3G And 4G Modems Pose Security Threats
Researchers Nikita Tarakanov and Oleg Kupreev analyzed the security of 3G/4G USB modems obtained from Russian operators for the past several months. Their findings were presented Thursday at the Black Hat Europe 2013 security conference in Amsterdam.
Most 3G/4G modems used in Russia, Europe, and probably elsewhere in the world, are made by Chinese hardware manufacturers Huawei and ZTE, and are branded with the mobile operators’ logos and trademarks, Tarakanov said. Because of this, even if the research was done primarily on Huawei modems from Russian operators, the results should be relevant in other parts of the world as well, he said.
Tarakanov said that they weren’t able to test baseband attacks against the Qualcomm chips found inside the modems because it’s illegal in Russia to operate your own GSM base station if you’re not an intelligence agency or a telecom operator. “We’ll probably have to move to another country for a few months to do it,” he said.
There’s still a lot to investigate in terms of the hardware’s security. For example, the SoC (system on a chip) used in many modems has Bluetooth capability that is disabled from the firmware, but it might be possible to enable it, the researcher said.
For now, the researchers tested the software preloaded on the modems and found multiple ways to attack it or to use it in attacks.
For one, it’s easy to make an image of the USB modem’s file system, modify it and write it on the modem again. There’s a tool available from Huawei to do modem backup and restore, but there are also free tools that support modems from other manufacturers, Tarakanov said.
Malware running on the computer could detect the model and version of the active 3G modem and could write an image with malicious customizations to it using such tools. That modem would then compromise any computer it’s used on.
The researchers also found a possible mass attack vector. Once installed on a computer, the modem application — at least the one from Huawei — checks periodically for updates from a single server, Tarakanov said. Software branded for a specific operator searchers for updates in a server directory specific to that operator.
An attacker who manages to compromise this update server, can launch mass attacks against users from many operators, Tarakanov said. Huawei 3G modems from several different Russian operators used the same server, but there might be other update servers for other countries, he said.
Research in this area is just at the beginning and there’s more to investigate, Tarakanov said. Someone has to do it because many new laptops come with 3G/4G modems directly built in and people should know if they’re a security threat.
Is Android Safer Than iOS?
The general consensus is that iOS apps tend to be somewhat safer than their Android counterparts. Apple goes to great lengths to have apps vetted and as a result far fewer iOS apps end up with malware or security issues.
However, a new report fresh out of Appthority claims iOS apps have their fair share of issues and in some respects then can pose an even greater security risk than Android apps. The report covered the top 50 apps from the Apple App Store and Google Play and found that iOS apps exhibited riskier behaviour.
“The majority of iOS apps track for location (60%), share data with advertising or analytics networks (60%) and have access to the user’s contact list (54%). A small percentage of iOS apps also had access to the user’s calendar (14%),” the report found.
However, Android fans shouldn’t be too happy since their platform is not far behind. Half of them share data with ad networks or analytics companies, while 42 percent tracked location. Slightly better, but nothing to be proud about.
One of the most worrying findings is that both Android and iOS apps don’t do much to prevent personal data from leaking from our devices. Not a single iOS app analyzed in the study used encryption to send and receive data, and neither did 92 percent of Android apps.
So while it might seem that Android is a somewhat better platform for users with privacy concerns, both Google and Apple are pants at that sort of thing.
Facebook Goes DRAM
Facebook has come up with a data cache which runs on flash memory instead of DRAM. Dubbed McDipper it saves money while still delivering higher performance than disk.
The system is a Facebook-built implementation of the popular memcached key-value store the only difference is that runs on flash memory rather than pricier DRAM. Memcached is the open-source key-value store that caches frequently accessed data in memory so applications can access and serve it faster than if it were stored on hard disks.
Facebook runs thousands of memcached servers to power its various applications. The only downside is that it is expensive. McDipper can handle working sets that had very large footprints but moderate to low request rates. It provides up to 20 times the capacity per server and still supports tens of thousands of operations per second.
According to Gigaom, Facebook has deployed McDipper for a handful of these workloads. This has reduced the total number of deployed servers in some pools by as much as 90 per cent while still delivering more than 90 per cent of get responses with sub-millisecond latencies.
MS Surface Pro Headed To Europe
Microsoft’s Surface Pro tablet will be offered for sale Europe in the second quarter priced approximately at $1,170, while a local telco is now reselling the latest editions of its Office 365 hosted productivity suite, the company announced ahead of the Cebit trade show on Monday.
Microsoft Germany’s CEO Christian Illek didn’t give the Surface Pro’s exact price in euros, but the number will be around the same as the U.S. price in dollars, he said in a news conference at the company’s booth on the show floor in Hanover.
While an $1170 price tag appears significantly higher that the Surface Pro’s U.S. price of $899, a 30% mark-up is not unusual for electronics devices in Europe, where prices are typically displayed inclusive of value-added tax at around 20%. U.S. prices typically exclude local sales taxes. When setting international prices, vendors also tend to allow an additional margin in case exchange rates shift unfavorably.
In addition to Germany, Surface Pro will also go on sale in Australia, China, France, Hong Kong, New Zealand and the U.K. in the coming months, Microsoft said.
Illek also announced a new sales channel for two recent editions of Office 365: Deutsche Telekom.
Office 365 Small Business Premium and Office 365 Midsize Business are now on sale through Deutsche Telekom’s Business Marketplace online app store, said the German telecommunications operator’s head of marketing, Michael Hagspihl.
The Small Business Premium edition, with 25GB of storage, shared calendars, Office Web Apps, Office Professional Plus Desktop Version and support from Deutsche Telekom will sell for $14.90 per user per month for up to 25 users.
HP Goes All-In On Tablets
Hewlett-Packard garnered attention at Mobile World Congress show with its new Slate 7-inch tablet and then the sale of webOS assets, but the company is looking to put past distractions behind and will release more tablets in the future, the company said.
“You can expect going forward [to release] a family of products,” said Shane Wall, chief technology officer at Hewlett-Packard’s mobility group, in an interview at MWC. The mobility trade show is being held in Barcelona from Feb. 25 to 28.
The 7-inch tablet attracted a small crowd at the HP booth, with people lining up to photograph or use the device. The company effectively took a dive into the low-cost tablet and tried to differentiate its tablet by a lower price, and also features like a micro-SD card slot for expandable storage and dual-cameras. Google’s $199 Nexus 7 is priced higher and has a quad-core processor, a higher-resolution screen and Android 4.2, but HP believes it will sell a lot of the tablets at the $169 price.
“We’re obviously late,” Wall said. “We wanted to start and see how aggressive we can be on the low end.”
The Slate 7 also signifies HP’s re-entry into the consumer tablet market after a disastrous stint with the webOS mobile operating system, which it got with the acquisition of Palm in 2010 for $1.2 billion. The first webOS tablet, the TouchPad, was launched in 2011, but later discontinued along with webOS smartphones. Since then HP has released enterprise tablets such as ElitePad 900 with Windows 8, and now the company has adopted Android for consumer tablets.
LG Buys webOS From HP
Hewlett-Packard has sold some of the rights to its webOS mobile operating system to LG Electronics for use in smart TVs manufactured by the South Korean electronics giant.
LG has agreed to acquire the source code, webOS engineering team and other assets from HP, in a deal announced on Monday. LG will also license HP patents related to webOS and cloud technology, the companies said.
Financial terms of the deal weren’t disclosed.
HP acquired the mobile operating system, along with device maker Palm, in February 2010. HP used the OS on its short-lived TouchPad device, which debuted in mid-2011 then disappeared weeks later.
HP announced a new tablet, the US$169 Slate 7, on Sunday. The Slate 7 will run the Android operating system.
LG will lead the Open webOS and Enyo open-source projects as part of the deal, the company said. HP will retain ownership of all of Palm’s cloud computing assets, including source code, talent, infrastructure and contracts.
HP said it will also continue to support Palm users.
LG will use the technology to expand the Web capabilities of its smart TVs, said Sam Chang, LG vice president and general manager of innovation and Smart TV, in an interview.
LG bought the webOS assets in part for the engineering team, which includes user experience engineers, he said. The webOS engineers who remained at HP — the companies aren’t saying how many there are — are to join LG’s Silicon Valley labs.
AT&T Gets GM
March 5, 2013 by admin
Filed under Around The Net
Comments Off on AT&T Gets GM
AT&T Monday said it will provide LTE wireless services to most General Motors automobiles starting in 2014 in the U.S. and Canada.
A multi-year agreement between AT&T and GM subsidiary OnStar calls for vehicles to continue getting OnStar’s safety and security services while adding information and entertainment services for backseat drivers, AT&T said.
Millions of vehicles will be affected, as AT&T rolls out LTE to reach 300 million people in the U.S. by the end of 2014.
The AT&T-GM announcement is part of an explosion in the number of devices connected to the Internet, many of them wirelessly, in what some have termed the “Internet of Things.”
“The is a big announcement for connected devices,” Glenn Lurie, president of emerging enterprises and partnerships at AT&T, said in an interview at Mobile World Congress here.
Microsoft Raises Office Price
Microsoft has quietly increased prices of Office for the Mac as much as 17% and stopped selling multi-license packages of the application suite.
The move puts Office for Mac 2011 on the same pricing schedule as the new Office 2013 for Windows. The price increases and the disappearance of the multi-license bundles also makes Microsoft’s Office 365, a software-by-subscription deal the company has aggressively pushed, more competitive with traditional “perpetual” licenses.
It’s not clear when Microsoft raised prices. The oldest search engine cache Computerworld found with the new prices was Feb. 2, so the company boosted them before then, likely on Jan. 29, the day it launched Office 2013 and Office 365 Home Premium. Microsoft did not mention the changes to Office for Mac in its press releases that day, or otherwise publicize the move on its Mac-specific website.
The single-license Office for Mac Home & Student now costs $140, a 17% increase from the previous price of $120. Office for Mac Home & Business, an edition that adds the Outlook email client to Home & Student’s Excel, PowerPoint and Word, runs $220, or 10% higher than the older $200 price.
The new prices are identical to those of Office 2013 for Windows, as are the percentage increases.
Buyers can still find Office for Mac 2011 at the older, lower prices, however. Although Microsoft has boosted prices on its online store — as has Apple’s e-store, which also sells the suite — other retailers have not yet joined them.
Apple Squashes Rumors
February 21, 2013 by admin
Filed under Around The Net
Comments Off on Apple Squashes Rumors
Apple will not develop a new, inexpensive iPhone just for the sake of offering a cheaper alternative, Apple CEO Tim Cook said in a speech on Tuesday.
The company’s focus is on creating great products, and it will not make a smartphone that does not past the quality test, Cook said during a webcast from the Goldman Sachs Technology and Internet conference, which is being held in San Francisco.
“There are other companies that do that, that’s not who we are,” Cook said. “Our North Star is great products.”
Instead, the company is now dropping prices on the older iPhone models. That has been successful, and the demand for iPhone 4 models in December was greater than supply, Cook said.
“It surprised us as to the level of demand we have for it,” Cook said.
Lowering the price on older models is just one of the approaches Apple is taking to reach out to price-sensitive buyers. It’s not easy to balance quality and price, and that’s when innovation comes into play and new products could be created to meet consumer demand, Cook said.
“Sometimes you can take the issue … and you can solve it in different ways,” Cook said.
For example, the first iPod that shipped in 2001 was priced at $399, and now users can buy an iPod Shuffle for $49. There was also a big demand in the past to drop the price of Macs to under $500, and Apple tried and couldn’t do it, so it created the iPad tablet.
MS Surface Pro Sells Out
Microsoft started selling its Surface Pro tablet last Saturday, and quickly ran out of its supply of the 128GB configuration.
While the less expensive 64GB device was also listed as out of stock Saturday on Microsoft’s online store, by Sunday it was again available.
The company acknowledged the outages.
“We’re working with our retail partners who are currently out of stock of the 128GB Surface Pro to replenish supplies as quickly as possible,” said Panos Panay, general manager for Microsoft’s Surface line, in a Saturday blog post. “Our priority is to ensure that every customer gets their new Surface Pro as soon as possible.”
Numerous online reports noted the shortages, saying that some Microsoft retail stores sported Apple-esque lines on Saturday and that many Best Buy and Staples locations — Microsoft’s retail partners for the Surface in the U.S. — had single-digit supplies that in some cases were claimed earlier in the week.
Microsoft is selling the Surface Pro in the U.S. through its online e-mart, its approximately 70 retail outlets, and the Best Buy and Staples chains.
The device, which runs Windows 8 and is powered by an Intel processor, sells for $899 in a 64GB storage configuration, and for $999 with 128GB. Keyboard-cover accessories — the Touch Cover and Type Cover — sell separately for $120 and $130, respectively.








Sign up for our Technology Newsletter