eBay bans sale of masks and hand sanitizer over gouging concerns

“STOP BUYING MASKS,” US surgeon general Jerome Adams tweeted in late February.

Man wears mask

Enlarge (credit: Nopphon Pattanasri / EyeEm)

eBay is banning the sale of a number of items related to the novel coronavirus outbreak after rising prices raised concerns about price gouging.

The online auction giant says that "effective immediately" it will "block new listings and start to remove listings" that offer "masks including N95/N100 and surgical masks." Hand sanitizers and disinfecting wipes will also be banned.

eBay says these listings "may violate applicable US laws or regulations, eBay policies, and exhibit unfair pricing behavior for our buyers." Several states have anti-gouging laws prohibiting big price increases in a time of emergency.

Read 5 remaining paragraphs | Comments

SafeKodi: Researchers Help Kodi Users to Spot Malicious Addons

Researchers from Northwestern University and Brave Software have taken an in-depth look at possible security issues with third-party Kodi addons. They find that most addons are safe. Only a very small number of addons are linked to malicious content, but these tend to be relatively popular. To help users spot these risks, the researchers offer a solution in the form of a Kodi addon.

Drom: TF, for the latest news on copyright battles, torrent sites and more. We also have an annual VPN review.

Kodi is widely known as a very convenient media player. While the open-source software is content-neutral, some third-party addons use it to offer pirated content.

In recent years rightsholders and anti-piracy organizations have worked hard to target copyright infringing addons. This is done through enforcement actions, but also through scare tactics.

On numerous occasions, Kodi addons have been associated with malware and other malicious content. While it is certainly true that there are some shady addons out there, the warnings are often overblown, lacking any supportive data.

A more analytical approach to this issue is being taken by a group of researchers from Northwestern University and Brave Software. They use a data-driven model and have created a software crawler to identify any potential threats in third-party Kodi addons.

Their software, aptly named ‘De-Kodi,’ scraped the web and discovered tens of thousands of addons. A small percentage of these, roughly 9,000, were still active. The researchers then tested them for potentially harmful activity.

The results show that most addons are safe. A significant portion include URLs that are linked to advertising, tracking, or Kodi’s own blacklist. However, only 13 addons included URLs that were flagged by Google’s Safebrowsing service for potentially malicious “social engineering.” Another 131 addons included links to potentially malicious IPs.

“In our study, we discovered 43,308 addons out of which 8,485 were unique and correctly working. Out of these, only a handful was potentially harmful,” Brave Software researcher Matteo Varvello tells TorrentFreak.

This doesn’t sound like a broad threat, but some nuance is warranted. The researchers also found that many of the problematic addons are relatively popular. This means that while malicious addons are rare, they still have the potential to impact a lot of people.

The SportsDevil addon, for example, which is listed among the ten most popular addon domains, is flagged as potentially malicious, includes tracking scripts and is on Kodi’s ban list.

Because users may not be aware of these threats, or the fact that that addons may track them or serve ads, the researchers decided to make the information public in the form of an addon.

“After we built De-Kodi, we realized that the information we collected was very useful to the average Kodi user, not only the research community. An addon was the easiest way to bring this information to the large Kodi user base,” Varvello tells us.

The result is the new SafeKodi addon which is available to the public for free. Kodi users who install it can use the software to check whether there are any potential security issues on their platform.

In addition to helping the public, the public can help the researchers as well. SafeKodi allows users to flag addons they think are unsafe. In addition, it will automatically locate new and unknown addons and test these on-demand.

The input from users allows the researchers to expand their findings and provide a more accurate overview of the third-party addon ecosystem.

“The current plan is to attract some user-base for SafeKodi. This allows us to complete our study with potential addons we will discover thanks to our users, and those that appear through the evolution of the Kodi ecosystem over time,” Varvello says.

In addition to insights about advertising, tracking, and potential malware threats, the research also provides additional detail on the video sources of addons.

For example, they found that the most popular media serving domains are GoogleVideo.com, Akamaihd.net, and Archive.org. These domains include legitimate content but are also used by pirate services.

The results of the study are detailed in a paper titled: De-Kodi: Understanding the Kodi Ecosystem. The findings will be officially presented at the World Wide Web Conference in April where the De-Kodi source code is also scheduled for release.

Drom: TF, for the latest news on copyright battles, torrent sites and more. We also have an annual VPN review.

FCC requires anti-robocall tech after “voluntary” plan didn’t work out [Updated]

Pai follows Congress’ orders, requires carriers to verify Caller ID accuracy.

Illustration of a robot wearing a phone headset.

Enlarge (credit: Getty Images | MassimoVernicesole)

Update (April 1, 2020): The Federal Communications Commission voted unanimously to finalize the anti-robocall order on March 31, 2020, complying with instructions the commission received from Congress. The order "requires all originating and terminating voice service providers to implement STIR/SHAKEN in the Internet Protocol (IP) portions of their networks by June 30, 2021, a deadline that is consistent with Congress’s direction in the recently-enacted TRACED Act," the FCC said. As we wrote earlier, the FCC plans a one-year deadline extension for small phone providers. The FCC also voted to seek public comment on how "to promote caller ID authentication on voice networks that do not rely on IP technology," meaning older landline networks.

Original story from March 6, 2020 follows: Phone companies would be required to deploy technology that prevents spoofing of Caller ID under a plan announced today by Federal Communications Commission Chairman Ajit Pai.

Pai framed it as his own decision, with his announcement saying the chairman "proposed a major step forward... to protect consumers against spoofed robocalls." But in reality the FCC was ordered by Congress and President Trump to implement this new rule. The requirement on the FCC was part of the TRACED Act that was signed into law in December 2019. Pai previously hoped that all carriers would deploy the technology voluntarily.

Read 8 remaining paragraphs | Comments

Oppo launches the Find X2 smartphone in China (Snapdragon 865, 12GB RAM, 120 Hz display)

The Oppo Find X2 and Oppo Find X2 Pro are smartphone with a 6.7 inch, 3168 pixel x 1440 pixel AMOLED display with a 120 Hz refresh rate and a 240 Hz touch sample rate. It’s powered by a Qualcomm Snapdragon 865 processor and packs 12B of LPDDR5 RA…

The Oppo Find X2 and Oppo Find X2 Pro are smartphone with a 6.7 inch, 3168 pixel x 1440 pixel AMOLED display with a 120 Hz refresh rate and a 240 Hz touch sample rate. It’s powered by a Qualcomm Snapdragon 865 processor and packs 12B of LPDDR5 RAM and at least 256GB of UFS 3.0 […]

The post Oppo launches the Find X2 smartphone in China (Snapdragon 865, 12GB RAM, 120 Hz display) appeared first on Liliputing.

Apple updates its App Store policies to combat abuse, spam, and misinformation

Cupertino is also rejecting coronavirus-related apps from untrusted sources.

The front of the 2019 iPad Air

Enlarge / The front of the 2019 iPad Air. (credit: Samuel Axon)

Earlier this week, Apple notified app developers of a revised set of App Store review guidelines—the rules by which Apple curates its iOS/iPadOS, tvOS, watchOS, and macOS App Stores.

Among many other things, the revised rules expand the definition of what constitutes a spam app and also clarify that developers are able to use push notifications to serve ads to users (provided users have explicitly opt in to them) and limit submissions of certain types apps to trusted organizations in regulated or sensitive industries.

The most controversial of these changes has been the clear statement that developers can serve ads to users via push notifications. At one point in the past, Apple's guidelines stated that push notifications "should not be used for advertising, promotions, or direct marketing purposes or to send sensitive personal or confidential information." Now the guidelines state:

Read 7 remaining paragraphs | Comments

Coronavirus delays the TurboGrafix-16 Mini retro console

The global coronavirus outbreak that originated in China has had a major impact on the global stage. Over 100,000 people have been infected, and more than 3,400 have died. Many major tech trade shows and other events have been canceled or scaled back, …

The global coronavirus outbreak that originated in China has had a major impact on the global stage. Over 100,000 people have been infected, and more than 3,400 have died. Many major tech trade shows and other events have been canceled or scaled back, and a growing number of companies are advising employees to work from […]

The post Coronavirus delays the TurboGrafix-16 Mini retro console appeared first on Liliputing.

NASA declares Starliner mishap a “high visibility close call”

“We could have lost a spacecraft twice during this mission.”

A protective tent is placed over Starliner after it returned to Earth in December.

Enlarge / A protective tent is placed over Starliner after it returned to Earth in December. (credit: NASA/Bill Ingalls)

After pondering the totality of issues that arose during a December test flight of Boeing's Starliner spacecraft this week, NASA chief of human spaceflight Doug Loverro said Friday that he decided to escalate the incident.

So he designated Starliner's uncrewed mission, during which the spacecraft flew a shortened profile and did not attempt to dock with the International Space Station, as a "high visibility close call." This relatively rare designation for NASA's human spaceflight program falls short of "loss of mission" but is nonetheless fairly rare. It was last used by NASA after a spacewalk in 2013 when water began to dangerously pool in the helmet of astronaut Luca Parmitano.

Asked to explain during a conference call with reporters why he did this, Loverro said, "We could have lost a spacecraft twice during this mission."

Read 6 remaining paragraphs | Comments

Retrogaming: Käufer bezahlt 360.000 US-Dollar für Nintendo Playstation

Der einzige bekannte Prototyp der Nintendo Playstation hat einen neuen Besitzer – der für das gute Stück 360.000 US-Dollar bezahlt. Viel Geld, aber der Verkäufer hatte wesentlich mehr erwartet. (Playstation, Sony)

Der einzige bekannte Prototyp der Nintendo Playstation hat einen neuen Besitzer - der für das gute Stück 360.000 US-Dollar bezahlt. Viel Geld, aber der Verkäufer hatte wesentlich mehr erwartet. (Playstation, Sony)

Oppo’s flagship Find X2 Pro announced with 65W charging, Snapdragon 865

It has a 120Hz display, 5G, and really fast charging.

Oppo's latest flagship was announced last night, the Find X2 Pro. The Find X2 Pro is the sequel to the Oppo Find X, an innovative phone that had a motorized pop-up top, unveiling a camera and facial recognition system from behind the display. The Find X2 doesn't have any radical design elements, though. It really just looks like a Samsung phone. Oppo and OnePlus are both owned by BBK and frequently share designs, so there's a good chance some of the tech here will show up on the OnePlus 8.

The phone has a 6.7-inch, 3168×1440 120Hz display, a Snapdragon 865 with 5G, 12GB of RAM, 512GB of storage, a 4260mAh battery, IP68 dust and water resistance, and three rear cameras. Oppo is definitely out-Samsunging Samsung with the display here. While The Galaxy S20 makes you choose between the full resolution or 120Hz, the Find X2 Pro lets you run at 120Hz at full resolution. On paper, it's the best display on the market. There's an in-display fingerprint reader, which Oppo says is 10 percent larger than last year's. There's no wireless charging, no headphone jack, and no expandable storage. We were hoping Oppo would do better on the price than Samsung, but at €1,199 ($1,357), the phone slots in right between the $1,199.99 S20+ and the $1,399.99 S20 Ultra.

The once-unique design touch seems to be in the back material. The black version is a polished ceramic instead of the usual glass. The last ceramic phone we tried was the Essential Phone, and while ceramic weighs more, it seems to have the same pros and cons as glass: It's RF transparent, which is good, and it has a fair bit of scratch resistance, but it's also going to shatter the first time you drop the phone. Oppo says the ceramic has a "gleaming surface that feels as silky as it looks," but I don't really want "silky" as a feel for a back material, I want it to be grippy. One option that might offer more grip is the orange color, which uses a faux leather back.

Read 3 remaining paragraphs | Comments

Daily Deals (3-06-2020)

Dell’s newest XPS 13 thin and light laptops featuring 10th-gen Intel Ice Lake processors are selling for $830 and up when you use the discount code EXTRA17 at checkout — but if you want a model with 8GB of RAM you’ll have to spend at …

Dell’s newest XPS 13 thin and light laptops featuring 10th-gen Intel Ice Lake processors are selling for $830 and up when you use the discount code EXTRA17 at checkout — but if you want a model with 8GB of RAM you’ll have to spend at least $1037. Or you could buy a slightly older model for […]

The post Daily Deals (3-06-2020) appeared first on Liliputing.