Facebook

Meta Cracks Down on Ad-Free Instagram Client a Day After It Launched (engadget.com) 59

A third-party Instagram app, called "The OG App," which promised an ad-free feed more like the original Instagram experience, has been pulled from Apple's App Store just one day after it officially launched. It's not clear if Apple pulled the app at the request of Meta, but the social network confirmed it had taken "enforcement actions" against the service. From a report: "This app violates our policies and we're taking all appropriate enforcement actions," a Meta spokesperson said in a statement. The spokesperson declined to elaborate on what those actions were, or if it had been in contact with Apple, but pointed to a blog post outlining Meta's policies barring clone sites. "A clone site is a third-party site that duplicates, in whole or in part, the content of an existing site," Meta explains. On Twitter, the developers of The OG App said their entire team had been permanently banned from Facebook and Instagram as a result of their ties to the service.
Businesses

Adobe Outlines Figma Feature Ideas, Commits to Keeping Free Tier (bloomberg.com) 14

Adobe plans to add technology from its creative software portfolio to Figma without tweaking pricing or simplicity after its acquisition, seeking to ease concerns among loyal users that the deal may significantly change the design app. From a report: Photo, video and illustration editing will likely be implemented into the software design app after the acquisition closes, as well as the ability to link projects from Adobe products such as Photoshop or Premiere, Adobe Chief Product Officer Scott Belsky said in an interview. The company is conscious that Figma customers appreciate its simplicity, and any updates will avoid clogging up the way users maneuver around the app, he said. Figma's pricing model will remain "freemium," Belsky said -- meaning that a basic tier will always be accessible without cost. "We don't want to fix something that's working really well."
Canada

Canada To End COVID-19 Vaccine Travel Requirements, Make ArriveCan App Optional (bbc.com) 58

Canada has said it is dropping all remaining Covid border restrictions, including vaccine requirements for travelers. The BBC reports: As of 1 October, travelers will also no longer need to provide proof of Covid vaccination, to undergo any testing or to isolate and quarantine. The mask mandate on planes and trains will also be lifted. The ArriveCan app -- used to upload health documents when entering Canada -- will become optional.

Federal health minister Jean-Yves Duclos said in an announcement on Monday that Canada is "in a much better position" than it was earlier in the pandemic, in part due to availability of Covid-19 vaccines and treatment options. The country's high vaccination rate - with around 82% of the population having received two doses - and a falling death rate are also factors.
The report notes that vaccine mandates for travelers entering the U.S. remain in place.

Further reading: Japan To Allow Visa-Free Travel After 2 1/2 Years of Mostly Closed Borders
Desktops (Apple)

Document Foundation Starts Charging For 'Free' LibreOffice on Apple App Store (theregister.com) 59

The Document Foundation, the organization that tends the open source productivity suite LibreOffice, has decided to start charging for one version of the software. The Register reports: LibreOffice is a fork of OpenOffice and is offered under the free/open source Mozilla Public License Version 2.0. A Monday missive from the Document Foundation reveals the org will begin charging 8.99 euros for the software -- but only when sold via Apple's Mac App Store. That sum has been styled a "convenience fee ... which will be invested to support development of the LibreOffice project."

The foundation suggests paying up in the Mac App Store is ideal for "end users who want to get all of their desktop software from Apple's proprietary sales channel." Free downloads of LibreOffice for macOS from the foundation's site will remain available and arguably be superior to the App Store offering, because that version will include Java. The foundation argued that Apple does not permit dependencies in its store, so it cannot include Java in the 8.99 euro offering. The version now sold in the App Store supersedes a previous offering provided by open source support outfit Collabora, which charged $10 for a "Vanilla" version of the suite and threw in three years of support.
The foundation's marketing officer Italo Vignoli said the change was part of a "new marketing strategy."

"The Document Foundation is focused on the release of the Community version, while ecosystem companies are focused on a value-added long-term supported versions targeted at enterprises," Vignoli explained. "The distinction has the objective of educating organizations to support the FOSS project by choosing the LibreOffice version which has been optimized for deployments in production and is backed by professional services, and not the Community version generously supported by volunteers."

"The objective is to fulfil the needs of individual and enterprise users in a better way," Vignoli added, before admitting "we know that the positive effects of the change will not be visible for some time. Educating enterprises about FOSS is not a trivial task and we have just started our journey in this direction."
Space

Apple's Satellite-Based 'Emergency SOS' Prompts Speculation on Future Plans (cringely.com) 34

First, a rumor from the blog Phone Arena. "Not to be outdone by Apple and Huawei, Samsung is planning to incorporate satellite connectivity options in its Galaxy phones as well, hints leakster Ricciolo."

But it's not the first rumor we've heard about phone vendors and satellites. "Cringley Predicts Apple is About to Create a Satellite-Based IoT Business ," read the headline in June. Long-time tech pundit Robert X. Cringely predicted that Apple would first offer some limited satellite-based functionality,

But he'd also called those services "proxies for Apple entering — and then dominating — the Internet of Things (IoT) business. "After all, iPhones will give them 1.6 billion points of presence for AirTag detection even on sailboats in the middle of the ocean — or on the South Pole.... Ubiquity (being able to track anything in near real time anywhere on the planet) signals the maturity of IoT, turning it quickly into a $1 TRILLION business — in this case Apple's $1 TRILLION business." And beyond that, "in the longer run Cupertino plans to dis-intermediate the mobile carriers — becoming themselves a satellite-based global phone and data company [and] they will also compete with satellite Internet providers like Starlink, OneWeb, and Amazon's Kuiper."

So how did Cringely react last week when Apple announced "Emergency SOS" messaging for the iPhone 14 and 14 Plus — via communication satellites — when their users are out of range of a cell signals? He began by wondering if Apple was intentionally downplaying the satellite features: They limited their usage case to emergency SOS texts in the USA and Canada, sorta said it would be just for iPhone 14s, and be free for only the first two years. They showed a satellite app and very deliberately tried to make it look difficult to use. They gave no technical details and there was no talk of industry partners.

Yet there were hints of what's to come. We (you and I, based on my previous column) already knew, for example, that ANY iPhone can be made to work with Globalstar. We also knew the deal was with Globalstar, which Apple never mentioned but Globalstar confirmed, more or less, later in the day in an SEC filing. But Apple DID mention Find My and Air Tags, notably saying they'd work through the satellites even without having to first beseech the sky with an app. So the app is less than it seems and Apple's satellite network will quickly find its use for the Internet of Things [Cringely predicts]....

Apple very specifically said nothing about the global reach of Find My and Air Tags. There is no reason why those services can't have immediate global satellite support, given that the notification system is entirely within Apple's ecosystem and is not dependent on 911-type public safety agreements.

Maybe it will take a couple years to cover the world with SOS, but not for Find My, which means not for IoT — a business headed fast toward $1 trillion and will therefore [hypothetically] have a near-immediate impact on Apple's bottom line.

Speculating further, Cringely predicts that Globalstar — which has ended up with vast tracts of licensed spectrum — will eventually be purchased by a larger company. ("If not Apple, maybe Elon Musk.")

And this leads Cringely to yet another prediction. "If Elon can't get Globalstar, he and his partners will push for the regulatory expansion into space of terrestrial 5G licenses, which will probably be successful." This will happen, frankly, whether SpaceX and T-Mobile are successful or not, because AST&Science and its investors AT&T, Verizon and Zodafone need 5G in space, too, to compete with Apple. So there WILL eventually be satellite competition for Apple and I think the International Telecommunication Union will eventually succumb to industry pressure.
And by the end Cringely is also speculating about just how Apple will come up with innovative new satellite designs on a faster schedule...
The Internet

Why Craigslist Still Looks the Same After 25+ Years (pcmag.com) 95

An anonymous reader quotes a report from PC Magazine: Craigslist emerged in 1995 to connect strangers through a free, web-based platform that has endured as rivals services like Zillow, Facebook Marketplace, and countless dating apps emerged with advanced features and slick interfaces. These platforms survive on advertising and subscription revenue. Craigslist, of course, has none of that. Over the years, the OG online marketplace has all but refused to modernize; its mobile app only came out in 2019 after nearly 25 years in business. Why does the website still look the same after so many decades? That was the main question I had when I sat down for a video call with craigslist founder Craig Newmark, who joined me from the New York City apartment he shares with his wife, Eileen Whelpley.

Newmark stepped down as CEO of craigslist in 2000 after others told him he wasn't cut out for management, he says. Jim Buckmaster has been at the helm since, though Newmark remains a partial owner. He now works on philanthropy full time, supporting groups like the Coalition Against Online Violence, which helps combat harassment against female journalists. Still, the 69-year-old entrepreneur is a billionaire (or near-billionaire since he's given away millions). Our chat yielded much more than expected, from Costco hotdogs to Hello Kitty and his childhood Sunday School lessons. It's clear that the website is the purest and most enduring expression of Craig Newmark, a humble tech mogul who marches to the beat of his own drum.
Here's what Newmark had to say when asked about the site's appearance:

Why does the website still look the pretty much the same today as when you founded it? There's even a new CEO. What's going on?
Because that serves people better. I've learned that people want stuff that is simple and fast and gets the job done. People don't need fancy stuff. Sometimes you just want to get through the day.

Well, you can still have simplicity with a modern font or a new UI. The definition of simplicity on the web has changed over the years. Is it just that you're making enough money and there's a desire to keep it the way it is?
I'll challenge the premise that the idea of simplicity has changed. The deal is that people still use the site in great numbers. And again, it helps people get something done. It's fast and easy for people, and that's a big deal.

And maybe you also don't care too much about aesthetics (of the website, for example)?
For me as an engineer, simple as beautiful. Functional is beautiful.

How would you feel if craigslist dramatically changed in its appearance or its function?
I'm okay if the spirit is maintained. I like a very simple site with its use and functionality obvious when you look at it. Now maybe there's a better way to do that, that no one has come up with yet. If it's really better, I can't object to that. If it's genuinely better, I will say something. But again, I can't legitimately try to exert serious influence. Jim's boss.

In summary, what is your most concise answer to why craigslist still looks the same today?
People tell me it gets the job done. They want it done. As I like to put it, a nerd's got to do what a nerd's got to do.
Iphone

The iPhone 14 and 14 Plus Are Official With Satellite-Based Emergency SOS (theverge.com) 94

Apple has announced the iPhone 14 and 14 Plus, preserving much of the iPhone 13's design -- including a notch for the phone's selfie camera and Face ID sensors. From a report: Either way, the 14 looks an awful lot like the 13 at first glance, with the same flat display and rails. The US models of the iPhone 14 also do away with the physical SIM tray, going all-in on eSIM. The standard iPhone 14 model starts at $799, and the 14 Plus starts at $899. The iPhone 14 will also support the much-rumored emergency messaging via communication satellites when you're out of range of a cell signal, called Emergency SOS. The phone's antennas can connect to satellite frequencies. Apple says it can take less than 15 seconds to send a message with a clear view of the sky, and the interface guides users to point their phone in the right direction, as well as walking through steps to connect with emergency service providers. It's also possible to use the Find My app to share location without sending a message. It's free for two years with iPhone 14 models. The iPhone 14 sticks with a 6.1-inch screen, while the 14 Plus offers a big 6.7-inch screen. The 14 Plus model claims to offer the best battery life of any iPhone. Both models continue to offer last year's A15 Bionic chipset -- a major shift for Apple, which has typically introduced a new processor to be used by its entire iPhone portfolio every year.
The Almighty Buck

MyFitnessPal Paywalls Barcode Scanner That Made Counting Calories Easy (theverge.com) 62

The popular nutrition and weight loss app MyFitnessPal is moving its free barcode scanning feature behind the paywall. The Verge reports: For years, users with free accounts have been able to use this tool to scan food barcodes for easy logging and tracking of daily calorie intake, but the company recently announced that beginning October 1st, a premium account will be required. MyFitnessPal's daily calorie counting is a key component of the app, with the barcode scanner offering a shortcut to finding nutritional value for a specific food item in the app's vast database of food. Much of that database is user-generated, with both free and premium users able to add any food by entering the nutrition facts and barcode off a label. Once October 1st rolls around, free users will still be able to search the database for their food entries, but the barcode scanner will cost $19.99 per month or $79.99 for an annual plan, along with other premium features. And any new users that create a free account on or after September 1st will be shut out from scanning barcodes even earlier unless they pay. "By losing the barcode scanner, MyFitnessPal is doing its users an egregious disservice," writes The Verge's Antonio G. Di Benedetto. "Losing weight and being cognizant of what you eat is hard enough."

"MyFitnessPal is obviously looking to maximize profits, but if the popular r/loseit subreddit is any indication, many users may consider switching to competing apps like Cronometer, Loseit, or Macros over this loss."
Advertising

Apple Finds Its Next Big Business: Showing Ads on Your iPhone (theverge.com) 120

"Apple is set to expand ads to new areas of your iPhone and iPad in search of its next big revenue driver," reports Bloomberg.

The Verge writes that Apple "could eventually bring ads to more of the apps that come pre-installed on your iPhone and other Apple devices, including Maps, Books, and Podcasts." According to a report from Bloomberg's Mark Gurman, Apple has internally tested search ads in Maps, which could display recommendations when you search for restaurants, stores, or other nearby businesses. Apple already implements a similar advertising model on the App Store, as developers can pay to have their app promoted on a search page for a particular query, like "puzzle games" or "photo editor." As noted by Gurman, ads on Maps could work in the same way, with businesses paying to appear at the top of search results when users enter certain search terms.

Gurman believes that Apple could introduce ads to its native Podcasts and Books apps as well. [Gurman describes this as "likely".] This could potentially allow publishers to place ads in areas within each app, or pay to get their content placed higher in search results. Just like Maps, Podcasts and Books are currently ad-free.... Gurman mentions the potential for advertising on Apple TV Plus, too, and says the company could opt to create a lower-priced ad-supported tier, something both Netflix and Disney Plus plan on doing by the end of this year.

Bloomberg points out that Apple is already displaying ads inside its News app — where some of the money actually goes back to news publishers. ("Apple also lets publishers advertise within their stories and keep the vast majority of that money.")

And while you can disable ad personalization — which 78% of iOS users have done — Bloomberg notes that "Another ironic detail here is that the company's advertising system uses data from its other services and your Apple account to decide which ads to serve. That doesn't feel like a privacy-first policy."

Bloomberg's conclusion? "Now the only question is whether the customers of Apple — a champion of privacy and clean interfaces — are ready to live with a lot more ads."
Cellphones

'Samsung Still Hasn't Given Us a Good Reason To Buy a Foldable Phone' (theverge.com) 73

Earlier this week, Samsung unveiled their new Z Fold 4 and Z Flip 4 -- two of the most refined and polished foldable smartphones on the market. However, what Samsung hasn't done (or any other phone manufacturer for that matter) "is make the case for why you'd actually want a foldable phone," writes David Pierce via The Verge. "And until it can explain why it's worth all the extra cost and tradeoffs, I'm having a hard time figuring out why you'd be willing to give up the phone you know and love to get one." From the report: What Samsung needs to do with the Galaxy Fold (and the rest of the industry will eventually need to do with their own foldables) is convince people that it's worth buying a phone that's more expensive, more fragile, and takes up more room in your pocket. Right now, the worst thing about foldables is that they force you to make significant sacrifices on the most important device you own: your smartphone. The new Fold 4 is a little shorter, about an ounce heavier, and about twice as thick as the Galaxy S22 Ultra. It's also $600 more expensive. The Ultra has a bigger battery, better camera specs, and a 6.8-inch screen that supports an S Pen. The Fold 4, when opened, is noticeably larger, but the candy bar phones still get plenty big. And Fold makes a lot of sacrifices for some more real estate.

It's not even clear to me that Samsung knows why you should make all of those sacrifices. On its website, one of the first selling points the company offers is that you can prop up the screen on a table by opening it halfway for watching or taking videos hands-free. Here in reality, we call that a kickstand, and this is an awfully expensive one. In this mode, you're also only using half the screen, which sort of defeats the whole purpose. So far, multitasking seems to be the foldable's one actual advantage. Open up your Galaxy Fold, and you can run two apps side by side or even three or four on the screen at once! This, I agree, is a delightful thing. Being able to use my browser and my notes app side by side or see my calendar and my email together is much better than constantly swiping between two full-screen apps. And seeing two pages at a time in the Kindle app is the best. And you know what? Big screens are just good -- good for games, good for reading, good for watching Netflix.

But these aren't just arguments for foldables; they're arguments for tablets. And so far, the arguments for Android tablets don't seem to be convincing many users. While Android has gotten better as a large-screen operating system, and the Fold 4's software being based on Android 12L is a good sign, too many apps that are "optimized" for foldables are actually just sticking a giant sidebar onto one side, which doesn't accomplish much. Others just streeeetch everything to fit the larger screen. Don't even get me started on how the vast majority of apps deal with Microsoft's approach of two separate screens attached with a hinge. Samsung has done an admirable job of wrangling all of Android's weirdness onto the Fold's screen, and in general, it's not that the Fold doesn't work; it's that there's nothing about the Fold that is dramatically better than the phone or tablet you might already be carrying around. And shoving them into a single device actually makes them both a little worse.

Facebook

Inside the Apple vs. Facebook Privacy Fight (wsj.com) 19

An ongoing dispute over privacy between Apple and Facebook is roiling the digital economy, leading companies to shift billions in ad spending as users continue to limit the data available to advertisers. The feud took off last year, when Apple rolled out iOS 14.5, a version of its mobile operating system that made it easier than ever for iPhone and iPad users to opt out of letting apps like Facebook track their activity on their devices. The two companies weren't always at odds. In fact, they were almost business partners. From a report: In the years before the change, Apple suggested a series of possible arrangements that would earn the iPhone maker a slice of Facebook's revenue, according to people who either participated in the meetings or were briefed about them. As one person recalled: Apple officials said they wanted to "build businesses together." One idea that was discussed: creating a subscription-based version of Facebook that would be free of ads, according to people familiar with the discussions. Because Apple collects a cut of subscription revenue for apps in its App Store, that product could have generated significant revenue for the Cupertino, Calif., giant.

The companies also haggled over whether Apple was entitled to a piece of Facebook's sales from so-called boosted posts, said people familiar with the matter. A boost allows a user to pay to increase the number of people that see a post on Facebook or Instagram. Facebook, which considers boosts ads, has always contended that boosts are a form of advertising, in part because they are often used by small businesses to reach a bigger audience, said one of the people. Apple, which doesn't take a cut of advertising from developers, argued that Facebook boosts should be considered in-app purchases, according to a person familiar with the matter. Apple's standard terms would entitle it to take a 30% share of those sales.

AI

WhatsApp Boss Says No To AI Filters Policing Encrypted Chat (theregister.com) 38

An anonymous reader quotes a report from The Register: The head of WhatsApp will not compromise the security of its messenger service to bend to the UK government's efforts to scan private conversations. Will Cathcart, who has been at parent company Meta for more than 12 years and head of WhatsApp since 2019, told the BBC that the popular communications service wouldn't downgrade or bypass its end-to-end encryption (EE2E) just for British snoops, saying it would be "foolish" to do so and that WhatsApp needs to offer a consistent set of standards around the globe. "If we had to lower security for the world, to accommodate the requirement in one country, that ... would be very foolish for us to accept, making our product less desirable to 98 percent of our users because of the requirements from 2 percent," Cathcart told the broadcaster. "What's being proposed is that we -- either directly or indirectly through software -- read everyone's messages. I don't think people want that."

Strong EE2E ensures that only the intended sender and receiver of a message can read it, and not even the provider of the communications channel nor anyone eavesdropping on the encrypted chatter. The UK government is proposing that app builders add an automated AI-powered scanner in the pipeline -- ideally in the client app -- to detect and report illegal content, in this case child sex abuse material (CSAM).

The upside is that at least messages are encrypted as usual when transmitted: the software on your phone, say, studies the material, and continues on as normal if the data is deemed CSAM-free. One downside is that any false positives mean people's private communications get flagged up and potentially analyzed by law enforcement or a government agent. Another downside is that the definition of what is filtered may gradually change over time, and before you know it: everyone's conversations are being automatically screened for things politicians have decided are verboten. And another downside is that client-side AI models that don't produce a lot of false positives are likely to be easily defeated, and are mainly good for catching well-known, unaltered CSAM examples.

United States

Amazon's Ring and Google Can Share Footage With Police Without Warrants (or Your Consent) (cnet.com) 70

U.S. law let's companies like Google and Amazon's Ring doorbell/security camera system "share user footage with police during emergencies without consent and without warrants," CNET reported this week. They add that after that revelation "came under renewed criticism from privacy activists this month after disclosing it gave video footage to police in more than 10 cases without users' consent thus far in 2022 in what it described as 'emergency situations'."

"That includes instances where the police didn't have a warrant." "So far this year, Ring has provided videos to law enforcement in response to an emergency request only 11 times," Amazon vice president of public policy Brian Huseman wrote. "In each instance, Ring made a good-faith determination that there was an imminent danger of death or serious physical injury to a person requiring disclosure of information without delay...." Of the 11 emergency requests Ring has complied with so far in 2022, the company said they include cases involving kidnapping, self-harm and attempted murder, but it won't provide further details, including information about which agencies or countries the requests came from.

We also asked Ring if it notified customers after the company had granted law enforcement access to their footage without their consent.

"We have nothing to share," the spokesperson responded.

CNET also supplies this historical context: It's been barely a year since Ring made the decision to stop allowing police to email users to request footage. Facing criticism that requests like those were subverting the warrant process and contributing to police overreach, Ring directed police instead to post public requests for assistance in the Neighbors app, where community members are free to view and comment on them (or opt out of seeing them altogether)... That post made no mention of a workaround for the police during emergency circumstances.
When CNET asked why that workaround wasn't mentioned, Amazon response was that law enforcement requests, "including emergency requests, are directed to Ring (the company), the same way a warrant or subpoena is directed to Ring (and not the customer), which is why we treat them entirely separately."

CNET notes there's also no mention of warrantless emergency requests without independent oversight in Ring's own transparency reports about law enforcement requests from past years.

CNET adds that it's not just Amazon. "Google, Ring and other companies that process user video footage have a legal basis for warrantless disclosure without consent during emergency situations, and it's up to them to decide whether or not to do so when the police come calling...." (Although Google told CNET that while it reserves the right to comply with warrantless requests for user data during emergencies, to date it has never actually done so.) The article also points out that "Others, most notably Apple, use end-to-end encryption as the default setting for user video, which blocks the company from sharing that video at all... Ring enabled end-to-end encryption as an option for users in 2021, but it isn't the default setting, and Ring notes that turning it on will break certain features, including the ability to view your video feed on a third-party device like a smart TV, or even Amazon devices like the Echo Show smart display."

The bottom line? [C]onsumers have a choice to make about what they're comfortable with... That said, you can't make informed choices when you aren't well-informed to begin with, and the brands in question don't always make it easy to understand their policies and practices. Ring published a blog post last year walking through its new, public-facing format for police footage requests, but there was no mention of emergency exceptions granted without user consent or independent oversight, the details of which only came to light after a Senate probe. Google describes its emergency sharing policies within its Terms of Service, but the language doesn't make it clear that those cases include instances where footage may be shared without a warrant, subpoena or court order compelling Google to do so.
Cloud

GeForce Now Rolling Out 120FPS Cloud Gaming To All Compatible Android Smartphones (9to5google.com) 15

Nvidia has just announced that GeForce Now is picking up support for 120fps gameplay on all Android smartphones, after previously limiting the functionality to only a few select models. 9to5Google reports: GeForce Now is a cloud gaming service that allows players to stream PC games from marketplaces such as Steam and the Epic Games Store, among others, to virtually any device. It's a great way to expand the gaming experience on your PC over to a mobile phone or your TV, or just to play games that your PC isn't powerful enough to run on its own. The service is free, but you can pay to get longer sessions and better quality.

Last year, the service picked up its RTX 3080 tier, which offers the power of the still-hard-to-find graphics card, but through the cloud. While it's a pricey option, it was quickly found to be the gold standard of cloud gaming thanks to minimal input latency, higher resolution, and faster refresh rate. It's that faster refresh rate that's boosting GeForce Now for Android players this week, with 120fps expanding to all Android phones with faster refresh rates. If your phone has a 120Hz display, you can now stream games at 120fps.
The official list of supported devices can be found here.

Nvidia says that the expanded support will arrive "over the coming weeks" and that the experience could vary from device to device.
Security

Russia Released a Ukrainian App For Hacking Russia That Was Actually Malware (vice.com) 19

Russian government hackers tried to trick Ukrainian and international volunteers into using a malicious Android app disguised as an app to launch Distributed Denial of Service (DDoS) attacks against Russian sites, according to new research published by Google on Tuesday. Motherboard reports: Since the beginning of the Russian invasion, Ukraine has resisted not only on the ground, but also online. A loose collective of technologists and hackers has organized under an umbrella quasi-hacktivist organization called the IT Army, and they have launched constant and persistent cyberattacks against Russian websites. The Russian government tried to turn this volunteer effort around to unmask Ukrainian hackers, in a smart, but ultimately failed attempt.

Google researchers wrote in the report that the app was created by the hacking group known as Turla, which several cybersecurity companies believe works for the Kremlin. [Shane Huntley, the head of the Google research team Threat Analysis Group] said that they were able to attribute this operation to Turla because they have tracked the group for a long time and have good visibility into their infrastructure and link it to this app. The hackers pretended to be a "community of free people around the world who are fighting russia's aggression" -- much like the IT Army. But the app they developed was actually malware. The hackers called it CyberAzov, in reference to the Azov Regiment or Battalion, a far-right group that has become part of Ukraine's national guard. To add more credibility to the ruse they hosted the app on a domain "spoofing" the Azov Regiment: cyberazov[.]com.

The app actually didn't DDoS anything, but was designed to map out and figure out who would want to use such an app to attack Russian websites, according to Huntely. "Now that they have an app that they control, and they see where it came from, they can actually work out what the infrastructure looks like, and work out where the people that are potentially doing these sorts of attacks are," Huntley said. Google said the fake app wasn't hosted on the Play Store, and that the number of installs "was miniscule." Still, it was a smart attempt to trick unknowing Ukrainians or people interested in working with Ukrainians to fall into the trap.

Microsoft

Dissecting Microsoft's Proposed Policy To Ban Commercial Open-Source Apps (techcrunch.com) 51

Microsoft caused considerable consternation in the open source community over the past month, after unveiling a shake up to the way developers will be able to monetize open source software. From a report: There are many examples of open source software sold in Microsoft's app store as full-featured commercial applications, ranging from video editing software such as Shotcut, to FTP clients such as WinSCP. But given how easy it is for anyone to reappropriate and repackage open source software as a new standalone product, it appears that Microsoft is trying to put measures in place to prevent such "copycat" imitations from capitalizing on the hard work of the open source community.

However, at the crux of the issue was the specific wording of Microsoft's new policy, with section 10.8.7 noting that developers must not: ...attempt to profit from open-source or other software that is otherwise generally available for free, nor be priced irrationally high relative to the features and functionality provided by your product. In its current form, the language is seemingly preventing anyone -- including the project owners and maintainers -- from charging for their work. Moreover, some have argued that it could hold implications for proprietary applications that include open source components with certain licenses, while others have noted that developers may be deterred from making their software available under an open source license.

Social Networks

TikTok Hits Pause On Its Most Controversial Privacy Update Yet (gizmodo.com) 9

Early last month, TikTok users across Europe were told that, starting July 13th, the platform would begin using their on-app data to serve up targeted ads, even if those users didn't consent to the practice. Now, less than a day before that change would have rolled out European Union-wide, it looks like the company's reconsidering things a bit. Gizmodo reports: A company spokesperson told TechCrunch on Tuesday that TikTok is "pausing" the update while it "engage[s] on the questions from stakeholders," about the way it handles personalized ads. And needless to say, there are quite a lot of questions about that right now -- from data protection authorities in the EU, from lawmakers in the US, and from privacy experts pretty much everywhere.

For context: until this point, European users that opened the TikTok app needed to offer express consent to let the company use their data for targeted ads. This update planned to do away with the need for that pesky consent by on a legal basis known as "legitimate interest" to target those ads instead. In a nutshell, the "legitimate interest" clause would let TikTok process people's data, consent-free, if it was for a purpose that TikTok deemed reasonable. This means the company could say, for example, that because targeted ads bring in more money than their un-targeted equivalent, it would be reasonable to serve all users -- consenting or otherwise -- targeted ads. Reasonable, right?

Microsoft

Will Microsoft Ban Commercial Open Source from Its App Store? (sfconservancy.org) 54

Microsoft has "delayed enforcement" of what could be a controversial policy change, according to the Software Freedom Conservancy: A few weeks ago, Microsoft quietly updated its Microsoft [app] Store Policies, adding new policies (which go into effect next week), that include this text:

all pricing ... must ... [n]ot attempt to profit from open-source or other software that is otherwise generally available for free [meaning, in price, not freedom].

Wednesday, a number of Microsoft Store users discovered this and started asking questions. Quickly, those of us (including our own organization) that provide Free and Open Source Software (FOSS) via the Microsoft Store started asking our own questions too.... Since all (legitimate) FOSS is already available (at least in source code form) somewhere "for free" (as in "free beer"), this term (when enacted) will apply to all FOSS...

Sadly, these days, companies like Microsoft have set up these app stores as gatekeepers of the software industry. The primary way that commercial software distributors reach their customers (or non-profit software distributors reach their donors) is via app stores. Microsoft has closed its iron grasp on the distribution chain of software (again) — to squeeze FOSS from the marketplace. If successful, even app store users will come to believe that the only legitimate FOSS is non-commercial FOSS. This is first and foremost an affront to all efforts to make a living writing open source software. This is not a merely hypothetical consideration. Already many developers support their FOSS development (legitimately so, at least under the FOSS licenses themselves) through app store deployments that Microsoft recently forbid in their Store....

Microsoft counter-argues that this is about curating content for customers and/or limiting FOSS selling to the (mythical) "One True Developer". But, even a redrafted policy (that Giorgio Sardo [General Manager of Apps at Microsoft] hinted at publicly early Thursday) will mandate only toxic business models for FOSS (such as demo-ware, less-featureful versions available as FOSS, while the full-featured proprietary version is available for a charge).

The Conservancy argues that FOSS "was designed specifically to allow both the original developers and downstream redistributors to profit fairly from the act of convenient redistribution (such as on app stores)." But it also speculates about the sincerity of Microsoft's intentions. "We're cognizant that Microsoft probably planned all this, anyway — including the community outrage followed by their usual political theater of feigned magnanimity."

The Conservancy's post Thursday received an update Friday about Microsoft's coming policy update: After we and others pointed out this problem, a Microsoft employee claimed via Twitter that they would "delay enforcement" of their new anti-FOSS regulation [giving as their reason that "it could be perceived differently than intended."]

We do hope Microsoft will ultimately rectify the matter, and look forward to the change they intend to enact later. Twitter is a reasonable place to promote such a change once it's made, but an indication of non-enforcement by one executive on their personal account is a suboptimal approach. This is a precarious situation for FOSS projects who currently raise funds on the Microsoft Store; they deserve a definitive answer.

Given the tight timetable (just five days!) until the problematic policy actually does go into effect, we call on Microsoft to officially publish a corrected policy now that addresses this point and move the roll-out date at least two months into the future. (We suggest September 16, 2022.) This will allow FOSS projects to digest the new policy with a reasonable amount of time, and give Microsoft time to receive feedback from the impacted projects and FOSS experts.

Communications

Google Hangouts is Shutting Down in November 24

After sunsetting Google Hangouts for Workspace users in February, Google's now beginning the process of migrating free, personal Hangouts users to Chat. In an announcement posted to its blog, Google says people who still use the Hangouts mobile app will see a prompt to move to Chat. From a report: As for users who use Hangouts in Gmail on the web, Google says it won't start prompting users to make the switch to Chat until July. Hangouts will remain usable on its desktop site until November, and Google says it will warn users "at least one month" in advance before it starts pointing the Hangouts site to Chat.
Games

Valve's Steam Deck Makes a Brilliant Case Against Walled Gardens (fastcompany.com) 57

"Unlike practically every major game console that's come before it, the Steam Deck, from PC gaming giant Valve, doesn't lock users into one ecosystem," writes Fast Company's Jared Newman. "While Valve's own Steam store is the default way to buy and play games, the Steam Deck also lets users install whatever software they want on the device's Linux-based operating system. The experience has been liberating..." From the report: In recent weeks, I've gorged on weird indie creations from itch.io, classic games from GOG.com, and free games from the Epic Games Store. I've used Plexamp to stream my personal music collection in place of in-game soundtracks, and I've used Vivaldi to browse the web in the Steam Deck's desktop mode. You don't have to use your Steam Deck this way, but just being knowing that it's an option makes the device more capable and personal. The tech industry is filled with companies that seem deathly afraid of this model, either because they don't trust their users or don't want to risk weakening their own ecosystems. By taking the opposite approach, Valve is proving that open platforms aren't so catastrophic, and it elevates the Steam Deck from yet another gadget into the most exciting consumer electronics device in years. [...]

Valve could have easily used the Steam Deck to lock players into its own ecosystem. It could have opted not to include a desktop mode and withheld instructions on how to lift its read-only restrictions. It could have discouraged users from installing different operating systems and made its recovery tools unavailable to the public. Console makers have long insisted that such restrictions are necessary for the good of their platforms. In 2020, for instance, Microsoft argued that because console makers sell their hardware at or below cost to create a market for their software, they shouldn't have to accommodate third-party app stores or sideloading.

Similar arguments have spilled out into the broader mobile app business as well. In response to a lawsuit from Epic Games, Apple has claimed that its investments in the App Store wouldn't be feasible if it couldn't force developers to use its in-app purchase mechanisms. Some defenders of Apple's viewpoint, such as Daring Fireball's John Gruber, have argued that iOS is more like a game console than a PC platform. So, it's all the more remarkable that Valve ignored all this hand-wringing and made the Steam Deck a haven for tinkerers. Instead of trying to shut out competitors, the company is betting that its own store will prevail on quality. If the Steam Deck successful -- as it appears to be so far -- it could upend years of conventional wisdom around walled gardens and become a threat to other consoles in more ways than one.

Slashdot Top Deals