Security

GCHQ Has Disclosed Over 20 Vulnerabilities This Year (vice.com) 29

Joseph Cox, reporting for Motherboard: Earlier this week, it emerged that a section of Government Communications Headquarters (GCHQ), the UK's signal intelligence agency, had disclosed a serious vulnerability in Firefox to Mozilla. Now, GCHQ has said it helped fix nearly two dozen individual vulnerabilities in the past few months, including in highly popular pieces of software like iOS. "So far in 2016 GCHQ/CESG has disclosed more than 20 vulnerabilities across a number of software products," a GCHQ spokesperson told Motherboard in an email. CESG, or the National Technical Authority for Information Assurance, is the information security wing of GCHQ. Those issues include a kernel vulnerability in OS X El Captain v10.11.4, the latest version, that would allow arbitrary code execution, and two in iOS 9.3, one of which would have done largely the same thing, and the other could have let an application launch a denial of service attack.
Music

iTunes Turns 13 Today -- Continues To Be 'Awful' (qz.com) 267

An anonymous reader points us to a link on Quartz: On April 28, 2003, Apple started up a revolution. Enter the iTunes Music Store, unveiled with a proud flourish by a beaming Steve Jobs. It was a digital jukebox, a music distribution game-changer, a record store to end all record stores -- and it did, in fact, kill off a great number of those. [...] For 13 years -- 15 if you count the two years the program was just a file-storing service -- users have grumbled loudly about iTunes' unwieldy interface, its bloated features, its inability to simply get better. [...] Instead of trying to streamline the service over the years, Apple has opted to stuff an overwhelming number of new features -- movies, television shows, podcasts, mobile apps, and most recently, Apple Music -- into it.The report mentions the following issues with iTunes: space-sucking size, slowness, ugliness, bloatware, lack of online or social integration, a wonky back-end, music isn't even its priority. Marco Arment, who is best known for co-founding Tumblr, and creating Instapaper app, noted some development-end issues with iTunes in 2015. He wrote: [...] The iTunes Store back-end is a toxic hellstew of unreliability. Everything that touches the iTunes Store has a spotty record for me and almost every Mac owner I know. And the iTunes app itself is the toxic hellstew. iTunes has an impossible combination of tasks on its plate that cannot be done well. iTunes is the definition of cruft and technical debt. It was an early version of iTunes that demonstrated the first software bugs to Grace Hopper in 1946. Probably not coincidentally, some of iTunes' least reliable features are reliant on the iTunes Store back-end, including Genius from forever ago, iTunes Match more recently, and now, Apple Music.
Iphone

Intel Wants To Eliminate The Headphone Jack And Replace It With USB-C (9to5mac.com) 382

An anonymous reader writes: With rumors circulating about how Apple may do away with the 3.5 mm headphone jack on its upcoming iPhone 7, Intel has shared a similar desire, citing "industry singling a strong desire to move from analog to digital." Intel believes USB-C is the future audio jack. They believe USB-C has more potential than the 3.5mm audio jack as it allows users to add additional smart features to headphones in the future. For instance, a future pair of headphones could monitor one's pulse or inner-ear temperature for fitness tracking, something that could only be possible if the headphones were connected to a smartphone via a USB-C cable. What's also worth mentioning [quoted from 9to5Mac]: USB-C already supports analog audio transfer through sideband pins simplifying the engineering steps necessary to swap 3.5mm with USB-C in device designs. In the second quarter, Intel should have a finalized USB-C standard for digital audio transfer. Intel does note that the transition from analog to digital will be expensive as the headphones have to include amplifiers and DACs, but scale will offset the early costs over time.
Crime

Child Porn Suspect Jailed Indefinitely For Refusing To Decrypt Hard Drives (arstechnica.com) 796

An anonymous reader quotes a report from Ars Technica: A Philadelphia man suspected of possessing child pornography has been in jail for seven months and counting after being found in contempt of a court order demanding that he decrypt two password-protected hard drives. The suspect, a former Philadelphia Police Department sergeant, has not been charged with any child porn crimes. Instead, he remains indefinitely imprisoned in Philadelphia's Federal Detention Center for refusing to unlock two drives encrypted with Apple's FileVault software in a case that once again highlights the extent to which the authorities are going to crack encrypted devices. The man is to remain jailed "until such time that he fully complies" with the decryption order. The government successfully cited a 1789 law known as the All Writs Act to compel (PDF) the suspect to decrypt two hard drives it believes contain child pornography. The All Writs Act was the same law the Justice Department asserted in its legal battle with Apple.
Encryption

A Complete Guide To The New 'Crypto Wars' (dailydot.com) 68

blottsie writes: The latest debate over encryption did not begin with a court order demanding Apple help the FBI unlock a dead terrorist's iPhone. The new "Crypto Wars," chronicled in a comprehensive timeline by Eric Geller of the Daily Dot, dates back to at least 2003, with the introduction of "Patriot Act II." The battle over privacy and personal security versus crime-fighting and national security has, however, become a mainstream debate in recent months. The timeline covers a wide-range of incidents where the U.S. and other allied governments have tried to restrict citizens' access to strong encryption. The timeline ends with the director of national intelligence blaming NSA whistleblower Edward Snowden for advancing the spread of user-friendly, widely available strong encryption.
Security

FBI Director Suggests iPhone Hacking Method May Remain Secret (reuters.com) 110

An anonymous reader quotes a report from Reuters: FBI Director James Comey said on Tuesday that his agency was still assessing whether a vulnerability used to unlock an iPhone linked to one of the San Bernardino killers would go through a government review to determine if it should be disclosed to Apple or the public. "We are in the midst of trying to sort that out," Comey said. "The threshold (for disclosure) is, are we aware of the vulnerability, or did we just buy a tool and don't have sufficient knowledge of the vulnerability to implicate the process?" The White House has a procedure for reviewing technology security flaws and deciding which ones should be made public. Although officials say the process leans toward disclosure, it is not set up to handle or reveal flaws that are discovered and owned by private companies, sources have told Reuters, raising questions about the effectiveness of the so-called Vulnerabilities Equities Process.
Businesses

Apple Has First Earnings Decline In More Than A Decade (go.com) 284

An anonymous reader writes: Apple has announced its first-ever decline in revenue in the past 13 years as its iPhone sales have slowed down. Apple posted quarterly revenue of $50.6 billion and quarterly net income of $10.5 billion. Last year, the company posted revenue of $58 billion and net income of $13.6 billion. The reason Apple has been so successful is because of the iPhone, which was first released in 2007. What goes up must come down -- and we're starting to see that now. The success of the iPhone is starting plateau and ultimately decrease now that consumers are finding less of a reason to upgrade to the latest and greatest smartphone. Apple CEO Tim Cook pointed to weakening currencies worldwide as one of the obstacles the company would face as iPhone sales were up less than 1 percent year-over-year last quarter. Gene Munster, managing director and senior research analyst at Piper Jaffray, told ABC News, "This has been anticipated for three months now. The reason is nothing [that] is wrong with the iPhone." Munster said this is not worrisome to Apple and that iPhone sales will likely increase by the end of the year when the next iPhone(s) is released.
Education

Top Silicon Valley Execs and Others Urge Congress To Fund K-12 Computer Science Education (techcrunch.com) 125

An anonymous reader shares a TechCrunch report:Some of the biggest names in tech and corporate America, including Facebook CEO Mark Zuckerberg, Microsoft CEO Satya Nadella, Apple CEO Tim Cook, Facebook COO Sheryl Sandberg and Walmart CEO Doug McMillon, have teamed up with governors and educators to ask Congress to provide $250 million in federal funding to school districts in order to give every single K-12 student in the nation an opportunity to learn how to code. On the legislative side, these tech CEOs are joined by governors from both sides, including California Gov. Jerry Brown (D) and Arkansas Governor Asa Hutchinson (R). Earlier this year, President Barack Obama called for more than $4 billion in funding for states, and $100 million for districts in order to bring computer science curricula to every single K-12 student in the country. What this group of CEOs, governors and educators is asking for today is different. They're saying that this issue can be addressed without growing the federal budget. The petition reads:Not only does computer science provide every student foundational knowledge, it also leads to the highest-paying, fastest-growing jobs in the U.S. economy. There are currently over 500,000 open computing jobs, in every sector, from manufacturing to banking, from agriculture to healthcare, but only 50,000 computer science graduates a year. Whether a student aspires to be a software engineer, or if she just wants a well-rounded education in today's changing world, access to computer science in school is an economic imperative for our nation to remain competitive. And with the growing threat of cyber warfare, this is even a critical matter of national security. Despite this growing need, targeted federal funding to carry out these efforts in classrooms is virtually non-existent. This bipartisan issue can be addressed without growing the federal budget.
Iphone

Apple Is Outdated, Says Chinese Conglomerate LeEco CEO (cnbc.com) 245

An anonymous reader shares an article on CNBC: Apple is "outdated" and losing momentum in China, billionaire entrepreneur Jia Yueting told CNBC in his first international television interview. "Apple only has individual apps. This was the right choice during the first generation of mobile net, when CPUs [central processing units] and the mobile network speeds were not fast enough," Jia said. "However now we're moving into the next era of mobile internet, these problems no longer exist. Moreover, having separate apps just means great obstacles in the user experience. We hope to break down these obstacles. One of the most important reasons [for slowing sales] is that Apple's innovation has become extremely slow," he said. "For example, a month ago Apple launched the iPhone SE. From an industry insider's perspective, this is a product with a very low level of technology... We think this is something they just shouldn't have done. [...] The Watch hasn't cut it. And they're looking at content on the services side, on the iTunes side. We'll see how that works out. But definitely they need something to drive the next leg of growth." In some other Apple news, the company is expected to announce its first quarterly year-over-year revenue decline since 2003 later today.
ISS

British Astronaut Competes in London Marathon from ISS (cnn.com) 61

An anonymous reader writes: "British astronaut Tim Peake became the first man to complete a marathon in space on Sunday, running the classic 26.2 mile distance while strapped to a treadmill aboard the International Space Station..." reports Reuters. "The 44-year-old spaceman saw London's roads under his feet in real time on an iPad as, 250 miles below him, more than 37,000 runners simultaneously pounded the streets." Meanwhile, in a show of solidarity, two earth-bound runners ran the marathon wearing space suits.
CNN notes that Peake "ran the race for real in 1999," but this time competed with avatars that represented actual runners who were using the Run Social app. His zero-gravity run took longer -- more than three and a half hours -- while a Kenyan runner ultimately won the race, completing the whole 26.2-mile course in just two hours, three minutes and four seconds, the second-fastest time ever recorded.
Google

40% of Silicon Valley's Profits (But Not Sales) Came from Apple (siliconvalley.com) 147

An anonymous reader writes:The San Jose Mercury News reports that last year 40% of Silicon Valley's profits came from one company -- Apple. "The iPhone maker accounted for 28 percent of the Bay Area tech industry's $833 billion in 2015 sales," while "Its profits were a jaw-dropping 40 percent of the region's $133 billion total." Meanwhile, Google's parent company Alphabet racked up $75 billion in sales, representing nearly 57% of the total for all Silicon Valley internet companies, followed by eBay and PayPal.

But while sales grew, internet-company profits fell by 29% as more companies focused on growth. "Profits are nice, sure, but becoming profitable isn't the top priority around here, particularly for younger firms," wrote the newspaper, noting that investors are paying 18 times Facebook's annual sales for its stock. In fact, 29% of Silicon Valley's top companies didn't have sales growth in 2015 (an increase from 17% the previous year), and five of the top 10 companies saw a drop in sales in 2015 (including Intel). "The numbers are telling the story," one analyst tells the newspaper. "There is growth, but it is slowing."

The Mercury News adds that "The question for those with the biggest sales drops is how much time do they have left if the trend continues..."
Government

From Uber To Eric Schmidt, Tech Is Closer To the US Government Than You'd Think (theguardian.com) 48

An anonymous reader shares an article on The Guardian: Alphabet's executive chairman, Eric Schmidt, recently joined a Department of Defense advisory panel. Facebook recently hired a former director at the U.S. military's research lab, Darpa. Uber employs Barack Obama's former campaign manager David Plouffe and Amazon.com tapped his former spokesman Jay Carney. Google, Facebook, Uber and Apple collectively employ a couple of dozen former analysts for America's spy agencies, who openly list their resumes on LinkedIn.

These connections are neither new nor secret. But the fact they are so accepted illustrates how tech's leaders -- even amid current fights over encryption and surveillance -- are still seen as mostly U.S. firms that back up American values. Christopher Soghoian, a technologist with the American Civil Liberties Union, said low-level employees' government connections matter less than leading executives' ties to government. For instance, at least a dozen Google engineers have worked at the NSA, according to publicly available records on LinkedIn. And, this being Silicon Valley, not everyone who worked for a spy agency advertises that on LinkedIn. Soghoian, a vocal critic of mass surveillance, said Google hiring an ex-hacker for the NSA to work on security doesn't really bother him. "But Eric Schmidt having a close relationship with the White House does," he said.
Danny Yadron, said, "What's worse for a Silicon Valley executive: ties to the Chinese military or friends in the US Defense Department?"
The Almighty Buck

Apple Should Pay More Tax, Says Co-Founder Wozniak (bbc.com) 240

mrspoonsi quotes a report from BCC: All companies, including Apple, should pay a 50% tax rate, Apple co-founder Steve Wozniak has told the BBC. He said he doesn't like the idea that Apple does not pay tax at the same rate he does personally. "I don't like the idea that Apple might be unfair -- not paying taxes the way I do as a person. I do a lot of work, I do a lot of travel and I pay over 50% of anything I make in taxes and I believe that's part of life and you should do it." When asked if Apple should pay that amount, he replied: "Every company in the world should." He said he was never interested in money, unlike his former partner Steve Jobs. "Steve Jobs started Apple Computers for money, that was his big thing and that was extremely important and critical and good." Three years ago the company admitted two of its Irish subsidiaries pay a rate of 2%. It has built up offshore cash reserves of around $200 billion -- beyond the reach of U.S. tax officials. In a CBS '60 Minutes' episode, Apple CEO Steve Cook dismissed as "total political crap" the notion that the tech giant was avoiding taxes. And on a semi-related note, presidential candidate Donald Trump said in January he'd like to make Apple "start building their damn computers and things in this country instead of other countries." He said he would impose a 35% business tax on American business manufacturing outside of the U.S if elected president.
Government

FBI Paid More Than $1 Million For San Bernardino 'Hack' (cbsnews.com) 99

An anonymous reader writes: FBI Director James Comey has indicated the bureau paid more than $1 million for the method used to hack into the iPhone 5c belonging to one of the San Bernadino shooters. How did he allude to it? He said the FBI paid more money than he would make in the time left as FBI director. He makes just under $200,000 a year based on public files and has over seven years left on his term. "How much did you pay for this software?" Comey was asked. "A lot," he said. "More -- let's see. More than I will make in the remainder of this job, which is seven years and four months, for sure," Comey said. "And so it's a -- but it was in my view, worth it, because it's a tool that helps us with a 5c running iOS 9, which is a bit of a corner case, increasingly as the devices develop and move on to the 6 and 6s and whatnot and iOS's change, but I think it's very, very important that we get into that device." Comey said.
Digital

Choosing to Skip the Upgrade and Care for the Gadget You've Got (nytimes.com) 183

The New York Times has run a piece on its "Tech Fix" section, in which it argues, citing a user's experience, why skipping an upgrade might not be a bad idea, and how you could hold on to your existing device for a little longer. The story revolves around Vincent Lai, who dug up a Palm Treo, a smartphone that was disconnected last decade, and found that with little tweaks, the phone still had some life in it. From the article: Mr. Lai's behavior might be extreme, but his experience with the Palm Treo illustrates there is another way: If you simply put some maintenance into electronics as you would a car, you can stay happy with your gadgets for years. It is part of a movement of anti-consumerism, or the notion of cherishing what you have rather than incessantly buying new stuff. Signs of this philosophy are spreading: Industry data suggests that consumers are waiting longer to upgrade to new phones than they have in the past. [...] When smartphones and tablets were fairly sluggish and limited in abilities compared with computers, there was a compelling reason to buy a new mobile device every few years. But now the mobile gadgets have become so fast and capable that you can easily keep them much longer. "A five-year-old computer is still completely fine now," Mr. Wiens said. "We're starting to hit that same plateau with phones now."The article also shares some tips such as clearing up storage and getting your device's battery replaced -- which costs roughly $20 to $40 -- that can help you get the max out of your phone and tablet. There's one more aspect, which the aforementioned article doesn't talk about. If you have an old iDevice -- iPhone or iPad -- upgrading to the latest available version of the operating system could substantially slow it up. Not upgrading, however, exposes your device to a range of security attacks. It's a tough choice.
Businesses

Almost Nothing About the 'Apple Harvests Gold From iPhones' Story Is True (vice.com) 45

Jason Koebler, reporting for Motherboard: You may have seen a viral headline floating around over the last few days: Apple recycled $40 million worth of gold last year, which was extracted from iPhones. Almost none of what was reported is true. [...] Here is the truth: Apple paid independent recyclers to recycle old electronics -- which were almost never Apple products, by the way -- because it's required by law to do so. Far from banking $40 million on the prospect, Apple likely ended up taking an overall monetary loss. This is not because Apple is a bad actor or is hiding anything, it's simply how the industry works. All electronics manufacturers that sell products in the United States are required to do e-waste recycling under laws enacted in 25 states. The laws are different in each state, but none of them require Apple to recycle Apple products. Instead, they usually require manufacturers to recycle a certain amount of pounds of e-waste, which is linked to either their market share or to the overall weight of products they sell. That's why you see Apple noting that it recycled "71 percent of the total weight of products we sold seven years earlier."
Privacy

Can Switzerland Become a Safe Haven For the World's Data? (dailydot.com) 103

An anonymous reader shares an interesting article on Daily Dot which lists a number of reasons why Switzerland should be deemed as the nation for storing all of your data. The article reads: As United States and European Union regulators debate a sweeping new data-privacy agreement, Switzerland is presenting itself as a viable neutral location for storing the world's data thanks to strict privacy laws and ideal infrastructure. The Swiss constitution guarantees data privacy under Article 13. The country's laws protecting privacy are similar to those enacted by the E.U. Swiss data protections are also, in some cases, much stricter than those of the E.U., according to Nicola Benz, attorney at Swiss law firm Froriep. And since Switzerland is not part of the E.U., data stored there remains outside the reach of the union's authorities. [...] The country's tight privacy laws could make the small nation more attractive to privacy-focused start-ups. And it already has that momentum. After the former NSA contractor Edward Snowden 2013 revelations about the National Security Agency's secret surveillance activities, Switzerland witnessed something of a boom in its data-center business. Phil Zimmermann, creator of the popular PGP encryption protocol and founder of Silent Circle, even left the U.S. for Switzerland last year, citing the overreach of American authorities. Andy Yen, CEO of Swiss-based encrypted email service Protonmail, said that the country has robust processes in how it carries out data requests from authorities. Data requests have to go through a court like in most countries, said Yen, but "the person that's having their data requested needs to be notified eventually about the request happening and there's an opportunity to fight it in an open court. This is quite different than the U.S., where things can go through a so-called FISA court."
Encryption

FBI Tells Congress It Needs Hackers To Keep Up With Tech Company Encryption (buzzfeed.com) 103

An anonymous reader quotes a report from BuzzFeed: A high ranking technology official with the FBI told members of Congress Tuesday that the agency is incapable of cracking locked phones and devices on its own, even with additional resources. Amy Hess, the agency's executive assistant director for science and technology told a panel of the House Energy and Commerce Committee that encrypted communications continue to pose a challenge to the American law enforcement, and to the safety of the American public. But when asked by lawmakers to provide a practical solution beyond the FBI's talking points, she said that the cooperation of technology companies would be necessary. According to the New York Times, "The FBI defended its hiring of a third-party company to break into an iPhone used by a gunman in last year's San Bernardino, Calif., mass shooting, telling some lawmakers on Tuesday that it needed to join with partners in the rarefied world of for-profit hackers as technology companies increasingly resist their demands for consumer information." They are stressing the importance of cooperation with tech companies and "third parties" to help fight terrorism, claiming they do not have the capabilities and resources available to crack encrypted devices. Congress is currently debating potential legislation on encryption.
Encryption

Apple Refused China Request For Source Code In Last Two Years: Lawyer (reuters.com) 57

Dustin Volz, reporting for Reuters: Apple has been asked by Chinese authorities within the last two years to hand over its source code but refused to do so, the company's top lawyer told U.S. lawmakers at a hearing on Tuesday. Apple general counsel Bruce Sewell made the statement in response to a line of attack from law enforcement officials who have attempted to portray Apple as complicit in handing over information to Chinese authorities for business reasons while refusing to cooperate with U.S. requests for access to private data in criminal investigations. Apple and the FBI returned to Washington to testify before lawmakers about their heated disagreement over law enforcement access to encrypted devices, highlighted in the case of a locked iPhone linked to a gunman in last December's Islamist militant-inspired shootings in San Bernardino, California. Earlier in the hearing before a House Energy and Commerce subcommittee, Captain Charles Cohen, commander in the Indiana State Police, repeated the suggestion that Apple has quietly cooperated with Beijing. But when pressed by Representative Anna Eshoo, a California Democrat, for the source of that claim, Cohen only cited news reports. "That takes my breath away," a visibly frustrated Eshoo said. "That is a huge allegation."In some other Apple news, the Cupertino-based company complied with 80% of U.S. law enforcement requests in the second half of 2015, its just released transparency report shows. U.S. law enforcement asked Apple for information 4,000 times, covering 16,112 devices in the second half of 2015.
Portables (Apple)

Apple Launches MacBook 2016 With Intel Skylake Processor, Longer Battery Life 179

Apple, on Tuesday, announced a refresh for its 12-inch MacBook laptop. The 2016 MacBook comes with an Intel Skylake processor -- sixth-generation dual-core Intel Core M model, offering up to 1.3 GHz clock speed with Turbo Boost speeds of up to 3.1 GHz, faster 1866 MHz memory, and a 'rose gold' color variant. Apple assures 10 hours of wireless Web browsing time, or 11 hours of movie playback on a single charge. The new model will hit retail stores on Wednesday. It starts at $1,299 for the 256GB SSD and 8GB (up from 4GB) version, and goes all the way up to $1,599 for the top-of-the-line model which offers 512GB SSD.

A couple of points: the first-generation MacBook didn't fare well with reviewers and plenty of users alike. Second, today's announcement also hints that the MacBook Air and the MacBook Pro lineups won't be getting the Intel Skylake upgrade for at least a few more months -- which is really sad, because, at present, they come equipped with almost three-year-old processor and graphics chips. No wonder, Oculus executive made fun of Apple's computers.

Slashdot Top Deals