Tesla iPhone App Getting 2FA

Tesla is set to introduce two-factor authentication to its iPhone App in shortly. CEO Elon Musk tweeted that the long-awaited iOS feature “is going through final validation right now,” AppleInsider.

In a response to a tweet on Friday asking about an ongoing project to add two-factor authentication to the app, Elon Musk apologized for the feature being “embarrassingly late,” but that it was on the way. According to Musk, two-factor authentication via SMS or an authenticator app is “going through final validation right now,” though it is unclear if this refers to Tesla’s own procedures or those relating to the App Store. The Tesla mobile app provides drivers with a lot of information and control for their electric car. From the app, users can change media being played, remotely change the climate control, locate the vehicle in a car park, interact with the navigation, and monitor the progress of recharging, among other elements.

What Would Happen if Apple Was Forced to Allow Sideloaded Apps?

Some people want Apple to let users download sideloaded apps. These are apps that can be installed outside of the App Store, like the current situation on macOS. One counter argument is security:

“It’s not that iOS is full of holes,” he said, but that “the App Store is a natural second layer that [Apple] can filter through and decide if something would be harmful.” He agreed it wasn’t foolproof, but that it can help screen out “undesirable” apps.

My worry with sideloaded apps isn’t about the device security itself. It’s that Apple probably couldn’t control what goes on inside these apps, like SDKs that harvest our data, or developers only letting people use non-private logins like Facebook and Google. I want to use technologies like Sign In with Apple and Apple Pay, because I trust Apple with my data. To be fair, App Store apps already use trackers. As a side note, I’m linking to Apple News because of Engadget/Verizon’s new consent form when you visit the website.

What if Your Phone Could Crawl Towards its Charger Like a Demon?

Robotics researchers from the Biorobotics Laboratory at Seoul National University created something that belongs in a horror movie. The CaseCrawler is a phone case that lets your phone crawl towards its charger as if it were demon-possessed.

The CaseCrawler prototype doesn’t appear to have any intelligence of its own or the ability to steer; it simply scampers forward in one direction.Thanks to its clever leg design, though, it’s not impeded by smaller obstacles in its path, which it can simply crawl over. Eventually, the smartphone it’s carrying could provide all the smarts and sensors it needs to intelligently find its way around and navigate an area like a desk without scampering off the edge.

“Scampering.” I’m picturing the famous scene from The Exorcist where the girl walks backwards down the stairs.

pCloud Update Lets Users Decide Where Files are Stored

pCloud is an encrypted cloud storage service, and a recent update gave users the ability to decide in which server their files are stored.

All pCloud users will be able to choose the server location where their files are stored. This will give users greater control over the security of their files. Once the choice of where to store the data is made during registration – in the US or Europe – it is practically impossible to transfer them without the user’s knowledge or permission. Currently, the option to select the server location is available only to newly registered users.

TikTok Facing New Data Probe in France

France’s privacy watchdog opened a probe into TikTok on Tuesday, Bloomberg News reported. The Chinese-owned video-sharing app is facing ongoing scrutiny of its privacy policies in Europe, alongside takeover talk in the U.S.

The French authority, CNIL, is looking at a number of issues, including how the company communicates with users and the protection of children, a spokesman said Tuesday. The questions are part of an investigation into TikTok’s plan to set up a European Union headquarters for data purposes. The EU’s data protection chiefs in June pledged to coordinate potential investigations into the Chinese company, establishing a taskforce to get a better understanding of “TikTok’s processing and practices across the EU.” The EU taskforce would also likely give the final decision on plans by the company to set up an EU base for data purposes in Ireland. This could mean that future probes would be led by the Irish data authority, which is already the lead privacy regulator for tech giants, including Google, Facebook Inc. and Twitter Inc.

Trump’s China App Ban Will Affect Apple Due to WeChat

President Trump’s ban on Chinese apps, in particular WeChat, is going to affect Apple, writes Michael Kan.

Forty-five days from now, the White House can begin punishing US companies and individuals for making “transactions” that are related to WeChat. That means Apple will likely need to pull the product from the iOS app store.

“For Apple, it would be all iPhone sales in China will go to zero because no one in China will buy a WeChatless phone,” tweeted podcaster Carl Zha.

As I understand it, WeChat is THE most popular app in China. It’s what Facebook aspires to be with Messenger. It’s used for everything like messaging, mobile payments, a hub for businesses, etc. Like Mr. Kan notes, it won’t affect Google because apps can be sideloaded on Android. But the App Store is the single repository of iOS apps.

‘Have I Been Pwned’ Database Now Open Source

Troy Hunt is making his Have I Been Pwned database open source. He says it’s already a community project with companies like Cloudflare providing free services to HIBP.

The single most important objective of that process was to seek a more sustainable future for HIBP and that desire hasn’t changed; the project cannot be solely dependent on me. Yet that’s where we are today and if I disappear, HIBP quickly withers and dies.

Facebook to Continue WFH Until July 2021

Facebook has joined Google in extending its work from home plans. Staff will not return to the office until July 2021, Techcrunch reported. Apple is hoping to have employees return in early 2021.

“Based on guidance from health and government experts, as well as decisions drawn from our internal discussions about these matters, we are allowing employees to continue voluntarily working from home until July 2021,” a spokeswoman told the Reuters news agency. Facebook also said it will provide employees with an additional $1,000 to spend on “home office needs”… Earlier this month, Facebook secured the main office lease on an iconic building in New York, for example — adding 730,000 square feet to its existing 2.2 million square feet of office space.

20GB Intel Data Leak Spread on Twitter Includes Source Code

An anonymous leaker took to Twitter to leak 20GB of Intel data and says more is coming soon.

The poster encourages downloaders to look for mentions of ‘backdoors’ in some of the Intel source code, and even provides a sample clip of one such listing, but we aren’t sure of the intentions behind the listings in the code.

Hitting Command + F to look for mentions of backdoors, because such backdoors would conveniently  be labeled as such, right?

Harry Potter Movies Heading to Peacock

The entire set of Harry Potter movies is heading to Peacock and will be available in windows from later this year and into 2021, Variety reported. The films will even be accessible to those users with the free tier.

The octet of movies based on J.K. Rowling’s famed fantasy book series is set to roll off HBO Max as of Aug. 25, after WarnerMedia had carved out a three-month window for the popular franchise following its launch. In 2016, NBCU inked a deal with Warner Bros. locking up TV and digital rights to the Potter movies (including “Fantastic Beasts”) from 2018-2025 that also incorporated content for Universal theme parks. “The Harry Potter franchise is beloved by people of all ages and represents the caliber of quality entertainment customers can expect to find on Peacock,” said Frances Manfredi, Peacock’s president of content acquisition and strategy, in a statement. “We’ve built a world-class collection of iconic movies and shows, and we will continue to expand the film library with treasured titles from NBCUniversal and beyond that will surprise and delight Peacock customers time and time again.”

Apple’s Senior VP of Machine Learning Talks Strategy

John Giannandrea, Apple’s Senior Vice President for Machine Learning and AI Strategy, and Bob Borchers, VP of Product Marketing, spoke with Ars Technica about Apple’s AI strategy and beliefs.

When I joined Apple, I was already an iPad user, and I loved the Pencil,” Giannandrea (who goes by “J.G.” to colleagues) told me. “So, I would track down the software teams and I would say, ‘Okay, where’s the machine learning team that’s working on handwriting?’ And I couldn’t find it.” It turned out the team he was looking for didn’t exist—a surprise, he said, given that machine learning is one of the best tools available for the feature today.

This Photographer Shot a Wedding With an iPhone 11 Pro

Jennifer Van Elk wrote a review of the iPhone 11 Pro as a professional camera, using it to shoot a wedding, and the results are stunning.

The best part by far though was that during downtime at the wedding and after the wedding during the ride home we were able to cull and edit the wedding. It was a 45 minute ride home from the wedding. In that time I was able to cull the wedding and edit all the photos in Lightroom on the iPhone 11 Pro. By the time we were home, I was already uploading the gallery.

LastPass Dark Web Monitoring, Security Dashboard Here

LogMeIn announced on Wednesday the arrival of LastPass dark web monitoring, as well as a security dashboard for the password manager.

The new LastPass dark web monitoring feature proactively checks email addresses against a 3rd party database of breached credentials. If that email address has been found in the database, the user will be immediately notified by email and with a message directly in their LastPass Security Dashboard. From there, users will be prompted to update the password for that compromised account.

StarFinder Now Available Via Alexa

Amazon’s sci-fi game StarFinder is now available over Alexa devices, reported CNet. All you have to do is set up the skill and say “Alexa, play Starfinder.”

Starfinder is an exciting example of more experimental game and story formats made possible by voice assistants like Alexa. We’ve seen examples like The Wayne Investigation — a Batman-themed choose-your-own-adventure Alexa skill from 2016 — but Starfinder brings higher production values and a bigger budget to the structure, although Amazon won’t share the exact numbers. Actors like Laura Bailey (The Last of Us, Part II) and Nathan Fillion (Firefly, Castle) voice characters in a cast of 13, selected and recorded by Audible Studios. The acting, sound and music are excellent across the board. Unlike a simple choose-your-own-adventure, Starfinder allows you to select from five characters to play, gives you an inventory of items and checks your stats for performing different actions (say, schmoozing an alien or disarming a bomb).

Twitter Could be Fined up to $250 Million Over Privacy Violations

Since October 2019 the FTC has been investigating Twitter over its use of personal data for targeted ads. Twitter has set aside US$150 million for the minimum fine amount but it could possibly reach up to US$250 million.

If it’s preparing for an unfavorable outcome, that’s probably because it’s not the first tech company that’s had to face the same allegations from the FTC. Facebook previously had to pay $5 billion for several privacy missteps, including the use of people’s phone numbers, provided for security purposes, for its ad business.

Going Cold Turkey on Apple, Amazon, Google,Microsoft, and Facebook

Kashmir Hill stopped using the ‘big five’ tech giants, one at a time. For the final week, she stopped using them all. She relayed her experience for Gizmodo.

I went through the digital equivalent of a juice cleanse. I hope I’m better than most dieters at staying healthy afterward, but I don’t want to be a digital vegan. I want to embrace a lifestyle of “slow Internet,” to be more discriminating about the technology I let into my life and think about the motives of the companies behind it. The tech giants are reshaping the world in good and bad ways; we can take the good and reject the bad.

[Update: August 3] The quote above and main link (below) is from the first time Ms. Hill conducted this experiment, in 2019. She has since reflected on it for The New York Times.

iOS 14 Features Could Hurt Facebook Ad Targeting

iOS 14 features like “ask to track” could hurt Facebook’s ad targeting business, said Chief Financial Officer David Wehner.

With the update to its mobile devices, Apple will ask users if they want to let app developers track their activity across other apps and websites […] The change is expected to start impacting Facebook’s advertising in the third quarter but it will have a more pronounced effect in the fourth quarter, Wehner said.

I’m sure Facebook will find other ways to track people.

‘Military Grade’ is Hardly More Than a Marketing Term

In early 2020 I wrote an article explaining what it means when companies use phrases like “military grade encryption” or “bank level security.” I wrote “they might seem like marketing buzzwords” but I should’ve said, “they totally are buzzwords.” This usage isn’t limited to discussions around encryption. Mel Magazine says it refers to MIL-STD-810 and it’s not the tough, high quality standard we think it is.

Commercially, Hollings adds, “there’s no governing body that says, ‘Okay, you met the requirements for MIL-STD-A-10.’ So effectively anyone can say their product is military standard.” This obviously isn’t great for civilian consumers, while ex-military like Hollings just scoff at the designation […]

‘Greyhound’ Success Prompts Apple TV+ Rethink

It seems that the success of Tom Hanks moving Greyhound has prompted a shift in thinking at Apple TV+. While big-name series were clearly always fundamental, sources told Fast Company that blockbusters are going are to be a much bigger focus going forward.

One source says the streamer is discussing plans to release a dozen new movies a year on Apple TV Plus, roughly one a month. Two to four of those would be blockbuster-type titles such as Greyhound and Emancipation, the runaway-slave thriller starring Will Smith and directed by Antoine Fuqua (Training Day) that Apple recently acquired for $120 million in a bidding war with Warner Bros., Universal, and other studios. Another source had fewer specifics but confirmed that Apple is telling Hollywood that it’s now in the market for more tentpole-like feature films. (Apple would not comment for this story.) Apple’s greater focus on big films marks a noticeable amplification on its movie front.

Sorry, Catnip Won’t Protect You Against the Meow Attack

Over 1,000 insecure databases have been completely erased, and the attackers leave no trace except the word “meow.”

Since then, Meow and a similar attack have destroyed more than 1,000 other databases. At the time this post went live, the Shodan computer search site showed that 987 ElasticSearch and 70 MongoDB instances had been nuked by Meow. A separate, less-malicious attack tagged an additional 616 ElasticSearch, MongoDB, and Cassandra files with the string “university_cybersec_experiment.” The attackers in this case seem to be demonstrating to the database maintainers that the files are vulnerable to being viewed or deleted.

Better erased than breached, right?

‘The Darwin Affair’ Latest Big Library Read

“The Darwin Affair” is the next book in Libby’s digital book club called Big Library Read.

London, June 1860: When an assassination attempt is made on Queen Victoria, and a petty thief is gruesomely murdered moments later—and only a block away—Chief Detective Inspector Charles Field quickly surmises that these crimes are connected to an even more sinister plot. Was Victoria really the assassin’s target? Are those closest to the Crown hiding something? And who is the shadowy figure witnesses describe as having lifeless, coal-black eyes?

The Reasons Why Apple Should Buy TikTok

TikTok has been the focus of much political attention recently due its base in China and allegations (which it denies,) of data sharing with the Chinese state. The video-sharing app has said it will move its HQ, but it could even be bought by a U.S. firm. Music Business Worldwide offered a number of reasons why that company could, and maybe should, be Apple.

TikTok’s global addictive appeal is no accident. The app’s advanced artificial intelligence capabilities and powerful recommendation algorithms are key factors behind the 68 billion hours spent by its users in the app last year. Case in point: respected investor and tech industry commentator Connie Chan recently wrote a piece in which she called TikTok “the first mainstream consumer app where artificial intelligence is the product”… In an increasingly competitive music streaming market, with Apple Music’s primary rival Spotify known for excelling in content recommendation, TikTok’s AI baked into the the Apple Music ecosystem could be Spotify’s kryptonite.

DNA Company ‘GEDmatch’ Hacked in Data Breach

First, over a million DNA profiles from GEDmatch were leaked. Then, email addresses from the breach were used in a phishing attack against users of genealogy website MyHeritage.

As a result of this breach, all user permissions were reset, making all profiles visible to all users. This was the case for approximately 3 hours. During this time, users who did not opt in for law enforcement matching were available for law enforcement matching and, conversely, all law enforcement profiles were made visible to GEDmatch users.

If GEDmatch sounds familiar, it was the DNA database used to identify the Golden State Killer.