An anonymous reader writes: Google first implemented Full Disk Encryption in Android by default with Android 5.0 Lollipop in an effort to prevent criminals or government agencies from gaining unauthorized access to one's data. What it does is it encodes all the data on a user's Android device before it's ever written to disk using a user's authentication code. Once it is encrypted, it can only be decrypted if the user enters his/her password. However, security researcher Gal Beniamini has discovered issues with the full disk encryption. He published a step-by-step guide on how one can break down the encryption protections on Android devices powered by Qualcomm Snapdragon processors. The source of the exploit is posted on GitHub. Android's disk encryption on devices with Qualcomm chips is based only on your password. However, Android uses your password to create a 2048-bit RSA key (KeyMaster) derived from it instead. Qualcomm specifically runs in the Snapdragon TrustZone to protect critical functions like encryption and biometric scanning, but Beniamini discovered that it's possible to exploit a security flaw and retrieve the keys from TrustZone. Qualcomm runs a small kernel in TrustZone to offer a Trusted Execution Environment known as Qualcomm Secure Execution Environment (QSEE), which allows small apps to run inside of QSEE away from the main Android OS. Beniamini has detailed a way for attackers to exploit an Android kernel security flaw to load their own QSEE app inside this secure environment, thereby exploiting privilege escalation flaw and hijacking of the complete QSEE space, including the keys generated for full disk encryption. The researcher also said Qualcomm or OEMs can comply with government or law enforcement agencies to break the FDE: "Since the key is available to TrustZone, Qualcomm and OEMs [Original Equipment Manufacturers] could simply create and sign a TrustZone image which extracts the KeyMaster keys and flash it to the target device," Beniamini wrote. "This would allow law enforcement to easily brute force the FDE password off the device using the leaked keys."

An anonymous reader writes: Senate staffers will no longer be issued BlackBerry devices. According to Politico, a note sent to staffers on Wednesday said the Senate had no choice after BlackBerry decided to discontinue devices running its own BlackBerry 10 software. "Once we have exhausted our current in-house stock, new device procurements will be limited, while supplies last, to warranty exchanges only," reads the Sergeant at Arms note. The 600 BlackBerry smartphones currently in the Senate's possession will be supported for the "foreseeable future." The news comes after a report that President Obama has ditched his BlackBerry handset in favor of a "hardened" version of the Samsung Galaxy S4 that is supported by the Defense Information Systems Agency. It also follows a report that the Canadian smartphone maker lost $670 million in the first quarter of its 2017 financial year. During BlackBerry's first quarter, the company sold roughly 500,000 devices at an average price of $290 each. They will apparently need to sell about three million phones at an average of $300 each to break even.

An anonymous reader writes from a report via GeekWire: According to Morgan Stanley's 2016 CIO Survey of 100 CIOs (75 CIOs based in the U.S., and 25 based in Europe), Microsoft's Azure will overtake Amazon Web Services (AWS) by 2019 to become the largest Infrastructure as a Service (IaaS) and Platform as a Service (PaaS). The survey finds that roughly 31 percent of the CIOs will be using Azure for IaaS, compared to roughly 30 percent using AWS. Today, roughly 21 percent are using AWS and 12 percent are using Azure. According to the survey, Azure is already leading AWS in PaaS, used by about 18 percent of the respondents, versus AWS's 16 percent. Azure's lead will grow slightly by 2019, growing 9.8 percent versus 6.4 percent. Nearly 30 percent of all applications will be migrated to the public cloud by the end of 2017, up from 14 percent today, the survey said. On-premises apps will decline to 58 percent, from 71 percent today. Predictably, hardware vendors, including conventional and flash storage makers, will continue to suffer as their market is eaten by the cloud. Hardware spending growth is down this year to 3.2 percent, from 3.4 percent last year. Microsoft recently announced it will be entering the legal marijuana industry. It will partner with Los Angeles-based startup Kind on a system for tracking the legal growing and sale of marijuana, with Microsoft powering the software through its Azure cloud computing service.

New submitter alzoron writes: After the failure of New York's Fair Repair Act, independent third-party unauthorized Apple repair shops seem to be under attack. Louis Rossmann, owner of Rossman Repair Group, INC has uploaded a somewhat vague video alluding to his Youtube site, where he posts videos about repairing out of warranty repairs, possibly being shut down. Several sources (Reddit, Mac Kung Fu, 9to5Mac) have been speculating about this and whether or not Apple is behind this. Game Revolution reported on the video (Link is to cache version of the site since the report has since been removed), breaking down each section of the video. 6:52: Louis informs viewers that they can download YouTube videos. 7:41: Louis mentions that YouTube channels have a "finite lifespan," often because a large corporation has the power and money to shut them down. 8:42: Louis shares that he's happy when he's lived a difficult life so that he can be strong for the immense challenge that is ahead. 10:06: Louis shares that he is going to have to fight from his point onward. 11:22: Louis states that all his videos may soon be gone. 11:32: Louis mentions that his business may disappear. Given what Louis has mentioned, it's apparent that Louis has been threatened by Apple likely for condemning its policies to a growing subscriber base, but also for showing users how to repair its hardware without going through Apple support.

UPDATE 7/1/16: The headline has been updated to clarify that the lawsuit is unconfirmed. We'll continue to update the story as it develops.

HP says it plans to provide companies with personal computers and other devices as part of a service. Corporate customers of HP's new initiative dubbed "device-as-a-service" will be able to pay a fixed monthly fee per employee for devices, eliminating the need to pay the retail cost upfront for hardware. From a report on eWeek:The Palo Alto, Calif.-based company unveiled a DaaS (device-as-a-service) initiative, one that has already been up and running with several of its clients for the last few months. As more and more millennials come into the work force, they expect to see light, fast, small, and up-to-date tools to use, because that's what they're used to, and their tools are like a badge of honor, HPI's Vice-President and General Manager of Support Services Bill Avey said. "Older employees might want bigger screen and keyboards. The point is, work tools need to fit the work force, and as workforces become more diverse, the tools must adjust fit the needs," Avey said. Otherwise, Avey said, employees will find workarounds in so-called shadow IT (using their own laptops, smartphones, tablets and applications) to get the job done -- which is always a nightmare for enterprise security professionals.

Jon Brodkin, reporting for Ars Technica:In a time when consumers routinely replace gadgets with new models after just two or three years, some products stand out for being built to last. Witness the Linksys WRT54GL, the famous wireless router that came out in 2005 and is still for sale. At first glance, there seems to be little reason to buy the WRT54GL in the year 2016. It uses the 802.11g Wi-Fi standard, which has been surpassed by 802.11n and 802.11ac. It delivers data over the crowded 2.4GHz frequency band and is limited to speeds of 54Mbps. You can buy a new router -- for less money -- and get the benefit of modern standards, expansion into the 5GHz band, and data rates more than 20 times higher. Despite all that, people still buy the WRT54GL in large enough numbers that Linksys continues to earn millions of dollars per year selling an 11-year-old product without ever changing its specs or design.

An anonymous reader quotes a report from CNBC: The U.S. National Highway Traffic Safety Administration said on Thursday it is opening a preliminary investigation into 25,000 Tesla Motors Model S cars after a fatal crash involving a vehicle using the "Autopilot" mode. The agency said the crash came in a 2015 Model S operating with automated driving systems engaged, and "calls for an examination of the design and performance of any driving aids in use at the time of the crash." It is the first step before the agency could seek to order a recall if it believed the vehicles were unsafe. Tesla said Thursday the death was "the first known fatality in just over 130 million miles where Autopilot was activated," while a fatality happens once every 60 million miles worldwide. The electric automaker said it "informed NHTSA about the incident immediately after it occurred." The May crash occurred when a tractor trailer drove across a divided highway, where a Tesla in autopilot mode was driving. The Model S passed under the tractor trailer, and the bottom of the trailer hit the Tesla vehicle's windshield. Tesla quietly settled a lawsuit with a Model X owner who claims his car's doors would open and close unpredictably, smashing into his wife and other cars, and that the Model X's Auto-Pilot feature poses a danger in the rain.

An anonymous reader writes: The Netherlands has become the first country in the world to implement a nationwide long-range (LoRa) network for the Internet of Things, says Dutch telecoms group KPN on Thursday. "As from today the KPN LoRa network is available throughout The Netherlands," KPN said in a statement. Phys.Org reports: "The rollout of a low data rate (LoRa) mobile communications network is critical to connect objects as many may not be able to link up with home or work Wi-Fi networks to gain Internet access. The LoRa network is complementary to KPN's networks for the 2G, 3G and 4G phones. KPN has already reached deals to connect some 1.5 million objects, a number which should steadily grow now that the LoRa network is available across the country. Tests are being carried out at the Schiphol airport in Amsterdam -- one of Europe's busiest air hubs -- for baggage handling. Meanwhile in the Utrecht rail station an experiment is under way to allow LoRa to monitor rail switches."

New submitter bkr1_2k writes: Way back when, I had a PC dedicated as a media server using MythTV. That died and I didn't bother building a new one. Consumer electronics caught up and I recently bought an Apple TV (3rd Generation) to use for streaming my media library. I am, unsurprisingly, finding flaws with it. I'm looking for alternative devices that allow me to stream from my media server directly, without the need for a middleman app like iTunes for the Apple TV. I don't need a ton of streaming services (we have Netflix and Amazon Prime but don't use anything else). I primarily want to use this for streaming my own music and movie libraries over my home network, preferably with a user interface that lets me browse those in a fashion that doesn't force me to scroll through my whole library to get to the title that starts with the letter "Z" (A very poor design choice in the Apple TV). Nor do I want any voice controls since they all suck, in my experience. I would prefer an 'open' device that I can update at will with add-ons, but it's not a requirement. What are the current options out there? Roku, Apple TV, Chromecast. Anything else that might fit my needs better? Last week, we asked a similar question: "What's your preferred music streaming service?"

Sarah Jeong, reporting for Motherboard:38,000 websites hosted by the automated publishing service Surge went down today, after the National Rifle Association sent a legal notice over a parody website created by the Yes Men. A few days ago, the Yes Men released the parody video, "Share the Safety" -- announcing a supposed NRA program to deliver firearms into the hands of those too impoverished to afford guns. The opening frame of the video says "Paid for in part by the National Rifle Association of America with additional support from Smith & Wesson Holding Corporation." "Systemic poverty and dumb laws keep the urban poor unable to acquire life-saving firearms," says the video, which is available on YouTube. "That's why we at the NRA are teaming up with Smith & Wesson to share the safety.â The YouTube description includes a link to the "official" website, ShareTheSafety.org.

An anonymous reader writes from a report via 9to5Google: Google and an association of telecom providers have announced that the FASTER broadband cable system that links Japan and the United States is now complete. The system is the fastest of its kind and stretches nearly 9,000 km across the bottom of the Pacific Ocean, starting in Oregon and ending in two landing spots in Japan. The association consists of Google, China Mobile International, China Telecom Global, Global Transit, KDDI, Singtel, and supplier NEC Corporation. The estimated construction cost of the project was $300 million in 2014. At 60 terabits per second, FASTER will help "support the expected four-fold increase in broadband traffic demand between Asia and North America." The system uses a six-fiber pair cable and the latest 100Gbps digital coherent optical transmission technology. The service is scheduled to start on June 30, 2016, and will help increase the connectivity between Google's data centers scattered around the globe.

An anonymous reader quotes a report from BGR: We can talk about how innovative Tesla is for days on end. Indeed, there's no disputing the fact that the company, in injecting a bit of Silicon Valley ingenuity into the tried and true auto design process, has completely turned the auto industry on its head. At the same time, Tesla helped kickstart the EV revolution, even causing traditional automakers like Porsche and BMW to start taking electric cars more seriously. But in Tesla's zeal to move extraordinarily quickly, problems have inevitably begun to creep in. Specifically, quality control issues still seem to be plaguing the Model X. According to a recent report, avowed Tesla fan named Barrett Lyon recently returned his Model X and filed a lawsuit against Tesla arguing that the Model X was "rushed" and released before it was ready for sale. Now comes word that Tesla has since quietly settled the lawsuit. "In Lyon's lawsuit," Fortune writes, "he claimed the cars doors opened and closed unpredictably, smashing into his wife and other cars, and that the Model X's Auto-Pilot feature posed a danger in the rain. He also shared a video that shows the car's self-parking feature failing to operate successfully." Tesla's response: "We are committed to providing an outstanding customer experience throughout ownership. As a principle, we are always willing to buy back a car in the rare event that a customer isn't completely happy. Today, the majority of Model X owners are loving their cars."

An anonymous reader writes from a report via The Verge: Content delivery network Akamai says the UK has the best average mobile connection speeds in the world. The State of the Internet report claims that British mobile users were able to get average speeds of 27.9 Mbps when connecting to Akamai's HTTP/S platform in Q1 2016, beating most countries in Europe by an average of more than 10 Mbps, and the United States' average speed by more than 20 Mbps. For comparison, the U.S. had an average connection speed of 5.1 Mbps, which was lower than Turkey, Kenya, and Paraguay, and on par with Thailand. Many European countries more than doubled the average U.S. speed, including Slovakia with 13.3 Mbps, France with 11.5 Mbps, and Germany with 15.7 Mbps. Algeria was only 2.9 Mbps slower than the United States' average with 2.2 Mbps, and they had the lowest average speed of countries included in the report. Akamai says its data shows that regular internet connections have continued to increase in speed, jumping 12 percent from Q4 2015 to 6.3 Mbps in Q1 2016, which is a year-on-year boost of 23 percent. Peak connection speed also rose to 34.7 Mbps, a 6.8 percent increase from the last quarter, and a 14 percent increase year-on-year. In addition, mobile data traffic is rising from just over 3,500 petabytes per month in Q1 2015 to more than 5,500 petabytes per month in the same period this year.

In an op-ed for Slate, Microsoft CEO Satya Nadella has shared his views on AI, and how humans could work together with this nascent technology to do great things. Nadella feels that humans and machines can work together to address society's greatest challenges, including diseases and poverty. But he admits that this will require "a bold and ambition approach that goes beyond anything that can be achieved through incremental improvements to current technology," he wrote. You can read the long essay here. GeekWire has summarized the principles and goals postulated by Nadella. From the article:AI must be designed to assist humanity.
AI must be transparent.
AI must maximize efficiencies without destroying the dignity of people.
AI must be designed for intelligent privacy.
AI needs algorithmic accountability so humans can undo unintended harm.
AI must guard against bias.
It's critical for humans to have empathy.
It's critical for humans to have education.
The need for human creativity won't change.
A human has to be ultimately accountable for the outcome of a computer-generated diagnosis or decision.

itwbennett writes: Blancco Technology Group, which specializes in data erasure, bought 200 secondhand PC storage drives (PDF) from eBay and Craigslist to see if they could recover any of the old data saved inside. Their findings: 78 percent of the drives contained residual data that could be recovered, 67 percent still held personal files, such as photos with location indicators, resumes and financial data, and 11 percent of the drives also contained company data, such as emails, spreadsheets and customer information. Only 10 percent had all the data securely wiped, Blancco said. The Consumerist points out that Blancco makes their money from promising secure data erasure, so the company has a "strong and vested interest in these results." As for why so many of the drives contain unwanted information, the report says it has to do with the difference between "deleting" data and "erasing" data. Your files aren't actually deleted when you drag them to the Trash or Recycle Bin, or by using the delete key -- shocking, I know. You can format a drive to erase the data, but you have to be careful of the format commands being used. A quick format, which was used on 40% of the drives in the sample, still leaves some residual data on the drive for someone to possibly access. A full format, which was used on 14% of the drives, will do a better job in removing unwanted files, but it too may still miss some crucial information. The solution Blancco recommends: buy a tool to perform complete data erasure.

HughPickens.com writes: What should a driverless car with one rider do if it is faced with the choice of swerving off the road into a tree or hitting a crowd of 10 pedestrians? The answer depends on whether you are the rider in the car or someone else is, writes Peter Dizikes at MIT News. According to recent research most people prefer autonomous vehicles to minimize casualties in situations of extreme danger -- except for the vehicles they would be riding in. "Most people want to live in in a world where cars will minimize casualties," says Iyad Rahwan. "But everybody wants their own car to protect them at all costs." The result is what the researchers call a "social dilemma," in which people could end up making conditions less safe for everyone by acting in their own self-interest. "If everybody does that, then we would end up in a tragedy whereby the cars will not minimize casualties," says Rahwan. Researchers conducted six surveys, using the online Mechanical Turk public-opinion tool, between June 2015 and November 2015. The results consistently showed that people will take a utilitarian approach to the ethics of autonomous vehicles, one emphasizing the sheer number of lives that could be saved. For instance, 76 percent of respondents believe it is more moral for an autonomous vehicle, should such a circumstance arise, to sacrifice one passenger rather than 10 pedestrians. But the surveys also revealed a lack of enthusiasm for buying or using a driverless car programmed to avoid pedestrians at the expense of its own passengers. "This is a challenge that should be on the mind of carmakers and regulators alike," the researchers write. "For the time being, there seems to be no easy way to design algorithms that would reconcile moral values and personal self-interest."

An anonymous reader quotes a report from CNNMoney: Volkswagen's deliberate cheating on emissions tests will cost it a record $14.7 billion. And that's just the start of its problems. The settlement is only a preliminary step in the case; the automaker still faces possible criminal charges, as well as civil penalties for Clean Air Act violations. The Department of Justice is investigating possible criminal charges against both the company and individuals, said Deputy Attorney General Sally Yates. Up to $10 billion of the funds will be paid out to owners of the 487,000 affected diesel cars in the U.S., sold under the VW or luxury Audi brands. How much an owner gets will depend on whether an owner chooses to fix their car or just have VW buy it back -- they have until May 2018 to decide. Repurchasing the cars will cost VW between $12,500 to $44,000 per car. The $14.7 billion settlement estimate assumes that all the cars are repurchased. Owners who elect to get their vehicles fixed will also get a cash payment of between $5,100 and $10,000 to compensate them for the lost value of the cars, as well as for Volkswagen's deceptive promise of "clean diesel." Most of the buyers paid extra for a car with a diesel engine. In addition to the customer payments, Volkswagen will pay $2.7 billion for environmental cleanup and $2 billion to promote zero-emission vehicles. The clean up money will be used by individual states to cut other diesel emissions by replacing older, government-owned trucks, buses and other diesel engines now in use. Volkswagen is betting big on electric vehicles after this emissions scandal. It plans to deliver 30 electric plug-in models by 2025.

An anonymous reader writes: Nearly two years ago, Elon Musk teased us with a robotic snake that would automatically plug-in and charge your Model S. Well, many months have passed and there has yet to be an official "solid metal snake" available for Tesla owners. So, one Tesla owner decided to make his own autonomous charging station, as spotted by Electrek, that will automatically guide the Model S's charging cable into the waiting receptacle with no human intervention required. The inventor Deepak Mital posted a video showing how it works, and while it's incredibly slow, it does work. Compared to the demo video of the system teased by Elon Musk last year, this version appears much less threatening. Mital calls it the "Evtron," which is controlled with a Raspberry Pi and swings from one side to another before sliding forward to make the connection with the car.

An anonymous reader writes from a report via MacRumors: A Florida resident that goes by the name of Thomas S. Ross has filed a lawsuit against Apple this week, claiming that the iPhone, iPad, and iPod infringe upon his 1992 invention of a hand-drawn "Electronic Reading Device" (ERD). The court filing claims the plaintiff was "first to file a device so designed and aggregated," nearly 15 years before the first iPhone. MacRumors reports: "Between May 23, 1992 and September 10, 1992, Ross designed three hand-drawn technical drawings of the device, primarily consisting of flat rectangular panels with rounded corners that "embodied a fusion of design and function in a way that never existed prior to 1992." Ross applied for a utility patent to protect his invention in November 1992, but the application was declared abandoned in April 1995 by the U.S. Patent and Trademark Office after he failed to pay the required application fees. He also filed to copyright his technical drawings with the U.S. Copyright Office in 2014. While the plaintiff claims that he continues to experience "great and irreparable injury that cannot fully be compensated or measured in money," he has demanded a jury trial and is seeking restitution no less than $10 billion and a royalty of up to 1.5% on Apple's worldwide sales of infringing devices." MacRumors commenter Sunday Ironfoot suggests this story may be "The mother of all 'Florida Man' stories." Apple has been awarded a patent today that prohibits smartphone users from taking photos and videos at concerts, movies theaters and other events where people tend to ignore such restrictions.

Taco Cowboy quotes a report from ABC Online: German engineers have created a camera no bigger than a grain of salt that could change the future of health imaging -- and clandestine surveillance. Using 3D printing, researchers from the University of Stuttgart built a three-lens camera, and fit it onto the end of an optical fiber the width of two hairs. Such technology could be used as minimally-intrusive endoscopes for exploring inside the human body, the engineers reported in the journal Nature Photonics. The compound lens of the camera is just 100 micrometers (0.1 millimeters) wide, and 120 micrometers with its casing. It could also be deployed in virtually invisible security monitors, or mini-robots with "autonomous vision." The compound lens can also be printed onto image sensor other than optical fibers, such as those used in digital cameras. The researchers said it only took a few hours to design, manufacture and test the camera, which yielded "high optical performances and tremendous compactness." They believe the 3D printing method -- used to create the camera -- may represent "a paradigm shift."