An anonymous reader quotes a report from Wired: A little-known surveillance program tracks more than a trillion domestic phone records within the United States each year, according to a letter WIRED obtained that was sent by US senator Ron Wyden to the Department of Justice (DOJ) on Sunday, challenging the program’s legality. According to the letter, a surveillance program now known as Data Analytical Services (DAS) has for more than a decade allowed federal, state, and local law enforcement agencies to mine the details of Americans’ calls, analyzing the phone records of countless people who are not suspected of any crime, including victims. Using a technique known as chain analysis, the program targets not only those in direct phone contact with a criminal suspect but anyone with whom those individuals have been in contact as well.

The DAS program, formerly known as Hemisphere, is run in coordination with the telecom giant AT&T, which captures and conducts analysis of US call records for law enforcement agencies, from local police and sheriffs’ departments to US customs offices and postal inspectors across the country, according to a White House memo reviewed by WIRED. Records show that the White House has, for the past decade, provided more than $6 million to the program, which allows the targeting of the records of any calls that use AT&T’s infrastructure — a maze of routers and switches that crisscross the United States. In a letter to US attorney general Merrick Garland on Sunday, Wyden wrote that he had “serious concerns about the legality” of the DAS program, adding that “troubling information” he’d received “would justifiably outrage many Americans and other members of Congress.” That information, which Wyden says the DOJ confidentially provided to him, is considered “sensitive but unclassified” by the US government, meaning that while it poses no risk to national security, federal officials, like Wyden, are forbidden from disclosing it to the public, according to the senator’s letter. AT&T spokesperson Kim Hart Jonson said only that the company is required by law to comply with a lawful subpoena. However, “there is no law requiring AT&T to store decades’ worth of Americans’ call records for law enforcement purposes,” notes Wired. “Documents reviewed by WIRED show that AT&T officials have attended law enforcement conferences in Texas as recently as 2018 to train police officials on how best to utilize AT&T’s voluntary, albeit revenue-generating, assistance.”

“The collection of call record data under DAS is not wiretapping, which on US soil requires a warrant based on probable cause. Call records stored by AT&T do not include recordings of any conversations. Instead, the records include a range of identifying information, such as the caller and recipient’s names, phone numbers, and the dates and times they placed calls, for six months or more at a time.” It’s unclear exactly how far back the call records accessible under DAS go, although a slide deck released under the Freedom of Information Act in 2014 states that they can be queried for up to 10 years.

Read more of this story at Slashdot.

Source: Slashdot – Secretive White House Surveillance Program Gives Cops Access To Trillions of US Phone Records

Earlier this month, the entire Optus mobile network went offline nationwide following a “routine software upgrade.” According to Reuters, “More than 10 million Australians were hit by the 12-hour network blackout […], triggering fury and frustration among customers and raising wider concerns about the telecommunications infrastructure.” Now, according to the Australian Broadcasting Corporation, Optus CEO Kelly Bayer Rosmarin has resigned in the wake of the outage. From the report: She said it “had been an honour to serve” but that “now was an appropriate time to step down.” During Friday’s Senate hearing into the outage, Ms Bayer Rosmarin rebuffed suggestions she was under pressure to step down. “On Friday, I had the opportunity to appear before the Senate to expand on the cause of the network outage and how Optus recovered and responded,” she said in a statement on Monday. “I was also able to communicate Optus’s commitment to restore trust and continue to serve customers. Having now had time for some personal reflection, I have come to the decision that my resignation is in the best interest of Optus moving forward.”

Ms Bayer Rosmarin will be replaced in the interim by chief financial officer Michael Venter. Yuen Kuan Moon, the chief executive of Optus’s Singaporean parent company Singtel Group, said the company understood her decision to resign. Mr Yuen said Singtel recognised “the need for Optus to regain customer trust and confidence as the team works through the impact and consequences of the recent outage and continues to improve.” He said Optus’s priority was about “setting on a path of renewal for the benefit of the community and customers.” Singtel said Optus had also created a new chief operating officer position, which would be carried out by former Optus Business Managing Director Peter Kaliaropoulos.

Read more of this story at Slashdot.

Source: Slashdot – Optus CEO Resigns After Nationwide Outage Left Millions Without Mobile and Internet Services

Last week, Android smartphone manufacturer “Nothing” announced that it’s bringing iMessage to its newest phone through a new “Nothing Chats” app powered by the messaging platform Sunbird. After launching Friday, the app was shut down within 24 hours and the Sunbird app, which Nothing Chat is a clone of, was put “on pause.” The reason? It’s a security nightmare. Ars Technica reports: The initial sales pitch for this app — that it would log you into iMessage on Android if you handed over your Apple username and password — was a huge security red flag that meant Sunbird would need an ultra-secure infrastructure to avoid disaster. Instead, the app turned out to be about as unsecure as you could possibly be. Here’s Nothing’s statement: “We’ve removed the Nothing Chats beta from the Play Store and will be delaying the launch until further notice to work with Sunbird to fix several bugs. We apologize for the delay and will do right by our users.”

How bad are the security issues? Both 9to5Google and Text.com (which is owned by Automattic, the company behind WordPress) uncovered shockingly bad security practices. Not only was the app not end-to-end encrypted, as claimed numerous times by Nothing and Sunbird, but Sunbird actually logged and stored messages in plain text on both the error reporting software Sentry and in a Firebase store. Authentication tokens were sent over unencrypted HTTP so this token could be intercepted and used to read your messages. […]

Despite being the cause of this huge catastrophe, Sunbird has been bizarrely quiet during this whole mess. The app’s X (formerly Twitter) page still doesn’t say anything about the shutdown of Nothing Chats or Sunbird. Maybe that’s for the best because some of Sunbird’s early responses to the security concerns raised on Friday do not seem like they came from a competent developer. […] Nothing has always seemed like an Android manufacturer that was more hype than substance, but we can now add “negligent” to that list. The company latched on to Sunbird, reskinned its app, created a promo website and YouTube video, and coordinated a media release with popular YouTubers, all without doing the slightest bit of due diligence on Sunbird’s apps or its security claims. It’s unbelievable that these two companies made it this far — the launch of Nothing Chats required a systemic security failure across two entire companies.

Read more of this story at Slashdot.

Source: Slashdot – Nothing’s iMessage App Was a Security Catastrophe, Taken Down In 24 Hours

In an interview with CNBC’s Jon Fortt today, Microsoft CEO Satya Nadella said that the governance structure of OpenAI needs to change after the AI company’s sudden firing of CEO Sam Altman. “At this point, I think it’s very clear that something has to change around the governance,” Nadella said. He added that Microsoft would have “a good dialogue with their board on that.”

Unlike traditional private company boards, OpenAI’s board consists mostly of outsiders and isn’t tasked with maximizing shareholder value. “[N]one of them hold equity in OpenAI,” notes The Verge. “Instead, their stated mission is to ensure the creation of ‘broadly beneficial’ artificial general intelligence, or AGI.” From the report: In his first press interview since Altman’s ouster, Nadella dismissed concerns of long-term damage at OpenAI and said that the critical artificial intelligence research continues as does the partnership with Microsoft. But his comments didn’t clear up confusion surrounding where Altman and fellow OpenAI co-founder Greg Brockman, who was the company’s chairman, will ultimately end up. Early Monday morning Nadella said that Altman, Brockman and their colleagues would join Microsoft as part of a new AI research group. That post followed news that ex-Twitch CEO Emmett Shear had been named OpenAI interim head as Altman looked to depart. Over the course of Monday, it became less evident that Altman and Brockman would actually be joining Microsoft.

Hundreds of OpenAI employees signed a letter to the company’s board demanding that they resign or else the staffers may choose to leave and join their former boss at Microsoft. Nadella said it’s the choice of OpenAI employees whether they stay in their current roles or move to Microsoft, adding that his company has what it needs to keep innovating on its own. “I’m open to both options,” he said. Nadella told Fortt that Microsoft respects OpenAI’s nonprofit roots and shares its belief that AI needs to be developed and rolled out in a safe manner. “We want to make sure that we’re dealing with not only the benefits of technology, but the unintended consequences of the technology from day one, as opposed to waiting for things to happen,” Nadella said. Stay tuned: Legendary tech journalist Kara Swisher is releasing a 30 minute interview with Nadella in which he says, among other things, that he felt he should have been informed earlier as a partner of OpenAI and that will change in the future. “Also lots of deets about new hire [Sam Altman], safety in AGI and even India’s loss to Australia in that cricket match,” says Swisher in a post on X.

Further reading: Some investors in OpenAI are considering suing the board. “Sources said investors are working with legal advisors to study their options,” reports Reuters. “Investors worry that they could lose hundreds of millions of dollars they invested in OpenAI, a crown jewel in some of their portfolios, with the potential collapse of the hottest startup in the rapidly growing generative AI sector.”

Read more of this story at Slashdot.

Source: Slashdot – Microsoft CEO Nadella Says OpenAI Governance Needs To Change

An anonymous reader quotes a report from Motherboard: Commercial air crews are reporting something “unthinkable” in the skies above the Middle East: novel “spoofing” attacks have caused navigation systems to fail in dozens of incidents since September. In late September, multiple commercial flights near Iran went astray after navigation systems went blind. The planes first received spoofed GPS signals, meaning signals designed to fool planes’ systems into thinking they are flying miles away from their real location. One of the aircraft almost flew into Iranian airspace without permission. Since then, air crews discussing the problem online have said it’s only gotten worse, and experts are racing to establish who is behind it.

OPSGROUP, an international group of pilots and flight technicians, sounded the alarm about the incidents in September and began to collect data to share with its members and the public. According to OPSGROUP, multiple commercial aircraft in the Middle Eastern region have lost the ability to navigate after receiving spoofed navigation signals for months. And it’s not just GPS — fallback navigation systems are also corrupted, resulting in total failure. According to OPSGROUP, the activity is centered in three regions: Baghdad, Cairo, and Tel Aviv. The group has tracked more than 50 incidents in the last five weeks, the group said in a November update, and identified three new and distinct kinds of navigation spoofing incidents, with two arising since the initial reports in September.

While GPS spoofing is not new, the specific vector of these new attacks was previously “unthinkable,” according to OPSGROUP, which described them as exposing a “fundamental flaw in avionics design.” The spoofing corrupts the Inertial Reference System, a piece of equipment often described as the “brain” of an aircraft that uses gyroscopes, accelerometers, and other tech to help planes navigate. One expert Motherboard spoke to said this was “highly significant.” “This immediately sounds unthinkable,” OPSGROUP said in its public post about the incidents. “The IRS (Inertial Reference System) should be a standalone system, unable to be spoofed. The idea that we could lose all on-board nav capability, and have to ask [air traffic control] for our position and request a heading, makes little sense at first glance” especially for state of the art aircraft with the latest avionics. However, multiple reports confirm that this has happened.” […] There is currently no solution to this problem, with its potentially disastrous effects and unclear cause. According to OPSGROUP’s November update, “The industry has been slow to come to terms with the issue, leaving flight crews alone to find ways of detecting and mitigating GPS spoofing.” If air crews do realize that something is amiss, Humphreys said, their only recourse is to depend on air traffic control.

Read more of this story at Slashdot.

Source: Slashdot – Commercial Flights Are Experiencing ‘Unthinkable’ GPS Attacks

According to Bloomberg’s Mark Gurman, Apple plans to ditch Qualcomm and build its own custom modem that could launch around 2026. MacRumors reports: Writing in his latest Power On newsletter, Gurman says that Apple’s custom technology aspirations include integrating an in-house modem into its system-on-a-chip (SoC), which would eventually see the launch of MacBooks with built-in cellular connectivity. Gurman says Apple will “probably need two or three additional years to get that chip inside cellular versions of the Apple Watch and iPad — and the Mac, once the part is integrated into the company’s system-on-a-chip.”

Apple has explored the possibility of developing MacBooks with cellular connectivity in the past. Indeed, the company reportedly considered launching a MacBook Air with 3G connectivity, but former CEO Steve Jobs said in 2008 that Apple decided against it, since it would take up too much room in the case. An integrated SoC would solve that problem. Gurman’s latest newsletter also said some of Apple’s other ongoing in-house chip projects include camera sensors, batteries, a combined Wi-Fi and Bluetooth chip that will eventually replace parts from Broadcom, Micro-LED displays for Apple devices, and a non-invasive glucose monitoring system.

Read more of this story at Slashdot.

Source: Slashdot – Apple Plans To Equip MacBooks With In-House Cellular Modems

An anonymous reader quotes a report from Reuters: Apple has been sued by Venmo and Cash App customers in a proposed class action claiming the iPhone maker abused its market power to curb competition for mobile peer-to-peer payments, causing consumers to pay “rapidly inflating prices.” Four consumers in New York, Hawaii, South Carolina and Georgia filed the lawsuit (PDF) on Friday in San Jose, California, federal court. They alleged Apple violated U.S. antitrust law through its agreements with PayPal’s Venmo and Block’s Cash App.

Apple’s agreements limit “feature competition” within peer-to-peer payment apps, including prohibiting existing or new platforms from using “decentralized cryptocurrency technology,” the complaint said. The lawsuit seeks an injunction that could force Apple to divest or segregate its Apple Cash business.

Read more of this story at Slashdot.

Source: Slashdot – Venmo, Cash App Users Sue Apple Over Peer-To-Peer Payment Fees