Archives for December 24, 2018

Building a real-life version of the Star Trek tricorder has been the goal of engineers and hackers alike since the first time Dr McCoy complained about being asked to work outside of his job description. But while modern technology has delivered gadgets remarkably similar in function, we’ve still got a long way to go before we replicate 24th century Starfleet design aesthetic. Luckily there’s a whole world of dedicated hackers out there who are willing to take on the challenge.

[Taste The Code] is one such hacker. He wanted to build himself a practical gadget that looked like it would be at home on Picard’s Enterprise, so he gathered up the components to build a hand-held heart rate monitor and went in search for a suitable enclosure. The electronics were simple enough to put together thanks to the high availability and modularity we enjoy in a post-Arduino world, but as you might expect it’s somewhat more difficult to put it into a package that looks suitably sci-fi while remaining functional.

Internally his heart rate monitor is using an Arduino Pro Mini, a small OLED screen, and a turn-key pulse sensor which was originally conceived as a Kickstarter in 2011 by “World Famous Electronics”. Wiring is very simple: the display is connected to the Arduino via I2C, and the pulse sensor hooks up to a free analog pin. Everything is powered by 3 AA batteries delivering 4.5 V, so he didn’t even need a voltage regulator or the extra components required for a rechargeable battery pack.

Once everything was confirmed working on a breadboard, [Taste The Code] started the process of converting a handheld gyroscopic toy into the new home of his heart rate monitor. He kept the battery compartment in the bottom, but everything else was stripped out to make room. One hole was made on the pistol grip case so that a finger tip could rest on the pulse sensor, and another made on the side for the OLED screen. This lets the user hold the device in a natural way while getting a reading. He mentions the sensor can be a bid fiddly, but overall it gives accurate enough readings for his purposes.

In context: Apple’s latest iPad is ahead of the curve in terms of features and design, but that didn’t prevent it from having certain issues with curves. Almost immediately after its release, it became apparent the device was bending in everyday use and could come slightly bent out of the box. Just a few days ago, we reported that Apple had acknowledged the controversy and claimed it was “normal” in a statement to the Verge. But, wait…
Apple has revealed they never made that statement to the Verge, and apparently, the Verge placed unofficial quotations from Apple employees out of context. Most of the information is still believed to be factual, however, such as Apple’s claim that the iPad Pro hasn’t seen above average return rates.

Quite a few people messaged Apple support regarding the matter, and they all got very similar email responses from Apple’s Senior Vice president of Hardware Engineering Dan Riccio. Here’s one such response that MacRumors received.

“Relative to the issue you referenced regarding the new iPad Pro, its unibody design meets or exceeds all of Apple’s high-quality standards of design and precision manufacturing. We’ve carefully engineered it and every part of the manufacturing process is precisely measured and controlled.

Our current specification for iPad Pro flatness is up to 400 microns which is even tighter than previous generations. This 400-micron variance is less than half a millimetre (or the width of fewer than four sheets of paper at most) and this level of flatness won’t change during normal use over the lifetime of the product. Note, these slight variations do not affect the function of the device in any way.

Again, thanks for reaching out and I hope the above explanation addresses your concerns.”

The email went on to imply that Apple would issue a formal statement to news outlets by the end of yesterday. That hasn’t occurred yet, so we’ve decided to publish this article without it, but we’ll provide an update when they do.

Of course, if you haven’t noticed already, there are some very bold claims in the email. “Flatness is up to 400 microns” – tell that to the users whose iPad Pros were bent several millimetres out of the box. Equally as suspicious is the claim that the “level of flatness won’t change during normal use.” While normal use is tricky to define (intentionally, no doubt), many reports of iPad Pros bending after being kept in a backpack for a week can be found online.

In the end, though, the iPad Pros have a very serious Achilles’ heel, and Apple is unlikely to do anything about it. But if everyone keeps reminding Apple about the issue, they might just fix it for their next iPad.

Facepalm: Basic functions of a smartphone should include the ability to make and receive phone calls, use messaging services, and have access to high speed internet via cellular networks. Apple’s latest iOS update has broken those key features for many users.

Last week Apple released iOS 12.1.2 for the iPhone, but had some trouble along the way. Just days after releasing the initial build, a second build was pushed out to replace the first, changing only the build number, not incrementing the well recognized version number.

The main fixes of iOS 12.1.2 are intended to solve problems associated with eSIM support on the iPhone XR, XS, and XS Max. Ironically, the update is also supposed to resolve issues with cellular connectivity for residents of Turkey. However, users across the world have been reporting issues with cellular data following the update.

iPhone owners located in Europe, Asia, and South America have all taken to Twitter to tell Apple their phones are no longer able to use LTE data. In North America, United States residents have been heavily affected.

Many users have reported that they are unable to make phone calls and some have been unable to send or receive text messages. A select few iPhone users have also had problems with WiFi connectivity as well running iOS 12.1.2.

Quite frankly, the roll out of this latest rendition of iOS to iPhone owners has been a bit of a mess. Apple Support has not yet publicly acknowledged the problems that prevent iPhones from being used as actual phones.

For those affected by issues with calling, messaging, and cellular data use of any kind, rest assured that iOS 12.1.3 is not far away. Even though another revision is likely more focused on avoiding further iPhone bans internationally than fixing user issues, Apple will hopefully toss in some patches as well.

If you have not upgraded to iOS 12.1.2 yet, it would be best to sit this one out until Apple decides to acknowledge or at least fix the problems.

At first glance, there was no witness to the grisly murder of Christine Sullivan, who was stabbed to death alongside a friend, Jenna Pellegrini, at her home in rural New Hampshire in the U.S. last year.

But as detectives searched the secluded colonial-style home and its tree-lined garden, they came to realise that a big clue was staring them in the face.

For on the kitchen worktop was an Amazon Echo, one of the increasingly ubiquitous ‘smart speakers’ that can perform a host of household tasks, from checking the weather and playing music to creating shopping lists and looking up recipes.

Such devices follow a user’s spoken commands, so are almost always listening out for fresh orders. What’s more, this one was likely to have been within earshot of Sullivan’s cold-blooded killing, and could be the first-hand witness police were looking for.

That was the theory, at least. So last month, a judge hearing the trial of Sullivan’s alleged killer, a former housemate called Timothy Verrill, ordered Amazon to turn over any voice recordings that the Echo made between January 27, 2017, when the women were murdered, and January 29, when their bodies were found. Prosecutors now hope they might be able to prove Verrill’s guilt. The defendant, who protests his innocence, presumably hopes otherwise.

Whatever the outcome, the whole thing provides a stark illustration of a strange (and some might say chilling) new truth: that the high-tech gadgets, increasingly part of our daily existence, also happen to be highly efficient surveillance devices.

In a world where more and more products, from TVs and ‘home assistants’ to washing machines and even children’s toys are designed to connect to the internet, we are slowly filling our homes with things capable of spying on us. To some, including murder detectives, this can only be a good thing.

Yet to privacy campaigners, the increasing popularity of ‘connected’ devices, tens of thousands of which will be wrapped up under Christmas trees tomorrow morning, portends a dystopian future.

The new breed of technology is part of the so-called ‘internet of things’ through which our homes, cars, and possessions can be controlled remotely, often via smartphone. Yet this not only allows tech giants to chronicle our daily habits, it can also allow friends, family and even complete strangers to eavesdrop on our intimate moments.

A recent article in the Harvard Law Review argued that such devices were turning corporations into ‘surveillance intermediaries’, which hold vast quantities of our personal information, and can be turned over to third parties without our knowledge.

Take, for example, the case of ‘Danielle’, a woman from Portland, in the U.S. State of Oregon, whose Amazon Echo recently took it upon itself to record her late-night conversation with her husband, and sent it to his employee.

She told a local TV station how the employee then telephoned asking why he’d been emailed a sound file of their domestic chat.

According to Amazon, the incident occurred by accident because Echos (just like their rival devices, Facebook’s Portal, Apple HomePod and Google Home) are operated via a ‘wake word’, which users say in order to highlight the fact they are about to give them a task. It mistook one of Danielle’s remarks as its ‘wake word’.

‘Echo woke up due to a word in background conversation sounding like [the Echo’s ‘wake word’] “Alexa”. Then, the subsequent conversation was heard as a “send message” request. At which point, Alexa said out loud “To whom?” At which point, the background conversation was interpreted as a name in the customer’s contact list. Alexa asked, “[contact name], right?” Alexa then interpreted background conversation as “right”.’

Two-thirds of the products, which include anything from toys to robots, that connect to the internet or synch to a smartphone app, were found this week to be sharing children’s data with third parties such as advertising firms.

The Parker Teddy Bear, for instance, gathers information about its user’s habits and social media activity, according to The Times. However, its privacy policy says it cannot guarantee the privacy of data it holds.

Many other smart toys have what Which? magazine has described as ‘concerning vulnerabilities’ which could ‘enable a stranger to talk to a child’.

The vulnerability is caused by the fact that any device controlled via a smartphone can also be accessed by anyone who is nearby and possesses a device — such as a phone — with Bluetooth capability. The ‘hacker’ can say something inappropriate to the child, or listen to what the child is saying. If the device has a camera, it can be used to watch them.

Last year, the FBI warned American parents to do their research before buying any toy that contained speech recognition software or an internet connection. Meanwhile, more than two million private messages left by parents for their children (and vice versa) on the server of one of the smart toy providers were hacked.

Such developments are particularly concerning to anyone who has made use of the growing trend for smart devices — particularly ‘home assistants’ — to replace phones for calling and messaging.

At present, Apple users can make and answer iPhone calls via their HomePod, while Google Home devices can make free calls to UK landlines or mobiles. Facebook’s portal devices can also be used to call your friends.

While these firms say they do not keep records of users’ conversations, Amazon (whose Echo has around a 75 per cent market share) does things differently.

It admits to storing users’ conversations by ‘streaming audio to the cloud’, as it describes in its privacy policy. In theory, this means your conversations with friends and family made through Alexa Calling and Messaging may be recorded and uploaded to its servers in real time.

Worryingly, among more than 12,000 words of Amazon terms and conditions are contradictory statements as to what it actually does with the recordings.

One policy says Alexa is not ‘recording all my conversations’, and that ‘Echo devices are designed to detect only your chosen wake word’.

But elsewhere we read that ‘Alexa processes and retains your Alexa interactions . . . including voice inputs . . . and content you provide or receive through [Alexa]’ and that ‘your messages, communications requests and related interactions’ are all stored in its online servers.

Another potentially Orwellian feature of the Echo home assistant is ‘Drop In’ — a video-calling service which allows any enabled contact to ‘drop in’ to someone’s device unannounced and begin a video conversation with them.

Crucially, the function does not provide an option for a recipient to decline the call before the camera starts rolling. The hazards of this function in a bedside Echo device go without saying.

Little wonder, perhaps, that critics say the only way for users to ensure they aren’t filmed or recorded unawares is by unplugging the devices from the wall.

‘People may not understand how much data is collected by home hubs, and how that information may be analysed,’ said Jim Killock, executive director of Open Rights Group, a privacy rights group.

‘If they are on, they are listening and recording. While companies may be responsible and delete it, there is a temptation to use it and make money from listening to you in the background.’

Silkie Carlo, director of Big Brother Watch, a privacy campaign group, says: ‘The very idea of a smart home is one of ambient surveillance and constant recording. Many smart devices are essentially internet-connected surveillance devices that their owners have limited control of.

‘The terms are deliberately set out to protect the company’s interests rather than the user’s. Families should think carefully about the security risks before spending their money on these devices.’

Earlier this month, the Mail revealed how multinational companies harvest valuable data from their customers.

One of the worst offenders was, predictably, Amazon. It detailed in its privacy policy how it ‘collects’ a treasure trove of customer data including home addresses, credit history, ID documents, dates of birth and locations.

It collates its customers’ product searches, downloads and documents saved on Amazon Drive, and ‘periodically imports and stores’ their contacts on Alexa Calling and Messaging.

Amazon also ‘shares your personal information’ with extensive third-party companies ‘to perform functions on [its] behalf’, and does not make clear what information it collects is used for.

Buried within the small print are clauses which state that if customers don’t co-operate with terms, including agreeing to Alexa recording and storing their voice recordings, Amazon can revoke their access to the home assistant hardware without a refund.

All of which begs the question: are these increasingly popular smart devices actually assisting their owners? Or are the home assistants only really designed to assist the rapacious tech giants?