Thursday 15 October 2015

These 7 Apps are among the Worst at Protecting Privacy

talking_tom

Free/Paid Apps Accompanied with Hidden Cost


While browsing through the various apps which are made available from Apple and Android app stores, one will observe that around 98% of them tend to be free for download. However, several of the various free apps together with the paid ones tend to be accompanied with hidden cost which is your privacy. When apps are installed on the gadget the user is prompted with permission to access certain information or phone features. At time they need this information and at other times it does not seem to be essential.

Messaging app for instance requires permission for accessing contacts and Wi-Fi connection to do its task. But a Flashlight app does not need to know the location or have total internet access. Often users tend to hit `accept’ to install apps without checking what they do.

Apple devices enables apps to approve or deny permission individually wherein one can go to Settings – Privacy and open a feature such as Camera to view and control which apps have permission to access it. Another option is to go to Settings and scroll towards the bottom and tap on a particular app to see and control its permission.

PrivacyGrade – Popular Android Apps


Carnegie Mellon University had a few years back, set up a site known as PrivacyGrade which analyses popular Android apps to check what permissions they ask and how they utilised the information with a grade from A to D for each of them. With the scoring system, the score of PrivacyGrade tends to change over a period of time. At times the app which used to be on the `D’ list would get a `B’ or even an `A’. That is because; at times the app pulled its permission though at other times it decided to be more open on what it tends to do with the information.

The following are the seven popular apps which PrivacyGrade a low score -

1. Draw Something Free – D

This app enables the user to play a version of remote Pictionary with their friends which is enjoyable. However, it comprises of several advertisers libraries and utilises the `Read phone status and identity status’ permission to allow advertisers your call log, phone number, signal information, carrier and much more.

2. Words with Friends - D

This well-known app is similar to a fast game of Scrabble and is good for brushing up on vocabulary. But it is from the same developer as `Draw Something’ and is not surprising that it has the same privacy, though it goes a little further with the `Precise location’ permission. Since it does not use the location for the game, it does tend to use it to indicate to you location based ads.

3. GO Locker – D

The app tends to act as a screen lock for the phone, promising to be more secure and smarter than the built-in screen lock on the device. It means that it needs to know a lot about the phone and needs all permission available right from location to reading the text messages. Though it does not have advertising libraries installed, it could send data to advertisers utilising its own first party codes. It does not link up to send information to app stores other than Google Play which could be dangerous since app stores besides Google have malicious app. These could get hold of information from your phone.

4. GO Weather Forecast & Widgets - D

This app from the same company which brought GO Locker, provides the weather and forecast, but like GO Locker, it tends to utilise plenty of its permission to direct data to app markets besides Google Play. After some bit of checking, it seems that each GO app inclusive of GO Battery as well as GO SMS Pro, seem to have the same design and should be avoided.

5. Camera360 Ultimate – D

The default camera app of Android is serviceable, but not fanciful. The Camera360 Ultimate has the potentials to add more camera modes, with filters, free cloud storage, real-time `touch-ups’ facial recognition and much more without ads.

6. Angry Birds - C

Angry Birds was the first modern `virus-related’ mobile game with over 2 billion downloads since 2009 and most of its sequels as well as by-products do not fare well with privacy. Several of them include targeted ad libraries which tend to grab the identify information of the phone including call logs, carrier, device ID and number, etc. Beyond the score of PrivacyGrade, Angry Birds also has the difference of being one of the apps which NSA and British GCHQ had targeted to get hold of user information from smartphones. The improved version of Angry Birds is not vulnerable and they have scored a higher `B’.

7. My Talking Tom - D

This app is a little game where one can adopt and take care of a kitten but its privacy settings are not so lovable. It comprises of an eight targeted ad libraries besides the phone’s identifying information which is sent to the advertisers audio from the microphone.

Can Making Seawater Drinkable Quench the World's Thirst?

desalination_plant

Seawater Desalination Plants For Filtered Water


Generating fresh drinking water from sea through desalination has always been the best option to the water shortage faced during the year. Oceans tend to cover over 70% of the surface of the earth which contains 97% of its water. However the efforts essential in the achievement of this simple procedure seems to be costly. But now with enhancement in technologies, the cost has been reduced to half with huge desalination plants coming up all around the globe.

The biggest seawater desalination plant ever has just ramped up to full production in Israel’s Sorek plant near Tel Aviv which will make about 624 million litres of filtered water daily, selling around 1,000 litres equal to weekly consumption of Brit for 45p. The Ras al-Khair plant in Saudi Arabia tends to reach full production in December.

Created in the peninsula’s Eastern Province, it would be much bigger, speeding a billion litres a day to Riyadh where the population seems to be on the rise. A connected power plant would be yielding 2.4 million watts of electricity. The desalination plant in the US, San Diego’s Carlsbad, which is the country’s largest, would be in operation from November.

Reverse Osmosis – Utilises Less Energy – New Lease of Life


The old style of extracting drinking water from sea or saline water was to boil it then collect the evaporated water as a pure distillate which tends to utilise lot of energy but works well when combined with industrial plants which can produce heat as a by-product.

The new desalination plant at Saudi Arabia tends to pair with a power plant for this purpose. But in recent years, reverse osmosis, a technology which has been since 1960s utilises less energy has been given a new lease of life. It involves pushing salt water at high pressure via a polymer membrane comprising of holes around a fifth of a nanometre in size.

A nanometre is said to be a billionth of a metre, and the holes which are small enough to block the salt molecule are big enough to enable the water molecule through. Profession Nidal Hilal at Swansea University, editor-in-chief of the journal explains that this membrane tends to strip all the salts and minerals totally from the water and get clean water coming down as infiltrate and the distillation on the other side is saline with high content of salt.

However, these membranes may get clogged easily and lose its performance but with improved technology and pre-treatment techniques, there is a possibility of keeping them working efficiently for a longer period. Sorek’s designers in Israel tend to save energy by utilising double sized pressure vessels.

Dr Jack Gilron, head of Desalination and Water Treatment at Ben Gurion comments that one would need less pressure vessels to generate water which means fewer pipes and less connection. The researchers at Massachusetts Institute of Technology – MIT in US had experimented with semi-permeable membranes which were made from atom thick graphene that need less pressure to function and thus saves energy even though the technology is not yet prepared for mass production.

With regards to forward osmosis, Professor Nick Hankins, chemical engineer at the University of Oxford is of the opinion that it is an alternative option of removing the salt from seawater. A highly concentrated solution is utilised to draw it through instead of pushing the fresh water through the membrane, which efficiently sucks it from the sea water. Thereafter the diluted solutes are removed producing pure water.

Wednesday 14 October 2015

Crippling Linux Botnet Strikes Gaming, Education Sites


Botnet
Botnet Plundering Linux Computers – Attack Powerful


The IT world has recently revealed that a botnet has been plundering the Linux computers and the attacks seem to be quite powerful. Several of the targets seem to be in Asia and the security experts are making efforts in tracking them and the botnet appears to be of Asian origin.

A network of Linux computers seems to be flooding gaming as well as education sites with about 150 gigabits per second of malicious traffic, according to Dan Goodin of Ars Technica, which in some cases is adequate to knock the targets offline.

This is a DDoS – distributed denial-of-service network and the discoveries are from Akamai Technologies. The Security Intelligence Response Team – SIRT, at Akamai reflected the botnet XOR DDoS as `High Risk’ in an advisory posted recently.

 It is said that the XOR DDoS botnet had developed and now has the potential of mega DDoS attacks at 150 plus Gbps and are utilising a Trojan malware in hijacking the Linus system. The first access was obtained by brute force attacks in order to discover the password to Secure Shell services on a Linux machine. When the Login has been attained, the attackers used root privileges in order to run a Bash shell script, thereby downloading and executing the nasty binary

SIRT Tracking XOR DDoS – Trojan Malware


Akamai’s Security Intelligence Response Team has been tracking XOR DDoS, which is a Trojan malware that DDoS attackers seemed to have used in hijacking Linux machines in building a botnet for distributed denial of service attack campaigns with DNS and SYN floods.

Some of the key points observed by Akamai were that the gaming sector had been the main target, which was followed by educational institutions. The botnet seemed to attack around 20 targets each day, 90% of which were from Asia.

The malware tends to spread through Secure Shell – SSH services vulnerable to brute force attacks owing to weak passwords. This could turn from bad to worse. The team at Akamai expect the XOR DDoS activity would continue since attackers refine and improve their methods, inclusive of a more diverse selection of DDoS types of attack.

Advisory Describing DDoS Mitigation/Malware Removal Information Available


As per the Akamai team, the IP address of the bot seems at times hoaxed though not always. The botnet attacks noticed that in the DDoS campaigns against Akamai consumers were a mixture of hoaxed and non-hoaxed attack traffic. According to Lucian Constantin of IDC News Service recently stated that this power to generate crippling attacks at more than 150 Gbps represent several time greater than a usual company’s organization could endure.

 In the meanwhile an advisory describing this threat inclusive of DDoS mitigation payload analysis as well as malware removal information is made available for download from Akamai. Eliminating the XOR DDoS malware seems to have a four step procedure wherein most of the scripts are provided in the advisory.

Senior vice president and general manager of Akamai, Stuart Scholly has said that XOR DDoS is an example of attackers switching focus and developing botnets utilising compromised Linux systems to launch DDoS outbreaks. This occurs more frequently now than earlier, when Windows machines were the main targets for DDoS malware.

Monday 12 October 2015

Researchers Use Augmented Reality to Turn Coloring Books into 3D Experience

Disney

Colouring App Developed – Disney Research


A colouring app developed by Disney Research could cause characters to spring from the page in a 3D wonderthrough augmented reality. A child tends to colour a character on the book page normally while a smartphone or tablet running the app tends to monitor the drawing.

Based on the colouring of the child, the app fills the colours in real time on a 3D animated version of the character which is visible on the screen of the device and integrates it into a video. The core focus on the traditional activity of the colouring is maintained by the app while providing the magical digital overlay which tends to improves the engagement.

User testing performed by adults rather than the children in the early study, researchers observed that most of the users informed that the app increased their enthusiasm to draw in colouring books while 80% stated that the app increased their feeling of linking with the character.

Disney researchers, ETH Zurich as well as the Swiss university EPFL presented the augmented reality app at the ISMAR 2015 – IEEE International Symposium on Mixed and Augmented Reality in Fukuoka, Japan.

Disney Color & Play


Though the work of the research was presented to scientific audience, it had gone through the tech transfer process already, motivating the commercial product known as `Disney Color and Play’ which was launched earlier in the year by Disney Publishing Worldwide and Bendon.

The work tends to fit in a huge initiative known as Augmented Creativity at Disney Research that aims on utilising augmented reality in improving creative play. Robert W, Sumner, principal research scientist leading the group on animation and interactive graphics at Disney Research stated that `augmented reality holds unique and promising capabilities in bridging between real world activities and digital experiences enabling user in engaging their imagination and boost their creativity.

They are thrilled to have the opportunity in presenting the scientific advances behind this technology and are particularly happy that it is available to consumers, thanks to the cooperation with Disney Publishing’.

App Functions on Device With Camera


The researchers, inorder to create a new experience, at first created animated 3D virtual characters and then utilised custom software in generating 2D line art representations of the characters for colouring book.

 The app functioning on a device with a camera that viewed the user and the colouring book automatically detects the character the user tends to colour, displaying the 3D version. As the child progresses with the colour to the 2D drawing, the app tends to apply the same colour to the 3D characters in the areas visible in the 2D drawing as well as to the remainder of the 3D form which is not visible in the book.

 Owing to the colouring occurring in real time, the illusion is developed that the user is also colouring the blocked areas with the same texturing of the colour. Defining how to apply colour to the blocked areas seems one of the most difficult issue, according to Sumner.

By mirroring the user’s strokes on colours does not seem to work since the patter of colours used for a character’s face would not be the same for the back of the character’s head. The colour also needs to be continuous in order that no seams are seen between the visible areas and the blocked areas or where dissimilar portions of the textures tend to meet.

Google Patent Application is about Head Display with Holograms

patent

Google’s Patent Application for Holograms


Google has filed a patent application regarding holograms and the heading in the application states `Lightguide with several in-coupling holograms for display inhead wearable’. The two inventors named are Evan Richards and John Perreault and the application had been first filed in March 2014. Observer state that this could be linked to hardware platform for Magic Leap’s augmented reality content.

 Josh Constine in TechCrunch commented that `the patent contextualizes Google Inc.chief $542 million funding round for improved reality start-up Magic Leap. In TechCrunch, Constine seems to be asking Google - `when asked about the patent and its significance, he received from Google, a boilerplate no-comment response:

We hold patents on a variety of ideas, some of those ideas later mature into real products or services, and some do not. Prospective product announcement should not necessarily be inferred from our patents’. Jon Mundy had stated in TrustedReviews that the technology discussed in the patent application would overlay computer-generated imagery over the real world, not entirely unlike to Microsoft’s HoloLens.

The patent application reads – Single eye displays are referred as monocular HMDs while double eye displays are considered as binocular HMDs. Some HMDs display only CGI -computer generated image and other types of HMDs are capable of covering CGI overreal world view.

Patent Describes Technology – Several CGI Holograms


The later type of HMD includes come kind of see-through eyepiece and could serve as hardware platform in comprehending augmented reality. With this the viewer’s image of the world is amplified with an overlapping CGI as well as referred to as heads-up display –HUD.

The patent tends to describe technology which would enable several CGI holograms to appear in real world while the user seems to be wearing a see-through smart eyepiece. It would focus on the problem of mapping real world light sources on AR digital substances.

It means holograms, an extremely complicated issue and one which oculus Rift CEO Brendan Iribe stated as a purpose in pursuing VR over AR. The only reference of the field of view is in the list of encounters for headgear though it is expected that Google would be looking into developments on Microsoft’s hard work.

With regards to the uses of AR, Google’s patent states that the `public safety applications comprise of tactical displays of maps and thermal imaging. Other application field consist of transportation, video games,and telecommunications.

Magic Leap – Content Provider for Google Glass


There are sure to be new found applied and leisure applications as the technology evolves, but several of these applications tend to be limited due to the cost, weight, size, field of view and the efficiency of conventional optical system utilised in implementing prevailing HMDsMagic Leap had been very discreet with regards to what hardware its amplified reality software would essentially run on.

Mikhail Avady, StartUp Legal’s founder who had monitored Magic Leap’s latest AR content trademark application, had informed TechCrunch that `they believe Google wants Magic Leap to be the content provider for Google Glass and if they look at the trademark application it shows story and content based trademarks.

 Magic Leap wants to turn the world into a movie theatre and Google want it to be through Glass’.Presently it seems to be all assumption though it could be based on research, patents and investments and hence could be the safest form on which to place your dreams and hopes for the impending of improved reality