Group items tagged

"Now, there's a new concern: malicious apps developed by third parties and hosted by Amazon or Google. The threat isn't just theoretical. Whitehat hackers at Germany's Security Research Labs developed eight apps-four Alexa "skills" and four Google Home "actions"-that all passed Amazon or Google security-vetting processes. The skills or actions posed as simple apps for checking horoscopes, with the exception of one, which masqueraded as a random-number generator. Behind the scenes, these "smart spies," as the researchers call them, surreptitiously eavesdropped on users and phished for their passwords."

"On Tuesday, security firm Cleafy reported that TeaBot was back. This time, the trojan spread through a malicious app called QR Code & Barcode Scanner, which as the name suggests, allowed users to interact with QR codes and barcodes. The app had more than 10,000 installations before Cleafy researchers notified Google of the fraudulent activity and Google removed it."

"Ministers have paused a planned update to the NHS Covid-19 app after Apple and Google blocked it from their stores over privacy violations. The app, which aids contact tracing in England and Wales, uses technology built by the Silicon Valley companies to track interactions between users with their bluetooth signals and venue "check-ins"."

"Google says that will prevent the company from remembering where you've been. Google's support page on the subject states: "You can turn off Location History at any time. With Location History off, the places you go are no longer stored." That isn't true. Even with "location history" paused, some Google apps automatically store time-stamped location data without asking."

"Gmail users are under attack in a gigantic phishing operation that's spreading like wildfire across the internet right now. People took to Twitter to report receiving an email that looks like an invitation to join a Google Doc from someone they know. But when you click on the link to open the file, you are directed to grant access to an app that looks like Google Docs but is actually a program that sends spam emails to everyone you've emailed, according to a detailed outline of the attack on Reddit. "

"The Joker malware circumvents the Google Play app vetting process through a combination of code tweaks, execution method variation, and changes to how it downloads the payload allowing it to function, steal information, and trigger the WAP service sign-ups. Google has removed the 16 infected apps from the Play Store and disabled them on devices where they are installed, thought to be in the region of 120,000 devices. "

"Intentions aside, the app seems to cross some pretty serious privacy boundaries. Generally speaking, people like to choose who they identify themselves to, and having your online information freely available to anyone who sees you in public seems an uncomfortable prospect. Google seems to think so, too; the Web giant does not currently allow facial recognition apps on the MyGlass app store. "

"Geofence warrants, or reverse-location warrants, are a fairly new concept. With permission from a judge, they allow law enforcement to obtain anonymized data from Google from almost any device that was in a certain geographic area at a specific time. Police can then go back to Google for more specific user information on anyone they deem a suspect."

"The app, called Care19, and produced by a company called ProudCrowd that also makes a location-based social networking app for North Dakota State sports fans, generates a random ID number for each person who uses it. Then, it can "anonymously cache the individual's locations throughout the day," storing information about where people spent at least 10 minutes at a time, according to the state website. If users test positive for the coronavirus, they can provide that information to the North Dakota Department of Health for contact-tracing purposes so that other people who spent time near virus patients can potentially be notified."

"Apple and Google's tougher enforcement could preclude such apps from becoming realistic alternatives to the mainstream social networks. They now face the choice of either stepping up their policing of posts - undercutting their main feature in the process - or losing their ability to reach a wide audience."

"Users post violent and hateful content to Facebook and Twitter all the time, they argued - and no one was demanding those platforms get the boot from the app stores."

"The verification codes required for logging into a 2-step enabled account can be generated either using a mobile app - like Authy or Google Authenticator - or you can have them sent to your mobile phone via a text message or a voice call. The latter option however will not work if the mobile phone associated with your account is outside the coverage area"

"Google has developed and open-sourced a new JPEG algorithm that reduces file size by about 35 percent-or alternatively, image quality can be significantly improved while keeping file size constant. Importantly, and unlike some of its other efforts in image compression (WebP, WebM), Google's new JPEGs are completely compatible with existing browsers, devices, photo editing apps, and the JPEG standard."

A new Vonage app for the iPhone will be released late because of technical issues.

"(And, in fact, anonymity apps have brought positives along with the negatives. Not long ago, a post on Secret reported that Google had acquired the poster's five-person company and had hired everyone but her. Later posts revealed that she was the only female at the company and had been there since it was founded. The thread became the talk of Silicon Valley, generating a lively debate about suppressed sexism in the start-up community. The poster's ability to remain anonymous was key to this information coming out. She could stand up to power, speak without embarrassment, and avoid alienating potential employers who might take a dim view of her controversial statements. That's exactly why the First Amendment protects anonymous speech, and that's why the value of anonymity apps like Yik Yak shouldn't be summarily dismissed. "

"Most people are aware of the cookies that track them across the web, and the privacy-invading practices of Google search, but did you know Google's email service, Gmail, collects large amounts of data too? This was recently put into stark focus for iPhone users when Gmail published its app "privacy label" - a self-declared breakdown of the data it collects and shares with advertisers as part of a new stipulation on the Apple App Store."

"We are talking about vast fields of aggregate data, the scale of which is difficult to comprehend; this data can be parsed by the artificial intelligence recommendation algorithms that Google has pioneered, and that now steer everything from employment application processes to dating apps."