Thursday, 10 January 2019

Shareholder suit alleges Google covered up its sexual harassment problems with big payouts

Months after an earth-shattering New York Times investigation exposed Google parent company Alphabet’s $90 million payout to Android co-founder Andy Rubin, despite the accusations of sexual misconduct made against him, a Google shareholder is suing the company.

James Martin filed suit in the San Mateo Superior Court Thursday morning, alleging the company’s leaders deployed massive allowances to poor-behaving executives to cover up harassment scandals. Both Rubin and Google’s former head of search Amit Singhal, who peacefully left the company in 2016 amid harassment allegations that weren’t made public until the following year, are listed as defendants in the court filing. This is because the plaintiff is seeking a full return of the massive payouts awarded to the embattled former execs.

With charges including breach of fiduciary duty, unjust enrichment, abuse of power and corporate waste, per The Washington Post, the lawsuit asks for an end of nondisclosure and arbitration agreements at Google, which ensure workplace disputes are settled behind closed doors and without any right to an appeal. Martin is also requesting Google incorporate three new directors to the Alphabet board and put an end to supervoting shares, which gives certain shareholders more voting control.

The lawsuit also targets Rubin, Google co-founders Larry Page and Sergey Brin, chief executive officer Sundar Pichai and executive chairman Eric Schmidt. Former human resources director Laszlo Bock, chief legal officer David Drummond and former executive Amit Singhal are also named, as are long-time venture capitalists and Google board members John Doerr and Ram Shriram.

Google didn’t immediately respond to a request for comment.

Following the release of the NYT report, Googlers across the world rallied to protest the company’s handling of sexual misconduct allegations. The protestors had five key asks, including an end to forced arbitration in cases of harassment and discrimination, a commitment to end pay and opportunity inequity and a clear, uniform, globally inclusive process for reporting sexual misconduct safely and anonymously. Google ultimately complied with employees and put an end to forced arbitration; other tech companies, such as Airbnb, followed suit.



from Android – TechCrunch https://tcrn.ch/2SMet2Q
via IFTTT

GM is smartening up its Bolt EV smartphone app

GM is sprucing up its smartphone app for owners of the all-electric Chevrolet Bolt through a collaboration with charging network companies EVgo, ChargePoint, and Greenlots.

The idea is to take aggregate dynamic data from each of the EV charging networks so owners can have a “more seamless charging experience.” In short: GM wants to make it easier and more intuitive for Bolt EV owners to find and access charging. Removing hurdles from the charging experience can go along way in convincing more people to buy the Bolt EV, or any EV for that matter.

The partnership with EVgo, ChargePoint, and Greenlots is a notable start considering that collectively that means more than 31,000 charging ports.

“GM believes in an all-electric future, and this is a significant step to make charging easier for our customers,” said Doug Parks, General Motors vice president of Autonomous and Electric Vehicle Programs. “By collaborating with these three companies, we expect to reduce barriers to create a stronger EV infrastructure for the future. This is an important step toward achieving GM’s vision of a world with zero emissions.”

GM plans to take the aggregate charging data from EVgo, ChargePoint, and Greenlots and use it to improve the myChevrolet app. For instance, owners will be able to see if a charging station is available and compatible with the Bolt EV. It will also provide real-time data on charge station to report if a charging station is working.

GM plans to create an app interface that will streamline the enrollment process for each of these networks. The automaker wants owners to be able to activate a charging session using the app instead of a membership card, but didn’t say when that feature would be rolled out. .

GM recently made a few updates to the myChevrolet app that lets owners project the energy assist to the vehicle’s infotainment system via Apple CarPlay and Android Auto for drivers with model year 2017 or newer Bolt EVs.

This means Bolt EV drivers can access information through their infotainment system like vehicle range, charging station locations and search, as well as route planning that takes into consideration charging stops along the way if the destination is out of range.

Original purchasers of new Bolt EVs will have access to these features at no additional cost for five years from the vehicle delivery date, according to GM.

GM doesn’t provide updates about the Bolt EV, and more broadly its electric vehicle program at the same pace and frequency as say Tesla. But the company is still ramping up and expanding. GM recently expanded a battery lab and a new LG Electronics plant in Michigan has come online.

The LG Electronics facility in Hazel Park started making battery packs this fall to supply GM’s Orion Assembly Plant, where the automaker builds the all-electric Chevrolet  Bolt.

GM’s plan to launch 20 new all-electric vehicles globally by 2023 and increase production of the Chevy Bolt.



from Apple – TechCrunch https://tcrn.ch/2RoN5ev

GM is smartening up its Bolt EV smartphone app

GM is sprucing up its smartphone app for owners of the all-electric Chevrolet Bolt through a collaboration with charging network companies EVgo, ChargePoint, and Greenlots.

The idea is to take aggregate dynamic data from each of the EV charging networks so owners can have a “more seamless charging experience.” In short: GM wants to make it easier and more intuitive for Bolt EV owners to find and access charging. Removing hurdles from the charging experience can go along way in convincing more people to buy the Bolt EV, or any EV for that matter.

The partnership with EVgo, ChargePoint, and Greenlots is a notable start considering that collectively that means more than 31,000 charging ports.

“GM believes in an all-electric future, and this is a significant step to make charging easier for our customers,” said Doug Parks, General Motors vice president of Autonomous and Electric Vehicle Programs. “By collaborating with these three companies, we expect to reduce barriers to create a stronger EV infrastructure for the future. This is an important step toward achieving GM’s vision of a world with zero emissions.”

GM plans to take the aggregate charging data from EVgo, ChargePoint, and Greenlots and use it to improve the myChevrolet app. For instance, owners will be able to see if a charging station is available and compatible with the Bolt EV. It will also provide real-time data on charge station to report if a charging station is working.

GM plans to create an app interface that will streamline the enrollment process for each of these networks. The automaker wants owners to be able to activate a charging session using the app instead of a membership card, but didn’t say when that feature would be rolled out. .

GM recently made a few updates to the myChevrolet app that lets owners project the energy assist to the vehicle’s infotainment system via Apple CarPlay and Android Auto for drivers with model year 2017 or newer Bolt EVs.

This means Bolt EV drivers can access information through their infotainment system like vehicle range, charging station locations and search, as well as route planning that takes into consideration charging stops along the way if the destination is out of range.

Original purchasers of new Bolt EVs will have access to these features at no additional cost for five years from the vehicle delivery date, according to GM.

GM doesn’t provide updates about the Bolt EV, and more broadly its electric vehicle program at the same pace and frequency as say Tesla. But the company is still ramping up and expanding. GM recently expanded a battery lab and a new LG Electronics plant in Michigan has come online.

The LG Electronics facility in Hazel Park started making battery packs this fall to supply GM’s Orion Assembly Plant, where the automaker builds the all-electric Chevrolet  Bolt.

GM’s plan to launch 20 new all-electric vehicles globally by 2023 and increase production of the Chevy Bolt.



from Android – TechCrunch https://tcrn.ch/2RoN5ev
via IFTTT

Wednesday, 9 January 2019

Security researchers find over a dozen iPhone apps linked to Golduck malware

Security researchers say they’ve found more than a dozen iPhone apps covertly communicating with a server associated with Golduck, a historically Android-focused malware that infects popular classic game apps.

The malware has been known about for over a year, after it was first discovered by Appthority infecting classic and retro games on Google Play, by embedding backdoor code that allowed malicious payloads to be silently pushed to the device. At the time, more than 10 million users were affected by the malware, allowing hackers to run malicious commands at the highest privileges, like sending premium SMS messages from a victim’s phone to make money.

Now, the researchers say iPhone apps linked to the malware could also present a risk.

Wandera, an enterprise security firm, said it found 14 apps — all retro-style games — that were communicating with the same command and control server used by the Golduck malware.

“The [Golduck] domain was on a watchlist we established due to its use in distributing a specific strain of Android malware in the past,” said Michael Covington, Wandera’s vice-president of product. “When we started seeing communication between iOS devices and the known malware domain, we investigated further.”

The apps include: Commando Metal: Classic ContraSuper Pentron Adventure: Super HardClassic Tank vs Super BomberSuper Adventure of MaritronRoy Adventure Troll GameTrap Dungeons: Super AdventureBounce Classic LegendBlock GameClassic Bomber: Super LegendBrain It On: Stickman PhysicsBomber Game: Classic BombermanClassic Brick – Retro BlockThe Climber Brick, and Chicken Shoot Galaxy Invaders.

According to the researchers, what they saw so far seems relatively benign — the command and control server simply pushes a list of icons in a pocket of ad space in the upper-right corner of the app. When the user opens the game, the server tells the app which icons and links it should serve to the user. They did, however, see the apps sending IP address data — and, in some cases, location data — back to the Golduck command and control server. TechCrunch verified their claims, running the apps on a clean iPhone through a proxy, allowing us to see where the data goes. Based on what we saw, the app tells the malicious Golduck server what app, version, device type, and the IP address of the device — including how many ads were displayed on the phone.

As of now, the researchers say that the apps are packed with ads — likely as a way to make a quick buck. But they expressed concern that the communication between the app and the known-to-be-malicious server could open up the app — and the device — to malicious commands down the line.

“The apps themselves are technically not compromised; while they do not contain any malicious code, the backdoor they open presents a risk for exposure that our customers do not want to take.

“A hacker could easily use the secondary advertisement space to display a link that redirects the user and dupes them into installing a provisioning profile or a new certificate that ultimately allows for a more malicious app to be installed,” said the researchers.

That could be said for any game or app, regardless of device maker or software. But the connection to a known malicious server isn’t a good look. Covington said that the company has “observed malicious content being shared from the server,” but that it wasn’t related to the games.

The implication is that if the server is sending malicious payloads to Android users, iPhone users could be next.

TechCrunch sent the list of apps to data insights firm Sensor Tower, which estimated that the 14 apps had been installed close to one million times since they were released — excluding repeated downloads or installs across different devices.

When we tried contacting the app makers, many of the App Store links pointed to dead links or to pages with boilerplate privacy policies but no contact information. The registrant on the Golduck domain appears to be fake, along with other domains associated with Golduck, which often have different names and email addresses.

Apple did not comment when reached prior to publication. The apps are appear to still be downloadable from the App Store, but all now say they are “not currently available in the U.S. store.”

Apple’s app stores may have a better rap than Google’s, which every once in a while lets malicious apps slip through the net. In reality, neither store is perfect. Earlier this year, security researchers found a top-tier app in the Mac App Store that was collecting users’ browsing history without permission, and dozens of iPhone apps that were sending user location data to advertisers without explicitly asking first.

For the average user, malicious apps remain the largest and most common threat to mobile users — even with locked down device software and the extensive vetting of apps.

If there’s one lesson, now and always: don’t download what you don’t need, or can’t trust.



from Apple – TechCrunch https://tcrn.ch/2C092Gq

Another day, another reversal in the stock market

Signs that the Federal Reserve could hold off on further interest rate hikes coupled with a booming jobs report sent stocks on Wall Street surging to close a volatile first trading week for the New Year.

After yesterday’s Apple-induced slide, and in the face of economic indicators that signaled a potential slowdown in global and domestic growth, the chairman of the Federal Reserve, Jerome Powell, said that the central bank would be “patient” when it comes to raising interest rates.

That news, coupled with a strong jobs report, sent stocks rocketing up. The Dow Jones Industrial Average climbed 746.9 points, or roughly 3.3 percent, while the Nasdaq shot up 4.3 percent, or 275.4 points.

It wasn’t just the Fed chairman’s observations about the potential for rate hikes in 2019 that had investors buying, but assurances about Powell’s job security in the face of increasing pressure from President Trump.

Speaking at a panel discussion of the American Economic Association alongside former Federal Reserve chairs Janet L. Yellen and Ben Bernanke, Powell said that he would not resign if asked by the president.

Immediately after Powell’s comments stocks began surging.

“With the muted inflation readings that we’ve seen coming in, we will be patient as we watch to see how the economy evolves,” Powell was quoted as saying in The Washington Post. “We’re always prepared to shift the stance of policy and to shift it significantly if necessary.”



from Apple – TechCrunch https://tcrn.ch/2GVKNyC

LinkedIn now requires phone number verification for all users in China

Facebook is the new crapware

Welcome to 2019 where we learn Facebook is the new crapware.

Sorry #DeleteFacebook, you never stood a chance.

Yesterday Bloomberg reported that the scandal-beset social media behemoth has inked an unknown number of agreements with Android smartphone makers, mobile carriers and OSes around the world to not only pre-load Facebook’s eponymous app on hardware but render the software undeleteable; a permanent feature of your device, whether you like how the company’s app can track your every move and digital action or not.

Bloomberg spoke to a U.S. owner of a Samsung Galaxy S8 who, after reading forum discussions about Samsung devices, found his own pre-loaded Facebook app could not be removed. It could only be “disabled”, with no explanation available to him as to what exactly that meant.

The Galaxy S8 retailed for $725+ when it went on sale in the U.S. two years ago.

A Facebook spokesperson told Bloomberg that a disabled permanent app doesn’t continue collecting data or sending information back to the company. But declined to specify exactly how many such pre-install deals Facebook has globally.

While Samsung told the news organization it provides a pre-installed Facebook app on “selected models” with options to disable it, adding that once disabled the app is no longer running.

After Bloomberg’s report was published, mobile research and regular Facebook technical tipster, Jane Manchun Wong, chipped in via Twitter to comment — describing the pre-loaded Facebook app on Samsung devices as “stub”.

Aka “basically a non-functional empty shell, acts as the placeholder for when the phone receives the ‘real’ Facebook app as app updates”.

Albeit many smartphone users have automatic updates enabled, and an omnipresent disabled app is always there to be re-enabled at a later date (and thus revived from a zombie state into a fully fledged Facebook app one future day).

While you can argue that having a popular app pre-installed can be helpful to consumers (though not at all helpful to Facebook competitors), a permanent pre-install is undoubtedly an anti-consumer move.

Crapware is named crapware for a reason. Having paid to own hardware, why should people be forever saddled with unwanted software, stub or otherwise?

And while Facebook is not the only such permanent app around (Apple got a lot of historical blowback for its own undeleteable apps, for instance; finally adding the ability to delete some built-in apps with iOS 12) it’s an especially egregious example given the company’s long and storied privacy hostile history.

Consumers who do not want their digital activity and location surveilled by the people-profiling giant will likely crave the peace of mind of not having any form of Facebook app, stub or otherwise, taking up space on their device.

But an unknown number of Android users are now finding out they don’t have that option.

Not cool, Facebook, not cool.

Another interesting question the matter raises is how permanent Facebook pre-installs are counted in Facebook’s user metrics, and indeed for ad targeting purposes.

In recent years the company has had to revise its ad metrics several times. So it’s valid to wonder whether a disabled Facebook app pre-install is being properly accounted for by the company (i.e. as minus one pair of eyeballs for its ad targeting empire) or not.

We asked Facebook about this point but at the time of writing it declined to comment beyond its existing statements to Bloomberg.



from Android – TechCrunch https://tcrn.ch/2FfuFqd
via IFTTT