Nest users now covered by Google’s ultra-secure Advanced Protection Program

APP is the most effective way to prevent hijackings. So what are you waiting for?

A smart home security device displays an image of a child on a porch.

Enlarge (credit: Akram Kennis / Flickr)

Accounts for Google’s Nest line of smart home devices are now covered by the company’s Advanced Protection Program, which traditionally has provided enhanced security for journalists, politicians, elections workers, and other people who are frequently targeted by hackers.

Google rolled out APP in 2017. It requires users to have at least two physical security keys, such as those available from Yubico, Google’s Titan brand, or other providers. Typically, keys connect through USB slots or Near-field Communication or Bluetooth interfaces. Once registered, the keys provide cryptographic secrets that are unphishable and, at least theoretically, impossible to intercept through malware attacks or other types of hacking. APP also limits the apps that can connect to protected accounts, although registering Thunderbird to connect to Gmail is relatively easy.

Pulling up your account by the bootstraps

Once an account is enrolled and each device (including a phone) is authenticated through the physical-key process Google calls bootstrapping, people can use their iOS or Android devices as a security key. That’s usually easier, faster, and more convenient than using physical security keys. Typically, users must bootstrap only rarely after the bootstrapping process, such as when Google detects suspicious behavior. APP also pushes alerts to users’ devices and registered email accounts each time a new device connects.

Read 5 remaining paragraphs | Comments

MSI Creator 15 is a 4.6 pound laptop with Core i7-10875H and NVIDIA graphics

MSI’s latest Creator-series laptop is a high-performance notebook with a 15.6 inch display and support for up to a 4K screen, a Core i7-10875H octa-core processor, 64GB of RAM, and NVIDIA GeForce RTX 2080 SUPER Max-Q graphics. The new MSI Creato…

MSI’s latest Creator-series laptop is a high-performance notebook with a 15.6 inch display and support for up to a 4K screen, a Core i7-10875H octa-core processor, 64GB of RAM, and NVIDIA GeForce RTX 2080 SUPER Max-Q graphics. The new MSI Creator 15 is also fairly compact for a notebook with that kind of horsepower (particularly one […]

The post MSI Creator 15 is a 4.6 pound laptop with Core i7-10875H and NVIDIA graphics appeared first on Liliputing.

Hurricane season began today, and there are legitimate reasons to be concerned

Warm waters. A possible La Niña. What could possibly go wrong?

Multicolored bar graph.

Enlarge / Almost all seasonal forecasters are predicting high numbers of hurricanes during the 2020 Atlantic season. (credit: Phil Klotzbach)

Officially, the Atlantic hurricane season begins today. Historically, the season's first named storm doesn't spin up until some time in July. But this being 2020, we're not having anything normal this year.

The Atlantic Ocean already blew through the "A" (Arthur) and "B" (Bertha) names for storms. And it looks almost certain that Cristobal will form in a day or two in the southern Gulf of Mexico—threatening Mexico, Texas, and Louisiana with winds and heavy rainfall. With such a wild start to the year out of the gate, what does this mean for the heart of hurricane season, which typically does not really get going until August?

For answers, Ars contacted hurricane scientist Phil Klotzbach, who will update his seasonal forecast for Atlantic activity this year in a few days.

Read 9 remaining paragraphs | Comments

Daily Deals (6-01-2020)

There’s usually a bit of a risk with purchasing refurbished products — basically you’re spending money on a device that was probably used, returned, inspected, and maybe lightly repaired. So there’s a somewhat higher chance of s…

There’s usually a bit of a risk with purchasing refurbished products — basically you’re spending money on a device that was probably used, returned, inspected, and maybe lightly repaired. So there’s a somewhat higher chance of something going wrong. But there’s usually less risk if you buy straight from the company that normally makes and/or sells […]

The 2021 Honda Insight is an efficient but inconspicuous hybrid

It looks more restrained than the Civic it’s based on, gets 55mpg in the city.

Did you know Ars reviewed its first car 20 years ago? Back in the year 2000, Will Ryu tried out the brand-new Honda Insight, justifying it because the car married some impressive technology and a fun-to-drive nature—criteria we still look for today. Back then, the Insight looked like little else on the road. It had advanced aerodynamics, used lightweight alloy construction, and was the first parallel hybrid powertrain to go on sale in the US market. Today, we're revisiting the Insight, now in its third generation.

The differences are pronounced: what was cutting edge two decades ago is mainstream now. Instead of shouting its presence, the current Insight hides in crowds. And hybrid powertrains are commonplace and even seen as old tech in a world of 300-mile battery EVs and vehicles with hydrogen fuel cells. But proven technology has its upside. Today's Insight might look normal, but it's still remarkably efficient, even beating the old streamliner when it comes to city driving.

And it's cheap, too. That weird-looking Insight with the faired-in wheels cost just over $20,000 in 2000—just under $30,000 in today's dollars. The 2021 Insight starts at $22,930, and a Touring model loaded up to press-fleet specifications is still only $28,840. And you can actually fit people in its back seats, too.

Read 11 remaining paragraphs | Comments

Android 11 power menu leak shows new smart home integration

Revamped power menu integrates Google Pay and Google Assistant home controls.

Android 11 has had four preview releases so far, but they've been stripped of many features that we know are in development and just haven't seen in a public build yet. One such feature is a revamp to the power menu, which has been getting code drops for smart home controls and credit cards for some time now. The near-final design of the new power menu appears to have leaked, thanks to XDA Developer's Mishaal Rahman.

Rahman shared two low-res screenshots showing a dramatically different power menu than what Android has typically had. What was just a simple four-option overlay has become a full-screen interface packed with buttons. The usual "Power," "Restart," "Screenshot," and "Emergency" buttons have shifted to the top of the screen, and below that is a carousel of credit cards from Google Pay. Below that are "Quick controls" which are smart home controls that are most likely sourced from the Google Home app.

The Quick Controls are the major new feature on the power menu. The screenshots appear to show options for smart lights, door locks, thermostats, cameras, and smart blinds, all of which are products you can currently access through the Google Assistant, the Google Home app, and Google Smart Displays. If you're on a phone and don't want to use voice commands, your only other option is to dig through the Google Home App, which can be cumbersome. This menu, which would be brought up just by long-pressing the power button, would be considerably faster.

Read 1 remaining paragraphs | Comments

Google’s Pixel feature drop brings battery, bedtime, safety, and Assistant changes

Since late last year, every few months Google rolls out a handful of new features that are exclusive to Pixel-branded smartphones, and the latest Pixel feature drop is rolling out starting today. The update includes a handful of changes that could help…

Since late last year, every few months Google rolls out a handful of new features that are exclusive to Pixel-branded smartphones, and the latest Pixel feature drop is rolling out starting today. The update includes a handful of changes that could help extend a phone’s battery life, help you get a better night’s sleep, and […]

SpaceX launch footage was taken down thanks to bogus copyright claim

The public domain video was restored to the public, but this happens a lot.

The Falcon 9 rocket climbs to space on Saturday.

Enlarge / The Falcon 9 rocket climbs to space on Saturday. (credit: Trevor Mahlmann)

This weekend's launch, in which SpaceX's Falcon 9 rocket successfully propelled the Crew Dragon spacecraft and the two astronauts on board from Florida safely into space, was amazing, awe-inspiring, and frankly, just plain cool to watch. And here in the age of inexpensive, tiny high-definition cameras and streaming content, it should be easy to catch up on it if you missed it—or even if you just want to watch it again for fun. But for most of the weekend and into this morning, you couldn't watch it at all, thanks to copyright content ID bots working overtime.

The May 30 launch was streamed live to NASA's YouTube channel and then archived, along with several shorter clips and highlights taken from the day-long livestream. NASA footage, like photo and video from other government agencies, is generally published into the public domain, not under copyright, and other entities can mirror or rebroadcast it. National Geographic also covered the launch, and its footage incorporated some of the NASA content. Then things got stupid.

By Sunday, the archival NASA video was no longer available to view, Twitter users spotted, because of a copyright claim from National Geographic. Attempts at that time to play back some of the NASA videos resulted in an error message saying, "Video unavailable: This video contains content from National Geographic, who has blocked it on copyright grounds."

Read 6 remaining paragraphs | Comments

Publishers Sue the Internet Archive Over its Open Library, Declare it a Pirate Site

Several major publishers have filed a copyright infringement lawsuit in a New York court targeting the Internet Archive’s Open Library. According to the complaint, the project is a massive and willful infringement project that amounts to little more than a regular pirate site.

From: TF, for the latest news on copyright battles, piracy and more.

Internet ArchiveBack in March, the Internet Archive responded to the coronavirus pandemic by offering a new service to help “displaced learners”.

Combining scanned books from three libraries, the Archive offered unlimited borrowing of more than a million books, so that people could continue to learn while in quarantine.

While the move was welcomed by those in favor of open access to education, publishers and pro-copyright groups slammed the decision, with some describing it as an attempt to bend copyright law and others declaring the project as mass-scale piracy.

Today, major publishers Hachette Book Group, Inc., HarperCollins Publishers LLC, John Wiley & Sons, Inc., and Penguin Random House LLC went to war with the project by filing a copyright infringement lawsuit against the Internet Archive and five ‘Doe’ defendants in a New York court.

The plaintiffs, all member companies of the Association of American Publishers, effectively accuse the Internet Archive (IA) of acting not dissimilarly to a regular pirate site. In fact, the complaint uses those very words.

“The Open Library Is Not a Library, It Is an Unlicensed Aggregator and Pirate Site”

“Defendant IA is engaged in willful mass copyright infringement. Without any license or any payment to authors or publishers, IA scans print books, uploads these illegally scanned books to its servers, and distributes verbatim digital copies of the books in whole via public-facing websites. With just a few clicks, any Internet-connected user can download complete digital copies of in-copyright books from Defendant,” the complaint reads.

“The scale of IA’s scheme is astonishing: At its ‘Open Library,’ located at www.openlibrary.org and www.archive.org.., IA currently distributes digital scanned copies of over 1.3 million books. And its stated goal is to do so for millions more, essentially distributing free digital copies of every book ever written.”

Internet Archive Does “Violence to the Copyright Act”, Publishers Claim

Since the library was launched there has been discussion over whether the library itself is legal, with the Internet Archive firmly believing that it sits on the right side of the law. However, the publishers’ lawsuit stresses that they aren’t suing over the “occasional transmission of a title under appropriately limited circumstances”. What they are concerned with is their belief that the IA’s library is a tool for mass infringement.

“[The lawsuit] is about IA’s purposeful collection of truckloads of in-copyright books to scan, reproduce, and then distribute digital bootleg versions online. IA’s Website includes books of every stripe — from bestsellers to scholarly monographs, from entertaining thrillers and romances to literary fiction, from self-help books to biographies, from children’s books to adult books,” it reads.

The publishers also counter IA’s assertions that it only offers older 20th-century books for download, stating that is neither “accurate nor a defense.” IA scans, uploads and distributes huge numbers of in-copyright titles, the publishers state, including those published in the last few years.

“IA’s unauthorized copying and distribution of Plaintiffs’ works include titles that the Publishers are currently selling commercially and currently providing to libraries in ebook form, making Defendant’s business a direct substitute for established markets. Free is an insurmountable competitor,” they write.

Controlled Digital Lending is an “Invented Theory”, Complaint Alleges

At the heart of IA’s reasoning that its library is both legitimate and legal is that it offers content via Controlled Digital Lending, with titles only loaned for a limited period and on a controlled volume basis. However, opponents claim that scanning and lending can not be used as a cover for copyright infringement and distribution. It’s a position held by the plaintiffs in this lawsuit.

Claiming that IA is hiding behind “an invented theory” simply labeled Controlled Digital Lending, the publishers maintain there is nothing in copyright law that allows anyone to systematically copy and distribute digital book files simply because they claim to own an original physical copy.

Furthermore, IA’s loosening of its own CDL rules at the time of the pandemic only made matters worse, as it came precisely when book market players were also under pressure to survive.

“IA’s blatant, willful infringement is all the more egregious for its timing, which comes at the very moment that many authors, publishers, and independent bookstores, not to mention libraries, are both struggling to survive amidst economic uncertainty and planning deliberatively for future, changing markets,” the lawsuit adds.

In summary, the publishers state that the function of the library is similar to that of the publishers themselves. Both distribute entire books to the public for reading but unlike the publishers, the IA avoids having to invest any money in order to do so.

“In short, Defendant merely exploits the investments that publishers have made in their books, and it does so through a business model that is designed to free-ride on the work of others. Defendant pays for none of the expenses that go into publishing a book and is nothing more than a mass copier and distributor of bootleg works.”

Damages Could Run Into Tens, Perhaps Hundreds of Millions of Dollars

The publishers are going straight for the jugular with their claim, alleging direct copyright infringement for each of the publishers’ copyright works offered by the library at a rate of $150,000 in statutory damages per infringement. In the alternative, should IA “attempt to evade responsibility” by blaming its own users for infringement, the lawsuit also alleges secondary copyright infringement.

“Defendant is secondarily liable under theories of contributory liability, inducement liability, and vicarious liability for the underlying reproduction, distribution, public display, and public performance of Plaintiffs’ Works, as well as the making of infringing derivatives of Plaintiffs’ Works,” it adds.

Summing up, the plaintiffs seek a declaration that the Internet Archive’s actions in respect of the Open Library constitute willful copyright infringement. On top, they demand preliminary and permanent injunctions to restrain it from offering their copyrighted works alongside a judgment for a yet-to-be-determined amount in statutory damages.

A copy of the complaint can be found here (pdf)

From: TF, for the latest news on copyright battles, piracy and more.

Dallas Police asked public for videos of protesters—it didn’t go well

Police app stops working hours after PD requested videos of “illegal activity.”

Screenshots of the iWatch Dallas iPhone app, which lets users submit tips to police.

Enlarge / Screenshots of the iWatch Dallas iPhone app from the Apple App Store. (credit: City of Dallas)

With protests against police brutality and racism happening in many major US cities, the Dallas Police Department on Sunday asked the public to submit videos of "illegal activity from the protests" through the city's smartphone app. It didn't go well, as the app was reportedly inundated with unrelated content, such as K-pop videos, and within less than a day, the app had stopped working due to "technical difficulties."

"In response to the tweeted request from Dallas Police, hundreds of K-pop fans replied with photos and videos of their favorite artists," BuzzFeed News wrote. "Many people also claimed to have submitted videos of the police harming protestors, as well as fan edits of K-pop artists, to the iWatch Dallas app."

The department made its request for video of protesters at 12:48am CT Sunday. "If you have video of illegal activity from the protests and are trying to share it with @DallasPD, you can download it to our iWatch Dallas app. You can remain anonymous," the tweet said.

Read 6 remaining paragraphs | Comments