×
Technology

Huawei Teases a Smartwatch With Built-In Wireless Earbuds (theverge.com) 4

Huawei has confirmed the existence of a smartwatch it's working on featuring a pair of built-in wireless earbuds. "Huawei's account on Chinese Twitter-like site Weibo announced the existence of the device on Wednesday and promised all would be revealed on December 2," reports The Register. "But Huawei has since postponed its Winter 2022 consumer kit launch for unexplained reasons." You can view a teaser video on YouTube. The Verge adds: As the name suggests, the Huawei Watch Buds are a pair of earbuds concealed within a smartwatch that looks similar to the Huawei Watch 3. Details are a little sparse so there's no word yet on what kind of performance or battery life you can expect from either of the products, but the watch itself does appear to be running HarmonyOS.

The earbuds don't seem to resemble any previous Huawei products, sporting a bare-bones black and silver design. While the concept feels more than a little gimmicky, it could be a neat solution for runners and other sporty folks who don't want to carry a separate earbud case during a workout. (If they don't mind the extra bulk on their wrists.) [...] Addressing the elephant in the room, it's unlikely that you'll be able to buy this wacky gadget in the US anyway, regardless of its legitimacy. Huawei products have been effectively banned in the country since the company was placed on the Commerce Department's Bureau of Industry and Security Entity list in 2019.

Cellphones

More Than 1 Billion People Expected To Be Using 5G By Year's End 55

More than 1 billion people will be connected to 5G by the end of 2022, according to the latest mobility report from Ericsson. CNET reports: Between July and September of this year, 5G added 110 million subscribers around the world, upping the total count to 870 million, said the report, released Wednesday. That's almost double the number of 5G subscribers there were by the end of 2021, which the Swedish telecommunications equipment maker estimated to be 580 million. If 5G users hit the 1 billion this year, that means fifth-generation networks will have hit the nine-figure subscriber mark two years faster than 4G did, said Ericsson, confirming that 5G is so far the "fastest-scaling mobile connectivity generation."

4G subscriptions are still growing as well, with 41 million subscribers added between July and September. It's anticipated they will peak at 5.2 billion by the end of the year, and mobile subscriptions overall are forecast to exceed 8.4 billion. By 2028, 5G is expected to reach 5 billion subscriptions globally and make up 55% of all network subscriptions, according to the report. Overall mobile subscriptions in 2028 are expected to be more than 9.2 billion.
EU

EU Allows Smartphones During Flights (brusselstimes.com) 68

Within the European Union, airlines will be able to install the latest 5G technology on their aircraft, allowing passengers to use their smartphones and other connected devices just as they do on the ground. From a report: The European Commission has adapted the legislation on mobile communications to the most modern standards. As a result, 5G coverage can also be made available on aircraft. "The sky is no longer the limit when it comes to high-speed, high-capacity connections," said EU Commissioner for the Internal Market Thierry Breton. "5G will enable innovative services for people and growth opportunities for European companies." The 5G coverage will be made possible by installing a so-called "pico-cell" in the aircraft.
Music

Apple Engineer Says Lossless Isn't the Be-all And End-all of Audio Quality (theverge.com) 208

Despite Apple Music supporting lossless streaming, wireless AirPods only support lossy Bluetooth codecs. Apple engineer Esge Andersen tells WhatHiFi that's not really an issue: "We want to push the sound quality forward, and we can do that with a lot of other elements. We don't think that the codec currently is the limitation of audio quality on Bluetooth products."
Music

Apple AirPods Can Work As More Affordable Hearing Aids, Study Finds (gizmodo.com) 46

A new study has found that Apple's wireless earbuds can serve as a more affordable and accessible sound amplification device than medical hearing aids. Gizmodo reports: Inspired by a feature called Live Listen released in 2016 by Apple, which allows an iPhone or iPad to be used as sound-boosting microphone, researchers from the Taipei Veterans General Hospital wondered whether the performance of AirPods 2 and the original AirPods Pro using this feature could compare to medical hearing aids. Apple does not position Live Listen as a tool for those dealing with hearing loss but as a way for users with normal hearing to boost desired sounds, like the calls of a bird. However, the researchers found that, in some situations, consumer-level personal sound amplification products faired quite well against pricier medically prescribed solutions, and given the popularity of products like Apple's AirPods, there's no stigma associated with wearing them.

The researchers tested the $129 AirPods 2 and $249 AirPods Pro paired with iPhone XS Max smartphones running iOS 13. They compared these against the $10,000 OTICON Opn 1 behind-the-ear hearing aids and a more affordable alternative, the $1,500 Bernafon MD1. The four options were tested with 21 participants dealing with mild to moderate hearing loss, who were asked to repeat short sentences read to them by the researchers in varying environments. In a quiet setting, the AirPods Pro were found to perform as well as the cheaper hearing aids and almost as good as the premium model, while the Air Pods 2 performed the worst of all four tested devices but still helped participants hear what was being read to them more clearly than not using a sound-enhancing device at all. In a noisy environment, the AirPods Pro performed even closer to the premium hearing aid model, thanks to their built-in noise cancellation, but only when the distracting noises were coming from the sides of the participant. When the noise was coming from the front, alongside the sample sentences being read by the researchers, both wireless earbud products failed to help improve what was being heard.
"Hearing aids remain the best option for those dealing with hearing loss, but for those who don't have access to them for whatever reason, a cheaper product like Apple's AirPods Pro could provide noticeable improvements in hearing and clarity for those dealing with mild-to-moderate hearing loss and could serve as a useful alternative until over-the-counter solutions are more readily available and affordable," concludes the report.

Earlier this year, the Food and Drug Administration decided to allow hearing aids to be sold over the counter and without a prescription to adults, a decision that "could fundamentally change technology," said Nicholas Reed, an audiologist at the Department of Epidemiology at Johns Hopkins Bloomberg School of Public Health. Sony's first OTC hearing aids were announced last month.
China

Apple Limits iPhone File-Sharing Tool Used For Protests In China (bloomberg.com) 84

An anonymous reader quotes a report from Bloomberg: Apple has limited the AirDrop wireless file-sharing feature on iPhones in China after the mechanism was used by protesters to spread images to other iPhone owners. AirDrop allows the quick exchange of files like images, documents or videos between Apple devices. The latest version -- iOS 16.1.1, released Wednesday -- caps the window in which users can receive files from non-contacts at 10 minutes. The previous options didn't limit the time involved. Users could choose to get files from everyone, no one or just their contacts. After the 10-minute period expires, the system reverts to the mode where files can only be received from contacts. That means that individuals won't be able to get an AirDrop transfer from a stranger without actively turning on the feature in the preceding few minutes. It makes it harder for anyone seeking to distribute content and reach people in a discreet manner.

Apple made the change to AirDrop on iPhones sold in China. The shift came after protesters in the country used the service to spread posters opposing Xi Jinping and the Chinese government. The use of AirDrop to sidestep China's strict online censorship has been well-documented over the past three years and was highlighted again recently. Apple didn't comment on why the change was introduced in China, but said that it plans to roll out the new AirDrop setting globally in the coming year. The idea is to mitigate unwanted file sharing, the company said.

China

Eric Schmidt Warns US Technology Edge Over China Slipping (bloomberg.com) 96

Eric Schmidt wants to reshape Washington's industrial policy to combat an intensifying US-China tech rivalry. The former Google chief executive officer's philanthropic arm issued recommendations aimed at encouraging US politicians to counter China's rising technological ambitions by ramping up regulatory scrutiny, encouraging more private investment and offering tax credits to train workers. From a report: China surprised the US on key "battleground" technologies -- including wireless 5G, microelectronics and AI -- as the Asian nation's industrial policy enabled it to dominate markets for drones, high-capacity batteries, critical minerals, solar panels, turbines and shipbuilding, the Schmidt-backed Special Competitive Studies Project said Tuesday in a report.

"The US has some immense economic advantages, but there are some warning lights flashing," Liza Tobin, the project's senior director and a former China director for the US National Security Council, said on a call with reporters. "The US needs an America-style industrial strategy that leverages competition in our dynamic private sector and has carefully targeted incentives in sectors where we need to lead." The report calls on the US government to boost microelectronic production with the help of a large fund to unlock private capital, create an open-source security center to assist investments in digital infrastructure, establish a national security commission on digital finance and give regulators more power to screen investment flows to China that could threaten US national security.

Music

Sound Burger Portable Record Player Returns From the '80s With Bluetooth, USB-C (arstechnica.com) 62

An anonymous reader quotes a report from Ars Technica: According to the Recording Industry Association of America's Mid-Year 2022 report (PDF), vinyl is continuing a trend initiated in 2020, when vinyl revenue surpassed CD revenue -- a state of affairs we haven't seen since 1986, according to the RIAA [PDF]. The RIAA reported that vinyl revenue grew 22 percent in the first half of this year to $570 million, outpacing CDs ($200 million) and representing physical music's largest revenue share. Japanese audio brand Audio-Technica has seemingly taken note of this trend and has decided to rerelease its Sound Burger portable record player. The product is one of several that the company is releasing to celebrate its 60th birthday. Based on a plate on the player's side, the company is producing just 7,000 units.

Debuting in 1980, the original Sound Burger AT727 offered a way for people to listen to their 33-1/3 and 45 vinyl records outside of their homes. There were some caveats, though; records stuck precariously out of the unit and, as noted by SlashGear, the player needed to sit on a flat surface during operation. The new Sound Burger AT-SB2022 looks much like the old one, but Audio-Technica added Bluetooth 5.2 support, so you can listen to your vinyl through wireless headphones. There's also a 3.5 mm jack this time around instead of stereo RCA outputs, but Audio-Technica is also including a dual RCA adapter. Additionally, there's no longer a need for clunky batteries, as the refreshed portable record player charges over USB-C. Audio-Technica claims the record play will last for about 12 hours before needing a charge, which it says will take around 12 hours to complete.

As noted by Digital Trends, the original Sound Burger, also known as Mister Disc in some geographies, required user maintenance to make sure records continued spinning at the proper speed. But Audio-Technica's 2022 record player has a DC servo motor driving its belt-drive system for "stable rotation," the record player's product page says. "Designed for both portability and stability, the tonearm employs a dynamic balance system in which stylus pressure is applied through a spring," the page says. Audio-Technica says its ATN3600L stylus works with the new record player. Other specs for the Sound Burger include a 50 dB output and a 20-20,000 Hz transmission band.
Audio-Technica is selling the 2022 Sound Burger for $200.
Hardware

Arm Disputes Qualcomm's Claim It's Licensing Only to OEMs (Not Chipmakers) After 2024 (fierceelectronics.com) 45

Fierce Electronics reports on "a complex legal battle in U.S. district court" between Qualcomm and Arm "over licensing of intellectual property with potentially far-reaching impact..." Normally, Arm licenses its architectural designs and related IP to chipmakers such as Nvidia or Qualcomm, which in turn produce chips that are then sold to OEMs that use those chips to make servers and other computers and devices. In an updated Qualcomm counterclaim made public Oct. 26, Qualcomm argues that Arm is no longer going to license its CPU designs after 2024 to Qualcomm and other chip companies under technology license agreements. Instead, Qualcomm asserts, Arm will only license to a broad array of device makers....

Arm has not yet formally responded to Qualcomm's latest counterclaim but told Fierce Electronics via email on Friday that Qualcomm's complaint is "riddled with inaccuracies" that Arm will address in a formal legal response in coming weeks....

[Analyst] Dylan Patel in SemiAnalysis also said the counterclaim shows Arm is not planning to allow external GPUs, NPUs or ISPs in Arm-based SoCs. "It seems that Arm is effectively bundling its other IP with the CPU IP in a take-it-or-leave-it model," Patel said. "That would mean Samsung's licensing deal with AMD for GPU or Mediatek with Imagination GPU is not longer allowed after 2024...." Qualcomm argues Arm is making it clear to the marketplace that "it will act recklessly and opportunistically, threatening the development of new and innovative products as a negotiating tactic, not because it has valid license and trademark claims."

Again, Arm has called Qualcomm's complaint "riddled with inaccuracies." Jack Gold, an analyst at J. Gold Associates, tells Fierce Wireless that If Qualcomm's counterclaim is accurate, "this is a troubling step for the industry." If Arm were to get rid of tech licensing as described by Qualcomm, it would give rise to RISC-V use, something Arm "should be worried about," Gold said....

[Analyst] Patel has also questioned if Arm's original lawsuit is more than just about money and might be because Softbank (owner of Arm) and Arm remain angry that Qualcomm, as Patel puts it, worked with regulators to block Nvidia's $40 billion acquisition of Arm. After working for more than a year to seal the deal, Nvidia and SoftBank announced the termination of the proposed deal on Feb. 7, 2022, due to "significant regulatory challenges." Arm was expected to go public within a year, but an IPO has not occurred as of late October.

China

Why Is My Cat Using Baidu? And Other IoT DNS Oddities (sans.edu) 49

Long-time Slashdot reader UnderAttack writes: IoT devices are often stitched together from various odd libraries and features. The SANS Internet Storm Center has a story about a cat feeder that not only appears to reach out to Baidu.com every five minutes but also uses a vulnerable DNS library that uses repeating query ids allowing for simple spoofing not seen since the early dark years of DNS
The article, by a SANS.edu dean of research, concludes that "Some networking libraries use 'baidu.com' for internet connectivity checks. Even if the DNS lookup succeeds, there is no actual outbound connection in this case. The device is happy as long as an IP address is returned."
Facebook

'I Tried the $1,500 Quest Pro and Saw the Best of the Metaverse' (nytimes.com) 54

"Good news, readers: After using nearly every virtual reality headset made in the last seven years, including the latest $1,500 goggles from Mark Zuckerberg's Meta, I've seen the best of what the metaverse could offer," writes the New York Times' Brian Chen. "Yes, the best is already here, and has been for quite some time. It's video games." An anonymous reader shares an excerpt from his report: At Meta's Burlingame office, I strapped on the Quest Pro to see what was new. Meta highlighted three features: the headset's higher-definition picture, which is receiving quadruple the number of pixels of its predecessor, the $400 Quest 2; the array of cameras embedded into the headset, which can now create a real-time rendering of your facial expressions and eye movements; and new motion controllers with improved pressure sensitivity so you can squeeze a virtual object gently or grab it aggressively.

Meta employees and app developers gave me an hourlong tour through software tailored for the headset. I created a digital avatar of my face that mimicked my grins and frowns as I raised a curious brow. I made 3-D drawings and tossed virtual darts. I found the improved graphics and controllers impressive (and my animated avatar a bit creepy), but after I removed the headset and returned to reality-reality, I could only imagine wanting to use these new features to play games. My favorite virtual-reality game, Blaston, which was released in 2020 and involves players shooting one another in a virtual arena, would probably benefit from the improved motion controllers to make trigger squeezes for the different guns more realistic.PokerStars VR, where gamers gather around a virtual card table to play Texas hold 'em, would be more fun if we could pick up tells through each player's facial expressions.

By the end of the demo, I was also doubtful that I would get any work done with this headset. In a promotional video for the product, Meta suggested that the Quest Pro could be a multitasking tool for workers juggling meetings while scrolling through emails and other tasks. But the device's battery lasts only one to two hours, according to Meta. (The headset can still be used while plugged in, but using a computer is less complicated.) This is the reality on which we should base our buying decisions. Not even Meta seems to believe many people will buy the Quest Pro. It said the device's target audience would be early adopters, designers and businesses. If you fall into any of those camps, I recommend a wait-and-see approach to gauge whether useful virtual-reality applications become available for your profession.

The company left a more obvious niche off its target list: hard-core gamers willing to spend lots of money on every piece of new gaming hardware. They are in for a treat. In addition to providing access to high-resolution virtual reality games made for the Quest Pro, the headset will work with hundreds of games already made for the Quest 2. Many of those older Quest 2 titles are quite good. Games that get your heart pumping and make you break a sweat, likeBeat Saber and FitXR, which both involve swinging your arms around to hit objects, are a boon in an era when people need to wear smartwatches to remind them to stand up. None of this -- a first impression that the Quest Pro will be great for playing games and primarily be used for entertainment -- is a bad thing. The fact that we can get visually stunning, immersive gaming in a lightweight, wireless headset means virtual reality has come a long way in less than a decade. For now, that's the only reason to buy one of these.

The Internet

Starry Internet Cuts 500 Jobs, Half Its Workforce, and Cancels Big Expansion (arstechnica.com) 12

Wireless home Internet provider Starry is cutting 500 employees, about half of its workforce, and canceling plans to expand into new states. Starry's board of directors yesterday approved the plan to cut 500 jobs, the Internet service provider said in a Securities and Exchange Commission filing today. From a report: "The decision was based on cost-reduction initiatives intended to reduce operating expenses and allow the Company to focus on serving its existing core markets and customers," the filing said. Starry said the job cuts will be "substantially complete" by the end of December. Starry also announced a freeze on hiring and non-essential expenditures and withdrew full-year 2022 guidance that was previously given to investors. "This is an extremely difficult economic climate and capital environment, and at present we don't have the capital to fund our rapid growth. Because of that, we're focusing our energies on our core business: serving multi-tenant buildings in our existing dense urban markets," Starry CEO Chet Kanojia said in a press release.

The press release suggests the job cuts won't be the last major changes for Starry. The company said the cost-cutting plan will "conserve capital and improve its capital runway as it explores all strategic options." Starry launched in 2016. In mid-2019, Starry spent $48.5 million on 24 GHz spectrum licenses covering more than 25 million households in 25 states. "Combined with Starry's current deployment roadmap, Starry's fixed wireless footprint will reach more than 40 million households, covering more than 25 percent of all US households," the company said at the time.

Communications

Starlink Unveils Airplane Service (arstechnica.com) 79

SpaceX has introduced Starlink Aviation, promising 350Mbps broadband with unlimited data for each airplane it's installed in. From a report: "Starlink can deliver up to 350Mbps to each plane, enabling all passengers to access streaming-capable Internet at the same time," the company said. "With latency as low as 20 ms, passengers can engage in activities previously not functional in flight, including video calls, online gaming, virtual private networks and other high data rate activities." Starlink said the airplane service will use a "low-profile Aero Terminal" with "an electronically steered phased array antenna, which enables new levels of reliability, redundancy and performance."

It has a "simplified design" that "enables installations during minimal downtime and combines well with other routine maintenance checks," Starlink says. The service hardware also includes two wireless access points. There's a one-time hardware cost of $150,000, not including installation. "The installation can be performed by your current maintenance organization or Starlink can recommend experienced and qualified installers," Starlink says.

Apple

New iPad Only Supports First-Gen Apple Pencil, Requires Adapter To Charge (macrumors.com) 44

The new, 10th-generation iPad only supports the first-generation Apple Pencil, meaning that it requires an adapter to charge separately via a wired connection since the device has moved to USB-C. MacRumors reports: The new iPad has no magnetic wireless charger on the side to connect to the second-generation Apple Pencil. Only the first-generation Apple Pencil is supported by the device, which normally needs to be plugged into a Lightning port to charge. The iPad now has a USB-C port, meaning that the Apple Pencil can no longer be charged directly via the iPad. Entry-level iPad users who want to use the Apple Pencil will need to charge the accessory using a USB-C cable and a separate adapter.

The first-generation Apple Pencil came with a female to female Lightning adapter allowing it to be charged separately, but now Apple is offering a new variant of the accessory called the "USB-C to Apple Pencil Adapter" that enables Apple Pencil users to charge. The adapter is available separately at a price of $9 for existing Apple Pencil users, while new Apple Pencil units include the adapter in the box.
For those interested in a more powerful tablet, Apple announced the new sixth-generation iPad Pro, featuring the M2 chip that first debuted in the MacBook Air and 13-inch MacBook Pro earlier this year and support for Wi-Fi 6E.
Transportation

Lufthansa Changes Mind, Now Says Apple AirTags Are Allowed on Luggage (arstechnica.com) 19

Apple AirTags "are allowed on Lufthansa flights," Lufthansa announced this week — the opposite of their position last Sunday, remembers SFGate: The airline insisted the tech was "dangerous" and referred to International Civil Aviation Organization guidelines (set by the United Nations's specialized agency that recommends air transport policy) stipulating that baggage trackers are subject to the dangerous goods regulations. ["Furthermore, due to their transmission function, the trackers must be deactivated during the flight if they are in checked baggage," Lufthansa added on Twitter, "and cannot be used as a result"]
Ars Technica reports on the public relations debacle that then ensued: Outcry, close reading of the relevant sections (part 2, section C) of ICAO guidelines, and accusations of ulterior motives immediately followed. AppleInsider noted that the regulations are meant for lithium-ion batteries that could be accidentally activated; AirTag batteries are not lithium-ion, are encased, and are commonly used in watches, which have not been banned by any airline. The site also spoke with "multiple international aviation experts" who saw no such ban in ICAO regulations. One expert told the site the ban was "a way to stop Lufthansa from being embarrassed by lost luggage...."

Numerous people pointed out that Lufthansa, in its online World Shop, sells Apple AirTags. One Ars staffer noted that Lufthansa had previously dabbled in selling a smart luggage tag, one that specifically used RFID and BLE to program an e-ink display with flight information. On Tuesday, Apple told numerous publications that it, too, disagreed with Lufthansa's interpretation. It went unsaid but was strongly implied that a company that is often the world's largest by revenue would take something like air travel regulations into consideration when designing portable find-your-object devices....

Representatives from the Federal Aviation Administration and Transportation Security Administration said early this week that Bluetooth-based trackers were allowed in checked luggage. The European Union Aviation Safety Agency said its regulations could "not in itself ban or allow" trackers, but airlines could determine their own guidelines.

On Wednesday, Lufthansa walked back the policy under the cover of "The German Aviation Authorities (Luftfahrtbundesamt)," which the airline said in a tweet "shared our risk assessment, that tracking devices with very low battery and transmission power in checked luggage do not pose a safety risk." This would seem to imply either that Lufthansa was acting on that authority's ruling without having previously mentioned it, or that Lufthansa had acted on its own and has now found an outside actor to approve their undoing.

United States

Biden's Internet Promises in Limbo Amid Long Battle Over FCC Nominee (washingtonpost.com) 27

The nation's telecommunications regulator has been without a Democratic majority for the entirety of President Biden's 21-month tenure, hamstringing efforts to restore open internet protections and close the digital divide. From a report: Breaking the deadlock at the Federal Communications Commission hinges on confirming Gigi Sohn, a longtime public interest advocate and former Democratic FCC official who was first nominated by the White House nearly a year ago. As the midterm elections approach and Democrats' ability to retain their narrow control of the Senate remains uncertain, Sohn's supporters are warning Congress that the clock is ticking to lock in a majority at the agency. On Friday, about 250 industry and public interest groups wrote a letter to top Senate leaders calling for a vote on Sohn's nomination before Congress adjourns at the end of the year.

"The FCC needs a full commission as it begins to deliberate on upcoming critical decisions that will have profound impacts on the economy and the American people," leaders from groups including the Consumer Technology Association, Rural Wireless Association and Color Of Change wrote in a letter shared exclusively with The Washington Post. The push from Sohn's supporters follows what her allies describe as an unprecedented effort from some telecommunications and media lobbyists to block her nomination. Biden's failure to secure a majority or full complement of commissioners at the FCC marks one of the longest delays in recent memory for a first-term president. "It's insane," said Greg Guice, the director of Public Knowledge's government affairs team who has worked in roles related to tech regulation for more than 20 years. (Sohn previously worked at Public Knowledge, which is among the signatories of the Friday letter). Lobbyists "know that being down one seat means they can better control the agenda," he said.

Security

How Wi-Fi Spy Drones Snooped On Financial Firm (theregister.com) 52

An anonymous reader quotes a report from The Register: Modified off-the-shelf drones have been found carrying wireless network-intrusion kit in a very unlikely place. Greg Linares, a security researcher, recently recounted an incident that he said occurred over the summer at a US East Coast financial firm focused on private investment. He told The Register that he was not involved directly with the investigation but interacted with those involved as part of his work in the finance sector. In a Twitter thread, Linares said the hacking incident was discovered when the financial firm spotted unusual activity on its internal Atlassian Confluence page that originated from within the company's network.

The company's security team responded and found that the user whose MAC address was used to gain partial access to the company Wi-Fi network was also logged in at home several miles away. That is to say, the user was active off-site but someone within Wi-Fi range of the building was trying to wirelessly use that user's MAC address, which is a red flag. The team then took steps to trace the Wi-Fi signal and used a Fluke system to identify the Wi-Fi device. "This led the team to the roof, where a 'modified DJI Matrice 600' and a 'modified DJI Phantom' series were discovered," Linares explained. The Phantom drone was in fine condition and had a modified Wi-Fi Pineapple device, used for network penetration testing, according to Linares. The Matrice drone was carrying a case that contained a Raspberry Pi, several batteries, a GPD mini laptop, a 4G modem, and another Wi-Fi device. It had landed near the building's heating and ventilation system and appeared to be damaged but still operable. "During their investigation, they determined that the DJI Phantom drone had originally been used a few days prior to intercept a worker's credentials and Wi-Fi," Linares said. "This data was later hard coded into the tools that were deployed with the Matrice."

According to Linares, the tools on the drones were used to target the company's internal Confluence page in order to reach other internal devices using the credentials stored there. The attack, he said, had limited success and is the third cyberattack involving a drone he's seen over the past two years. "The attackers specifically targeted a limited access network, used by both a third-party and internally, that was not secure due to recent changes at the company (e.g. restructuring/rebranding, new building, new building lease, new network setup or a combination of any of these scenarios)," Linares told The Register. "This is the reason why this temporary network unfortunately had limited access in order to login (credentials + MAC security). The attackers were using the attack in order to access an internal IT confluence server that contained other credentials for accessing other resources and storing IT procedures." [...] While the identity of the attacker has not been disclosed, Linares believes those responsible did their homework. "This was definitely a threat actor who likely did internal reconnaissance for several weeks, had physical proximity to the target environment, had a proper budget and knew their physical security limitations," he said.

Encryption

Android Leaks Some Traffic Even When 'Always-On VPN' Is Enabled (bleepingcomputer.com) 30

Mullvad VPN has discovered that Android leaks traffic every time the device connects to a WiFi network, even if the "Block connections without VPN," or "Always-on VPN," features is enabled. BleepingComputer reports: The data being leaked outside VPN tunnels includes source IP addresses, DNS lookups, HTTPS traffic, and likely also NTP traffic. This behavior is built into the Android operating system and is a design choice. However, Android users likely didn't know this until now due to the inaccurate description of the "VPN Lockdown" features in Android's documentation. Mullvad discovered the issue during a security audit that hasn't been published yet, issuing a warning yesterday to raise awareness on the matter and apply additional pressure on Google.

Android offers a setting under "Network & Internet" to block network connections unless you're using a VPN. This feature is designed to prevent accidental leaks of the user's actual IP address if the VPN connection is interrupted or drops suddenly. Unfortunately, this feature is undercut by the need to accommodate special cases like identifying captive portals (like hotel WiFi) that must be checked before the user can log in or when using split-tunnel features. This is why Android is configured to leak some data upon connecting to a new WiFi network, regardless of whether you enabled the "Block connections without VPN" setting.

Mullvad reported the issue to Google, requesting the addition of an option to disable connectivity checks. "This is a feature request for adding the option to disable connectivity checks while "Block connections without VPN" (from now on lockdown) is enabled for a VPN app," explains Mullvad in a feature request on Google's Issue Tracker. "This option should be added as the current VPN lockdown behavior is to leaks connectivity check traffic (see this issue for incorrect documentation) which is not expected and might impact user privacy."
In response to Mullvad's request, a Google engineer said this is the intended functionality and that it would not be fixed for the following reasons:

- Many VPNs actually rely on the results of these connectivity checks to function,
- The checks are neither the only nor the riskiest exemptions from VPN connections,
- The privacy impact is minimal, if not insignificant, because the leaked information is already available from the L2 connection.

Mullvad countered these points and the case remains open.
Wireless Networking

Lufthansa Says Passengers Can't Use Apple AirTags to Track Checked Bags (nytimes.com) 72

UPDATE: Lufthansa has since reversed their position, and now says Apple AirTags "are allowed on Lufthansa flights, according to SFGate. But only after their earlier remarks stirred up a lot of consternation.

Slashdot's original story appears below:


Citing rules issued by the International Civil Aviation Organization (ICAO), German airliner Lufthansa says it is banning activated Apple AirTags from luggage "as they are classified as dangerous and need to be turned off." Slashdot reader AmiMoJo first shared the news with us. The New York Times reports: Lufthansa, a German airline, set off confusion recently after telling passengers that they could not use trackers like Apple AirTags in checked baggage because of international guidelines for personal electronic devices. Apple rejected that interpretation on Tuesday, saying its trackers comply with all regulations. It does not appear that any other airlines are requiring passengers to turn off the trackers, which have become popular as a way to find lost baggage.

Lufthansa found itself in the middle of the issue when reports surfaced in the German news media that the devices were prohibited. Though Lufthansa said it has no desire to prohibit the devices that it deemed safe, the airline seems to have stepped in a mess based on the reading of obscure international guidelines and regulations, with no clear consensus on what is and is not allowed in Europe.

Lufthansa said on Sunday on Twitter that the trackers must be deactivated in checked baggage on its flights, citing the International Civil Aviation Organization's guidelines for dangerous goods as well as the trackers' "transmission function." Shutting off the trackers renders them useless. The airline has not issued a specific policy prohibiting baggage trackers. Rather, it says it is at the mercy of the rules. On Tuesday, the airline said it was "in close contact with the respective institutions to find a solution as quickly as possible." It also indicated its own examination saw no danger from their use.
"The Lufthansa Group has conducted its own risk assessment with the result that tracking devices with very low battery and transmission power in checked luggage do not pose a safety risk," said Martin Leutke, a Lufthansa spokesman. "We have never issued a ban on devices like that. It is on the authorities to adapt regulations that right now limit the use of these devices for airline passengers in checked luggage."

In its statement, Apple said that AirTags are "compliant with international airline travel safety regulations for carry-on and checked baggage."
Displays

Google Shows Off Wireless Charging Dock That Turns the Pixel Tablet Into a Smart Display (theverge.com) 9

Alongside today's launch of the Pixel 7, Pixel 7 Pro, and Pixel Watch, Google revealed more details about its upcoming Pixel Tablet that was first announced earlier this year at Google I/O. The biggest new feature is it's ability to transform into a smart display when paired with a magnetic wireless charging speaker dock. "When docked, it looks like a Nest Hub Max, responds to Google Assistant queries, and lets you control your smart home from the redesigned Home app," adds The Verge.

Other features include the Google Tensor G2 processor, which is powering the new Pixel 7 smartphones, a user interface that's based on the Material You design language, and a nano-ceramic coating on top of the 100 percent recycled aluminum body. Unfortunately, there's still no concrete release date as the company would only say the tablet is coming in 2023.

Slashdot Top Deals