Apple

Epic Games CEO Tim Sweeney Calls Out Apple for Promoting Its Services in the iPhone Settings Screen (techcrunch.com) 59

Epic Games CEO Tim Sweeney, whose high-profile antitrust lawsuit against Apple is now under appeal, is today calling out the iPhone maker for giving itself access to an advertising slot its competitors don't have: the iPhone's Settings screen. From a report: Some iOS 15 users noticed Apple is now advertising its own services at the top of their Settings, just below their Apple ID. The services being suggested are personalized to the device owner, based on which ones they already subscribe to, it appears. For example, those without an Apple Music subscription may see an ad offering a free six-month trial. However, current Apple Music subscribers may instead see a prompt to add on a service they don't yet have, like AppleCare coverage for their devices.

Sweeney suggests this sort of first-party advertising is an anticompetitive risk for Apple, as some of the services it's pushing here are those that directly compete with third-party apps published on its App Store. But those third-party apps can't gain access to the iPhone's Settings screen, of course --- they can only bid for ad slots within the App Store itself. Writes Sweeney: "New from the guys who banned Fortnite: settings-screen ads for their own music service, which come before the actual settings, and which aren't available to other advertisers like Spotify or Sound Cloud."

Facebook

Oculus Quest Becomes a Paperweight When Facebook Goes Down (vrfocus.com) 79

When Facebook went down yesterday for nearly six hours, so did Oculus' services. Since Facebook owns VR headset maker Oculus, and controversially requires Oculus Quest users to log in with a Facebook account, many Quest owners reported not being able to load their Oculus libraries. "[A]nd those who just took a Quest 2 out of the box have reported that they're unable to complete the initial setup," adds PCGamer. As VRFocus points out, "the issue has raised another important question relating to Oculus' services being so closely linked with a Facebook account, your Oculus Quest/Quest 2 is essentially bricked until services resume." From the report: This vividly highlights the problem with having to connect to Facebook's services to gain access to apps -- the WiFi connection was fine. Even all the ones downloaded and taking up actual storage space didn't show up. It's why some VR fans began boycotting the company when it made all mandatory that all Oculus Quest 2's had to be affiliated with a Facebook account. If you want to unlink your Facebook account from Oculus Quest and don't want to pay extra for that ability, you're in luck thanks to a sideloadable tool called "Oculess." From an UploadVR article published earlier today: You still need a Facebook account to set up the device in the first place and you need to give Facebook a phone number or card details to sideload, but after that you could use Oculess to forgo Facebook entirely -- just remember to never factory reset. The catch is you'll lose access to Oculus Store apps because the entitlement check used upon launching them will no longer function. System apps like Oculus TV and Browser will also no longer launch, and casting won't work. You can still sideload hundreds of apps from SideQuest though, and if you want to keep browsing the web in VR you can sideload Firefox Reality. You can still use Oculus Link to play PC VR content, but only if you stay signed into Facebook on the Oculus PC app. Virtual Desktop won't work because it's a store app, but you can sideload free alternatives such as ALVR.

To use Oculess, just download it from GitHub and sideload it using SideQuest or Oculus Developer Hub, then launch it from inside VR. If your Quest isn't already in developer mode or you don't know how to sideload you can follow our guide here.

Apple

Apple Finally Lets You Report App Store Scams (theverge.com) 8

Apple will now let you directly report a scammy app from its listing in the App Store with a new-and-improved version of its "Report a Problem" button. The Verge reports: As Richard Mazkewich and scam hunter Kosta Eleftheriou point out on Twitter, the button has not only returned to individual app listings for the first time in years, it now includes a dedicated "Report a scam or fraud" option in the drop-down menu. Until iOS 15, the only way you could find this button was to scroll all the way down to the bottom of the Apps or Games tab in the App Store, get kicked out to a website where you'd need to re-sign in. Then you could pick from "Report suspicious activity," "Report a quality issue," "Request a refundâ or "Find my content." None of the options offered a clear way to report a scam, and the "Report suspicious activity" would redirect you to Apple Support instead. To add insult to injury, Apple would only let you report "a quality issue" if you'd already paid money (and thus fallen for the scam). But now, it seems like every free app with in-app-purchases appears to offer the "Report a Problem" option. I checked a handful of apps I've never paid for (but could have) and they all displayed the button. You'll still get kicked out to a website where you'll need to sign in, but overall this seems like a step forward.
IT

1Password Adds Its Own 'Hide My Email' Feature (theverge.com) 36

1Password is launching a new feature to let users create unique email aliases for logins, much like Apple's iCloud Plus Hide My Email function. From a report: 1Password is partnering with Fastmail to bring its masked email feature to the password manager, giving all users the option of hiding their email addresses from apps and services. "Your email address is your online identity," explains Bron Gondwana, CEO of Fastmail. "If your credentials are compromised in a data breach, having a randomly generated email address adds a second line of defense because it can't be associated with your primary email address, and therefore, your identity." This new masked email feature will be ideal for registering accounts for temporary purposes, like a free Wi-Fi network. But they can also be used to hide your personal email address from any app or service as the aliases don't expire unless a 1Password user manually deletes them.
EU

What Happened When Germany Tried to Fight Online Hate Speech? (msn.com) 236

"Harassment and abuse are all too common on the modern internet," writes the New York Times. "Yet it was supposed to be different in Germany." In 2017, the country enacted one of the world's toughest laws against online hate speech. It requires Facebook, Twitter and YouTube to remove illegal comments, pictures or videos within 24 hours of being notified about them or risk fines of up to 50 million euros, or $59 million. Supporters hailed it as a watershed moment for internet regulation and a model for other countries. But an influx of hate speech and harassment in the run-up to the German election, in which the country will choose a new leader to replace Angela Merkel, its longtime chancellor, has exposed some of the law's weaknesses...

Some critics of the law say it is too weak, with limited enforcement and oversight. They also maintain that many forms of abuse are deemed legal by the platforms, such as certain kinds of harassment of women and public officials. And when companies do remove illegal material, critics say, they often do not alert the authorities or share information about the posts, making prosecutions of the people publishing the material far more difficult. Another loophole, they say, is that smaller platforms like the messaging app Telegram, popular among far-right groups, are not subject to the law. Free-expression groups criticize the law on other grounds. They argue that the law should be abolished not only because it fails to protect victims of online abuse and harassment, but also because it sets a dangerous precedent for government censorship of the internet.

To address concerns that companies were not alerting the authorities to illegal posts, German policymakers this year passed amendments to the law. They require Facebook, Twitter and YouTube to turn over data to the police about accounts that post material that German law would consider illegal speech. The Justice Ministry was also given more powers to enforce the law... Facebook and Google have filed a legal challenge to block the new rules, arguing that providing the police with personal information about users violates their privacy.

An activist for the Electronic Frontier Foundation in Berlin tells the Times the law could encourage companies to remove offensive-but-legal speech. And Twitter shared a statement with additional concerns. "Threats, abusive content and harassment all have the potential to silence individuals. However, regulation and legislation such as this also has the potential to chill free speech by emboldening regimes around the world to legislate as a way to stifle dissent and legitimate speech."

Yet Germany's experience may ultimately influence policy across Europe, the Times points out, since German officials "are playing a key role in drafting one of the world's most anticipated new internet regulations, a European Union law called the Digital Services Act, which will require Facebook and other online platforms to do more to address the vitriol, misinformation and illicit content on their sites."
Google

Google and Apple, Under Pressure From Russia, Remove Voting App (nytimes.com) 60

Apple and Google removed an app meant to coordinate protest voting in this weekend's Russian elections from the country on Friday, a blow to the opponents of President Vladimir V. Putin and a display of Silicon Valley's limits when it comes to resisting crackdowns on dissent around the world. From a report: The decisions came after Russian authorities, which claim the app is illegal, threatened to prosecute local employees of Apple and Google -- a sharp escalation in the Kremlin's campaign to rein in the country's largely uncensored internet. A person familiar with Google's decision said the authorities had named specific individuals who would face prosecution, prompting it to remove the app.

The person declined to be identified for fear of angering the Russian government. Google has more than 100 employees in the country. Apple did not respond to phone calls, emails or text messages seeking comment. The app was created and promoted by allies of the opposition leader Aleksei A. Navalny, who were hoping to use it to consolidate the opposition vote in each of Russia's 225 electoral districts. It disappeared from the two technology platforms just as voting got underway in the three-day parliamentary election, in which Mr. Putin's United Russia party -- in a carefully stage-managed system -- holds a commanding advantage.

Mr. Navalny's team reacted with outrage to the decision, suggesting the companies had made a damaging concession to the Russians. "Removing the Navalny app from stores is a shameful act of political censorship," an aide to Mr. Navalny, Ivan Zhdanov, said on Twitter. "Russia's authoritarian government and propaganda will be thrilled." The decisions also drew harsh condemnation from free-speech activists in the West. "The companies are in a really difficult position but they have put themselves there," David Kaye, a former United Nations official responsible for investigating freedom of expression issues, said in an interview. "They are de facto carrying out an element of Russian repression. Whether it's justifiable or not, it's complicity and the companies need to explain it."

Television

Locast's Free TV Service Ordered To Shut Down Permanently After Copyright Loss (arstechnica.com) 39

Locast has been ordered to shut down its online TV service forever in a permanent injunction issued yesterday by a federal judge. From a report: The order came two weeks after the judge gave major broadcast networks a big victory in their copyright case against Locast, a nonprofit organization that provided online access to broadcast TV stations. Locast will have to win on appeal in order to stream broadcast channels again. Locast already suspended operations after the September 1 ruling that said it does not qualify for a copyright-law exemption available to nonprofits, so the permanent injunction doesn't change the status quo. US District Judge Louis Stanton cited a December 2019 agreement between Locast and the networks that limited the scope of the litigation and said a permanent injunction should be entered if the court determines that Locast does not qualify for the copyright-law exemption.

The deal did not prohibit Locast "from applying for a stay of the permanent injunction pending appeal, nor to bar the broadcasters from opposing any such stay," the agreement said. ABC, CBS, Fox, and NBC motioned for a permanent injunction after the September 1 ruling. The judge's order yesterday said the defendants "are permanently restrained and enjoined from operating Locast" but that "entry of an injunction will provide opportunity for appeal contemplated by the agreement."
Further reading: Locast, a Free App Streaming Network TV, Would Love To Get Sued (January 2019).
Books

The Surprisingly Big Business of Library E-books (newyorker.com) 20

Increasingly, books are something that libraries do not own but borrow from the corporations that do. From a report:Steve Potash, the bearded and bespectacled president and C.E.O. of OverDrive, spent the second week of March, 2020, on a business trip to New York City. OverDrive distributes e-books and audiobooks -- i.e., "digital content." In New York, Potash met with two clients: the New York Public Library and Houghton Mifflin Harcourt. By then, Potash had already heard what he described to me recently as "heart-wrenching stories" from colleagues in China, about neighborhoods that were shut down owing to the coronavirus. He had an inkling that his business might be in for big changes when, toward the end of the week, on March 13th, the N.Y.P.L. closed down and issued a statement: "The responsible thing to do -- and the best way to serve our patrons right now -- is to help minimize the spread of COVID-19." The library added, "We will continue to offer access to e-books."

The sudden shift to e-books had enormous practical and financial implications, not only for OverDrive but for public libraries across the country. Libraries can buy print books in bulk from any seller that they choose, and, thanks to a legal principle called the first-sale doctrine, they have the right to lend those books to any number of readers free of charge. But the first-sale doctrine does not apply to digital content. For the most part, publishers do not sell their e-books or audiobooks to libraries -- they sell digital distribution rights to third-party venders, such as OverDrive, and people like Steve Potash sell lending rights to libraries. These rights often have an expiration date, and they make library e-books "a lot more expensive, in general, than print books," Michelle Jeske, who oversees Denver's public-library system, told me. Digital content gives publishers more power over prices, because it allows them to treat libraries differently than they treat other kinds of buyers. Last year, the Denver Public Library increased its digital checkouts by more than sixty per cent, to 2.3 million, and spent about a third of its collections budget on digital content, up from twenty per cent the year before.

Television

TV Streaming Service Locast Suspends Service After Court Ruling (theverge.com) 75

Locast has announced that it is suspending its TV streaming service starting today, following a court ruling earlier this week in a lawsuit from ABC, CBS, Fox, and NBC, which jointly sued the nonprofit service shortly after it launched. From a report: "As a non-profit, Locast was designed from the very beginning to operate in accordance with the strict letter of the law, but in response to the court's recent rulings, with which we respectfully disagree, we are hereby suspending operations, effective immediately," an email to Locast users sent out this morning reads. Locast was launched in 2019 as an internet-based alternative to over-the-air television, rebroadcasting local, free over-the-air signals over the internet to users in those areas. Unlike Aereo, a similar service that was shut down after a lawsuit ruled it was violating copyright by rebroadcasting over-the-air networks online, Locast relied on a loophole, using its status as a nonprofit to retransmit broadcasts. Further reading: Locast, a Free App Streaming Network TV, Would Love to Get Sued (2019).
AI

Clearview AI Offered Free Facial Recognition Trials To Police Around the World (buzzfeednews.com) 14

An anonymous reader quotes a report from BuzzFeed News: Law enforcement agencies and government organizations from 24 countries outside the United States used a controversial facial recognition technology called Clearview AI, according to internal company data reviewed by BuzzFeed News. That data, which runs up until February 2020, shows that police departments, prosecutors' offices, universities, and interior ministries from around the world ran nearly 14,000 searches with Clearview AI's software. At many law enforcement agencies from Canada to Finland, officers used the software without their higher-ups' knowledge or permission. After receiving questions from BuzzFeed News, some organizations admitted that the technology had been used without leadership oversight.

In March, a BuzzFeed News investigation based on Clearview AI's own internal data showed how the New York -- based startup distributed its facial recognition tool, by marketing free trials for its mobile app or desktop software, to thousands of officers and employees at more than 1,800 US taxpayer-funded entities. Clearview claims its software is more accurate than other facial recognition technologies because it is trained on a database of more than 3 billion images scraped from websites and social media platforms, including Facebook, Instagram, LinkedIn, and Twitter. Law enforcement officers using Clearview can take a photo of a suspect or person of interest, run it through the software, and receive possible matches for that individual within seconds. Clearview has claimed that its app is 100% accurate in documents provided to law enforcement officials, but BuzzFeed News has seen the software misidentify people, highlighting a larger concern with facial recognition technologies.

Based on new reporting and data reviewed by BuzzFeed News, Clearview AI took its controversial US marketing playbook around the world, offering free trials to employees at law enforcement agencies in countries including Australia, Brazil, and the United Kingdom. To accompany this story, BuzzFeed News has created a searchable table of 88 international government-affiliated and taxpayer-funded agencies and organizations listed in Clearview's data as having employees who used or tested the company's facial recognition service before February 2020, according to Clearview's data. Some of those entities were in countries where the use of Clearview has since been deemed "unlawful."
Clearview CEO Hoan Ton-That insists the company's key market is the U.S., saying: "While there has been tremendous demand for our service from around the world, Clearview AI is primarily focused on providing our service to law enforcement and government agencies in the United States. Other countries have expressed a dire need for our technology because they know it can help investigate crimes, such as, money laundering, financial fraud, romance scams, human trafficking, and crimes against children, which know no borders."

Ton-That alleged there are "inaccuracies contained in BuzzFeed's assertions," but declined to explain what those might be and didn't answer any follow-up questions.
Entertainment

Netflix Takes First Stab at Mobile Gaming in its Android App, But Only in Poland (cnet.com) 6

Netflix is testing out its first stab at mobile gaming within its own app at no extra cost, bringing two pre-existing Stranger Things games to its Android app -- but only in Poland. From a report: The two games available in Poland -- Stranger Things: 1984 and Stranger Things 3 -- have been available for years off Netflix's app, having been released through a licensing partnership in 2017 and 2019 to coincide with the second and third seasons of the hit retro-supernatural show. Last month, Netflix confirmed it plans to expand into video games, starting with ad-free games for mobile devices like phones and tablets available on its existing service at no added cost to subscribers. With broad ambitions to ultimately widen even to console games for Xbox and PlayStation, it represents its biggest expansion into a new kind of entertainment since Netflix started streaming in 2007 and released its first original show in 2012.
Google

Google Confirms It's Pulling the Plug on Streams, Its UK Clinician Support App (techcrunch.com) 19

An anonymous reader shares a report: Google is infamous for spinning up products and killing them off, often in very short order. It's an annoying enough habit when it's stuff like messaging apps and games. But the tech giant's ambitions stretch into many domains that touch human lives these days. Including, most directly, healthcare. And -- it turns out -- so does Google's tendency to kill off products that its PR has previously touted as "life saving." To wit: Following a recent reconfiguration of Google's health efforts -- reported earlier by Business Insider -- the tech giant confirmed to TechCrunch that it is decommissioning its clinician support app, Streams. The app, which Google Health PR bills as a "mobile medical device," was developed back in 2015 by DeepMind, an AI division of Google -- and has been used by the U.K.'s National Health Service in the years since, with a number of NHS Trusts inking deals with DeepMind Health to roll out Streams to their clinicians.

At the time of writing, one NHS Trust -- London's Royal Free -- is still using the app in its hospitals. But, presumably, not for too much longer, since Google is in the process of taking Streams out back to be shot and tossed into its deadpool -- alongside the likes of its ill-fated social network, Google+, and Internet balloon company Loon, to name just two of a frankly endless list of now defunct Alphabet/Google products. Other NHS Trusts we contacted which had previously rolled out Streams told us they have already stopped using the app.

Transportation

Waymo Starts Offering Autonomous Rides In San Francisco (theverge.com) 26

Waymo is going to start shuttling a wider group of passengers around in its autonomous vehicles in San Francisco, California -- though they'll have to sign nondisclosure agreements, and there still will be a human safety driver behind the wheel. The Verge reports: It's the second city where the company has expanded its nascent autonomous vehicle offering, as the Google sibling has been performing fully driverless rides without a safety driver in parts of Phoenix, Arizona for more than a year now. Waymo is one of a handful of companies trying to get a commercial service off the ground built around autonomous vehicles, like Argo AI (which is backed by Ford and Volkswagen) and Cruise (which is backed by General Motors).

Waymo has been testing self-driving cars in San Francisco for a decade, dating back to when it was still just a quirky-looking project inside Google. And it has let some Waymo employees ride in the early version of the commercial AV program in San Francisco. But now people can apply through the Waymo One smartphone app to take part in what it's calling the "Trusted Tester" program, which is basically a rebranding of the "Early Rider" program it ran in Phoenix. (Waymo says the Early Rider program in Phoenix will also take on the new name.) People who are accepted into the program will be able to take rides in Waymo's autonomous Jaguar I-Pace SUVs for free but will have to offer feedback in exchange, and they won't be able to publicly share what the experience is like. There will be vehicles that are wheelchair-accessible, too. This is how the company started out the service in Phoenix, though now anyone can hop into one of its vehicles there and even film and share the experience -- warts and all.
"From using the Waymo One app, to pickup and drop-offs, to the ride itself, we receive valuable feedback from our riders that allows us to refine our product offering as we advance our service" in San Francisco, the company wrote in a blog post. "We kicked off this program last week with a select few and are now expanding the program to all interested San Franciscans. We'll begin with an initial group and welcome more riders in the weeks to come."
Facebook

Facebook Wants You To Hold Your Next Meeting in VR (cnn.com) 76

For those who don't think Zoom meetings are a good enough substitute for the real thing, Facebook has another idea: a virtual reality app that lets you and your coworkers feel like you're sitting around a table in a conference room. From a report: On Thursday, Facebook unveiled Horizon Workrooms, a free app for users of its Oculus Quest 2 headset, a device that starts at $299. The app stands out as the company's most ambitious effort yet to enable groups to socialize in VR and move the still niche medium beyond entertainment uses such as gaming. Workrooms allows up to 16 VR headset users to meet in a virtual conference room, with each of them represented by a customizable cartoon-like avatar that appears as just an upper body floating slightly above a virtual chair at a table. The app supports up to 50 participants in a single meeting, with the rest able to join as video callers who appear in a grid-like flat screen inside the virtual meeting room.

Headset-wearing meeting participants can use their actual fingers and hands to gesticulate in VR, and their avatars' mouths appear to move in lifelike ways while they speak. A virtual whiteboard lets people share pictures or make presentations. "The pandemic in the last 18 months has only given us greater confidence in the importance of this as a technology," Andrew Bosworth, VP of Facebook Reality Labs, said while addressing a (virtual) room of about a dozen people on Tuesday. He said Facebook has been using the app internally for about a year.

Programming

After YouTube-dl Incident, GitHub's DMCA Process Now Includes Free Legal Help (venturebeat.com) 30

"GitHub has announced a partnership with the Stanford Law School to support developers facing takedown requests related to the Digital Millennium Copyright Act (DMCA)," reports VentureBeat: While the DMCA may be better known as a law for protecting copyrighted works such as movies and music, it also has provisions (17 U.S.C. 1201) that criminalize attempts to circumvent copyright-protection controls — this includes any software that might help anyone infringe DMCA regulations. However, as with the countless spurious takedown notices delivered to online content creators, open source coders too have often found themselves in the DMCA firing line with little option but to comply with the request even if they have done nothing wrong. The problem, ultimately, is that freelance coders or small developer teams often don't have the resources to fight DMCA requests, which puts the balance of power in the hands of deep-pocketed corporations that may wish to use DMCA to stifle innovation or competition. Thus, GitHub's new Developer Rights Fellowship — in conjunction with Stanford Law School's Juelsgaard Intellectual Property and Innovation Clinic — seeks to help developers put in such a position by offering them free legal support.

The initiative follows some eight months after GitHub announced it was overhauling its Section 1201 claim review process in the wake of a takedown request made by the Recording Industry Association of America (RIAA), which had been widely criticized as an abuse of DMCA... [M]oving forward, whenever GitHub notifies a developer of a "valid takedown claim," it will present them with an option to request free independent legal counsel.

The fellowship will also be charged with "researching, educating, and advocating on DMCA and other legal issues important for software innovation," GitHub's head of developer policy Mike Linksvayer said in a blog post, along with other related programs.

Explaining their rationale, GitHub's blog post argues that currently "When developers looking to learn, tinker, or make beneficial tools face a takedown claim under Section 1201, it is often simpler and safer to just fold, removing code from public view and out of the common good.

"At GitHub, we want to fix this."
Open Source

Audacity's New Owner Is In Another Fight With the Open Source Community (arstechnica.com) 48

An anonymous reader quotes a report from Ars Technica: Muse Group -- owner of the popular audio-editing app Audacity -- is in hot water with the open source community again. This time, the controversy isn't over Audacity -- it's about MuseScore, an open source application that allows musicians to create, share, and download musical scores (especially, but not only, in the form of sheet music). The MuseScore app itself is licensed GPLv3, which gives developers the right to fork its source and modify it. One such developer, Wenzheng Tang ("Xmader" on GitHub) went considerably further than modifying the app -- he also created separate apps designed to bypass MuseScore Pro subscription fees. After thoroughly reviewing the public comments made by both sides at GitHub, Ars spoke at length with Muse Group Head of Strategy Daniel Ray -- known on GitHub by the moniker "workedintheory" -- to get to the bottom of the controversy.

While Xmader did, in fact, fork MuseScore, that's not the root of the controversy. Xmader forked MuseScore in November 2020 and appears to have abandoned that fork entirely; it only has six commits total -- all trivial, and all made the same week that the fork was created. Xmader is also currently 21,710 commits behind the original MuseScore project repository. Muse Group's beef with Xmader comes from two other repositories, created specifically to bypass subscription fees. Those repositories are musescore-downloader (created November 2019) and musescore-dataset (created March 2020). Musescore-downloader describes itself succinctly: "download sheet music from musescore.com for free, no login or MuseScore Pro required." Musescore-dataset is nearly as straightforward: it declares itself "the unofficial dataset of all music sheets and users on musescore.com." In simpler terms: musescore-downloader lets you download things from musescore.com that you shouldn't be able to; musescore-dataset is those files themselves, already downloaded. For scores that are in the public domain or that users have uploaded under Creative Commons licenses, this isn't necessarily a problem. But many of the scores are only available by arrangement between the score owner and Muse Group itself -- and this has several important implications.

Just because you can access the score via the app or website doesn't mean you're free to access it anywhere, anyhow, or redistribute that score yourself. The distribution agreement between Muse Group and the rightsholder allows legitimate downloads, but only when using the site or app as intended. Those agreements do not give users carte blanche to bypass controls imposed on those downloads. Further, those downloads can often cost the distributor real money -- a free download of a score licensed to Muse Group by a commercial rightsholder (e.g., Disney) is generally not "free" to Muse Group itself. The site has to pay for the right to distribute that score -- in many cases, based on the number of downloads made. Bypassing those controls leaves Muse Group on the hook either for costs it has no way to monetize (e.g., by ads for free users) or for violating its own distribution agreements with rightsholders (by failing to properly track downloads).

Cellphones

Right-wing Activist's $500 'Freedom Phone' Actually Cheap Rebranded Android Model Made in China (gizmodo.com) 226

"This week, a 22-year-old self-described Bitcoin millionaire introduced the Freedom Phone, a $499 device meant to be completely free from 'Big Tech's' censorship and influence," reports PC Magazine.

"But it turns out the same smartphone is actually from China, and probably just a cheap knock-off." The Freedom Phone comes from Erik Finman, who unveiled the device earlier this week. He claims the product has everything Trump supporters could dream of, including an "uncensorable" app store, preinstalled conservative-friendly apps including Parler and Rumble, and even its own anti-surveillance operating system called FreedomOS... However, The Daily Beast noticed the Freedom Phone looks strikingly similar to a budget smartphone device from a Chinese vendor called Umidigi. The device is called the Umidigi A9 pro, and you can actually buy it over on the Chinese e-commerce site AliExpress starting at $119. Finman later told The Daily Beast that the Freedom Phone was indeed sourced from Umidigi, a company that's based in Shenzhen, China...

An uncensorable app store opens the door for hackers and shady developers to circulate malware and data-collecting programs to users. We're also doubtful Freedom Phone has its own operating system if it can run apps such as Parler and Rumble, in addition to Signal, Telegram and Brave

The Daily Beast adds this anecdote: The Freedom Phone's "Freedom OS" operating system is based on Google's Android operating system, according to Finman. But during a livestream video promoting the phone, right-wing activist Anna Khait was confused by her fans' basic questions about the phone. "Is it an Android?" Khait said. "I'm not really sure. No, it's a Freedom Phone."
Gizmodo calls the phone's web site "radically vague on the details." There is no information about the phone's operating system, storage, camera, CPU, or RAM capabilities. It has a list of features, but there are no actual details about them. Instead, under each feature, there's merely a "Buy it now" button which redirects you to the site's shopping cart. The phone's hefty price, combined with the company's total lack of transparency, is ridiculous — essentially asking the buyer to cough up half a grand in exchange for, uh, something...!
But Gizmodo also shares a philosophical thought: Before we get into the specifics of why this device probably sucks, let me just say that the desire to have a phone that is dedicated to protecting your autonomy and privacy is a reasonable one — and should be encouraged. That said, I don't think the Freedom Phone provides that. Actually, aside from its overt partisan bent, it's impossible to tell what kind of device this is because Finman and his acolytes haven't provided any information about it...

The funny thing is, if Trump voters are looking for a way to get off the "Big Tech" grid, there's no need for them to buy this sketchy shit. There are actually entire subcultures within the phone industry dedicated to escaping the Android/iOS paradigm. You can wade into the de-Googled phone sector, for instance — where Android phones are sold that have ostensibly been refurbished to rid the devices of code that will "send your personal data" back to the tech giant. There's also the Linux-based Pinephone, which sells at a fraction of the Freedom Phone's cost (between $150 and $200), and is a favorite of those in the privacy community. All of these come with caveats, obviously, but the point is that there are much more transparent and affordable options than the Freedom Phone...

It'd be nice if Americans could actually come together around the issue of privacy since it's an area where — regardless of political party — we're all collectively getting screwed.

Music

No, Open Source Audacity Audio Editor Is Not 'Spyware' (arstechnica.com) 125

Over the Fourth of July weekend, a number of news outlets, including Slashdot, ran stories warning that the free and open-source audio editor Audacity may now be classified as spyware due to recent updates to its privacy policy. Ars Technica's Jim Salter looked into these claims and found that that is not the case. An anonymous reader shares an excerpt from his report: FOSS-focused personal technology site SlashGear declares that although Audacity is free and open source, new owner Muse Group can "do some pretty damaging changes" -- specifically meaning its new privacy policy and telemetry features, described as "overarching and vague." FOSSPost goes even further, running the headline "Audacity is now a possible spyware, remove it ASAP." The root of both sites' concern is the privacy policy instigated by new Audacity owner Muse Group, who already published open source music notation tool MuseScore. The privacy policy, which was last updated on July 2, outlines the data which the app may collect [...]. The personal data being collected as outlined in the first five bullet points is not particularly broad -- in fact, it's quite similar to the collected data described in FOSSPost's own privacy policy: IP address, browser user-agent, "some other cookies your browser may provide us with," and (by way of WordPress and Google analytics) "your geographical location, cookies for other websites you visited or any other information your browser can give about you." This leaves the last row -- data necessary for law enforcement, litigation and authorities' requests (if any)." While that's certainly a broad category and not particularly well-defined, it's also a fact of life in 2021. Whether a privacy policy says so or not, the odds are rather good that any given company will comply with legitimate law enforcement requests. If it doesn't, it won't likely be a company for long. The final grain of salt in the wound is a line stating that Audacity is "not intended for individuals below the age of 13" and requesting people under 13 years old "please do not use the App." This is an effort to avoid the added complexity and expense of dealing with laws regulating collection of personal data from children.

The first thing to point out is that neither the privacy policy nor the in-app telemetry in question are actually in effect yet -- both are targeted to an upcoming 3.0.3 release, while the most recent available version is 3.0.2. For now, that means there's absolutely no need for anyone to panic about their currently-installed version of Audacity. [...] Although FOSS-focused media outlets including FOSSPost and Slashgear reported negatively on this issue over the holiday weekend, the contributors and commenters active on the project's Github seem to have been largely satisfied by the May 13 update, which declared that Muse Group would self-host its telemetry sessions rather than using third-party libraries and hosting. The same day the second pull request went live, Github user Megaf said, "Good stuff. As long as the data is not going to [third party tech giants] we should be happy. Collect the data you really need, self-host it, make it private, make it opt-in, and we shall help." It's a small sample, but the sentiment seems broadly supported, with 66 positive and 12 negative reactions. Reaction to Megaf's comment reflects user reaction to the updated pull request itself, which currently has 606 positive and 29 explicitly negative reactions -- a marked improvement over the original pull request's 4,039 explicitly negative reactions and only 300 positive reactions. We believe that the user community got it right -- Muse Group appears to be taking the community's privacy concerns very seriously indeed, and its actual policies as stated appear to be reasonable.

Open Source

Is Open Source Audio Editor Audacity 'Spyware'? (pcmag.com) 203

Anyone deciding to download the free and open-source audio editor Audacity is being warned that the software may now be classified as spyware due to recent updates to its privacy policy. From a report: Audacity has been around for over 21 years and classes as the world's most popular audio editing software. On April 30, the Muse Group acquired Audacity with the promise that the software would "remain forever free and open source." However, as FOSS Post reports, last week the Audacity privacy policy page was updated and introduced a number of personal data collection clauses. The data collected includes OS version and name, user country based on IP address, the CPU being used, data related to Audacity error codes and crash reports, and finally "Data necessary for law enforcement, litigation and authorities' requests (if any)." The personal data collected can be shared with Muse Group employees, auditors, advisors, legal representatives and "similar agents," potential company buyers, and "any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, or (ii) to exercise, establish or defend our legal rights."
UPDATE: Ars Technica's Jim Salter disagrees, pointing out that "neither the privacy policy nor the in-app telemetry in question are actually in effect yet," and that the company now plans to self-host its telemetry sessions rather than using third-party libraries and hosting.
Privacy

Intuit to Share Payroll Data from 1.4M Small Businesses With Equifax (krebsonsecurity.com) 25

Financial services giant Intuit this week informed 1.4 million small businesses using its QuickBooks Online Payroll and Intuit Online Payroll products that their payroll information will be shared with big-three consumer credit bureau Equifax starting later this year unless customers opt out by the end of this month. Krebs On Security reports: Intuit says the change is tied to an "exciting" and "free" new service that will let millions of small business employees get easy access to employment and income verification services when they wish to apply for a loan or line of credit. "In early fall 2021, your QuickBooks Online Payroll subscription will include an automated income and employment verification service powered by The Work Number from Equifax," reads the Intuit email, which includes a link to the new Terms of Service. "Your employees may need to verify their income and employment info when applying for things like loans, credit, or public aid. Before, you likely had to manually provide this info to lenders, creditors or government agencies. These verifications will be automated by The Work Number, which helps employees get faster approvals and saves you time." An Intuit spokesperson clarified that the new service is not available through QuickBooks Online or to QuickBooks Online users as a whole. Intuit's FAQ on the changes is here.

"The way I read the terms, Equifax gets to proactively collect all payroll data just in case they need to share it later -- similar to how they already handle credit reporting," said Citrano, who is founder and CEO of Acquicent, a company that issues non-fungible tokens (NFTs). "And that feels like a disaster waiting to happen, especially given Equifax's history." In selling payroll data to Equifax, Intuit will be joining some of the world's largest payroll providers. For example, ADP -- the largest payroll software provider in the United States -- has long shared payroll data with Equifax. But Citrano said this move by Intuit will incorporate a large number of fairly small businesses. "ADP participates in some way already, but QuickBooks Online jumping on the bandwagon means a lot of employees of small to mid-sized businesses are going to be affected," he said. Why might small businesses want to think twice before entrusting Equifax with their payroll data? The answer is the company doesn't have a great track record of protecting that information.
In 2017, Equifax had a massive data breach that exposed the personal and financial details of 145.5 million Americans.

If customers do not want this new service, they must update their preferences and opt-out by July 31, 2021. Otherwise, they'll be automatically opted in. You can opt out by signing in to QuickBooks Online Payroll, navigating to Payroll Settings, selecting the pencil and unchecking the box in the Shared data section, and saving your changes.

Slashdot Top Deals