Security firm Symantec has found a vulnerability in WhatsApp and Telegram's Android apps which could let hackers intercept and alter files sent between users, such as photos, documents, or videos.Although Symantec made recommendations to the developers to shore up their security, WhatsApp said the suggested changes would "create privacy complications" and "limit how photos and files could be shared."Visit Business Insider's homepage for more stories.Security firm Symantec says it has found a flaw in the Android apps for WhatsApp and Telegram, which could allow hackers to "manipulate" files transferred between users.According to a Symantec blog published Monday, the flaw relates to the fact that the messaging apps can save files such as photos or videos automatically to your phone's gallery or external storage.This is something WhatsApp does automatically unless a user opts out in the settings.
Chinese vendor Huawei is reportedly doubling down on Italy while scaling back what little presence it has in the US even further.Thomas Miao, Huawei’s Italian boss, announced the company will invest over a billion bucks a year for the next three years in Italy, according to a Reuters report.No such pledge can be made without a few strings attached, however, and Miao apparently called on the Italian state to ensure a level playing field for Huawei in the country, though its ‘golden power’ that allows it to poke its nose into the telecoms sector if it feels like it.We’re told Italy recently augmented this power in apparent response to security concerns over the involvement of Huawei and ZTE in the country’s 5G network and Miao wants to make sure those powers will be used with equal vigour towards Ericsson and Nokia too.There were no overt conditions attached to the investment, but it seems clear that it might suddenly disappear if the Italian political environment deteriorates for Huawei.Meanwhile the WSJ reports that Huawei plans extensive layoffs in the U.S.
Cooking sous vide (French for ‘under vacuum’) involves the slow process of cooking vacuum-sealed meats and vegetables in low heat in a water bath.The method takes a long time (typically one to seven hours) and is done to ensure that the food gets cooked evenly while retaining moisture.Amazon slashed the prices on ChefSteps and Instant Pot Sous Vide for a limited time.ChefSteps has created what it claims to be the smartest and smallest sous-vide machine on the planet, the Joule.The first Joule is made of white polycarbonate, a thermoplastic polymer, and weighs 1.1 pounds.The second one is a little heavier at 1.3 pounds and is also made with polycarbonate, but with a magnetic stainless-steel base and cap.
The CTA expects tech sales to $400 billion for the first time, and smart home safety, smart speakers, and home robots are leading segments in that drive.The CTA’s estimates are based on factory sales figures so far this year for more than 300 consumer tech products and related software and services.Earlier this month, a Thinknum opinion piece used a single data measure, Amazon sales rankings, to suggest consumers are over smart home tech and interest is dwindling.Implying that smart home gadgets, home automation, and the Internet of Things (IoT) all stemmed from The Clapper in 1996 (“Clap on, Clap off”), the Thinknum author suggests smart home devices may have appealed to an early few, but most people don’t care.In The Smart Audio Report this spring, NPR and Edison Research found that 21% of U.S. adults — 53 million people — owned smart speakers and of that number 69% used the devices daily.Among smart speaker owners, 48% reported owning one device, 22% said they had two, and 30% said they owned three or more smart speakers.
Ars Technica seeks a Technology Reporter with deep expertise in GPUs, CPUs, systems architecture, storage innovations, networking, and other consumer-focused hardware.The Technology Reporter will report to the Senior Reviews Editor and will produce daily content including informed news and analysis—plus regular long-form reviews with an emphasis on benchmarks and testing as well as the analysis Ars Technica is known for.We are looking for a strong writer who can not only grok the business that drives today’s technological innovations but who can also write clean and compelling prose accessible to readers from a wide variety of technical backgrounds.Because Ars Technica covers a range of products for multiple types of technologists, we need someone who can understand the needs of readers with differing technology preferences and workflows—and who can serve all of those readers well with analysis.This can be a remote position, but we prefer candidates in the San Francisco Bay area or the New York City area.At least three years experience reviewing tech products and reporting on the industry
After looking at data analysis of departure delays in UK airports, the PA news agency has rounded up the worst offenders, calling out Spanish airline Vueling as the most egregious with delays averaging half an hour.Vueling is none too happy about being awarded the title, and blames strikes in France as the source of its troubles."During these strikes, Vueling flights to and from Barcelona and the UK could not fly straight across France but instead flew south of the Pyrenees and into the Atlantic, before looping back towards Britain," explained a spokesman."The location of Vueling's [Barcelona] hub close to Marseille means it has been particularly badly affected."Thomas Cook came in a close second, with delays of 24 minutes, followed by Wizz Air with 23 minute delays, but they neglected to offer any excuses, so we assume they're just plain tardy.Norwegian Air UK and Eurowings rounded out the top five, with an average delay of 22 minutes.
It has been more than half a century since Russia developed its last new spacecraft for carrying humans into orbit—the venerable Soyuz capsule, which still flies both Russian cosmonauts and American astronauts into orbit today.However, over the last decade, the Russian space program has been designing and developing a new vehicle, named Federation.Like NASA's own Orion spacecraft, the Federation capsule has been beset by delays and cost overruns for more than a decade's worth of development.But when it flies, possibly as early as 2022 aboard a Soyuz-5 rocket for a test flight, Federation would be the rare human vehicle designed to fly beyond low-Earth orbit.Putin unhappy with launch delay, sacks official believed responsibleHowever, Russian sources are reporting a problem with the vehicle's launch escape system.
Imagine you are in a meeting, furiously taking notes as the marketing manager speaks and shows a slide deck to review your brand’s content marketing strategy.And what about those quick conversations when your manager stops by your desk and tells you about an element in the strategy?Text-dominated documents or presentations with a few reference images thrown in don’t work well.To get colleagues and upper management better acquainted with using your content marketing strategy, break it down visually.The mind map below clearly outlines the aspects of the strategy, including suggested tools, how to set goals, and how to conduct effective meetings.TIP: Print the strategy mind map and place it in meeting rooms so everybody can see how powerful visuals can be in conveying information.
With this vulnerability, what you see on WhatsApp and Telegram might not be what was sent.Despite the secure messaging apps' end-to-end encryption protecting people from government surveillance, researchers from Symantec disclosed flaws that could allow potential hackers to alter images and audio files.Secure messaging apps are an important tool for activists, politicians and dissidents who want to keep their conversations protected from surveillance.In May, reports disclosed a WhatsApp flaw that allowed hackers to install spyware on devices with a simple phone call.The security flaw stemmed from how media files are stored on WhatsApp and Telegram, Symantec said in a blog post.On WhatsApp, files are stored externally by default, while on Telegram, the vulnerability is present if "Save to Gallery" is enabled.
Microsoft’s cloud services has run into a fresh roadblock in Germany, after the state of Hesse ruled it is illegal for its schools to use Office 365 citing “privacy concerns.”The Hesse Commissioner for Data Protection and Freedom of Information (HBDI) ruled that using the popular cloud platform’s standard configuration exposes personal information about students and teachers “to potential access by US authorities.”In declaring that Windows 10 and Office 365 is not compliant with EU General Data Protection Regulation (GDPR) for use in schools, this development ends years of debate over whether “schools can use Microsoft’s Office 365 software in compliance with data protection regulations.”The heart of the issue concerns the telemetry information sent by Windows 10 operating system and the company’s cloud solution back to the US.This information can include anything from regular software diagnostic data to user content from Office applications, such as email subject lines and sentences from documents where the company’s translation or spellchecker tools were used.Collection of such information is a violation of GDPR laws that came into effect last May.
Quantum computers are expected to be commonplace in the next five to 10 years and promise vast increases in processing power over silicon chips.With more powerful computers, and the ability to carry out more mathematical operations every second, contemporary encryption algorithms all of a sudden provide much less security than they did in a time before quantum computers.Although this issue will likely come into play within five to 10 years, developing security measures against quantum computers is a longterm process.Why should we be concerned?Step back and think about that for a second in the context of banking, and everything that comes with having a bank account.Prof. Tittel told us that “Quantum key distribution (QKD) promises secure digital communication, ultimately worldwide, that cannot be broken – not even by a quantum computer.”
Using a robotic sub, a team of investigators has detected traces of radiation leaking from Komsomolets – a Soviet nuclear submarine that sank 30 years ago in the Norwegian Sea.Its captain managed to bring the beleaguered sub to the surface, but it sank about five hours later.All 42 sailors were killed in the incident, known as the Komsomolets disaster.Normally, scientists extract samples of water near the sub, but this time around the researchers deployed Aegir 6000 – a remotely operated vehicle (ROV) that was dispatched and monitored from the research vessel G. O. Sars.“We have been wanting to do a survey with an ROV for a number of years,” said expedition leader Hilde Elise Heldal in the press release.“Aegir 6000 allows us to see exactly where we are taking samples around the wreck, and equally importantly we’ve been able to use its cameras to zoom in and study the whole nuclear submarine section by section.”
Amazon Prime Day is officially in full swing.The retail giant is offering thousands of tech deals on smart home devices.If you are searching for powerful vacuums you can use to clean your pet’s hair from carpets and hard floorings, you just found it.Only for Prime Day, you can have it for as low as $347.Cleaning those will indeed be stressful if you don’t have the right equipment.Engineered for homes with pets, the Dyson Vacuum Cleaner will dig out that hair everywhere your pet gets.
Huawei may still be facing an uncertain future over its access to licensed versions of Android and Windows operating systems, but it’s been busy readying in-house replacements in case the tide turns against its favor.Now, the world’s second largest phone maker has filed a trademark application with the European Union Intellectual Property Office, attempting to register the name “Harmony” for its mobile and computer operating systems.The application is dated July 12, 2019, and is currently under examination.The description of the application reads: “Downloadable operating system programs; Recorded operating system programs; Mobile operating systems; Computer operating systems; Downloadable computer operating programs and computer operating systems.”That description hints Huawei might be attempting to create a cross-platform operating system that’s compatible with both desktops and smartphones.The company — which has found itself caught in the cross hairs of a trade war between China and the US — had earlier trademarked an OS called HongMeng in China, but this was later revealed to be for IoT devices.
Apple is investigating a report of an iPhone 6 that exploded in the hands of an 11-year-old girl in California, partially burning her.“I was sitting down, and I had my phone in my hand and then I saw sparks flying everywhere and I just threw it on a blanket,” Kayla Ramos told 23ABC.“I was right here on the bed and the phone managed to burn through this blanket and make these holes.”Ramos said that she burned herself, but thankfully, it was the blanket and bed that sustained most of the damage.She said that she mostly only uses the smartphone to watch YouTube videos.The iPhone 6, meanwhile, was charred and nearly unrecognizable.
What you need to know from infosec land latelyEarlier this month, an alert went out to Ruby on Rails developers after it was discovered that a popular package had been hijacked and injected with malicious code.Tute Costa was going through the gems used for his Ruby application and checking for updates when he noticed that something was amiss with the strong_password package.It was eventually concluded that the GitHub account managing the gem had been hijacked from its original owner and then had a bit of malicious code inserted."If it didn’t run before (checking for the existence of the Z1 dummy constant) it injects a middleware that eval‘s cookies named with an ___id suffix, only in production, all surrounded by the empty exception handler _!function that’s defined in the hijacked gem, opening the door to silently executing remote code in production at the attacker’s will."
Xiaomi phones have always sold like pancakes in China but it has had a harder time gaining traction in other markets.Part of that is due to Xiaomi’s custom MIUI interface that may not appeal to markets outside of China.Surprisingly, the company recently jumped on the Android One program and it wasn’t even just a one-time publicity stunt.Images of a Mi A3 phone have now popped up on the Internet to seemingly prove that third time’s a charm.Xiaomi’s Android One phones aren’t exactly on the same level as its main Mi line.Just like any other Android One phone, it focuses more on making a pure Android phone that’s affordable to a certain market segment.
Sponsored webcast Moving to the cloud is not as simple as we have sometimes been led to believe.Many organisations are eager to benefit from the functionality and convenience that the cloud offers but find themselves constrained by the past.Complexity, sunk costs and licensing are among the challenges that lie along the road from one environment to another and are often overlooked.Following on from an overview of the cloud market we discussed in an earlier webcast that some of you may have attended, we now move on to the practicalities of making the switch.In this latest webcast, Mark Walker, head of technology at Derby City Council, will talk about how he and his team negotiated the bumps they encountered as the mid-England council migrated to the public cloud, and shares the valuable lessons they learned along the way.The challenges public sector organisations face and the potential costs of overcoming them
Huawei’s fate still hangs in the balance despite some on the US side talking about easing some but definitely not all restrictions.That might not be enough for Huawei to completely change its course and scrap the plans it made to compensate for the effects of the restrictions.One of those is the planned layoffs in its US-based R subsidiary that could affect no small amount of American jobs.Some might see it as retaliation but, to be fair, Huawei doesn’t have much choice in the matter.The US blacklist forbids US companies from supplying US-sourced technology to Huawei.Since that is exactly what Huawei’s Futurewei Technologies research and development subsidiary does, that business is pretty done for.