Communications

Apple Removes Facebook's Onavo Security App From the App Store (cnbc.com) 98

Apple has removed Facebook's Onavo security app from the App Store because it violated the company's privacy rules. In a statement to CNBC, an Apple spokesperson said: "We work hard to protect user privacy and data security throughout the Apple ecosystem. With the latest update to our guidelines, we made it explicitly clear that apps should not collect information about which other apps are installed on a user's device for the purposes of analytics or advertising/marketing and must make it clear what user data will be collected and how it will be used." From the report: According to a Wall Street Journal story on Wednesday, citing a person familiar with the matter, Apple officials told Facebook last week that Onavo violated the company's rules on data collection by developers, and suggested last Thursday that Facebook voluntarily remove the app. Facebook acquired Israel-based Onavo in 2013, snapping up the free security app that lets users access a virtual private network, or VPN, to browse the web and download apps with a greater degree of privacy. Facebook in the past has offered that service to users without clearly disclosing that its owns the app, and has collected data about what other types of apps those customers use. In June, Facebook told Congress that it does not use Onavo data "for Facebook product uses" or to collect information about individuals, but it has admitted to using Onavo to gather broad information about which apps are popular and how people are using them, which it uses to improve its own products.
Debian

Intel Publishes Microcode Security Patches With No Benchmarks Or Profiling Allowed (theregister.co.uk) 373

Long-time Slashdot reader Bruce Perens writes: The Register reports that Debian is rejecting a new Intel microcode update because of a new license term prohibiting the use of the CPU for benchmarks and profiling.

There is a new license term applied to the new microcode: "You will not, and will not allow any third party to (i) use, copy, distribute, sell or offer to sell the Software or associated documentation; (ii) modify, adapt, enhance, disassemble, decompile, reverse engineer, change or create derivative works from the Software except and only to the extent as specifically required by mandatory applicable laws or any applicable third party license terms accompanying the Software; (iii) use or make the Software available for the use or benefit of third parties; or (iv) use the Software on Your products other than those that include the Intel hardware product(s), platform(s), or software identified in the Software; or (v) publish or provide any Software benchmark or comparison test results."
UPDATE:: Intel has reworked the license to no longer prohibit benchmarking. Imad Sousou, corporate VP and general manager of Intel Open Source Technology Center, tweeted on Thursday: "We have simplified the Intel license to make it easier to distribute CPU microcode updates and posted the new version here. As an active member of the open source community, we continue to welcome all feedback and thank the community."
Open Source

LA County Gets State Approval of New Vote-Counting System Using Open-Source Software (latimes.com) 95

A new voting system that uses open-source software for counting ballots has been approved by California elections officials. "The certification of the new tally system for the county paves the way for other improvements, including redesigned absentee ballot packets, in the Nov. 6 election," reports Los Angeles Times. "It is the first election system of its kind, using publicly available source code that has been certified for use in California." From the report: The ballot-counting equipment is part of a broader redesign of Los Angeles County's voting system, which will include new equipment while relying on a traditional paper ballot. The county's existing system, portions of which are now decades old, has been targeted for replacement for several years.
Verizon

Fire Department Rejects Verizon's 'Customer Support Mistake' Excuse For Throttling (arstechnica.com) 251

An anonymous reader quotes a report from Ars Technica: A fire department whose data was throttled by Verizon Wireless while it was fighting California's largest-ever wildfire has rejected Verizon's claim that the throttling was just a customer service error and "has nothing to do with net neutrality." The throttling "has everything to do with net neutrality," a Santa Clara County official said. Verizon yesterday acknowledged that it shouldn't have continued throttling Santa Clara County Fire Department's "unlimited" data service while the department was battling the Mendocino Complex Fire. Verizon said the department had chosen an unlimited data plan that gets throttled to speeds of 200kbps or 600kbps after using 25GB a month but that Verizon failed to follow its policy of "remov[ing] data speed restrictions when contacted in emergency situations." "This was a customer support mistake" and not a net neutrality issue, Verizon said. "Verizon's throttling has everything to do with net neutrality -- it shows that the ISPs will act in their economic interests, even at the expense of public safety," County Counsel James Williams said on behalf of the county and fire department. "That is exactly what the Trump Administration's repeal of net neutrality allows and encourages."
Transportation

Colorado Prepares To Install 'Smart Road' Product By Integrated Roadways (ieee.org) 62

Wave723 shares a report from IEEE Spectrum: On August 30, a startup plans to add its "smart pavement" to an intersection in an industrial corner of Denver, Colorado. The company has encased assorted electronics within four slabs of concrete and will wedge those slabs into the road between a Pepsi Co. bottling plant and two parking lots. Integrated Roadways says its product, which can deduce the speed, weight, and direction of a vehicle from the basket of sensors buried in the pavement, will face its first real-world test at that discreet Denver junction. If this trial goes well, the startup "will replace 500 meters of pavement along a dangerous curve in Highway 285, just south of Denver, with its product in early 2019," reports IEEE Spectrum. The sensors will be able to detect when a driver careens off the road's edge and alert authorities. It even has the ability to prompt officials to reconfigure lanes to relieve congestion.
Facebook

Facebook Wants To Use Machine Learning To Make MRIs Faster 67

Facebook believes they can use machine learning to speed up magnetic resonance imaging (MRI) scans. Computer scientists from the social networking site are working with New York University's medical school on the project. CNNMoney reports: NYU is providing an anonymous dataset of 10,000 MRI exams, a trove that will include as many as three million images of knees, brains and livers. Researchers will use the data to train an algorithm, using a method called deep learning, to recognize the arrangement of bones, muscles, ligaments, and other things that make up the human body. Building this knowledge into the software that powers an MRI machine will allow the AI to create a portion of the image, saving time. Making the tests faster would allow radiologists to perform a wider variety of tests.
Security

'Legacy System' Exposed Black Hat 2018 Attendees' Contact Info (techcrunch.com) 21

An anonymous reader quotes a report from TechCrunch: A "legacy system" was to blame for exposing the contact information of attendees of this year's Black Hat security conference. Colorado-based pen tester and security researcher who goes by the handle NinjaStyle said it would have taken about six hours to collect all the registered attendees' names, email and home addresses, company names and phone numbers from anyone who registered for the 2018 conference. In a blog post, he explained that he used a reader to access the data on his NFC-enabled conference badge, which stored his name in plaintext and other scrambled data. The badge also contained a web address to download BCard, a business card reader app. After decompiling the BCard app, the researcher found an API endpoint in its code, which he used to pull his own data from the server without any security checks. By enumerating and cycling through unique badge ID numbers, he was able to download a few hundred Black Hat attendee records from the server. The API was not rate limited either at all or enough to prevent the mass downloading of attendee records, the blog post said. The legacy system's API was disabled within a day of the disclosure. Black Hat said in a statement: "Thanks to them for disclosing this promptly and responsibly to our technology partner, who addressed the vulnerability immediately. We're working with our partner to ensure this isn't an issue in the future."
Businesses

Apple and Google Face Growing Revolt Over App Store 'Tax' (bloomberg.com) 128

A backlash against the app stores of Apple and Google is gaining steam, with a growing number of companies saying the tech giants are collecting too high a tax for connecting consumers to developers' wares. From a report: Netflix and video game makers Epic Games and Valve are among companies that have recently tried to bypass the app stores or complained about the cost of the tolls Apple and Google charge. Grumbling about app store economics isn't new. But the number of complaints, combined with new ways of reaching users, regulatory scrutiny and competitive pressure are threatening to undermine what have become digital goldmines for Apple and Google. "It feels like something bubbling up here," said Ben Schachter, an analyst at Macquarie. "The dollars are just getting so big. They just don't want to be paying Apple and Google billions." Apple and Google launched their app stores in 2008, and they soon grew into powerful marketplaces that matched the creations of millions of independent developers with billions of smartphone users. In exchange, the companies take up to 30 percent of the money consumers pay developers.
Technology

You Spend More Than 5 Hours Each Week Checking Your Email (fortune.com) 72

In a survey of more than 1,000 "white-collar workers" across the U.S., people reported checking their email an average of 2.5 hours each weekday. The average person checks work email more than three hours each day, according to Adobe, which conducted the survey. From a report: According to the report, email is most popular among people between the ages of 25 and 34 -- today's Millennial generation, roughly. That group spends an average of 6.4 hours in their Inboxes each day, compared to 5.8 hours for those between the ages of 18 and 24. For the first time in the three years Adobe has conducted the survey, email isn't the sole most desirable way to communicate with colleagues. Instead, face-to-face conversations are tied with it as the top communication method at work. When it's time for tough conversations, though -- like quitting a job -- face-to-face conversations have lost some ground. Just 52% of those between the ages of 25 and 34 say they would use a face-to-face conversation to quit a job. That number jumps to 77% among those over the age of 35.
Businesses

Walmart Launches Online Store For Ebooks, Audiobooks (variety.com) 55

Amazon just got yet another competitor in the ebook and audiobook space: Walmart launched its very own digital book store Wednesday, selling ebooks as well as audiobooks through its website and dedicated apps. From a report: The retail giant's digital book service is being powered by Kobo, the ebook company owned by Japan's Rakuten. Through the partnership, Walmart customers are now able to buy from a catalog of more than six million books, which can be read through dedicated mobile apps as well as Kobo's line of ebook readers. Walmart is also launching a Kobo-powered audiobook subscription service for $9.99 per month. For that price, consumers get one book credit per month. Audiobooks will be accessible even after a subscription is cancelled. As part of the partnership, Walmart will also start to sell so-called digital book cards that can be redeemed online for ebooks in 3500 stores.
United States

Democratic National Committee Says Hackers Unsuccessfully Targeted Voter Database (cnn.com) 150

The Democratic National Committee contacted the FBI on Tuesday after it detected what it believes was the beginning of a sophisticated attempt to hack into its voter database, a Democratic source tells CNN. From a report: The DNC was alerted in the early hours of Tuesday morning by a cloud service provider and a security research firm that a fake login page had been created in an attempt to gather usernames and passwords that would allow access to the party's database, the source said. The page was designed to look like the access page Democratic Party officials and campaigns across the country use to log into a service called Votebuilder, which hosts the database, the source said, adding the DNC believed it was designed to trick people into handing over their login details. The source said the DNC is investigating who may have been responsible for the attempted attack, but that it has no reason to believe its voter file was accessed or altered.
Android

China's Xiaomi Announces New Venture To Bring Budget Flagship Smartphones To Over 50 Markets; Announces $300 Handset Featuring Qualcomm's Snapdragon 845 (venturebeat.com) 72

Chinese electronics giant Xiaomi has made a name for itself selling impressively durable smartphones at aggressive price points. But the company has so far focused on low and mid-tier handsets that it mostly sells in China and neighboring countries. At an event in New Delhi, India today, the world's fourth largest smartphone maker announced an ambitious plan to expand its offerings and reach. From a report: Xiaomi announced a new venture called Poco under which it plans to produce and sell high-end handsets that would compete directly with the top offerings by OnePlus and Samsung, two companies that have demonstrably performed well in what analysts call the "budget flagship" smartphone segment. To mark the debut of the new venture, the company today unveiled the first handset under the Poco umbrella, the Pocophone F1. The handset houses top-of-the-line hardware modules, including Qualcomm's flagship Snapdragon 845 SoC, a 20-megapixel selfie camera, and fast-cooling tech to sustain performance, in a polycarbonate body. The base model, which in addition to Qualcomm Snapdragon 845 SoC also features 6GB of RAM and 64GB of expandable storage, is priced at Rs 20,999 ($300), less than half the price of an arguably comparable Samsung handset. The handset, which runs a customized version called MIUI, which is based on Android 8.1, would be sold in more than 50 markets, the report added.

Further reading: Chinese Smartphone Maker Xiaomi Says It is Working To Enter the US Market Next Year.
Communications

New Tech Lets Submarines 'Email' Planes (bbc.com) 58

A way for submerged submarines to communicate with planes has been developed by researchers at MIT. From a report: At present, it is difficult for planes to pick up underwater sonar signals because they reflect off the water's surface and rarely break through. The researchers found an extremely high-frequency radar could detect tiny ripples in water, created by an ordinary underwater speaker. This could let lost flight recorders and submarines communicate with planes. Submarines communicate using sonar waves, which travel well underwater but struggle to break through the surface. Planes communicate using radio signals that do not travel well in water. At present, submarines can surface to send messages - but this risks revealing their location. Sometimes, buoys are used to receive sonar signals and translate them into radio signals. "Trying to cross the air-water boundary with wireless signals has been an obstacle," said Fadel Adib, from the MIT Media Lab. The system developed at MIT uses an underwater speaker to aim sonar signals directly at the water's surface, creating tiny ripples only a few micrometres in height. These ripples can be detected by high-frequency radar above the water and decoded back into messages.
China

Chinese President Xi Jinping Says Internet Must Be 'Clean and Righteous' (reuters.com) 325

The internet must be "clean and righteous" and vulgar content must be resisted in the field of culture, Chinese President Xi Jinping told a meeting of senior propaganda officials, state media said on Wednesday. From a report: The government has been tightening controls over internet content as part of what it says are efforts to maintain social stability, taking on "vulgar" and pornographic content as well as the unauthorised dissemination of news. The moves come amid a broader clamp-down targeting online content from livestreams and blogs to mobile gaming, as the country's leaders look to tighten their grip over a huge and diverse cultural scene online popular with China's youth. Speaking at a two-day meeting, attended by officials from major state media outlets and the internet regulator, Xi said propaganda efforts needed to be put front and centre, the official Xinhua news agency said. "Uphold a clean and righteous internet space," the report cited Xi as saying. China shut as many as 128,000 websites that contained obscene and other "harmful" information in 2017, Xinhua reported in January, citing government data.
Education

Google, Apple and 13 Other Companies That No Longer Require Employees To Have a College Degree (cnbc.com) 224

The economy continues to be a friendly place for job seekers today, and not just for the ultra-educated -- economists are predicting ever-improving prospects for workers without a degree as well. From a report: Recently, job-search site Glassdoor compiled a list of 15 top employers that have said they no longer require applicants to have a college degree. Companies like Google, Apple, IBM and EY are all in this group. In 2017, IBM's vice president of talent Joanna Daley told CNBC Make It that about 15 percent of her company's U.S. hires don't have a four-year degree. She said that instead of looking exclusively at candidates who went to college, IBM now looks at candidates who have hands-on experience via a coding boot camp or an industry-related vocational class.

Slashdot Top Deals