
-- Provide the best security and update support on Android.
-- Brand recognition that can rival Apple and Samsung.

That last point is more for Microsoft fans, but the first three are important. A Surface Phone running Android would be the only smartphone out there that's always guaranteed to work with all of Your Phone's features. I have a wide array of Android smartphones, yet 90 percent of them don't support all of Your Phone's features on Windows 10. Screen mirroring is only available on select devices, and while that may improve, there's no guarantee your smartphone will ever get it, or if it'll work well. Microsoft could also provide enhanced features, such as the ability to take cellular phone calls on your PC directly from your Surface Phone. It could also build out dedicated Phone and SMS apps that sync up with the Messages app on your PC, instead of having to relay it through the Your Phone app. There's so much more potential when you build your own Android phone.

Businesses

Need Customer Service For an App? Prepare To Lose Your Mind (wsj.com) 145

App-based services have made our lives easier in so many ways. But when things go awry, they offer few paths to real assistance [Editor's note: the link may be paywalled]. From a report: There's a trade-off between the speed of apps and their ability to provide timely help. Customer service isn't dead, it's just hiding very well, often under a maze of preset menu options that seem designed to make you want to chuck your phone out the window. I recently ordered a Lyft ride from the airport. As the driver loaded my bag into the trunk -- something he didn't seem happy about -- he started talking under his breath. I asked if he was talking to me. His eyes got wide, and he said no, he wasn't. Then he removed my bag and told me I had the wrong car. His license plate matched my app, but he said, "I'm not your ride, baby," before driving off.

Part of me was relieved. But to let Lyft know, I had to spend probably 20 minutes going through endless options for pre-written problems I didn't have. "Something happened during my ride" got me a drop-down menu with a bunch of inapt scenarios: "Demanding cash?" Nope. "Refusing my service animal?" Also no. Lyft can foresee these issues, but not "Acting unprofessional"? [...] Except for safety issues, there's no helpline to get a live person with Uber or Lyft. Ditto Spotify, Instagram and many other apps. Airbnb customer support has a phone number where actual humans answer. Instacart's app has an email address with a field to include details about your problem. It's also got a number you can ring 24/7.

Slashdot Top Deals