Security researchers have found several popular Android phones can be tricked into snooping on their owners by exploiting a weakness that gives accessories access to the phone’s underlying baseband software.
Attackers can use that access to trick vulnerable phones into giving up their unique identifiers, such as their IMEI and IMSI numbers, downgrade a target’s connection in order to intercept phone calls, forward calls to another phone or block all phone calls and internet access altogether.
The research, shared exclusively with TechCrunch, affects at least 10 popular Android devices, including Google’s Pixel 2, Huawei’s Nexus 6P and Samsung’s Galaxy S8+.
The vulnerabilities are found in the baseband firmware, the software that allows the phone’s modem to communicate with the cell network, such as making phone calls or connecting to the internet. Given its importance, the baseband is typically off-limits from the rest of the device, including its apps, and often come with command blacklisting to prevent non-critical commands from running. But the researchers found that many Android phones inadvertently allow Bluetooth and USB accessories — like headphones and headsets — access to the baseband. By exploiting a vulnerable accessory, an attacker can run commands on a connected Android phone.
“The impact of these attacks ranges from sensitive user information exposure to complete service disruption,” said Syed Rafiul Hussain, one of the co-authors of the paper, in an email to TechCrunch.
Hussain and his colleagues Imtiaz Karim, Fabrizio Cicala and Elisa Bertino at Purdue University and Omar Chowdhury at the University of Iowa are set to present their findings next month.
“The impact of these attacks ranges from sensitive user information exposure to complete service disruption.”
Syed Rafiul Hussain, Purdue University
Baseband firmware use a special language, known as AT commands, which control the device’s cellular functions. These commands can be used to tell the modem which phone number to call. But the researchers found that these commands can be manipulated. The researchers developed a tool, dubbed ATFuzzer, which tries to find potentially problematic AT commands.
In their testing, the researchers discovered 14 commands that could be used to trick the vulnerable Android phones into leaking sensitive device data, and manipulating phone calls.
But not all devices are vulnerable to the same commands or can be manipulated in the same way. The researchers found, for example, that certain commands could trick a Galaxy S8+ phone into leaking its IMEI number, redirect phone calls to another phone and downgrade their cellular connection — all of which can be used to snoop and listen in on phone calls, such as with specialist cellular snooping hardware known as “stingrays.” Other devices were not vulnerable to call manipulation but were susceptible to commands that could be used to block internet connectivity and phone calls.
The vulnerabilities are not difficult to exploit, but require all of the right conditions to be met.
“The attacks can be easily carried out by an adversary with cheap Bluetooth connectors or by setting up a malicious USB charging station,” said Hussain. In other words, it’s possible to manipulate a phone if an accessory is accessible over the internet — such as a computer. Or, if a phone is connected to a Bluetooth device, an attacker has to be in close proximity. (Bluetooth attacks are not difficult, given vulnerabilities in how some devices implement Bluetooth has left some devices more vulnerable to attacks than others.)
“If your smartphone is connected with a headphone or any other Bluetooth device, the attacker can first exploit the inherent vulnerabilities of the Bluetooth connection and then inject those malformed AT commands,” said Hussain.
Samsung recognized the vulnerabilities in some of its devices and is rolling out patches. Neither Huawei nor Google provided comment at the time of writing.
Hussain said that iPhones were not affected by the vulnerabilities.
This research becomes the latest to examine vulnerabilities in baseband firmware. Over the years there have been several papers examining various phones and devices with baseband vulnerabilities. Although these reports are rare, security researchers have long warned that intelligence agencies and hackers alike could be using these flaws to launch silent attacks.
A historical musical that examines black identity in the 1901 World's Fair | Amma Y. Ghartey-Tagoe Kootin
In this lively talk and performance, artist and TED Fellow Amma Y. Ghartey-Tagoe Kootin offers a sneak peek of her forthcoming musical "At Buffalo." Drawing on archival material from the 1901 Pan-American Exhibition, a world's fair held in Buffalo, New York, the show examines conflicting representations of black identity exhibited at the fair -- highlighting unsettlingly familiar parallels between American society at the turn of the century and today, and asking: Are we all still part of the show?
We thought VPNs were secure, but with an increasing number of secure services reporting server breaches, that seems not to be the case. But how do these secure services get hacked in the first place, and how do hackers capitalize on it?
Here’s how VPNs get hacked and what it means for your privacy.
If we take a brief look at how a VPN works, it looks unhackable. This is the primary draw of a VPN, as people feel they can trust the service to maintain their privacy.
For one, your computer encrypts the connection before it leaves for the internet. This encryption makes a VPN a solid layer of defense against spying, as anyone snooping on the connection can’t read what you’re sending. Hackers can use public Wi-Fi connections to steal your identity, but a VPN can protect you from all attacks bar someone looking over your shoulder.
Even your ISP can’t see the packets you send, which makes VPNs useful for hiding your traffic from a strict government.
If a hacker manages to break into a VPN’s database, they may leave empty-handed. Many top VPNs hold a “no-logging policy,” which states that they won’t save records of how you use their service. These logs are a potential goldmine for hackers, and refusing to keep them means your privacy is maintained even after a database leak.
From these points, it’s easy to assume that a VPN is “unhackable.” However, there are ways that hackers can breach a VPN.
How VPNs Are Susceptible to Hacking
A hacker’s best point of entry is near the outer reaches of the VPN network. VPN companies sometimes opt not to set up servers in all the countries they want to support. Instead, they’ll hire out data centers established within the target country.
This plan often doesn’t introduce any complications and the VPN service adopts the servers without any issues. However, there is the rare chance that there is a hidden oversight in the data center that the VPN company isn’t aware of. In one reported case, a server that NordVPN rented out had a forgotten-about remote connection tool installed.
This tool was insecure and hackers used it to break in.
From there, the hacker found some additional files. The Register reports that this includes an expired encryption key and a DNS certificate. The key didn’t allow the hacker to snoop on traffic, and if they did, NordVPN says they’d only see the same data an ISP would see.
How Hackers Can Capitalize on a VPN Attack
This flaw is the main weakness that a hacker will try to exploit. Because the VPN doesn’t store logs of connections, a hacker’s best bet is to watch the data flow in real-time and analyze the packets.
This tactic is called the “man-in-the-middle” (MITM) attack. It’s when a hacker gets their information from monitoring data as it passes through. It’s not easy to pull off, but it’s not impossible to achieve. Should a hacker get their hands on an encryption key, they can reverse the VPN’s protection and peek at the packets as they pass through.
Of course, this doesn’t give hackers free rein over the traffic. Any data encrypted with HTTPS won’t be readable, as the hacker won’t have the key for it. Anything that’s plaintext, however, will be readable and potentially editable, which would be a severe privacy breach.
Should You Be Concerned About Your VPN Privacy?
While this does sound terrifying, don’t worry just yet. Before you panic, consider why you use or would use a VPN service. At the base level, a hacker monitoring a VPN connection would only see what an ISP would see. For some, this kind of breach doesn’t affect them at all; for others, it’s a severe breach of trust.
On one end of the spectrum, let’s assume you use a VPN so you can get around geo-blocks. You don’t boot up the VPN often, and when you do, it’s to watch shows on Netflix that aren’t available in your home country. In this case, do you mind that a hacker knows you’re watching the newest Labyrinth series?
If not, you may not want to protect yourself further—although some would argue that surrendering any part of your privacy is never right!
On the other side, VPNs are more than just a way to watch TV shows from overseas. They’re a way to browse the internet and speak freely without intervention from the government. For these people, a breach of their privacy could have severe ramifications.
If the thought of your privacy leaking in an attack is too much to bear, it’s worth taking the extra steps to protect yourself.
How to Protect Your Privacy With Additional Security
To start, it’s essential to realize that these breaches aren’t commonplace. Also, the hacker in the NordVPN case only gained access to one of the 5000+ servers. This means that the majority of the service was safe, and only a small section of users was under threat. As such, a VPN is still a useful way to protect your privacy.
However, if you’re very serious about staying anonymous, a VPN shouldn’t be your only line of defense. The attacks on VPNs have shown that they do have flaws, but that doesn’t mean that they’re entirely useless. The best way to maintain your privacy is to add another layer of privacy to what the VPN provides. That way, you’re not wholly dependent on your VPN service to protect you.
For instance, you can boot up your VPN, then use the Tor browser to browse the web. The Tor browser connects to the Tor network, which uses triple-encryption for its traffic. This encryption is applied before your computer sends it, much like a VPN.
If a hacker performs a MITM attack on your VPN connection, The Tor network’s encryption keeps your data safe. On the other hand, if your connection is compromised on the Tor network, the trail leads back to the VPN. If the VPN doesn’t store logs, the trail back to you goes dead.
As such, using two layers of security is an effective way to protect your privacy. Regardless of which side suffers a breach, the other one will pick up the slack.
How to Use a VPN Properly
VPNs can help secure your connection, but they’re not impenetrable. As we’ve seen from these incidents, hackers can infiltrate a VPN server and use keys to initiate a MITM attack. If you’re concerned about your privacy, it’s worth backing up a VPN with another layer of defense. That way, if one layer falls, the other is there to back you up.
While big budget triple-A video games have their place, it’s good to balance these out with the best indie games. Think of them as art house films against blockbusters.
An indie game is generally made by an individual or a small development team. The developers are often unrestrained by a publisher, allows them to take creative risks.
There are lots of good indie games to enjoy, but where to begin? To help you get started on your indie game adventure, here are the best indie games worth buying on Steam.
Braid is a platformer that was released in 2008, originally for the Xbox 360. It’s classed as the game that launched the indie boom, or at least brought them to the forefront.
It’s easy to understand why. While the premise—man rescues princess captured by a monster—sounds predictable, the way Braid’s story unwraps is anything but.
Key to this is a time-manipulation mechanic. Each world has its own take on time: being able to rewind it, your movement linked to it, having it flow in reverse, and so on. It’ll mess with your brain, but that makes it even more rewarding when you succeed.
Machinarium is a beautiful point-and-click adventure game that puts you in charge of a little robot, desperate to get back inside the city walls and overthrow the evil within.
There’s no dialog in the game. Instead, everything is communicated through expression or symbols, which makes solving the many puzzles even more rewarding.
But you probably don’t need much convincing if you just look at the wonderful artwork and listen to the enchanting soundtrack. Machinarium is one of the best indie games of all time.
The golden age of American animation began in the 1930s and it’s from this that Cuphead takes its artistic inspiration from. It looks like something pulled straight from the era that gave us Steamboat Willie and Betty Boop.
Everything is hand-drawn on cels, the backgrounds created in watercolor, the music a worship of jazz. But Cuphead is so much more than its audiovisuals.
It’s an incredibly difficult run-and-gun game, putting you in control of the titular Cuphead as you work through levels to reach the mega boss fights. There’s also a co-op mode if you need the help of a friend to survive.
To say too much about The Stanley Parable is to ruin its brilliance. It was originally born as a mod to Half-Life 2, before being spun off into its own game for release in 2013.
You take charge of Stanley, guiding him away from curiously abandoned office, as a narrator comments on his every move. While the narrator tries to guide Stanley, you can choose to make entirely different decisions, which results in a lot of surreal humor.
It’s worth playing The Stanley Parable multiple times so that you can make different decisions and explore everything it has to offer. It’s hilarious, and well worth experiencing.
Super Meat Boy is the follow-up to an excellent Flash game (how to download and run Flash games). However, you don’t need any previous experience of the series.
Super Meat Boy is a complex platformer where you control a red square of meat, bouncing across perilous terrain to rescue his girlfriend. It’s inspired by old school classics like Mega Man 2 and Super Mario Bros. 2.
There are over 300 levels to get through, but the difficulty curve is perfectly judged. You’ll return to earlier levels and wonder why you were bashing your head in frustration.
Board an East India Company ghost ship in the 1800s in Return of the Obra Dinn. Created by Lucas Pope (developer of the critically acclaimed Papers, Please) this follow-up is even better than the first.
Everyone on the ship has disappeared and it’s up to you to solve the mystery. You must search for clues, piecing together information to find out the names of the deceased and how they met their fate.
Return of the Obra Dinn has very interesting presentation; it looks like something you’d find on an early Macintosh computer. Let that alone entice you into this clever and engrossing adventure.
Bastion is an action role-playing game, set in a foreign world where a calamity has caused the land to shatter into floating islands.
You don the shoes of a young boy, aptly named The Kid, slashing and firing at an assortment of enemies. As you do, a narrator not only tells an intriguing story, but also comments on your actions.
All of the weapons you collect can be upgraded and there are plentiful challenges along the way, ensuring you’ll spend lots of time in Bastion’s gorgeous environments.
3D platformers used to be all the rage and it’s clear where A Hat in Time draws its inspiration from. Nevertheless, it stands tall as something awesome in its own right.
It’s a cute, charming, and downright fun platformer starring a little girl trying to get home on her spaceship. To do that she’ll need to collect all the Time Pieces that have been scattered on the crazy worlds below.
Hat Girl gets her abilities through the different hats she creates—like brewing potions or looking inside other dimensions. It’s incredibly joyful to mess around with all the different combinations and it’s bound to put a smile on your face.
Inside is a dark game, both aesthetically and emotionally. It’s predominantly monochromatic, with little sound, and there’s an overbearing sense of dread and despair.
You take the role of a young boy on the run, hunted by shadowy forces. Whether it’s being chased by angry dogs, swimming against rising water, or getting shot with a tranquilizer dart, there’s rarely a moment’s rest for the protagonist.
Inside is a puzzle platformer, so you need to manipulate the environment to keep progressing. Whether there’s light at the end of the tunnel is for you to find out.
No list of indie games is complete without mentioning Stardew Valley. This game is the definition of a labor of love, developed with dedication over four years by Eric Barone.
Stardew Valley was heavily inspired by Barone’s passion for Harvest Moon. In his game, you’ve inherited your grandfather’s farm plot and need to get to grips with the fields in order to earn a living.
You can master skills like mining and fishing, meet other characters in the community, explore underground caves, and much more. Say goodbye to your real life and embrace your new virtual one in Stardew Valley.
There Are Lots of Good Indie Games Out There
If we’re honest, this list of the best indie games to buy on Steam could have gone longer, such is the wealth of indie games available today. However, we consider these to be the very best and hope you enjoy playing them.
Google is pushing civilization closer to quantum computing, a development which will change computing and most likely, the world. A Google-developed quantum computer, called Sycamore, solved a problem in seconds that would take a “normal” supercomputer 10,000 years.
Is the age of quantum computing upon us? Has Google achieved “quantum supremacy?” And what does quantum computing mean for you?
What Is Quantum Computing?
Quantum computing fundamentally alters how computers process data, using quantum physics.
A regular semiconductor-based processor (like the one in your laptop or smartphone) uses “bits” of information. The bits exist as a 1 or 0, somewhat like a switch that is on or off. The bits can only exist as a 1 or 0 on traditional hardware.
Quantum computers use quantum bits, known as “qubits.” A qubit can exist as both 1 and 0 simultaneously. The ability for a qubit to hold its state as a 1 and 0 is a central tenet of quantum computing and is known as superposition.
Superposition lets multiple calculations take place at the same time. But to do that, the qubits must be synchronized using a quantum effect known as entanglement.
Although it sounds like the name of an action-packed James Bond film, quantum supremacy is far more ground-breaking. Quantum supremacy is the name given to the moment when a quantum computer completes a calculation faster than a classical computer.
Google claims their Sycamore quantum processor has achieved quantum supremacy for the first time. The team of researchers, led by John Martinis, an experimental physicist at the University of California, set the quantum processor a random sampling task. The sampling task produces a set of numbers with truly random distribution.
“It is likely that the classical simulation time, currently estimated at 10,000 years, will be reduced by improved classical hardware and algorithms,” said Brooks Foxen, a graduate student researcher in Martinis’ lab. “But since we are currently 1.5 trillion times faster, we feel comfortable laying claim to this achievement.”
Has Google Achieved Quantum Supremacy?
The paper detailing the quantum supremacy experiments leaked on the NASA website. Although it was taken offline quickly, it caught the eye of a lot of people due to its bold claims. The paper has since published formally in the scientific journal, Nature.
However, IBM is unconvinced.
Days before the formal release of the Google quantum supremacy paper, IBM issued a paper claiming that the same performance gains can also work on classical hardware, given time to make extensions to a supercomputer. So, while Google argues that it has achieved quantum supremacy, IBM is arguing that it hasn’t because if, given time, it could theoretically extend their Summit supercomputer at Oak Ridge National Laboratories to complete the same task in “approximately two and half days.”
IBM’s claims are not without basis, although not echoed throughout the scientific and computing community.
“The Google paper is reporting a substantial advance. We see wonderful fabrication, wonderful diagnostics, real care towards all the details that make this an advance,” says Sir Peter Knight, president of the Institute of Physics and board member of the Quantum Technology Strategic Advisory Board.
“Nevertheless, there are a number of assumptions in the paper. Like Google, IBM have also looked very carefully at the way that the supercomputing classical simulations could be done differently to check the idea of ‘computing supremacy’. Until the quantum community have had a chance to road test the data from the experiment using the Sycamore chip, how far Google have achieved this, is still an open question. But science progresses by challenging assumptions and I would expect to see more of this.”
Until IBM can provide evidence that the Summit supercomputer can complete the same test within a reasonable time frame, Google has achieved quantum supremacy.
What Does Quantum Supremacy Mean for You?
In the short term, quantum supremacy and quantum computing mean little to regular computer users. Quantum computing is an iterative process. Google’s development is an exciting and intriguing step forward. But, just as modern computing took time, so will quantum computing.
The second thing to consider is that a quantum computer requires a phenomenal amount of cooling. A quantum computer requires liquid nitrogen to operate. There is no way to replicate the amount of cooling required to bring quantum computing to a smartphone or laptop. The technology doesn’t exist.
That point when your non-scientific parent(s) asks you to explain Google’s Quantum Supremacy and if the robots are taking over yet. #QuantumSupermacy
Concerning the first point, it is a long-term goal. The first computers were the size of an entire room and took a whole team of scientists to run and program. Quantum computing is at the same stage.
Others have doubts that quantum computing will ever replace classical semiconductor-based computing. Moore’s Law dictates that the number of transistors in a processor will double every two years, increasing computing power along with it. (It doesn’t dictate that the processing power will increase, which is a misconception of the law.)
Even with the eventual and probable slowdown of semiconductor-based processors, processing power will continue to increase. Brian Krzanich, the former CEO of Intel, confirmed that Intel’s processor scaling is “closer to two and a half years than two,” but that the company would continue to pursue processor power advancements.
Neven’s Law dictates how quickly quantum processors are improving and is named after Hartmut Neven, director of the Quantum Artificial Intelligence Lab at Google.
Neven’s Law states that quantum processing power will grow with a double exponential rate—that’s insanely fast. For example, processing power grows by a factor of 2^2^1 (4), then 2^2^2 (16), then 2^2^3 (256), then 2^2^4 (65,536), and so on. Using this format, you can see how the rate of processing will rapidly massively increase.
Quantum Supremacy Is Here
Google’s quantum supremacy development is ground-breaking. Despite IBM’s efforts to undermine the quantum development, Google is pushing quantum computing forward. If scientists can find fault with Google’s claims, then the process and development will become stronger for it.
« Quantum computer took just 200 seconds to perform a calculation that would have taken the world's top supercomputer 10,000 years to crack »…Google proclaims quantum supermacy, let’s say bye bye to encryption…
Quantum computing is a difficult area of computing and science for many to process. The ideas are equal parts abstract and enormous, the outcomes difficult to process, and impact unknown.
The social media giant’s latest bold move is to launch the Facebook Portal. These devices are designed for video chats with motion-sensitive cameras, smart displays, and Alexa built-in.
But this is the company with an extensive history of privacy scandals, including concerns about data collection and facial recognition. Can you really trust Facebook Portals with sensitive information?
What Is Facebook Portal?
The Facebook Portal lets you make video calls via Messenger or WhatsApp. Each unit has a 12MP motion-sensitive camera which follows you around the room with a 140-degree field of view. It also uses Augmented Reality (AR) to integrate animation into chats, reminiscent of Snapchat’s filters, lenses, and stickers.
Because Alexa is built-in, you can search the web (in a limited capacity), play music via Spotify, and control your smart home.
A standard Portal features a 10-inch display, though cheaper alternatives include the Mini (eight-inch display) and TV. The latter integrates with your smart television, meaning chats can be carried over to the biggest screen in your house.
A camera permanently trained on your living room should immediately raise concerns. So, too, should its microphone, which some think can be used to listen in on everything you do.
People are now naturally sceptical of Facebook’s intentions. Admittedly, that doesn’t stop millions from using it every day. Still, you can reduce the amount of information you put online. The main potential issue with Facebook Portal is that you don’t know what’s collected and who can access that data.
We’ll come back to that.
It’s especially concerning as Facebook isn’t known for its transparency. In July 2019, the Federal Trade Commission fined Facebook $5 billion for failing to tell its users about a data leak which led to the Cambridge Analytica scandal. CEO, Mark Zuckerberg, however, now admits the firm has a responsibility to look after personal information.
What Safety Features Do Facebook Portals Have?
Facebook says that the Portal was created with “privacy, safety, and security in mind”, so what exactly does that mean? How does the Facebook Portal protect your privacy?
The camera and microphone can be disabled with the touch of a button. A red light demonstrates that they’re inactive. But why should you trust that? After all, even Zuckerberg covers the camera on his laptop with tape—a smart move given how snoopers can spy on you through such devices.
3 things about this photo of Zuck:
Camera covered with tape
Mic jack covered with tape
Email client is Thunderbird pic.twitter.com/vdQlF7RjQt
With that in mind, second-generation Portals have a physical cover you can slide over the lens. This doesn’t automatically disable the microphone, however, because you may still want to use the voice interface.
You can also activate the screen lock. It’s like your smartphone: it stops others from using the device without inputting a four- to 12-digit passcode.
And as Portals piggyback off Messenger and WhatsApp, calls are encrypted. This means data sent between units (whether Portal to Portal or via another device) is scrambled in transit so is difficult, though not impossible, to intercept.
Perhaps most importantly, the Portal can’t record and save videos or broadcast using Facebook Live. Your video calls aren’t listened to or stored anywhere.
Can Facebook Portal Identify Faces?
You’ve seen facial recognition at work. Tags are suggested when you add photos of family and friends on Facebook. This uses the company’s Deep Face technology to build an artificial map of faces. Naturally, you should be wondering, does Facebook Portal use facial recognition software? Does it know who’s talking?
Fortunately not. The Portal doesn’t recognise your face. The AI is used to track motion, so the camera can pan across a room. It isn’t there for malicious intent. Nonetheless, it can lock onto faces, so the Portal automatically zooms and still keeps you in shot. It’s also used when activating AR.
This AI runs locally, meaning on your actual Portal, not on Facebook’s servers.
Does Facebook Portal’s Microphone Listen All the Time?
As previously mentioned, you can disable the microphone. You have to physically turn it back on again before it’ll listen to voice commands again. If you use the camera shutter to cover the lens, your mic stays on, so it can still react when you say “Hey Portal”.
The Portal activates when it detects you saying that phrase then waits for commands. If activated, a notification appears at the bottom of the screen.
But no system is infallible, so Facebook coyly warns about “false wakes”, i.e. when it incorrectly identifies something you say as “Hey Portal”. These misunderstandings are deleted within 90 days.
What Information Does Facebook Portal Collect?
Read that last sentence again. Because yes, Facebook nonetheless collects some information from you. This primarily relates to voice commands.
Once the unit hears “Hey Portal”, it records and transcribes what it hears. This information is then sent to Facebook’s servers, including background noises. Facebook deletes this—eventually. It can take three years.
To prevent this and “false wakes”, you need to turn your microphone off. It means it won’t respond to “Hey Portal”, however.
So does Facebook Portal store anything related to your video calls? Unsurprisingly, the answer is: yes. Though your actual video contents stay private, technical details are sent to Facebook. The company says this includes “volume level, number of bytes received, or frame resolution”.
Further data is logged on your Portal and only sent to Facebook in the form of crash reports. This can tell the social network how many people were in frame when the Portal stopped working and their distances from the microphones.
This is indicative of more information sent to Facebook. The onus is on performance, so it’ll also collate data about ambient light, system logs, and settings.
That’s what happens to your video calls. What about third-party apps? The Portal has an in-built browser and a limited app store; some apps are pre-loaded too. And yes, these open more questions about privacy. Facebook communicates with third-parties.
Sometimes, this is merely about app usage: frequency, bugs, and length of time you use them. Sometimes, more information is mined. To find out more, you have to check out the independent privacy policies of each app. It takes time, but it’s worth finding out exactly what personal details you’re surrendering.
How Is Collected Information Used?
Facebook assures users that most of the data collected is for performance reasons only. Information develops the AIs, so, for instance, results to “Hey Portal” enquiries are accurate. These are reviewed by actual people, not merely a computer. These Facebook workers are monitored so they comply with privacy and security strictures.
But your voice commands can be shared with third parties. Recordings and transcripts are sent to service providers like Alexa once more to improve the service. Transcripts are shared with apps for accuracy in response to “Hey Portal” enquiries.
An added caveat is in your favor: the pitch of your voice is altered so no one can personally identify you that way.
However, further identifiers are shared, like your Portal’s name, IP address, and zip code.
How Can You Protect Your Information?
“Hey Portal” is only available in English at the time of launch, so if you select another language, voice commands are disabled. This will greatly reduce how useful your device is, though.
Fortunately, there is something you can do to protect your privacy. Thanks to the General Data Protection Regulation (GDPR), you can access and delete your recordings—meaning Facebook won’t store any voice commands.
You can disable storage completely in your Portal Settings, so you can still use “Hey Portal” but it won’t log what you say. The downside is that it won’t be as fast or as accurate as devices which store data, although it’s doubtful you’ll even notice this lag.
System usage is still logged. The company can tell what times you use Portal and how often.
To alter this, you’ll need to sign into Facebook, navigate to your profile, then click on Activity Log. This is a list of every time you’ve signed into Portal or Facebook, plus all your reacts and comments. You can delete accordingly. It may take some time if you’ve never looked before.
There’s nothing you can do about the company sharing device information like IP address, sadly.
Don’t forget that anyone else who uses your Portal can access your recordings. If you’re nervous about this, use a passcode.
Can You Trust Facebook Portal With Your Privacy?
This might surprise you, but… Yes. We’re very nervous about Facebook’s security scandals, but the Portal is designed with your privacy in mind. It’s not perfect, of course. You’ve should be wary of “false wakes”, where information is recorded when the unit thinks you’ve said “Hey Portal”.
Then again, that’s a concern with all voice assistants. The Facebook Portal is as safe as such devices get right now.
Your iPhone isn’t impervious to problems. In fact, most of us experience at least a few issues with our iPhones throughout their lifespan. One of the strongest tools at your disposal for fixing these issues is iOS’s Device Firmware Update (DFU) mode.
DFU mode is a special iPhone state you can use to reinstall every line of software and firmware on your device. It’s the deepest possible restore for an iPhone, and is even more effective than putting it in recovery mode.
Here are some iPhone problems you can fix using DFU mode.
1. Unresponsive Devices
You might think you’ve got a bricked iPhone when actually it’s suffering from firmware problems. Among other tasks, the firmware is responsible for telling your iPhone how to respond to the different buttons on your device.
When you press the Sleep/Wake button, for example, the firmware starts booting up iOS. If your iPhone doesn’t power on, it could be because the firmware isn’t responding to that button correctly.
A boot loop is the term for when your iPhone can’t get past the Apple logo during startup. This happens if there’s a problem with the operating software on your device.
It’s difficult to try other troubleshooting suggestions if you can’t get past the boot screen, but you can still put your iPhone in DFU mode. This lets you reinstall the software, overwriting any errors that caused the boot loop.
Firmware corruptions affect all manner of components in your iPhone. They can lead to anything from slow performance to bad Wi-Fi connectivity. When you reinstall the firmware via DFU mode, it fixes all kinds of problems like this.
There’s a reason your iPhone doesn’t start software updates when the battery is low. If you lose power mid-update, your operating software will end up in limbo. That usually means your iPhone can’t finish updating and can’t use the previous software either.
When you use DFU mode to restore your device, it overwrites the incomplete software with fresh code, updating your iPhone to the latest version of iOS in the process.
5. Hardware-Related Issues
Your iPhone firmware tells the device how to work with different hardware components. As a result, problems that seem as though they need a physical repair can actually be the result of faulty firmware.
If you’re experiencing any major problems with your iPhone, there’s a good chance you can fix them using DFU mode. When you restore your iPhone with this mode, it reinstalls the software and firmware and also erases all your content. Your iPhone should be as good as new by the time it’s finished.
That said, there are a couple of risks associated with DFU mode.
Make a Backup of Your iPhone First
When you restore your iPhone using DFU mode, it erases all the content on your iPhone. You need to ensure you have a recent backup first so you don’t lose any photos, videos, messages, apps, or other personal data.
It’s not possible to back up your iPhone after you put it in DFU mode. See our iPhone backup guide for more details on how to do it ahead of time.
Don’t Use DFU Mode on Damaged iPhones
If your iPhone is physically damaged, restoring it with DFU mode can make it totally unusable. It doesn’t matter whether you dropped your iPhone in water, cracked the screen, or broke the headphone port—if your device is damaged, we don’t recommend using DFU mode.
The reason for this is because DFU mode asks your iPhone to reconnect with various hardware components. If that isn’t possible due to damage, it can’t finish restoring the firmware and your iPhone is thus left unusable.
How to Put an iPhone in DFU Mode
The process for putting your iPhone into DFU mode depend on which model iPhone you have. You’ll know you got it right if your computer recognizes the device but nothing shows up on the iPhone screen.
To start, use an Apple-certified USB cable to connect your iPhone to a computer. Once you complete the last step, if your iPhone screen stays blank, it is in DFU mode. You can follow the prompts on your computer to restore your device.
However, if you see a computer or iTunes icon on your iPhone screen, that means you put it in recovery mode instead. Reconnect your phone to your computer and repeat the instructions from step one again. It’s common to get the timing wrong when you first try it.
iPhone 8, iPhone X, and Later
Quickly press and release the Volume Up button, followed by the Volume Down button.
Press and hold the Side button.
When the screen goes black, also press and hold the Volume Down button.
Keep holding both buttons for five seconds, then release the Side button but keep holding the Volume Down button.
Walk through the prompts on your computer.
iPhone 7
Press and hold the Sleep/Wake button and the Volume Down button.
Keep holding both buttons for eight seconds, then release the Side button but keep holding the Volume Down button.
Keep holding the Volume Down button until your computer recognizes your iPhone.
You can now restore your device using your computer.
iPhone 6S, iPhone SE, and Earlier
Press and hold the Side (or Top) button and the Home button.
Keep holding both buttons for eight seconds, then release the Side (or Top) button while still holding the Home button.
Keep holding the Home button until your computer recognizes the iPhone.
You’re now ready to complete the restoration process.
Get Your iPhone Repaired or Fix It Yourself
After you restore your iPhone using DFU mode, you shouldn’t have any more software or firmware problems. If it didn’t work, restore your device again but don’t recover any data from a backup. Should you do this and still have issues, your iPhone needs a physical repair.
Schedule an appointment with an Apple Authorized Service Provider to find out what part needs replacing. If your iPhone is covered under Apple’s warranty, you may be entitled to a free repair. Otherwise, there are plenty of websites that show you how to repair an iPhone yourself.
Google said on Friday it has appointed Sanjay Gupta, a former top executive with Disney India and Star, as the manager and vice president of sales and operations for its India business.
Gupta served as a managing director at Disney India and Star (which now Disney owns) before joining the Android-maker. He helped Star make a major push in the digital consumers business through Hotstar, where he aggressively worked on partnerships and licensing for cricket rights and other content.
Hotstar, which is now owned by Disney, has cashed in on the popularity of cricket and reported 300 million users earlier this year. (Facebook roped in Ajit Mohan, the former chief executive of Hotstar, to head its India operations late last year.) Gupta also held top executive roles at other companies including Bharti Airtel telecom network.
Sanjay Gupta, a former top executive at Disney and Star, is now the head of Google’s India business
In a statement, Gupta said, “it’s an exciting opportunity to leverage the power of technology to solve some of India’s unique challenges and make Internet an engine of economic growth for people and communities. I am happy to join the passionate teams across Google and look forward to contributing to India’s digital journey as it becomes an innovation hub for the world.”
When Anandan, a long-time influential and widely respected Google executive, left the company earlier this year, Google said Vikas Agnihotri, who is the director of sales for the firm’s India operations, would be taking over. For Google, this was the latest high profile departure in Asia. Karim Temsamani, head of Asia Pacific (APAC) at Google, also left the company earlier this year.
Even as India contributes little to Google’s bottom line, the company has grown increasingly focused on India and other Asian markets to develop products and services that solve local problems and address barriers that are hindering growth in these markets.
In a statement, Scott Beaumont, President of Google APAC, said company’s operation in India “is important and strategic for its own sake but also for the innovation which then feeds breakthroughs elsewhere in Google.”
Gupta will also have to oversee some major challenges, including the fast growth of Facebook’s advertising business in India and an antitrust issue with the local regulator.
BritBox has launched in the UK. BritBox is a streaming service which (as the name suggests) is focused on British television. This helps to differentiate it from the likes of Netflix and Amazon Prime Video, which mostly stream American TV shows.
In March 2017, BritBox launched in the US. This meant that expats and Anglophiles alike could streaming British TV shows to their hearts’ content. However, while viewers in the US have been enjoying BritBox for some time, it’s only now arriving in the UK.
Everything You Need to Know About BritBox
BritBox is now available in the UK. It’s priced at £5.99/month ($8/month). This buys you HD video playback and multi-screen viewing. BritBox offers viewers a chance to watch both old and new shows, but classic British TV makes up the bulk of the BritBox catalog.
BritBox was created by the BBC and ITV, both of which are providing programming for the streaming service. However, thanks to partnership deals with other broadcasters, BritBox will also provide content from Channel 4, Channel 5, and Comedy Central UK.
So #BritBox want me to pay £5.99 a month for repeats of shows we already pay a TV licence for? Nah. Think that's a hard pass for me. pic.twitter.com/8fKLBjsuoU
BritBox claims to have “the biggest collection of British box-sets available in one place.” The service features thousands of hours of programming, including “all 627 available episodes of Classic Doctor Who, originally broadcast between 1963 and 1989.”
Other shows available at launch include Downton Abbey, Gavin & Stacey, Wolf Hall, Love Island, Broadchurch, Only Fools and Horses, Extras, Miss Marple, and Poirot. BritBox is also producing its own shows, starting with a drama called Lambs Of God.
BritBox Is Perfect for Fans of British TV
This is a solid option for Brits keen to watch classic British TV. Sure, some of the shows are already available on other streaming services, but if you generally enjoy watching British shows more than shows produced elsewhere, BritBox has you covered.
While UK residents now have a streaming service entirely focused on homegrown content, Americans already have two such services competing for their money. Thankfully, we’ve previously pitted Britbox versus Acorn TV to help our readers know which is best.
There’s no better way to prepare for the Thanksgiving holiday than with apps for your iPhone. From tasty recipes to enjoyable games to holiday greetings, these apps will get you ready to give thanks.
Thanksgiving Cooking and Recipes
Whether you like to stick with tradition or try something new, Thanksgiving cooking and recipe apps can help.
1. Thanksgiving Recipes
The Thanksgiving Recipes app helps you create something tasty and traditional, or fresh and flavorful. From main dishes to sides to desserts, you can find exactly what fits your family with helpful recipes and instructional videos.
Each recipe has a photo, ingredients, and directions helpfully displayed. The app lets you save your favorites and share recipes with others. So if you’re in the market to try a new dish this Thanksgiving, this app has you covered.
For a recipe app that you can use during Thanksgiving, as well as other holidays or anytime you need some inspiration, check out Tasty. The Tasty app has a whole section of dish recipes for Thanksgiving. Just enter “Thanksgiving” in the search box and you’re on your way to a delicious holiday meal.
The videos you’ll find in the app provide different recipes in one clip and show you the steps to creating the dish. You’ll also get the written ingredients, nutritional details, and instructions with an option to see them one step at a time. Take Tasty for a spin to boost your Thanksgiving feast.
Take a break from the kitchen or get in the holiday spirit with some entertainment. These games are made just for Thanksgiving.
3. 3D Turkey Run Thanksgiving Infinite Runner
Get ready to race through Thanksgiving Village in 3D Turkey Run. Choose from one of four turkeys, move left and right to pick up valuable coins, swipe up to jump, and swipe down to slide. There are obstacles galore—from logs to fences to pumpkins, you will need to maneuver your turkey well to dodge them.
The game is available at no cost, with in-app purchases for additional tokens. For a little bit of Thanksgiving fun before the guests arrive, save the turkey in this upbeat endless runner.
If you enjoy hidden object puzzle games, then you’re in for a treat. Hidden Objects Thanksgiving Puzzle takes you to harvest time with warm autumn colors, relaxing gameplay, and subtle background music.
Choose from three games modes including traditional, chill, or adventure. Each has different game options like time and hint limits, various scenes, and unique levels. You can also decide to use pictures, words, or collections for your list of objects.
Hidden Objects Thanksgiving Puzzle on iPhone or iPad offers a great way to unwind after your turkey stuffs you.
Spruce up your iPhone wallpaper with a Thanksgiving or autumn-themed background. You can even add a countdown until the holiday if you like.
5. Thanksgiving All-In-One
With 40 seasonal wallpaper options, recipes, and a built-in countdown, Thanksgiving All-In-One has a bit of everything. The wallpaper options include pumpkins, leaves, and the silhouette of a pilgrim. Access the countdown with a tap; it displays the time until Thanksgiving Day arrives.
As added bonuses, the app includes links to YouTube videos of recipes and a small section that has Thanksgiving poems. If you are looking for a simple and free app to get you in the holiday spirit, this is one to check out.
If you’re just looking for a nice selection of wallpapers for your Home or Lock screen, take a look at Thanksgiving Wallpaper & Backgrounds by Floor Girls. From artsy and classic to cute and cartoony, you’ll find many cool options.
Once you choose a wallpaper, you can save it to your camera roll or share it with a friend. The app also includes a slideshow option so you can sit back and relax as you browse through the backgrounds. Thanksgiving Wallpaper & Backgrounds also has images for other holidays and seasons, making it useful for any time of the year.
A good coloring book option for the kids is Thanksgiving Coloring Book! from Peep Software. Image options like silly turkeys, young pilgrims, and a perfect pie are available for any age or preference. One you select a picture, switching colors is easy by swiping on the crayons. Then just tap the crayon color you want and let the fun begin.
The app offers both brush and bucket coloring modes, a handy eraser, and simple saving or sharing options. For those images that have a lot of detail, just use the pinch-to-zoom feature. The app is free with an in-app purchase to remove the ads for $1.
Thanksgiving Coloring Book from TickTap has a smaller selection of images, but still provides the enjoyment of coloring and includes delightful background music. Choose a vibrant color from the 16 options and then pick your brush size to get started.
This coloring book app does not include a fill mode, making it more like a real coloring experience. But don’t worry—if you make a mistake or color outside the lines, an eraser lets you clean up. Email your finished masterpieces to faraway family right from within the app.
Additional picture packs are available for a $1 in-app purchase, which also removes the ads.
Send a heartfelt or amusing greeting this Thanksgiving with neat greeting card and photo frame apps.
9. Thanksgiving Cards & Wishes
From the popular 123Greetings.com comes Thanksgiving Cards & Wishes. The app gives you over 1,000 free Thanksgiving greetings to choose from. It also offers video cards, postcards, and GIF cards that you can easily send to your loved ones.
You can also take a look at the bonus features, like scheduling the delivery of your greeting, sending a card to multiple contacts at once, and posting directly to Facebook. Thanksgiving Cards & Wishes makes it super easy to send greetings that share your thanks this holiday.
If you enjoy using your own photos for your greetings, check out Thanksgiving Picture Frames. The app offers over 50 nifty frames, 100 decorative stickers, and a variety of font styles.
Using the app is simple. Just select a photo from your iPhone, add your text, and include a few stickers. Then you can share your creation on Facebook or Twitter, send it in an email, or just save it to your camera roll. This Thanksgiving, send a gobble or a grin with this fun photo app.
Whether you enjoy themed games, attractive backgrounds, or holiday greetings, these apps are just the ticket for Turkey Day. Be sure to also check out our list of guides for having the perfect Thanksgiving this year.
Finding new glasses that fit your face is a chore and a half, and often an expensive one. Even though a large percentage of the population has to wear glasses, finding the right frames can remain frustratingly tough.
Fortunately, there has been a rise in online “frame finder” services that allow you to add glasses to your photo. The purpose of these virtual booths? To help you pick out your eyewear for free.
Here’s a list of the best websites that allow you to find picture-perfect glasses.
In truth, this isn’t the first time we’ve talked about finding sunglass photo editors. Back in 2009, we wrote about FrameFinder: an online application that lets you browse through glasses and virtually try them on.
If you were planning to buy eyeglasses or sunglasses and you weren’t sure if they fit, FrameFinder had a solution. The website was simple to use: first, you created an account, then you uploaded your picture.
After that, you followed step-by-step instructions to put sunglasses on a picture.
FrameFinder is currently unavailable, but in its place, we’ve found newer sites like Vint and York. Vint and York is a New York-based company. It has a “Virtual try-on” feature that works in a similar manner.
Vint and York’s try-on feature is easy to use. To add glasses to a photo, go to the website. From there:
Click Try on frames to browse through the catalog.
Find a pair of glasses that you like.
Press View Details on the individual pair of glasses.
Click the Virtual try-on button.
You can either take a picture of yourself with your webcam or upload a picture of yourself from your device:
Note: Not all frames will be available for a Virtual try-on. The website lets you know which ones are available and which ones aren’t.
Vint and York has a ton of great reviews, and you can browse for glasses by filtering through product lines, your face shape, style of glasses, or color.
Additional Features
The company also has a men’s and women’s look book, where you can draw inspiration for your own style.
Under the Customer Care section, Vint and York has detailed instructions on how it handles shipping and returns.
There is also a general FAQ on the company’s products and the materials they use.
The cool thing about this website? Vint and York specializes in “vintage-inspired and retro eyeglasses and sunglasses.” So if you’re looking for a pair of frames that are stylish, this website is a great place to start.
Like Vint and York, EyeBuyDirect is another retail store that lets you add glasses to your photo online. The company takes great pride in the fact that the entire manufacturing line is done in-house.
EyeBuyDirect’s ultimate goal is to make shopping for glasses as easy as possible. This is especially true if it’s from the comfort of your own home.
If we’re talking style, the company does its best to create glasses with a “sleek, modern look.”
Using EyeBuyDirect as a glasses or sunglasses photo editor online is very easy. After you pick the frames that you like, click the Try On button when you move your cursor over the glasses on-screen.
Once you click it, you can import a photo of yourself.
Make sure the picture has your head at a fairly level angle, and that you’re not looking away from the camera. This makes the glasses match as closely as possible to your face.
Once you upload your photo, make sure the “crosses” are properly positioned over your eyes to place the glasses. After that, try on the frames!
Additional Features
EyeBuyDirect will help you find a frame style that looks good on your face.
It has an amazing Buy 1 Give 1 program that donates glasses to people who can’t afford them.
EyeBuyDirect’s 365-Day Product Guarantee also allows customers to get a replacement pair of glasses within a 12 month period if there are “clear defects in material and workmanship.”
GlassesUSA is a massive website that offers thousands of spec styles, ranging from no-name sunglasses and daily eyewear to designer brands.
On the website, the company mentions that “7 out of 10 adults in the US need eye correction.” It’s also no secret that if you want to prevent your vision from deteriorating, you need to look for ways to reduce screen time and rest your eyes.
To meet this demand for failing vision, GlassesUSA has created a budget-friendly, easy-to-use service that can be quickly accessed online. It’s the perfect way to find a glasses photo editor if you ever need it.
Alongside its regular retail features, the company has a virtual booth to help you pick out the best frames for your face.
After you find the frames that you like, click the Try On button. Then upload a picture from your device. Follow the in-house instructions to adjust the frames.
While I was trying out this service, I loved how many different styles of glasses the website had to offer. It was also nice to see how closely the glasses mapped to my face.
The instructions for adding glasses to your picture were easy to follow. If you like the look of the frames—and you have your prescription on hand—you can buy the glasses then and there.
Additional Features
Like EyeBuyDirect, GlassesUSA has a generous return policy.
It also has free shipping and returns for all orders in the US and Canada.
One of the cool features about this website? You can create your own wish list of your favorite frames. All you have to do is create an account.
Seriously, this website is definitely worth the look.
Try Out Those Glasses Before You Buy Them
Trying on glasses was and continues to be stressful. However, things are getting easier. Technology also allows us to explore what glasses look best without breaking the bank.
That said, finding frames online is not the only area where you can customize your appearance. If you’re a shoe fanatic, here are the best websites to design and buy your own custom shoes online.
The freedoms we enjoy in many parts of the world are guarded by brave men and women who sacrifice and risk their lives every day. Many of them spend long amounts of time away from home in isolation, which can take a toll on their morale.
As a token of your thanks, it’s a great idea to write to a soldier with words of encouragement. It might seem like a small gesture to you, but a note letting a soldier know that they’re appreciated will do wonders for them. Here are some great websites to help you start writing to soldiers.
Any Soldier is one of the first resources you should check out for writing letters to soldiers. The site has paired up with overseas military members who act as representatives for others that they serve with. When you send letters (plus packages, if you wish), they distribute them to soldiers who don’t get any other mail first.
On the Where To Send page, you’ll find a list of soldier contacts, sorted by date of last contact, along the left side. Click one to see some information about them, including where they’re stationed and how many male and female soldiers they represent. If you decide you want to support that soldier, you can request their complete address on the page.
There’s a lot of information on Any Soldier, though the site is a little tough to navigate. It’s definitely worth checking the FAQ pages to find out what types of items to send and answer other questions before you get ready to send a support package.
Operation Gratitude is an organization that sends care packages to troops, including new recruits and veterans. These packages include snacks, clothes, toys, and other items that soldiers appreciate. In addition, they have letters inside to lift the recipients’ spirits.
On the above page, you can register for letter writing and get a guide on doing so. You don’t have to contribute the other items in the package, making this an easy way to be part of something that’s much appreciated.
If you’d rather email a soldier than write a physical letter, this site makes it easy. It offers a simple form where you provide your first name, state, country, and email address along with a message.
Once you send it in, Forgotten Soldiers Outreach will print out your letter and include it in one of its packages sent to soldiers. This makes it a great way to let someone in the armed forces know you’re thinking about them without having to mail a physical letter or package overseas.
This service is focused on writing letters to soldiers in basic training. It adds a touch of modern technology to help it stand out.
Using Sandboxx, you write out a letter using your phone or computer, including a picture if you like. The service then sends the letter to your recruit with next-day delivery. It arrives on high-quality paper in an airmail envelope, giving it a premium appearance.
Every letter includes tracking, so you’ll know when your message arrives. And they can reply using the included custom stationery and return envelope. This removes the hassle of visiting the post office, buying stamps, and finding addresses to write to soldiers.
Due to everything it includes, the service is not free. Sandboxx charges $4 to send a single letter, but you can save by purchasing multiple letters at once. For example, $50 gets you 15 letters—dropping the price to $3.33 per letter.
Check Sandboxx’s pricing page for more info and to see all the benefits it provides compared to traditional mail.
If you’d like to commit to writing letters to soldiers for some time, give Soldiers’ Angels a look. The letter writing team is one part of its effort to provide support to troops.
Joining this team requires at least a three-month commitment where you write a letter a minimum of one time per month. Of course, you can write more if you’d like. Have a look at the Team Angel information page if you’d like to sign up.
This provides some important details about the program, including the fact that you don’t decide where to send letters to soldiers on your own. The company chooses who you will support. Additionally, you are required to report your activity monthly and recognize that you act on behalf of the organization.
You should make sure you know what you’re getting into with this before you sign up.
Best Military Pen Pal Sites Outside the US
We’ve focused on sites to write to United States soldiers above. If you live in a different part of the world, here are a few resources to write to service members from your country.
If you’re located in the UK, give this site a look. It allows you to write to armed forces members and even live chat with them via instant messaging and chatrooms. The service also offers forums for discussion with service members and fellow supporters, making it a great way to hear real stories from veterans.
Strangely, the site makes mention of dating members of the military too. We wouldn’t recommend using this as a dating site, but the opportunity is there if you’re really interested.
Those in Canada can use this official government website to write to CAF troops. Click Post Message on the page above to write a brief message (under 1,500 characters). It will then appear on the message board for service members to see.
You can use the View Messages link to have a look at messages that others have posted, too.
Australia also has a dedicated government page for sending mail to soldiers. This site advises you to email supportthetroops@defence.gov.au, which will pass your email onto those in the Navy, Army, and Air Force. You’ll also find a physical mailing address here if you want to send a postcard to the troops.
Write to a Soldier and Make Their Day
With these resources, you have everything you need to send a note of thanks and encouragement to military service members. It’s important to let them know they’re appreciated for everything they do. A simple note for you could mean everything to them.
If you haven’t written a physical letter in a while, you may want to practice your handwriting before penning your note.
