Spyware living in Google Play Store lets hackers control your phone via SMS

Why it matters to you

Identifying and being mindful of malicious apps like this is one is the first step toward stamping them out for good.

An internet security company has published its findings on an Android app that contained spyware controlled via text messages. Researchers at Zscaler have determined an app suspiciously titled “System Update” gave attackers the ability to execute commands on a remote device and receive its location data. The app — which was just deleted on Google Play Store — had been available for the last three years, and was listed as having been downloaded anywhere from 1 million to 5 million times.

The reviews all indicate users had been installing System Update believing, unsurprisingly, that it would update the version of Android on their device. Instead, when opened for the first time, the app would display the standard system error message — “Unfortunately, System Update has stopped” — and remove itself from the app drawer.

Zscaler

This would activate the spyware, named SMSVova, and set things into motion. SMSVova fetches the user’s location data and begins reading text messages, looking for an SMS message that reads “get faq.” If another device texts “get faq” to the infected party, the latter will automatically respond with a list of commands. By texting these commands to the affected device, the attacker could remotely lock the phone with a password or even issue fake low-battery warnings.

At this point, the attacker is given total access to the coordinates of the infected phone. Although the app is no longer available to download from Google’s marketplace, Zscaler reports it found the code living in another remote access program, called DroidJack.

There is of course no shortage of ways in which an unscrupulous hacker could gain access into your phone, especially with the help of user-installed software. But this is certainly one of the more interesting methods. It’s also quite frightening, considering it gives the attacker so much power through the seemingly harmless and unsophisticated medium of text messages. Then again, in light of the deadly string of emojis that can incapacitate an iPhone, perhaps we shouldn’t be so surprised.

The world’s largest X-ray laser is one step closer to completion

Why it matters to you

European XFEL X-ray will let scientists capture images of atomic elements on a previously unimaginably tiny scale.

The world’s largest X-ray laser is one step closer to completion after researchers at Germany’s Deutsches Elektronen-Synchrotron (DESY) announced that they’ve passed a major milestone in its development.

The laser, known as the European XFEL, will one day let scientists capture images of atomic elements on a previously unimaginably tiny scale. That’s thanks to the European XFEL’s ability to flash up to 27,000 X-ray laser illuminations in one second. These flashes are so brief and so intense that they’ll allow researchers to take pictures of structures and processes down to an atomic level.

The milestone hit this week involved successfully firing electrons through a particle accelerator measuring a whopping 2.1 kilometers in length. The entire X-ray laser measures 3.4 km.

“The European XFEL’s particle accelerator is the first superconducting linear accelerator of this size in the world to go into operation,” Helmut Dosch, chairman of the DESY board of directors, said in a statement. “With the commissioning of this complex machine, DESY and European XFEL scientists have placed the crown on their 20-year engagement in developing and building this large international project. The first experiments are within reach, and I am quite excited about the discoveries ahead of us. I am exceptionally happy about arriving at this milestone and congratulate all involved for the outstanding work and their great tenacity.”

The superconducting particle accelerator of the European XFEL has taken seven years of development to get to this point. After this week’s milestone, the next step for the project involves increasing the energy of the electrons, prior to them being sent into the machine’s “magnetic slalom” section, where the X-ray laser light will ultimately be generated. The hope is that this will take place in May.

Of course, the biggest question is how long until the European XFEL shows up as the setting of a Dan Brown thriller? We’re giving it two years. Three, tops.

Weekly Rewind: Conquering Everest with Snapchat, and is the Galaxy S8 worth it?

A lot can happen in a week when it comes to tech. The constant onslaught of news makes it nigh impossible for mere mortals with real lives to keep track of everything. That’s why we’ve compiled a quick and dirty list of this week’s top 10 tech stories, from our review of the Samsung Galaxy S8 to how you can stay cool this summer — it’s all here.

Samsung Galaxy S8 review

The Galaxy S8 is worth the hype and the wait we endured since the release of the year-old Galaxy S7 Edge (which frankly looks dated now with its home button). But in a time where you can get a fantastic smartphone for $400 or less, is it worth dropping $750 or more on the S8? We think so, if only for its brilliant screen, but it is a big ask if money is tight. The Galaxy S8 has exceptional build quality, design, and a stellar displays, not to mention plenty of power to crush any task. Let’s take a closer look.

Read the full story here.

To conquer Everest an astonishing 7th time, this climber is going high tech

Over the past nine years, professional climber and mountain guide Adrian Ballinger summitted Mount Everest, Earth’s highest mountain, six times, with two ascents coming in the span of just three weeks. Ballinger sets himself apart from the budding crowd of climbers taking to the Nepalese peak rests with his unique approach to each climb. Ballinger and climbing partner Cory Richards made headlines last year after Snapchatting their way to the summit, making use of the peak’s 3G wireless network access along the way.

Read the full story here.

Don’t dread hot, sticky summer nights — use the Bfan to stay cool in bed

We’ve been awaiting its return for months, but now that summer is nearly here, we could probably do without nights sweating into our sheets. But fret not; you can still enjoy all the perks of summer without its nocturnal drawbacks thanks to the Bfan, a bed-cooling system that will help you stay dry and sweat-free without wasting tons of energy (not to mention money). The clever solution for hot sleepers has already fared remarkably well on both Kickstarter and Indiegogo, where it raised a total of nearly $800,000.

Read the full story here.

Facebook’s newest tech will let you type with your brain and hear with your skin

Facebook has some pretty surprising ideas about the future of communication, and they extend far beyond news feeds and even augmented reality. During day two of its F8 developer conference, the social media giant announced that its Building 8 hardware lab is working on technology that will allow you to type with your thoughts and hear through your skin.

Read the full story here.

From lab-grown steaks to plant-based blood, science is taking the animal out of meat

Over the past few years, a handful of enterprising startups have sprung up with the goal of creating animal-free meat. There are several big players in this space, with some growing meat in petri dishes and others developing new and innovative ways to use plants in meat-substitute products. In this article, we’ll take you on a tour of some of the biggest players in the space, and explore the innovative ways they’re hoping to solve the carnivore’s conundrum.

Read the full story here.

Weekly Rewind: Conquering Everest with Snapchat, and is the Galaxy S8 worth it?

A lot can happen in a week when it comes to tech. The constant onslaught of news makes it nigh impossible for mere mortals with real lives to keep track of everything. That’s why we’ve compiled a quick and dirty list of this week’s top 10 tech stories, from our review of the Samsung Galaxy S8 to how you can stay cool this summer — it’s all here.

Samsung Galaxy S8 review

The Galaxy S8 is worth the hype and the wait we endured since the release of the year-old Galaxy S7 Edge (which frankly looks dated now with its home button). But in a time where you can get a fantastic smartphone for $400 or less, is it worth dropping $750 or more on the S8? We think so, if only for its brilliant screen, but it is a big ask if money is tight. The Galaxy S8 has exceptional build quality, design, and a stellar displays, not to mention plenty of power to crush any task. Let’s take a closer look.

Read the full story here.

To conquer Everest an astonishing 7th time, this climber is going high tech

Over the past nine years, professional climber and mountain guide Adrian Ballinger summitted Mount Everest, Earth’s highest mountain, six times, with two ascents coming in the span of just three weeks. Ballinger sets himself apart from the budding crowd of climbers taking to the Nepalese peak rests with his unique approach to each climb. Ballinger and climbing partner Cory Richards made headlines last year after Snapchatting their way to the summit, making use of the peak’s 3G wireless network access along the way.

Read the full story here.

Don’t dread hot, sticky summer nights — use the Bfan to stay cool in bed

We’ve been awaiting its return for months, but now that summer is nearly here, we could probably do without nights sweating into our sheets. But fret not; you can still enjoy all the perks of summer without its nocturnal drawbacks thanks to the Bfan, a bed-cooling system that will help you stay dry and sweat-free without wasting tons of energy (not to mention money). The clever solution for hot sleepers has already fared remarkably well on both Kickstarter and Indiegogo, where it raised a total of nearly $800,000.

Read the full story here.

Facebook’s newest tech will let you type with your brain and hear with your skin

Facebook has some pretty surprising ideas about the future of communication, and they extend far beyond news feeds and even augmented reality. During day two of its F8 developer conference, the social media giant announced that its Building 8 hardware lab is working on technology that will allow you to type with your thoughts and hear through your skin.

Read the full story here.

From lab-grown steaks to plant-based blood, science is taking the animal out of meat

Over the past few years, a handful of enterprising startups have sprung up with the goal of creating animal-free meat. There are several big players in this space, with some growing meat in petri dishes and others developing new and innovative ways to use plants in meat-substitute products. In this article, we’ll take you on a tour of some of the biggest players in the space, and explore the innovative ways they’re hoping to solve the carnivore’s conundrum.

Read the full story here.

Weekly Rewind: Conquering Everest with Snapchat, and is the Galaxy S8 worth it?

A lot can happen in a week when it comes to tech. The constant onslaught of news makes it nigh impossible for mere mortals with real lives to keep track of everything. That’s why we’ve compiled a quick and dirty list of this week’s top 10 tech stories, from our review of the Samsung Galaxy S8 to how you can stay cool this summer — it’s all here.

Samsung Galaxy S8 review

The Galaxy S8 is worth the hype and the wait we endured since the release of the year-old Galaxy S7 Edge (which frankly looks dated now with its home button). But in a time where you can get a fantastic smartphone for $400 or less, is it worth dropping $750 or more on the S8? We think so, if only for its brilliant screen, but it is a big ask if money is tight. The Galaxy S8 has exceptional build quality, design, and a stellar displays, not to mention plenty of power to crush any task. Let’s take a closer look.

Read the full story here.

To conquer Everest an astonishing 7th time, this climber is going high tech

Over the past nine years, professional climber and mountain guide Adrian Ballinger summitted Mount Everest, Earth’s highest mountain, six times, with two ascents coming in the span of just three weeks. Ballinger sets himself apart from the budding crowd of climbers taking to the Nepalese peak rests with his unique approach to each climb. Ballinger and climbing partner Cory Richards made headlines last year after Snapchatting their way to the summit, making use of the peak’s 3G wireless network access along the way.

Read the full story here.

Don’t dread hot, sticky summer nights — use the Bfan to stay cool in bed

We’ve been awaiting its return for months, but now that summer is nearly here, we could probably do without nights sweating into our sheets. But fret not; you can still enjoy all the perks of summer without its nocturnal drawbacks thanks to the Bfan, a bed-cooling system that will help you stay dry and sweat-free without wasting tons of energy (not to mention money). The clever solution for hot sleepers has already fared remarkably well on both Kickstarter and Indiegogo, where it raised a total of nearly $800,000.

Read the full story here.

Facebook’s newest tech will let you type with your brain and hear with your skin

Facebook has some pretty surprising ideas about the future of communication, and they extend far beyond news feeds and even augmented reality. During day two of its F8 developer conference, the social media giant announced that its Building 8 hardware lab is working on technology that will allow you to type with your thoughts and hear through your skin.

Read the full story here.

From lab-grown steaks to plant-based blood, science is taking the animal out of meat

Over the past few years, a handful of enterprising startups have sprung up with the goal of creating animal-free meat. There are several big players in this space, with some growing meat in petri dishes and others developing new and innovative ways to use plants in meat-substitute products. In this article, we’ll take you on a tour of some of the biggest players in the space, and explore the innovative ways they’re hoping to solve the carnivore’s conundrum.

Read the full story here.

Researchers find 10 vulnerabilities in 25 network routers supplied by Linksys

Why it matters to you

If you own one of the 25 router models with a security flaw, be on the lookout for a firmware fix from Linksys.

After we pointed out a security issue with the web-based interface in our recent Linksys EA8300 router review, IOActive Labs reports it discovered 10 security vulnerabilities across 25 different Linksys routers, including the EA8300 unit we just reviewed. The issues range from low to high on a security level, six of which grant remote access to “unauthenticated” attackers.

In one example, hackers can use an affected router as a Denial-of-Service (DoS) tool. The hacker merely sends a few requests or “abuse” a specific API used by the browser-based backend. The router will then either become unresponsive or will reboot altogether. When that happens, router owners are locked out of the web-based interface and connected client devices can’t access the internet until the hacker stops the DoS attack.

Firmware flaws also enable hackers to collect “technical and sensitive” information about the router itself by bypassing the authentication protecting the onboard Common Gateway Interface (CGI) scripts, which enables the router to generate the browser-based interface. Information collected through this vulnerability include the firmware version, a list of connected USB devices, the firewall configuration, and more.

“Authenticated attackers can inject and execute commands on the operating system of the router with root privileges,” reports IOActive’s Taeo Sauvage. “One possible action for the attacker is to create backdoor accounts and gain persistent access to the router. Backdoor accounts would not be shown on the web admin interface and could not be removed using the Admin account.”

Sauvage and his co-researcher used the Shodan tool to discover that only around 7,000 vulnerable Linksys routers accessed the internet at the time of the report. However, that number does not include vulnerable routers that are running behind another network appliance or governed by strict firewall rules. That is also a global number spanning 25 different models, too.

That said, the majority of the vulnerable routers resides within the United States at 69 percent. Canada falls into second place with 10 percent while Hong Kong, Chile, Netherlands, Venezuela, Argentina, and Russia are each around one to two percent. The remaining 13 percent of the affected units fall within the “others” group.

What is not surprising is that around 11 percent of these devices rely on the default credentials provided by Belkin/Linksys, opening the door for hackers to simply log into the router and get full root access remotely. Most if not all of the affected routers are linked to a cloud account.

Belkin/Linksys is working on a firmware fix now. They provide a security advisory regarding the discovery although you will not find it splashed on the front cover of the Linksys website. It is also not openly listed on the website’s Support section. The only way we found the advisory was through a Google search, or by clicking on the link within Sauvage’s report.

Here are the routers in question:

EAxxxx Series

EA2700
EA2750
EA3500
EA4500 v3
EA6100
EA6200
EA6300
EA6350 v2
EA6350 v3
EA6400
EA6500
EA6700
EA6900
EA7300
EA7400
EA7500
EA8300
EA8500
EA9200
EA9400
EA9500

WRT Series

WRT 1200AC
WRT 1900AC
WRT 1900ACS
WRT 3200ACM

Microsoft ‘Cloudbook’ minimum specs appear comparable to Chromebook’s

Why it matters to you

The Chromebook may not be the most affordable choice for students when Microsoft launches its Cloudbook platform.

Microsoft’s idea of a cloud-connected, education-focused laptop should offer pretty decent performance that’s at least comparable to the Chromebook competition. Although Microsoft hasn’t unveiled much about the devices yet, a document said to detail the minimum specifications for third-party “Cloudbook” manufacturers gives us an idea of what we can expect when they eventually become available.

Although there are many low-cost Windows 10 laptops out there, Microsoft is expected to unveil a stripped-back version of Windows in May, known as Windows Cloud, that will be for use on ultra-low-cost notebooks of its own. However, it seems likely that it will look to third parties to join it in promoting the cheap, cloud-connected platform, possibly with a focus on students.

The so-called Cloudbooks will need to have at least a quad-core CPU, we’re told (Cerelon or better) and come with at least 4GB of RAM. Storage minimums are set at 32GB, or 64GB for those running 64-bit operating systems, the median for which must be eMMC flash memory or solid state drives (SSD).

Bundled batteries must be capable of 40Whr. Stylus and touchscreen support is said to be optional.

All of this should yield a 10-plus hour battery life, with the system booting up in 20 seconds from a cold shutdown. Coming out of hibernation, however, should take no more than five seconds after the first login — all of which is relatively comparable to the average Chromebook, according to Microsoft’s table (above).

In several areas, the Chromebook is listed as being more capable  the Cloudbook specifications. However, these are merely the “minimum” specifications, so we would expect to see alternative hardware choices that are more powerful and offer more local storage — especially if there is SSD support.

The array of available hardware may very well depend on how capable the machines are in terms of software. As Liliputing points out, one of the key points of the Windows 10 Cloud operating system could be that it only runs Windows Store applications, which would severely limit the kind of software it can run. However, our first look at a leaked build suggests that you could change that in system settings, suggesting the restrictions as a potential tool for educators more than end users.

HP’s 4th generation of Zbook line improves its secure mobile workstations

Why it matters to you

If you need to take your high-end workstation on the road, HP has you covered with its secure Zbooks.

Some PC users need extra processing and graphics power for exacting work like 3D drafting and high-end video processing. Architects, filmmakers, designers, and scientists fall into this group of elite PC users, and the high-end PC workstation is the class of machines that is made specifically for them.

For those who need to take that level of power on the road, that need has created the mobile workstation market. HP has long been a player and it announced a refresh of its own Zbook line of mobile workstations.

The laptop line is getting four new machines and HP is focusing that the intellectual product created by each machine is kept secure. With that, the company incorporated its various device security technologies and software, including HP Sure Start Gen3 self-healing PC BIOS. This provides encryption, strong authentication, malware protection, data protection, identity assurance, and threat detection and response.

First up in the new line is the HP Zbook Studio, which starts at $1,399, is the company’s highest-end machine that is built around an HP DreamColor 4K UHD (3,160 x 2,160) display with 100 percent AdobeRGB color gamut support. It is a relatively thin and light machine, at 18mm thick and 4.6 pounds, and is made from machined aluminum with diamond-cut edges to match HP’s recent design aesthetic.

The Studio offers high-end components such as a choice between Intel Xeon and seventh-generation Core processors, Nvidia Quadro professional GPUs, and up to 2TB storage with support for dual HP Z Turbo drives and dual 40Gb/s Thunderbolt 3 ports. To ensure its ability to work in most environments, HP subjected the Studio to 14 Military Standard 810G tests.

The HP Zbook 15 and Zbook 17, starting at $1,519 and $1,419 respectively, represent the company’s “ultimate power and performance.” The machines offer up a choice between Intel Xeon and seventh-generation Core processors, Nvidia Quadro or AMD Radeon Pro graphics, up to 4TB of storage options, and up to 64GB of DDR4-2400 ECC or non-ECC RAM. These models offer a choice of 15.6-inch and 17-inch displays, including Full HD (1,920 x 1,080), 4K UHD, and HP DreamColor options.

The 17-inch model offers additional graphics options that enable 90FPS virtual reality support. Both machines offer a plethora of ports, including gigabit Ethernet, VGA, three USB 3.0 ports, two USB Type-C ports with Thunderbolt 3, an HDMI port, and 3.5 mm combo audio port. Just like the Studio, the 15 and 17 models were subjected to 14 Military Standard 810G tests to ensure sufficient ruggedness to withstand harsh environments.

Finally, the HP Zbook 14u, which has not yet received pricing, is the company’s most portable mobile workstation. The machine is 22mm thick and starts out at 3.61 pounds, and utilizes a 14-inch Full HD display with optional touch. Component options include AMD FirePro 3D graphics, seventh-generation Intel Core processors, up to 32GB of RAM, and up to 2TB of storage. The 14u is ISV-certified for major applications and MIL-STD-810G compliant.

All of the machines except the 14u are now available. Each is equipped with HP’s Remote Graphics Software for remote collaboration, HP Performance Advisor for optimal performance, and HP Velocity for superior network performance.

The Sharp Aquos R is among the first phones with the Snapdragon 835

Why it matters to you

Looking for a super powerful phone but don’t necessarily want the Galaxy S8? The Sharp Aquos R could be the device for you.

Sharp may not be the best-known smartphone manufacturer out there, but that doesn’t mean its phones aren’t good. Case in point: the new Aquos R phone, which boasts the new Qualcomm Snapdragon 835 processor and 4GB of RAM.

The device was just unveiled by Sharp, and is the first Aquos phone to be launched since the Aquos XX3 Mini, which was unveiled in October 2016.

Apart from the Snapdragon 835 and 4GB of RAM, the device comes with a 5.3-inch QHD display, HDR 10 capabilities, and a battery with a capacity of 3,160mAh. The camera on the back sits in at 22.6MP with an f/1.9 aperture and a wide-angle lens, and a 16MP front-facing camera. The cameras also feature optical image stabilization.

As a new device, the Aquos R also comes equipped with a USB-C port with Quick Charge 3.0, so you can recharge that 3,160mAh battery nice and quickly.

One interesting accessory for the phone is a charging dock, which actually has a few somewhat creepy features. For example, it uses EMOP AI assistant to listen to the user’s voice — so when you get a phone call the dock with automatically turn to face the owner of the phone.

Pricing and availability of the Sharp Aquos R have yet to be revealed, and we don’t yet know if that AI-powered dock will actually come with the phone or if it will be sold as a standalone accessory.

Of course, if you’re looking for a phone with the new Snapdragon 835, you can also either get the new Samsung Galaxy S8, or wait for the slew of phones with the chip that are set to be released over the next year or so. Sony and OnePlus will both likely step into the Snapdragon 835 ring over the next few months, and eventually we’ll also probably get phones from the likes of Google, LG, HTC, and more — all featuring the top-of-the-line processor.

Air Free Concept bike tires will never go flat, never get a puncture

Why it matters to you

Air Free Concept tires want to usher in a glorious future for cyclists where punctures and flats are a distant memory.

Which cyclists would be willing to shell out for tires that can never get a puncture, never need to be inflated, and promise to never go flat? The wishful answer that Bridgestone is banking on is: All of them.

Bridgestone first demoed its prototype Air Free Concept tires in the simpler days of 2011 at the Tokyo Auto Show. At the time, the nine-inch wheels — based on a solid tire design, featuring thermoplastic-resin spokes — was still just a concept. Fortunately, in the six years between then and now, the company turned it into something more closely approximating reality — and this week we got a sneak peak.

The next-generation bicycle tires are intended to eliminate the need for traditional tires that require inflation, by using a unique (and, we presume, legally protected) array of spokes that run along the inner sides of the tires. The most obvious advantage to Air Free Concept tires is the fact that users will never be struck down with a flat tire again, nor will they need to carry a bicycle pump.

Beyond this, however, the tires are more environmentally friendly due to their efficient use of resources and Bridgestone promises that the “high flexibility for design granted by resin has also enabled proposals of next-generation bicycles which have never been seen before.”

Sadly, you will be waiting a while before you can get your hands on the Air Free Concept tires. That is because Bridgestone Corporation and Bridgestone Cycle Co. — the two companies partnering on the project — are still carrying out feasibility studies to make sure everything is hunky dory. Provided that it is, the plan is for the new tires to be available in 2019.

Hopefully, after all is said and done, blowouts, outer surface punctures, and other tire-deflating irritants will go the way of unnecessarily heavy steel frames and rock-hard leather seats. What a time to be alive!