About charlesarthur

Freelance journalist - technology, science, and so on. Author of "Digital Wars: Apple, Google, Microsoft and the battle for the internet".

Start up: Wi-Fi Sense explained, another giant Android vulnerability, the US’s sleepiest cities, and more

Posted on July 30, 2015 by charlesarthur

What happens when you create a way for any programmer to analyse peoples’ DNA? (Hint: not good things.) Photo by micahb37 on Flickr.

A selection of 11 links for you. Use them wisely. I’m charlesarthur on Twitter. Observations and links welcome.

Wi-Fi Sense in Windows 10: Yes, it shares your passkeys; no, you shouldn’t be scared » Ars Technica

Sebastian Anthony:

For a start, when a Wi-Fi passkey is shared with your PC via Wi-Fi Sense, you never actually see the password: it comes down from a Microsoft server in encrypted form, and is decrypted behind the scenes. There might be a way to see the decrypted passkeys if you go hunting through the registry, or something along those lines, but it’s certainly not something that most people are likely to do.

Perhaps more importantly, though, just how sacred is your Wi-Fi password anyway? Corporate networks notwithstanding (and you shouldn’t share those networks with Wi-Fi Sense anyway), most people give out their Wi-Fi keys freely. You could even argue that Wi-Fi Sense is more secure: if I ask Adam for his Wi-Fi password, I am free to give it away to anyone. If I receive the password via Wi-Fi Sense, I can still connect to Adam’s network, but I can’t tell anyone else the password.

And it only goes to immediate-circle friends, not friends of friends of.. So probably not such a big thing to worry about.
link to this extract

Why Grooveshark failed » The Verge

Stephen Witt:

The Grooveshark streaming application launched in April of 2008 — several months ahead of Spotify. The service proved explosively popular from the outset. Users, especially younger users, loved on-demand music delivery, and Greenberg left school to focus on Grooveshark full time. But there was a problem: Grooveshark still relied on peer-to-peer infrastructure similar to Napster, Kazaa, and bitTorrent. In other words, although it functioned as a streaming service, it still sourced the music from its users’ file libraries. And to the record companies, that looked like copyright infringement.

Without approval from the labels, Grooveshark struggled to attract venture capital. In its first five years of existence, the company raised just under a million dollars. In the same time, Spotify, with equity buy-in from the music majors, raised a hundred times as much.

It didn’t “look like” copyright infringement; it clearly was infringement, in just the same way that the original Napster was. That’s why it was sued into the ground. Grooveshark never played by the rules (artists demanded their music be removed; Grooveshark staff re-uploaded it, or ignored new uploads). They failed because they could never stay inside the rules.
link to this extract

Drones and spyware: the bizarre tale of a brutal kidnapping » WIRED

Kevin Poulsen with a wonderful tale of how truth is stranger than fiction:

efforts to trace the new emails were in vain. The author boasted that he was using Tor as well as other anonymizing precautions that would withstand even an “Egotistical Giraffe exploit,” a reference to an NSA de-anonymizing technique that surfaced in the Edward Snowden leaks. He sent the messages through the Singapore-based anonymous remailer anonymousemail.com, and shared the photos—stripped of metadata—through the anonymous image sharing site Anony.ws.

Evidently unconvinced, the Vallejo police still insisted the crime was a put-on, but the FBI was also on the case. And, it turned out, despite his sophistication, the kidnapper had left a digital trail.

The kidnapper had slipped by using a disposable Tracfone to call Quinn after the abduction. The FBI reached out to Tracfone, which was able to tell the agents that the phone was purchased from a Target store in Pleasant Hill on March 2 at 5:39 pm. Target provided the bureau with a surveillance-cam photo of the buyer: a white male with dark hair and medium build. AT&T turned over records showing the phone had been used within 650 feet of a cell site in South Lake Tahoe.

But the real break in the case came when the kidnapper evidently struck again.

link to this extract

Trend Micro discovers vulnerability that renders Android devices silent » Trend Micro

Wish Wu (Mobile Threat Response Engineer):

We have discovered a vulnerability in Android that can render a phone apparently dead – silent, unable to make calls, with a lifeless screen. This vulnerability is present from Android 4.3 (Jelly Bean) up to the current version, Android 5.1.1 (Lollipop). Combined, these versions account for more than half of Android devices in use today. No patch has been issued in the Android Open Source Project (AOSP) code by the Android Engineering Team to fix this vulnerability since we reported it in late May.

This vulnerability can be exploited in two ways: either via a malicious app installed on the device, or through a specially-crafted web site. The first technique can cause long-term effects to the device: an app with an embedded MKV file that registers itself to auto-start whenever the device boots would case the OS to crash every time it is turned on.

In some ways, this vulnerability is similar to the recently discovered Stagefright vulnerability. Both vulnerabilities are triggered when Android handles media files, although the way these files reach the user differs.

Seems like the media file handling is where everyone is focussing for Android weaknesses just now.
link to this extract

September 2014: iPhone 6 and Android value » Benedict Evans

From September 2014:

with the iPhone 6 and iOS8, Apple has done its best to close off all the reasons to buy high-end Android beyond simple personal preference. You can get a bigger screen, you can change the keyboard, you can put widgets on the notification panel (if you insist) and so on. Pretty much all the external reasons to choose Android are addressed – what remains is personal taste.

Amongst other things, this is a major cull of Steve Jobs’ sacred cows – lots of these are decisions he was deeply involved in. No-one was quicker than Steve Jobs himself to change his mind, but it’s refreshing to see so many outdated assumptions being thrown out.

Meanwhile, with the iPhone 6 Plus (a very Microsofty name, it must be said) Apple is also tackling the phablet market head on. The available data suggests this is mostly important in East Asia but not actually dominant even there – perhaps 10-20% of units except in South Korea, where it is much larger. Samsung has tried hard to make the pen (or rather stylus) a key selling point for these devices, but without widespread developer support (there is nothing as magical as Paper for the Note) it is not clear that these devices have actually sold on anything beyond screen size and inverse price sensitivity (that is, people buy it because it’s the ‘best’ and most expensive one). That in turn means the 6 Plus could be a straight substitute.

Now we have Samsung’s results (out by the time you read this) and LG’s results, where the latter specifically says that sales were lower in South Korea than expected. Evans seems to have been borne out: the only differentiator between premium Android and iPhones was screen size.
link to this extract

Busy-ness data on Google search results » Google

Do you ever find yourself trying to avoid long lines or wondering when is the best time to go grocery shopping, pick up coffee or hit the gym (hint: avoid Monday after work)? You’re in luck!

Now, you can avoid the wait and see the busiest times of the week at millions of places and businesses around the world directly from Google Search. For example, just search for “Blue Bottle Williamsburg”, tap on the title and see how busy it gets throughout the day. Enjoy your extra time!

That’s very clever. (Location data from Android phones, one guesses.)
link to this extract

Android security, bugs and exploits » Google+

Adrian Ludwig is head of security for Android:

There’s common, mistaken assumption that any software bug can be turned into a security exploit. In fact, most bugs aren’t exploitable and there are many things Android has done to improve those odds. We’ve spent the last 4 years investing heavily in technologies focused on one type of bug – memory corruption bugs – and trying to make those bugs more difficult to exploit.

A list of some of those technologies that have been introduced since since Ice Cream Sandwich (Android 4.0) are listed here. The most well known of these is called Address Space Layout Randomization (‘ASLR’), which was fully completed in Android 4.1 with support for PIE (Position Independent Executables) and is now on over 85% of Android devices. This technology makes it more difficult for an attacker to guess the location of code, which is required for them to build a successful exploit.

What Ludwig doesn’t mention: the Stagefright bug. Is it right to say it could be used to take over a phone via MMS? Or would ASLR defeat that? You’d hope the head of security for Android would tackle this in a public blogpost talking about security. But he doesn’t. Which tends to make one think the worst.
link to this extract

Which cities get the most sleep? » The Jawbone Blog

Tyler Nolan:

One of the major findings in our study of city sleep was that people living in cities just don’t get enough. No major city in the United States averages above the NIH-recommended seven hours of sleep per night. But it’s only part of the picture. The vast majority of the suburban and rural counties have much healthier sleep numbers.

Geography has a profound effect on the routines we follow and the habits we form. Our sleep cycles adapt to the pace and lifestyle of the world we live in and the world by which we are surrounded. We look forward to further investigating the effects of geography and how it influences UP wearers in all parts of the world.

Technical Notes: This study was based on over one million UP wearers who track their sleep using UP by Jawbone. Less populous counties were blended with neighboring counties to generate significant results. This technique revealed patterns at finer granularity than the state level, such as time zone boundaries. All data is anonymized and presented in aggregate.

One still gets that little tingle of concern that your sleep data could be tracked directly back to you by someone malicious or stalker-y at Jawbone. (The visualisations are lovely, though.)
link to this extract

Brinks’ super-secure smart safes: not so secure » WIRED

Kim Zetter:

Vulnerabilities found in CompuSafe Galileo safes, smart safes made by the ever-reliable Brinks company that are used by retailers, restaurants, and convenience stores, would allow a rogue employee or anyone else with physical access to them to command their doors to open and relinquish their cash, according to Daniel Petro and Oscar Salazar, researchers with the security firm Bishop Fox, who plan to demonstrate their findings next week at the Def Con hacker conference in Las Vegas.

The hack has the makings of the perfect crime, because a thief could also erase any evidence that the theft occurred simply by altering data in a back-end database where the smartsafe logs how much money is inside and who accessed it. If done well, the only telltale sign of an attack would be left on security cameras—if anyone bothered to look.

They’re “smart” because they can tally how much money is put into them. Dumb because they run Windows XP Embedded. And there’s an external USB port for “troubleshooting”.
link to this extract

Retailer Acceptance » Contactless Life

Duncan Stevenson has compiled a gigantic table of which companies accept contactless and Apple Pay payments (and to what amount).

In theory Apple Pay should be accepted at all retailers that accept contactless, and this seems to be the case for Mastercard and Visa cards, however American Express cards are currently experiencing issues with Apple Pay in certain retailers (hence the existence of the “Amex Apple Pay” column). I have a blog post coming soon covering the issues with American Express Apple Pay in the UK.

(It’s a real HTML table too.)
link to this extract

Your 23andMe DNA can be used in racist, discriminatory ways » BuzzFeed News

This week, an anonymous programmer posted on GitHub an early-stage program called Genetic Access Control. It basically worked as a log-in mechanism. The third-party program was designed to hook up to the company’s API and mine the 23andMe accounts of users who agreed to share their information, as they would agree to let apps connect to their Facebook or Twitter profiles. Websites using Genetic Access Control could scan that data for information about “sex, ancestry, disease susceptibility, and arbitrary characteristics” — and then restrict users’ access to the site based on this information.

For example, people with only the “right” amount of European ancestry would be allowed to access a website that used Genetic Access Control:

But 23andMe shut down the developer’s access to its API on Wednesday, two days after the code was published. 23andMe spokesperson Catherine Afarian told BuzzFeed News the program violated a policy that forbids use of the API for, among other things, “hate materials or materials urging acts of terrorism or violence.”

I think a programmer who actually wanted to cause trouble (as opposed to one, as here, just showing 23andMe how blithely trusting it is) could reasonably point out that they’re not creating hate materials or anything to do with terrorism or violence.

And – whoever they were – succeeded with a beautiful example of why you don’t really want to have open public access to a DNA database. As well as why 23andMe are twits for ever having thought so.
link to this extract

Start up: after Windows Everywhere, what?, flying Twitter’s nest, Happy Uncopyrightday, and more

Posted on July 29, 2015 by charlesarthur

Lots of cabs, in theory. But in reality too? Photo by UrbanPaul on Flickr.

A selection of 8 links for you. Use them wisely. I’m charlesarthur on Twitter. Observations and links welcome.

Microsoft, capitulation and the end of Windows Everywhere » Benedict Evans

Benedict Evans:

A new CEO is acknowledging the end of ‘Windows Everywhere’ as the driving strategic engine for Microsoft, and also acknowledging the decline of Microsoft Office as the monolithic, universal experience for productivity. Microsoft is also suggesting that Xbox is not strategically core either, reflecting the reality that it will be the smartphone, not the TV or a box plugged into it, that will be the hub of the digital experience for most people. The smartphone is the sun and everything else orbits it.

This is a little like Google’s transition away from the plain-text web search as the centre of everything, and indeed Facebook’s tentative shifts away from the Newsfeed. Microsoft has two huge, profitable businesses in Windows and Office: they will slowly go away, so how do you use them to create something new? Instead of every new project having in some way to support Office and Windows, how do you use Office and Windows to support the future? You must distinguish between things that prop up the legacy Office and Windows businesses (and Microsoft is doing plenty to do that), while using them to drive the new things.

But you also need to work out was that ‘new’ would look like.

link to this extract

More than 450 staff fly Twitter’s nest – FT.com

Hannah Kuchler, Aimee Keane, Leaf Arbuthnot:

An FT analysis of LinkedIn profiles suggests about 12% of Twitter’s staff have left in the last year, including senior staff in corporate development and partnerships, and executives from its MoPub acquisition.

The figure is likely to underestimate the true number of departures as not every employee has a profile on the professional social network or keeps it up to date. Despite the staff turnover, the group’s total headcount has increased 18% in the last year.

Robert Peck, a SunTrust Robinson Humphreys analyst, wrote in a note that while “brain drain” is always a risk in the highly competitive technology industry, he was concerned that the large sums of capital raised by start-ups “increases the risk for Twitter during the chief executive transition” as employees could be lured to private rivals by valuable pre-initial public offering stock.

“While some key talent may leave the company while it is in flux, it may also be difficult to hire new key talent without a permanent chief executive being in place,” he wrote.

link to this extract

Apple HomeKit requires ID chip » EE Times

Rick Merritt:

Apple requires anyone making a device compatible with its HomeKit environment to buy and use a special identity chip. The revelation was one of many from a session on platforms for the Internet of Things at last week’s ESC SV event here.

“I know a lot of people who have been surprised by this requirement and had to re-spin boards for the chip,” said Michael Anderson, chief scientist of PTR Group in his talk. “A lot of manufacturers are up in arms [about the] Apple silicon [that makes their] device more expensive,” he said.

“There’s no clear story what the chip does but I expect it is involved with access to the cloud and may have triggers for geo location,” Anderson said. Overall, “there’s not a lot known about HomeKit since it was first launched in iOS 8 because Apple’s got it under wraps,” he added.

Good way to add cost, but also a good way to be sure of security. Or.. a good way for everything to be susceptible to the same security flaw.
link to this extract

Windows 10 or OS X? A Mac user falls for the PC again » WSJ

Joanna Stern really loves Windows 10, but finds the hardware lacking:

Ironically, I found my MacBook Air to be the best Windows 10 laptop. It may not have a touchscreen, but it was snappier, and beat the Dell and Surface for normal scrolling and navigating. (The three-finger swipe wasn’t enabled during my tests, however.) Windows 10 is in desperate need of a worthy PC laptop.

Another thing that’s made me a master Windows 10 multitasker is the ability to easily snap email to one side of the screen and a Web browser to the other. Microsoft included app-snapping in previous Windows versions, but now it suggests other open apps or windows to place next to it. It also lets you tile up to four windows on the screen. It’s a huge time saver, especially when helping herd the stray windows on my external monitor.

The feature is so great, Apple put it in its next version of OS X and iOS for the iPad. But Microsoft’s implementation is better, in part because it has addictive keyboard shortcuts.

link to this extract

Filmmakers fighting “Happy Birthday” copyright find their “smoking gun” » Ars Technica

Joe Mullin:

The “smoking gun” is a 1927 version of the “Happy Birthday” lyrics, predating Warner/Chappell’s 1935 copyright by eight years. That 1927 songbook, along with other versions located through the plaintiffs’ investigations, “conclusively prove that any copyright that may have existed for the song itself… expired decades ago.”

If the filmmakers’ lawyers are right, it could mean a quick route to victory in a lawsuit that’s been both slow-moving and closely watched by copyright reform advocates. Warner/Chappell has built a licensing empire based on “Happy Birthday,” which in 1996 was pulling in more than $2m per year.
Plaintiff Jennifer Nelson’s movie is actually called Happy Birthday, and it’s about the song. She had to pay Warner/Chappell $1,500 to use the song in her movie, and that didn’t sit well with the documentarian. She’s seeking to get that money back and also represent a class of plaintiffs who have paid similar licensing fees to Warner/Chappell on a copyright she and her lawyers say is illegitimate.

The 1927 songbook referenced above was found in a batch of 500 documents provided by Warner/Chappell earlier this month. That cache included “approximately 200 pages of documents [Warner/Chappell] claim were ‘mistakenly’ not produced during discovery, which ended on July 11, 2014, more than one year earlier,” Nelson’s lawyers write.

This has been a thorn in peoples’ sides for years. It would be great for it to be wiped out.
link to this extract

Your car won’t be driving itself anytime soon » Forbes

Thejo Kote, co-founder and CEO of Automatic, which makes connectors for cars:

There is also the legal elephant in the room: liability. Car makers have always made sure that liability for the operation of a vehicle rests solely on the driver. The shift of liability to the manufacturer of the self-driving car is a huge change. Evaluating and understanding the risk they’re signing up for in a way that satisfies lawyers, legislators, and society at large is going to take a long time.

Auto insurance as we know it can’t be applied to self-driving cars; brand new insurance models will have to be developed. I work closely with senior executives at some of the largest insurers in the world, and while they’re actively preparing for the transition, even their most aggressive projections indicate that there won’t be any meaningful changes in the market for well over a decade.

link to this extract

OnePlus 2 vs Moto X Play: what’s the difference? » Pocket-lint

Elyse Betters:

Based on white sheet specs, the OnePlus 2 seems to beat the Moto X Play in terms of internal specs (like processor speed and RAM). It also completely beat the Moto X Play when it came to design and build, whereas the Moto X Play dominated in the camera department. And both devices had comparable displays and software experiences.

Moto X Play also makes improvements over its predecessor and naturally blows the Moto G out of the water, but as we said, it costs £299. Moto X Play also supports microSD, which the OnePlus 2 doesn’t, but the OnePlus 2 does have a fingerprint sensor and USB Type-C. And the 64GB version with 4GB of RAM only costs $389 (convers to £249).

Specs of course don’t tell everything. But she comes down on the side of the OnePlus (though it doesn’t have NFC).
link to this extract

Uber’s phantom cabs » Motherboard

Alex Rosenblat:

There are two versions of Uber’s app: one for drivers to use to find passengers, and one for passengers to use to hail a ride. Frequently, drivers login to the passenger app to see where other drivers are so they don’t sit unknowingly in the same one-mile stretch as the competition.

What the passenger app shows can be deceptive, however. The discrepancy Heather noticed wouldn’t have been obvious in a busy location with a shorter wait time. But in more remote areas, the app clearly shows drivers where there are none.

Over a six month period, my colleague Luke Stark and I have been studying how Uber drivers interact with the Uber app as part of a research project funded by Microsoft FUSE Labs. Our research was conducted primarily in Uber driver forums, and through interviews with Uber drivers. We’ve observed that drivers across multiple forums discuss the fake cars they see on their own residential streets.

Ooh, this article is fascinating all the way through.
link to this extract

Start up: a huge new Android security risk, Google+ downgraded, iTunes’s giant mess, and more

Posted on July 28, 2015 by charlesarthur

It was 20 years ago (roughly) that a Rolling Stones song launched Windows 95. Photo by michfiel on Flickr.

A selection of 9 links for you. Use them wisely. I’m charlesarthur on Twitter. Observations and links welcome.

Making free work (hint: cannibalize radio, not sales) » Music Industry Blog

Mark Mulligan:

Neither Spotify or Deezer is in the business of free music, they are in the business of subscriptions and simply use free as a marketing tool. So they have no reason to cling doggedly to free users that show no sign of converting. Instead after a sufficient period of free music has been offered users should be pushed to subscriptions or onto a radio tier (see figure). There is no business benefit to the streaming services nor rights holders to have perpetual on demand free users.

The assumption that free music is some sort of internet right is symptomatic of the internet’s growing pains. In terms of market development we’re probably at the adolescence stage of the internet, the stage at which carefree childhood starts to be replaced by responsibility and consequences. We’re seeing this happen right across the internet economy, from privacy, data, free speech, jurisdiction etc. Because music has been free online for so long consumers have learned to accept it as fact. That assumption will not be changed any time soon, and try to force the issue too quickly and illegal services will prosper.

Of course YouTube is, and always has been the elephant in the room, buoyed by the schizophrenic attitude of record labels who simultaneously question its impact on the market while continuing to use it as their number 1 digital promotional channel. While the tide may finally be beginning to turn, don’t expect YouTube to go anywhere any time soon. But should the screws tighten do expect YouTube to stop playing ball.

Apple Music, of course, chucks you out after your three-month trial unless you subscribe. Let’s see how it does for conversion.
link to this extract

Continuum on Windows 10 » Blogging Windows

Windows 10 adjusts your experience for your activity, device and display, so you can do your thing in any mode anytime you want. Onscreen features, like menus and taskbars, adapt for easy navigation. Apps are built to scale smoothly from screen to screen so they look good from the smallest app window up to the largest 8k displays*.

That’s gr– hey, what’s the asterisk?

“*App experiences may vary.”

Oh. (Via Wes Miller.)
link to this extract

Start Me Up (again) » GartenBlog

Windows 10 will arrive, without fanfare, on computers tomorrow (July 29th). In August 1995, Windows 95 was launched with the Rolling Stones’ “Start Me Up” as its theme song. Michael Gartenberg recounts Microsoft’s Brad Stone talking about the negotiations with the band:

For a good month we continued negotiations mostly on the phone. I had only so much I would and could pay and that made things easier on our end. The fact that we had to fish or cut bait to get our TV ads done in time for the August 24th launch served as a forcing function and eventually we agreed to terms. They rushed WK the “Start Me Up” recording as we were already working on the ad. The next day I got a frantic call from WK saying that the Stones had sent a later live version of “Start Me Up” that wouldn’t work. I called up Cohl and told him that I had to have the original version or there was no deal. Eventually they agreed. I found out later that the reason they gave us the live version was that it was recorded after Bill Wyman had left the band. Giving us the original meant that Wyman got his allocation of the deal which of course meant that giving us the original version of “Start Me Up” meant that Jagger, Richards and the rest of the band got less.

I also found out later that Jagger and Richards did not always see eye to eye on the deal. As Brad indicated, Jagger was less inclined to commercialize their music in this way. I was told he was especially ready to just forget the deal when we made it clear we needed the original version but that he did not want to piss off Richards over it because Richards wanted or needed the money.

One British paper (not me) suggested Microsoft paid $14m. “We paid a fraction of this”, Stone writes.
link to this extract

Dmail makes your Gmail messages self-destruct » TechCrunch

Sarah Perez:

The product works by way of a Google Chrome web browser extension, which only you, as the email sender, have to install.

Once loaded, you’ll have a new option within the Gmail “compose” interface that allows you to turn the Dmail service off and on using a toggle switch. When on, you can specify ahead of sending an email if you want the email destroyed in an hour, a day, a week, or “never.” Even if you choose the “never” option, you can later go into your sent message and click a “Revoke Email” button to remove access to that email from all recipients.

What’s clever about Dmail is that, unlike some other secure messaging products, recipients don’t have to use the service themselves in order for it to work. If they don’t have the extension installed, they’ll instead receive an email that states: “This secure message was sent using Dmail. To view this message, simply click the button below.”

Clicking the included “View Message” button will then redirect them to a web view where they can read your email.

More accurate headline: Dmail makes your Gmail messages into shareable web pages whose access you control. These attempts to reinvent email are doomed to failure.
link to this extract

Canon cuts outlook as weak camera sales hit second-quarter profit » Reuters

Ritsuko Ando:

Japan’s Canon Inc cut its earnings outlook for the full year and reported a 16% fall in quarterly profit as consumers, increasingly in the habit of taking photos with their smartphones, bought fewer compact digital cameras.

The world’s largest camera maker said on Monday its second-quarter net profit fell to 68bn yen ($552m) compared with 81bn yen a year earlier. Analysts on average expected 65bn yen, according to Thomson Reuters data.

The firm said it now expects full-year profit of 245bn yen rather than the 255bn it forecast three months ago.

Wait and see what they forecast in another quarter. This is a trend that will only continue.
link to this extract

The hidden opportunity of corporate smartphones » Tech.pinions

Bob O’Donnell:

Many of the IT professionals who are making or strongly influencing these purchases also have a soft spot for Windows and this preference clearly shows up in survey results. Though it’s well known the percentage of consumers actively using Windows Phones is small, what isn’t well known is a surprisingly large percentage of companies (over 40% in several different surveys) have employees who use devices running Microsoft’s mobile OS. In fact, in a TECHnalysis Research survey of US healthcare companies, 17% of work smartphones in their organizations were running Windows Phone. This goes a long way towards explaining Microsoft’s recent comments about focusing their future smartphone development towards enterprise as a key target. They actually have a solid opportunity there.

Goes to show how little influence IT professionals have in the new mobile world order, if you ask me. A reminder: about 80m Windows Phones are being used worldwide; in the US it’s in the low single-digit millions. That might be a gigantic corporate usage. Or it might be a small corporate usage and a small corporate usage.
link to this extract

Major flaw in Android phones would let hackers in with just a text » All Tech Considered : NPR

Aarti Shamani:

In this attack, the target would not need to goof up — open an attachment or download a file that’s corrupt. The malicious code would take over instantly, the moment you receive a text message.

“This happens even before the sound that you’ve received a message has even occurred,” says Joshua Drake, security researcher with Zimperium and co-author of Android Hacker’s Handbook. “That’s what makes it so dangerous. [It] could be absolutely silent. You may not even see anything.”

Here’s how the attack would work: The bad guy creates a short video, hides the malware inside it and texts it to your number. As soon as it’s received by the phone, Drake says, “it does its initial processing, which triggers the vulnerability.”

The messaging app Hangouts instantly processes videos, to keep them ready in the phone’s gallery. That way the user doesn’t have to waste time looking. But, Drake says, this setup invites the malware right in.

If you’re using the phone’s default messaging app, he explains, it’s “a tiny bit less dangerous.” You would have to view the text message before it processes the attachment. But, to be clear, “it does not require in either case for the targeted user to have to play back the media at all,” Drake says.

Gives attackers system privileges. Proportion of Android devices vulnerable: 95%. Google has pushed out an update to hardware makers. But have the hardware makers pushed the update out? Google reckons that if 50% of devices get it, that will be good.

The big risk is that someone will create a Blaster-style worm that attacks a phone and then accesses its phone book to send malicious MMSs to the numbers in the phone book.
link to this extract

Don’t order the fish » Marco.org

Marco Arment:

With the introduction of Apple Music, Apple confusingly introduced a confusing service backed by the iTunes Store that’s confusingly integrated into iTunes and the iOS Music app (don’t even get me started on that) and partially, maybe, mostly replaces the also very confusing and historically unreliable iTunes Match.

So iTunes is a toxic hellstew of technical cruft and a toxic hellstew of UI design, in the middle of a transition between two partly redundant cloud services, both of which are confusing and vague to most people about which songs of theirs are in the cloud, which are safe to delete, and which ones they actually have.

iTunes has Microsoft’s problem: supporting a gigantic range of legacy hardware in the form of millions of iPods and iPhones.
link to this extract

Everything in its right place » Official Google Blog

Bradley Horowitz, VP of “Streams, Photos and Sharing”:

People have told us that accessing all of their Google stuff with one account makes life a whole lot easier. But we’ve also heard that it doesn’t make sense for your Google+ profile to be your identity in all the other Google products you use.

So in the coming months, a Google Account will be all you’ll need to share content, communicate with contacts, create a YouTube channel and more, all across Google. YouTube will be one of the first products to make this change, and you can learn more on their blog. As always, your underlying Google Account won’t be searchable or followable, unlike public Google+ profiles. And for people who already created Google+ profiles but don’t plan to use Google+ itself, we’ll offer better options for managing and removing those public profiles.

You’ll see these changes roll out in stages over several months. While they won’t happen overnight, they’re right for Google’s users—both the people who are on Google+ every single day, and the people who aren’t.

On that YouTube blogpost:

The comments you make on YouTube will now appear only on YouTube, not also on Google+. And vice-versa. This starts rolling out today.

Google+ is no longer obligatory. Slightly too soon to call it dead. But it will never grow big. And we’ll never hear those faintly bogus stats about “user sharing” or inflated claims of users.
link to this extract

Start up: adblocking animus, Amazon’s aims, Ubuntu phone reviewed, the iPod Watch, and more

Posted on July 27, 2015 by charlesarthur

“They say this replacement can’t be hacked remotely!” Photo by Hugo90 on Flickr.

A selection of 10 links for you. Use them wisely. I’m charlesarthur on Twitter. Observations and links welcome.

New iPhone apps will include ad blockers for the mobile web » MIT Technology Review

Tom Simonite:

Some [iOS developers] are now testing ad blocking apps they intend to release when iOS9 becomes available. Their results suggest these apps could be popular. For example, when Dean Murphy, an app developer based in the U.K., hacked together an ad blocker in about an hour earlier this month, he found it slashed the time taken to load the popular Apple blog iMore from 11 seconds to just two seconds.

He is now working to release a fully polished ad blocker called Crystal, and expects there will be many others when iOS9 launches. “Apple has laid a solid foundation for quality ad blocking applications,” he says.

One of Murphy’s competitors will be an app called Purify, created by Chris Aljoudi, who leads development of the desktop ad blocker uBlock, which he says has over one million active users. A video of Purify in action shows how it makes a news site load faster and strips pre-roll video ads from YouTube. Aljoudi says his tests have showed that Purify cuts Web browsing data usage by about a quarter—which could cut some people’s data bills and extend battery life. Both Aljoudi and Murphy intend to make their apps cheap, but not free.

I think they’re going to make good money. Advertisers (and sites) have a problem coming their way. Here’s Purify at work:

link to this extract

The Verge’s web sucks » blog.lmorchard.com

Les Orchard tried examining The Verge’s desktop site, and found it linked him to 47 third-party trackers:

I feel like someone just set up the entire vendor hall from an awful tech conference in my living room. Seriously, could you folks just not pick one or two or ten? Did you hit every booth and say “Yeah, cool, sign us up!” I feel thoroughly spindled & folded & researched, here.

As a webdev at Mozilla, I’ve been in hour-long meetings where we’ve agonized over whether it’s copacetic to include just one little Google Analytics snippet without notifying users and updating the privacy policy. But, I know we’re crazy in our own very special ways.

In former lives, I’ve worked at ad agencies and digital marketing companies. I’m no stranger to conversations that revolve around partners & bizdev & analytics & media buys. I can only imagine things have intensified & evolved since I’ve been out of those trenches.

Still – and maybe this is the Mozilla brain-damage talking – I can’t imagine a sane conversation that resulted in The Verge extending an invitation to over 20 companies to set up shop on my computer with every page visit.

The reckoning is moving just that bit closer each day. Once a significant number of people start getting faster, better experiences from using adblockers (or tracker-blockers), they won’t care that the ads aren’t targeted. Newspaper and magazine ads didn’t use to follow you around the room, and they were quite a good business.
link to this extract

I got my music back. At least most of it » Loop Insight

Jim Dalrymple, after the debacle of last week:

So now I have the iTunes Match service that I pay for separately, and Apple Music, both of which use iCloud Music Library. There is really no way to get away from them if you want to use the latest and greatest from Apple.

I’ll admit, I’m still trying to get my head around how this works.

Some of the songs I own were incorrectly tagged as Apple Music, but that’s been fixed too, which means they show up correctly in iTunes. That is great news.

However, I’m still missing a couple of hundred songs. Apple’s theory is that I deleted them—that when I was trying to fix Apple Music, I mistakenly deleted my own files. While I concede that it is within the realm of possibility that I deleted my own files, it doesn’t make sense to me.

Apple is clearly struggling with Apple Music – a colossal effort launched in a huge number of territories – which is why my advice would be not to get worked up about precisely what seems to be working or not at present. And especially not to delete anything that you think you might own.
link to this extract

Ubuntu Phone review: years in the making, but still not consumer-ready » Engadget

Jamie Rigg:

I get the idea of Scopes [which are like Live Tiles in Windows], kind of. They are supposed to give the user a personal experience, remove their reliance on walled apps and bring content to the forefront. I just don’t think Scopes deliver, or maybe I’m just so used to the app-first experience that I’m having trouble adapting to the Scope way of doing things. And if that’s the case, then most people will be in the same boat. My main problem with Scopes is that I feel I’m being bombarded with content. If I want to check out upcoming concerts on an iOS/Android device, I’d load up the Songkick app. But when that’s not what I’m looking for, I don’t really want to see Songkick listings permanently displayed on my phone, like I’m being advertised to. You could argue the solution is to remove the Songkick feed from the Scopes it populates. But, if I was constantly adding and removing sources from Scopes when they are or aren’t relevant, I don’t see how that’s preferable to having dedicated apps that offer a better experience.

It seems like there’s just no way to create a new user interface at present, certainly on a mobile screen. The gigantic gravitational field of the app-driven iOS/Android system precludes it.

Also, this sounds like crap.
link to this extract

Toshiba’s woes show how PC sales slump is squeezing big tech firms » The Guardian

I wrote about the Others:

It is whispered among some analysts that only the preinstallation of third-party antivirus programs – which try to get users to sign up to subscriptions – keeps some PC makers afloat at all, owing to the fees they receive from antivirus software firms.

It was the PC business that triggered the current turmoil at the Japanese giant [Toshiba], after an internal auditor asked in late January to look at the accounts for the company’s laptop business. That eventually concluded with an examination by an external panel, whose 294-page report noted “inappropriate accounting” in various business segments, including those “relating to component transactions” in the PC business.

In a statement on 21 July it said that 111bn yen (£580m) of assets in the PC business in the past six financial years were “under consideration” for re-evaluation. That could affect its financial results, which will be finalised by 31 August. But even in its most recent quarterly report, before any restatement, Toshiba said that its PC business recorded restructuring costs of 46bn yen in the previous three quarters, and that otherwise it “would have recorded positive operating income over three consecutive quarters”.

46bn yen is $370m. Is Toshiba really saying it made an average operating profit of $123m per quarter in the PC business? That’s as much as Asus, which is one of the biggest makers. Seems unlikely.
link to this extract

Twitter is deleting stolen jokes on copyright grounds » The Verge

Dante D’Orazio:

some people just copy good tweets from other people and act like they came up with the 140-character witticism on their own. This has been going on since the beginning of Twitter.

It now appears Twitter is using its legal authority to crack down on these tweet-stealers. A number of tweets have been deleted on copyright grounds for apparently stealing a bad joke.

As first spotted by @PlagiarismBad, at least five separate tweets have been deleted by Twitter for copying this joke:

saw someone spill their high end juice cleanse all over the sidewalk and now I know god is on my side
— uh (@runolgarun) July 9, 2015
Olga Lexell, who, according to her Twitter bio, is a freelance writer in LA, appears to be the first person to publish the joke on Twitter. In a tweet posted this afternoon, she confirmed that she did file a request to have the tweets removed.

I simply explained to Twitter that as a freelance writer I make my living writing jokes (and I use some of my tweets to test out jokes in my other writing). I then explained that as such, the jokes are my intellectual property, and that the users in question did not have my permission to repost them without giving me credit.

She added that most of the accounts that were reusing her tweets without accreditation were “spam accounts that repost tons of other people’s jokes every day.” This also isn’t the first time Twitter has complied with a request like this: Lexell tells The Verge that she’s filed similar requests for other jokes. Twitter staffers typically remove the offending tweets “within a few days” without asking Lexell any follow-up questions.

Couldn’t she, you know, just not tweet them but try them on other people? Or try them from a protected account? This is quite weird.
link to this extract

Pakistan to shut down BlackBerry services by December for “security reasons” » Reuters

Syed Raza Hassan:

Pakistan, a nuclear-armed nation of 180 million people, is plagued by militancy, criminal gangs and drug traffickers.

“PTA has issued directions to local mobile phone operators to close BlackBerry Enterprise Services from Nov. 30 on security reasons,” an official with the Pakistan Telecommunications Authority said in a text message.

He asked not to be named due to the sensitivity of discussing communications and intelligence.

BlackBerry was not immediately available to comment.

A report released this week by British-based watchdog Privacy International said Pakistan’s powerful military intelligence agency, the Inter-Services Intelligence (ISI), was seeking to dramatically expand its ability to intercept communications.

BlackBerry encrypts data such as emails and its BlackBerry Messenger messages sent between a user’s phone and public networks, ensuring greater privacy for users but making life harder for police and intelligence agencies.

link to this extract

Fiat Chrysler recalls 1.4 million vehicles to defend against hacks » Bloomberg Business

Mark Clothier:

Fiat Chrysler Automobiles NV is recalling about 1.4 million cars and trucks equipped with radios that are vulnerable to hacking.

The company was already distributing software to insulate connected vehicles from illegal remote manipulation after Wired magazine published a story about software programmers who were able to take over a Jeep Cherokee being driven on a Missouri highway. Fiat Chrysler reiterated that it’s not aware of any real-world unauthorized remote hack into any of its vehicles.

It stressed that no defect was found and that it’s conducting the campaign out of “an abundance of caution.”

Fiat Chrysler said it has blocked unauthorized remote access to certain vehicles systems via an over-the-air update on Thursday.

link to this extract

Amazon and the “profitless business model” fallacy » Remains of the Day

Eugene Wei (who used to work at Amazon):

There are very few people in technology and business who are what I’d call apex predators. Jeff [Bezos] is one of them, the most patient and intelligent one I’ve met in my life. An apex predator doesn’t wake up one day and decide it is done hunting. Right now I envision only one throttle to Jeff’s ambitions and it is human mortality, but I would not be surprised if one day he announced he’d started another side project with Peter Thiel to work on a method of achieving immortality.

One popular thesis among Amazon profitability skeptics is that Amazon can’t “flip a switch” and become profitable. The most common guess as to how Amazon flips the switch is that it will wait until it is the last retailer standing and then raise prices across the board, so Amazon skeptics argue against that narrative possibility.

But “flipping a switch” is the wrong analogy because Amazon’s core business model does generate a profit with most every transaction at its current price level.

In that light, it’s wrong to look at the AWS “profits” as a proportion of revenue and say “wow”. The profit number is meaningless. Amazon can make any part of the business look as profitable or unprofitable as it likes.
link to this extract

The future of Apple Watch will be more like the iPod’s than the iPhone’s » Beyond Devices

Aaron Miller (in a guest post on Jan Dawson’s site):

First, and most importantly, the Apple Watch is an ecosystem product. Right now, the Watch only works as an extension of the iPhone. Its upper boundary is the total number of iPhones in the world.

This makes the Watch much more like the iPod than the iPhone. From the time the iPod first launched, it was a product tied to a computer, first to Macs then eventually to Windows computers as well. (Remember the Digital Hub strategy?) Just as the iPod existed to enhance the Personal Computer + iTunes ecosystem, the Watch exists to enhance the iPhone ecosystem. The iPhone, even if tied to iTunes early on, was never merely an ecosystem enhancement—nor designed to be one, like the iPod or Apple Watch have been.

Naturally, we expect the Watch’s reliance on iPhones to change over time. LTE and GPS seem like inevitable Apple Watch additions, for example, as does a Watch-native App Store. With true third-party apps coming soon, reliance on the iPhone will diminish even more. But there’s one limitation that may always tie Apple Watches to iPhones: the screen…

…the Apple Watch category is not just smartwatches. The correct category is wearables, and wearables right now, at the birth of the Apple Watch, are very similar to the early MP3-player market. Some are huge and multi-functional. Some are svelte and limited. Some are banking on unique features trying to find a niche.

Wonder what other wearables Apple might have in mind. What’s the iPod shuffle version of a Watch?
link to this extract

Start up: Amazon’s profitable cloud, Apple Music woes, early days of search, and more

Posted on July 24, 2015 by charlesarthur

“Hello! Have you heard of ‘Greece’? Do you have spare money?” Artist impression by Nasa.

A selection of 9 links for you. Lather them all over yourself. I’m charlesarthur on Twitter. Observations and links welcome.

How Lycos almost won the search engine wars » Gizmodo

Jim Gilliam with a tale from the pit:

A few months later, our team made a huge discovery. In our ongoing efforts to make search results better, Dennis set up an eye-tracking lab and began scientific testing of how people used search. We watched where people looked on the pages and noticed something shocking: people didn’t look at the ads. Not only that, but the more we tried to make the ads stand out, the less people looked at them. Our entire advertising philosophy was based on making ads flashy so people would notice them. But we saw, quite counterintuitively, that people instinctively knew that the good stuff was on the boring part of the page, and that they ignored the parts of the page that we—and the advertisers—wanted them to click on.

This discovery would give us an edge over everyone in the industry. All we had to do was make the ads look less like ads and more like text. But that was not what the ad people wanted, and the ad people ran Lycos. The advertiser was seen as our true customer, since advertising was where our revenue came from. Our team argued that our customers were also the people searching, and without them, we’d lose the advertisers. The eye-tracking revelation wasn’t enough to convince them, so we tried another tack.

In the ultracompetitive world of search engines, the biggest factor aside from the quality of the results was how fast they loaded. We were constantly trying to take things out of the pages to make them load faster. So I created a program that took queries coming into our site and ran them on all the major search engines, ranking them in order of speed.

And guess which speed-obsessed, blinky-ad-ignoring company came along next? It’s an extract from Gilliam’s new book, The Internet Is My Religion. Have a free download of the book.
link to this extract

Amazon Web Services is now a $6 billion-a-year cloud-computing monster » Quartz

Dan Frommer:

AWS generated almost $400m in operating income during the quarter, and almost $1bn over the past four quarters. It represented almost 40% of Amazon’s consolidated-segment operating income for the second quarter in a row—despite only generating about 8% of the company’s sales.

In short: AWS is one of Amazon’s most valuable assets.

That 40%-8% ratio is something to ponder. Prices are going to fall as Microsoft and Google keep trying to win share. Will profits remain as strong?
link to this extract

Apple Music is a nightmare and I’m done with it » Loop Insight

Jim Dalrymple had a terrible experience:

I went through about 15 albums one night and manually added all of the missing songs. It was frustrating, to say the least, but I did it. I nearly lost my mind the next morning when I checked my iPhone and Apple Music and taken out all of the songs I added the night before. I was right back where I started.

In some cases, like Bob Dylan and Neil Young, a few of the songs show up twice on one album. When you tap to play the song, they both show the animated icon in iTunes, as if they are both playing. Note in the screenshot that the songs are different in terms of their length of playing time. Either Apple Music shaved a few seconds off one of the tracks, or they’re from different albums.

I’ve had some problems a little like this – duplicate tracks on iOS devices, ie not the originating device, which is the desktop. But nothing like Dalrymple’s awful loss of thousands of tracks. I’ve lost nothing. (People, don’t suffer the same way; make backups.) I’m just waiting for it to sort itself out. And I have a backup.

I suspect that Apple’s servers are suddenly under a colossal load, and that this is related in some way. Apple Music is very, very complicated. Not that that excuses track deletion. But it’s Spotify plus the iTunes Music Store plus iTunes Match. A gigantic beast.
link to this extract

An identity thief explains the art of emptying your bank account » Bloomberg Business

Dune Lawrence:

On this particular winter night [in Minsk] in 2009, [Dmitry] Naskovets checks the online orders that have come in and sees a routine assignment. A client has tried to buy a MacBook Pro online with a stolen credit card, but American Express blocked the purchase. Now it’s Naskovets’s job to work it out with Amex.

He calls the toll-free number, using software that makes it look as if he’s dialing from the U.S. Any information the customer rep might ask for, Naskovets’s client sends him instantly by chat. The questions don’t usually get beyond the cardholder’s date of birth, Social Security number, or mother’s maiden name, but the woman fielding this call is unusually thorough. She notices that the phone number on the account has changed recently, triggering extra security. She puts Naskovets on hold while a colleague dials the old number and gets the actual cardholder on the line.

Thus begins an absurd contest: Naskovets against the man he’s impersonating. The agents throw out questions to distinguish the fake. When did you buy your home? What color was the car you bought in 2004? Each time Amex puts him on hold, he knows the legitimate cardholder is being asked the same question. At last, the rep thanks him, apologizes, and approves the purchase. Naskovets was even better than the real thing.

Scary.
link to this extract

Apple Watch: a work in progress but packed with potential » CCS Insight

Ben Wood says his initial expectations were too high, and that he has been left underwhelmed. But, he adds:

this is version 1.0 and Apple has a proven track record of making a nice first device and then slowly but surely making it better and better. I’m not going to lie — I was among those who misjudged the original iPhone. It was easy to pick holes in the first model when it launched: poor battery life, no concessions to operators or subsidy, and missing features like 3G and MMS made it easy to jump to the wrong conclusions. But over time it’s become one of the most transformative electronic devices of our generation. That’s because the product that appeared in 2007 is not the product that hundreds of millions of people are using today. It was a full year before Apple opened the App Store, a major catalyst to the iPhone’s success. I predict we’ll take a similar journey with its watch.

When you go beyond the basic features and think about the sheer potential of the device you start to realise how significant it is. To me, it comes down to offering capabilities that are so compelling it’s not even worth the milliseconds it takes to whip your smartphone out of your pocket.

A perfect example of this is payment. Apple Pay landed in the UK this month. Although I’ve only used it a few times, my initial impression is that having a secure, predictable payment mechanism easily accessible on your wrist is hugely useful, whether you’re buying a coffee or hopping on a bus.

Another inspiring application is an electronic hotel room key – something Apple is already supporting at some Starwood hotels. No more arriving at your room struggling to get an unreliable plastic keycard out of your pocket or wallet, with a coffee in one hand and a suitcase in the other. A tap of the wrist and you’re in.

Things get even better when you add another layer of intelligence. At some point in the future, you’ll arrive at the hotel or approach the counter to pay for your coffee; a nearby beacon will tell your Apple Watch what information you’re likely to need. As if by magic the relevant loyalty card appears on the watch face ready to help you check in or pay for the coffee. These types of rich application are limited only by developers’ imagination and the software needed to create them.

Judging devices that obey Moore’s Law on their first incarnation really is a mug’s game.
link to this extract

NASA just discovered ‘Earth 2.0’ » Business Insider

Jessica Orwig:

Kepler 452b will forever be remembered as the first, second Earth or what NASA refers to as “Earth 2.0” ever discovered:

Here’s what we know so far about this Earth 2.0:

It’s 60% larger than Earth.
• It’s most likely rocky, meaning it has a solid surface as opposed to a gaseous one, like Jupiter.
• It’s about 1,400 light years from Earth.
• It orbits its star every 385 days, very similar to Earth’s orbital length.
• The planet and star it’s orbiting are about 6 billion years old — 1.5 billion years older than our sun.

Any chance they could bail out Greece? Just asking.
link to this extract

Google+: a case study on app download interstitials » Official Google Webmaster Central Blog

David Morell, software engineer at Google+ on why “hey, get our app!” things that take over the page might bug users:

Despite our intuition that we should remove the interstitial, we prefer to let data guide our decisions, so we set out to learn how the interstitial affected our users. Our analysis found that:
• 9% of the visits to our interstitial page resulted in the ‘Get App’ button being pressed. (Note that some percentage of these users already have the app installed or may never follow through with the app store download.)
• 69% of the visits abandoned our page. These users neither went to the app store nor continued to our mobile website.

While 9% sounds like a great CTR for any campaign, we were much more focused on the number of users who had abandoned our product due to the friction in their experience. With this data in hand, in July 2014, we decided to run an experiment and see how removing the interstitial would affect actual product usage. We added a Smart App Banner to continue promoting the native app in a less intrusive way, as recommended in the Avoid common mistakes section of our Mobile SEO Guide. The results were surprising:
• 1-day active users on our mobile website increased by 17%.
• G+ iOS native app installs were mostly unaffected (-2%). (We’re not reporting install numbers from Android devices since most come with Google+ installed.)

So much is weird about this. Why were they ever showing the interstitial to Android users, since “most” already had it? The news that not blocking a screen leads to people not giving up (especially for an app they’re likely to already have) isn’t that astonishing. Also: only 17% more read the page? That doesn’t seem so great, given that there were 69% abandoning before. Note too how the measurements aren’t congruent: in the first set, you’re told how many follows to the app there were, and how many abandoned. In the second, you’re told how “1-day active users” increased and how nothing happened to iOS installs – not how many clicked through.

When you aren’t given congruent statistics (in experiment A, X happened; in experiment B, X changed by Y), be distrustful.

And the other missing stat: the balance between iOS users and Android users who came to the page. It all just seems like a study in “what were you even thinking by trying to force people to click past an interstitial?”
link to this extract

Worldwide smartphone market posts 11.6% year-over-year growth in Q2 2015, the second-highest shipment total for a single quarter » IDC

According to the latest preliminary release from the International Data Corporation (IDC) Worldwide Quarterly Mobile Phone Tracker, vendors shipped a total of 337.2 million smartphones worldwide in the second quarter of 2015 (2Q15), up 11.6% from the 302.1 million units in 2Q14. The 2Q15 shipment volume represents the second highest quarterly total on record. Following an above average first quarter (1Q15), smartphone shipments were still able to remain slightly above the previous quarter thanks to robust growth in many emerging markets. In the worldwide mobile phone market (inclusive of smartphones), vendors shipped 464.6 million units, down -0.4% from the 466.3 million units shipped 2Q14.

Quite a contrast with the gloomier number from Trendforce on Tues/Weds. That gives smartphones 73% of sales; the 90% point, when featurephones are just edge cases, is fast approaching. Minor details: Samsung was the only top vendor to see a fall in shipments (and that by about 1m, so within margins of error). Apple, Huawei and Xiaomi all seeing growth faster than the market.

A notable quote from Melissa Chau on the phone team: “IDC now tracks over 200 different smartphone brands globally, many of them focused on entry level and mid-range models, and most with a regional or even single-country focus.”
link to this extract

Lottery IT security boss guilty of hacking lotto systems to win $14.3m » The Register

Iain Thomson:

Iowa state lottery’s IT security boss hacked his employer’s computer system, and rigged the lottery so he could buy a winning ticket in a subsequent draw.

On Tuesday, at the Polk County Courthouse in Des Moines, Iowa, the disgraced director of information security was found guilty of fraud.

Eddie Tipton, 52, installed a hidden rootkit on a computer system run by the Multi-State Lottery Association so he could secretly alter the lottery’s random number generator, the court heard. This allowed him to calculate the numbers that would be drawn in the state’s Hot Lotto games, and therefore buy a winning ticket beforehand.

The prosecution said he also tampered with security cameras covering the lottery computer to stop them recording access to the machine.

Hmm – worth a one-hour drama. Not really a miniseries or a film.
link to this extract

Start up: Instagram v skin colour, slow smartphone sales, Galaxy Note 5 in a rush, and more

Posted on July 23, 2015 by charlesarthur

Are you sure you’d want not to feel pain or have super-strong bones? Photo by Jlhopgood on Flickr.

A selection of 9 links for you. Use them wisely. I’m charlesarthur on Twitter. Observations and links welcome.

The quiet racism of Instagram filters » Racked

Morgan Jerkins:

Last year, Danity Kane’s Dawn Richards uploaded a selfie on Instagram that lead to plenty of backlash from her fans. Aside from the apparent plastic surgery, many suspected that she had bleached her skin. In response, Richards tweeted “Filter is the new bleach.”

For women of color, she’s right. Instagram users can choose from over 20 filters, but as subjects, we don’t have a choice in how our images are processed once a filter is in place. In the name of enhancing or beautifying our photos, filters inevitably alter our appearances beyond recognition.

People often think of technology as inherently unbiased, but photography has a history of racism.

Remember the story of Kodachrome film’s insensible racism? Repeated by computers.
link to this extract

TrendForce reports Q2 global smartphone shipments at 304m and revises annual shipment growth… » PRNewswire

Trendforce is a Taiwan-based research company:

The latest analysis from the global market research firm TrendForce finds smartphone shipments in the second quarter of 2015 grew 1.9% over the previous quarter to 304m units. Shipment growth in the second quarter slowed as vendors prepared to launch their flagship devices in this year’s second half. However, shipments of branded Chinese smartphones benefited from the Chinese Labor Day sales and their entries into the overseas markets. TrendForce reports the second quarter shipments of Chinese branded smartphones had an above global average growth of 15.6% with 126m units shipped.

TrendForce has also made downward revision to smartphone shipment growth for the entire 2015 from 11.6% to 8.2%. According to Avril Wu, TrendForce’s smartphone analyst, this revision is attributed to the negative global economic outlook for the second half of this year and weakening demands.

Lots more figures to come (IDC, Gartner, Counterpoint among others) but this is a surprising data point. (Thanks Mr McC on Twitter.)
link to this extract

How strong is Apple’s grip over mobile phones? » WSJ

Rani Molla (and the graphics team?) put together this nifty graphic of revenue share in the mobile phone industry.

mobile phone industry revenue share

Note again that it is revenue share, not unit share (one slow-witted commenter failed to comprehend this), or profit share, or OS share. And it’s for the whole industry, not just smartphones – but of course smartphones generate more revenue. (A graphic showing absolute revenue would be fun too. Might have a stab at that.)
link to this extract

These superhumans are real and their DNA could be worth billions » Bloomberg Business

Caroline Chen:

Steven Pete can put his hand on a hot stove or step on a piece of glass and not feel a thing, all because of a quirk in his genes. Only a few dozen people in the world share Pete’s congenital insensitivity to pain. Drug companies see riches in his rare mutation. They also have their eye on people like Timothy Dreyer, 25, who has bones so dense he could walk away from accidents that would leave others with broken limbs. About 100 people have sclerosteosis, Dreyer’s condition.

Both men’s apparent superpowers come from exceedingly uncommon deviations in their DNA. They are genetic outliers, coveted by drug companies Amgen, Genentech, and others in search of drugs for some of the industry’s biggest, most lucrative markets.

Their genes also have caused the two men enormous suffering.

Admit it, until that last sentence you were feeling envious.
link to this extract

LifeLock plunges after FTC alleges data security firm made false promises to consumers » Forbes

Antoine Gara:

the Federal Trade Commission said on Tuesday afternoon LifeLock both failed to deliver on its pledges, or live up to a 2010 regulatory sanction, which barred the company from making false claims about the quality of its data protection services.

LifeLock, the FTC said, falsely claimed it protected consumers’ identity 24/7/365 by providing alerts “as soon as” it received any indication there was a problem, and charged consumers $10-a-month for the service. The company even revealed its CEO’s social security number in advertising campaigns as a means to prove the quality of its data protection.

However, between October 2012 through March 2014, the FTC says LifeLock not only misled customers on their protection by equating its services with the types of protection consumers’ receive from larger financial institutions. It also violated the 2010 order by failing to establish and maintain a comprehensive information security program to protect its users’ credit card, social security, and bank account numbers.

Would be nice if the US had better personal data security. Or even a law that protected it.
link to this extract

How YouTube killed an extension with 300,000 users » The Next Web

Owen Williams:

three years after its inception, Streamus is dead. It’s been removed from the Chrome Web Store after Google revoked its API key.

Sean Anderson, a 25-year-old developer based in California bet everything on his tiny, but incredibly useful Chrome extension.

At first, the extension was picked up by a few friends but it quickly gained steam when TechCrunch covered it in January of 2014.

It was always somewhat questionable, because it played music in the background without the video that went with it — Anderson seemingly knew this, but had hoped he would one day be able to work something out with YouTube if it got big enough.

Shortly after the Techcrunch article was published, YouTube sent Anderson a cease and desist letter.

YouTube was upset for three reasons: Streamus was not back-linking to YouTube or showing video in the foreground while playing music and didn’t show its advertisements. Understandable requests.

After the initial cease and desist and an introduction to YouTube’s head of developer relations, the company went quiet.

Did Anderson truly think Google was just going to ignore this? That’s naive optimism taken to the extreme.
link to this extract

Ahead of schedule: Samsung to release Galaxy Note 5 one month ahead of schedule » BusinessKorea

Cho Jin-Young:

According to industry sources on July 21, Samsung Electronics will hold an event in New York on Aug. 13 to unveil the Galaxy Note 5 and the Galaxy S6 Edge Plus.

Recent reports suggest that the Galaxy Note 5 will feature a 5.7 inch QHD Super AMOLED display, its own Exynos 7422 processor, 4GB of RAM, and a 16 megapixel main camera with optical image stabilization (OIS), along with a stylus pen. The Galaxy S6 Edge Plus will be the Note without a stylus. It will feature a 5.7 inch display, Exynos 7420 processor, 3GM of RAM, and 16 megapixel main camera.

The release of the Galaxy Note series in Aug. is very exceptional for Samsung Electronics. Until now, the company has launched the Galaxy Note series after making the products debut in IFA, the world’s leading trade show for consumer electronics and home appliances, which takes place in Germany every Sept. However, the company decided to move up the release date of the Galaxy Note 5 by a month this year. Also, this is the first time for Samsung to launch a “Plus” version of the Galaxy S series.

Big question is whether the Note 5 will have a removable back/battery and SD card slot.
link to this extract

An Irish startup thinks it can stop you from blocking online ads » The Irish Journal

[Pagefair CEO Sean] Blanchfield says he noticed last year that Apple begun sending signals that it wasn’t interested in helping ad tech firms track users and serve them ads.
“In July last year we noticed a company called Disconnect, they are an extension, much like Adblock, for Chrome. A San Francisco company. Their focus is privacy, user privacy and behavioural tracking.

“People install them basically to block cookies. As a side-effect they have to block most ads, because most ads use cookies.

“In any case, in July last year they launched mobile versions on Android and on iOS, and they weren’t approved for the Play Store, Google blocked them.

But Apple put them through (into the App Store). And I spoke to them after, and they felt pretty confident that they had been given the approval to proceed essentially blocking ads. That’s not their core mission but it’s an essential piece.”

PageFair’s solution is to scrambles the ads and deliver them in a way that adblock software can’t “see”.

“So a programme like Adblock Plus can’t recognise it,” Blanchfield said.

And will this work even against Apple’s new preference option for Safari? ”Yes.”

But doesn’t it slow down speed at which a page loads ads? ”No, it’s still instantaneous.”

This is going to be quite a war.
link to this extract

Apple figures out way to help you more easily move objects on a touchscreen » CNET

It’s a patent filing, as Lance Whitney explains:

Apple and other mobile device makers have long offered the ability to cut or copy and paste text. To do this, you can use your finger to zoom in on the text you wish to select, then expand or shrink the highlighted text, and then finally delete or move that text. But that type of operation doesn’t always go smoothly because your fingers are typically too large to perform such a granular task. So selecting text is more frustrating than it should be. Apple’s patented solution would remove the need to place your big finger on the touchscreen in the first place.

Here’s how it would work: Let’s say you want to select a specific section of text. With the cursor placed in the right spot, you’d tap the side or another non-touchscreen area of the device. Each time you tap the side, the cursor could move one character, thereby expanding the selection of the text on a more precise and granular level. Tapping the right side of the device would move the cursor to the left, while tapping the left would move the cursor to the right.

Unconvinced.
link to this extract

Start up: the people who buy flops, remotely hacking Jeeps, sharing Google’s salaries, and more

Posted on July 22, 2015 by charlesarthur

Inside the Greenwich foot tunnel: great for (walking) London cyclists. Photo by nick.garrod on Flickr.

A selection of 9 links for you. Use them wisely. I’m charlesarthur on Twitter. Observations and links welcome.

Harbingers of failure » Penn State University

Eric Anderson, Song Lin, Duncan Simester and Catherine Tucker:

We show that some customers, whom we call ‘Harbingers’ of failure, systematically purchase new products that flop. Their early adoption of a new product is a strong signal that a product will fail – the more they buy, the less likely the product will succeed. Firms can identify these customers either through past purchases of new products that failed, or through past purchases of existing products that few other customers purchase. We discuss how these insights can be readily incorporated into the new product development process. Our findings challenge the conventional wisdom that positive customer feedback is always a signal of future success.

The authors aren’t specific, but might another word for such people be “Kickstarter participants”?
link to this extract

You disabled Flash in your browsers, but is that enough? » Fortinet Blog

Bing Liu:

Flash files can not only be embeded in a web page but also in various document formats such as Microsoft Office documents and PDF files. Even if you have disabled Flash in your browsers, Flash exploits can still leverage Flash player vulnerabilities through software like Microsoft Office and Adobe Reader. Let’s do some tests. I will use the PoC of CVE-2015-5122 from the Hacking Team in my test. It will pop up the caculator program when loaded in browsers and other applications that have a vulnerable Flash plugin enabled.

Oh god, please can Flash DIAF?
link to this extract

iPhone, iPad study shows trade stats dramatically overstate the value of US imports from China » American Enterprise Institute

Mark Perry:

This study [from 2011] also confirms our earlier finding that trade statistics can mislead as much as inform. Earlier we found that for every $299 iPod sold in the U.S., the U.S. trade deficit with China increased by about $150. For the iPhone and the iPad, the increase is about $229 and $275 respectively. Yet the value captured from these products through assembly in China is around $10. Statistical agencies are developing tools to gain a more accurate breakdown of the origins of traded goods by value added, which will be attributed based on the location of processing, not on the location of ownership. This will eventually provide a clearer picture of who our trading partners really are, but, while this lengthy process unfolds, countries will still be arguing based on misleading data.

Makes sense: the assembly in China doesn’t really create significant value. Moving those jobs back to the US (which is impossible: the infrastructure isn’t there) wouldn’t make a lot of difference either. (Via Eugene Wei.)
link to this extract

Nanotec Systems NESPA #1 » 6moons audio reviews

The procedure is simple. Place a CD or DVD inside the black box, secure the disc with the magnetic puck and rock the switch. The disc will start spinning and the light will flash 120 times in a 2-minute period. After that, the disc will stop spinning and voila, the disc is finalized.

The flash applied is rated at 1000mW/sec, has a temperature of 5500K and light intensity of one million Lux. So in fact the disc is exposed to sunlight without destroying it.

So marvellous. (Via Peter Bright.)
link to this extract

Apple iPhone 6, the bestselling smartphone for 10 months straight » Counterpoint Technology Market Research

Every year we’ve seen the pattern of the iPhone topping the list in the fourth and first quarter of the year, while the Galaxy S tops the second and third quarter. This pattern now seems to have been broken as the iPhone 6 continues to top the list since September 2014.

The highly anticipated Galaxy S6 Edge was plagued with supply issues in the first month and now suffers from its high price tag – quickly losing its flare as a consequence. We see its sales figures declining since its launch in April. This is a heavy blow to Samsung as it has no other new model launched in 2015 in the top 10 best sellers list.

The list goes: iPhone 6, iPhone 6 Plus, Samsung GS6, Samsung GS6 Edge, iPhone 5S, Xiaomi Mi Note, Samsung Galaxy S5, Samsung Galaxy Note 4, Xiaomi Redmi 2, LG G4. (Relative sizes not given.) This is the first time LG has been in there this year; Xiaomi’s presence is a clear and present danger to Samsung.

Note that the data is for sales to users, not shipments to carriers.
link to this extract

Downward trend: Korean smartphone makers struggle in Latin American market » BusinessKorea

Cho Jin-young:

Korean smartphone makers are expected to face a crisis after showing good performance in Latin America. Samsung Electronics accounted for 29.5% of the smartphone market in Latin America during Q1 2015, down 10% or more compared to the same period last year, according to Hong Kong-based market research firm Counterpoint Research. LG Electronics, which was the second-most-popular smartphone vendor in the region, also experienced a decline in market share within a year, from 14% to 10.9%. The combined share of the two Korean companies amounted to 52.4% in Q1 2014, but the figure for Q1 2015 was 40.4%. Therefore, it is urgent for two Android phone makers to come up with measures to address the problem.

In contrast, a shift in the center of gravity for the global smartphone market is predicted to become a golden opportunity for Chinese firms that mainly produce entry-level and mid-range smartphones. Xiaomi recently entered the Brazilian mobile phone market by showcasing the Redmi2, a mid-range model, in line with the current market environment. The Chinese company decided to produce Android phones in Brazil for local consumption by asking Foxconn to assemble their products in the country.

More concerning for them is that sales of smartphones in Latin America are slowing down – so that’s a falling share in a falling or static market.
link to this extract

Hackers remotely kill a Jeep on the highway—with me in it » WIRED

Andy Greenberg:

The attack tools [Charlie] Miller and [Chris] Valasek developed can remotely trigger more than the dashboard and transmission tricks they used against me on the highway. They demonstrated as much on the same day as my traumatic experience on I-40; After narrowly averting death by semi-trailer, I managed to roll the lame Jeep down an exit ramp, re-engaged the transmission by turning the ignition off and on, and found an empty lot where I could safely continue the experiment.

Miller and Valasek’s full arsenal includes functions that at lower speeds fully kill the engine, abruptly engage the brakes, or disable them altogether. The most disturbing maneuver came when they cut the Jeep’s brakes, leaving me frantically pumping the pedal as the 2-ton SUV slid uncontrollably into a ditch. The researchers say they’re working on perfecting their steering control – for now they can only hijack the wheel when the Jeep is in reverse.

All this is remote and wireless – they aren’t directly plugged in to the car: the car’s phone connection makes it vulnerable if you know its IP address. Let’s just hope these cars aren’t running Flash.
link to this extract

@EricaJoy’s salary transparency experiment at Google (with tweets) » Storify

Joy started a spreadsheet inside Google on which she shared her salary and details about bonuses (she wasn’t receiving any). The sheet went viral inside the organisation. Some choice extracts:

“I was invited to talk to my manager on Mon or Tues. Higher up people weren’t happy. She wasn’t happy. “Why did I do it? Don’t you know what could happen?”

“Nothing. It’s illegal to retaliate against employees for sharing salaries.”

“Wellll….

And another observation of Joy’s:

“Fighting for justice & fairness INSIDE Google doesn’t go over well. Salary sharing is only 1 example. Blogger porn. Real names. Many others.”

One can see how any company would be uncomfortable at having employees all virally sharing details of their remuneration. The irony of Google, which so insists that All Must Be Known And None Shall Be Hidden, getting a taste of it, is quite a thing to behold. (Joy left Google and is now at Slack.)
link to this extract

CityCyclist 1.0 » scraplab

Tom Taylor:

For a few months, in slivers of spare time, I’ve been working on a little app for city bike navigation, called CityCyclist.

I’ve tried to build something clean and accessible, that gets a good bike route on the screen as quickly as possible. That’s glanceable while on a bike, and more useful when off.

Key innovations: there’s a little scrubber on the elevation profile at the bottom to fly quickly along a route without zooming and panning around. My hypothesis was that might make it easier to consign a route to memory. I suspect that’s not true, but I still like it.

The search results use a combination of Foursquare and Apple’s address geocoder, and seem fairly good.

The routing is powered by CycleStreets (backed by OpenStreetMap) with a selection of three options: fast, balanced, quiet. (UK only for now.)

The height detail is really nifty. And yes, cyclists have very different routing needs from drivers or walkers.
link to this extract

Start up: Windows 10’s puzzle, Adobe’s coming obituary, our digital romances, and more

Posted on July 21, 2015 by charlesarthur

A better sound to be found inside? Photo by pumpkinmook on Flickr.

A selection of 8 links for you. Use them wisely. I’m charlesarthur on Twitter. Observations and links welcome.

Windows 10 signifies Microsoft’s shift in strategy » The New York Times

Nick Wingfield:

in recent years, Windows has become an afterthought for many software developers, who have turned to the huge and engaged audience on smartphones. That shift has left Microsoft in a precarious position with consumers in recent years.

To generate more interest from developers, Microsoft has designed Windows 10 to run on PCs, smartphones and other devices, which is meant to make it easier for developers to write apps that run across all of them. And the company has sworn there will be one billion devices running the software in the next two to three years, giving developers a huge potential market to reach with their creations.

“I think we will see really huge adoption” of Windows 10, said Kevin Sather, director of product marketing for systems at Razer, a maker of high-end gaming computers and other devices.

The benefits of fast and free adoption of Windows 10 could well outweigh the revenue Microsoft is giving up. The company does not disclose how much upgrade revenue it normally makes from a new operating system, but analysts estimate that it is small compared with the other ways the company makes money from the operating system.

What this doesn’t explain is why Windows 10, even free, should suddenly make consumers devote any more time to their PCs, or buy Windows tablets any more than they do. Obviously Microsoft is a business-oriented company. So will this actually make any difference at all to the general direction of travel, away from the desktop to mobile? I just don’t see it.
link to this extract

Free sound improving techniques » PWB Electronics

Try the freezing experiment using a CD first – they are usually the easiest object to hand. If you have two identical CDs all the better as you can keep one CD as the control (no treatment) and put the other CD through the freezing/slow defrost process.

Place one CD in a plain plastic bag and place this bag in the domestic deep freezer overnight. When you remove the CD from the freezer, allow it to return to room temperature very, very slowly. You can achieve a slow defrost quite easily by wrapping it in a towel or blanket. Listen to the CD which has been through the freezing process first and then see if you can listen to the other (unfrozen) CD with the same pleasure !! Putting the previously frozen CD through the freezing/slow defrost process a second time gives you a further improvement in the sound.

Impossible to distinguish from satire. Or reality.
link to this extract

Only around 15% of WP 8.1 users to upgrade to Windows 10 Mobile? » All About Windows Phone

Steve Litchfield:

There’s something of a blanket assumption that everyone currently using Windows Phone 8.1 will upgrade to Windows 10 Mobile – after all, Microsoft has been promising that ‘majority’ of users will join the Window 10 ecosystem. But, after a few recent experiences of mine with budget devices, I thought it worth sounding a note of caution and reality – I’d put money on the actual conversion numbers to Windows 10 Mobile being significantly less than 50% and maybe as low as 15%.

He tested trying to update to Windows 10 Mobile on wiped-clean Lumias. It wasn’t great. Why? Storage: some of those low-end phones just won’t have the spare space – especially for those with any apps installed.
link to this extract

Tech world prepares obituary for Adobe Flash » WSJ

Robert McMillan:

in 2007, along came the iPhone. Adobe engineers embraced it immediately. “Everyone who was in the organization was carrying an iPhone,” said Carlos Icaza, an Adobe senior engineer at the time.

But Apple’s smartphone also troubled Mr. Icaza, who was in charge of Flash development on mobile phones. Flash had become bloated over the years and required lots of computing power to run. That wasn’t a big deal on PCs, but on mobile phones, with their limited battery life, it was a major problem, and Apple had opted not to support the technology.

Flash needed a major rewrite to work on the iPhone, but Mr. Icaza couldn’t get his superiors to allocate the necessary resources.

“For me, it was, ‘What the hell is going on? We have this amazing device that is going to change the world and everybody knows it,’” he said in an interview. “Nobody at the organization was trying to make Flash work on this device.”…

…Adobe itself now considers Flash to be immaterial to its business, meaning that it accounts for less than 5% of company revenue, but it is still widely used on websites built for browsers. The software runs on under 6% of the Internet’s home pages and its use is declining, according to BuiltWith Pty Ltd, which tracks Internet technology.

You don’t hear that 6% stat thrown around much, do you?
link to this extract

I tried all the apps that are supposed to mend a broken heart » Fusion

Kristen Brown:

A few months into the relationship I’d asked Siri to remember which of the many Johns* [*his name wasn’t John] in my contacts was the one I was dating. At the time, divulging this information to Siri seemed like a big step — at long last, we were “Siri Official!” Now, though, we were Siri-Separated. Having to break the news to my iPhone—my non-human, but still intimate companion—surprisingly stung.

Siri wasn’t the only screen-based trial of my break-up. Our relationships now exist across networked webs of digital connections, webs that we build up each time we begin a new romance and then must painfully break down when one ends. When I flicked open my laptop at work, the bottom-right corner was empty where a Google chat had previously sat waiting for me. Notifications of unread Snapchat messages used to lead to goofy photos of John, but now they’re just, disappointingly, announcements from Team Snapchat. Every time I send a note to a particular group of friends, Google’s algorithm suggests I add John to the e-mail thread.

Our relationship was the digital equivalent of moving in together, and now painful memories of him were scattered all over my online home. Technology was making my heartache worse, but that’s not how these things are supposed to work: Technology is supposed make our lives easier, so I sought out tech fixes for a broken heart.

link to this extract

Online cheating site AshleyMadison hacked » Krebs on Security

Brian Krebs:

In a long manifesto posted alongside the stolen ALM data, The Impact Team said it decided to publish the information in response to alleged lies ALM told its customers about a service that allows members to completely erase their profile information for a $19 fee.

According to the hackers, although the “full delete” feature that Ashley Madison advertises promises “removal of site usage history and personally identifiable information from the site,” users’ purchase details — including real name and address — aren’t actually scrubbed.

“Full Delete netted ALM $1.7mm in revenue in 2014. It’s also a complete lie,” the hacking group wrote. “Users almost always pay with credit card; their purchase details are not removed as promised, and include real name and address, which is of course the most important information the users want removed.”

Their demands continue: “Avid Life Media has been instructed to take Ashley Madison and Established Men offline permanently in all forms, or we will release all customer records, including profiles with all the customers’ secret sexual fantasies and matching credit card transactions, real names and addresses, and employee documents and emails. The other websites may stay online.”

link to this extract

The Apple Watch review » Anandtech

Joshua Ho and Brandon Chester:

Although this is a review of the Apple Watch, the Apple Watch will ultimately be quickly forgotten with the launch of future iterations of the Apple Watch. After all, Apple is not trying to sell the world on the idea of a smarter watch, but the idea of a watch altogether.

For those still deciding on whether the first Apple Watch makes sense, I have no reservations in saying that it’s the best wearable I’ve ever used. However, at the same time I find it hard to recommend this first-generation Apple Watch. It’s clear that there are far too many obvious areas to improve upon, areas where Moore’s law will help to dramatically improve the experience. In the case of smartphones, Moore’s law made it possible to deliver true all-day battery life and fluid app performance. After spending a few months with the Apple Watch, all I can see is a need for more compute and battery life, like what happened with smartphones.

Finally, we get back to the question of whether Apple will be sell people on the concept of a watch. In the months since I first used the watch I’ve ended up wearing it every day. I distinctly noticed its absence when I forgot the charger on a trip. I don’t know if Apple will succeed in convincing others of the utility of a watch, but they’ve definitely convinced me.

To the despair of graph-lovers everywhere, the authors declare that they can’t figure out a standard method for testing battery life, because you can configure the Apple Watch and Android Wear to behave so differently on notifications. But I agree with their conclusion – what you begin to notice, increasingly, over time is the utility.
link to this extract

Dropdowns should be the UI of last resort » LukeW

Luke Wroblewski:

No one likes filling in forms. And the longer or more complicated a form seems, the less likely we are to jump in and start filling in the blanks -especially on small screens with imprecise inputs (like our fingers).

While there’s two extra fields in the “painful” version above, the primary difference between these two flight booking forms is how they ask questions. One makes use of dropdown menus for nearly every question asked, the other uses the most appropriate input control for each question.

Dropdowns really are a pain, but it takes this post to point out quite why. There’s a longer writeup with links to video clips too.
link to this extract

Start up: Google and real accident rates, who really buys iPods?, Reddit and trolls, and more

Posted on July 20, 2015 by charlesarthur

Apple Music is available if you’re running iOS 8.4. Photo by danielooi on Flickr.

A selection of 7 links for you. Do you feel lucky? Well, do ya, punk? I’m charlesarthur on Twitter. Observations and links welcome.

Apple Music adoption » Mixpanel Trends

This is amazing: from 29 June, when iOS 8.4 was released (bringing Apple Music), Mixpanel’s measurement suggests that it passed 50% of all installed iOS devices by 16 July. That’s less than three weeks. It’s gaining about 1% per day. There has to be an upper limit, but it’s pretty high – 84% of devices are running iOS 8.

This also means, if Mixpanel is representative, that about 200m devices could already be able to try Apple Music.
link to this extract

The view from the front seat of the Google self-driving car, chapter » Medium

(That’s Google’s SDC being rear-ended on July 1 in the right-hand lane: the car causing the crash doesn’t even brake.)

Chris Urmson, who leads Google’s SDC effort:

National crashes-per-miles-driven rates are currently calculated on police-reported crashes. Yet there are millions of fender benders every year that go unreported and uncounted — potentially as many as 55% of all crashes, according to the National Highway Traffic Safety Administration. (None of the accidents in which people hit us resulted in a police report — not even the July 1 crash, even though the police were on site.) Furthermore, the numbers that are available don’t distinguish between miles-driven before causing a crash vs simply being involved in one. This all means no one knows the real crashes-per-miles-driven rates for typical American streets.

link to this extract

Who’s actually buying iPods these days? » BirchTree

Former Target manager Matt Birchler:

Kids would buy (or their parents would buy for them) the iPod Touch because of 3 things:

• It played games (Minecraft, mostly)
• It had YouTube
* It could stream music

A lot of families stopped buying iPod Touches once the iPad Mini got down to the $249 price point. You get a lot more device for your buck, and Touch sales dropped off very quickly. I could go on and on about this, but young kids love iPads more than most of us 20-30 somethings can imagine.

You also see more and more kids just using a hand-me-down smartphone that the parents have since upgraded from.

And then there were older people who bought Touches. They were more rare, but they were people who wanted something to FaceTime with their kids/grandkids. Maybe they wanted to use a couple apps they had heard about, but didn’t want to pay the ridiculous data fees to get them on a smartphone. This was a much smaller market, and many of them would end up buying an iPod Nano (for reasons I’ll address in the next section).

Nano and Shuffle had very different audiences. I asked who used to buy the Classic; his reply: “You’d be shocked how few were sold. Let’s just say it’s too few for me to draw any real conclusions.”
link to this extract

HTC won’t ship the Grip after all, but its fitness ambition lives on » Engadget

Chris Velazco:

Hey, remember that time HTC built a fitness tracker (with a little help from Under Armor) and showed it off in Barcelona? The one that was originally slated for a Spring launch? Well, we’re knee-deep in Summer already, and the company just confirmed to us that it no longer plans to ship the Grip we’ve already seen. As a spokesperson put it, the company “decided to align Grip with the entire product portfolio for health and fitness launching later this year” after “extensive wear testing and user feedback.” In other words, the exact Grip we saw in Spain won’t hit the market, but something better will.

Uh-huh. Let’s see how this progresses. HTC made the right call putting off its smartwatch (pre-announced in February 2014); this would also be a tough sell when it’s losing money. Problem is, how do you make money except with new things?
link to this extract

How iCloud Drive deletes your files without warning » Michael Tsai

Tsai quotes Mark Jaquith:

let’s say that, on your shiny new Mac, you want to move these files from iCloud Drive to your local hard drive, or to another synced drive like Google Drive or Dropbox. Well, you can just drag their folders do the other destination, right? You sure can. Apple kindly warns you that your dragging action is moving that folder, and that the files will be moved to your Mac, and won’t exist on iCloud Drive anymore. Fine. That’s what dragging a file from one place to another generally does!

But what happens if there are files inside this folder that haven’t yet synced to your local machine? Well, the move operation will be slower, because your Mac has to first download them from iCloud Drive. But once they download, they’ll be in their new location. Right?

Nope. Those files are now gone. Forever.

Tsai then follows up to show that Apple knows about this – though also pulls together other comments, including one from an ex-Apple services employee, showing that this problem is known internally, but it is being starved of funding.
link to this extract

Former Reddit CEO Ellen Pao: the trolls are winning the battle for the Internet » The Washington Post

To understand the challenges facing today’s Internet content platforms, layer onto that original balancing act a desire to grow audience and generate revenue. A large portion of the Internet audience enjoys edgy content and the behavior of the more extreme users; it wants to see the bad with the good, so it becomes harder to get rid of the ugly. But to attract more mainstream audiences and bring in the big-budget advertisers, you must hide or remove the ugly.

Expecting internet platforms to eliminate hate and harassment is likely to disappoint. As the number of users climbs, community management becomes ever more difficult. If mistakes are made 0.01% of the time, that could mean tens of thousands of mistakes. And for a community looking for clear, evenly applied rules, mistakes are frustrating. They lead to a lack of trust. Turning to automation to enforce standards leads to a lack of human contact and understanding. No one has figured out the best place to draw the line between bad and ugly — or whether that line can support a viable business model.

The basic problem is that we remember the vicious words and acts more than the kind ones; possibly we’re evolutionarily set out that way.
link to this extract

Dozens of phone apps with 300M downloads vulnerable to password cracking » Ars Technica

Dan Goodin:

many smartphone apps still allow users to make an unlimited number of login attempts. That failure allows attackers to cycle through long lists of the most commonly used passwords. Given the difficulty of entering strong passwords on smartphone keyboards, it’s a likely bet that it wouldn’t be hard to compromise a statistically significant number of accounts over a period of weeks.

According to research from smartphone security firm AppBugs, dozens of Android and iPhone apps downloaded more than 300 million times contain no limits on the number of logins that can be attempted. Per the company’s disclosure policy, researchers give app developers up to 90 days to fix vulnerabilities before making them public. That means most of the 50 or so apps identified by AppBugs still aren’t being made public. Still, the grace period has expired on at least 12 apps, including those from CNN, ESPN, Slack, Expedia, Zillow, SoundCloud, Walmart, Songza, iHeartRadio, Domino’s Pizza, AutoCAD, and Kobo. Three other apps, from Wunderlist, Dictionary, and Pocket, were found to be vulnerable but were later fixed after AppBugs brought the weaknesses to the developers’ attention.

link to this extract

Start up: how we view innovation, FBI malware v Tor, drones on the farm, Samsung in India, and more

Posted on July 17, 2015 by charlesarthur

Small; soon invisibly so? Photo of a SIM card by smjbk on Flickr.

A selection of 9 links for you. Use them wisely. I’m charlesarthur on Twitter. Observations and links welcome.

Innovation isn’t dead » Money.com

Morgan Housel, with the only article you need about innovation and people being dismissive of stuff on the basis of “I’d never want one”:

The typical path of how people respond to life-changing inventions is something like this:

• I’ve never heard of it.
• I’ve heard of it but don’t understand it.
• I understand it, but I don’t see how it’s useful.
• I see how it could be fun for rich people, but not me.
• I use it, but it’s just a toy.
• It’s becoming more useful for me.
• I use it all the time.
• I could not imagine life without it.
• Seriously, people lived without it?

This process can take years, or decades. It always looks like we haven’t innovated in 10 or 20 years because it takes 10 or 20 years to notice an innovation.

Planes, lasers, cars, antibiotics, laptops – they’ve all gone through it. What’s going through exactly the same now?
link to this extract

Drawbridge hires Apple ad executive to track users across devices » WSJ

Douglas MacMillan and Elizabeth Dwoskin:

If a desktop computer and a smartphone are connecting to the same WiFi network, the network will recognize the unique ID in each device and pass that information to Drawbridge.

The guesswork gets more accurate the more frequently Drawbridge can capture instances of devices being in the same place or connecting to the same network. Drawbridge uses this cross-device matching system to build rich profiles of people’s behavior, interests, spending habits, demographic information, and sometimes their locations. They claim their matching software is more than 80% accurate.

Methods of tracking consumers online have drawn longstanding criticism from privacy advocates. The advertiser’s holy grail, of capturing every interaction a consumer has with their brand, also requires extensive surveillance of people’s behavior, and increasingly, their comings and goings. Privacy watchdogs say consumers do not want to be monitored in this way, and that the methods companies use to obtain consent to collect people’s data are broken.

Many apps ask for consumers’ permission to collect their location as a condition of downloading the app, but advocates warn that consumers are largely unaware of the extent of the information being collected or how it is being used. A recent study found that roughly 60% of consumers withdrew their consent when presented information about how their data was being shared.

Drawbridge says the company doesn’t maintain a database of names or of people’s real identities, but builds anonymous profiles using identification numbers.

Oh, come on. “Anonymous profiles using identification numbers”? Including, say, location, age, sex, marital status, interests, and so on? Quit the obfuscation; it’s profiling, of people, and Apple tries to limit its extent, and everyone else doesn’t.
link to this extract

Feds bust through huge Tor-hidden child porn site using questionable malware » Ars Technica

Cyrus Farivar and Sean Gallagher:

A newly unsealed FBI search warrant application illustrates yet another example of how the government deploys malware and uses sophisticated exploits in an attempt to bust up child pornography rings.

The 28-page FBI affidavit (text-only, possibly NSFW) was unsealed in a federal court in Brooklyn, New York earlier this month. It describes a North Carolina server hosting a Tor hidden service site. The setup was seized in February 2015, but law enforcement allowed it to run for two additional weeks as a way to monitor its nearly 215,000 users.

Currently, at least three men—Peter Ferrell, Alex Schreiber, and James Paroline—have been charged in connection with this site.

Ferrell, username “plowden23,” is the target of the search warrant affidavit. Schreiber, 66, of Queens, was a former New York City schoolteacher. The two New York men have been released on bond.

“Questionable” malware in the sense that the legal rules about venue of infected PC are very hand-wavey; how do you know where a PC you’re infecting via Tor is based? By getting it to phone home (to the FBI). What if that’s out of venue? Ignore it?
link to this extract

Apple, Samsung in talks with telecom groups to launch e-Sim card » FT.com

Daniel Thomas and Tim Bradshaw:

Apple and Samsung are in advanced talks to join the rest of the telecoms industry to launch electronic Sim cards, in a move could fundamentally change how consumers sign up to mobile operators.

The GSMA, the industry association which represents mobile operators worldwide, is close to announcing an agreement to produce a standardised embedded Sim for consumer devices that would include the smartphone makers.

The traditional Sim card locks in the user to a network but an embedded Sim would enable a smartphone, tablet or wearable user to avoid locking themselves into a plan with a single operator or sign up to switch instantly.

Wouldn’t expect this in 2015, but next year would make perfect sense. And that’s another opening/point of failure removed from phones. I bet Apple is working on making the iPhone 7 “waterproof” – and perhaps at a dual-SIM model.
link to this extract

Agricultural drones: the new farmers’ market » Engineering & Technology Magazine

Katia Moskvitch:

In the past, when farmers had smaller fields, they knew which areas had enough water, or were ready to harvest, just by walking around their land. However, to stay connected with today’s much bigger parcels of farm land, they need precision agriculture, with crop management that relies on GPS and big data analytics to increase yields and profits while cutting down on pesticide and water use.

Many tractors are now guided by GPS, to plant perfectly straight rows of crops. Farmers can monitor the progress of their driverless tractor on a tablet at home. Monsanto, the world’s largest seed company, estimates that data-driven prescriptive planting could increase global crop production by about $20bn a year, or about one-third the value of 2013’s US corn crop.

Drones are the latest addition in the toolkit of precision farming, collecting the key datasets used to make agronomic decisions. Right now, they are still new, and regulations how to use them vary from country to country. But farmers everywhere are waking up to the potential benefits, and “in a few years, drones could be a common sight above British farms,” says Alex Dinsdale, sales manager at Ursula Agriculture, a company that delivers crop intelligence from drones. But are they really useful, or just a technology gimmick?

“I remember driving the vineyards with my grandfather as a child, we would constantly stop, get out, and look at the vines. Right up close,” says Kunde. “He would take off a leaf and look at the undersides, show me, throw it down, then choose another.” At other times groups of men would use magnifying glasses to inspect the leaves, looking for potential pest problems in the vines. Fast-forward to today, and much of that work “could have been helped by advanced tools and aerial imagery,” he says.

link to this extract

How spyware peddler Hacking Team was publicly dismantled » Engaget

The Hacking Team hack has spawned so many stories, but this by Violet Blue pulls together some of the worst behaviour uncovered. Such as:

Ethiopia’s Information Network Security Agency (INSA) was employing Hacking Team to target [security researcher, The Intercept journalist, First Look Media director of security and former Google employee Morgan] Marquis-Boire, likely over his tracking of the company’s malware for Citizen Lab and at Google’s anti-malware team – one which culminated in a particularly bad PR moment for Ethiopia.

The Citizen Lab research in question found Ethiopia’s INSA using Hacking Team’s malware to target journalists; Ethiopian authorities use arbitrary arrests to silence journalists, and detainees routinely allege torture and ill treatment. The Ethiopian government’s spokesperson in Washington vehemently denied the use of products provided by Hacking Team.

Yet PhineasFisher’s haul shows Hacking Team not only provided its products to Ethiopia, but also proposed a new contract with Ethiopia because, according to a leaked email from operations chief Daniele Milan, “700K is a relevant sum.”

link to this extract

Samsung’s smartphone market share falls to 21.5% from 28% in India in June quarter | ETtech

Danish Khan:

Samsung’s smartphone market share fell to 21.5% from 28% in the previous quarter, the report [by tracking firm Cybex Exim Solutions] said. The company, however, still leads the overall handset market in the country with 18.9% share.

Home-bred handset maker Micromax is going steady at the No.2 position, with 12.6% share of the overall mobile phone market in the quarter to June, up from 10% in the previous quarter. In the smartphone segment, Micromax’s market share rose to 17.9% from 13%.

The Indian smartphone market grew by 23.5% sequentially to reach 25m units (according to Cybex). If you do the maths, that means Samsung’s smartphone sales did actually fall, from 5.7m to 5.4m, while Micromax’s rose from 2.6m to 4.5m. Samsung has a problem: it’s being out-competed at the low end.
link to this extract

Navy warns that fingerprint records were compromised in OPM breach » Darkmatters

Anthony Freed:

The Department of the Navy (DON) has sent a notice to more than 436,000 active duty personnel and reservists, as well as over 195,000 civilian employees, warning that data compromised in the recent breach at the Office of Personnel Management (OPM) also included fingerprint records.

“The interagency team has now concluded with high confidence that sensitive information, including the Social Security Numbers (SSNs) of 21.5 million individuals, was stolen from the background investigation databases,” said Thomas W. Hicks in performing the duties of the Under Secretary of the Navy.

“This includes 19.7 million individuals that applied for a background investigation, and 1.8 million non-applicants, predominantly spouses or co-habitants of applicants. Some records also include findings from interviews conducted by background investigators and approximately 1.1 million included fingerprints.”

Please update your fingerprints accordingly, using at least one whorl and two loops. (Though seriously, how can they be abused? Unless you’re going to whirl off into a plot involving a top-flight general using an iPhone with TouchID.)
link to this extract

In praise of Apple Music in my iTunes Library » Six Colors

Jason Snell:

I don’t know what I was expecting from Apple Music integration. I guess I assumed that when I added a track to “my library” from Apple Music, it would go to some special Apple Music tab, or playlist, or library. Nope—that music just shows up in the My Music section of iTunes, mixed in with all of the stuff I’ve bought over the years.

I realize that this approach may not work for everyone—one of the great challenges in designing any computer-based music service is going to be the endlessly different ways people consume to music—but boy, does it work for me. I play music from a lot of self-built playlists, but now I can add Apple Music playlists too, and they’re seamlessly integrated. Apple Music’s integration with my music library lets me listen to music in the same way I’ve been doing it for the past 14 years—but with the addition of tracks from Apple Music’s nigh-endless supply.

I can also see just how insidious this approach is. My music library is no longer pristine, no longer a collection owned by me. Now I’m acquiring albums and tracks not by buying them, but by clicking that Add to Library button. It’s already started to happen, after a couple of weeks. After a few months or years with this service, how will I ever be able to cancel it?

There are roughly 800m iTunes accounts, growing at about half a million per day in 2013.
link to this extract