Link

Texan Man Imprisoned For Apple Store Thefts in Multiple States

Charlotte Henry ·

Jalek Ingram, a 20-year-old  man from Texas, has been given two-year in prison for his links to thefts at  Apple Stores in various states. These included shoplifting 25 iPhones, MacBooks, and iPads from the retail outlet in Little Rock, Arkansas, according to the Arkansas Democrat-Gazette.

Sentencing papers filed Thursday show Jalek Ingram received a total of three years in prison after pleading guilty to theft and commercial burglary for the March 2018 Apple store theft for a two-year term, with an additional year in prison for a second-degree battery charge stemming from his role in beating a fellow jail inmate unconscious last November. Three other men are charged in the Apple thefts while three other jail inmates, including two murder suspects, are accused in the attack on Marcus Lorenzo Daniels of Crawfordsville about 1½ weeks before Thanksgiving.

Link

Examining the Boot Process for M1 Macs

Andrew Orr ·

Howard Oakley recently dove into the boot process for M1 Macs and how it affects booting from an external hard drive.

Unless the user has already changed its default security settings to allow it to start up from an external disk, you’ll have no joy whatsoever. Although this is secure, it’s also more than inconvenient, as the times that you most need your Mac to start up from an external disk are when it’s in trouble with its internal disk, and that’s likely to prevent you from changing its security settings, leaving your Mac dead.

Link

Experts Key to Epic vs Apple Battle

Charlotte Henry ·

The Epic Games vs Apple case is well underway. A key part of the trial is expert witnesses, with David Evans, chairman of Global Economics Group set to be there for the Fortnite maker. Reuters has a breakdown of the significance of his, and other, appearances.

On the stand this week, Evans testified that Apple is what is known as a single-brand market, arguing that once consumers buy an iPhone, the costs of switching to an Android are so high that they rarely make the jump. Since about 2010, Evans testified, Apple’s App Store has effectively been its own market, and users rarely venture outside. After Apple kicked “Fortnite” off the App Store, Evans testified, only a small fraction of Apple users jumped to other devices like PCs or gaming consoles to play “Fortnite.”

 

Link

YouTube TV Added Direct to App as Roku Row Escalates

Charlotte Henry ·

Google and Roku are still rowing over how to get YouTube TV back on the streaming platform. It seems like Google has taken things into its own hands, as The Verge reported that YouTube TV is now in the main YouTube app.

YouTube users will start seeing a “Go to YouTube TV” option in the main YouTube app over the next few days. When they select that, they’ll then be switched over to the standard YouTube TV user experience. This option is coming to Roku devices first — where it’s currently most needed — but will also come to YouTube on other platforms as well. In essence, Google has basically stuffed the YouTube TV app into YouTube itself, a solution that seems unlikely to make Roku very happy. Google says it’s “still working to come to an agreement with Roku to ensure continued access to YouTube TV for our mutual customers,” and it notes the YouTube TV app remains usable for those who already have it installed

Link

‘Brave’ Browser Adds Support for Crypto Domains

Andrew Orr ·

Brave is the latest browser to partner with Unstoppable Domains, letting users access decentralized crypto websites.

Through this integration, the Brave browser is supporting a decentralized network not part of the traditional Domain Name Service (DNS), which is increasingly susceptible to hijacking, denial-of-service attacks, and phishing attacks. Unstoppable Domains allows users to build and host decentralized websites for a variety of use cases, including creating NFT galleries, video, and file sharing.

Link

IRS Can Seize Your Bitcoin if you Have Unpaid Taxes

Andrew Orr ·

Deputy associate chief counsel Robert Wearing of the IRS said that the agency would seize cryptocurrency assets to settle unpaid taxes.

The perceived authority to seize an asset like bitcoin from the IRS stems from a 2014 notice it issued claiming that “virtual currency is treated as property for Federal income tax purposes.”

But there is still some question as to how the IRS would accurately determine the BTC holdings of taxpayers, let alone compel them to relinquish their bitcoin.

Link

President Biden Signs Order to Improve U.S. Cybersecurity

Andrew Orr ·

After the attack on Colonial Pipeline, President Biden has signed an executive order to improve the nation’s cybersecurity.

The executive order requires IT service providers to share certain breach information with the government, modernizes and implements stronger cybersecurity standards in the federal government, establishes security standards for development of software sold to the government and will create an “energy star” label so that consumers can better determine whether software was developed securely.

Link

Two Months After it Was discontinued, HomePod Models Remain Available to Purchase

Charlotte Henry ·

The HomePod was meant to be discontinued on March 12. However, 9to5 Mac picked up on reports of the device’s ongoing availability.

Apple announced that the original HomePod would be discontinued on March 12, as it shifted its focus to the HomePod mini. Here’s what the company said back then: HomePod mini has been a hit since its debut last fall, offering customers amazing sound, an intelligent assistant, and smart home control all for just $99. We are focusing our efforts on the mini model. We are discontinuing the original HomePod, it will continue to be available while supplies last through the Apple Online Store, Apple Retail Stores, and Apple Authorized Resellers. Apple will provide customers with software updates and service and support through Apple Care. Over these past two months, evidence has emerged on just how poorly Apple’s smart speaker sold. The YouTuber Michael Kukielka, also known as DetroitBORG, bought at least two HomePods after Apple discontinued the product, and by his surprise, the models he bought were from the launch stock three years ago.

Link

Security Researcher Hacks Apple’s ‘Find My’ Network

Andrew Orr ·

Researcher Fabian Bräunlein found that Apple’s Find My location network can be used to “upload arbitrary data to the internet.”

Being inherent to the privacy and security-focused design of the Find My Offline Finding system, it seems unlikely that this misuse can be prevented completely.

Link

CIDA Warns of New Ransomware ‘FiveHands’

Andrew Orr ·

FiveHands has been around since January but was recently used in a successful attack against an unknown organization.

Attackers were targeting unpatched SonicWall Secure Mobile Access SMA 100 remote access products, for which patches were released in February. The publicly available tools the group users including the SoftPerfect Network Scanner for Discovery and Microsoft’s own remote administration program, PsExec.exe and its related ServeManager.exe.

TMO Deals

SPADE Smart Ear Wax Remover: $86.99

Bryan Chaffin ·

Boom! We have a deal for you today on an earwax remover. I bet you weren’t expecting that, but it works with an app on your iPhone, making it smart. This device has a soft scoop for inside your ear, and a camera that streams to your iPhone so you can see exactly what you’re doing. It has a magnetic cap, too. This device is $99.99, but coupon code CLEAN13 brings it down to $86.99 on checkout.


Link

Amazon Data Breach Exposes 200,000 Fake Reviewers

Andrew Orr ·

Security researchers at SafetyDetectives found an insecure ElasticSearch database that potentially uncovers over 200,000 fake Amazon reviewers.

These Amazon vendors send to reviewers a list of items/products for which they would like a 5-star review. The people providing the ‘fake reviews’ will then buy the products, leaving a 5-star review on Amazon a few days after receiving their merchandise.

Upon completion, the provider of the fake review will send a message to the vendor containing a link to their Amazon profile, along with their PayPal details.

Link

Wondery Joining Apple Podcast Subscriptions

Charlotte Henry ·

Amazon-owned podcast studio Wondery is partnering with Apple, according to The Hollywood Reporter. Apple Podcast subscriptions is set to launch in the future too, according to the report.

Wondery, which produces podcasts like Dr. Death, Business Wars and The Shrink Next Door, will bring its Wondery+ subscription service to Apple Podcast Subscriptions, which is set to launch later this month. Wondery+ offers ad-free podcasts, with early access and exclusive episodes for subscribers. The deal is good news for Apple users, some of whom were left wondering whether Wondery would continue to invest in the Apple ecosystem after being acquired by fellow tech giant Amazon earlier this year.

Link

India COVID-19 Outbreak Slows Foxconn iPhone Output

Charlotte Henry ·

Reuters reported on the consequences the devastating COVID-19 outbreak in India has had on manufacturing in the country. Foxconn’s iPhone output is significantly down, with plants operating at hugely reduced capacity.

Tamil Nadu is one of the worst hit states in the second coronavirus wave engulfing India. Officials imposed a full lockdown in the state from Monday, closing public transport and shuttering shops, to try slow surging infections. More than 100 Foxconn employees in the state have tested positive for COVID-19 and the company has enforced a no-entry ban at its factory in the capital of Chennai until late May, one of the sources said.” Employees are only allowed to leave but not to enter the facility since yesterday,” the person said. “Only a small part of output is being kept.”

Link

Clubhouse is Finally on Android, a Year After it Arrived on iOS

Charlotte Henry ·

Clubhouse, the popular (at one point) live audio app, is finally available to Android users in beta. Prior to the announcement in a blog post on Sunday, it had been exclusive to iOS.

Today, we are thrilled to share that Clubhouse for Android will start rolling out in beta immediately. We will begin gradually, with the U.S. today, followed by other English-speaking countries and then the rest of the world. Our plan over the next few weeks is to collect feedback from the community, fix any issues we see and work to add a few final features like payments and club creation before rolling it out more broadly… As a part of the effort to keep the growth measured, we will be continuing the waitlist and invite system, ensuring that each new community member can bring along a few close friends. As we head into the summer and continue to scale out the backend, we plan to begin opening up even further, welcoming millions more people in from the iOS waitlist, expanding language support, and adding more accessibility features, so that people worldwide can experience Clubhouse in a way that feels native to them.

 

 

 

Link

Tor Exit Nodes Were Attacked in February 2021

Andrew Orr ·

A new report from Hacker News says that an unknown attacker managed to control over 27% of Tor exit nodes in February 2021.

“The entity attacking Tor users is actively exploiting tor users since over a year and expanded the scale of their attacks to a new record level,” an independent security researcher who goes by the name nusenu said in a write-up published on Sunday. “The average exit fraction this entity controlled was above 14% throughout the past 12 months.”

Link

GitHub Adds Support for Security Keys Over SSH

Andrew Orr ·

GitHub announced on Monday that it enabled support for two-factor authentication security keys when members use them over SSH.

When used for SSH operations, security keys move the sensitive part of your SSH key from your computer to a secure external security key. SSH keys that are bound to security keys protect you from accidental private key exposure and malware. You perform a gesture, such as a tap on the security key, to indicate when you intend to use the security key to authenticate. This action provides the notion of “user presence.”

Link

Report Links Apple Suppliers With Alleged Forced Labor Programs for Uyghur Muslims in China

Charlotte Henry ·

Seven Apple suppliers have been linked to forced labor programs that are suspected to be related to the alleged Chinese genocide of Uyghur Muslims in the country’s Xinjiang region. That’s according to a new human rights report shared with The Information, picked up on by AppleInsider.

The Apple supply chain partner produce components, coatings, and offer assembly services to the Cupertino tech giant. At least five received thousands of Uyghur and other oppressed minority workers at specific plants that did work for Apple, according to an investigation by human rights groups and The Information. According to the report, evidence suggests that Advanced-Connectek, Luxshare Precision Industry, Shenzhen Deren Electronic Co., Avary Holding, AcBel Polytech, CN Innovations, and Suzhou Dongshan Precision Manufacturing Co. participated in the forced labor programs. To identify those manufacturers and supply partners, the investigation used previously unreported public statements, images, and videos by Chinese government offices and state-run media organizations. That evidence found that the companies participated in what the Chinese call a poverty alleviation program.

Link

iPhone 13 Models to Be Thicker With Larger Camera Bump

Charlotte Henry ·

Models of the forthcoming iPhone 13 will be thicker than their iPhone 12 equivalents. They will also have larger, thicker camera bumps and the lenses will stick out less. That’s according to ‌schematics seen by MacRumors.

In addition to a thicker camera bump, Apple is changing the overall size of the camera bump, a shift that will also be most noticeable on the ‌iPhone 13‌ Pro. The ‌iPhone 12‌ and 12 Pro have camera bumps that measures in at around 28mm by 30mm, while the ‌iPhone 13‌ will have a camera bump that’s closer to square at around 29mm by 29mm, with the bump also located about a millimeter closer to the top of the iPhone. The ‌iPhone 13‌ Pro is expected to gain a larger camera bump, measuring in at around 36mm by 37mm, so rather than having a camera bump size similar to the ‌iPhone 13‌, it will be more similar to the ‌iPhone 13‌ Pro Max.

TMO Deals

Zulu Exero Bone Conduction Headphones: $34.99

Bryan Chaffin ·

We have a deal on a pair of Zulu Exero Bone Conduction Headphones. Using a light vibration in the headset as they rest around your ears, music is generated just for you, without blocking out your surroundings. They’re lightweight and Bluetooth-enabled, at $34.99 through our deal.

TMO Deals

Switchmate 2.0 Smart Switch for Toggle Style Light Switches: $19.99

Bryan Chaffin ·

We have a deal on Switchmate 2.0, a smart switch that snaps over your existing light switches and controls them by doing the flipping for you. That means you don’t have to rewire the switch or replace your existing lightbulbs. Using the companion app, the Switchmate 2.0 can respond to voice commands, turn lights on automatically when you arrive home, and it has multiple timers for total smart lighting control. This device is $19.99 through our deal.

Link

Court Finds NSA Collects Innocent Americans’ Data Anyway

Andrew Orr ·

The Foreign Intelligence Surveillance Court (FISC) found that the NSA doesn’t follow the law and collections the data of innocent Americans. This is according to a recently declassified document [PDF] from November 2020.

From where we sit, it seems clear that the FISC continues to suffer from a massive case of national security constitutional-itis. That is the affliction (not really, we made it up) where ordinarily careful judges sworn to defend the Constitution effectively ignore the flagrant Fourth Amendment violations that occur when the NSA, FBI, (and to a lesser extent, the CIA, and NCTC) misuse the justification of national security to spy on Americans en mass.

Link

Over 29,000 Databases Expose 19 Petabytes of Data

Andrew Orr ·

Many companies aren’t properly securing their databases, like the one I wrote about this morning. But we have some numbers. CyberNews quotes “29,000 unprotected databases worldwide exposing 19 petabytes (19,000 terabytes, 19,000,000 gigabytes, etc) of data.

To conduct this investigation, we used a specialized search engine to scan for open databases of three of the most popular database types: Hadoop, MongoDB, and Elasticsearch. While performing the search, we made sure that the open databases we found required no authentication whatsoever and were open for anyone to access, as opposed to those that had default credentials enabled.