Hackers hijack a Philips Hue lights with a drone

Surprise! The Internet of Things is a security nightmare. Anyone who was online a few weeks ago can attest to that. The massive internet blackout was caused by connected devices , and new research from white-hat hackers expounds upon those types of vulnerabilities. The target? Philips Hue smart lightbulbs. While they’ve been hacked in the past , Philips was quick to point out that it happening in a real-world situation would be pretty difficult. Digital intruders would need to already be on your home network with a computer of their own — the company claimed that directly attacking the lightbulbs wasn’t exactly feasible. But this new attack doesn’t require that sort of access. In fact, all it takes is tricking the bulbs into accepting a nefarious firmware update. By exploiting a weakness in the Touchlink aspect of the ZigBee Light Link system ( again! ), the hackers were able to bypass the built-in safeguards against remote access. From there, they “extracted the global AES-CCM key” that the manufacturer uses to encrypt and authenticate new firmware, the researchers write (PDF). “The malicious firmware can disable additional downloads, and thus any effect caused by the worm, blackout, constant flickering, etc.) will be permanent.” What’s more, the attack is a worm, and can jump from connected device to connected device through the air. It could potentially knock out an entire city with just one infected bulb at the root “within minutes.” “There is no other method of reprogramming these devices without full disassemble (which is not feasible). Any old stock would also need to be recalled, as any devices with vulnerable firmware can be infected as soon as the power is applied.” The result is that the hackers were able to turn lights on and off both from a van driving by a house and a drone flying outside an office building. For the home, the team was 70 meters (229.7 feet) away and caused lights to go on and off individually. The office building houses a few security companies including Oracle, and was hacked from 350 meters (1, 148 feet; about a quarter of a mile), and once under control, the lights started signaling “S.O.S.” in Morse code. “We used only readily available equipment costing a few hundred dollars, and managed to find this key without seeing any actual updates.” Not terrifying at all, right? The researchers say that they’ve contacted Philips and included all the details needed for a fix. Philips has confirmed the weaknesses and issued firmware updates to hopefully guard against this ever happening. Via: New York Times Source: Eyalro (1) , (2) (PDF)

See the article here:
Hackers hijack a Philips Hue lights with a drone

USB-C’s new audio spec could get rid of your headphone jack

Like it or not, the effort to get rid of the headphone jack is well underway. The USB Implementers Forum has published its long-expected Audio Device Class 3.0 specification, giving device makers the standard they need to pipe sound through USB-C ports on everything from phones to PCs. And the organization isn’t shy about its goals, either — this is mainly about letting companies removing the ages-old 3.5mm port, according to the Forum. In theory, that means slimmer devices, better water resistance and opening the “door to innovation” through room for other features. We’re not sure everyone will buy that last argument, but there are some advantages to the spec that are worthwhile even if the headphone jack is here to stay. Aside from offering better digital audio support (such as headphones with custom audio processing), the USB-C sound spec improves on earlier USB approaches with power-saving measures and keyword detection. In other words: a company could take advantage of USB audio without hurting your battery life as much as before, and it should be easier to implement voice recognition. This doesn’t mean that every company will embrace 3.5mm-free hardware with the same enthusiasm as Apple or Motorola . After all, Samsung used its Galaxy Note 7 introduction to make a not-so-subtle dig at Apple’s then-rumored decision to drop the headphone jack on the iPhone 7. However, the USB-C spec may nudge vendors who were thinking about ditching the conventional audio socket and were just waiting for official support to make their move. Via: AnandTech Source: USB Implementers Forum (PDF)

Read the original:
USB-C’s new audio spec could get rid of your headphone jack

Supreme Court blocks Senate Backpage sex ad subpoena

US Supreme Court building. (credit: MitchellShapiroPhotography ) The US Supreme Court is giving Backpage.com a victory over the US Senate, at least in the short term. Chief Justice John Roberts says the online classified ad portal, at least for now, does not have to comply with a Senate subpoena investigating how Backpage conducts its business. The investigation demands documents about the ins and outs of the site’s editorial practices. The Permanent Subcommittee on Investigations contends that the site is littered with ads that amount to offering sex services by women and children forced into prostitution, and it wants to know how it screens ads posted to its site by third parties. The chief justice’s decision Tuesday comes days after a federal appeals court upheld a ruling by a lower court judge and said  (PDF) Backpage must comply with the subpoena. The Senate and Backpage have been deadlocked in a legal battle for more than a year. Backpage said the First Amendment shields it from having to comply with the subpoena , (PDF) while the Senate maintains that the First Amendment implications are secondary  (PDF) to cutting down on sex trafficking ads on the site. Read 4 remaining paragraphs | Comments

Read More:
Supreme Court blocks Senate Backpage sex ad subpoena

EU Commission: Apple must repay its $14.5b Irish tax break

The European Commission has ruled that Apple was given up to €13 billion ($14.5 billion) in an illegal sweetheart tax deal with the Irish government. The amount of money involved here dwarfs the EU antitrust penalties handed out to Google, Microsoft and others, but this is effectively a backdated tax bill, rather than a fine. Officials opened the investigation into Apple’s tax affairs back in 2013 and soon found that the agreement that it had signed with Ireland was illegal . The Commission says that because the deal gave Apple a “significant advantage” over its competition, the iPhone maker must now be prepared to pay back “illegal state aid” over the ten-year period before it began investigating its tax practices. Officials say that amount totals around €13 billion (from between 2003 and 2014) and that interest must also be accounted for. That could mean an additional €1-2 billion could be bolted onto that figure. “Member States cannot give tax benefits to selected companies – this is illegal under EU state aid rules. The Commission’s investigation concluded that Ireland granted illegal tax benefits to Apple, which enabled it to pay substantially less tax than other businesses over many years, ” says Commissioner Margrethe Vestager. “In fact, this selective treatment allowed Apple to pay an effective corporate tax rate of 1 per cent on its European profits in 2003 down to 0.005 per cent in 2014.” The story began way back in 1991 when Apple signed a deal with the Irish government that enabled it to use a very specific type of tax loophole. This loophole was called a ” double Irish ” and, very simply, allowed Apple to split profits, paying almost nothing in the process. It’s quite a successful system, and in 2014, Apple was able to stash two-thirds of its global income in this tax haven. It’s not just Europe that feels that Apple’s corporate tax affairs are too shady, with Senator Carl Levin criticizing the company back in 2013. He wrote a lengthy report ( .PDF ) saying that Apple had negotiated an effective tax rate of less than two percent in Ireland. In the US, by comparison, it would have been expected to at least pay 15 percent. But sweetheart deals are in violation with the principles of the free market, which the European Union has sought to uphold. Countries are barred from offering secret handouts to give local players an unfair advantage over the competition. This is classified as “state aid, ” and is illegal in the eyes of the commission. The US won’t agree with the ruling, given that it feels that any tax Apple owes should go to the treasury. Tim Cook himself has said that he feels that where you ” create value is the place where you are taxed .” The implication being that the only place Apple should be on the hook for tax is in the US, even though much of that value is created in Foxconn’s Chinese factories. But, then again, it’s not as if the US currently benefits from Apple’s largesse, either. The company has been very open about the fact that it has roughly $230 billion stashed in overseas bank accounts that it refuses to repatriate. Cook justifies this by saying that the cost of returning money to the US is too high — shaking out to a tax rate of almost 40 percent, or $92 billion. An investigation over at Forbes revealed that Apple recently hired a Washington lobby firm to push for a corporate tax holiday, even though such a program has been proven not to work. Apple and the Irish government are likely to appeal the ruling. Daniel Cooper contributed to this report. Source: Europa

Read the original post:
EU Commission: Apple must repay its $14.5b Irish tax break

Apple’s Touch ID blocks feds—armed with warrant—from unlocking iPhone

Accused Dallas pimp Martavious Banks Keys was ordered by a federal judge to unlock his iPhone with his fingerprint. (credit: Facebook via The Dallas Morning News ) A Dallas, Texas man accused of prostituting underage girls was secretly ordered by a federal judge to unlock his iPhone using his fingerprint, according to federal court documents that are now unsealed. It’s rare that we  see  a case demanding that a phone be unlocked in that manner, but we should expect more as the mainstream public begins embracing fingerprint technology. Ever since 2013, when Apple popularized this form of unlocking technology, legal experts have predicted that these types of government demands would slowly become more common. Experts also warned these demands are probably not a breach of the Fifth Amendment right against compelled self-incrimination. As an aside, some courts don’t necessarily think that compelling a suspect to reveal their computer passcode is a constitutional violation. A Philadelphia man accused of possessing child pornography has been behind bars on a contempt charge for more than seven months for refusing to divulge his password.  The man’s attorney claims it’s a constitutional violation to compel his client to assist the authorities with their prosecution. A federal appeals court has tentatively agreed to hear the case in September as the suspect (who has not been charged with a crime) remains in prison. Read 11 remaining paragraphs | Comments

Read the article:
Apple’s Touch ID blocks feds—armed with warrant—from unlocking iPhone

Scientists find the largest known planet to orbit two stars

The notion of planets in a Tatooine -like system with two or more stars isn’t strange (they’ve been known since 1993), but a truly massive planet hasn’t been seen before… until now. Scientists using NASA’s Kepler space telescope have discovered Kepler-1647b, the largest known planet to orbit two stars (aka a circumbinary planet). The 4.4 billion year old gas giant is about as large as Jupiter, and orbits at a much further distance than other confirmed planets with a 1, 107-day trip. That’s still much closer than Jupiter, which takes 12 years, but it remains a rarity given our current knowledge. To no one’s surprise, researchers are doubtful that there’s any life to be found on Kepler-1647b; you won’t be visiting Aunt Beru and Uncle Owen any time soon. There’s a chance that any large moons around the planet might harbor organisms, though. And the discoverers are quick to note that this is just the “tip of the iceberg” for large, long-orbit circumbinary planets. Although the chances of finding a planet that supports life are very slim, there should be enough of these unusual star systems out there that the concept is plausible. Via: Space.com Source: NASA , ArXiv.org (PDF)

Continued here:
Scientists find the largest known planet to orbit two stars

Adobe Acrobat Reader Can Now Edit PDFs Directly From Your Dropbox On Android

Android: I hate dealing with PDFs. I understand why they’re necessary, but loading them is a pain and editing them is even worse. So, Adobe’s news that Acrobat Reader can edit PDFs stored in your Dropbox is a godsend. Read more…

More:
Adobe Acrobat Reader Can Now Edit PDFs Directly From Your Dropbox On Android

Business card with built-in ECG is perfect for cardiologists

Some people can make business cards that stand out and show off their skills. Take for example, that one engineer who created a card that lights up and that programmer who designed one that can play Tetris . But what if you’re a medical professional, specifically a cardiologist? A company called MobilECG has created a business card that’s directly connected to your field: it has a built-in ECG that actually works. According to its blog post , the device has sensors that measure “the real ECG signal between the users’ hands, ” so long as their thumbs are touching the finger pads. Of course, you’ll have to explain to patients that while it works, MobilECG created it as a toy. The Hungarian startup clearly states that it’s “not suitable for diagnostic purposes, ” so they can’t abstain from getting an actual ECG done. The company is gauging people’s interest in the card at the moment and is planning to sell it for a rather hefty price of $29 per if it ever decides to release it. If you have the skills to make small electronic devices from scratch, though, you can try to create your own version. The card is open source, and MobilECG posted all its codes and schematics (PDF) online. Via: Gizmodo , Damn Geeky Source: mobilecg

Read More:
Business card with built-in ECG is perfect for cardiologists

California parents: file this form to keep your kids’ school records private

There’s a hard-fought lawsuit underway about whether California schools failed in their duty to provide special ed to students, and as a part of that, the court has ordered disclosure of the school records of every California so the plaintiffs can analyze them. (more…)

See more here:
California parents: file this form to keep your kids’ school records private

Sprint faces ‘thousands’ of job cuts and price hikes

SoftBank , Sprint’s Japanese parent company, made a ton of profit over the last three months, but not as much profit as people were expecting. That’s largely due to it having to carry Sprint on its back, since the network has gone from plucky bronze medalist to sitting in the doldrums of fourth place in America’s hotly-contested carrier wars. In order to try and reduce the amount of red printer ink that Marcelo Claure (pictured, right) has to buy, SoftBank has ordered a “sustainable run rate reduction” of more than $2 billion. In order words, the company is about to have to learn how to do a lot more with a heck of a lot less cash. Via: WSJ Source: SoftBank (.PDF)

View the original here:
Sprint faces ‘thousands’ of job cuts and price hikes