Android adware can install itself even when users explicitly reject it

(credit: Lookout) Two weeks ago, Ars reported on newly discovered Android adware that is virtually impossible to uninstall . Now, researchers have uncovered malicious apps that can get installed even when a user has expressly tapped a button rejecting the app. The hijacking happens after a user has installed a trojanized app that masquerades as an official app available in Google Play and then is made available in third-party markets. During the installation, apps from an adware family known as Shedun try to trick people into granting the app control over the Android Accessibility Service , which is designed to provide vision-impaired users alternative ways to interact with their mobile devices. Ironically enough, Shedun apps try to gain such control by displaying dialogs such as this one, which promises to help weed out intrusive advertisements. From that point on, the app has the ability to display popup ads that install highly intrusive adware. Even in cases where a user rejects the invitation to install the adware or takes no action at all, the Shedun-spawned app uses its control over the accessibility service to install the adware anyway. Read 4 remaining paragraphs | Comments

View original post here:
Android adware can install itself even when users explicitly reject it

Chicago issued $2.4 million in bogus traffic tickets from speed cameras

The Chicago Tribune reported Wednesday as part of an exhaustive investigation that as many as 110,000 “questionable” speeding tickets totalling $2.4 million have been issued in the past two years in Chicago as part of a speed-camera program designed to keep kids safe near parks and schools. …City Hall has systematically ticketed drivers near schools without the legally required evidence of a schoolchild in sight. A Tribune random-sample analysis puts the number of those questionable tickets at about 110,000. And while it was pitched by the mayor as a way to protect youngsters walking near parks and schools, the most prolific cameras in the 2-year-old “Children’s Safety Zone” initiative can be found along major roadways, where crash data show child pedestrians are least likely to be struck by speeders. The lengthy  report is worth a read. Among other things, the report found that Mayor Rahm Emanuel’s speed camera program issued 22,000 tickets for speeding near parks and another 11,000 tickets near parks that were closed for the night. What’s more, another 28,000 citations “were issued at cameras plagued by problems with warning signs that did not meet the minimum legal requirements.” And at least 62,000 tickets were given during the summer “when school activity is so limited that drivers are left to guess whether school is in session or not.” Read 2 remaining paragraphs | Comments

Read the original:
Chicago issued $2.4 million in bogus traffic tickets from speed cameras

Feds bugged steps of Silicon Valley courthouse

(credit: James Vaughan ) Defense attorneys have asked a federal judge to throw out more than 200 hours of conversations FBI agents recorded using hidden microphones planted on the steps of a California county courthouse. The lawyers are representing defendants accused of engaging in an illicit real estate bid-rigging and fraud conspiracy. The steps to the San Mateo County courthouse are frequently the scene of public auctions for foreclosed homes. Federal prosecutors have admitted that on at least 31 occasions in 2009 and 2010, FBI agents used concealed microphones to record auction participants as they spoke, often in hushed voices with partners, attorneys, and others. Because the federal agents didn’t obtain a court order, the defense attorneys argue the bugging violated Constitutional protections against unreasonable searches and seizures. In a court brief filed Friday in the case, attorneys wrote: Read 4 remaining paragraphs | Comments

Read More:
Feds bugged steps of Silicon Valley courthouse

Windows 10 November Update: features, fixes, and enterprise readiness

The Windows 10 November update is available now to everyone running Windows 10. This first major update has a handful of visible features, a variety of bug fixes, and even some enterprise features. Microsoft’s message to businesses is that if they were following the traditional policy of waiting for the first Service Pack or major update to Windows before deploying it, this is it: time to take the plunge. It’s also the time for gamers to make the switch too—in parallel with this release, Microsoft is rolling out the new Xbox Experience, which is based on Windows 10, and gives the dashboard a big shake-up. The November Update build (10586) is already available to members of the Windows Insider program. With this update comes a slightly new way of describing Windows versions, and it’s one that we expect to feature in other Microsoft software, too. winver in the original release describes windows as being “Version 10.0 (Build 10240).” In the new release, it’s “Version 1511 (OS Build 10586.3)” as in, 11th month of 2015. This same versioning scheme is also used for the new “as-a-service” release of System Center Configuration Manager . Read 22 remaining paragraphs | Comments

Read More:
Windows 10 November Update: features, fixes, and enterprise readiness

Single course of antibiotics can mess up the gut microbiome for a year

(credit: Global Panorama/Flickr ) In a battle against an infection, antibiotics can bring victory over enemy germs. Yet that war-winning aid can come with significant collateral damage; microbial allies and innocents are killed off, too. Such casualties may be unavoidable in some cases, but a lot of people take antibiotics when they’re not necessary or appropriate. And the toll of antibiotics on a healthy microbiome can, in some places, be serious, a new study suggests. In two randomized, placebo-controlled trials of healthy people, a single course of oral antibiotics altered the composition and diversity of the gut microbiome for months, and in some cases up to a year. Such shifts could clear the way for pathogens, including the deadly Clostridium difficile . Those community changes can also alter microbiome activities, including interacting with the immune system and helping with digestion. Overall, the data, published Tuesday in the journal mBio , suggests that antibiotics may have more side effects than previously thought—at least in the gut. In the mouth, on the other hand, researchers found that microbial communities fared much better, rebounding in weeks after antibiotic treatments. The finding raises the question of why the oral microbiome is less disturbed by drugs. It could simply be because of the way that antibiotics, taken orally, circulate through the body. Or, it could imply that oral microbiomes are innately more resilient, a quality that would be useful to replicate in microbial communities all over the body. Read 6 remaining paragraphs | Comments

Read the original post:
Single course of antibiotics can mess up the gut microbiome for a year

AT&T expands gigabit fiber to 23 cities starting at $70 (or $110)

AT&T’s updated GigaPower coverage map. (credit: AT&T ) AT&T yesterday announced expansions of its gigabit fiber Internet service into parts of 23 cities and towns. The new markets are mostly in the suburbs of big cities where AT&T already offered its fastest broadband. For example, AT&T previously brought its “U-verse with GigaPower” service to Atlanta, Chicago, Houston, Miami, Nashville, and Orlando. The expansion this week brings the service into a bunch of cities and towns within the larger metro areas. Pricing for the Internet-only 1Gbps package is either $70 a month or $110 a month, depending on where you live. As we’ve reported previously, AT&T tends to match Google Fiber’s $70 pricing , but not in areas where Google isn’t offering service. Besides that, AT&T’s lowest price in each city requires customers to opt into “Internet Preferences ,” which gives the company permission to examine each customer’s Web traffic in order to serve personalized ads. Read 4 remaining paragraphs | Comments

Continue reading here:
AT&T expands gigabit fiber to 23 cities starting at $70 (or $110)

Google engineer leaves scathing reviews of dodgy USB Type-C cables on Amazon

(credit: Andrew Cunningham) One particularly conscientious Google engineer, Benson Leung, is currently on an unusual mission: he’s slowly working his way through a bunch of USB Type C cables and adaptors stocked by Amazon, to check whether they are actually up-to-spec and capable of charging his Chromebook Pixel. First things first: of the ten USB Type C products that Leung has reviewed, only three of them were fully specs-compliant and capable of charging his Pixel. The three good cables (Belkin, iOrange-E, Frieq) were invariably more expensive (about £15/$20) than the seven duff ones (£6/$10). Obviously there may be some cheap cables that do fulfil the full USB Type C specification, but Leung hasn’t found one yet. One of the offending micro-USB-to-Type-C adaptors that lacks the necessary hardware to comply with the Type C 1.1 spec. The USB Type C 1.1 specification allows for power delivery of up to 3A, which is enough juice to charge a laptop like the Chromebook Pixel. Previous USB specs, though, only allowed for power delivery of between 900mA and 1.5A. According to Leung, the problem is mostly related to how the cables deal with going from older Type A or Micro/Mini connectors to the new Type C connector. Read 7 remaining paragraphs | Comments

See the original article here:
Google engineer leaves scathing reviews of dodgy USB Type-C cables on Amazon

MPAA shuts down major torrent sites, including Popcorn Time

The site that provides much of the content for illegal movies shown on the “Popcorn Time” app,  PopcornTime.io, has been shut down after the Motion Picture Association of America won court orders in Canada and New Zealand. “Popcorn Time and YTS are illegal platforms that exist for one clear reason: to distribute stolen copies of the latest motion pictures and television shows without compensating the people who worked so hard to make them,” said MPAA Chairman Sen. Chris Dodd in a statement (PDF) . According to the piracy news site TorrentFreak, YTS stopped functioning  in mid-October. Now the MPAA has taken credit for that and the PopcornTime.io shutdown. MPAA sued three “key Canadian operators” of PopcornTime.io on October 9 in Federal Court in Canada. PopcornTime.io was said by its operators to be the “official” PopcornTime fork. On October 16, the MPAA’s member studios obtained an injunction ordering the site to shut down. Read 3 remaining paragraphs | Comments

Originally posted here:
MPAA shuts down major torrent sites, including Popcorn Time

vBulletin password hack fuels fears of serious Internet-wide 0-day attacks

Enlarge (credit: Coldzer0) Developers of the vBulletin software package for website forums released a security patch Monday night, just hours after reports surfaced that a hack on the developers’ site leaked password data and other sensitive information belonging to almost 480,000 subscribers. vBulletin officials have put in place a mandatory password reset for all users after discovering it was subjected to a hack attack. They went on to warn that the attacker “may have accessed customer IDs and encrypted passwords on our system.” A separate post on the vBulletin site makes reference to a security patch for versions 5.1.4 through 5.1.9 of the vBulletin Connect software package. Noticeably missing from either link is an explicit warning that there is a critical vulnerability in vBulletin that has already been actively exploited and puts thousands of sites at risk until they install the patch. Ars asked vBulletin officials to clarify the reports and to confirm or disconfirm the speculation they have generated, but so far the request has gone unanswered. This post contains inferences and information from alternative sources that has yet to be explicitly confirmed. Read 4 remaining paragraphs | Comments

Read more here:
vBulletin password hack fuels fears of serious Internet-wide 0-day attacks

Changing the Earth’s climate by covering the deserts with solar panels

Solar panels in Chile’s Atacama desert. (credit: OPIC.gov ) Currently, the Earth’s inhabitants are consuming about 17.5TeraWatts of power each year. It’s estimated that an aggressive rollout of solar panels could generate at least 400TW, and possibly much, much more. But that would involve paving over a lot of the Earth’s surface with solar panels, in many cases covering relatively reflective sand with dark black hardware. Could this have its own effects on the climate? The answer turns out to be remarkably complex. That’s in part because the panels don’t simply absorb the energy of the light—a fraction of it gets converted to electricity and shipped elsewhere. A team of US and Chinese scientists decided to account for all of this and found out that massive solar installations would cause changes in the climate, but the changes would be minor compared to what we’d see from continued greenhouse gas emissions. The authors created a number of scenarios to tease out the influence of the panels, and they used climate models to examine the changes they drove. The first method involved covering most of the Earth’s deserts and urban areas with solar panels (this would, of course, lead to a ridiculous overproduction of electricity). In a second, the power harvested by these panels was then sent to urban areas and dissipated as heat. Finally, for a somewhat more realistic view, they simply covered most of the deserts of Egypt with panels. Read 5 remaining paragraphs | Comments

Read the original post:
Changing the Earth’s climate by covering the deserts with solar panels