Covid-19 contact-tracing apps that rely on an API developed by Apple and Google and bluetooth technology cannot accurately measure the distance between users on public transport, a recently released study from Trinity College Dublin has found. From a report: The researchers of the study first tested the API on a group of volunteers who switched seats every fifteen minutes in a Dublin tram. They then ran the collected data through the detection rules of the Swiss, German, and Italian contact-tracing apps to see how often they correctly identified contact between users. Based on this, they found that the chance of an accurate detection was "similar to that of triggering notifications by randomly selecting from the participants in our experiments, regardless of proximity."

So, no better than random. This finding is the latest example of mounting skepticism among experts regarding the effectiveness of the technology underlying the apps which have been widely released -- but less widely used -- by governments across Europe and more recently the United States. Most contact-tracing apps in Europe and the United States use Apple and Google's exposure notification API, which in turn relies on in-built wireless Bluetooth technology to estimate the distance between two users and whether they've been in contact. What actually constitutes 'contact' is set by the developers of whichever app calls the API, but it's usually defined as being within 2 meters (~6.5 feet) of another user for at least 15 minutes. Once a user uploads a positive test result to a contact-tracing app, it notifies all contacted users and lets them know that they've been at risk of infection.

Microsoft is allowing some of its employees to work from home permanently. From a report: While the vast majority of Microsoft employees are still working from home during the ongoing pandemic, the software maker has unveiled "hybrid workplace" guidance internally to allow for far greater flexibility once US offices eventually reopen. The Verge has received Microsoft's internal guidance, and it outlines the company's flexible working plans for the future. Microsoft will now allow employees to work from home freely for less than 50 percent of their working week, or for managers to approve permanent remote work. Employees who opt for the permanent remote work option will give up their assigned office space, but still have options to use touchdown space available at Microsoft's offices. "The COVID-19 pandemic has challenged all of us to think, live, and work in new ways," says Kathleen Hogan, Microsoft's chief people officer, in a note to employees. "We will offer as much flexibility as possible to support individual workstyles, while balancing business needs, and ensuring we live our culture."

AmiMoJo writes: Yelp, the local search and review site, said it would post alerts on the pages of businesses where customers or employees have reported incidents of racism, the latest attempt by a U.S. company to introduce a tougher response system to confront discrimination after the police killing of George Floyd in May. The company, which offers a platform for users to rate places like restaurants, small businesses and popular tourist sites, said in a statement Thursday that it would use a "business accused of racist behavior" alert when there was "resounding evidence" that a business owner or employee had taken racist actions, including the use of racist slurs or symbols. This alert will always link to a news article from a "credible media outlet," Yelp said, without elaborating on which news organizations they considered to be credible or how it defined "resounding evidence." Yelp's announcement raised questions about how the company will enforce the initiative -- and how it will ensure that businesses were not falsely associated with racism or the target of defamatory reviews, which can significantly damage a business. Companies like Google and Facebook have also grappled with the difficult issues of moderating users on their online platforms.

Twitter, risking the ire of its best-known user, President Trump, said on Friday that it would turn off several of its routine features in an attempt to control the spread of misinformation in the final weeks before the presidential election. From a report: The first notable change, Twitter said, will essentially give users a timeout before they can hit the button to retweet a post from another account. A prompt will nudge them to add their own comment or context before sharing the original post. Twitter will also disable the system that suggests posts on the basis of someone's interests and the activity of accounts they follow. In their timelines, users will see only content from accounts they follow and ads. And if users try to share content that Twitter has flagged as false, a notice will warn them that they are about to share inaccurate information.

Google has removed this summer more than 240 Android apps from the official Play Store for showing out-of-context ads and breaking a newly introduced Google policy against this type of intrusive advertising. From a report: Out-of-context ads (also known as out-of-app ads) are mobile ads that are shown outside an app's normal container. They can appear as popups or as fullscreen ads. Out-of-context ads are banned on the Play Store since February this year, when Google banned more than 600 apps that were abusing this practice to spam their users with annoying ads. But despite the public crackdown and ban, other apps showing out-of-context ads have continued to be discovered -- such as in June this year. The latest of these discoveries come from ad fraud detection firm White Ops. In a blog post today, the company said it discovered a new cluster of more than 240+ Android apps bombarding their users with out-of-context ads -- but made to look like they originated from other, more legitimate applications.

Every toy, gadget and good you see on YouTube could soon be for sale online -- not on Amazon, but right on YouTube itself. From a report The world's largest video site recently started asking creators to use YouTube software to tag and track products featured in their clips. The data will then be linked to analytics and shopping tools from parent Google. The goal is to convert YouTube's bounty of videos into a vast catalog of items that viewers can peruse, click on and buy directly, according to people familiar with the situation. The company is also testing a new integration with Shopify for selling items through YouTube. A YouTube spokesperson confirmed the company is testing these features with a limited number of video channels. Creators will have control over the products that are displayed, the spokesperson said. The company described this as an experiment and declined to share more details. The moves have the potential to transform YouTube from an advertising giant into a new contender for e-commerce leaders such as Amazon and Alibaba.

Pakistan has banned popular short video app TikTok in the nation, citing circulation of videos that it deemed "immoral and indecent." From a report: The move comes months after the South Asian country raised serious concerns about the nature of some videos on ByteDance's app and the impact they posed on society. Pakistan Telecommunication Authority, the country's telecommunication authority, said in a statement Friday evening that despite the warnings and months-long time, TikTok "failed to comply with the instructions, therefore, directions were issued for blocking of TikTok application in the country." The authority had received a "number of complaints from different segments of the society" over the videos, it said.

An anonymous reader shares a report: The early days of the internet were full of predictions about access to information unleashing a wave of democratisation. More recently, views on the internet's impact have soured, as states use it to spy on dissidents and influence foreign elections. Opinions on this topic are abundant, but hard data are scarce. No one knows whether the Arab spring could have occurred without the internet, or whether Russia's online efforts to boost President Donald Trump's campaign had any effect. Nonetheless, scholars can sometimes find natural experiments to substitute for such counter-factual scenarios. A recently revised study by the economists Sergei Guriev, Nikita Melnikov and Ekaterina Zhuravskaya, which is now undergoing peer review, uses the growth of mobile broadband to reveal a link between internet access and scepticism of government. Most of the 4.1bn people now online got connected after 2010. To measure how new users' views changed as a result, the authors combined two datasets. First, for each year in 2007-18, they estimated the share of people in each of 2,232 regions (such as states or provinces), spread across 116 countries, that could access at least 3G-level mobile internet. Then they used surveys by Gallup, a pollster, to measure how faith in government, courts and elections changed during this period in each area.

In general, people's confidence in their leaders declined after getting 3G. However, the size of this effect varied. It was smaller in countries that allow a free press than in ones where traditional media are muzzled, and bigger in countries with unlimited web browsing than in ones that censor the internet. This implies that people are most likely to turn against their governments when they are exposed to online criticism that is not present offline. The decline was also larger in rural areas than in cities. A similar pattern emerged at the ballot box. Among 102 elections in 33 European countries, incumbent parties' vote-share fell by an average of 4.7 percentage points once 3G arrived. The biggest beneficiaries were parties classified as populist -- though this may simply have been because they happened to be in opposition when voters turned against parties in power, rather than because of their ideology.

An anonymous reader quotes a report from Ars Technica: For months, Apple's corporate network was at risk of hacks that could have stolen sensitive data from potentially millions of its customers and executed malicious code on their phones and computers, a security researcher said on Thursday. Sam Curry, a 20-year-old researcher who specializes in website security, said that, in total, he and his team found 55 vulnerabilities. He rated 11 of them critical because they allowed him to take control of core Apple infrastructure and from there steal private emails, iCloud data, and other private information.

Apple promptly fixed the vulnerabilities after Curry reported them over a three-month span, often within hours of his initial advisory. The company has so far processed about half of the vulnerabilities and committed to paying $288,500 for them. Once Apple processes the remainder, Curry said, the total payout might surpass $500,000. "If the issues were used by an attacker, Apple would've faced massive information disclosure and integrity loss," Curry said in an online chat a few hours after posting a 9,200-word writeup titled We Hacked Apple for 3 Months: Here's What We Found. "For instance, attackers would have access to the internal tools used for managing user information and additionally be able to change the systems around to work as the hackers intend." An Apple representative issued a statement that said: "At Apple, we vigilantly protect our networks and have dedicated teams of information security professionals that work to detect and respond to threats. As soon as the researchers alerted us to the issues they detail in their report, we immediately fixed the vulnerabilities and took steps to prevent future issues of this kind. Based on our logs, the researchers were the first to discover the vulnerabilities so we feel confident no user data was misused. We value our collaboration with security researchers to help keep our users safe and have credited the team for their assistance and will reward them from the Apple Security Bounty program."

As Facebook, Amazon, Apple and Google are being targeted by the House Judiciary Committee for abusing American antitrust law, one major company has managed to escape the glare: Microsoft. That's because they are now "the adult in the room in some ways on this issue," said Rep. Pramila Jayapal (D., Wash.), a Democratic member of the House Antitrust subcommittee, which has been diving into Big Tech's practices for the last 16 months. Yahoo Finance reports: Jayapal's Seattle district includes Amazon's headquarters and the company's practices, specifically how it uses data from third-party sellers, has been one of her major focuses. It's Congress's job to make sure "a company like Amazon can't just put a small business that produces diapers out of business by taking all of that market information that nobody else has access to, and using it to subsidize losses and push small companies out," Jayapal told Yahoo Finance.

She has also had a less-than-cordial relationship with Amazon CEO Jeff Bezos. During a Yahoo Finance interview this summer, Jayapal said she had never before met the billionaire. They did talk virtually in July when she grilled him during the hearings, but she said this week that communication since then has been sparse. "I've had an open door policy to speaking with Mr. Bezos and have invited him many times," she said. Though she has met with Amazon senior managers.

"The lesson here is self-regulation doesn't work," said Jayapal. She points to Microsoft as an example that Amazon should follow, of successfully working with the government. In 1998, Microsoft was the subject of Congressional antitrust inquiries and many wanted to break the company up. In the end, Bill Gates was able to avoid a breakup by promising to change his company's ways. The company had to "change its culture, change its lines of business," Jayapal said. The process of government involvement led to Microsoft creating a "platform for other small companies to thrive," she said. Jayapal also pointed to the Microsoft example as to why breaking up a company isn't always the best option. "Perhaps in retrospect, Amazon, after we've regulated them, after we've put through some of the recommendations that are in the report, we'll look back and say, "You know what? It's a good thing that that happened," she said.

Comcast has achieved a 10Gbps "technical milestone" that can deliver gigabit-plus download and upload speeds over existing cable wires, not fiber. ZDNet reports: Comcast has achieved a 10Gbps technical milestone by delivering 1.25Gbps upload and download speeds over a live production network using Network Function Virtualization (NFV) combined with the latest Data Over Cable Service Interface Specification (DOCSIS) hardware. This is being done with DOCSIS 4. With this cutting-edge cable internet technology, you can expect to see up to 10Gbps speeds downstream and up to 6Gbps upstream capacity over a hybrid fiber-coaxial (HFC) network. In its first real-world test, to a home in Jacksonville, Fla., technicians achieved its Gigabit plus speed using upon Comcast's Distributed Access Architecture (DAA). This is an edge-based computing model. This architecture has a suite of software-powered networking technologies, including digital fiber optics, "Remote PHY" digital nodes, and a cloud-based, virtualized cable modem termination system platform (vCMTS). The result? Comcast's team consistently measured speeds of 1.25Gbps upload and 1.2Gbps download over the connection.

According to a study by Dr. Raul Katz of Telecom Advisory Services, 10Gbps internet will generate at least $330 billion in total economic output and create more than 676,000 new jobs over the next seven years. It will do by enabling not just 8K video streams for everyone living in your home, but by enabling 5G access points, virtual reality applications, and telehealth. It's not just hardware that's making this possible. Comcast is a major open-source developer and user. As Comcast notes, "The trial was made possible not by a single technological innovation, but rather by a series of interrelated technologies that Comcast continues to test and deploy in its network, all powered by a DAA ecosystem. These include our increasingly virtualized, cloud-based network model." Comcast is working on the "10G" initiative along with NCTA, CableLabs, and SCTE, and other telecom and cable operators from around the world. In addition, Comcast and Charter Communications have worked closely to align on their approaches to 10Gbps and are driving technology standards and architectures to benefit everyone.

AmiMoJo shares a report from NPR: A federal judge in California has ordered that Twitter reveal the identity of an anonymous user who allegedly fabricated an FBI document to spread a conspiracy theory about the killing of Seth Rich, the Democratic National Committee staffer who died in 2016. The ruling could lead to the identification of the person behind the Twitter name @whyspertech. Through that account, the user allegedly provided forged FBI materials to Fox News. The documents falsely linked Rich's killing to the WikiLeaks hack of Democratic Party emails in the lead-up to the 2016 election.

While Twitter fought to keep the user's identity secret, U.S. Magistrate Judge Donna Ryu in Oakland, Calif., ordered on Tuesday that the tech company must turn over the information to attorneys representing Rich's family in a defamation suit by Oct. 20. It is the latest twist in a years-long saga over a conspiracy theory that rocked Washington, caused a grieving family a great deal of pain and set off multiple legal battles. "In a now-retracted story, Fox News falsely claimed that Rich's computer was connected to the leak of Democratic Party emails provided to WikiLeaks, and that Rich's slaying was related to the purported leak," the report adds. "The theory was even debunked in special counsel Robert Mueller's report."

"The Washington Times later reported in 2018 that Rich's brother, Aaron Rich, helped steal the emails in exchange for money from WikiLeaks and that he knew his brother would be killed and did nothing to stop it. None of those allegations are true. That story has also been retracted."

Brian Krebs writes via KrebsOnSecurity.com: There's an old adage in information security: "Every company gets penetration tested, whether or not they pay someone for the pleasure." Many organizations that do hire professionals to test their network security posture unfortunately tend to focus on fixing vulnerabilities hackers could use to break in. But judging from the proliferation of help-wanted ads for offensive pentesters in the cybercrime underground, today's attackers have exactly zero trouble gaining that initial intrusion: The real challenge seems to be hiring enough people to help everyone profit from the access already gained.

One of the most common ways such access is monetized these days is through ransomware, which holds a victim's data and/or computers hostage unless and until an extortion payment is made. But in most cases, there is a yawning gap of days, weeks or months between the initial intrusion and the deployment of ransomware within a victim organization. That's because it usually takes time and a good deal of effort for intruders to get from a single infected PC to seizing control over enough resources within the victim organization where it makes sense to launch the ransomware.

This includes pivoting from or converting a single compromised Microsoft Windows user account to an administrator account with greater privileges on the target network; the ability to sidestep and/or disable any security software; and gaining the access needed to disrupt or corrupt any data backup systems the victim firm may have. Each day, millions of malware-laced emails are blasted out containing booby-trapped attachments. If the attachment is opened, the malicious document proceeds to quietly download additional malware and hacking tools to the victim machine. From there, the infected system will report home to a malware control server operated by the spammers who sent the missive. At that point, control over the victim machine may be transferred or sold multiple times between different cybercriminals who specialize in exploiting such access. These folks are very often contractors who work with established ransomware groups, and who are paid a set percentage of any eventual ransom payments made by a victim company.

The federal government on Thursday appealed a judge's ruling that prevented the Trump administration from imposing a ban on TikTok, the viral video app owned by the Chinese company ByteDance. The New York Times reports: In a filing to the U.S. Court of Appeals for the D.C. Circuit, the Justice Department argued that a preliminary injunction issued last month by Judge Carl Nichols in the U.S. District Court for the District of Columbia should be lifted. A Justice Department spokeswoman said it had no further comment beyond the appeal. TikTok declined to comment. It was not immediately clear when the court might act on the government's appeal.

The government's decision to appeal the injunction, which delayed TikTok from being banned in U.S. app stores, further escalates the battle between the White House and ByteDance. The move is part of a Cold War between the United States and the Chinese government. The Chinese government has for years prevented its citizens from using international apps like Facebook, Twitter and other communications services. Since President Trump took office, he has repeatedly moved to stop Chinese companies from investing in and acquiring American companies. Citing national security concerns, the administration has also sought to stop American citizens from using Chinese-owned apps and has worked to banish Chinese technology and hardware from American telecommunications networks.

An anonymous reader quotes a report from Electrek: Mercedes-Benz teases a new super-efficient electric car concept, the Vision EQXX, with more than 750 miles of range on a single charge. At Daimler's latest company update, the automaker teased a new technical program to develop "the longest-range and highest-efficiency electric car the world has ever seen." Mercedes-Benz's head of research and development, Markus Schafer, commented: "We have set up a group of our engineers to take on an extraordinary task: to build the longest-range and highest-efficiency electric car the world has ever seen. This is a serious project, chasing next-generation technologies. We intend to incorporate the learning into the next generation of series production cars."

The German automaker said that the electric vehicle should be able to travel from Beijing to Shanghai, a journey that covers about 750 miles (1,200 km), on a single charge. This incredible range will be achieved through efficiency improvements rather than just a bigger battery pack. Daimler noted that the program will be used to test new technologies to improve efficiency and bring those to production cars: "While Vision EQXX is a technology program, it is expected to result in innovations that will quickly make their way into series production cars." They haven't disclosed when they plan to unveil the Vision EQXX electric prototype.

Microsoft today announced a slew of new features coming to its Chromium Edge browser. From a report: There are PDF improvements, a built-in screenshot tool, support for more themes, and new shopping features in time for the holiday season. But the most notable addition is the one powered by Skype because for better or for worse, 2020 is the year of video calling. When Zoom usage exploded this year, Microsoft tried to save face by making it easier to join Skype calls -- the company dropping account sign-up requirements and expanded the number of supported users. Microsoft is now bringing that functionality to Edge's new tab page with a dedicated Meet Now button (not to be confused with Google Meet). [...] Microsoft claims "Edge is the best browser for shopping this holiday." To make the case, Edge is getting a feature called price comparison that compares the price of a product you're searching for across other retailers. If you add a product to a collection, you can then click "compare price to other retailers" to see a list of prices of that item across other retailers.

There are few things as revealing as a person's search history, and police typically need a warrant on a known suspect to demand that sensitive information. But a recently unsealed court document found that investigators can request such data in reverse order by asking Google to disclose everyone who searched a keyword rather than for information on a known suspect. From a report: In August, police arrested Michael Williams, an associate of singer and accused sex offender R. Kelly, for allegedly setting fire to a witness' car in Florida. Investigators linked Williams to the arson, as well as witness tampering, after sending a search warrant to Google that requested information on "users who had searched the address of the residence close in time to the arson."

The July court filing was unsealed on Tuesday. Detroit News reporter Robert Snell tweeted about the filing after it was unsealed. Court documents showed that Google provided the IP addresses of people who searched for the arson victim's address, which investigators tied to a phone number belonging to Williams. Police then used the phone number records to pinpoint the location of Williams' device near the arson, according to court documents. The original warrant sent to Google is still sealed, but the report provides another example of a growing trend of data requests to the search engine giant in which investigators demand data on a large group of users rather than a specific request on a single suspect. "This 'keyword warrant' evades the Fourth Amendment checks on police surveillance," said Albert Fox Cahn, the executive director of the Surveillance Technology Oversight Project. "When a court authorizes a data dump of every person who searched for a specific term or address, it's likely unconstitutional."

Waymo, the Google self-driving-project-turned-Alphabet unit, is beginning to open up its driverless ride-hailing service to the public. From a report: The company said that starting today members of its Waymo One service will be able to take family and friends along on their fully driverless rides in the Phoenix area. Existing Waymo One members will have the first access to the driverless rides -- terminology that means no human behind the wheel. However, the company said that in the next several weeks more people will be welcomed directly into the service through its app, which is available on Google Play and the App Store. Waymo said that 100% of its rides will be fully driverless -- which it has deemed its "rider only" mode. That 100% claim requires a bit of unpacking. The public shouldn't expect hundreds of Waymo-branded Chrysler Pacifica minivans -- no human behind the wheel -- to suddenly inundate the entire 600-plus square miles of the greater Phoenix area. Waymo has abut 600 vehicles in its fleet. About 300 to 400 of those are in the Phoenix area. Waymo wouldn't share exact numbers of how many of these vehicles would be dedicated to driverless rides. However, Waymo CEO John Krafcik explained to TechCrunch in a recent interview, that there will be various modes operating in the Phoenix area. Some of these will be "rider only," while other vehicles will still have train safety operators behind the wheel. Some of the fleet will also be used for testing.

Facebook is using its vast legal muscle to silence one of its most prominent critics. The Real Facebook Oversight Board, a group established last month in response to the tech giant's failure to get its actual Oversight Board up and running before the presidential election, was forced offline on Wednesday night after Facebook wrote to the internet service provider demanding the group's website -- realfacebookoversight.org -- be taken offline. From a report: The group is made up of dozens of prominent academics, activists, lawyers, and journalists whose goal is to hold Facebook accountable in the run-up to the election next month. Facebook's own Oversight Board, which was announced 13 months ago, will not meet for the first time until later this month, and won't consider any issues related to the election. In a letter sent to one of the founders of the RFOB, journalist Carole Cadwalladr, the ISP SupportNation said the website was being taken offline after Facebook complained that the site was involved in "phishing."

In a not-so-subtle dig at Apple and Google, Microsoft today announced a series of "principles" for its Windows 10 App Store -- including letting users choose their own payment system for in-app purchases -- that it says should serve as a model for other app stores. From a report: The move comes as antitrust regulators in the U.S. and around the world are spotlighting how both Apple and Google manage their mobile platforms and as some developers charge them with running their app stores unfairly. In addition to offering developers the option to use an alternative payment mechanism for in-app purchases, Microsoft pledged that it will, among other things: allow competing app stores; hold its own apps to the same standards as those of other companies; allow app makers to decide what they do and don't want to sell within their app; and allow any developer in its store "as long as it meets objective standards and requirements, including those for security, privacy, quality, content, and digital safety."