Your Facial Data is Worth a $5 Gift Card to Google

Google employees are stopping people in public and offering them a US$5 gift card in exchange for their facial data. The company is thought to be working on a Face ID authentication system for the Pixel 4.

“I assume they’ll use the data to train a neural network to be able to recognize what a face is,” he replied. “Then you train your own phone on what your specific face looks like. And that’s what gets used to unlock your phone, Face ID-style, but more accurately.”

Add three zeroes to that Google, and then I’ll discuss it.

Google's New reCAPTCHA is an Invisible Tracking Beacon

Google’s reCAPTCHA bot detector is now an invisible web beacon and currently on over 650,000 websites.

With reCaptcha v3, technology consultant Marcos Perona and Akrout’s tests both found that their reCaptcha scores were always low risk when they visited a test website on a browser where they were already logged into a Google account. Alternatively, if they went to the test website from a private browser like Tor or a VPN, their scores were high risk.

A Sorry Tale of the Nest Thermostat Gone Wrong

Over at Inc.com, Jason Aten tells the sorry tale of the Nest thermostat and its history. When it launched, it was a glorious, must-have product. Then Google bought Nest in 2014 and things went south, according to author Aten. Fascinating reading .

Google Builds HTTPS Directly Into Top Level Domains

More websites have encrypted their traffic than ever, but there is a loophole. Some use a mixture of HTTPS and unsecure HTTP. Google is closing this by building HTTPS protection directly into certain top level domains.

Which means that today, when you register a site through Google that uses “.app,” “.dev,” or “.page,” that page and any others you build off it are automatically added to a list that all mainstream browsers, including Chrome, Safari, Edge, Firefox, and Opera, check when they’re setting up encrypted web connections. It’s called the HTTPS Strict Transport Security preload list, or HSTS, and browsers use it to know which sites should only load as encrypted HTTPS automatically, rather than falling back to unencrypted HTTP in some circumstances. In short, it fully automates what can otherwise be a tricky scheme to set up.

Google Pixel 4 Gives us a Hint of iPhone XI

Google just shared a photo of its upcoming Pixel 4 phone, and I think it gives us a hint of what the iPhone XI will look like. Android manufacturers are notorious for copying the appearance of iPhones, like the notch. The Pixel 4 shows a square camera module on the back, so I think it’s likely the rumors and mockups of a square iPhone XI camera module with three cameras are probably correct.

Well, since there seems to be some interest, here you go! Wait ’til you see what it can do. #Pixel4

Privacy is a Luxury Item? Think Again

Google CEO Sundar Pichai says privacy shouldn’t be a luxury item.  Responding at Computerworld, Jonny Evans writes:

The crux of Google CEO Sundar Pichai’s argument against firms such as (obviously including but never named) Apple is that his company offers convenience in exchange for personal secrets, makes its services available for free, and has a “profound commitment” to protecting user privacy.

Author Evans lays bare the reality of how Google operates and the shallowness of Pichai’s whines.

Google Assistant Can Read Your Kids a Bedtime Story

If you have Google Assistant and the latest version of Google Play Books on your iOS device, it can now read your kids a bedtime story.

Ahead of National Tell a Story Day taking place on Saturday, youngsters now have more ways to hear a bedtime tale. As of today, the feature will be available on iOS and Android phones in English in the US, UK, Canada, Australia and India.

Sounds like a great feature. When I asked Siri to read me a bedtime story, she said: “Next you’ll be asking me for a glass of milk. And a dark matter cookie.” Damnit Siri, that doesn’t even make sense.

For Years, Google Sabotaged Firefox

In the latest news of anticompetitive corporate behavior, a former Mozilla executive said Google sabotaged Firefox for years.

“When Chrome launched things got complicated, but not in the way you might expect. They had a competing product now, but they didn’t cut ties, break our search deal – nothing like that. In fact, the story we kept hearing was, ‘We’re on the same side. We want the same things’,” the former Mozilla exec said.

I encourage everyone to read the Twitter thread.

iPhones Aren’t Safe From Google’s Sensorvault Database

Google has a database called Sensorvault. It contains location data of users and shares it with law enforcement—if they have a warrant, of course. Apple honors lawful requests as well. But Jennifer Valentino-DeVries wonders whether the database is too broad.

Google would not provide details on Sensorvault, but Aaron Edens, an intelligence analyst with the sheriff’s office in San Mateo County, Calif., who has examined data from hundreds of phones, said most Android devices and some iPhones he had seen had this data available from Google…

“It shows the whole pattern of life,” said Mark Bruley, the deputy police chief in Brooklyn Park, Minn., where investigators have been using the technique since this fall. “That’s the game changer for law enforcement.”