Posts with «software» label

Opera launches a dedicated crypto browser

Opera has launched its Web3 "Crypto Browser" into beta with features like a built-in crypto wallet, easy access to cryptocurrency/NFT exchanges, support for decentralized apps (dApps) and more. The aim is to "simplify the Web3 user experience that is often bewildering for mainstream users," Opera EVP Jorgen Arnensen said in statement. 

A key feature is the built-in non-custodial wallet that will support blockchains including Ethereum, Bitcoin, Celo and Nervos from the get-go. It also announced partnerships with Polygon and others. The idea is to let you access your crypto without the need for any extensions, with the option of using third-party wallets as well. You can purchase cryptocurrencies via a fiat to crypto on-ramp, swap crypto directly in-wallet, send and receive it and check your wallet balance. It even has a secure clipboard that ensures other apps can't data when you copy/paste.

The other primary function is support for Web3, aka blockchain-based decentralized internet, aka the buzzy new thing among crypto enthusiasts (and skeptics). On top of providing extra security via blockchain encryption, it allows users to access things like GameFi "where you can earn as you play your way through all sorts of metaverses," Opera notes. It also offers a "Crypto Corner" with the latest blockchain news that also "lets you grow your Web3 skills," according to Opera. 

Opera's rival Mozilla recently announced it would accept cryptocurrency donations, but was hit by a backlash from users including co-founder Jamie Zawinski over the environmental impact of blockchain. Perhaps anticipating a similar reaction, Opera said it was working toward implementing the more energy-efficient Etherium Layer 2 standard "as quickly as possible."

Other companies like Ubisoft jumping on the blockchain train with NFTs and other offerings have been hit by similar criticism. However, Opera at least gives its users a choice with multiple browser options, as it also offers its regular Opera browser and one that's dedicated to gamers. The Crypto Browser is now available for Android, Windows and Mac, with an iOS version coming soon. 

Apple and Google oppose Senate antitrust efforts, claiming they'd hurt consumer security

With the Senate Judiciary Committee scheduled to discuss the American Innovation and Choice Online Act and the Open App Markets Act this week, Apple and Google are stepping up their opposition to both bills. According to CNBC, Apple recently told lawmakers the legislation would make iPhone users less safe.

“The bills put consumers in harm’s way because of the real risk of privacy and security breaches,” Apple said in a letter seen by CNBC. The company specifically targets app sideloading as a potential threat. One of the provisions of the Open App Markets Act would force platform holders to allow consumers to sideload software and install third-party app stores. “But, if Apple is forced to enable sideloading, millions of Americans will likely suffer malware attacks on their phones that would otherwise have been stopped,” the company states in the letter.

On Tuesday, Google, in a post attributed to Kent Walker, the company’s president of global affairs and chief legal officer, advanced a similar argument. “Google is able to protect billions of people around the world from cyberattacks because we bake security and privacy protections into our services,” he said.

Walker warns the bills could hurt the company’s ability to integrate automated security features in its services. He also claims the bills could hurt the company’s ability and that of its US counterparts to compete with foreign firms by forcing them to obtain approval from “government bureaucrats” whenever they plan to release new features or address existing issues.

Apple and Google may not like the proposed bills, but they have support from others in the tech ecosystem. Specifically, the Coalition for App Fairness, an organization Epic and Spotify co-founded to pressure the two companies to change their app store policies, has come out in support of the legislation. “Moving this important legislation forward sends a clear and unambiguous message that monopoly control of the app ecosystem is no longer acceptable,” the group said on Monday.

The Senate Judiciary Committee will discuss both bills on Thursday, at which point they could advance to the floor of the Senate. At that point, the Senate would need to make time to vote on the legislation. That’s something that could take time with all the other issues it needs to consider in the coming weeks.

Snapchat is limiting friend recommendations for teen accounts

Snapchat is changing up its friend recommendation feature following calls for increased safety on the app. The company is making it harder for adult strangers to find teens in its app by limiting friend recommendations in its “Quick Add” feature. 

Now, the app won’t show the accounts of 13 to 17-year-olds in Quick Add unless they have “a certain number of accounts in common,” according to Snap. While the change won’t prevent adults and teens from connecting at all, it could make it more difficult for strangers to find teens they don’t already know. In a blog post, the company said the change was part of its work to "combat the fentanyl epidemic" and keep drug dealers from finding "new ways to abuse Snapchat."

The company has faced scrutiny over its handling of drug dealers on its platform in recent months. Lawmakers and safety advocates have pushed Snap to do more to keep dealers off of Snapchat following reports of overdoses linked to drugs bought through the app. Snap also said Tuesday that it has improved its ability to proactively detect “drug-related content” on its platform, with 88 percent of “drug related content” now being “proactively detected” with AI. The company also notes it has staffed up the team that works directly with law enforcement agencies and has “significantly improved” its response time to law enforcement requests.

At a Senate hearing last fall, Snap’s VP of Global Public Policy Jennifer Stout said the company was working on new parental control features that would make it easier for parents to monitor their children’s activity in the app. Those updates still have yet to launch, though the company hopes to make them available “in the coming months.”

A health-monitoring app for Olympic attendees reportedly has glaring security issues

Just over two weeks before the 2022 Winter Olympics are set to get underway in Beijing, researchers have issued a report claiming that an app many attendees are using has major security issues. The Citizen Lab, a research facility based at the University of Toronto's Munk School of Global Affairs and Public Policy, said a "simple but devastating flaw" made it easy to bypass encryption systems that are supposed to protect voice audio and file transfers.

"The worst case scenario is that someone is intercepting all the traffic and recording all the passport details, all the medical details," research associate Jeffrey Knockel told CTV.

The app is used for health monitoring as part of COVID-19 countermeasures. Other features include messaging, news about the Games and information about logistics. The International Olympic Committee says the local Beijing 2022 workforce is using the app for things like time-keeping and task management too.

"The IOC has conducted independent third-party assessments on the application from two cyber-security testing organizations," the IOC told Engadget in a statement. "These reports confirmed that there are no critical vulnerabilities." The IOC noted that instead of using the mobile app, attendees can access a web-based health monitoring system. It said it has requested the researchers' report "to understand their concerns better."

The Citizen Lab notes that health customs forms containing passport information and travel and medical history are also at risk. In addition, the researchers said it was possible to spoof server responses, which could let hackers provide fake instructions to users.

Along with determining that the app doesn't encrypt some data transmissions, the team found that the app fails to validate some SSL certificates. In such cases, the app can't "validate to whom it is sending sensitive, encrypted data." Although they were only able to create an account on the iOS app, the researchers believe the vulnerabilities exist on the Android version of MY2022 as well.

The Citizen Lab said it informed the organizing committee for the Games about the issues on December 3rd, and said it had 15 days to respond and 45 days to fix the issues before it published its findings. As of Tuesday, the researchers hadn't received a reply.

An updated iOS version of the app that was released on Sunday didn't solve the problems. According to the researchers, the developers added a feature called “Green Health Code” that asks for more travel and medical history details, which are also vulnerable to the SSL certification issue.

According to the researchers, the flaws could mean that the app contravenes Apple's App Store rules and Google’s Unwanted Software Policy. In addition, MY2022 may be violating China's privacy standards and laws.

In addition, The Citizen Lab noted that the app includes an option to report “politically sensitive” content. It has a list of 2,442 censorship keywords too, which is said to be inactive at the minute, but includes terms related to topics like Xinjiang, Tibet, Chinese government agencies and other socially sensitive matters.

Safari exploit can leak browser histories and Google account info

Apple device users appear to be vulnerable to a significant browser privacy flaw. According to 9to5Mac, FingerprintJS has disclosed an exploit that lets attackers obtain your recent browser history, and even some Google account info, from Safari 15 across all supported platforms as well as third-party browsers on iOS 15 and iPadOS 15. The IndexedDB framework (used to store data on many browsers) is violating the "same-origin" policy that prevents documents and scripts from one location (such as a domain or protocol) from interacting with content from another, letting appropriately coded websites deduce Google info from signed-in users as well as histories from open tabs and windows.

The flaw only compromises the names of the databases rather than the content itself. However, this would still be enough for a malicious site owner to grab your Google username, discover your profile picture and otherwise learn more about you. The history could also be used to piece together a rudimentary profile of the sites you like. Private browsing won't defeat the exploit, FingerprintJS said.

We've asked Apple for comment. FingerprintJS said it reported the issue on November 28th, however, and that Apple hadn't yet addressed it with security patches honoring same-origin policy. Until then, the only solution may be to either use a third-party browser on Macs or block all JavaScript, neither of which is necessarily an option.

Apple will let dating apps in the Netherlands offer third-party payments

Apple is once again honoring regulations requiring it to allow alternative payment options in the App Store, although this one is highly specific. As Reutersreports, Apple confirmed it would comply with orders from the Netherlands' Authority for Consumers and Markets forcing it to allow third-party payment systems in Tinder and other locally-offered dating apps. The regulator determined on December 24th that Apple had abused its market power by requiring its in-app purchasing platform, and gave Apple until January 15th to make the change if it wanted to avoid fines.

Like with past decisions, Apple wasn't happy. It contended that allowing third-party options would "compromise the user experience" while posing new privacy and security threats, and reminded developers they (or their payment partners) would be responsible for handling refunds and similar issues. Apple is appealing the ACM's decision.

The order doesn't affect other apps available in the Netherlands. However, it reflects growing regulatory opposition to Apple's App Store business model in multiple countries, including South Korea and the US. Officials are increasingly convinced Apple is using its in-app purchasing requirement to stifle competition, and it won't be surprising if other countries follow suit before long.

Meta’s video speed-dating service is shutting down January 20th

Meta’s New Product Experimentation (NPE) team is often quick to abandon apps that don’t find traction, and a video speed-dating service it has tested over the last nine months is next for the chopping block. The company told Sparked users the experiment will shut down on January 20th.

“We started building Sparked in late 2020 to help people find love through an experience rooted in kindness. Since then, thanks to regular input and feedback from you, we improved where we could, learned a ton, and made connections between people,” Meta wrote in the email, which TechCrunch obtained. “Like many good ideas, some take off and others, like Sparked, must come to an end.”

Users will be able to download their data before January 20th. After that date, Meta will wipe their Sparked accounts.

Sparked was a blend of Chatroulette, the video chats other dating apps have introduced over the last few years and a speed dating event. At a predetermined time, users from a certain area or demographic would take part in dating events (there were a few global events too). They'd have four minutes to chat with a potential match, and if they both wanted to spend more time with each other, they could set up a second, 10-minute date and/or exchange contact details.

Although users needed a Facebook account to use Sparked, the service was distinct from both Facebook and Facebook Dating. It had no public profiles, messaging or matching features, like swiping on Tinder.

Meta initially described Sparked as a small beta test to learn about video dating, so it might not truly have intended for the service to blow up in popularity. Both Sparked and Facebook Dating added audio chat features last year.

Sparked is joining a long list of NPE projects that Meta has shut down, including Pinterest-style app for hobbyists Hobbi, TikTok clone Lasso and selfie app MSQRD. A few NPE apps remain on the App Store in the US: TikTok-esque app for rappers called BARS, an app for couples called Tuned and collaborative music video app Collab. Meta said this week that Collab is also closing down on March 12th.

'PUBG Mobile' maker sues copycat game and app stores that hosted it

When you're the progenitor of an entire gaming genre and holding the reigns of a billion dollar intellectual property, imitation, it turns out, is not the sincerest form of flattery. It's the sort of thing that gets you dragged into US federal court. And that's exactly what Krafton, maker of PUBG Mobile, is doing to Garena Online over accusations that the Singapore-based game developer has once again infringed its battle royale IP. What's more, Krafton has named Google and Apple in its complaint.

This isn't the first time that Krafton has sued Garena Online. In 2017, Krafton filed suit in Singapore over the sale of Free Fire: Battlegrounds, Garena's suspiciously PUBG-like mobile shooter, but ended up settling that case. Now, Krafton is suing Garena again, over Free Fire again, but this time in US federal court.

Krafton alleges that after settling in 2017, Garena immediately resumed selling Free Fire on both Google Play and the Apple App Store without entering into any sort of licencing agreement to use the litigated game content. Additionally, Garena started selling of another battle royale game of questionable copyright pedigree, Free Fire Max, this past September. As such, Krafton is suing Garena for copyright infringement claiming that “Garena has earned hundreds of millions of dollars from its global sales of the infringing apps," and holding both the Google and Apple marketplaces liable for damages for hosting the content. Krafton, which is headquartered in Seoul, South Korea, has not specified damages outside of a statutory $150,000 per infringement. 

Copyright infringement claims like this are wildly common throughout the tech industry with legal departments constantly on the prowl for potential IP violations, be they intentional or not. For example, earlier this week, the App Store were inundated with knock-off and clones of the newly-minted hit mobile app, Wordle, prompting Apple to intercede and remove the offending iterations.     

'Fortnite' is returning to iPhone and iPad via NVIDIA GeForce Now

Fortnite hasn't been available on Apple's App Store or the Google Play Store for 17 months. While the game isn't expected to return to either store anytime soon, it seems players will soon be able to drop on the island once again on their phones and tablets (unless they already use a sideloaded version on Android or play console versions remotely).

NVIDIA and Epic Games have teamed up on a mobile version of the battle royale that's playable through GeForce Now. A desktop version is already available on the service. 

A limited-time closed beta will get underway next week to test server capacity, graphics delivery and touch controls. NVIDIA has opened registrations and it will grant users access to the beta in batches over the next several weeks. You don't need a paid GeForce Now membership to take part. If you're able to secure a spot, you'll be able to play Fortnite through Safari on iOS and the GeForce Now app on Android. NVIDIA and Epic haven't set an end date for the beta as yet. 

When NVIDIA enabled GeForce Now on iOS via the web in November 2020, it said it would eventually give iPhone and iPad users access to Fortnite again, though it and Epic were building a touch-friendly version first. Android and iOS players can use a Bluetooth controller if they'd rather not use touch controls while swinging around the map as Spider-Man

Apple and Google yanked Fortnite from their respective stores in August 2020 amid a battle with Epic Games over in-app payments. The publisher suedboth companies, alleging they were engaging in anti-competitive behavior. The Apple case went to trial last year. A judge ruled Epic didn't prove that Apple was violating antitrust laws. 

Both sides appealed against aspects of the outcome. Apple won a last-minute stay from having to implement App Store changes that would force it to let developers direct users to alternative payment methods and bypass the 30 percent cut it takes from in-app payments. In any case, until all court appeals are exhausted, a process that Epic CEO Tim Sweeney said could last several more years, Apple won't let Fortnite back onto the App Store.

Wordle' clones are taking over the App Store

If you’ve spent any time on Twitter in the last week, chances are you’ve seen the grids of emoji boxes taking over your feed. That’s thanks to Wordle, a new puzzle game that’s become somewhat of an obsession for many since The New York Timeswrote about it just over a week ago.

Like other viral games, Wordle is deceptively simple: you have six chances to guess a new five-letter word. And that’s… pretty much it. There’s just one puzzle a day, and it’s free to play with no ads . Its creator, a software developer named Josh Wardle, is apparently “overwhelmed” by his game’s popularity. But the fact that the game doesn’t have an app has allowed developers to create their own knockoff version of the game.

One particularly egregious example comes from developer Zach Shakked who created an app called “Wordle - The App.At first glance, the app, which is subtitled “Word Game Everyone's Playing!” could easily be mistaken for the original. The word grid looks almost the same, and it even uses the same color scheme. But Shakked’s version also asks players to sign up for a “pro” subscription that costs $29.99 after a three-day “free trial.”

But between naming the app “Wordle” and running search ads against the term in the App Store, Shakked seems to have succeeded in profiting off the popularity of the game originally created by Wardle. “This is absurd. 450 trials at 1am last night, now at 950 and getting a new ones every minute,” he wrote in a tweet that has since been made private. “12K downloads, rank #28 word game, and #4 result for "Wordle" in the App Store. We're going to the fucking moon.”

Screenshot via Twittet

Shakked and Wardle didn’t respond to questions from Engadget. But Shakked isn’t the only developer trying to cash in on the popularity of Wordle. His app is one of at least six Wordle clones launched in the App Store in the eight days since the original New York Times article about Wordle. Another, called “What Word - Wordle” which charges a $0.99 in-app purchase to remove ads, claims to be the “No. 1 Word game” in its App Store screenshots. (It is actually ranked No. 7 in word games, according to its App Store listing.)

Scammy knockoff apps capitalizing on the popularity of a viral game is nothing new, of course. Game developers have been complaining about the practice for years. Apple didn’t immediately respond to questions about Wordle clones in its store. But, thanks to emails released during the Epic v. Apple trial, we do know that copycat apps have long been a source of frustration for Apple executives as well. “Is no one reviewing these apps? Is no one minding the store?" Phil Schiller wrote in a 2012 email. Three years later, he complained that “I can’t believe we still don’t” have automated tools to find scam apps.