Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Submission + - OxygenOS Telemetry Lets OnePlus Maker Tie Phones To Individual Users (bleepingcomputer.com)

An anonymous reader writes: OxygenOS, a custom version of the Android operating system that comes installed on all OnePlus smartphones, is tracking users actions without anonymizing data, allowing OnePlus to connect each phone to its customer. A security researcher going by the pseudonym of Tux discovered the abusive tracking in July 2016, but his tweet went largely unnoticed in the daily sea of security tweets sent out each day. The data collection issue was brought up to everyone's attention again, today, after British security researcher Christopher Moore published the results of a recent study on his site.

Just like Tux, Moore discovered that OxygenOS was sending regular telemetry to OnePlus' servers. This is no issue of concern, as almost all applications these days collect telemetry data for market analytics and to identify and debug application flaws. The problem is that OnePlus is not anonymizing this information. The Shenzhen-based Chinese smartphone company is collecting a long list of details, such as: IMEI code, IMSI code, ESSID and BSSID wireless network identifiers, and more. The data collection process cannot be disabled from anywhere in the phone's settings. When Moore contacted OnePlus support, the company did not provide a suitable answer for his queries.

Submission + - Ask Slashdot: Security review tales

TreZ writes: If you write software, you are most likely subject to a "security review" at some point. A large portion of this is common sense like don't put plain text credentials into github, don't write your own encryption algorithms, etc. Once you get past that there is a "subjective" nature to these reviews.

What is the worst "you can't do" or "you must do" that you've been subjected to in a security review? A fictitious example would be: you must authenticate all clients with a client certificate, plus basic auth, plus MFA token. Tell your story here, omitting incriminating details.

Submission + - Samsung does Windows Mixed Reality with Odyssey HMD headset (windowscentral.com)

Eloking writes: At an event in San Francisco, Microsoft Operating Systems Group Technical Fellow and HoloLens inventor Alex Kipman outlined the future of Windows Mixed Reality, which Redmond seems to believe is the future of computing.

Whether or not it is remains to be seen, but either way, there will be no shortage of Windows Mixed Reality headsets this holiday season, with perhaps the most compelling option coming from Samsung.

The $500 Samsung HMD Odyssey sports dual AMOLED eye displays, complete with a 110-degree field of view (FoV). This could potentially make a huge difference in the quality of the Windows Mixed Reality experience for two reasons. First, AMOLED displays can generate deeper blacks and more vibrant colors than your average OLED or LCD screen. Second, all other Windows Mixed Reality headsets we've seen have a 95-degree FoV. The Samsung headset will be more immersive because there will be less dead space in your peripheral vision. The headset is expected to be available on November 6, 2017, and it comes with motion controllers.

Submission + - A Fourth Gravitational Wave Has Been Detected (theguardian.com)

An anonymous reader writes: Astronomers have made a new detection of gravitational waves and for the first time have been able to trace the shape of ripples sent through spacetime when black holes collide. The announcement, made at a meeting of the G7 science ministers in Turin, marks the fourth cataclysmic black-hole merger that astronomers have spotted using Ligo, the Laser Interferometer Gravitational-Wave Observatory. The latest detection is the first to have also been picked up by the Virgo detector, located near Pisa, Italy, providing a new layer of detail on the three dimensional pattern of warping that occurs during some of the most violent and energetic events in the universe.

A tiny wobble in the signal, picked up by Ligo’s twin instruments and the Virgo detector on 14 August, could be traced back to the final moments of the merger of two black holes about 1.8bn years ago. The black holes, with masses about 31 and 25 times the mass of the sun, combined to produce a newly spinning black hole with about 53 times the mass of the sun. The remaining three solar masses were converted into pure energy that spilled out as deformations that spread outwards across spacetime like ripples across a pond. Detecting these tiny distortions has required detectors sensitive enough to measuring a discrepancy of just one thousandth of the diameter of an atomic nucleus across a 4km laser beam.

Slashdot Top Deals

The clash of ideas is the sound of freedom.

Working...