×
Security

Computers Aboard Airliners Vulnerable to Hacking, Watchdog Says (bloomberg.com) 29

Airliners carry a variety of computer systems that could become vulnerable to hackers and U.S. regulators haven't imposed adequate counter measures, a government watchdog report concluded. From a report: The Federal Aviation Administration hasn't prioritized cyber risks, developed a cybersecurity training program or conducted testing of potentially vulnerable systems, the Government Accountability Office said in a report issued Friday. "Until FAA strengthens its oversight program, based on assessed risks, it may not be able to ensure it is providing sufficient oversight to guard against evolving cybersecurity risks facing avionics systems in commercial airplane," the GAO report said. Commercial aircraft carry increasingly sophisticated computer systems, including wireless networks, seat-back entertainment, position broadcasts and devices that automatically transmit data to the ground.
Google

Google and Apple's Contact-Tracing API Doesn't Work on Public Transport, Study Finds (vice.com) 43

Covid-19 contact-tracing apps that rely on an API developed by Apple and Google and bluetooth technology cannot accurately measure the distance between users on public transport, a recently released study from Trinity College Dublin has found. From a report: The researchers of the study first tested the API on a group of volunteers who switched seats every fifteen minutes in a Dublin tram. They then ran the collected data through the detection rules of the Swiss, German, and Italian contact-tracing apps to see how often they correctly identified contact between users. Based on this, they found that the chance of an accurate detection was "similar to that of triggering notifications by randomly selecting from the participants in our experiments, regardless of proximity."

So, no better than random. This finding is the latest example of mounting skepticism among experts regarding the effectiveness of the technology underlying the apps which have been widely released -- but less widely used -- by governments across Europe and more recently the United States. Most contact-tracing apps in Europe and the United States use Apple and Google's exposure notification API, which in turn relies on in-built wireless Bluetooth technology to estimate the distance between two users and whether they've been in contact. What actually constitutes 'contact' is set by the developers of whichever app calls the API, but it's usually defined as being within 2 meters (~6.5 feet) of another user for at least 15 minutes. Once a user uploads a positive test result to a contact-tracing app, it notifies all contacted users and lets them know that they've been at risk of infection.

Wireless Networking

Five Bar and Cafe Owners Arrested in France For Running No-Log WiFi Networks (zdnet.com) 178

In one of the weirdest arrests of the year, at least five bar and cafe managers from the French city of Grenoble were taken into custody last week for running open WiFi networks at their establishments and not keeping logs of past connected users. From a report: The bar and cafe owners were arrested for allegedly breaking a 14-year-old French law that dictates that all internet service providers must keep logs on all their users for at least one year. According to local media reports, the bar and cafe owners claimed they were not aware that such a law even existed, let alone that it applied to them as they had not received notifications from their union, which usually sends alerts of industry-wide legal requirements. Nonetheless, French media pointed out that the law's text didn't only apply to internet service providers (ISPs) in the broad meaning of the word -- as in telecommunications providers -- but also to any "persons" who provide internet access, may it be free of charge or via password-protected networks.
Networking

Amazon Brings Eero Mesh Wi-Fi To ISPs (zdnet.com) 28

Amazon's Eero mesh networking company is introducing Eero for Service Providers. "This is an all-new hardware and software offering designed to help internet service providers (ISPs) meet customers' increasing demands for exceptional home Wi-Fi," writes Steven J. Vaughan-Nichols via ZDNet. "This is not just a bundling of a selection of Eero Wi-Fi mesh routers with your existing internet service. It also includes remote network management for your ISP and security and privacy management tools for you." From the report: The bundle starts, of course, with the routers. Besides offering Eero's existing whole-home mesh Wi-Fi systems to customers, ISPs will also get access to the all-new Eero 6 series. These come with Wi-Fi 6. This new Wi-Fi technology supports faster speeds and more simultaneously connected devices. Eero claims that this is its fastest Wi-Fi network yet. There are two models: Eero Pro 6 and Eero 6. These new devices also come with a built-in Zigbee smart home hub. This IEEE 802.15.4 personal-area network standard Internet of Things (IoT) hub lets you manage compatible IoT devices on your networks. This way you don't need a separate Zigbee hub.

For ISPs, Eero Insight builds on Eero's existing Remote Network Management software. This combines monitoring user history to predict and address customer problems before they change from annoyances to real problems. It also includes network monitoring tools such as a network topology viewer, historical speed tests and bandwidth usage, RF diagnostics, alerts, audit logs, outage detection, fleet analysis, and network health. For users, all this should mean a more reliable internet connection and that's always good news.

Earth

100,000 Apple Devices Repaired, Resold: Apple Sues Canadian Recycling Firm (iphoneincanada.ca) 113

Slashdot reader spth writes: At a Canadian recycling firm hired by Apple to scrap about 600,000 Apple devices, 100,000 of them were actually resold to other companies that made working devices from the parts.

Apple now sues the recycling company for the money made from the sale plus 31 million Canadian dollars. The recycling company claims that the devices were resold by three rogue employees that pocketed the profits.

The re-sold devices included iPhones, iPads and Apple Watches, according to news reports, and though they were being re-sold in China, Apple still complains that at least 18% of the devices they'd shipped to the company they later found active on wireless carrier networks.

Apple also says the re-sales dampened demand for new Apple products, hurt their brand by keeping products intended for destruction out on the market — and created a safety issue for consumers.
Software

Conservancy Announces New Strategy For GPL Enforcement (sfconservancy.org) 6

Long-time Slashdot reader Jeremy Allison - Sam shares an announcement from the Software Freedom Conservancy, detailing a new strategy toward improving compliance and the freedom of users of devices that contain Linux-based systems. From the post: The new work has received an initial grant from Amateur Radio Digital Communications (ARDC). Our new initiative features:

1) Litigation to enforce against license violators that do not voluntarily comply in a timely manner.
2) Coordinating the development of alternative firmware for devices where none currently exists.
3) Collaborating with other organizations to promote copyleft compliance as a feature for consumers to protect their privacy and get more out of their devices.

We take this holistic approach because compliance is not an end in itself, but rather a lever to help people advance technology for themselves and the world. [...] ARDC has long served the amateur radio community who were early adopters of Internet communication. These roots have grown from the deeper soils of wireless and digital communication and open access to technical information. Amateur radio operators have long practiced the tradition of individual technical experimentation that benefited the general public. These traditions also form the basis of software freedom. Hobbyists and volunteers built, modified and improved Free and Open Source Software (FOSS) first. Conservancy defends the rights of software developers to examine the code in their devices and assists their work to improve the platforms they rely on and to understand our communication technologies. Copyleft compliance enables this work to continue and expand to new kinds of devices. [...]

When companies prevent us from actually modifying the software on our devices, software freedom remains only theoretical. In this new chapter of compliance work, Conservancy will leverage its technical and legal resources to help the public take control of the software on which they rely. This generous grant from ARDC is a first step. Please help in the next step through support of Conservancy's work with a donation. You can also email compliance@sfconservancy.org to let us know about GPL violations or to discuss volunteering on these projects.

Communications

Study Sounds Alarm on 5G Fake News, EU Needs To Promote Benefits (reuters.com) 49

European Union leaders need to tackle urgently disinformation on 5G technology, which is central to the bloc's economic recovery from COVID-19 and its plans to catch up with the United States and China, a study by telecoms lobby group ETNO showed. From a report: Conspiracy theories that tie the wireless technology to the spread of the novel coronavirus have seen mobile phone masts torched in 10 European countries and assaults on scores of maintenance workers in recent months. For the 27-country EU, however, 5G which promises to enable everything from self-driving cars to remote surgery and more automated manufacturing is seen as the linchpin of its economic recovery and technology autonomy. A study by consultant IPSOS, commissioned by telecoms lobbying groups ETNO and seen by Reuters, underlines the battle ahead for EU governments. "While the majority of Europeans is positive towards 5G, 10% of those interviewed hold a negative view on this technology. IPSOS also tested some 5G myths and found that while a small minority believes in them, a substantial amount of Europeans isn't sure that they are false either," ETNO said.
The Courts

Sonos Sues Google For Infringing Five More Wireless Audio Patents (theverge.com) 15

Sonos has filed another patent lawsuit against Google, alleging that the search giant is infringing five wireless audio patents across the entire line of Nest and Chromecast products. From a report: Sonos filed its first patent lawsuits against Google in January in California federal court and with the International Trade Commission; the federal case has been put on hold while the ITC reaches a decision on whether to block Google's allegedly infringing products from market. The new case is filed only in the federal court for the Western District of Texas -- an emerging patent lawsuit hotspot -- and represents a more aggressive approach from Sonos. "We think it's important to show the depth and breadth of Google's copying," says Eddie Lazarus, Sonos' chief legal officer. "We showed them claim charts on 100 patents that we claimed they were infringing, all to no avail." Google, of course, says it will fight back; it has countersued Sonos in the initial case. "Sonos has made misleading statements about our history of working together," says Google spokesperson Jose Castaneda. "Our technology and devices were designed independently. We deny their claims vigorously, and will be defending against them."
Google

Google Announces the Pixel 5 for $699 (theverge.com) 44

Google has officially taken the wraps off of the $699 Pixel 5, its latest Android flagship. From a report: Compared to last year's Pixel 4, Google is focusing less on dramatic new technology -- like the much-hyped Motion Sense gestures on last year's model -- and emphasizing instead the unique features that already help set the Pixel apart, like its stand-out camera software. The Pixel 5 will feature a Snapdragon 765G processor -- notably not the top-tier Snapdragon 865 or 865 Plus -- complete with Qualcomm's integrated X52 modem for 5G support (a benefit of the slightly less powerful chipset.) It's a break from the usual Pixel strategy, which has sought to offer comparable flagship specs to other top Android devices from companies like Samsung or OnePlus -- but it also means that Google can offer the new phone at a lower price. Google is calling out a few things that separate out the Pixel 5 from the newly announced Pixel 4A, including IPX8 water-resistance, reverse wireless charging, more RAM, and a stronger Corning Gorilla Glass 6 panel. Notably, it lacks a 3.5mm headphone jack, though, something that its cheaper siblings offer. The display is a 6-inch 2340 x 1080 OLED panel in a 19.5:9 aspect ratio with a 90Hz refresh rate, which features a hole-punch selfie camera. Thanks to the removal of the Motion Sense camera -- and the hefty top bezel it required for its radar array -- there's now a full edge-to-edge display this time, with no notch or bezels.
Android

Google Removes 17 Android Apps Caught Engaging In WAP Billing Fraud (zdnet.com) 57

Google has recently removed 17 Android applications from the official Play Store because they were infected with the Joker (aka Bread) malware. ZDNet reports: "This spyware is designed to steal SMS messages, contact lists, and device information, along with silently signing up the victim for premium wireless application protocol (WAP) services," Zscaler security researcher Viral Gandhi said this week. The 17 malicious apps were uploaded on the Play Store this month and didn't get a chance to gain a following, having been downloaded more than 120,000 times before being detected.

Following its internal procedures, Google removed the apps from the Play Store, used the Play Protect service to disable the apps on infected devices, but users still need to manually intervene and remove the apps from their devices. But this recent takedown also marks the third such action from Google's security team against a batch of Joker-infected apps over the past few months. [...] The way these infected apps usually manage to sneak their way past Google's defenses and reach the Play Store is through a technique called "droppers," where the victim's device is infected in a multi-stage process. Malware authors begin by cloning the functionality of a legitimate app and uploading it on the Play Store. This app is fully functional, requests access to dangerous permissions, but also doesn't perform any malicious actions when it's first run.

Because the malicious actions are usually delayed by hours or days, Google's security scans don't pick up the malicious code, and Google usually allows the app to be listed on the Play Store. But once on a user's device, the app eventually downloads and "drops" (hence the name droppers, or loaders) other components or apps on the device that contain the Joker malware or other malware strains.

EU

Apple May Face EU Rules To Open Up Payment Technology (bloomberg.com) 34

The European Union is weighing legislation that could force Apple to open iPhone payment technology to competitors. From a report: The potential rules would grant other payment services a right of access to infrastructure such as near-field communication technology embedded in smartphones, the European Commission said Thursday. While the EU didn't explicitly name Apple, it said the "most commonly reported issue" related to mobile device manufacturers restricting third-party access to NFC chips. The components handle wireless signals that allow users to pay via their smartphones or watches at store terminals. At present, iPhone and Apple Watch users can only make NFC payments using Apple Pay. Banks and other competitors have said they want the same functionality for their own iPhone apps but that Apple refuses access to the chip. By contrast, Google's Android phone allows rival apps to use NFC technology. Only one application is allowed access to it at a time for a given transaction to keep data secure.
Businesses

T-Mobile Hits Back At AT&T and Verizon After Spectrum-Hoarding Accusations (arstechnica.com) 33

An anonymous reader quotes a report from Ars Technica: T-Mobile US CEO Mike Sievert yesterday fired back at AT&T and Verizon, saying the carriers' complaints about T-Mobile obtaining more spectrum licenses show that they are afraid of competition. "The duopolists are scrambling to block this new competition any way they can... Suddenly in the unfamiliar position of not having a dominant stranglehold on the wireless market, and preferring not to meet the competitive challenge in the marketplace, AT&T and Verizon are urging the FCC to slow T-Mobile down and choke off our ability to compete fairly for added radio spectrum," Sievert wrote in a blog post. As we wrote Monday, Verizon and AT&T have urged the Federal Communications Commission to impose limits on T-Mobile's ability to obtain more spectrum licenses. AT&T complained that T-Mobile's acquisition of Sprint allowed it to amass "an unprecedented concentration of spectrum."

Verizon has the most spectrum of any US carrier "by far" but "has the anti-competitive instincts and sheer audacity to complain that a much smaller T-Mobile has too much," Sievert wrote. "After holding massive spectrum advantages over T-Mobile and others for decades, Verizon and AT&T just can't stand the idea of anyone else being ahead of them or having a fair shot in an auction where they plan to use their financial might to do what they have always done -- dominate." Sievert also wrote that the 600MHz spectrum T-Mobile is leasing was previously controlled by AT&T. "AT&T had won at auction the spectrum that Columbia Capital is now leasing to T-Mobile and -- guess what -- AT&T decided it didn't want it and sold it to Columbia," Sievert wrote. "Verizon, the ringleader in opposing this lease, never bothered to even show up and bid for any 600MHz spectrum. In short, we have AT&T and Verizon seeking to block T-Mobile from using spectrum that AT&T decided to jettison, and Verizon had no interest in pursuing. Now both companies are seeking to block T-Mobile from putting this spectrum to use for the benefit of American consumers."

Businesses

A $50 Phone is Ambani's Weapon To Dominate India Telecom Market (bloomberg.com) 14

Reliance Industries has asked local suppliers to ramp up production capacity in India so they can make as many as 200 million smartphones over the next two years, Bloomberg reported Tuesday, citing people familiar with the matter, a potentially enormous boost for the country's technology ambitions and a warning shot to rivals such as Xiaomi. From a report: India's most valuable company is in talks with domestic assemblers to make a version of its Jio phone that would run on Google's Android and cost about 4,000 rupees ($54), said the people, asking not to be identified since the plans are private. The inexpensive phones will be marketed with low-cost wireless plans from Reliance Jio, the parent company's carrier, they said. Reliance Chairman Mukesh Ambani is aiming to remake the country's smartphone industry much like he did in wireless services, where his aggressive prices and simple plans quickly made him the dominant force. The billionaire is also aligning himself with the Indian government's plans to build more domestic manufacturing, a possible boost for local assemblers like Dixon Technologies India, Lava International and Karbonn Mobiles.
AT&T

AT&T Considers Cellphone Plans Subsidized by Ads (reuters.com) 45

AT&T is considering offering wireless phone plans partially subsidized by advertising as soon as a year from now, Chief Executive John Stankey said in an interview on Tuesday. From a report: The consideration, which has not been previously disclosed, underscores AT&T's commitment to the advertising business as the U.S. phone carrier reviews its portfolio to identify assets to sell in order to reduce its debt load. AT&T is considering selling its advertising-technology unit Xandr, sources familiar with the matter have told Reuters. "I believe there's a segment of our customer base where given a choice, they would take some load of advertising for a $5 or $10 reduction in their mobile bill," Stankey said. Various companies including Amazon.com, Virgin Mobile USA and Sprint's Boost Mobile have tested advertising supported phone services since the early 2000s but they have not caught on. AT&T is hoping that better advertising targeting could revive the idea.
Wireless Networking

French President Emmanuel Macron Compares 5G Opponents To Amish (euractiv.com) 147

neutrino38 writes: "France is the country of the Enlightenment, it is the country of innovation [...] We are going to debunk all false ideas. Yes, France is going to take the 5G turning point because it is the turning point of innovation," Macron insisted in front of a hundred French Tech entrepreneurs gathered at the Elysee. "I hear a lot of voices saying that the complexity of contemporary problems should be addressed by returning to the oil lamp! I don't think that the Amish model can solve the challenges of contemporary ecology," the head of state said.

Meanwhile, AT&T's 5G network was found to be slower than 4G, and in China some 5G towers are switched off during the night because of power consumption. Welcome to the future.

The Internet

New Google Fiber Plan: $100 For 2Gbps, Plus Wi-Fi 6 Router and Mesh Extender 36

An anonymous reader quotes a report from Ars Technica: Google Fiber will soon offer 2Gbps service for $100 a month, a package that includes a Wi-Fi 6 router and mesh extender, the Alphabet-owned ISP announced yesterday. Google fiber-to-the-home service never rolled out as far as many people hoped, but the ISP is still making improvements in cities where it does provide broadband. The new offering is double the download speed of Google Fiber's standard 1Gbps service and costs $30 more. While the new offer is 2Gbps on the download side, it will be 1Gbps for uploads.

In addition to fiber-to-the-home, Google Fiber offers wireless home Internet access in some cities through its Webpass service. Even the Webpass wireless service will get the 2Gbps plan, the announcement said. Webpass' standard speeds today range from 100Mbps to 1Gbps. The 2Gbps service will initially be available to some customers through Google Fiber's Trusted Tester program next month, with plans to roll out across "most" Google Fiber and Webpass markets in 2021. The announcement didn't provide any details on the Wi-Fi 6 router and mesh extender that will be included in the $100 price. Google Fiber provides 1Gbps customers a gateway and router in a single device it calls a "Network Box."
"Why 2 Gig? This year has made this need for more speed and bandwidth especially acute, as many of us are now living our entire lives -- from work to school to play -- within our homes, creating unprecedented demand for Internet capacity," the Google Fiber announcement said.

Google says the 2 Gig speeds "will roll out to all of our Nashville and Huntsville customers later this year, with plans to launch the service across most of our Google Fiber and Google Fiber Webpass cities in early 2021." You can sign up here for an opportunity to be among the first to test the new speeds in your city.
Businesses

Verizon Acquires Tracfone In a Deal Worth More Than $6 Billion 19

Verizon, the largest wireless network in the U.S., has acquired Tracfone, the largest mobile virtual network operator. The Verge reports: Tracfone is the largest reseller of wireless services in the US, with 21 million subscribers, around 850 employees, and a network of more than 90,000 retail locations. It's owned by Mexico-based America Movil, and along with the Tracfone brand, operates the Net10 and Straight Talk brands in the US. More than 13 million Tracfone customers already rely on Verizon's wireless network; Tracfone doesn't run its own physical network in the US and instead rides on other cellphone carriers' systems for a fee.

The acquisition gives Verizon a bigger foothold in the value and low-income wireless segments. Verizon says it will continue to offer Tracfone's Lifeline service, which allows qualifying customers to receive free phones and free monthly minutes, and StraightTalk, which offers prepaid, no-contract service phone plans. The deal will include $3.125 billion of cash and $3.125 billion in Verizon common stock. Tracfone could also receive an additional $650 million cash payment tied to performance measures. It's expected to close in the second half of 2021.
Apple

CBP Seized a Shipment of OnePlus Buds Thinking They Were 'Counterfeit' Apple AirPods (techcrunch.com) 103

U.S. Customs and Border Protection proudly announced in a press release on Friday a seizure of 2,000 boxes of "counterfeit" Apple AirPods, said to be worth about $400,000, from a shipment at John F. Kennedy Airport in New York. But the photos in the press release appear to show boxes of OnePlus Buds, the wireless earphones made by smartphone maker OnePlus, and not Apple AirPods as CBP had claimed.
Power

GM Can Manage an EV's Batteries Wirelessly -- and Remotely (ieee.org) 72

An anonymous reader quotes a report: IEEE Spectrum got an exclusive look at General Motors' wireless battery management system. It's a first in any EV anywhere (not even Tesla has one). The wireless technology, created with Analog Devices, Inc., will be standard on a full range of GM EVs, with the company aiming for at least 1 million global sales by mid-decade. Those vehicles will be powered by GM's proprietary Ultium batteries, produced at a new US $2.3 billion plant in Ohio, in partnership with South Korea's LG Chem. Unlike today's battery modules, which link up to an on-board management system through a tangle of orange wiring, GM's system features RF antennas integrated on circuit boards. The antennas allow the transfer of data via a 2.4-gigahertz wireless protocol similar to Bluetooth but with lower power. Slave modules report back to an onboard master, sending measurements of cell voltages and other data. That onboard master can also talk through the cloud to GM.

The upshot is cradle-to-grave monitoring of battery health and operation, including real-time data from drivers in wildly different climates or usage cases. That all-seeing capability includes vast inventories of batteries -- even before workers install them in cars on assembly lines. GM can essentially plug-and-play battery modules for a vast range of EVs, including heavy-duty trucks and sleek performance cars, without having to redesign wiring harnesses or communications systems for each. That can help the company speed models to market and ensure the profitability that has eluded most EV makers. GM engineers and executives said they've driven the cost of Ultium batteries, with their nickel-cobalt-manganese-aluminum chemistry, below the $100 per kilowatt-hour mark -- long a Holy Grail for battery development. And GM has vowed that it will turn a profit on every Ultium-powered car it makes.
The system features end-to-end encryption and the software and battery nodes can be reprogrammed over-the-air.

"Repurposing partially spent batteries also gets easier because there's no need to overhaul the management system or fiddle with hard-to-recycle wiring," the report adds. "Wireless packs can go straight into their new roles, typically as load-balancing workhorses for the grid."
Wireless Networking

Apple, Amazon, Google, and Zigbee Alliance Standard For Smart Home Tech On Track For 2021 Release (macrumors.com) 69

An anonymous reader quotes a report from MacRumors: Last year, Apple, Amazon, Google, and the Zigbee Alliance, which includes Ikea, Samsung, and Philips, announced a new working group known as "Project Connected Home over IP" that set about developing an IP-based open-source connectivity standard for smart home products, with a focus on increased compatibility, security, and simplified development for manufacturers. The group has today announced a major update on the project, stating that development is ongoing, and that work is on track for a 2021 release.

The update reveals the first concrete information about how the open-source smart home standard will work. A large number of devices will be supported by the protocol, including "lighting and electrical (e.g., light bulbs, luminaires, controls, plugs, outlets), HVAC controls (e.g., thermostats, AC units), access control (e.g., door locks, garage doors), safety and security (e.g., sensors, detectors, security systems), window coverings/shades, TVs, access points, bridges and others," as well as additional "consumer electronics products." The announcement also reveals that the group has grown significantly, now with 145 active member companies. Between these companies there are hundreds of product, engineering, and marketing experts, working across 30 cross-functional teams to deliver the new standard.
The group aims to provide a "draft specification" by the end of the year, and release the completed standard next year.

Slashdot Top Deals