Security researchers found a serious zero-click bug in Synology’s Photos app

If you own a Synology NAS drive, you’ll want to update your device as soon as possible. As first reported by Wired, a group of Dutch security researchers recently identified a zero-click vulnerability within the Synology Photos app. For the uninitiated, such bugs allow hackers to compromise a system without a user needing to click something first. To make matters worse, the app comes pre-installed and enabled by default on Synology’s consumer line of Bee network storage devices. It’s also a popular download among those who use the company’s DiskStation systems.

Midnight Blue, the cybersecurity firm that discovered the vulnerability, estimates that millions of Synology users may be at risk. Although the company released a security patch to address the bug, its NAS devices do not automatically download updates. “It’s not trivial to find [the vulnerability] on your own, independently,” Carlo Meijer, one of the researchers, told Wired. “But it is pretty easy to figure out and connect the dots when the patch is actually released, and you reverse-engineer the patch.”

According to Midnight Blue, the zero-click is found in a part of the Synology Photos app that does not require authentication. As a result, attackers can exploit the bug directly over the internet and without needing to bypass a gateway first. They can then gain root access and install malicious code on the compromised device. At that point, there’s not much a malicious individual couldn’t do, with the firm noting it would even be possible to turn the infected device into a botnet. The possibility a ransomware gang could target Synology devices isn’t just theoretical either. Earlier this year, DiskStation users reported that they were the target of a ransomware attack.

This article originally appeared on Engadget at https://www.engadget.com/computing/security-researchers-found-a-serious-zero-click-bug-in-synologys-photos-app-145147159.html?src=rss

China sanctions US drone maker Skydio in ongoing trade war

China has sanctioned Skydio, America’s largest drone maker, for providing unmanned aerial vehicles to Taiwan’s national fire service. Skydio CEO Adam Bry publicly acknowledged the sanctions on Wednesday. “A few weeks ago, China announced sanctions on Skydio for selling drones to Taiwan, where our only customer today is the National Fire Agency,” Bry wrote in a blog post.

As first reported by the Financial Times, the ban has sent Skydio racing to find alternative battery suppliers. Although the company manufactures its drones in the US and sources many of the components that go inside of them from outside of China, Skydio had been wholly dependent on a single Chinese provider for batteries before October 11, when the country’s government imposed the embargo.

According to Bry, the company has a “substantial stock” of power cells on hand, but those supplies won’t be enough to prevent near-term rationing, and the alternate suppliers Skydio is working to engage won’t “come online until the spring of next year.” Subsequently, future shipments of the company’s flagship X10 drone (pictured above) will only come with one battery for the time being.

Among the customers Skydio has been contracted to provide X10 drones to was Ukraine’s military, which planned to use the UAV for reconnaissance missions. Before the sanctions, Ukraine had requested thousands of X10 units, according to the Financial Times.

Skydio’s relationship with Taiwan may have only been a pretext for the sanctions. “We suspect Skydio was targeted by Beijing because it is likely seen as a competitor to DJI,” a US official told the Financial Times. “If there is a silver lining, we can use this episode to accelerate our work to diversify drone supply chains away from … China.”

DJI, it should be mentioned, has long been in the crosshairs of the US government. In mid-October, the Chinese drone maker filed a lawsuit against the Department of Defense over a decision the Pentagon made to designate it as a “Chinese military company.” Earlier in the year, DJI narrowly avoided a national ban when the US Senate released its version of the 2025 National Defense Authorization Act.

This article originally appeared on Engadget at https://www.engadget.com/general/china-sanctions-us-drone-maker-skydio-in-ongoing-trade-war-144507154.html?src=rss

China sanctions US drone maker Skydio in ongoing trade war

China has sanctioned Skydio, America’s largest drone maker, for providing unmanned aerial vehicles to Taiwan’s national fire service. Skydio CEO Adam Bry publicly acknowledged the sanctions on Wednesday. “A few weeks ago, China announced sanctions on Skydio for selling drones to Taiwan, where our only customer today is the National Fire Agency,” Bry wrote in a blog post.

As first reported by the Financial Times, the ban has sent Skydio racing to find alternative battery suppliers. Although the company manufactures its drones in the US and sources many of the components that go inside of them from outside of China, Skydio had been wholly dependent on a single Chinese provider for batteries before October 11, when the country’s government imposed the embargo.

According to Bry, the company has a “substantial stock” of power cells on hand, but those supplies won’t be enough to prevent near-term rationing, and the alternate suppliers Skydio is working to engage won’t “come online until the spring of next year.” Subsequently, future shipments of the company’s flagship X10 drone (pictured above) will only come with one battery for the time being.

Among the customers Skydio has been contracted to provide X10 drones to was Ukraine’s military, which planned to use the UAV for reconnaissance missions. Before the sanctions, Ukraine had requested thousands of X10 units, according to the Financial Times.

Skydio’s relationship with Taiwan may have only been a pretext for the sanctions. “We suspect Skydio was targeted by Beijing because it is likely seen as a competitor to DJI,” a US official told the Financial Times. “If there is a silver lining, we can use this episode to accelerate our work to diversify drone supply chains away from … China.”

DJI, it should be mentioned, has long been in the crosshairs of the US government. In mid-October, the Chinese drone maker filed a lawsuit against the Department of Defense over a decision the Pentagon made to designate it as a “Chinese military company.” Earlier in the year, DJI narrowly avoided a national ban when the US Senate released its version of the 2025 National Defense Authorization Act.

This article originally appeared on Engadget at https://www.engadget.com/general/china-sanctions-us-drone-maker-skydio-in-ongoing-trade-war-144507154.html?src=rss

Dropbox is laying off 20 percent of its workforce

For the second time in less than two years, Dropbox is laying off a substantial portion of its workforce. In a blog post penned by CEO Drew Houston, the company said it would cut its global headcount by 20 percent or 528 employees. 

Dropbox will provide impacted workers with up to 16 weeks of pay, with tenured employees eligible for one additional week of pay for each complete year they worked at the company. All impacted employees will also receive their year end equity vest, and the company will provide dedicated support to immigrant workers with one-on-one consultation and extra transition time.

Per a filing with the SEC, Dropbox anticipates this latest round of layoffs will cost it up to $68 million in cash expenditures. At the same time, the company expects it will recognize between $47 million and $52 million in incremental expenses related to all the severance and benefit payouts it now needs to make before the end of year and into the first half of 2025.

“As CEO, I take full responsibility for this decision and the circumstances that led to it, and I’m truly sorry to those impacted by this change,” Houston wrote. “We continue to see softening demand and macro headwinds in our core business. But external factors are only part of the story. We’ve heard from many of you that our organizational structure has become overly complex, with excess layers of management slowing us down.”

Partway through last year, Dropbox laid off 500 employees, or about 16 percent of its workforce at the time. Comparing the memo Houston shared then with the one he posted today, there’s a common theme: slowing growth.

“First, while our business is profitable, our growth has been slowing. Part of this is due to the natural maturation of our existing businesses, but more recently, headwinds from the economic downturn have put pressure on our customers and, in turn, on our business,” Houston wrote in 2023. “As a result, some investments that used to deliver positive returns are no longer sustainable.”

Unfortunately for Dropbox, things haven’t improved on that front. As TechCrunch notes, the company only added 63,000 users during its most recent fiscal quarter (PDF link). Year-over-year revenue growth also stalled at 1.8 percent, the lowest in the company’s history. 

This article originally appeared on Engadget at https://www.engadget.com/big-tech/dropbox-is-laying-off-20-percent-of-its-workforce-151023877.html?src=rss

Form’s Smart Swim 2 goggles will be available to buy at select Apple Stores soon

The next time you visit your local Apple Store, you might see Form’s Smart Swim 2 goggles in the accessory section. Starting November 5, Apple will begin stocking the $249 wearable at 20 of its retail locations across the US and Canada. That same day, the goggles will also go on sale on the company’s website, with availability there extending to the UK. In addition to home delivery, select Apple Store locations will offer in-store pickup.

"With Apple's knowledgeable staff, we know the experience presenting our goggles will be exceptional. As a must-have fitness tech product, we're excited to showcase Form at Apple,” said Form founder and CEO Dan Eisenhardt.

Form debuted Smart Swim 2 at the start of April. Building on its original smart goggles, the company integrated a heart rate sensor, and improved comfort and adjustability. It also managed to reduce the size of the “tech pack,” the component that houses all of the device’s electronics. The company continues to sell its original Smart Swim goggles for $179, and they remain a great bargain; they include Form’s signature SwimStraight feature, which displays a digital compass inside the goggles to assist with open water navigation. However, if you want those, you’ll need to order them from the company’s website.

This article originally appeared on Engadget at https://www.engadget.com/wearables/froms-smart-swim-2-goggles-will-be-available-to-buy-at-select-apple-stores-soon-100004858.html?src=rss

Microsoft accuses Google of secretly funding regulatory astroturf campaign

Microsoft is accusing Google of funding a proxy campaign designed to discredit it in the eyes of regulatory authorities and policymakers in the European Union and beyond. In a blog post penned by Rima Alaily, the company’s deputy general counsel, Microsoft claims the search giant has gone to “great lengths to obfuscate its involvement, funding and control” of the Open Cloud Coalition, a group of “cloud service providers, industry leaders and stakeholders” that says it’s committed to advocating for a “fair, competitive, and open cloud services industry across the UK and EU.”

According to Microsoft, Google hired a lobbying agency in Europe to create and operate the organization, and recruited “a handful of” European cloud providers to appear as the public face of the soon-to-launch campaign. The company says that Google plans to “present itself as a backseat member” of the Open Cloud Coalition, rather than its leader and primary funder. As one example, Microsoft points to a recruitment document (PDF link) that makes no mention of the group’s claimed affiliation to Google. It also notes the involvement of Nicky Steward, who co-wrote a complaint against Microsoft and Amazon Web Services as part of the UK’s ongoing antitrust investigation into the cloud services market.

“It remains to be seen what Google offered smaller companies to join, either in terms of cash or discounts,” Microsoft says. It adds that one of the cloud providers Google approached about joining the Open Cloud Coalition claims that the company will direct the group to attack “Microsoft’s cloud computing business in the European Union and the United Kingdom.”

Engadget was unable to independently verify Microsoft’s claims.

"We’ve been very public about our concerns with Microsoft’s cloud licensing. We and many others believe that Microsoft’s anticompetitive practices lock-in customers and create negative downstream effects that impact cybersecurity, innovation, and choice,” a Google spokesperson told Engadget, and pointed us to four separate blog posts on the matter.

As for why Google would potentially go to the extraordinary lengths of funding an astroturf campaign, Microsoft points to the recent uptick in regulatory scrutiny of the company’s search, advertising and mobile app store businesses. By Microsoft’s count, Google faces at least 24 antitrust investigations globally, including a Department of Justice probe that could see the potential break up of the company.

“Never in the past two decades have Google’s search, digital advertising, and mobile app store monopolies faced such a concerted and determined threat as they do today.” Alaily writes. “At a time when Google should be focused on addressing legitimate questions about its business, it is instead turning its vast resources towards tearing down others. It is disappointing that, with the foundation of their business facing jeopardy, they have sought to bolster their cloud computing service – Google Cloud Platform – by attacking ours.”

The accusations come after Google had reportedly attempted to derail an antitrust settlement Microsoft had negotiated with the Cloud Infrastructure Services Providers in Europe (CISPE). In July, Bloomberg wrote that Google had offered the group €470 million to go forward with litigation against its rival, an overture CISPE ultimately rejected.

As revenue growth from digital ads has slowed for Google in recent years, the company has increasingly turned to the cloud market to pick up the slack. In 2023, Google’s cloud business broke even for the first time. More recently, the unit generated a $900 million profit in the first quarter of this year.

This article originally appeared on Engadget at https://www.engadget.com/big-tech/microsoft-accuses-google-of-secretly-funding-regulatory-astroturf-campaign-203804594.html?src=rss

Microsoft accuses Google of secretly funding regulatory astroturf campaign

Microsoft is accusing Google of funding a proxy campaign designed to discredit it in the eyes of regulatory authorities and policymakers in the European Union and beyond. In a blog post penned by Rima Alaily, the company’s deputy general counsel, Microsoft claims the search giant has gone to “great lengths to obfuscate its involvement, funding and control” of the Open Cloud Coalition, a group of “cloud service providers, industry leaders and stakeholders” that says it’s committed to advocating for a “fair, competitive, and open cloud services industry across the UK and EU.”

According to Microsoft, Google hired a lobbying agency in Europe to create and operate the organization, and recruited “a handful of” European cloud providers to appear as the public face of the soon-to-launch campaign. The company says that Google plans to “present itself as a backseat member” of the Open Cloud Coalition, rather than its leader and primary funder. As one example, Microsoft points to a recruitment document (PDF link) that makes no mention of the group’s claimed affiliation to Google. It also notes the involvement of Nicky Steward, who co-wrote a complaint against Microsoft and Amazon Web Services as part of the UK’s ongoing antitrust investigation into the cloud services market.

“It remains to be seen what Google offered smaller companies to join, either in terms of cash or discounts,” Microsoft says. It adds that one of the cloud providers Google approached about joining the Open Cloud Coalition claims that the company will direct the group to attack “Microsoft’s cloud computing business in the European Union and the United Kingdom.”

Engadget was unable to independently verify Microsoft’s claims.

"We’ve been very public about our concerns with Microsoft’s cloud licensing. We and many others believe that Microsoft’s anticompetitive practices lock-in customers and create negative downstream effects that impact cybersecurity, innovation, and choice,” a Google spokesperson told Engadget, and pointed us to four separate blog posts on the matter.

As for why Google would potentially go to the extraordinary lengths of funding an astroturf campaign, Microsoft points to the recent uptick in regulatory scrutiny of the company’s search, advertising and mobile app store businesses. By Microsoft’s count, Google faces at least 24 antitrust investigations globally, including a Department of Justice probe that could see the potential break up of the company.

“Never in the past two decades have Google’s search, digital advertising, and mobile app store monopolies faced such a concerted and determined threat as they do today.” Alaily writes. “At a time when Google should be focused on addressing legitimate questions about its business, it is instead turning its vast resources towards tearing down others. It is disappointing that, with the foundation of their business facing jeopardy, they have sought to bolster their cloud computing service – Google Cloud Platform – by attacking ours.”

The accusations come after Google had reportedly attempted to derail an antitrust settlement Microsoft had negotiated with the Cloud Infrastructure Services Providers in Europe (CISPE). In July, Bloomberg wrote that Google had offered the group €470 million to go forward with litigation against its rival, an overture CISPE ultimately rejected.

As revenue growth from digital ads has slowed for Google in recent years, the company has increasingly turned to the cloud market to pick up the slack. In 2023, Google’s cloud business broke even for the first time. More recently, the unit generated a $900 million profit in the first quarter of this year.

This article originally appeared on Engadget at https://www.engadget.com/big-tech/microsoft-accuses-google-of-secretly-funding-regulatory-astroturf-campaign-203804594.html?src=rss

Samsung Galaxy S24 FE review: A great phone, but I wish it was cheaper

For a few years now, it’s been hard to pin down the strategy behind Samsung’s Fan Edition products. Ostensibly, they’re supposed to offer high-end features at a more affordable price. However, following the Galaxy S20 FE, most FE devices haven’t lived up to that promise. Whether it was the poor timing of the S21 FE or the boring hardware of the S23 FE, those phones never felt like the absolute steal the S20 FE was four years ago. 

With the new Galaxy S24 FE ($650), Samsung is offering its cheapest entry into its Galaxy AI ecosystem. Unfortunately, a few hardware changes and a lot of AI aren’t enough to overcome an uncompetitive price.

When I first took the S24 FE out of the box, I thought Samsung had left the design of the phone untouched. It turns out I was only half right. The new model features a display that is 0.3 inches larger than the S23 FE’s 6.4-inch one. In terms of size, that means the S24 FE is a much closer match to the S24+ than the S23 FE was to the S23+. I want you to keep the S24+ top of mind as you read through this review; The S24 FE is the phone Samsung wants you to consider if everything about the S24+ is appealing to you other than its $1,000 price.

A blue Galaxy S24 FE sits on a pink high chair.
Igor Bonifacic for Engadget

Like with the S23 FE, Samsung chose an AMOLED 2X panel that has an adaptive 120Hz refresh rate and 1080p resolution. In addition to being bigger, the S24 FE’s screen is brighter than the one on last year’s FE, offering close to 1,900 nits of peak brightness compared to 1,450 nits. The S24 FE is still missing the battery-saving LTPO tech found on Samsung’s flagship phones, but as far as screens on midrange phones go, the S24 FE easily has one of the best I’ve seen. I also think it’s the reason to buy the FE.

The display looks great, especially when scrolling through social media and playing games. It’s also easily legible in bright sunlight. Likewise, I found it was plenty sharp, despite having a lower resolution than the QHD screen on the S24+. It’s nice Samsung offers such a large display on a midrange device, but I’m not a fan of big phones. Obviously, personal preference will dictate if the FE’s girth is your thing, but those with smaller hands like me, consider this your warning: it’s not an easy phone to hold.

In North America, the S24 FE is available in four colors: blue (pictured), graphite, gray and a lovely mint. It might not be made of titanium, but I think the FE looks just as premium as its more expensive siblings. I also wouldn’t worry about its durability too much; the front and back of the phone are protected by Gorilla Glass Victus+, and the entire phone is IP68-certified against dust and water.

A closeup of the Galaxy S24 FE camera array, with pink fabric behind.
Igor Bonifacic for Engadget

I’ll be honest, I did not expect to like the S24 FE’s camera as much as I did. The new phone offers the same hardware as its predecessor. Specifically, it comes with a 50-megapixel, f/1.8 main camera; a 12MP, f/2.2 ultra-wide camera; an 8MP, f/2.4 telephoto camera and a 10MP selfie camera with f/2.4 lens.

The one addition here is the company’s ProVisual engine. It’s the first time Samsung has offered the software on one of its FE phones. Having not used last year’s model, I wasn’t able to directly compare the two devices.

So I did the next best thing: I compared the photos I snapped with the S24 FE to those I took with the last Samsung phone I reviewed, the Galaxy A53 5G. If I had to pinpoint a difference, it’s that the S24 FE did a better job of consistently nailing white balance and properly exposing dark scenes.

At the same time, Samsung’s image processing hasn’t dramatically changed over the last couple of years. There’s no mistaking the photos from the S24 FE came from a Samsung device. As you can see from the gallery below, nearly every image features bright and saturated colors.

Even as someone who’s not a fan of Samsung’s image processing, I had a lot of fun using the FE’s cameras. Of the three main ones, my favorite was the telephoto. Thanks to its 32-degree field of view, it gives you a 3x optical zoom over the FE’s main camera. That might not seem like much, but when most midrange phones, including the excellent Pixel 8a, don’t come with a telephoto camera, any bit of optical zoom makes it feel like you’re using a more premium product.

In the case of the FE, it’s a quality camera too, with a bright f/2.4 lens and built-in optical image stabilization. I’m usually not a fan of portrait modes on more affordable handsets like the S24 FE, but here I found it made sense since the compression from the telephoto lens leads to better subject separation. I ended up snapping a lot of portraits because the phone did a great job of rendering natural-looking skin tones and background blur.

The main camera is less of a standout. Thanks to that 50MP sensor, it can produce the most detailed images of the S24 FE’s cameras, but the autofocus wasn’t as fast as I would have liked. When I tried to get a closeup of something, such as my cat Celine, the camera took a few seconds to lock focus. However, outside of that, the S24 FE can take stunning photos. It’s no slouch in low light, either.

As for the 12MP ultra-wide, it was my least favorite of the FE’s cameras. Samsung’s image processing doesn’t do a great job of correcting for the fish-eye distortion produced by such a wide lens, so buildings and anything else captured in the periphery of the frame look misshapen. Photos look fine when zoomed out, but begin to look worse as soon as you start pixel-peeping. Part of the problem here is that Samsung didn’t update the ultra-wide camera to add autofocus, so not every shot comes out as sharp as it could be, despite the sensor offering a decent amount of resolution.

A closeup of the Galaxy S24 FE's front-facing camera. There's a purple wall behind the phone.
Igor Bonifacic for Engadget

Speaking of autofocus, the selfie camera is missing that feature as well. It’s a shame because the FE has one of the better front-facing cameras I’ve used recently. It offers enough resolution to make selfies look detailed but not so much that every pore and blemish is rendered in painful detail. At the same time, the company seems to have toned down the overly aggressive skin smoothing it was known for in years past.

I mentioned the Pixel 8a earlier, and I think it’s worth returning to it for a moment. When my coworker Sam Rutherford pitted Google’s midrange handset against the Galaxy S24 Ultra, he found the two were surprisingly comparable when it came to camera performance. Despite costing $800 less, the Pixel 8a frequently produced photos with more accurate colors and superior detail. The S24 FE’s cameras perform a shade worse than their counterparts on the S24+. Unless you value the inclusion of a telephoto lens as much as I do, there’s a case to be made that the S24 FE doesn’t offer enough of an upgrade to warrant spending $650.

The top of the Galaxy S24 features the phone's SIM tray.
Igor Bonifacic for Engadget

Thankfully, the S24 FE is not all small tweaks. Internally, the phone features Samsung’s new Exynos 2400e chipset. It’s the one processor the company is using for both US and international variants. I can already hear some of you groaning since Exynos chips have been known in the past for both poor performance and efficiency relative to their Qualcomm counterparts, so let me get straight to the good news: The 2400e is a powerhouse.

When I put the S24 FE through Geekbench 6, the chip delivered a single-core score of 2,140 and a multi-core performance of 6,690. To put those numbers in perspective, when my co-worker Sam did the same with the S24+ earlier this year, its flagship Snapdragon Gen 3 SoC performed better but not significantly so, posting scores of 2,284 and 7,003, respectively.

The Exynos 2400e was equally impressive in real-world use. Even though the FE only has 8GB of RAM at its disposal, I didn’t experience any hiccups scrolling through websites, switching between apps and other daily tasks. When it came to gaming, I could play Diablo Immortal with the game’s 60 fps mode enabled and graphics settings pushed to their max. I didn’t experience any hitching or dropped frames. I’ll mention here that Samsung redesigned the FE’s vapor chamber to make it bigger and thereby improve cooling. In my experience, the phone gets warm — but not hot — running graphically intensive games.

A closeup of the Galaxy S24 FE's USB-C port.
Igor Bonifacic for Engadget

As I mentioned at the top, this year’s FE is bigger than its predecessor. Samsung has wisely used the extra space to include a larger 4,700mAh battery. Disappointingly, the company only made a minor change to the FE’s charging capabilities. Thanks to Qi2 support, wireless charging now tops off at 15W, up from 10W on the S23 FE. As for wired power delivery, the FE is still limited to 25W.

During one test, I left home at 8AM with the FE’s battery at 87 percent. For the next three hours, I used the phone to track a bike ride on Strava and snap photos along the way. When I got home, the battery was at 67 percent. I then went out for lunch with my partner, snapping plenty of photos along the way, and using the FE to surf the web and check social media. I later played an hour of Diablo Immortal for a total of three hours of screen time that day. Before bed, I had about 40 percent battery left. Samsung says the S24 FE can power long gaming sessions, and judging by what I saw, that’s accurate.

Charging the FE is far from an ideal experience. In my testing, it was possible to get the battery from zero to 50 percent in about 30 minutes. That’s in line with Samsung’s claims. However, charging to full takes substantially longer. It took close to 70 minutes to get a dead battery to 100 percent. Of course, this is assuming you own a compatible 25W fast charger. Did I mention Samsung doesn’t include a power adapter in the box? Yes, you’ll need your own. Otherwise, expect glacial charging speeds.

A blue Galaxy S24 FE sits on a pile of red maple tree leaves with the concrete sidewalk below.
Igor Bonifacic for Engadget

I’ve spent a lot of words on the S24 FE’s hardware, but for Samsung, that’s not the story of this phone. The company wants you to see the new FE as a more affordable way to access its Galaxy AI tools. I won’t bore you with a review of the entire suite since Engadget has already covered what’s included.

What I will say is that all of the S24 FE’s AI features work well, but none of them are reasons I would go out and buy this phone for myself. Take Circle to Search, for instance. By long pressing the FE’s home button, you can bring up Google anywhere, including while scrolling through photos on Instagram and your camera roll. It’s then possible to search for a specific object by drawing a circle around it. So, the next time you spot a cute floof, you can confirm it was a Samoyed without leaving Google Photos. No need to switch between apps or try to figure out how to describe what you saw to Google.

The back of the Galaxy S24 FE.
Igor Bonifacic for Engadget

Circle to Search is useful, but I could also live without it. And I can safely say the same for all of Samsung's own AI features. For example, Transcript Assist was handy for turning voice memos into written notes, but it didn’t save me much time in the long run since I ended up editing most of what the software produced. I also don’t want to subject my friends to AI-generated texts courtesy of Chat Assist.

Most importantly, I can’t see myself paying for any of the FE’s AI features once they’re no longer free. In case you forgot, Samsung plans to monetize Galaxy AI. “Fees may apply to certain AI features at the end of 2025,” the company said in the press release announcing the S24 FE. If you’re in the market for a midrange device, the prospect of paying a subscription to use some of its features feels like a non-starter. I don’t know about you, but if I’m buying a budget phone, I want it to save me over the long run, not cost me more after a year or two.

The Galaxy S24 FE's telelphoto camera zoom in on Toronto's CN Tower.
Igor Bonifacic for Engadget

In a vacuum, the Galaxy S24 FE is a great all-around phone and would be an easy recommendation if the S24+ didn’t exist or had Samsung released the two devices at the same time. At $650 for the base 128GB model and $710 for 256GB, the FE isn’t substantially cheaper than the S24+, especially when you consider the Plus comes with 256GB of storage by default and has already been reduced by as much as $150 off in recent months. If you want a discount S24+, you’re better off just waiting for that phone to go on sale.

The S24 FE is in an even weirder spot compared to the best midrange phones you can buy right now. Yes, it has a larger screen and an extra camera over our current top pick, the $499 Pixel 8a. However, for most people, I don’t think those upgrades warrant spending an extra $150. If you’re looking to get the most phone for as little money as possible, the S24 FE is not it.

I’m sure Samsung will adjust the price before long, but for now, this Fan Edition device doesn’t have a clear audience.

This article originally appeared on Engadget at https://www.engadget.com/mobile/smartphones/samsung-galaxy-s24-fe-review-a-great-phone-but-i-wish-it-was-cheaper-190032655.html?src=rss

FTC ratifies ‘click-to-cancel’ rule, making it easier for consumers to end subscriptions

The Federal Trade Commission has made it easier for consumers to cancel subscriptions. In a decision that went down along party lines, the agency voted to ratify a “click-to-cancel” rule that will require providers to make it as easy to cancel a subscription as it is to sign up for one. First proposed last year, the rulemaking prohibits companies from misrepresenting their recurring services and memberships, as well as failing to clearly disclose any material terms related to those offerings.

“Too often, businesses make people jump through endless hoops just to cancel a subscription,” said Chair Lina Khan. “The FTC’s rule will end these tricks and traps, saving Americans time and money. Nobody should be stuck paying for a service they no longer want.”

After considering more than 16,000 comments on the matter, the FTC decided not to write the final rulemaking as originally proposed. Most notably, the agency scrapped a proposal that would have required companies to provide consumers with annual reminders for subscription renewals. It also won’t mandate a rule that would have forced sellers to obtain the consent of those seeking to cancel a subscription before telling them about potential modifications to their plan or reasons why they should continue paying for a service.

A separate statement issued by Commissioner Rebecca Slaughter (PDF link) provides insight into the decision. Essentially, the agency felt the FTC Act doesn’t give it the authority to require a renewal notice. I’ll note here that the dissenting opinion (PDF link), written by Republican Commissioner Melissa Holyoak, contends that the entire rulemaking is overly broad, and accuses the Democratic majority of attempting to push through the change before next month's election.

“Americans understand the importance and value of such a requirement; many have discovered that they or their parents had been paying for years or even decades for a service wholly unused, such as a dial-up internet service from the 1990s,” Slaughter writes in her statement. “… Of course, we are always mindful that our authority under the FTC Act to issue rules under section 18 has limits; sometimes, as here, those limits prevent us from codifying in a rule practices that we might, as a matter of policy, prefer to require explicitly.”

Slaughter points out that state and federal lawmakers do have the authority to mandate renewal notices, and notes some states, such as Virginia, have even recently gone down that path. “The comment record compiled in this rulemaking proceeding strongly supports the wisdom of federal and state legislators’ carefully considering adopting such a law,” Slaughter writes.

Provided there’s no legal challenge to the FTC’s decision, today’s rulemaking will go into effect 180 days after it is published in the Federal Register. When the agency moved to ban noncompete clauses earlier this year, a federal judge in Texas issued a nationwide injunction. That decision is still stuck in legal limbo. 

This article originally appeared on Engadget at https://www.engadget.com/big-tech/ftc-ratifies-click-to-cancel-rule-making-it-easier-for-consumers-to-end-subscriptions-160752238.html?src=rss

You’ll soon be able to safely and easily move your passkeys between password managers

By now, most people know passkeys offer a better way to protect their online credentials than passwords. Nearly every tech company of note, including Apple, Google and Microsoft, supports the protocol. Moreover, despite a slow start, adoption has dramatically increased in the last year, with, for instance, password manager Dashlane recently noting a 400% increase in use since the beginning of 2024. Amazon, meanwhile, said today more than 175 million of its customers are using passkeys to protect their accounts. Still, not everyone knows they don’t need to rely on passwords to protect their online identity, and transferring your passkeys between platforms isn’t as easy as it should be.

That’s why the FIDO Alliance, the coalition of organizations behind the technology, is working to make it easier to do just that. On Tuesday, the group published draft specifications for the Credential Exchange Protocol (CXP) and Credential Exchange Format (CXF), two standards that, once adopted by the industry, will allow you to safely and seamlessly move all your passkeys and passwords between different apps and platforms. 

With some of the biggest names in the industry collaborating on the effort (including Apple, Google, 1Password, Bitwarden, and Dashlane, to name a few), there’s a very good chance we’re looking at a future where your current password manager — particularly if you use one of the first-party ones offered by Apple or Google — won’t be the reason you can’t switch platforms. And that’s a very good thing.

“It is critical that users can choose the credential management platform they prefer, and switch credential providers securely and without burden,” the FIDO Alliance said. “Until now, there has been no standard for the secure movement of credentials, and often the movement of passwords or other credentials has been done in the clear.”

The CXP and CXF standards aren’t ready for prime time just yet. The FIDO Alliance plans to collect feedback before it publishes the final set of specifications and gives its members the go-ahead to implement the technology.

This article originally appeared on Engadget at https://www.engadget.com/cybersecurity/youll-soon-be-able-to-safely-and-easily-move-your-passkeys-between-password-managers-161025573.html?src=rss