Apple’s iMessage may have dodged a regulatory bullet by being too small… in Europe

andreasc
-
0
Apple’s iMessage may have dodged a regulatory bullet by being too small… in Europe
[ad_1]

The EU has been doubling down on regulating tech giants with the aim of allowing competition to thrive.  For one, it has been investigating Apple (alongside other tech giants) for being a monopoly and has been working on ways to limit its power. However, now Bloomberg reports that it seems the EU is leaning towards letting iMessage off the hook.

EU seems to find iMessage is not that popular to require a regulatory leash


iMessage was among the Apple services that are being investigated for anti-competitive practices by the EU. Other Apple services that are still under scrutiny include the App Store, Safari, and iOS in general. The investigation on iMessage continued on for five months, and EU watchdogs have now reportedly determined the service isn’t to be regulated for anti-competitiveness… well, because it isn’t big enough in Europe. iMessage is extremely popular in the U.S., but in Europe, it isn’t as much. At least when it comes to business users. However, the information about the investigation isn’t official yet and comes from “people close to the matter”, sources that have remained unnamed. According to the info, EU regulators seem to think that iMessage isn’t big enough in Europe and thus doesn’t qualify as being an “important gateway”.Apple is far from being able to sigh of relief though. The investigation will be concluded in February 2024, so there’s plenty of time for a swift change of direction. On top of that, other Apple services will not be allowed to roam freely on the market. For example, the Digital Markets Act will force Apple to open up iOS for rival app stores, which the company may actually do as soon as next year.

These investigations and regulations can force big tech giants to make big changes to how their services operate within the EU, and could even have effects globally. One such regulation has already forced Apple to switch to USB-C charging ports instead of the good-old Lightning.


[ad_2]
Source link

SLAM Attack Gets Root Password Hash in 30 Seconds

andreasc
-
0
SLAM Attack Gets Root Password Hash in 30 Seconds
[ad_1]

Spectre is a class of speculative execution vulnerabilities in microprocessors that can allow threat actors unauthorized access to sensitive data.

Hackers exploit Spectre because it enables them to extract confidential information by manipulating the speculative execution capabilities of CPUs, bypassing traditional security measures.

Cybersecurity researchers at Systems and Network Security Group of VU Amsterdam recently identified SLAM attack that gives attackers access to the root password hash in 30 seconds by exploiting the hardware security.

SLAM Attack Gets Root Password

SLAM probes Spectre’s residual attack space on current and future CPUs with Intel LAM. 

It bypasses new transient execution methods, like BHI or Inception, and exploits an overlooked class of Spectre disclosure gadgets, avoiding standard “masked” gadgets using secret data to index arrays.

Secret data to index arrays (Source – VUSec)

Uncommon code patterns limit standard Spectre gadgets in regular software, like the Linux kernel with believed non-exploitable gadgets. 

While the SLAM concentrates on various code patterns, especially pointer-chasing snippets, “unmasked” devices that exploit confidential data as pointers are produced.

Besides this, the common code breeds widespread unmasked gadgets. However, the scanner developed by the researchers discovered tens of thousands in Linux, with hundreds ripe for exploitation.

SLAM uses unmasked gadgets for userland data leaks (ASCII kernel data). Not only that, but researchers even extract root password hash in under 30 seconds on the latest Ubuntu, emulating Intel LAM.

CPUs Impacted

SLAM targets future CPUs, exploiting upcoming linear address masking features like Intel’s LAM and AMD’s UAI. 

Despite being designed for security, SLAM reveals that loosening canonicality checks can expose vulnerabilities, affecting even CPUs with weak checks. 

Here below, we have mentioned all the CPUs that are impacted:-

  • Existing AMD CPUs are vulnerable to CVE-2020-12965.
  • Future Intel CPUs supporting LAM (both 4- and 5-level paging).
  • Future AMD CPUs support UAI and 5-level paging.
  • Future Arm CPUs are supporting TBI and 5-level paging.

SLAM innovates data leakage through hidden gadget channels, exploiting address masking and microarchitectural race conditions on AMD CPUs.

To get around SMAP mitigation, it switches cache covert channels with translation-based ones. For an exploitable covert channel, security experts use sliding methods and just-in-time reload buffers.


[ad_2]
Source link

Android phones can be taken over remotely – update when you can

andreasc
-
0
Android phones can be taken over remotely – update when you can
[ad_1]

Android phones are vulnerable to attacks that could allow someone to takeover a device remotely without the device owner needing to do anything.

Updates for these vulnerabilities and more are included in Google’s Android security bulletin for December. In total, there are patches for 94 vulnerabilities, including five rated as “Critical.”

The most severe of these flaws is a vulnerability in the System component that could lead to remote code execution (RCE) without any additional execution privileges required. User interaction is not needed for exploitation.

This vulnerability, referenced as CVE-2023-40088, affects a function that is used for Bluetooth communication, so the “remote” part is limited to “close range” since the average Bluetooth range is about 30 feet (10 meters). Successful manipulation with a specially crafted input leads to a use after free vulnerability. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

Another critical vulnerability (CVE-2023-40077) that looks problematic is an Elevation of Privilege (EoP) vulnerability in the Android Framework. Successful exploitation could lead to a race condition. A race condition, or race hazard, is the behavior of a system where the output depends on the sequence or timing of other uncontrollable events. It becomes a bug when events do not happen in the order the programmer intended. In this case it could provide a successful attacker with permissions to perform actions they shouldn’t be able to.

Security patch levels of 2023-12-05 or later address all of these issues. To learn how to check a device’s security patch level, see how to check and update your Android version. The updates have been made available for Android 11, 12, 12L, 13, and 14. Android partners are notified of all issues at least a month before publication, however, this doesn’t always mean that the patches are available for devices from all vendors. Android vendors such as Samsung and OnePlus have pledged to release security updates once a month. Google usually ships out security updates to Pixel phones within two weeks or sooner.

We don’t just report on vulnerabilities—we identify them, and prioritize action.

Cybersecurity risks should never spread beyond a headline. Keep vulnerabilities in tow by using ThreatDown Vulnerability and Patch Management.


[ad_2]
Source link

Galaxy S24 Ultra leak compares its design with S23 Ultra

andreasc
-
0
Galaxy S24 Ultra leak compares its design with S23 Ultra
[ad_1]

There is no stopping to Samsung Galaxy S24 leaks. The closer we get to the launch event, the more frequent and detailed leaks are getting. The latest leak shows the edges of the Galaxy S24 Ultra and Galaxy S23 Ultra side-by-side, comparing their design.

Leak highlights design differences between Galaxy S24 Ultra and S23 Ultra

If you have been following Galaxy S24 Ultra leaks in recent months, you might already know that the new Samsung flagship mostly looks identical to its predecessor. The only notable difference is the flat display, a switch from a curved panel on the 2023 model. With this change, the frame appears wider when looked at from the front.

In the image below, you can see that the Galaxy S24 Ultra (in grey) has a flat screen while the Galaxy S23 Ultra (in black) has its display wrapping around the frame. Looking from the front, the latter’s frame isn’t visible but the former’s frame sticks out a bit. Additionally, Samsung has redesigned the speaker cutout. Instead of tiny holes, it is now a coin slot-like strip.

Samsung Galaxy S24 Ultra design leak 1

The Korean firm also appears to have flattened the clicky S Pen head. And if you paid attention, there’s one fewer hole at the bottom. The hole between the USB-C port and the speaker slit is missing on the Galaxy S24 Ultra. The 2023 model has it, with Samsung calling it an “air vent hole.” The other hole near the SIM tray is for the microphone. It turns out the upcoming model moved the air vent hole to the top, next to the secondary microphone.

Apart from these changes, the Galaxy S24 Ultra’s power and volume buttons look a little flattened out too. Everything else, including the positioning of the antenna lines, is unchanged. Note that the new Samsung flagship features a titanium frame, while the Galaxy S23 Ultra has an Armor Aluminum frame.

Samsung could have made the frame narrower

As pointed out by X tipster Ice Universe, Samsung could have kept a narrower frame on the Galaxy S24 Ultra. However, that would make the frame completely flat. Effectively, the edges will get sharper, making the phone less comfortable when held in hand for an extended period. The Korean firm seemingly prioritized user experience over aesthetics.

Samsung may strike a better balance between the two with the Galaxy S25 series, which is rumored to undergo significant design changes. Leaks about the 2025 flagships won’t start coming in bulk until late 2024. However, we may get to learn a few more things about them once the Galaxy S24 is out of the way. The upcoming flagship lineup is expected to debut on January 17, 2024.

Samsung Galaxy S24 Ultra design comparison


[ad_2]
Source link

Google offers a possible fix to regain your lost files from Google Drive’s recent data loss glitch

andreasc
-
0
Google offers a possible fix to regain your lost files from Google Drive’s recent data loss glitch
[ad_1]

Data loss is a nightmare that many of us have experienced, and recently, Google Drive users came face-to-face with this frustration when the desktop app encountered a bug that wiped out files for some users. Fortunately, as reported by The Verge, Google has swooped in to save the day with a solution to help users get their missing files back.


While it is not as simple as pressing a magic button, Google has provided a clear-cut guide to restoring your files. However, it is not foolproof, requires local storage, and may need a trip to the command line interface. Now, let’s see what to do to reclaim your lost files.

  • Download the latest Drive for desktop: Ensure you have the latest version of Drive for desktop installed (version 85.0.13.0 or higher).
  • Run the recovery tool: Launch the Drive for desktop app and follow these steps: 
  1. Click the Drive for the desktop icon in the menu bar or system tray. 
  2. Press and hold the Shift key while clicking “Settings.” 
  3. Select “Recover from backups.”

  • Initiate the recovery process: The recovery process will start, and you will receive a notification indicating “Recovery has started” or “No backups found.”
  • Recovery completion: If a backup was found, the recovery will be complete, and you will receive “Recovery is complete.” Otherwise, you will need to free up disk space and try again.
  • Insufficient storage space: If insufficient disk space is detected, you can either free up space and restart the recovery or use the command-line interface to specify a different recovery file path on a volume with more space.

If you stumble upon any issues during the recovery process, Google suggests using the Drive for desktop app’s feedback form, adding the hashtag #DFD84, and ticking the box to include diagnostic logs. For more advanced users, there is an alternative recovery method via the command line interface, as outlined on Google’s support page. And if all else fails, check out the troubleshooting suggestions.

[ad_2]
Source link

Redmi Note 13 Pro series will launch globally next month

andreasc
-
0
Redmi Note 13 Pro series will launch globally next month
[ad_1]

Xiaomi announced its Redmi Note 13 series back in September. At that time, we did not know when to expect those phones to reach global markets, now we do. The Redmi Note 13 Pro series will launch globally next month.

The Redmi Note 13 Pro series is expected to launch globally next month

Do note that I said the Redmi Note 13 Pro series, not the Redmi Note 13 series. That’s because the company’s teaser mentions the Pro devices only. So, for the moment, we’ll assume that that’s all we’re getting, even though the vanilla phone will likely launch too.

Redmi Note 13 Pro global launch confirmation

This confirmation was for India specifically, but the European markets will likely get the phone around the same time. That’s usually the case when it comes to the Redmi Note series, so… there you go.

Back in September, Xiaomi announced three Redmi Note 13 devices. The company introduced the Redmi Note 13, Redmi Note 13 Pro, and the Redmi Note 13 Pro+. The Xiaomi Redmi Note 13 Pro+ was the most powerful device, and that’s the one that Xiaomi teased during a recent India event.

The Redmi Note 13 Pro+ does look like a premium device

The Redmi Note 13 Pro+ looks like a premium phone. It has very thin bezels, a curved display, and a clean-looking backplate. The device includes the MediaTek Dimensity 7200 Ultra chip, which is a very capable 4nm processor.

It also includes up to 16GB of RAM in China, and a 6.67-inch 120Hz display with a 1,800 nits peak brightness. On top of all that, a 5,000mAh battery is included with 120W charging support, and the included charger.

Even the main camera doesn’t look half-bad, it’s a 200-megapixel unit from Samsung. The ultrawide and macro cameras on the back do not look too impressive, but Xiaomi had to cut costs somewhere.

In any case, the Redmi Note 13 Pro+ does seem like a compelling mid-range package, and that device will be coming to global markets for sure, based on the company’s teaser. In fact, the aforementioned India event was shot on that phone, in its entirety.


[ad_2]
Source link

Facebook Messenger boosts security, enables message editing & more

andreasc
-
0
Facebook Messenger boosts security, enables message editing & more
[ad_1]

Facebook is now rolling out new features to Facebook Messenger, which not only boost overall security, but add a much-requested feature, message editing. That’s not all, though, so let’s dive in, shall we?

Meta says that this is the “biggest set of improvements to Messenger since it was first launched in 2011”. That’s a big claim. The headline of this update is definitely a huge boost on the security side of things.

Facebook Messenger gets improved security, message editing, and various other improvements

End-to-end encryption is now a default for both private chats and calls on Messenger and Facebook. What does that mean? Well, it basically means that not even Meta can see your chats and calls.

Messenger will ask you to set up a PIN, though, so that you can recover your messages later on.

You can now edit messages, while some changes to disappearing messages have also been made

Facebook Messenger editing messages 1

The second big change that Meta is rolling out has to do with the messages themselves. You
will finally be able to edit messages in Facebook Messenger. Do note that the editing window will close after 15 minutes, though.

Meta also made a change to disappearing messages. They now last for 24 hours after being sent. The company also improved the interface for disappearing messages, so it’s easy to notice when disappearing messages have been activated. Do note that they’re only available for end-to-end encrypted conversations.

Facebook Messenger disappearing messages boost

Meta is also making privacy changes regarding read receipts, and improves photo & video experience

The company is also making a change to read receipts. You can now decide whether you want others to see when you have read their messages. This brings a whole new privacy aspect to the experience, though not everyone will like this.

Meta is making photos and videos easier to access. The company has also upgraded the image quality, added some fun layouts, and will also provide people with more controls. We’re not really sure what that means exactly, but there you have it. We do know that Facebook is testing HD media and file sharing improvements already.

Facebook Messenger photo and video improvements

Voice messages are getting more popular, so the company improved those too

Facebook Messenger is now also allowing you to play voice messages at 1.5x and 2x speeds, in case you want to get through them faster. You can also pick up from where you left off. Facebook recognizes that voice messages are growing in popularity.

Do note that the global rollout for all of these features may take a couple of months to complete, so be patient.


[ad_2]
Source link

Meta Messenger ramps up security with default end-to-end encryption and rolls out new features

andreasc
-
0
Meta Messenger ramps up security with default end-to-end encryption and rolls out new features
[ad_1]
Meta’s Messenger is stepping up its game by making end-to-end encryption the default for private chats and calls. This added layer of security ensures that your messages and calls are shielded from prying eyes, providing privacy from the sender’s device to the recipient’s. Meta emphasizes that even the company can’t peek at your messages unless you choose to report a message.
In addition to the security boost, Meta is rolling out some other new features. The “Edit a Message” feature lets you edit those pesky typos or mistakes within 15 minutes of hitting the send button—perfect for those quick, error-prone messages.
 

The company also rolls out a new handy addition, the “Disappearing Messages” feature, keeping your messages visible for only 24 hours in end-to-end encrypted conversations. The improved interface makes it easier to see when this feature is activated.

Another privacy-focused feature is also rolling out, and it’s likely to be well-received by many users. Ever find yourself accidentally opening a message or simply wanting to read it without immediately responding? It can be challenging, especially after the receiver sees you’ve viewed it. With the upcoming Read Receipts Control feature, you can decide whether others can see when you’ve read their messages.

According to Meta, Messenger users share over 1.3 billion photos and videos daily. In response to this significant activity, the company enhances the user experience by making photos and videos more accessible. This includes improvements in image quality, the introduction of fun layouts, and the addition of more controls so you can reply or react to any photo or video within a collection.
 

Voice messaging is also getting an update, now allowing you to play voice messages at 1.5x or 2x speeds, pick up listening to a voice message from where you left off, and continue listening to a voice message when you navigate away from the chat or the app.

For the billion-plus Messenger users, the default end-to-end encryption will take a few months to roll out globally. Once your chats are upgraded, you have to set up a recovery method, like a PIN, to ensure you can restore messages in case of device changes or losses. The other new features should be available immediately.


[ad_2]
Source link

Galaxy S23 Ultra emerges as favorite Android camera on Flickr

andreasc
-
0
Galaxy S23 Ultra emerges as favorite Android camera on Flickr
[ad_1]

Samsung‘s S-series flagships are always among the best camera phones, particularly the Ultra model. This year’s Galaxy S23 Ultra offers a top-notch photography and videography experience, making it a great camera all-rounder. The result of a new survey is a testament to its camera quality. Photos shot by the Galaxy S23 Ultra are the most loved among all Android devices on Flickr.

Galaxy S23 Ultra photos outshine Android rivals on Flickr

Flickr is one of the world’s most popular online image-hosting services. It lets users upload photos to share with the world or save them privately for future use. Other users can like/love, comment, and share photos published publicly. Electronics Hub recently analyzed more than 1.16 million photos on Flickr and observed that photos captured with certain smartphones receive a higher number of average likes than others.

According to the study, Apple’s iPhone 13 Pro produces the most loved photos. It received 29.8 average likes among the surveyed photos on Flickr. Samsung’s Galaxy S23 Ultra and Galaxy S21 followed the iPhone with average likes of 21.7 and 20.9, respectively. The iPhone 12 Pro Max (17.1) and iPhone 14 Pro Max (16.6) make up the top five best camera phones based on average likes on Flickr.

Xiaomi’s Redmi Note 9 is next in the ranking, followed by the iPhone 14 Pro, iPhone 12 Mini, Google Pixel 7 Pro, and iPhone 12. Newer phones, such as the Pixel 8 series and iPhone 15 series, didn’t make it to the list. These devices recently hit the market, so photos from them may not have garnered enough likes on Flickr yet. The Galaxy S21 and iPhone 12 series have been around for a long, so it’s easy to see why they beat new iPhones and Pixels.

Most loved Flickr photos phones Galaxy S23 Ultra

Overall, this study doesn’t tell you the full picture. The devices that made it to the list aren’t the outright top ten best camera phones available today. Some of them are, such as the Galaxy S24 Ultra and the iPhone 14 Pro Max. But some others, including the iPhone 12 Mini and Galaxy S21, are relatively old and don’t pack the best camera hardware. Nonetheless, they capture photos well enough to wow Flickr users.

The study also evaluated the best digital camera brands and models

This study isn’t limited to smartphone cameras. It also evaluated the best digital camera brands and models, going deeper into photography types—landscape, wildlife, architecture, food, fashion, and portraits. Olympus, Leica, Fujifilm, Nikon, and Sony topped the list, in that order. Canon didn’t make it into the top five but its EOS M6 Mark II camera produced the most loved photos on Flickr. You can find the full report here.

Most loved Flickr phones cameras


[ad_2]
Source link

Meta starts testing more than a dozen AI experiences across its social apps

andreasc
-
0
Meta starts testing more than a dozen AI experiences across its social apps
[ad_1]
Meta announced this week it has ramped up security by adding default end-to-end encryption to Messenger and rolling out a bunch of other new features. On top of that, the social giant revealed over 20 AI generative experiences that are now being tested across Facebook, Instagram, Messenger, and WhatsApp.These AI experiences will touch various aspects of these social apps, including search, discovery, ads, business messaging and much more. In the coming weeks, select users should start seeing these new AI-related features before they’re made available to everyone.

One of the new AI generative experiences coming to Meta’s Messenger and Instagram is called reimagine. Meta AI will generate and share an initial image requested by a user, then their friends can press and hold on the picture to riff on it with a text prompt and Meta AI will generate a brand-new image.

Furthermore, Meta announced that it will roll out Reels in Meta AI chats. The new feature will help users with recommendations in the form of Reels. Say you want to travel to a certain location. Meta AI will recommend the best places to visit and share Reels of the top sites so that you don’t miss any important attractions.

Meta is also testing new ways to create and share AI-generated images on Facebook, such as using Meta AI to convert images from landscape to portrait orientation to make it easier to share them to Stories.

Meta starts testing more than a dozen AI experiences across its social apps

Also, the company is testing using Meta AI to find relevant information in Groups, which will prevent users from missing out on the conversations, as well as suggest topics for new chats.

On top of that, Meta AI is being used in the Marketplace to help users learn more about the products they’re looking to buy. Meta hopes that its AI experiences will improve its search capabilities for friends, Pages, Groups and Marketplace listings.

Starting today, Meta is expanding access to Meta AI’s text-to-image generation feature outside of chats, making it available in the US to start at imagine.meta.com.

Last but not least, Meta announced that it will roll out invisible watermarking in the coming weeks. The invisible watermark will be applied with a deep learning model, and it will be imperceptible to the human eye. Meta also says that the watermark will be resistant to common image manipulations like cropping, color change, screenshots and more.


[ad_2]
Source link
1...633634635...1,483Page 634 of 1,483