chicksdaddy shares a report from The Security Ledger: Millions of Android smart television sets from the Chinese vendor TCL Technology Group Corporation contained gaping software security holes that researchers say could have allowed remote attackers to take control of the devices, steal data or even control cameras and microphones to surveil the set's owners. The security holes appear to have been patched by the manufacturer in early November. However the manner in which the holes were closed is raising further alarm among the researchers about whether the China-based firm is able to access and control deployed television sets without the owner's knowledge or permission, according to a report published on Monday by two security researchers.

The report describes two serious software security holes affecting TCL brand television sets. First, a vulnerability in the software that runs TCL Android Smart TVs allowed an attacker on the adjacent network to browse and download sensitive files over an insecure web server running on port 7989. That flaw, CVE-2020-27403, would allow an unprivileged remote attacker on the adjacent network to download most system files from the TV set up to and including images, personal data and security tokens for connected applications. The flaw could lead to serious critical information disclosure, the researchers warned. Second, the researchers found a vulnerability in the TCL software that allowed a local unprivileged attacker to read from and write to critical vendor resource directories within the TV's Android file system, including the vendor upgrades folder. That flaw was assigned the identifier CVE-2020-28055.

The researchers, John Jackson, an application security engineer for Shutter Stock, and the independent researcher known by the handle "Sick Codes," said the flaws amount to a "back door" on any TCL Android smart television. "Anybody on an adjacent network can browse the TV's file system and download any file they want," said Sick Codes in an interview via the Signal platform. That would include everything from image files to small databases associated with installed applications, location data or security tokens for smart TV apps like Gmail. If the TCL TV set was exposed to the public Internet, anyone on the Internet could connect to it remotely, he said, noting that he had located a handful of such TCL Android smart TVs using the Shodan search engine.

An anonymous reader shares a report: The Voyager 2 probe, one of NASA's most well-traveled spacecraft, has been unable to communicate with Earth for the past eight months. Voyager 2 has been wandering alone at the edge of interstellar space, gathering data some 11.6 billion miles from Earth and sending it back to us. But we haven't been able to pick up the phone and call back. The only radio antenna that can communicate with the probe, Deep Space Station 43 (DSS43) in Australia, has been offline while NASA completes a series of hardware upgrades. Some of the transmitters on DSS43 haven't been replaced for over 47 years, according to NASA. To test new hardware, the dish pinged Voyager 2 on Oct. 29 with a few commands. It was the first time since mid-March that a signal was beamed to the spacecraft. And because the probe is so far away, the communication team had to wait over 34 hours for a reply. Sure enough, Voyager 2 received the commands with no problems and sent back a "hello."

Apple's "System Status" page indicates 14 current issues, some of which began nearly five hours ago.

CNET reports the services affected "include Find My, iCloud Account & Sign In, iCloud Backup, iCloud Bookmarks & Tabs, iCloud Calendar, iCloud Contacts, iCloud Drive, iCloud Keychain, iCloud Mail, iCloud Storage Upgrades, Photos and Screen Time."

Engadget writes "the timing is less than ideal, even if this is likely to be a small interruption in the grander scheme of things." The issue comes weeks after an outage that affected both iCloud and Apple's media services. It also follows mere days after the debut of Apple One, where iCloud storage (also affected by the outage) plays an important role.

An anonymous reader quotes a report from Ars Technica: In recent years, the cost of solar and wind energy has declined precipitously, which has accelerated the growth of these renewable energy technologies. Increasingly, utilities are now planning for a future grid dominated by solar and wind. That will require changes in grid management and transmission upgrades as well as the addition of storage to smooth out the supply from variable generators. Grid storage is still pretty early days, but we're already seeing huge cost reductions as the industry matures. The US Energy Information Administration (EIA) highlighted this recently, showing that grid-scale battery-project costs in the United States dropped 70 percent in just a few years.

Between 2015 and 2018, average project costs decreased from $2,152 per kilowatt-hour of storage to $625. Costs will need to drop much more for grid batteries to scale, but that's a huge improvement in a short period of time. By the end of 2018, the US had 869 megawatts of battery power capacity and 1,236 megawatt-hours of energy capacity. (Power is the rate at which the batteries can supply electricity, while energy is the total amount it can supply when going from full charge to empty.) EIA also has installation data for 2019, which saw the addition of another 150 megawatts/450 megawatt-hours. And in just the first seven months of 2020, yet another 300 megawatts of power capacity were installed. EIA doesn't see this slowing down. It expects installed battery storage to increase by 6,900 megawatts "in the next few years" -- a figure ambiguous enough to allow for a rapid spike in planned projects.

Apple has confirmed several problems including "increased battery drain" for some users who upgraded their iPhone to iOS 14. But ZDNet warns Apple's proposed solution "sounds pretty drastic."

Forbes reports: In an official post, Apple reveals seven significant data and battery-related problems with iOS 14 and watchOS 7, and the company states the only fix is to "erase all content and settings from your iPhone".

Breaking these down, Apple classifies six as related to its Activity, Health and Fitness apps as well as the broader problem of "Increased battery drain on your iPhone or Apple Watch." The latter will not be a surprise to anyone who has seen the growing number of complaints directed at the company's @AppleSupport Twitter account since iOS 14 was released...

On the plus side, Apple's belief that these problems can be fixed without an iOS update is good news. That said, a complete data wipe is also the nuclear option, so Apple is not messing around... I would also be amazed if iOS 14.0.2 is not being fast tracked as we speak.

An anonymous reader shares a report: For the better part of the last decade, Google's Chromecast dongles were the company's primary homegrown solution for streaming video to your TV. But with the recent explosion in streaming services, even the most sophisticated Chromecast wasn't really cutting it anymore, which is something the new Chromecast with Google TV is hoping to change in a big way, but bringing an actual streaming device OS to a Chromecast dongle. The big change for this new $50 Chromecast is that it's not your typical Chromecast at all. Sure, it still plugs in via HDMI and you can still use it to stream videos and content to your TV from your phone. However, instead of being based around the very basic Chromecast interface, this new Chromecast runs on Android TV platform which Google has improved with an enhanced UI and a few new features, which is where the Google TV part of Chromecast with Google TV comes in.

And when you factor in the Chromecast with Google TV's new dedicated remote these upgrades could completely change how you watch and interact with content. Starting with the hardware, the Chromecast with Google TV consists of two parts: there's the dongle that plugs into your TV and Google's included remote. For the Chromecast with Google TV, Google is going with a simple ovular puck that comes in three different colors (Snow, Sunrise, and Sky) and features an attached HDMI cable that plugs into your TV along with a USB-C port and bundled cable that you'll need to plug in for power. The Chromecast with Google TV comes with support for 4K video at 60 fps with HDR via Dolby Vision, which ticks all the major boxes when it comes to streaming video quality.

Google plans to push harder for developers to give the company a cut of in-app purchases through its Play app store, according to people with knowledge of the move. From a report: The Alphabet unit plans to issue updated guidelines as early as next week that clarify a requirement for most apps to use Google's billing service for in-app content downloads, game upgrades and subscriptions. This system gives the company a 30% cut of purchases inside of apps on Android. While this requirement has existed for years, some major developers including Netflix, Spotify, Match Group and Epic Games, have circumvented the rule. Netflix and Spotify apps prompt consumers to pay using a credit card, rather than their Play app store account, bypassing Google's fee. Last year, Match Group's Tinder dating app launched a similar payment process. More recently, Epic Games started letting players buy in-game upgrades for its Fortnite video game via a method that paid Epic directly. In response, Google and Apple pulled Fortnite from their app stores and Epic sued both tech giants.

The Fairphone 3+ is a $550 phone with modular parts that can easily be swapped out by users themselves. "In many ways, a Fairphone is the antithesis of the iPhone," writes Catie Keck via Gizmodo. "It doesn't benefit most retailers to allow you to easily repair your own stuff, meaning that a lot of gizmos these days -- particularly higher-end electronics -- are packed with proprietary parts and sometimes even software locks to dissuade consumers from attempting to perform repairs themselves." While it is a "repairable dream" and features two big camera upgrades over the Fairphone 3 (which does support the new upgraded camera modules), it's, sadly, only available overseas. Keck writes: Fairphone 3+ has 64GB of memory but can be upgraded to 400GB with a MicroSD card. It has a Qualcomm 632 processor, a 5.65-inch display, Bluetooth 5, a 3000mAh battery that supports Qualcomm QuickCharge, and six total modules to swap out for easy repair. A thing I didn't expect to love as much as I did was fingerprint ID on the backside of the phone -- particularly as Face ID on my iPhone 11 has become a massive pain in the butt in these mask-on times. At present, Fairphone doesn't support 4G connectivity in the U.S., my biggest gripe with the phone second only to the fact that the phones only ship within Europe. [...] Fairphone runs on Android -- the Fairphone 3+ comes with Android 10 pre-installed and ready to go.

As for its camera, I was happy enough with the photograph with the newer lens. Photo nerds may be more sensitive to the trade-offs when compared with, say, the iPhone 11 Pro, but for the average person, I think Fairphone's cameras would work beautifully. I especially loved the portrait mode on the front camera, which worked in even exceptionally low-light environments for me. Software likely isn't the primary reason that anyone is looking at getting a Fairphone device, but shipping pre-installed with a lot of familiar apps means making the switch will likely be relatively painless, though so far my iPhone is a bit snappier overall in terms of performance. Again, the tradeoff is a commitment to repairability that you simply won't get with an Apple device unless the company radically overhauls its entire business model or unless it's forced, neither of which seems remotely likely for the foreseeable future.

Epic Games says Fortnite: Save the World will no longer be playable on macOS beginning on September 23rd because Apple is preventing the game from receiving new updates. The Verge reports: The co-op action shooter was initially released as a paid early access title in 2017. Epic's far more popular free-to-play battle royale will still be playable on Mac, the company says. Epic says Apple is blocking new updates and patches for the macOS version of Save the World, and an upcoming update going out to other platforms will cause bugs and "a very poor experience" for players stuck on the current version.

In late August, Apple terminated Epic's developer account, meaning users cannot download or reinstall games developed by Epic, including Fortnite, and Epic can no longer validate updates for distribution. The studio said that it will issue refunds to "all players who purchased any Save the World Founder's or Starter Packs (including Upgrades) and played Save the World on macOS between September 17, 2019, and September 17, 2020." Epic Games says it may take until October 2nd for players to receive refunds.

An anonymous reader shares a report: Last year, repair guide site iFixit tore down the Fairphone 3 and gave the modular-designed phone a rare perfect 10/10 repairability score. Today, Fairphone demonstrated just how far its philosophy of modular phone design can take its users by offering the massively upgraded cameras from its newly released Fairphone 3+ model to owners of the earlier Fairphone 3. Fairphone designs are noticeably bulkier than typical smartphone designs -- but they have a reason to be. Its components have been split into seven replaceable modules in order to extend the service life of each Fairphone. Battery getting weak? It's replaceable. Dropped your phone and broke the screen? Not only replaceable, but guaranteed replaceable -- and for reasonably technical end users, user-replaceable -- with easily purchased parts from the factory. The original Fairphone 3 launched with a 12 megapixel rear camera and an 8 megapixel front camera. The newly released Fairphone 3+ is essentially the same phone, but it offers a refresh on the camera modules, bringing the rear camera to 48 megapixels and the front to 16 megapixels. Owners of the original Fairphone 3 can upgrade by simply purchasing replacement modules from the Fairphone store and replacing them.

An anonymous reader quotes a report from NewAtlas: After an almost two-year shutdown for repairs and upgrades, CERN's Large Hadron Collider (LHC) is beginning to fire back up for its next phase of probing the mysteries of physics. Its newest particle accelerator, Linac 4, completed its first test run over the past few weeks, with the potential to provide much more energetic beams than ever before. The LHC paused operations in December 2018, beginning a massive overhaul called the High-Luminosity Large Hadron Collider (HL-LHC). When it's fully finished and finally fired up in 2026, the upgraded facility will be seven times more powerful and will collect around 10 times more data in the following decade than it did during the previous run.

And now, the first incremental stage of this upgrade is coming online. The new linear accelerator, called Linac 4, has been installed and tested over the last few weeks. This device is the starting point for accelerating protons, which are then injected into the Proton Synchrotron (PS) Booster and onto the rest of the accelerator complex. Linac 4 replaces Linac 2, which was in operation at CERN for 40 years. As you might expect the new model is significantly more powerful, injecting particles into the PS Booster at energies up to 160 MeV -- much higher than Linac 2's 50 MeV. By the time these beams are boosted, they'll reach energies of 2 GeV, compared to the 1.4 GeV that Linac 2 was capable of. This extra energy is thanks to the fact that scientists can tweak Linac 4's beams in much more detail than its predecessor.

In the three weeks up to mid-August, Linac 4 was tested with low-energy beams of negative hydrogen ions, running only through the first part of the accelerator. On August 20, it was finally cranked right up to maximum energy, with beams accelerated through the whole machine. These were then sent into a "beam dump" at the end, a device that catches and absorbs the particles.

Voyager 2 has been traveling through space for 43 years, and is now more than 11 billion miles from Earth. But every so often, something goes wrong. From a report: At the end of January, for instance, the robotic probe executed a routine somersault to beam scientific data back to Earth when an error triggered a shutdown of some of its functions. "Everybody was extremely worried about recovering the spacecraft," said Suzanne Dodd, who is the Voyager project manager at NASA's Jet Propulsion Laboratory in Pasadena, Calif. The mission's managers on our planet know what to do when such a fault occurs. Although it takes about a day and a half to talk to Voyager 2 at its current distance, they sent commands to restore its normal operations.

But starting on Monday for the next 11 months, they won't be able to get word to the spry spacecraft in case something again goes wrong (although the probe can still stream data back to Earth). Upgrades and repairs are prompting NASA to take offline a key piece of space age equipment used to beam messages all around the solar system. The downtime is necessary because of a flood of new missions to Mars scheduled to leave Earth this summer. But the temporary shutdown also highlights that the Deep Space Network, essential infrastructure relied upon by NASA and other space agencies, is aging and in need of expensive upgrades.

Type a query into the Google search bar on a smartphone and there's a good chance the results will be dominated by advertising. From a report: That stems from a decision in 2015 to test a fourth ad, rather than three, at the top of search results. Some employees opposed the move at the time, saying it could reduce the quality of Google's responses, according to people familiar with the deliberations. But the company brushed aside those concerns because it was under pressure to meet Wall Street growth expectations, one of the people said. By 2016, the extra marketing slot was a regular feature. It's one of the many ways the search leader has altered how it presents results since its early days. Another example is the pre-packaged information Google often displays in a box at the top of a page, rather than sending users to other websites.

Phased in gradually over years, changes like these have gone largely unnoticed by legions of consumers who regularly turn to Google to call up information and hunt for bargains. The company says these changes support its mission to organize the world's information and make it useful and accessible to everyone. But to many web publishers and other businesses that have historically relied on the internet giant to send users to their sites, Google's subtle tweaks have siphoned off vital traffic and made it harder -- and costlier -- to reach customers online.

Microsoft is testing a number of Windows 10 upgrades to a small number of testers, including changes to the Alt-Tab function and a new Start menu design. The Verge reports: "We are freshening up the Start menu with a more streamlined design that removes the solid color backplates behind the logos in the apps list and applies a uniform, partially transparent background to the tiles," explains Microsoft in a blog post. Essentially, the reduction in the color of the blocky tiled interface on the Start menu will simplify it slightly and make it easier to scan for the apps you use on a daily basis. It's a subtle change, but it certainly makes the Start menu look a little less chaotic and avoids many tiles sharing a similar blue color.

Alongside an updated Start menu, the latest Windows 10 build includes some big changes to Alt-Tab. "Beginning with today's build, all tabs open in Microsoft Edge will start appearing in Alt-Tab, not just the active one in each browser window," explains Microsoft. This seems like a change that might be a little confusing for veteran Windows users, but Microsoft is thankfully allowing you to switch back to the classic Alt-Tab experience.

Microsoft is also making some smaller changes with this new Windows 10 build. The default taskbar appearance will also now be more personalized with the Xbox app pinned for Xbox Live users or Your Phone pinned for Android users. This will be limited to new account creation on a PC or first login, so existing taskbar layouts will remain unchanged. Notifications now include an X in the top right corner to allow you to quickly dismiss them, and Microsoft is also improving its Settings app in Windows 10. Links that would typically push you toward the system part of the legacy Control Panel system page will now direct you to the About page in Settings. This will now house the more advanced controls typically found in that system section of the Control Panel, and Microsoft is promising "there will be more improvements coming that will further bring Settings closer to Control Panel."

ZDNet reports: Car manufacturer Mercedes-Benz and chipmaker Nvidia have partnered to build a software-defined computing infrastructure and system that enables vehicles to receive over-the-air software updates to ensure they are equipped with the latest autonomous features. "Together, we're going to revolutionise the car ownership experience, making the vehicle software programmable and continuously upgradeable via over the air updates," Nvidia CEO and founder Jensen Huang said.

The pair will build the software-defined architecture based on Nvidia's Drive AGX Orin system-on-chip (SoC) platform, and it will be a standard feature in the next fleet of Mercedes-Benz vehicles from 2024... "Nvidia's AI computing architecture will help us streamline our journey towards autonomous driving," said Ola Källenius, chairman of the board of management of Daimler and Mercedes-Benz. "These new capabilities and upgrades will be downloaded from the cloud, improving safety, increasing value, and extending the joy of ownership for all Mercedes-Benz customers...."

The pair said the new system would enable level two and three driving autonomy, as well as automated parking functions of up to level four. This would mean, according to the two companies, vehicles would have the ability to "automate driving of regular routes from address to address".
Barron's reports: Nvidia and Mercedes are, in some respects, playing catch-up. Something the rest auto industry is used to these days regarding Tesla. Almost every other auto maker around the globe is pursuing an Electrical Vehicle (EV)-centric strategy nowadays, something unthinkable a few years ago. Tesla CEO Elon Musk deserves a lot of credit for the shift. Tesla led in EV development, and now it's leading in software too...
And Forbes adds this telling quote from NVIDIA's senior director of automotive. "Revenues can be realized at the point of sale, as well as any time during the life of the vehicle. New features may be free of charge, single charge, pay by use, or subscription-based. Customers have shown that when they see the value, they are more than willing to pay for new apps and services."

CNN reports that Apple could announce "a long-rumored switch" from Intel chips to its own ARM-based chips for Macs at its WWDC conference Monday -- citing a report from Bloomberg.

Then they consider the possible advantages: When that does happen, the major changes Mac users are likely to see include better battery life and sleeker devices. Apple's in-house chips have a smaller architecture and are more efficient because they are designed for smartphones, according to David McQueen, research director at ABI Research... "Moving to ARM-based chips can bring efficiencies and better battery life without sacrificing performance," McQueen said. "It may also help to cut out some size issues, possibly allowing Macs to be made thinner, while also negating the need for fans," he added.

McQueen says having the same chips running on iPhones, iPads and Macs would also make it easier to standardize the user experience across all three devices. "It will allow all Apple devices to work more seamlessly together," he said. "It should also make it much easier for developers to create apps that are capable of running across Apple devices." There's another big potential benefit to using the same chips for iPhones and Macs, particularly with the growth of 5G networks. "Although Apple has given no indication that it is looking to do so, this switch does also open the doors for Apple to launch MacBooks with cellular connectivity capabilities," Mardikar said.

For Apple, bringing processor production in-house will likely allow the company to offer better performance upgrades with each generation of devices because it will no longer be tied to Intel's upgrade cycle for new chips. "They also get to control their own product launch cadence," said Jitesh Ubrani, a research manager at IDC. "In the past, they had to really wait on Intel to launch new processors before they could refresh the Mac lineup."

Slashdot reader shirappu writes: For eight years now, the Mars Rover Curiosity has been exploring the surface of Mars. Even now, it's still exploring, and still getting upgrades. According to Tech Crunch, NASA is now looking to interested volunteers to help upgrade the rover's terrain-scanning AI systems by annotating image data of the planet itself.
"The problem is that while there are lots of ready-made data sets of images with faces, cats and cars labeled, there aren't many of the Martian surface annotated with different terrain types..." notes TechCrunch. "Improvements to the AI might let the rover tell not just where it can drive, but the likelihood of losing traction and other factors that could influence individual wheel placement."

shirappu continues: Volunteers go through a short tutorial after which they can label images to help the rover better understand the terrain on which it drives. The system is expected to be used in future planet rover robots, and the project marks an interesting example of open crowd-sourcing to improve machine learning systems, and how it is impacting technology even on other planets.

Click this link for the AI4Mars site link where people can volunteer.

Just like nearly everything else on the internet, streaming services are ruled by recommendation algorithms that are designed to predetermine what people want before they ask for it. WarnerMedia is trying to accomplish the opposite with HBO Max. From a report: The company's new streaming service, which will allow for three concurrent streams, is positing itself as a human-first platform -- the opposite of Netflix's strategy. As streaming becomes more of a centerpiece in people's homes and more platforms find their way to people's television sets, focusing on improving the actual curation system subscribers use is just as important as available content, Sarah Lyons, senior vice president of product experience, told The Verge. CNET adds: Like rivals Netflix and Disney Plus, HBO Max has a sprawling catalog of hit shows and movies, plus a big-budget slate of exclusive originals packed with stars. But HBO Max is the most expensive of the bunch. New subscribers can sign up and pay a simple $15 a month subscription after a week-long free trial, the same price HBO already charges for its linear channel on most pay-TV providers and for its preexisting standalone streaming service, HBO Now. But if you're already paying for HBO in some form, the amount you'll have to pay for Max now, or whether you have to pay anything extra at all... well, it's complicated. "The question is: Does your provider have to deal with us for Max and do you move over? That answer will be fairly simple, and then beyond that it gets a little more complicated," Andy Forssell, the general manager of WarnerMedia's streaming operation, said in an interview last week. "We've got really broad distribution, and ... midnight next Tuesday we'll be where we are -- not that that's an end point, if there any discussions undone." To entice you to give it a try, HBO Max has padded itself with more content than you'll find on either the regular HBO channel or HBO Now.

An anonymous reader quotes a report from Ars Technica: A Norwegian infosec firm discovered a new Android vulnerability, which they've dubbed Strandhogg 2.0. Security firm Promon says "Strandhogg" is an old Norse strategy for coastline raids and abductions, and today's vulnerability is the "evil twin" of a similar one discovered in 2019. The original Strandhogg used an Android feature called taskAffinity to hijack applications -- by setting the taskAffinity of one of its activities to match the packageName of any other app, then setting allowTaskReparenting="true" in its own manifest, the Strandhogg app would be launched in place of the target app. Strandhogg's 1.0 major weakness was the need to declare taskAffinity in the Android Manifest. The Manifest is a plain XML file and must be included in the package hosted at the Play Store itself -- it can't simply be downloaded later, after the app is installed. This made it relatively simple to scan the Play store for apps with sketchy-looking taskAffinity declarations. Strandhogg 2.0 doesn't require any special settings in a package's Android Manifest -- meaning the attacking code doesn't need to be present on the Play Store to be scanned at all. Instead, the attacker can download the attack code later, once the trojan app or game is already installed on a user's device.

In addition to the obvious credential-stealing attacks, Strandhogg can be used to trick users into escalating its privileges based on the trust they have for the apps it hijacks. For example, a user tapping Camera is asked if they want to grant it permission to access the camera and microphone -- if the user taps Yes, they've actually given those privileges to the malware app, not the Camera app it covered up on the screen. Strandhogg 2.0 affects all versions of Android prior to 10 -- which translates to roughly 90 percent of the Android userbase. Google rolled out a patch to close the Strandhogg 2.0 vulnerability, CVE-2020-0096, in May's Android Security Update. This is good news for Pixel users -- but as always, carriers and OEMs may delay those upgrades significantly.

Alienware has announced the second generation of its flagship Area-51m gaming laptop, the Area-51m R2. It's largely similar on the outside to the original Area-51m, but the specs are almost completely overhauled on the inside, with 10th Gen Intel processors, new Nvidia GPUs, faster RAM, and better display options. From a report: All of those upgrades will be limited to the new R2 model, though. Despite Alienware's goals for future-proofed upgradable parts, the Area-51m has failed to live up to its potential. One of the biggest draws of the Area-51m was the option for user-replaceable parts. Most modern laptops have nearly all of their internal components sealed in place in an effort to cut down on size. But the Area-51m took a different approach. It was big, easy to disassemble, and made it simple to replace nearly every internal component, from RAM to the CPU to the GPU to even the thermal cooling components. The idea was to make something more portable than any other desktop but more customizable than any laptop. Alienware's parent company, Dell, even built its own system for replaceable GPUs in laptops, called DGFF (Dell Graphics Form Factor) to make it easier to upgrade in the future.