Google Is an Even Bigger Privacy Nightmare Than You Think

https://lifehacker.com/tech/google-is-a-bigger-privacy-nightmare-than-you-think

Saying "Google is a privacy nightmare" in 2024 probably isn’t telling you anything you don’t already know. It’s an open secret that one of the biggest tech companies in the world gobbles up our data, with and without our consent, and uses it in a bunch of different ways, some of which you might find unscrupulous.

But Google still has the capacity to shock: 404 Media has revealed details from six years’ worth of privacy and security reports contained within an internal Google database. These previously unreported privacy incidents number into the thousands, and were disclosed by Google employees to the company.

The incidents run the gamut in terms of severity, and it’s worth noting that some affected only a limited pool of users, or were rapidly addressed by Google. However, as a whole, the collection of incidents 404 Media shared today is as fascinating as it is concerning.

Privacy issues affecting children, YouTube users

Many of these incidents affected children. One claim suggests Google exposed over one million email addresses from Socratic.org users following an acquisition of the company, including those belonging to minors—and it’s possible those users’ IP addresses and geolocation data were also exposed. Another claim says a "Google speech service" logged all audio for an hour, and the recordings included speech information for around 1,000 children; a filter that was set to block data collection when it detects children’s voices failed to work. And during the launch of the YouTube Kids app, children that pressed the microphone button on an Android keyboard had their audio logged.

Other incidents also involved YouTube. Most notably, Nintendo’s YouTube account was mildly compromised after a Google employee was able to access its private videos. That employee then leaked news that Nintendo was preparing to reveal in an upcoming announcement, although Google says the incident was "non-intentional." YouTube also suggested videos to users based on videos those people had deleted from their watch histories, which goes against YouTube’s internal policies. It’s not clear why it happened. YouTube’s blurring feature also left uncensored versions of pictures available for view, and videos uploaded as "Unlisted" or "Private" had a short window when they were publicly viewable.

Waze leaked addresses and Google Docs links were made public

It doesn’t stop there. Other general privacy and security issues include problems with the carpool feature in Waze, which reportedly leaked both trip information and the addresses of users. Someone reportedly manipulated affiliate tracking codes through AdWords (Google’s ad platform at the time) by modifying customer accounts; a raid of Google’s Jakarta office was leaked through a warning from Google’s security service; and for a time, Google Drive and Google Docs on iOS treated the “Anyone with the link" setting as a "Public" link.

The most egregious incident, in my view, impacted people who weren’t actively using a Google service in the first place. The report alleges that Google’s Street View feature transcribed and saved license plate numbers alongside geolocation information. That’s a pretty big mistake, Google. Not that any of us actually consented to Google taking photographs of nearly every street in the world, but the company is supposed to censor identifying information, like faces, license plates, and, of course, where in the world you happened to be when that Street View photo was taken—not log it away.

To Google’s credit, the company told 404 Media that these reports were all addressed, and are from over six years ago. Google says it is all part of the company’s process for reporting product issues: If an employee detects a problem, such as a privacy or security violation, they can flag it and send along to the appropriate department for triage. The company also said some of these flags ended up not being issues at all, or stemmed from problems impacting third-party services.

Too big to avoid

Admittedly, all products and services, especially at the scale at which Google operates, are going to have issues from time to time. No company makes the perfect system, and when issues happen, what’s important is how the company responds, and what it changes to ensure the issue doesn’t occur again. It’s tough to be so understanding, though, when you’re talking about a company as gargantuan as Google. The search giant owns a piece of all of our data in some way, shape, or form, so when one of their products has an issue, whether it involves revealing censored images, logging audio from users, or storing private data with geolocation tags, it’s going to affect an outsized number of people.

It doesn’t even matter if you pledge to swear off using Google products for good: You could abstain from internet-connected devices entirely, and still have your license plate scraped and stored by Street View. There’s no getting away from it: Google is now everywhere, and we can only hope they are being as responsive and thorough as they claim in safeguarding our data.

via Lifehacker https://ift.tt/RGswXSj

June 3, 2024 at 04:36PM

China lands Chang’e 6 sample-return probe on far side of the moon, a lunar success (video)

https://www.space.com/china-change-6-lands-on-moon-far-side-sample-return-mission

China has landed on the moon’s mysterious far side — again.

The robotic Chang’e 6 mission touched down inside Apollo Crater, within the giant South Pole-Aitken basin, at 6:23 a.m. Beijing Time on Sunday (June 2) , according to Chinese space officials. It was 6:23 p.m. EDT (2223 GMT) on June 1 at the time of the landing. The probe "successfully landed in the pre-selected area," China’s space agency said.

The China National Space Administration (CNSA) now has two far-side landings under its belt — this one and Chang’e 4, which dropped a lander-rover combo onto the gray dirt in January 2019. No other country has done it once.

A depiction of China’s Chang’e 6 moon lander on the far side of the moon after landing on June 2, 2024. (Image credit: CCTV)

And Chang’e 6 will make further history for China, if all goes according to plan: The mission aims to scoop up samples and send them back to Earth, giving researchers their first-ever up-close looks at material from this part of the moon.

"The Chang’e-6 mission is the first human sampling and return mission from the far side of the moon," CNSA officials said in a translated statement. (To be clear: Chang’e 6 is a robotic, not crewed, mission.) "It involves many engineering innovations, high risks and great difficulty." 

Related: China’s Chang’e 6 mission has a big lunar mystery to solve

Sampling a new environment

Chang’e 6 launched on May 3 with a bold and unprecedented task: haul home samples from the moon’s far side, which always faces away from us. (The moon is tidally locked to Earth, completing one rotation on its axis in roughly the same amount of time it takes to orbit our planet. So observers here on Earth always see the same side of our natural satellite.)

Breaking space news, the latest updates on rocket launches, skywatching events and more!

Every lunar surface mission before Chang’e 4 targeted the near side, largely because that area is easier to explore. It’s harder to communicate with robots operating on the far side, for example; doing so generally requires special relay orbiters, which China launched ahead of both Chang’e 4 and Chang’e 6. China’s newest moon relay satellite, called Queqiao-2, aided the Chang’e 6 landing, CNSA officials said.

Chang’e 6 arrived in lunar orbit about four days after liftoff. It spent the next few weeks scrutinizing its planned landing site and gearing up for today’s big event, which went according to plan: Chang’e 6’s lander came down softly in Apollo Crater, leaving the mission’s orbiter, with its attached Earth-reentry module, circling the moon.

Diagram showing the various phases of the Chang’e 6 lunar sample-return mission. (Image credit: CNSA)

The lander will spend the next few days studying its surroundings and collecting about 4.4 pounds (2 kilograms) of lunar dirt and rock. Some of these samples will be scooped from the surface and some will be dug from up to 6.5 feet (2 meters) underground, using Chang’e 6’s onboard drill.

This material will then be launched into lunar orbit by a rocket that rode down with the lander. The sample container will rendezvous with the Chang’e 6 orbiter, then make the long trek back to Earth, eventually touching down here under parachutes on June 25.

Chang’e 6 is also carrying a tiny moon rover and has a variety of scientific experiments onboard the lander.

The China National Space Administration’s Chang’e 6 sample-return probe and its mini-rover (circled) seen before launching to the far side of the moon. (Image credit: CAST)

Scientists will study the returned material in detail, seeking insights about the moon’s history and evolution and clues about why the lunar far side is so different than the near. The dark volcanic seas known as maria are common on the near side, for example, but are rare on the far side, for reasons that remain mysterious.

Researchers will doubtless compare the Chang’e 6 material to the samples collected on the moon’s near side by Chang’e 5, which came down to Earth in December 2020. (Chang’e 5 and Chang’e 6 are sister missions, with virtually identical architectures.)

Related: The moon: Everything you need to know

Big lunar dreams

The Chang’e moon program, which is named after the Chinese moon goddess, has launched increasingly complex and ambitious missions over the past 17 years.

Chang’e 1 and Chang’e 2 sent orbiters to the moon in 2007 and 2010, respectively. Chang’e 3 marked China’s first trip to the lunar surface, putting a lander-rover duo on the near side in late 2013. Chang’e 4 landed a similar pair on the far side in early 2019. Chang’e 5-T1 launched a test capsule around the moon and back to Earth in 2014, proving out the gear that could get lunar samples here safely, which Chang’e 5 did in late 2020.

And there are more missions to come. Chang’e 7 is scheduled to launch in 2026 to assess the resource potential of the moon’s south polar region, which is thought to harbor large stores of water ice. Chang’e 8, which will lift off two years later, will test ways to use those resources on-site — building a structure out of lunar dirt and rock, for example.

And all of this robotic work will lead to something even bigger, if all goes according to plan: crewed missions to the moon, which China aims to start launching by 2030. The nation wants to build an astronaut outpost near the south pole called the International Lunar Research Station later in the 2030s, with help from partners such as Russia, Belarus and Pakistan.

The United States has similar aims with its Artemis program, which is targeting late 2026 for its first crewed lunar landing. The U.S. is also building a moon-exploration coalition via a diplomatic framework called the Artemis Accords; more than 40 nations have signed on to date.

via Space https://www.space.com

June 3, 2024 at 04:59AM

‘Largest Botnet Ever’ Tied to Billions in Stolen Covid-19 Relief Funds

https://www.wired.com/story/911-s5-botnet-arrest/

The United States Department of Justice on Wednesday announced charges against a 35-year-old Chinese national, YunHe Wang, accused of operating a massive botnet allegedly linked to billions of dollars in fraud, child exploitation, and bomb threats, among other crimes.

Wang, identified by numerous pseudonyms—Tom Long and Jack Wan, among others—was arrested on May 24 and is accused of distributing malware through various pop-up VPN services, such as “ProxyGate” and “MaskVPN,” and by embedding viruses in internet files distributed via peer-to-peer networks known as torrents.

The malware is said to have compromised computers located in nearly every country in the world, turning them into proxies through which criminals were able to hide their identities while committing countless crimes. According to prosecutors in the US, this included the theft of billions of dollars slated for Covid-19 pandemic relief; funds allegedly stolen by foreign actors posing as unemployed US citizens.

According to an indictment, the infected computers allegedly provided Wang’s customers with a persistent backdoor, allowing them to disguise themselves as any one of the victims of Wang’s malware. This illicit proxy service, known as “911 S5,” launched as early as 2014, the US government says.

“The 911 S5 Botnet infected computers in nearly 200 countries and facilitated a whole host of computer-enabled crimes, including financial frauds, identity theft, and child exploitation,” says FBI director Christopher Wray, who described the illicit service as “likely the world’s largest botnet ever.”

The US Treasury Department has also sanctioned Wang and two other individuals allegedly tied to 911 S5.

Wang is said to have amassed access to nearly 614,000 IP addresses in the US and more than 18 million others worldwide—collectively, forming the botnet. 911 S5’s customers were able to filter the IPs geographically, choosing where they’d like to appear to be located down to a specific US zip code, the DOJ claims.

The indictment states that of the 150 dedicated servers used to manage the botnet, as many as 76 were leased by US-based service providers, including the one hosting 911 S5’s client interface, which allowed criminals overseas to purchase goods using stolen credit cards, in many cases for the alleged purpose of circumventing US export laws.

More than a half million fraudulent claims lodged with pandemic relief programs in the United States are allegedly tied to 911 S5. According to the indictment, nearly $6 billion in losses have been linked to IP addresses captured by 911 S5. Many of the IP addresses have been reportedly tied to more insidious crimes, including bomb threats and the trafficking of child sexual abuse material, or CSAM.

“Proxy services like 911 S5 are pervasive threats that shield criminals behind the compromised IP addresses of residential computers worldwide,” says Damien Diggs, the US attorney for the Eastern District of Texas, where the charges against Wang were brought by a grand jury earlier this month.

Adds Nicole Argentieri, head of the Justice Department’s Criminal Division: “These criminals used the hijacked computers to conceal their identities and commit a host of crimes, from fraud to cyberstalking.”

At the time of writing, it is unclear whether these virtual impersonations resulted in any criminal investigations or charges against US-based victims whose IP addresses were hijacked as part of the 911 S5 botnet. WIRED is awaiting a response from the Department of Justice regarding this concern.

According to the Justice Department, law enforcement agencies in Singapore, Thailand, and Germany collaborated with US authorities to effect Wang’s arrest.

Wang faces charges of conspiracy, computer fraud, conspiracy to commit wire fraud, and conspiracy to money laundering, with a maximum penalty of 65 years in prison. The US is also seeking to seize a mountain of luxury cars and goods allegedly owned by Wang, including a 2022 Ferrari Spider valued at roughly half a million dollars as well as a Patek Philippe watch worth potentially several times that amount.

via Wired Top Stories https://www.wired.com

May 29, 2024 at 04:24PM

This PC Uses AR Glasses to Create a 100-inch Virtual Workspace, and Yes, it Actually Works

https://gizmodo.com/spacetop-g1-first-look-hands-on-ar-vr-1851507568

The problem with the term “spatial computer” is that most devices using the obtuse marketing term don’t actually look like computers. Yes, the Apple Vision Pro or Meta Quest 3 meet the definition of “computer,” but most people still think of “PC” as a desktop or a laptop. So now there’s the Spacetop G1, an AR laptop, trying to kick both the desktop and VR markets for being too stuck in their ways.

Freewrite Alpha Is the Little, Expensive E-Typewriter That Could

The $1,900 Spacetop G1 is a pair of AR glasses paired with a laptop body and a magnetic cover with a large bulge to contain it all. That would be the reductive description, but in many ways, it’s accurate. The G1 is made by Sightful, which released a beta “Spacetop EA” version last year before coming back with a modified, more ergonomic first product ready for prime time. The company boasts a few ex-Magic Leap developers who have been iterating over the past few years to create this Frankenstein contraption. The glasses are made by the folks at XReal, specifically the Xreal Air 2 Pro, though they have a few modifications meant to handle a desktop-like interface specifically.

I was invited to test out an early version of the G1 for about an hour while talking with Sightful’s execs about what the hell this thing was and where they think their tech fits into the still-nascent AR market. When wearing the glasses, you’ll see a pretty spartan UI with a blackened background that hovers a few feet in front of you and surrounds you ear to ear. You can load up various windows and lay them wherever you want on that wide desktop akin to Apple’s spatial computer. You can resize these however you wish and bring windows forward or back with a few simple gestures on the touchpad.

However, you can’t take windows and leave them around, and you can’t separate the glasses and laptop. You can take both around, and the screen will follow you and reorient itself pretty accurately. Still, if you want to interact with the folks around you, you need to take off the glasses or else look down the bridge of your nose at them, like some preppy kid on the beach offering a vain glance under his sunglasses.

Who is the Spacetop G1 For?

Sightful CEO Tamir Berliner, left, told Gizmodo the AR glasses were designed to work even in direct sunlight.
Photo: Kyle Barr / Gizmodo

This is a device made for ultra-multitaskers who demand more, more, and more screens. Yes, I’m one of those who prefers a multi-screen life. Does that mean I need 100 inches and nearly 180 degrees of display real estate to get my work done? Well, I thought I didn’t, but then I’m surrounded by screens with only the barest pinch of weight on my nose, and despite myself, I could see myself turning up and tuning out with the AR-laptop lifestyle. AKA, I’d become the worst weirdo you see sitting in the corner of your local Starbucks.

Sightful CEO Tamir Berliner told Gizmodo there’s a lot of ground to cover since the laptop hasn’t honestly changed after decades of design. Mobile computers have traveled such well-trodden roads for so long that nobody is thinking about innovation anymore. Still, that tried and true design has been so entrenched that folks have a pretty good idea of exactly what they need from their laptop, and rightfully so. A bad keyboard or trackpad or slightly worse benchmarks could spell doom for any device when there’s always another device on the market able to meet those expectations.

As far as specs go, the Spacetop is using a Qualcomm Snapdragon QCS8550 from last year, which sports the Adreno 740 GPU. It has 16 GB of RAM but a mere base of 128 GB of storage with more expensive options up to 102 GB. I’d want to do direct benchmarks to compare it to other PCs, though for what it’s worth, I didn’t find the device lagged or stuttered at all despite using multiple windows on the screen at once.

The glasses include a pair of OLED displays boasting a 90 Hz refresh rate with a 50-degree field of view. The external sensors and optics have been slightly modified for the Spacetop G1, but overall, they’re a nice, light pair of AR glasses. I had no problem reading text on a page and didn’t notice any focusing or blurring as I have with small AR screens like Lenovo’s Legion Glasses. They also don’t offer the kind of field of view you’re used to with a full VR headset, meaning you’ll need to crane your neck more to look at everything on your virtual desktop.

I’d argue the keyboard is the more important part of the design. If the basic typing experience can’t match expectations, I’d argue the device could be DOA. The look of the keys first resembles Apple’s Magic Keyboard, though without any of the brand-specific keys you’re used to. It’s perhaps not the best typing experience I’ve had, with the keys feeling a little hollow with minimal travel, but it wasn’t bad either. The trackpad is a standout. It’s a nice smooth glass large enough to facilitate the multiple gestures you’d need to control the UI.

What Kind of Software Is the Spacetop G1 Using?

So, all of that works, but I’m most concerned about the software. Things were slightly buggy during my demo, which is to be expected when the final release date is still months away. Sightful’s developers told me the OS is based on a heavily modified version of AOSP (Android Open Source Project) that allows for multiple windows as well as depth tracking on the mouse. There’s a single bar toward the bottom of your view where you can open apps. As of right now, there are very few apps that work natively on the Spacetop. For applications like Instagram or YouTube, use the browser version.

Berliner said he eventually wants to release some more AR-specific applications, though those are still in development, and there’s no word when we can see what Sightful has in store for its first real AR laptop. There’s so much to consider here, but one point I will put in Spacetop’s favor is, despite that massive hill on the top of the laptop’s sleeve, it fits cleanly into my backpack’s laptop holder. The cover snaps down with a satisfying clack, and you don’t have to wind the cable in any specific way to get it all contained nice and snug.

Those who want to get in line for one need to put down $100 on the company’s website deposit to be first in line for when Spacetop finally releases in October later this year. The device costs $1,900, a steep price for any mobile computer. Still, if you wear glasses, you’ll have the chance to order a specific set of prescription lenses that attach magnetically to Spacetop’s AR glasses.

It’s best not to think of the Spacetop as an “augmented reality laptop,” at least for right now. You won’t flick windows around the room with hand tracking like the $3,500 Apple Vision Pro. There really aren’t any AR capabilities save for the floating screen that is specifically tied to the laptop itself. But the screen is bright, and the darkened glasses made working even in direct sunlight possible. That’s all to say: this is an interesting, expensive new product that is, at the very least, trying something new.

via Gizmodo https://gizmodo.com

May 30, 2024 at 07:12AM

California launching pilot program to charge drivers for miles driven

https://www.autoblog.com/2024/05/26/california-launching-pilot-program-to-charge-drivers-for-miles-driven/

California is the nation’s biggest EV market by a wide margin, and the relatively high percentage of battery-powered cars is digging a hole in the state’s budget because it relies on revenue from its gasoline tax to fund road maintenance. Lawmakers want to replace the gasoline tax with a new mileage-based tax to offset the loss, and they plan to begin testing this system by launching a pilot program in August 2024.

Lauren Prehoda, a spokesperson for Caltrans, told news outlet ABC7 that maintaining California’s road network costs approximately $8.5 billion annually. "The vast majority" of this sum comes from the taxes that the state collects every time someone fills up their car’s tank. Put another way, California loses money when someone replaces a gasoline-powered car with an EV. Hybrids are eroding the budget as well. State officials estimate that there were about 1.1 million electric cars and 1.3 million hybrids on California roads in 2022.

"On average, Californians pay about $300 a year in state gas taxes. EVs have a $100 [annual] registration fee. That’s a $200-million-a-year-loss," Prehoda said. Note that California plans to ban the sale of gasoline-powered cars by 2035, so its gas tax revenues will fall to zero.

Caltrans is proposing a solution called the California Road Charge which would record the number of miles driven annually and tax motorists accordingly. The rate hasn’t been set because the Road Charge remains at the prototype stage; it’s not a law yet. However, a cost simulator on the program’s website lists three options: $.02, $.03, and $.04 per mile. It also argues that this system could allow some motorists to save money. For example, if you drive a 2023 Honda Pilot 1,000 miles per month your monthly Road Charge bill would check in at $20, $30, or $40 depending on which of the three hypothetical rates apply to you. The site claims the same driver currently pays $27.57 in monthly fuel taxes. It’s EV drivers that will end up spending more: they’d pay the same monthly Road Charge but they currently don’t pay a gas tax.

In theory, drivers would be able to choose how the state tracks their mileage. They could hook up an electronic device to their car, use the car’s built-in tracking system or send Caltrans a picture of the odometer. "Everyone has different levels of comfort when we’re managing our data between efficiency and privacy, and that’s why it’s really important to have options from low tech to high tech," Prehoda told ABC7.

Drivers who are interested in participating in the pilot program can sign up on the California Road Charge website. State officials will select an unspecified number of applicants in July 2024. These motorists will be asked to make monthly Road Charge payments between August 2024 and January 2025, and they’ll need to fill out two surveys about their experience. The state will refund their gasoline tax or their EV registration fee at the end of the program. To make the project more enticing, Caltrans will give participants up to $400 in gift cards.

The data gathered during the program will help lawmakers determine whether the Road Charge should replace the state’s gasoline tax.

via Autoblog https://ift.tt/ILWCD3O

May 26, 2024 at 09:07AM

California Bill Would Require New Cars to Beep at You If You Speed

https://gizmodo.com/california-bill-would-require-new-cars-to-beep-at-you-i-1851497656

In developed countries all over the world, driving continues to get safer. The one exception to that rule is the United States, where driving continues to get more dangerous. Unfortunately, there are so many factors that make drivers in the U.S. more dangerous, there’s no silver bullet that will magically fix things. One thing that would definitely help, though, would be if drivers would simply slow down, especially in cities. In an attempt to make that happen, Road & Track reports that California just passed a bill that will require cars to warn drivers whenever they drive more than 10 mph over the speed limit.

Tackling the Legend of Zelda Film

The California Senate just passed SB 961, which would require half of all new cars built or sold in the state to include passive speed limiters by 2029, and by 2032, that figure will rise to 100 percent. If it passes the Assembly and is signed into law, the new regulation will apply to all passenger vehicles, including trucks, as well as buses. And while there will be nothing physically stopping someone from driving more than 10 mph over the posted speed limit, adding beeps and flashing warnings will at least make doing so much more annoying.

According to the bill, the “passive intelligent speed assistance system” that would be required would be “[an] integrated vehicle system that uses, at minimum, the GPS location of the vehicle compared with a database of posted speed limits, to determine the speed limit, and utilizes a brief, one-time visual and audio signal to alert the driver each time they exceed the speed limit by more than 10 miles per hour.” It would also default to the higher speed limit if, for whatever reason, there are multiple speed limits in the area you’re driving.

This isn’t exactly a new idea, either. Starting in July, the European Union will also begin requiring similar passive speed limiters in new cars, and both the National Transportation Safety Board and the Insurance Institute for Highway Safety also support implementing a similar regulation nationally. Assuming it passes, California would simply be the first state in the country to require it. And if it does pass, don’t be surprised if more states end up following California’s lead.

This article originally appeared on Jalopnik.

via Gizmodo https://gizmodo.com

May 23, 2024 at 03:16PM