×
Security

Hashcat Developer Discovers Simpler Way To Crack WPA2 Wireless Passwords (hashcat.net) 150

New submitter Woodmeister shares a report: While looking for ways to attack the new WPA3 security standard, Hashcat developer Jens "Atom" Steube found a simpler way to capture and crack access credentials protecting WPA and WPA2 wireless networks. The attacker needs to capture a single EAPOL frame after requesting it from the access point, extract the PMKID from it by dumping the recieved frame to a file, convert the captured data to a hash format accepted by Hashcat, and run Hashcat to crack it. Once that's done, the attacker has the Pre-Shared Key (PSK), i.e. the password, of the wireless network. Depending on the length and complexity of the password and the power of the cracking rig, that last step could take hours or days. "The main difference from existing attacks is that in this attack, capture of a full EAPOL 4-way handshake is not required. The new attack is performed on the RSN IE (Robust Security Network Information Element) of a single EAPOL frame," Steube explained. This makes the attack much easier to pull off, as the attacker doesn't depend on another user and on being in range of both the user and the access point at the exact moment when the user connects to the wireless network and the handshake takes place.
Verizon

Verizon 'Grossly Overstated' Its 4G LTE Coverage In Government Filings, Trade Group Says (arstechnica.com) 81

An anonymous reader quotes a report from Ars Technica: Verizon "grossly overstated" its 4G LTE coverage in government filings, potentially preventing smaller carriers from obtaining funding needed to expand coverage in underserved rural areas, a trade group says. The Federal Communications Commission last year required Verizon and other carriers to file maps and data indicating their current 4G LTE coverage. The information will help the FCC determine where to distribute up to $4.5 billion in Mobility Fund money over the next 10 years. The funds are set aside for "primarily rural areas that lack unsubsidized 4G," the FCC says. If Verizon provided the FCC with inaccurate data, the company's rural competitors might not be able to get that government funding. "Verizon's claimed 4G LTE coverage is grossly overstated," the Rural Wireless Association (RWA), which represents rural carriers, told the FCC in a filing yesterday. "Verizon should not be allowed to abuse the FCC challenge process by filing a sham coverage map as a means of interfering with the ability of rural carriers to continue to receive universal service support in rural areas," the RWA wrote. "RWA's members are in the middle of the Challenge Process but are expending enormous time and financial resources in their efforts due to inaccurate data submitted by Verizon," the group said. "RWA requests that the Commission investigate the 4G LTE coverage claimed by Verizon and require re-filing of Verizon's data to correct its overstated coverage."

According to the RWA, Verizon claims to cover almost all of the Oklahoma Panhandle, an area of 14,778.47 square kilometers, but estimates that the actual coverage area should be approximately 6,806.49 square kilometers. "[That's] not even half of the LTE coverage area Verizon publicly claims to serve," the RWA wrote.
Iphone

Apple's 2018 iPhones Are Rumored To Not Include Headphone Dongle In the Box (theverge.com) 283

Apple will reportedly ditch the 3.5mm to Lightning port headphone dongle with this year's iPhone models. Apple notoriously dropped the headphone jack from the iPhone 7 in 2016. It has included a headphone adapter with every iPhone since to help curb public unease. The Verge reports: The research note claims that Cirrus Logic, a supplier for the dongle has "confirmed" that it won't be included in the box alongside the new iPhones. Apple has been trying to transition away from wired headphones entirely with its AirPods and lineup of wireless Beats headphones, so the move isn't entirely surprising. The dongle was always meant as a stopgap while customers adjusted to the new, headphone jack-less reality that Apple imposed on the world. Apple will almost certainly continue to sell the dongle -- which costs $9 -- separately for users who still want it. But if the report is true (which, again, remains to be seen), it's hard to imagine that customers will take the news well. The Barclays research note was first spotted by Mac Rumors.
Businesses

How Criminals Recruit Telecom Employees To Help Them Hijack SIM Cards (vice.com) 28

An anonymous reader writes: Sources who work for some of America's major cellphone carriers tell us how criminals are trying to recruit them to get help hacking victims. Normally, criminals approach them online, offering to pay them in Bitcoin (the equivalent of $100 for example). In exchange, the employee has to log into a company portal and process a so-called SIM swap. From the report: How criminals find the employees in the first place can vary. Some SIM hijackers I spoke to told me they approach them through shared friends in real life, others told me they just comb LinkedIn, Reddit or social media sites. AT&T and Sprint did not respond to requests for comment about whether or not it had any knowledge of insiders helping criminals. A T-Mobile spokesperson said in a statement that the company is "aware of these ongoing and ever-changing attempts to take advantage of consumers across the wireless industry and we'll keep fighting to ensure our customers' safety." A Verizon spokesperson said the company doesn't share details of internal security processes or investigations, but the company "has systems in place that work to detect employee/vendor misconduct."
Businesses

Apple Becomes the First $1 Trillion US Company in History (reuters.com) 219

Apple became the first $1 trillion publicly listed U.S. company on Thursday, crowning a decade-long rise fueled by its ubiquitous iPhone that transformed it from a niche player in personal computers into a global powerhouse spanning entertainment and communications. Reuters: The tech company's stock jumped 2.8 percent, bringing its gain to about 9 percent since Tuesday when it reported June-quarter results above expectations and said it bought back $20 billion of its own shares. "Apple's $1 trillion cap is equal to about 5 percent of the total gross domestic product of the United States in 2018," David Kass, professor of finance at the University of Maryland, told The Washington Post. "That puts this company in perspective." The company's fortunes were turbocharged by the launch of personal gadgets such as the iPod in 2001 and the iPhone in 2007. Since then 18 different iPhones have been launched and more than 1.2 billion of the devices have been sold.

Brad Stone, writing for Bloomberg: As critics enjoy pointing out, the company under Cook has failed to come up with another iPhone-type hit. But that's like saying da Vinci never came up with another Mona Lisa-type painting. The release of the iPhone is up there with the founding of Standard Oil as one of the greatest business moves of all time. And while the iPhone has altered daily life so much that no one remembers life before it, Apple has also persuaded customers to embrace other inventions they never knew they wanted, such as connected watches that buzz and beep (to cure the distraction of the phone, Apple says) and wireless dongles that hang ridiculously from their ears.

Apple isn't alone on this mountaintop. Amazon.com, Alphabet, and Microsoft are likely at some point to pinwheel across the $1 trillion finish line, too, and they're almost as good as Apple at manufacturing customer desire. No one told Amazon they needed a speaker they could talk to, or Google a self-driving car, or Microsoft a ... OK, it's been a while since Microsoft has driven civilians wild with desire.

Businesses

Logitech Is Acquiring Blue Microphones For $117 Million In Cash (theverge.com) 79

Logitech announced late Monday night that it is acquiring Blue Microphones for $117 million. The company known for USB condenser microphones, such as the Snowball and Yeti, will join Logitech's existing portfolio of brands. The Verge reports: Founded in 1995, Blue sells microphones that range in price from $60 to over $4,000 (for studio-grade hardware), and they're used by podcasters, musicians, and any other consumers who need higher-fidelity audio than what they get from the built-in microphones on their devices. Now, after dropping a heap of cash on the company, Logitech will do its best to make sure Blue's devices become just as essential as its own wireless keyboards and mice. "For Logitech, this is a new space," the company wrote in a blog post. "But, at the same time, it's not at all. Gamers are already using our Logitech G webcams to stream. People are video calling with friends and family thanks to Logitech every day. And in business, our audio and video know-how is apparent every time a video meeting takes place at the office. Joining up with Blue and their microphone lines is a logical adjacent opportunity with great synergies."
The Internet

Massachusetts Proposes Public Shaming of Net Neutrality Violators (cnet.com) 77

An anonymous reader quotes CNET: Massachusetts plans to protect net neutrality by naming and shaming internet service providers that don't adhere to open internet principles. Lawmakers in the state Senate have proposed a bill (S2160) that would create an "internet service provider registry" to track whether broadband and wireless providers adhere to policies that keep the internet open and neutral.
Motherboard reports: In the wake of the FCC's repeal of net neutrality, more than half the states in the union are considering their own, state-level net neutrality rules. Some states are tackling the problem with legislation (California, Oregon, Washington), while others (like Montana) are signing executive orders banning state agencies from doing business with ISPs that behave anti-competitively... when the FCC repealed net neutrality, it included a provision attempting to "pre-empt" (read: ban) states from protecting consumers. As a result, large ISPs have threatened to sue any states that stand up for consumer welfare, and at least one ISP (Charter Spectrum) has tried to use the repeal to wiggle out of state lawsuits for terrible broadband. Charter's efforts on that front have failed, and the the FCC's authority to tell states what to do has been highly contested.

Still, Massachusetts thought it might be a better idea to try and publicly shame ISPs into behaving.

Wireless Networking

Teen Allegedly Broke Into a Couple's Home To Ask For Their WiFi Password, Police Say (washingtonpost.com) 316

A 17-year-old has been accused of breaking into a couple's home in Northern California and asking for their WiFi password, hours after he had asked nearby neighbors for theirs, authorities said. From a report: Police in Palo Alto said the teen, whose name has not been released, went to a home in Silicon Valley late Saturday and asked to use the residents' WiFi network "because he was out of data," before stealing their bicycle. Then just after midnight Sunday, police said, he broke into a nearby home, woke up a sleeping couple and asked them for their password. The male resident "pushed him down the hallway and out the front door of the house before calling police," police said in a statement. Palo Alto Police Sgt. Dan Pojanamat told The Washington Post on Friday that it's unclear whether the juvenile suspect was really seeking WiFi access or whether it was simply an excuse, saying that "the real issue is the fact that he entered a house that was occupied."
Advertising

Roku's New Wireless Speakers Automatically Turn Loud Commercials Down, Turn Show Audio Up (arstechnica.com) 84

Roku announced today that it's getting into the audio business with the launch of its in-house Roku TV Wireless Speakers. The two HomePod-esque speakers work exclusively (and wirelessly) with Roku TVs, and feature software that will optimize audio from anything connected to the pair Roku TV, including cable boxes, antennas, and Bluetooth devices. The company also announced a new Roku Touch tabletop remote that's similar to Amazon's Alexa. Ars Technica reports: "Optimized" in this sense refers to the software-improved audio quality: automatic volume leveling will boost lower audio in quiet scenes and lower audio in loud scenes (and in booming commercials), and dialogue enhancement will improve speech intelligibility. Accompanying the Wireless Speakers is the Roku Touch remote, a unique addition to Roku's remote family. The company has a standard remote that controls its set-top boxes and smart TVs, and it also has a voice remote that processes voice commands to search for and play specific types of content. The Touch remote is most like the voice remote, but it can be used almost anywhere in your home because it's wireless and runs on batteries. It has a number of buttons on its top that can play, pause, and skip content playing from your Roku TV, and some of those buttons are customizable so you can program your favorite presets to them. There's also a press-and-hold talk button that lets you speak commands to your TV, even if you're not in front of it. Roku's Wireless Speakers and Touch remote will begin shipping this October, and the company is running a deal leading up to the release. For the first week of presales (July 16 through July 23), a bundle consisting of two Wireless Speakers, a Touch remote, and a Roku voice remote will be available for $149. From the end of that week until October, the price will be $179. When the new devices finally come out, the bundle price will be $199.
Cellphones

Sprint Follows Rivals By Complicating Its Unlimited Mobile Data Plans (fortune.com) 55

Sprint on Thursday unveiled a new, more complicated lineup of unlimited mobile data plans. Sprint goes from having one plan starting at $60 per month to four different options costing $50 to $70 a month. "The main price hike hits customers who want to watch streaming video at HD quality instead of being reduced to DVD quality," reports Fortune. From the report: A new "Unlimited Plus" plan most resembles the carrier's current one, with subscribers allowed to use up to 15 GB monthly before experiencing slowed download speeds, receiving HD-quality streaming video, and getting free Hulu and Tidal subscriptions. It costs $70 for one line, rising to $180 for four lines. But Sprint also added a "limited time" promotion that cuts the price to $50 to $100 per month for customers who buy a new phone or bring their own device. A cheaper "unlimited basic" plan, starting at $60 for one line and up to $140 for four lines, slows downloads to 3G speeds after just 500 MB, downgrades streaming to DVD-quality, and offers just a Hulu subscription, but no Tidal account.

Although consumers no longer get cut off or have to pay expensive overage charges when they run through a monthly data allowance, they face an increasing array of restrictions and conditions on all but the most expensive unlimited plans, including slowed download speeds. Sprint's four-page press release announcing the new plans included 11 footnotes, signaling just how complicated they are.

Communications

Canadian Telecoms Make The Most Money on Data Usage In The World: Tefficient (huffingtonpost.ca) 69

An anonymous reader shares a report: Canadian wireless users have some of the lowest data usage in the world, but Canadian telecom companies make the most money off the customers they have, a new report shows. A study by telecom comparison site Tefficient looked at data usage per SIM card in 36 countries worldwide in 2017, and how much money telecoms made per gigabyte of wireless data used. Canadians used about 1.3 GB of data per month per SIM card last year. There were only five countries where wireless customers used less than that -- the Czech Republic, Portugal, Germany, Belgium, and Greece. By contrast, Indian telecoms had the lowest revenue per gigabyte, and showed the highest growth in data usage in 2017 -- more than 300 percent.
Power

UK Wants An Electric-Vehicle Charger In Every New Home (thedrive.com) 254

A new government proposal included in Road to Zero, a report on climate-change related policies, would require all new homes to be fitted with electric car charging points. It follows a commitment made last year by the UK to end sales of new gasoline and diesel cars by 2040. The Drive reports: "It is our intention that all new homes, where appropriate, should have a charge point available," a government statement said. "We plan to consult as soon as possible on introducing a requirement for charge point infrastructure for new dwellings in England."

To help achieve that goal, the U.K. will reportedly establish a 400-million-pound ($531 million) fund for companies that manufacture and install charging stations. The government is also reportedly looking at integrating charging stations with newly-installed streetlights, as well as wireless-charging technology. A new Automated and Electric Vehicles bill will also give the government power to mandate installation of charging infrastructure at highway service stations.

Science

High-Power Thermoelectric Generator Utilizes Thermal Difference of Only 5C (newelectronics.co.uk) 100

A silicon-nanowire thermoelectric generator has been developed by a team of researchers from Waseda University, Osaka University, and Shizuoka University. From a report: According to the Japanese researchers, this experimentally demonstrated a high-power density of 12 microwatts per 1cm2, enough to drive sensors or realise intermittent wireless communication, at a small thermal difference of only 5C. Silicon-based thermoelectric generators conventionally employed long, silicon nanowires of about 10-100nm, which were suspended on a cavity to cut off the bypass of the heat current and secure the temperature difference across the silicon nanowires. However, the cavity structure weakened the mechanical strength of the devices and increased the fabrication cost. The team says their generator has overcome this issue.

"Because our generator uses the same technology to manufacture semiconductor integrated circuits, its processing cost could be largely cut through mass production," says Professor Takanobu Watanabe of Waseda University. "Also, it could open up a pathway to various, autonomously-driven IoT devices utilising environmental and body heats. For instance, it may be possible to charge your smartwatch during your morning jog someday."

AT&T

AT&T Has To Pay Up Millions After Two Major 911 Outages Last Year (gizmodo.com) 37

AT&T has been fined $5.25 million for an outage last year that resulted in 12,000 callers not being able to reach 911. The FCC's Enforcement Bureau made the announcement on Thursday, stating that "such preventable outages are unacceptable." Gizmodo reports: Aside from the fine -- which is really a drop in the bucket for the billion-dollar behemoth -- AT&T must also make changes and enhancements to its systems to mitigate and soften the blow of future outages, as well as "regularly file compliance reports with the FCC." According to FCC rules, AT&T was required to "transmit all wireless 911 calls" as well as let emergency call centers know about outages if they last longer than 30 minutes. The two AT&T 911 outages investigated by the FCC, which occurred on March 8 and May 1 of 2017, lasted about five hours and 47 minutes, respectively. Around 12,600 users were unable to complete 911 calls during the March outage, with 2,600 failed 911 calls during the May outage.
The Almighty Buck

AT&T Is Screwing Customers By Almost Tripling a Bogus Fee (androidpolice.com) 149

AT&T has almost tripled the cost of the "Administrative Fee" featured in its wireless service bills. "Up until early this year, that 'fee' was typically assessed at $0.76 per postpaid line -- not nothing, but over the course of two years of service, it ends up being a little over $18," reports Android Police. From the report: Most recently, subscribers getting their statements for June are finding an Administrative Fee charge of $1.99 per line every month. That brings the two-year cost of this "administrative fee" to almost $50 for each line on your account. The fee was raised earlier this year incrementally in March (by $0.54), but this new hike comes just three months after the first one, and it's not even clear why.

AT&T is likely hoping subscribers just won't notice their per-line bill is going up $1.23 a month versus where it was a few months ago, and in the process, could net almost a billion dollars in additional revenue according to one analyst. This could allow AT&T to finance up to $10 billion in new debt to expand its ever-broadening media empire.
The fee is being assessed against all postpaid subscribers, regardless of their service plan or any grandfathering. AT&T says the fee is related to its cost of doing business, in terms of interconnect fees with other operators and cell site rents.
Wireless Networking

Wi-Fi Alliance Launches WPA3 Security Standard (securityweek.com) 97

wiredmikey writes: The Wi-Fi Alliance, the organization responsible for maintaining Wi-Fi technology, announced the launch of the WPA3 security standard. The latest version of the Wi-Fi Protected Access (WPA) protocol brings significant improvements in terms of authentication and data protection.

WPA3 has two modes of operation: Personal and Enterprise. WPA3-Personal's key features include enhanced protection against offline dictionary attacks and password guessing attempts. WPA3-Enterprise provides 192-bit encryption for extra security, improved network resiliency, and greater consistency when it comes to the deployment of cryptographic tools.

Music

Apple To Unveil High-End AirPods, Over-Ear Headphones For 2019 (bloomberg.com) 82

According to a new report from Bloomberg's Mark Gurman and Debby Wu, Apple is "planning higher-end AirPods, a new HomePod and studio-quality over-ear headphones for as early as next year." From the report: The Cupertino, California-based company is working on new AirPods with noise-cancellation and water resistance, the people said. Apple is trying to increase the range that AirPods can work away from an iPhone or iPad, one of the people said. You won't be swimming in them though: The water resistance is mainly to protect against rain and perspiration, the people said. Slated for 2019, the earbuds will likely cost more than the existing $159 pair, and that could push Apple to segment the product line like it does with iPhones, one of the people said. Apple is also working on a wireless charging case that's compatible with the upcoming AirPower charger.

There are over-ear headphones coming from Apple, too. Those will compete with pricey models from Bose Corp. and Sennheiser. They will use Apple branding and be a higher-end alternative to the company's Beats line. Apple originally intended to introduce the headphones by the end of 2018, but has faced development challenges, and is now targeting a launch as early as next year, the people said.
A previous Bloomberg report was plugged, teasing a new version of the current AirPods that will feature a new chip and support for hands-free Siri activation. They are reportedly launching later this year.
Iphone

The iPhones of the Future May Be Wireless, Portless and Buttonless (cnet.com) 249

The first iPhone to shed its headphone jack was the iPhone 7, which launched in late 2016. Now it seems like the Lightning port may be the next to go. CNET reports: Apple has considered removing the Lightning port on the iPhone X, according to Bloomberg, citing unnamed "people familiar with the company's work." While earlier rumors suggested that Apple would remove the Lightning port in favor of USB-C, Apple's goal may be to remove all ports entirely.

Bloomberg's report is about the challenges that Apple faces with its AirPower wireless charger, but it also shares some details about Apple's vision for a wireless future. The report says: "Apple designers eventually hope to remove most of the external ports and buttons on the iPhone, including the charger, according to people familiar with the company's work. During the development of the iPhone X, Apple weighed removing the wired charging system entirely. That wasn't feasible at the time because wireless charging was still slower than traditional methods. Including a wireless charger with new iPhones would also significantly raise the price of the phones."

Communications

Days After Buying Time Warner, AT&T Launches New TV Service (apnews.com) 52

AT&T is launching a new streaming service incorporating television networks from the Time Warner company it just bought. From a report: The WatchTV service, a cable-like package of more than 30 TV channels delivered over the internet, is an example of the "skinny bundles" coming from telecom and broadband providers as more people watch TV online. Competitors include Sling TV, PlayStation Vue and AT&T's own DirecTV Now. WatchTV will be free for subscribers of two unlimited wireless plans AT&T is launching. Others can get WatchTV for $15 -- $20 less than DirecTV Now, but with just half the channels.
Businesses

T-Mobile and Sprint Ask For Merger Approval (axios.com) 48

According to documents filed Monday, T-Mobile and Sprint have formally asked the FCC to approve their proposed merger. Axios reports: In their filing, the companies said that the deal would "generate substantial public interest benefits for the customers of T-Mobile and Sprint and for U.S. wireless customers as a whole, and do not give rise to any competitive harms." "The merger unlocks the door to new broadband choices and capabilities for consumers across the country while accelerating the arrival of transformative 5G services that will produce innovation, jobs, and economic growth for our country," the companies said. Basically, the two companies have to prove to the FCC that the deal benefits consumers, and avoid antitrust concerns currently being investigated by the Department of Justice.

Slashdot Top Deals