Link

Jetstream Routers Get Firmware Update to Fix Backdoor

Andrew Orr ·

In November, security researchers found a Walmart-branded router called Jetstream contained a way for a third party to remotely control the router and devices connected to it. Walmart responded and said it stopped selling these routers. The manufacturer, Wavlink, also responded. A firmware update includes the following:

Removed unnecessary diagnostic pages; Deleted tcpdump tool; Added codes to block CSRF attack; Improved Web authentication routine.

The researchers haven’t yet tested the update to see if it has been effective.

Link

Siri on iOS 14.3 Can Mimic Sounds Like Animals

Andrew Orr ·

When you download iOS 14.3 released on Monday, ask Siri if she can quack like a duck. CNBC says she will play a short audio clip of a quacking duck. However, when I asked her she played me an album from Apple Music called “Quack Like a Duck.” But I don’t think I worded it correctly. Ask “What does <blank> sound like?”

If you ask “what does the fox say?”, Siri may simply quote the song that became a YouTube hit in 2013. But asking “what does a fox sound like” brings up an actual call from an arctic fox, which sounds like someone whooping.

Link

FTC Launches Major Investigation into Tech Privacy

Charlotte Henry ·

The Federal Trade Commission (FTC) launched a huge investigation into privacy and data collection practices at major tech firms on Monday. Axios had the scoop.

The big picture: The move comes amid broader scrutiny for the industry and appears to be a wide-reaching inquiry into everything major tech companies know about their users and what they do with that data, as well as their broader business plans. Details: The FTC is asking for a large trove of information and documents from the above platforms, plus Discord, Reddit and Snap. The agency wants much of the usage and engagement data the platforms collect on their users, the metrics they use for measuring such things and short- and long-term business strategies, among many other areas of inquiry.

TMO Deals

100 Entries to Win the Complete Home Gym Giveaway Featuring Peloton

Bryan Chaffin ·

We have a giveaway called the Complete Home Gym Giveaway, where you could win a bunch of home fitness gear including the Peloton Bike+ Basics, the Mirror, Bowflex SelectTech 552 Dumbbells, and more. You get entries to the giveaway by donating money to the Playing For Change Foundation through our deals site. A $10 donation gets you 100 entries into the giveaway, with larger donation options available in the listing.

Link

Russian ‘Cozy Bear’ Hacking Team Hits US Government Networks

Andrew Orr ·

A group of Russian hackers known as Cozy Bear has hacked several U.S. government agencies like the Treasury and Commerce departments.

On Sunday night, FireEye said the attackers were infecting targets using Orion, a widely used business software app from SolarWinds. After taking control of the Orion update mechanism, the attackers were using it to install a backdoor that FireEye researchers are calling Sunburst.

Podcast

Swiper, NOT Swiping — Mac Geek Gab 848

John F. Braun & Dave Hamilton · · Add Comment

These days we do lots of swiping on our devices, and sometimes the results are expected, other times not so much! Listen as John and Dave share tips and answer questions about swiping. That’s not all, of course, the topics expand from there, including a great dive into USB speeds on Apple’s new iPads. Listen as your two favorite geeks walk through all of this for you this week!

Podcast

AirPods Max, Irish Streaming Law, Replacing iPhone Camera Lenses, with Jeff Gamet - ACM 539

Bryan Chaffin · · 1 Comment

Bryan Chaffin and Jeff Gamet talk about Apple’s new AirPods Max over-the-ear headphones. They also discuss a proposed law from Ireland that would require 30% of all streaming content to be made in Europe, something that could radically affect Apple TV+. And, Jeff Gamet explains how he broke his iPhone’s camera lens cover and how he replaced it.

Link

Apple Will Ban ‘X-Mode’ Data Broker From its Platforms

Andrew Orr ·

A report from The Wall Street Journal reveals that Apple and Google are banning a data broker called X-Mode from collecting location data from their platforms. (Non-paywalled version here). This is due to X-Mode links to selling data to government contractors involved in national security as Vice reported.

Both Apple and Google disclosed their decision to ban X-Mode to investigators working for Sen. Ron Wyden (D., Ore.), who has been conducting an investigation into the sale of location data to government entities.