November 2018 Android security patch rolling out now

Fixing the latest bugs and exploits in Android every month.

Google has detailed the latest Android Security Bulletin and released the fixes for Nexus and Pixel devices.

These are exploits and other security concerns that affect Android as a whole. Issues with the operating system, kernel patches, and driver updates may not affect any particular device, but these need to be fixed in the Android base by the folks maintaining the operating system code. That means Google, and they’ve detailed the things they have improved for this month.

Updated factory images for Pixel and Nexus devices that are supported are available, and over-the-air updates are rolling out to users. If you don’t want to wait, you can download and flash the factory image or OTA update file manually, and here are some handy instructions to get you started.

How to manually update your Nexus or Pixel

The company that made your phone uses these patches to send an update out to you.

These changes have been released to the people making Android phones for at least 30 days, but Google can’t force anyone to deliver them to you. If you’re using a phone from Samsung, LG, or anyone besides Google, you’ll need to wait for them to send an update and shouldn’t try to flash any of the above files.

Of course, Google has safety checks in place to prevent any problems on your phone because of any security exploits. Verify Apps and SafetyNet are at work anytime you add an app to your phone, and seamless updates to Google Play Services will keep them up to date regardless of any hold up from a manufacturer or carrier. Details and incident numbers can be found in the yearly Android Security Review (.pdf file).

Highlights for November 2018

November 2018’s update comes with two patch dates: 11/01/2018 and 11/05/2018.

• Moderate-to-critical bug fixes for the system, media framework, and framework.
• Improved picture-in-picture performance for the Pixel 2 and Pixel 3 series.
• Improved stability for notifications for the Pixel 2 and Pixel 3 series.

One big thing to note is that this is the last guaranteed security patch for the Nexus 5X, Nexus 6P, and Pixel C per Google’s support page.

Previous bulletin highlights

Here are summaries and highlights of recent patches from the monthly Android Security Bulletin. As with the current bulletin, these issues were also mitigated by Google’s Verify Apps, Safety Net, and seamless updates to Google Play Services.

Highlights for October 2018

October 2018’s update comes with two patch dates: 10/01/2018 and 10/05/2018.

• High-to-critical bug fixes for the system and media framework.
• Improved Android Auto stability on the Pixel 2 and 2 XL.
• Better fast-charging for the original Pixel and PIxel XL.
• Other Pixel-specific updates that you can find here.

Highlights for September 2018

September 2018’s update comes with two patch dates: 09/01/2018 and 09/05/2018.

• Several patches mitigate an exploit that could allow a malicious app to read protected data is installed.
• Qualcomm has patched several critical and high priority issues in its closed-source components.
• Google also patched Pixel 2-specific issues to improve charging and car audio. Details can be seen here.

Highlights for August 2018

August 2018’s update comes with two patch dates: 08/01/2018 and 08/05/2018.

• The bulk of the fixes in April are patches to the Android runtime, Android framework, and media framework parts of the OS to prevent remote attackers from using specialized code to initiate attacks.
• Android hardware vendors are doing their part, too and we see new fixes from NVIDIA and Qualcomm that will make our gear safer.
• Google also patched several Pixel-specific issues. These can be seen here.

Highlights for June 2018

June 2018’s update comes with two patch dates: 06/01/2018 and 06/05/2018.

• Once again the Android Media Framework sees patches to prevent the latest exploits from gaining elevated privileges, as does the Application Framework.
• LG, Qualcomm, MediaTek, and NVIDIA all provide important fixes for their assorted binaries across all devices, and critical issues with the bootloader were patched by Qualcomm and LG.
• Google also patched a number of Nexus and Pixel-specific issues in this month’s bulletin as well as made usability tweaks for those devices. Those can be seen here.

Highlights for May 2018

May 2018’s update comes with two patch dates: 05/01/2018 and 05/05/2018.

• The most severe issues addressed are in the Android runtime and Media framework, and would allow a remote user to gain elevated privileges if not fixed.
• Qualcomm and NVIDIA both provide important fixes for their assorted binaries across all devices, and Qualcomm has addressed a critical bug in the WLAN driver of their chips.
• Google also patched a number of Nexus and Pixel-specific issues in this month’s bulletin, which can be seen here.

Highlights for April 2018

April 2018’s update comes with two patch dates: 04/01/2018 and 04/05/2018.

• As with other months, the bulk of the fixes in April are patches to the Android runtime, Android framework, and media framework parts of the OS to prevent remote attackers from using specialized code to initiate attacks.
• Google specifically calls out Qualcomm in this month’s bulletin for “their dedicated efforts to improve the security of mobile devices.” This is a result of Qualcomm’s inclusion of all patches sent upstream to Android (both closed and open source) between 2014 and 2016, which are now part of the public record.
• Google also patched a number of Nexus and Pixel-specific issues in this month’s bulletin, which can be seen here.

Highlights for March 2018

March 2018’s update comes with two patch dates: 03/01/2018, and 03/05/2018.

• The most severe vulnerabilities addressed in this month’s patch are again tied to the media framework and an attacker’s ability to run arbitrary code using a specially crafted media file. This has been and always will be an issue for all operating systems until a better way to package up media files is invented.
• This patch also includes patches made to the upstream Linux kernel to address vulnerable issues in the USB driver
• As usual, Android hardware vendors are doing their part, too and we see new fixes from NVIDIA and Qualcomm that will make our gear safer.

If you get an update with a patch date of 03/05/2018, you also have every issue addressed by the 03/01/2018 update in place.

Highlights for February 2018

February 2018’s update comes with two patch dates: 02/01/2018, and 02/05/2018.

• The most severe vulnerability addressed in this month’s small patch is once again tied to the media framework and an attacker’s ability to run arbitrary code using a specially crafted media file.
• A second fix in the 02/01 patch blocks a malicious app from escalating its privileges or running code as a privileged user.
• The 02/05 update entails device-specific patches from HTC, NVIDIA, Qualcomm and the Linux Kernel maintainers to address issues in the Bootloader, Wi-Fi driver(s), and media framework.

If you get an update with a patch date of 02/05/2018, you also have every issue addressed by the 02/01/2018 update in place.

Highlights for January 2018

January 2018’s update comes with two patch dates: 01/01/2018, and 01/05/2018.

• January 2018’s most severe vulnerability addressed is a patch for the Android runtime that could let an attacker gain access to certain OS features without user interaction
• Vulnerabilities that allowed code execution through the Media Framework were patched, like every month.
• A vulnerability specific to the LG bootloader that allowed elevated privileges was patched. Life’s Good, once again.
• A vulnerability specific to the NVIDIA driver that allowed elevated privileges was found and fixed
• Qualcomm provided a handful of closed-source fixes in addition to patches for the display driver and bootloader

If you get an update with a patch date of 01/05/2018, you also have every issue addressed by the 01/01/2018 update in place.

Highlights for December 2017

December 2017’s update comes with two patch dates: 12/01/2017, and 12/05/2017.

• If your device didn’t get updated with the November 6 patch last month, December’s update also comes with a fix for the KRACK WPA2 Wi-Fi vulnerability.
• A vulnerability with Android’s framework that allowed malicious apps to get past user interactions requirements to access greater permissions has been squashed.
• The media framework has also been updated to patch a threat that allowed a remote attacker to send out an arbitrary code to your device.
• Components for numerous MediaTek, NVIDIA, and Qualcomm components have been updated with security fixes.

If you get an update with a patch date of 12/05/2017, you also have every issue addressed by the 12/01/2017 update in place.

Highlights for November 2017

November 2017’s update comes with three patch dates: 11/01/2017, 11/05/2017 and 11/06/2017.

• This month’s patch updates the network stack to patch the KRACK Wi-Fi exploit.
• The Android framework has once again been patched to prevent an exploit that bypass user interaction requirements in order to gain access to additional permissions.
• The media framework and the Android system itself were again patched to combat the ever-present attacks through media containers. This has been a monthly thing for over a year and will certainly continue.
• Critical updates were applied as far back as Android 5.02 for OEMs to use to patch their existing devices if they wish.
• Broadcom, MediaTek, NVIDIA, and Qualcomm have each patched a number of drivers that could potentially allow remote attackers to execute code.

If you get an update with a patch date of 10/05/2017, you also have every issue addressed by the 10/01/2017 update in place. Devices that receive a patch with the 11/06/2017 date have all the November fixes in place as well as all previous patches. This is something new and we’re hopeful that it continues.

Highlights for October 2017

October 2017’s update comes with two patch dates: 10/01/2017 and 10/05/2017.

• This month’s patch updates several critical components to prevent privileged code execution, both locally and remote.
• The Android framework has been patched to prevent an exploit that bypass user interaction requirements in order to gain access to additional permissions.
• The media framework and the Android system itself were patched to prevent execute arbitrary code within the context of a privileged process.
• Critical updates were applied as far back as Android 4.4
• Broadcom, MediaTek, and Qualcomm have each patched a number of drivers that could potentially allow remote attackers to execute code.

If you get an update with a patch date of 10/05/2017, you also have every issue addressed by the 10/01/2017 update in place.

Highlights for September 2017

September 2017’s update comes with two patch dates: 09/01/2017 and 09/05/2017.

• The main issue this month revolves, once again, around a vulnerability in the media framework that, when paired with exploitative code, could remotely execute malware on a user’s device.
• Some of these patches go back to Android 4.4 KitKat.
• A runtime bug has been patched that would allow a remote user to execute code that could cause an app to hang.
• Broadcom has once again issued a number of patches for its Wi-Fi drivers.
• MediaTek and Qualcomm have each patched a number of drivers that could potentially allow remote attackers to execute code.

If you get an update with a patch date of 09/05/2017, you also have every issue addressed by the 09/01/2017 update in place.

Highlights for August 2017

August 2017’s update comes with two patch dates: 08/01/2017 and 08/05/2017.

• A moderate issue in the Android runtime that could enable privileged code execution has been patched.
• Again we see numerous issues that could allow remote code execution through the media libraries patched, with some changes going back to Android 4.4.
• Qualcomm has patched numerous escalation of privilege issues in the Snapdragon platform. These include moderate vulnerability patches for video, the GPU, and USB input/output. Since these include closed source changes, new versions are available from Qualcomm for your device manufacturer to implement as needed.
• MediaTek and Broadcom have also supplied patched device drivers for a range of issues rated from low to moderate. Any of these binaries that are applicable to Nexus or Pixel devices are available at the Google Developer site.

If you get an update with a patch date of 08/05/2017, you also have every issue addressed by the 08/01/2017 update in place.

Archives of all previous Android Security Bulletins are available at the Android Security website.

See the Android Security website for details on all bulletins

The motion-sensing Mr Beams Wireless LED Spotlight is down to $14 today

Brighten up your back yard.

Amazon has the Mr Beams Wireless LED Ultra Bright Spotlight on sale today for $13.80. That saves you $13 off its average price and is the lowest it’s ever been before on Amazon. There’s no telling how long this deal will last, so you’ll want to make your purchase quick. Even some of the Thrifter deal-hunters are grabbing a few at this price.

This spotlight offers 300 lumens of ultra-bright light across 400 square feet with minimum power consumption, which makes it one of the brightest wireless spotlights available for purchase. Its integrated motion sensor will turn on and off the light automatically as needed to help save on electricity, plus it’s weatherproof so you won’t have to worry about it being damaged by rain or snow. It comes with mounting hardware for installation and is simple to put up on your own without an electrician or handyman. It’s capable of detecting movement from up to 30 feet away and turns the light on for 30 seconds when the sensor is triggered.

Since it’s wireless, you’ll need four D batteries to keep it powered. None are included with your purchase however, so you may want to add some to your order before checking out. At Amazon, over 3,300 customers left a review for this spotlight resulting in a rating of 4.1 out of 5 stars.

See at Amazon

New AirPods Model Numbers Show Up in Bluetooth Database, Hinting at Upcoming Release

New AirPods listings were added to the Bluetooth Special Interest Group’s regulatory database on November 1, 2018, suggesting a refreshed version of the accessory could be coming in the near future.

The AirPods listing, noticed first by MySmartPrice, features model numbers A2031 and A2032, which seems to correspond to a left AirPod and a right AirPod, both of which have completed the Bluetooth Qualification Process.

Apple’s hardware version number is listed as REV1.1, compared to the REV1.0 hardware listing of the original AirPods. The new AirPods connect to an iPhone, iPad, or Mac using Bluetooth 5.0, according to the details provided, but little else about them can be gleaned from the listing.

Rumors have suggested that Apple is working on second-generation AirPods with an improved wireless chip that supports hands-free “Hey Siri” functionality. AirPods with “Hey Siri” support were shown off in a September Apple video when the iPhone launched, but upgraded AirPods did not make an appearance at Apple’s September or October events.

We’ve also been expecting a new AirPods wireless charging case for use with the AirPower, but Apple’s Charging Case for the AirPods is not listed in the Bluetooth database, so it is not known if an updated version accompanies the revised version of the AirPods.

A new AirPods Wireless Charging Case was shown off when AirPower was first announced
If these new AirPods are indeed going to launch with a Charging Case that supports wireless charging, it could also mean that Apple is planning to launch its AirPower charging mat in the near future. The AirPower was first introduced in September 2017 and is meant to charge the iPhone, Apple Watch, and AirPods all at once.

Difficulties with heat management, interference, and inter-device communication are said to have delayed the AirPower. Apple has removed most AirPower mentions from its website, but packaging materials for the recent iPhone XS and XS Max continue to mention AirPower, leaving hope that it’s still coming at some point.

We don’t know when to expect upgraded AirPods to launch, but the first AirPods were added to the database on November 20, 2016 ahead of a December 13, 2016 launch date. If Apple follows the same timeline, we could see new AirPods in late November or early December.

Related Roundup: AirPodsBuyer’s Guide: AirPods (Caution)
Discuss this article in our forums

HyperDrive USB-C Hub for 2018 iPad Pro Adds Ports for 4K HDMI, Headphones, SD Card, and More

Accessory company Hyper today announced the HyperDrive USB-C Hub for the 2018 iPad Pro. Apple’s latest iPad Pro is the first of the company’s tablets to include USB-C (replacing the Lightning port), allowing support for third-party USB-C accessories like Hyper’s new device.

The HyperDrive for iPad Pro adds six total ports to the tablet: 4K HDMI, 3.5mm headphone jack, SD card slot, Micro SD card slot, USB-A 3.0, and USB-C Power Delivery. Hyper explains that the accessory features a replaceable C-shape grip that holds the USB-C hub securely onto the iPad Pro.

The device is available in Space Gray and Silver, to match the iPad Pro’s colors, and it will work with both 11-inch and 12.9-inch models with and without the Smart Keyboard Folio. The company says that the HyperDrive for iPad Pro will be available in December for $49 for customers who sign up to be notified on its website. Otherwise, the device will run for $99.99.

Related Roundup: iPad ProBuyer’s Guide: 11″ iPad Pro (Buy Now), 12.9″ iPad Pro (Buy Now)
Discuss this article in our forums

Apple Loses Trillion Dollar Company Status Due to 10% Slide on Stock Market Since Thursday

AAPL has dipped below the $200 mark at times today, and is down around 10 percent since Apple’s earnings report last week, resulting in the company losing its trillion dollar valuation in terms of market capitalization. As of writing, Apple has a market cap of around $950 billion based on its latest share count.

Apple on Thursday reported revenue of $62.9 billion during the fourth quarter of its 2018 fiscal year, an all-time record for the July-September period, but the good news was overshadowed by Apple’s revelation that it will no longer disclose iPhone, iPad, and Mac sales on a unit basis starting next quarter.

The news has sparked concerns among some analysts and investors that Apple may have something to hide, as iPhone unit sales in particular were essentially flat last quarter and could begin to decline in upcoming quarters.

Apple’s financial chief Luca Maestri said unit sales are “not particularly relevant for our company at this point,” as they are “not necessarily representative of the underlying strength of our business.” He added that Apple may provide qualitative commentary related to unit sales if the info is valuable to investors.

AAPL is also being dragged down by a questionable report claiming Apple has informed its suppliers to halt plans for additional production lines dedicated to the iPhone XR due to “disappointing demand” for the smartphone.

Not everyone believes Apple’s decision to stop reporting unit sales is a bad one. Apple bull Brian White at Monness Crespi Hardt believes the change “makes perfect sense” as Apple’s success is “increasingly driven by an ecosystem of product and services on Planet Apple,” including rising ASPs.

Apple analyst Gene Munster of Loup Ventures also believes the change will be “a good thing for Apple investors,” as “the new reporting method will force the Street to think about Apple’s business as a stable and growing service, which should yield a higher earnings multiple in the long run.”

AAPL is currently hovering around $199-$201 on the intraday market, down from a closing price of $222.22 on Thursday.

Tag: AAPL
Discuss this article in our forums

Apple Debuts New Single Tour and Double Tour Hermès Apple Watch Bands

Apple this morning added two Apple Watch Hermès Bands to its online store, introducing Double Tour and Single Tour bands in a new three-color Amber/Capucine/Rose Azalée configuration.

The Amber/Capucine/Rose Azalée bands are similar to the other three color bands that Apple introduced alongside new Apple Watch Series 4 Hermès models in September, but in red, yellow, and pink.

Apple’s Amber/Capucine/Rose Azalée Swift Leather Double Tour band, priced at $489, is designed to work with all 38 and 40mm Apple Watch models.

The Amber/Capucine/Rose Azalée Swift Leather Single Tour band, priced at $339, is compatible with all 42 and 44mm Apple Watch models.

Both of the new Hermès bands can be purchased from the online Apple Store and should be in retail locations soon. Single Tour and Double Tour Hermès bands in additional colorways are also available at the same price points.

Related Roundups: Apple Watch, watchOS 5Buyer’s Guide: Apple Watch (Buy Now)
Discuss this article in our forums

Apple Releases watchOS 5.1.1 to Solve watchOS 5.1 Bricking Issue

Following the release of watchOS 5.1 last Tuesday morning, some Apple Watch Series 4 owners began complaining that the update had bricked their watches, leaving the devices stuck at the Apple logo.

The complaints led Apple to pull the watchOS 5.1 update to avoid further incidents, and it’s been unavailable since Tuesday afternoon.

As of today, Apple has released an updated version of watchOS, watchOS 5.1.1, that fixes the bug that caused some Apple Watch devices to be rendered non-functional.

Not all Apple Watch owners who downloaded the original watchOS 5.1 update were impacted by the bug, but those who were will need to contact Apple as Apple has been sending out replacement Apple Watches. Non-functional Apple Watches need to be repaired by Apple and won’t be fixable with the new watchOS 5.1.1 update.

watchOS 5.1 introduced several new features to the watchOS operating system. It brought support for Group FaceTime in an audio-only capacity, allowing Apple Watch owners to join in on group calls, and it introduced support for more than 70 new emoji characters like face with hearts, red hair, gray hair, curly hair, super heroes, kangaroo, peacock, parrot, lobster, cupcake, mango, and more.

The update also included a new full-screen “Color” watch face option for the Apple Watch Series 4 models, with users able to choose between dozens of shades. There’s also a filled-in circular option for older Apple Watch models that joins the standard Color clock face.

Fall detection was improved, two bugs that could prevent Walkie-Talkie from working were addressed, and an issue that could cause some Activity awards not to show up properly was resolved.

Related Roundups: Apple Watch, watchOS 5Buyer’s Guide: Apple Watch (Buy Now)
Discuss this article in our forums

Driverless cars can only take you so far. This is how smarter cities are being built

Tel Aviv, Israel Ilan Shacham/Getty Images

In the sunny climes of Tel Aviv, Israel, the Smart Mobility Summit, held from October 29 to 30, brought together city administrators from across the globe, research institutions, major car companies, and stealthy startups. They all came not just for the balmy weather but to exchange ideas and discuss new innovations. Digital Trends was there, too. Here are some of the highlights – companies, agencies, and other entities with goals of making our cities smarter, and how they plan to do it.

Small companies, big ideas

Cities across the globe are installing technology to gather data in the hopes of saving money, becoming cleaner, reducing traffic, and improving urban life. In Digital Trends’ Smart Cities series, we’ll examine how smart cities deal with everything from energy management, to disaster preparedness, to public safety, and what it all means for you.

There were the established players at the Smart Mobility Summit – from Ford and GM to Nissan and Honda, and MIT to the U.S. Department of Energy — and then there were newcomers like Tactile Mobility, which was at the conference discussing ways of advancing the progress and safety of future autonomous vehicles, while helping cities become smarter in the process.

Tactile, a company with offices in Israel, Germany, and the U.S., has developed software that culls data from the advanced driver assistance systems of cars (like electronic stability control) and makes precise determinations about the status of the vehicle, such as the exact grip level of its tires at any point in time.

“We do the analysis, not the driving action,” explained Tactile CEO Amit Nisenbaum, in an interview with Digital Trends. “And we can track a vehicle over time.” It’s that function that enables the company to also create something Nisenbaum called the “surface DNA” of a road, determining current road conditions, including locations of potholes and other road maintenance issues — all from data collected automatically as cars cruise around the city. The technology could not only help create safer roads, but also alert drivers on where to avoid and municipalities on what needs repairing.

Map of Haifa, Israel Tactile

Tactile has already conducted two demonstrations for municipalities — in Haifa, Israel and Singapore — to show what can be accomplished simply by enabling the technology on municipal government vehicles used by departments like the city parking authority.

5G will be the communications standard of smart cities

Also on hand at the Smart Mobility Summit were major auto systems suppliers, including Continental. The company has expanded its vision beyond making complex electronics for car companies and acquired firms like the car-focused cyber security company Argus. Continental has also been working with more municipalities, such as Columbus, Ohio, and its smart intersections where traffic sensors and lights can communicate with cars and the city’s infrastructure.

“We’re working with [dedicated short-range communications],” said Werner Koestler, a senior VP of mobility services strategy at Continental. “But we believe more in 5G.” Koestler pointed to China as a major proponent of the next-generation 5G cellular services that will also deliver car-to-car and car-to-infrastructure communications.

Learn how Honda and Marysville, Ohio are developing smart intersections using dedicated short range communications (DSRC) and 5G.

City planners on the challenges of building smart cities

City planners and administrators were on hand, sharing insights and goals. Some towns see smart city initiatives as a way to rejuvenate their municipalities.

“We needed to attract innovative companies, and to do that we needed an environment where bureaucracy is low,” said Paola Pisano, head of the innovation department for the city of Torino in Italy. She cited examples such as allowing tests of drone-based services and autonomous vehicles.

There are multiple and varied municipal agendas and goals. Consequently, it can be difficult to change government regulations.

Indeed, the city started testing AVs last February on a pre-approved 35-kilometer (approximately 22 miles) circuit of public city streets. Pisano said that it was also critical for cities to share information, including with other government efforts, so Torino has formed a partnership with nearby Modena, which is better known as the home of Ferrari and Lamborghini.

“Mobility is much more than moving people from A to B,” said Rikesh Shah, head of commercial innovation at Transport for London, in England, emphasizing the importance of an integrated approach.

There are multiple and varied municipal agendas and goals, Shah said, from health issues to managing growth and urban sprawl. Consequently, it can be difficult to change government regulations. Still, cities like London already have years of experience in autonomous transportation, such as 36 driverless trains in the city.

Public comment and public awareness programs were also seen as intrinsic to the success of many smart — or just smarter — city projects. Pisano noted that Torino has a rapidly aging population, with needs that will be different from younger towns.

C-V2X radio technology is state-of-the-art cellular technology designed to extend vehicle’s ability to see, hear and communicate further down the road, even at blind intersections. Continental AG

“So you have to involve citizens in the changes, ask them where they want a ride sharing station, and where they want a charging station,” she explained.

Shah also noted that freely releasing information from new programs is critical to promoting smart city initiatives. Making London’s transportation data available, such as the timing of bus arrivals, has led to the creation of 700 apps from private developers, he said.

Implement now, or wait and see?

Cities also don’t have to rush to be first, according to Michael Lee Sherwood, the director of technology and information for Las Vegas, Nevada. Sherwood pointed out that it took the city years to adopt a policy that would allow ride-hailing services, like Lyft and Uber, to operate in Las Vegas. It’s taking a similar cautious approach to electric scooters.

That approach seemed wise, given that the host city for the summit has become overrun with the silent scooters. Pedestrians complain that e-scooters are jamming sidewalks, drivers have been vociferous about the new road hazards they present, and people all over Tel Aviv have complained about riders simply dumping rental e-scooters, like those from Bird, at random on paths and sidewalks. (Lime plans to launch its service in Tel Aviv soon.)

Innovation just for innovation’s sake is not the way to proceed.

So, Israel has found itself scrambling to catch up and rein in the disruptive effects of e-scooters, as well as the tremendously popular e-bikes. The country’s ministry of transportation recently had new regulations approved that include mandatory registration and licenses for electric bicycles, training courses, and imposing helmet requirements. Israel’s road safety authority said that 16 people have been killed on e-bikes so far in 2018, already double the number of such fatalities in all of last year.

Slowing down and developing a long-term view can be critical to a project’s success, said Transport for London’s Shah.

“It’s not a four-year plan,” Shah said. “You need a 20-to-30-year plan and vision.” He noted that the city’s combined smart city efforts are aimed at reaching zero carbon emissions, but not until 2041.

“We are now building parking garages with the ramps on the outside of the main structure, in anticipation of a future where we won’t need as much parking and can then re-purpose the garages as residential properties, just by tearing off the outer ramps,” said Las Vegas’ Sherwood

In spite of such efforts and foresight, not all changes are welcome. London, for example, has become the poster child for congestion pricing. Cars entering and leaving the urban center during certain daytime hours are charged an extra toll for entering heavily congested areas. It has not been a popular program with everyone and has received mixed success in other cities. Shah admitted that a critical part of getting people to accept such changes is to offer “good alternatives,” like efficient and reasonably priced public transportation.

Las Vegas’ Sherwood agreed that innovation just for innovation’s sake is not the way to proceed. City’s have to take a wider smart city view.

“We have to always think about how we connect all walks of life to transportation,” Sherwood said.

Editors’ Recommendations

• With cameras that know dogs from Dodges, Honda is making intersections safer
• Lyft’s first app-based scooter service rolls into Denver
• Boxy shuttles, not cars, will be people’s first taste of autonomous vehicles
• How autonomous ridesharing will reshape our cars, cities, and lives
• Cars that talk to each other are coming soon, and could save thousands of lives

Should you buy the OnePlus 6T?

Best answer: If you already have a OnePlus 6 or even a 5T, you probably don’t need to upgrade just yet, but for anyone else looking for a new flagship-tier phone, the OnePlus 6T is an excellent choice.

OnePlus: OnePlus 6T ($549)

Who’s the OnePlus 6T for?

OnePlus has always touted its devices as “flagship killers,” offering top-tier performance and specs at a much lower price than the competition. While other phones like the Galaxy Note 9 and iPhone X climb past the $1,000 mark, the OnePlus 6T stays below $600, even for the upgraded model, and boasts a Snapdragon 845 chipset and up to 8GB of RAM.

The 6T is for people who want a flagship Android experience and don’t mind compromising a bit to reach a much lower price. You won’t get water resistance or wireless charging, nor are the cameras quite up to par with more expensive phones like the Note 9 and Pixel 3. In exchange, you get one of the cleanest forms of Android — arguably better than even Google’s own software experience — along with a sleek, futuristic design and blazing fast performance.

What if I already have an older OnePlus device?

If you’re already rocking a OnePlus 6 or even a 5T, then don’t worry. The overall experience of the OnePlus 6T is almost unchanged, save for a few minor improvements like the smaller notch, larger battery, and in-display fingerprint sensor. Given the company’s semiannual release cycle, the OnePlus 6T isn’t really meant for OnePlus 6 users, and some of the 6T’s newer features like Nightscape are even being made available for older devices.

The 6T is for people who want a flagship Android experience and don’t mind compromising for the lower price.

If, however, you’re coming from a OnePlus 5 or older, this is a great time to upgrade, especially if you’re already a T-Mobile customer or have been considering switching. T-Mobile is running an excellent trade-in deal, giving $300 in monthly bill credits, along with the upfront trade-in value, for any previous OnePlus device, and that includes the OnePlus One.

Buy the 6T if you’re a Verizon user who’s been longing after a OnePlus phone

The 6T is an extremely significant launch for OnePlus, not just because it’s being sold in stores in the U.S. through T-Mobile, but because it’s the first OnePlus device to finally support Verizon’s CDMA network. While Verizon won’t carry it officially, you can buy a 6T directly from OnePlus and pop in a Verizon SIM with full network support.

Our pick

OnePlus 6T

$549 at OnePlus

Unbeatable for the price

The OnePlus 6T is easily the best flagship-tier phone under $600, combining clean and fast software with futuristic features like an in-display fingerprint sensor. Unless you already have a recent OnePlus device, it’s more than likely worth buying.

Watch your favorite shows in 4K with the $49 Roku Streaming Stick+

An affordable way to stream in 4K.

Add 4K streaming to your daily routine with the Roku Streaming Stick+ for just $49 at Amazon. This Roku media streaming device regularly sells closer to $60, and we haven’t seen it drop this low since May.

Roku’s Streaming Stick+ is an affordable way to get 4K streaming on your existing 4K TV. Simply connect it to your TV’s HDMI port and hook it up to your Wi-Fi and you’ll be all set to stream from services you know and love like Netflix, Hulu, Prime Video, YouTube and many more.

As well as an upgraded viewing experience, the Streaming Stick+ offers 4-times the wireless range than the previous-gen model making it suitable for use with TVs in rooms further from your router. There’s also an included Voice Remote that not only controls input for the Roku but also your TV’s power and volume so you don’t have to manage multiple remotes.

For a complete guid to all of Roku’s products and capabilities, check out CordCutters’ review of the Roku lineup in 2018.

See at Amazon