Android

GasBuddy Has a New Privacy Policy (Spoiler: Not As Customer Friendly) 96 96

An anonymous reader writes: GasBuddy has been a popular iOS and Android app for the last 5 years used to find the cheapest place to get gas. According to the Google Play store, there are over 10 million installs (in additions to the installs from Apple and Amazon's appstores). Now that they have a large enough number of users, GasBuddy has updated their privacy policy to allow them to collect more information. Some highlights of the privacy policy changes include: only 10 days for new terms to take effect (previously users were given 30 days to review the changes); collection of "signal strength related to Wifi or Bluetooth functionality, temperature, battery level, and similar technical data"; and [a warning that the company] will not honor a web browser's "do not track" setting.
Youtube

YouTube Is Adding VR Video Support To Streaming Videos 23 23

An anonymous reader writes: While YouTube's streaming platform currently supports 3D videos OR 360 degree videos, the combination of the two is essential for properly immersive virtual reality video. Fortunately, the company has announced that they'll soon enable support for 3D + 360 degree videos, bringing more immersive VR video capability to the platform. Currently, 360 degree YouTube videos can be viewed through desktop web browsers and on the YouTube Android and iOS apps, with the Android app being the only one of the bunch currently providing a side-by-side view for VR viewers like Google's Cardboard.
OS X

A Tweet-Sized Exploit Can Get Root On OS X 10.10 129 129

vivaoporto writes: The Register reports a root-level privilege-escalation exploit that allows one to gain administrator-level privileges on an OS X Yosemite Mac using code so small that fits in a tweet. The security bug, documented by iOS and OS X guru Stefan Esserwhich, can be exploited by malware and attackers to gain total control of the computer. This flaw is present in the latest version of Yosemite, OS X 10.10.4, and the beta, version 10.10.5 but is already fixed in the preview beta of El Capitan (OS X 10.11) Speaking of exploits: Reader trailrunner 7 notes that "HP’s Zero Day Initiative has released four new zero days in Internet Explorer that can lead to remote code execution."
Cellphones

A Month With a Ubuntu Phone 118 118

When the first Ubuntu phone came out, reviews were quick to criticize it for its lackluster hardware and unusual take on common mobile software interactions. It's been out for a while, now, and Alastair Stevenson has written about his experiences using it for an entire month. While he doesn't recommend it for phone users who aren't tech savvy, he does say that he began to like it better than Android after adjusting to how Ubuntu does things. From the article: [T]he Ubuntu OS has a completely reworked user interface that replaces the traditional home screen with a new system of "scopes." The scope system does away with the traditional mobile interface where applications are stored and accessed from a central series of homescreens. ... Adding to Ubuntu’s otherworldly, unique feel, the OS is also significantly more touch- and gesture-focused than iOS and Android. We found nearly all the key features and menus on the Meizu MX4 are accessed using gesture controls, not with screen shortcuts. ... Finally, there's my biggest criticism – Ubuntu phone is not smart enough yet. While the app selection is impressive for a prototype, in its infancy Ubuntu phone doesn't have enough data feeding into it, as key services are missing."
Google

Google+ Photos To Shut Down August 1 152 152

An anonymous reader writes: Now that Google Photos exists separately from Google+, the company is shutting down the Google+ version of Photos starting on August 1. The Android version will be the first to go, followed shortly thereafter by the iOS and web versions. Fortune calls the old Photos app "a relic of the times when the search giant thought its social network Google Plus could become a huge hit."
Twitter

Hacker Group That Hit Twitter, Facebook, Apple and Microsoft Intensifies Attacks 40 40

itwbennett writes: The hacker group, which security researchers from Kaspersky Lab and Symantec call Wild Neutron or Morpho, has broken into the networks of over 45 large companies since 2012. After the 2013 attacks against Twitter, Facebook, Apple and Microsoft were highly publicized, the group went underground and temporarily halted its activity. However, its attacks resumed in 2014 and have since intensified, according to separate reports released Wednesday by Kaspersky Lab and Symantec.
IOS

Apple Drops Recovery Key From Two-Factor Authentication In New OS Versions 64 64

eggboard writes: If you've ever turned on what's now called "two-step verification" for an Apple ID, you had to create a Recovery Key. Lose this 14-digit code and have your password reset (because of hacking attempts against you), and you might lose access forever to purchases and data, as Owen Williams almost did. Apple confirmed today that starting with its public betas of OS X 10.11 and iOS 9, two-factor authentication won't have a Recovery Key. Instead, if you have to reset a password or lose access to devices, you'll have to go through an account verification process with human beings.
Security

UK Researchers Find IPv6-Related Data Leaks In 11 of 14 VPN Providers 65 65

jan_jes writes: According to researchers at Queen Mary University of London, services used by hundreds of thousands of people in the UK to protect their identity on the web are vulnerable to leaks. The study of 14 popular VPN providers found that 11 of them leaked information about the user because of a vulnerability known as 'IPv6 leakage'. The leakage occurs because network operators are increasingly deploying a new version of the protocol used to run the Internet called IPv6. The study also examined the security of various mobile platforms when using VPNs and found that they were much more secure when using Apple's iOS, but were still vulnerable to leakage when using Google's Android. Similarly Russian researchers have exposed the breakthrough U.S. spying program few months back. The VPNs they tested certainly aren't confined to the UK; thanks to an anonymous submitter, here's the list of services tested: Hide My Ass, IPVanish, Astrill, ExpressVPN, StrongVPN, PureVPN, TorGuard, AirVPN, PrivateInternetAccess, VyprVPN, Tunnelbear, proXPN, Mullvad, and Hotspot Shield Elite.
Open Source

Ask Slashdot: Choosing the Right Open Source License 171 171

NicknamesAreStupid writes: I need to choose an open source license. I am developing an open source iOS application that use a significant number of other open source projects which, in turn, use a number of different open source licenses such as MPL/GPL, MIT, and BSD. I am also using sample code from Apple's developer site, which has their own terms of use. The code dependencies are such that my code would not be of much use without theirs. If this project is used, then it would be nice to pick a license that best fits in with this mashup. I am interested in maintaining the freedom of my code but do not want to create a catch-22 or make life hard for people who need to use this project for personal use or profit. My inclination is to use MIT's, as I have done so before. I asked an IP lawyer about this matter, and she replied (pro bono), "it probably doesn't matter." Of course, that advice was worth every penny. Moving away from legal issues and looking at this from a social perspective, which license would appeal most and offend least? I thought about no license but was warned (pro bono), "If you do not, then someone else may." Any suggestions?
Microsoft

Is Microsoft's .NET Ecosystem On the Decline? 250 250

Nerval's Lobster writes: In a posting that recently attracted some buzz online, .NET developer Justin Angel (a former program manager for Silverlight) argued that the .NET ecosystem is headed for collapse—and that could take interest in C# along with it. "Sure, you'll always be able to find a job working in C# (like you would with COBOL), but you'll miss out on customer reach and risk falling behind the technology curve," he wrote. But is C# really on the decline? According to Dice's data, the popularity of C# has risen over the past several years; it ranks No. 26 on Dice's ranking of most-searched terms. But Angel claims he pulled data from Indeed.com that shows job trends for C# on the decline. Data from the TIOBE developer interest index mirrors that trend, he said, with "C# developer interest down approximately 60% down back to 2006-2008 levels." Is the .NET ecosystem really headed for long-term implosion, thanks in large part to developers devoting their energies to other platforms such as iOS and Android?
Open Source

Reasons To Use Mono For Linux Development 355 355

Nerval's Lobster writes: In the eleven years since Mono first appeared, the Linux community has regarded it with suspicion. Because Mono is basically a free, open-source implementation of Microsoft's .NET framework, some developers feared that Microsoft would eventually launch a patent war that could harm many in the open-source community. But there are some good reasons for using Mono, developer David Bolton argues in a new blog posting. Chief among them is MonoDevelop, which he claims is an excellent IDE; it's cross-platform abilities; and its utility as a game-development platform. That might not ease everybody's concerns (and some people really don't like how Xamarin has basically commercialized Mono as an iOS/Android development platform), but it's maybe enough for some people to take another look at the platform.
United States

Is Surespot the Latest Crypto War Victim? 26 26

George Maschke writes: Patrick G. Eddington writes in a Christian Science Monitor op-ed about indications that the government may be snooping on users of Surespot, a free and open source encrypted messaging app for Android and iOS. Such users include, but are hardly limited to, Islamic State militants. He writes in the piece: "Has encrypted chat service Surespot been compromised by the US government? Surespot user and former Army intelligence officer George Maschke recently published a provocative theory suggesting the answer is yes. Mr. Maschke’s key pieces of evidence are intriguing. In May 2014, he e-mailed 2Fours LLC, which is Surespot’s parent company, asking whether the company had ever received a National Security Letter (NSL), a court order to provide information, or other government request to cooperate in an investigation. He was assured in writing that 2Fours had received no such requests. That changed in November 2014, when Surespot’s founder, Adam Patacchiola, told Maschke via e-mail that 'we have received an e-mail asking us how to submit a subpoena to us which we haven’t received yet.'"
Security

Researchers Find Major Keychain Vulnerability in iOS and OS X 78 78

An anonymous reader notes a report from El Reg on a major cross-app resource vulnerability in iOS and Mac OS X. Researchers say it's possible to break app sandboxes, bypass App Store security checks, and crack the Apple keychain. The researchers wrote, "specifically, we found that the inter-app interaction services, including the keychain and WebSocket on OS X and URL Scheme on OS X and iOS, can all be exploited by [malware] to steal such confidential information as the passwords for iCloud, email and bank, and the secret token of Evernote. Further, the design of the App sandbox on OS X was found to be vulnerable, exposing an app’s private directory to the sandboxed malware that hijacks its Apple Bundle ID. As a result, sensitive user data, like the notes and user contacts under Evernote and photos under WeChat, have all been disclosed. Fundamentally, these problems are caused by the lack of app-to-app and app-to-OS authentications." Their full academic paper (PDF) is available online, as are a series of video demos. They withheld publication for six months at Apple's request, but haven't heard anything further about a fix.
Businesses

Apple Will Pay More To Streaming Music Producers Than Spotify -- But Not Yet 141 141

Reader journovampire supplies a link to Music Business Worldwide (based on a re/code report) that says Apple's new Apple Music service, after a trial period during which the company has refused to pay royalties, is expected to pay a bit more than 70 percent of its subscription revenue out to the companies supplying it, rather than the 58 percent that some in the music industry had feared. Notes journovampire: "If 13% of iOS device users in the world paid $9.99-per-month for Apple Music, it would generate more cash each year than the entire recorded music biz manages right now."
Businesses

US Navy Solicits Zero Days 59 59

msm1267 writes: The US Navy posted a RFP, which has since removed from FedBizOpps.gov, soliciting contractors to share vulnerability intelligence and develop zero day exploits for most of the leading commercial IT software vendors. The Navy said it was looking for vulnerabilities, exploit reports and operational exploit binaries for commercial software, including but not limited to Microsoft, Adobe, [Oracle] Java, EMC, Novell, IBM, Android, Apple, Cisco IOS, Linksys WRT and Linux, among others. The RFP seemed to indicate that the Navy was not only looking for offensive capabilities, but also wanted use the exploits to test internal defenses.The request, however, does require the contractor to develop exploits for future released CVEs. "Binaries must support configurable, custom, and/or government owned/provided payloads and suppress known network signatures from proof of concept code that may be found in the wild," the RFP said.
Advertising

iOS 9 To Have Ad Blocking Capabilities 161 161

An anonymous reader writes: iOS 9 will reportedly carry ad blocking capabilities for it's Safari browser when it is released later this year. The feature wasn't rolled out with the usual fanfare one might expect, and flew under the radar. ZDNet reports: "It's not immediately clear why the new ad-blocking privacy feature was included in iOS 9, due out later this year. After all, the iPhone and iPad maker has its own advertising network -- even if its success was limited (which is putting it nicely). What's clear is that allowing ad-blockers in iOS 9 could deliver a serious blow to Google, the biggest rival to Apple in the mobile space, because advertising remains a massive portion of the search giant's income."
IOS

WWDC 2015 Roundup 415 415

Here's an overview of the main announcements and new products unveiled at WWDC today.
  • The latest OS X will be named OS X El Capitan. Features include: Natural language searches and auto-arrange windows. You can make the cursor bigger by shaking the mouse and pin sites in Safari now. 1.4x faster than Yosemite. Available to developers today, public beta in July, out for free in the fall.
  • Metal, the graphics API is coming to Mac. "Metal combines the compute power of OpenCL and the graphics power of OpenGL in a high-performance API that does both." Up to 40% greater rendering efficiency.
  • iOS 9: New Siri UI. There’s an API for search. Siri and Spotlight are getting more integrated. Siri getting better at prediction with a far lower word error rate. You can make checklists, draw and sketch inside of Notes. Maps gets some love. New app called News "We think this offers the best mobile reading experience ever." Like Flipboard it pulls in news articles from your favorite sites. HomeKit now supports window shades, motion sensors, security systems, and remote access via iCloud. Public Beta for iOS 9.
  • Apple Pay: All four major credit card companies and over 1 million locations supporting Apple Pay as of next month. Apple Pay reader developed by Square, for peer-to-peer transactions. Apple Pay coming to the UK next month support in 250,000 locations including the London transportation system. Passbook is being renamed "Wallet."
  • iPad: Shortcuts for app-switching, split-screen multitasking and QuickType. Put two fingers down on the keyboard and it becomes a trackpad. Side by side apps. Picture in picture available on iPad Air and up, Mini 2 and up.
  • CarPlay: Now works wirelessly and supports apps by the automaker.
  • Swift 2,the latest version of Apple’s programing language . Swift will be open source.
  • The App Store: Over 100 billion app downloads, and $30 billion paid to developers.
  • Apple Watch: watchOS 2 with new watch faces. Developers can build their own "complications" (widgets with a terrible name that show updates and gauges on the watch face). A new feature called Time Travel lets you rotate the digital crown to zoom into the future and see what’s coming up. More new features: reply to email, bedside alarm clock, send scribbled messages in multiple colors. You can now play video on the watch. Developer beta of watchOS 2 available today, wide release in the fall for free.
  • Apple Music: “The next chapter in music. It will change the way you experience music forever,” says Cook. Live DJs broadcasting and hosting live radio streams you can listen to in 150 countries. Handpicked suggestions. 24/7 live global radio. Beats Connect lets unsigned artists connect with fans. Beats Music has all of iTunes’ music, to buy or stream. With curated recommendations. Launching June 30th in 100 countries with Android this fall, with Windows and Android versions. First three months free, $9.99 a month or $14.99 a month for family plan for up to six.
Bug

Typing 'http://:' Into a Skype Message Trashes the Installation Beyond Repair 225 225

An anonymous reader writes: A thread at the Skype community forums has brought to light a critical bug in Microsoft's Skype clients for Windows, iOS and Android: typing the incorrect URL initiator http://: into a text message on Skype will crash the client so badly that it can only be repaired by installing an older version and awaiting a fix from Microsoft. The bug does not affect OS X or the 'Metro'-style Windows clients — which means, effectively, that Mac users could kill the Skype installations on other platforms just by sending an eight-character message.