Author Archives: Will Shanklin

Leaked Google database reveals its secret privacy and security failures

Posted on by

A collection of leaked internal Google privacy cases provides a rare glimpse into the company’s volume and handling of breaches, accidents and other incidents. 404 Media obtained and pored through the database, which covers thousands of internally flagged privacy and security issues from 2013 to 2018. 

Google verified the trove’s authenticity with Engadget but claimed some of the reports were related to third-party services or didn’t end up being cause for concern. “At Google employees can quickly flag potential product issues for review by the relevant teams,” a company spokesperson wrote to Engadget. “When an employee submits the flag they suggest the priority level to the reviewer. The reports obtained by 404 are from over six years ago and are examples of these flags — every one was reviewed and resolved at that time. In some cases, these employee flags turned out not to be issues at all or were issues that employees found in third party services.”

404 Media writes that, when taken on an individual level, many cases only impacted a few people or were fixed quickly. “Taken as a whole, though, the internal database shows how one of the most powerful and important companies in the world manages, and often mismanages, a staggering amount of personal, sensitive data on people’s lives,” 404 Media’s Joseph Cox wrote.

Examples include a potential security issue where a government client of a Google cloud service had its sensitive data accidentally transitioned to a consumer-level product. Google’s internal report added that, as a consequence, a US-based location for the data was “no longer guaranteed for this customer,” according to the report.

An ultra-compact SUV fitted with a Google Street View camera perched on its roof. It sits on gray pavement in front of a white wall.
Google

In 2016, another case flagged a glitch in Google Street View, where a filter in the service’s transcription software designed to omit captured license plate numbers failed to do its job. “As a result, our database of objects detected from Street View now inadvertently contains a database of geolocated license plate numbers and license plate number fragments,” the report acquired by 404 Media details. (Oops!) That report said the data was purged.

Another incident highlighted a case where a bug in a Google speech service accidentally captured and logged an estimated 1,000 hours of children’s speech data for about an hour. That case report claimed the team deleted all of the data.

Other cases in the database range from “a person” modifying customer accounts on Google’s ad platform to manipulate affiliate tracking codes to YouTube recommending videos based on users’ deleted watch histories. One report even highlights how a Google employee (unintentionally, according to the report) accessed Nintendo’s private YouTube videos and leaked info ahead of the video game company’s announcements.

The full report from 404 Media, which details more of the internal reports, is worth reading for anyone curious about the types of privacy and security incidents a company of Google’s magnitude faces — or causes itself — and how it addresses them.

This article originally appeared on Engadget at https://www.engadget.com/leaked-google-database-reveals-its-secret-privacy-and-security-failures-183232983.html?src=rss

Sony’s Astro Bot is getting the Mario-like adventure it deserves

Posted on by

Sony’s lovable robo-mascot is getting a new game. During its PlayStation State of Play on Thursday, Sony dropped a trailer for the upcoming PS5 title Astro Bot. The 3D Mario-esque title, a sequel to the beloved pack-in, Astro’s Playroom, arrives on September 6.

The trailer sees our pal Astro wading through puddles full of pink flamingos, grappling across platforms like Bionic Commando and summoning a PS5 console to help fight a giant green alien in a UFO (as one tends to do). In a nod to old-school PlayStation, the trailer even includes a cameo from PaRappa the Rapper.

Sony describes Astro Bot as a “supersized adventure” that spans over six galaxies and 80 levels as you search for your lost crew. You’ll have over 15 new abilities, and, like in its predecessor, it will serve as a showcase for the various sensors and haptics in the DualSense controller.

Astro Bot will be available for pre-order on June 7 ahead of its September 6 release date.

This article originally appeared on Engadget at https://www.engadget.com/sonys-astro-bot-is-getting-the-mario-like-adventure-it-deserves-225716801.html?src=rss

Sony’s Astro Bot is getting the Mario-like adventure it deserves

Posted on by

Sony’s lovable robo-mascot is getting a new game. During its PlayStation State of Play on Thursday, Sony dropped a trailer for the upcoming PS5 title Astro Bot. The 3D Mario-esque title, a sequel to the beloved pack-in, Astro’s Playroom, arrives on September 6.

The trailer sees our pal Astro wading through puddles full of pink flamingos, grappling across platforms like Bionic Commando and summoning a PS5 console to help fight a giant green alien in a UFO (as one tends to do). In a nod to old-school PlayStation, the trailer even includes a cameo from PaRappa the Rapper.

Sony describes Astro Bot as a “supersized adventure” that spans over six galaxies and 80 levels as you search for your lost crew. You’ll have over 15 new abilities, and, like in its predecessor, it will serve as a showcase for the various sensors and haptics in the DualSense controller.

Astro Bot will be available for pre-order on June 7 ahead of its September 6 release date.

This article originally appeared on Engadget at https://www.engadget.com/sonys-astro-bot-is-getting-the-mario-like-adventure-it-deserves-225716801.html?src=rss

Microsoft and CWA forge labor neutrality agreement covering all ZeniMax workers

Posted on by

Microsoft and the Communications Workers of America (CWA) have forged a labor neutrality agreement for all ZeniMax workers. The CWA says the deal is similar to the one from 2022 covering Activision Blizzard’s workforce, which went into effect in April of this year.

“Thousands of our ZeniMax co-workers now have a free and fair path to organize together for better working conditions,” Page Branson, a Senior Quality Assurance (QA) Tester, wrote in a CWA press release.

In 2022, the Xbox maker signed a formal agreement with CWA to respect Activision Blizzard employees’ right to organize. Set to take effect 60 days after Microsoft’s acquisition closed, it didn’t become official until earlier this year. It also extends Microsoft’s early 2023 recognition of ZeniMax QA workers’ right to unionize, and it now includes every eligible employee at ZeniMax.

The CWA says the new agreement means Microsoft will take a neutral approach when employees express interest in joining the union. The workers can communicate with their peers and union reps about membership “in a way that encourages information sharing and avoids business disruptions.”

According to the CWA, workers will have access to a decision-making process that respects their privacy if they wish. In addition, it includes a dispute resolution and arbitration process in the case of any disagreements between the union and Microsoft.

“When we organized our union under a similar legal agreement the process was clear and management did not try to influence anyone’s decision and the company did not try to interfere with the voting process,” Branson wrote. “There is strength in numbers, and as our numbers grow at ZeniMax, at Microsoft, and in the video game industry, we will gain the respect we deserve and raise the standards of working conditions for everyone across the video gaming industry. When we benefit, the consumer and the company will ultimately benefit with us and help keep this industry stable for current and future workers.”

This article originally appeared on Engadget at https://www.engadget.com/microsoft-and-cwa-forge-labor-neutrality-agreement-covering-all-zenimax-workers-212643324.html?src=rss

Microsoft and CWA forge labor neutrality agreement covering all ZeniMax workers

Posted on by

Microsoft and the Communications Workers of America (CWA) have forged a labor neutrality agreement for all ZeniMax workers. The CWA says the deal is similar to the one from 2022 covering Activision Blizzard’s workforce, which went into effect in April of this year.

“Thousands of our ZeniMax co-workers now have a free and fair path to organize together for better working conditions,” Page Branson, a Senior Quality Assurance (QA) Tester, wrote in a CWA press release.

In 2022, the Xbox maker signed a formal agreement with CWA to respect Activision Blizzard employees’ right to organize. Set to take effect 60 days after Microsoft’s acquisition closed, it didn’t become official until earlier this year. It also extends Microsoft’s early 2023 recognition of ZeniMax QA workers’ right to unionize, and it now includes every eligible employee at ZeniMax.

The CWA says the new agreement means Microsoft will take a neutral approach when employees express interest in joining the union. The workers can communicate with their peers and union reps about membership “in a way that encourages information sharing and avoids business disruptions.”

According to the CWA, workers will have access to a decision-making process that respects their privacy if they wish. In addition, it includes a dispute resolution and arbitration process in the case of any disagreements between the union and Microsoft.

“When we organized our union under a similar legal agreement the process was clear and management did not try to influence anyone’s decision and the company did not try to interfere with the voting process,” Branson wrote. “There is strength in numbers, and as our numbers grow at ZeniMax, at Microsoft, and in the video game industry, we will gain the respect we deserve and raise the standards of working conditions for everyone across the video gaming industry. When we benefit, the consumer and the company will ultimately benefit with us and help keep this industry stable for current and future workers.”

Update, June 6 2024, 1:45PM ET: The subhed of this story has been updated to reflect that the 2022 deal was between Microsoft and Activision Blizzard workers, while Activision Blizzard the entity was not a party to the deal. 

This article originally appeared on Engadget at https://www.engadget.com/microsoft-and-cwa-forge-labor-neutrality-agreement-covering-all-zenimax-workers-212643324.html?src=rss

Spotify says it will refund Car Thing purchases

Posted on by

Spotify says it has quietly begun offering refunds for its soon-to-be-bricked Car Thing. The company told Engadget on Thursday that, as of last Friday, customers with proof of purchase (like an emailed invoice) can contact customer service and get their money back for the vehicle streaming device.

Spotify has taken some heat for its announcement last week that it will brick every Car Thing device on December 9, 2024. The company described its decision as “part of our ongoing efforts to streamline our product offerings” (read: cut costs) and that it lets Spotify “focus on developing new features and enhancements that will ultimately provide a better experience to all Spotify users.”

TechCrunch reports that Gen Z users on TikTok have expressed their frustration in videos, while others have complained directed toward Spotify in DMs on X (Twitter) and directly through customer support. Some users claimed Spotify’s customer service agents only offered several months of free Premium access, while others were told nobody was receiving refunds. It isn’t clear if any of them contacted them after last Friday when it shifted gears on refunds.

Others went much further. Billboard first reported on a class-action lawsuit filed in the US District Court for the Southern District of New York on May 28. The suit accuses Spotify of misleading Car Thing customers by selling a $90 product that would soon be obsolete without offering refunds, which sounds like a fair enough point.

It’s worth noting that, according to Spotify, it began offering the refunds last week, while the lawsuit was only filed on Tuesday. If the company’s statement about refunds starting on May 24 is accurate, the refunds aren’t a direct response to the legal action. (Although it’s possible the company began offering them in anticipation of lawsuits.)

Regardless, anyone reaching out to customer service with a valid receipt should be offered a refund. If you have tried since then and have been denied, we recommend you contact them again.

This article originally appeared on Engadget at https://www.engadget.com/spotify-now-says-it-will-refund-car-thing-purchases-193001487.html?src=rss

Spotify says it will refund Car Thing purchases

Posted on by

Spotify says it has quietly begun offering refunds for its soon-to-be-bricked Car Thing. The company told Engadget on Thursday that, as of last Friday, customers with proof of purchase (like an emailed invoice) can contact customer service and get their money back for the vehicle streaming device.

Spotify has taken some heat for its announcement last week that it will brick every Car Thing device on December 9, 2024. The company described its decision as “part of our ongoing efforts to streamline our product offerings” (read: cut costs) and that it lets Spotify “focus on developing new features and enhancements that will ultimately provide a better experience to all Spotify users.”

TechCrunch reports that Gen Z users on TikTok have expressed their frustration in videos, while others have complained directed toward Spotify in DMs on X (Twitter) and directly through customer support. Some users claimed Spotify’s customer service agents only offered several months of free Premium access, while others were told nobody was receiving refunds. It isn’t clear if any of them contacted them after last Friday when it shifted gears on refunds.

Others went much further. Billboard first reported on a class-action lawsuit filed in the US District Court for the Southern District of New York on May 28. The suit accuses Spotify of misleading Car Thing customers by selling a $90 product that would soon be obsolete without offering refunds, which sounds like a fair enough point.

It’s worth noting that, according to Spotify, it began offering the refunds last week, while the lawsuit was only filed on Tuesday. If the company’s statement about refunds starting on May 24 is accurate, the refunds aren’t a direct response to the legal action. (Although it’s possible the company began offering them in anticipation of lawsuits.)

Regardless, anyone reaching out to customer service with a valid receipt should be offered a refund. If you have tried since then and have been denied, we recommend you contact them again.

This article originally appeared on Engadget at https://www.engadget.com/spotify-now-says-it-will-refund-car-thing-purchases-193001487.html?src=rss

You can now edit RCS chats in Android Messages

Posted on by

Android’s RCS message capabilities are inching closer to iMessage’s. Google said today that you can now edit RCS messages, bringing parity with the iMessage editing feature Apple added two years ago.

The new editing feature gives you 15 minutes (the same as iMessage) to edit a message in the Google Messages app. Hold down on the message to bring up a text box to fix your typos or add extra clarity.

RCS messages will soon whittle down the divide between green and blue bubbles on iOS. Apple said it would support RCS in the Messages app starting in 2024, giving iPhone owners typing indicators, read receipts and high-resolution media sharing when chatting with their Android phone-toting friends. Although Apple hasn’t provided a specific timeline, the assumption is RCS will arrive in iOS 18, which we’ll learn about in its June 10 WWDC keynote ahead of a fall launch.

Google had a few other new features to roll out. Android users with a Chromebook or Android tablet will soon get Instant Hotspot, similar to another feature Apple rolled out years ago (way back in 2014 in iOS 8 and macOS Yosemite). “Coming soon, with instant hotspot, you’ll be able to connect your Android tablet or Chromebook to your phone’s hotspot with one tap — without needing to go through the extra step of typing in your password,” Google product director Jan Jedrzejowicz wrote in the company’s blog post announcing the new features.

Along similar lines, Google Meet will soon let you quickly move devices mid-call. You can tap the Cast icon in the app to switch between an Android phone, tablet or web browser, which is handy when you want to switch locations during a video chat.

Left: A Pixel phone with a Google Home widget on its home screen. Right: A Pixel Watch with a Google Home complication (fan icon) to the left of the time.
Google

Android is also getting easier smart home controls. A new Google Home Favorites widget gives you access to room temperatures or lighting controls with one tap. This seems like a more intuitive placement than the lock screen shortcut for smart home controls that Google introduced in Android 13. You can sign up for a public preview to try the widget.

In addition, Wear OS will get a Google Home Favorites tile and complication for smart-home control from your wrist.

Google is also adding new Emoji Kitchen combinations. If you aren’t familiar with it, the clever feature lets you blend two emoji in Gboard to send franken-moji stickers to friends. The company didn’t provide a complete list of new options, but it said a disco ball and headphones combo was one example.

Other Android updates include using PayPal on Google Wallet from Wear OS watches. Android’s digital car keys are now available with some Mini models and will soon be available for “select Mercedes-Benz and Polestar vehicles.”

This article originally appeared on Engadget at https://www.engadget.com/you-can-now-edit-rcs-chats-in-android-messages-160010553.html?src=rss

You can now edit RCS chats in Android Messages

Posted on by

Android’s RCS message capabilities are inching closer to iMessage’s. Google said today that you can now edit RCS messages, bringing parity with the iMessage editing feature Apple added two years ago.

The new editing feature gives you 15 minutes (the same as iMessage) to edit a message in the Google Messages app. Hold down on the message to bring up a text box to fix your typos or add extra clarity.

RCS messages will soon whittle down the divide between green and blue bubbles on iOS. Apple said it would support RCS in the Messages app starting in 2024, giving iPhone owners typing indicators, read receipts and high-resolution media sharing when chatting with their Android phone-toting friends. Although Apple hasn’t provided a specific timeline, the assumption is RCS will arrive in iOS 18, which we’ll learn about in its June 10 WWDC keynote ahead of a fall launch.

Google had a few other new features to roll out. Android users with a Chromebook or Android tablet will soon get Instant Hotspot, similar to another feature Apple rolled out years ago (way back in 2014 in iOS 8 and macOS Yosemite). “Coming soon, with instant hotspot, you’ll be able to connect your Android tablet or Chromebook to your phone’s hotspot with one tap — without needing to go through the extra step of typing in your password,” Google product director Jan Jedrzejowicz wrote in the company’s blog post announcing the new features.

Along similar lines, Google Meet will soon let you quickly move devices mid-call. You can tap the Cast icon in the app to switch between an Android phone, tablet or web browser, which is handy when you want to switch locations during a video chat.

Left: A Pixel phone with a Google Home widget on its home screen. Right: A Pixel Watch with a Google Home complication (fan icon) to the left of the time.
Google

Android is also getting easier smart home controls. A new Google Home Favorites widget gives you access to room temperatures or lighting controls with one tap. This seems like a more intuitive placement than the lock screen shortcut for smart home controls that Google introduced in Android 13. You can sign up for a public preview to try the widget.

In addition, Wear OS will get a Google Home Favorites tile and complication for smart-home control from your wrist.

Google is also adding new Emoji Kitchen combinations. If you aren’t familiar with it, the clever feature lets you blend two emoji in Gboard to send franken-moji stickers to friends. The company didn’t provide a complete list of new options, but it said a disco ball and headphones combo was one example.

Other Android updates include using PayPal on Google Wallet from Wear OS watches. Android’s digital car keys are now available with some Mini models and will soon be available for “select Mercedes-Benz and Polestar vehicles.”

This article originally appeared on Engadget at https://www.engadget.com/you-can-now-edit-rcs-chats-in-android-messages-160010553.html?src=rss

US House bill would require national security reviews on connected vehicles from China

Posted on by

Newly proposed Congressional legislation would require the US to conduct security reviews for connected vehicles built by automakers from China and “other countries of concern.” Rep. Elissa Slotkin (D-MI), a former CIA analyst and Pentagon official who has championed the issue, introduced the bill on Wednesday.

If passed by Congress (a tall order these days), the Connected Vehicle National Security Review Act would establish a formal review process for connected autos from Chinese companies. It would also allow the Department of Commerce to limit or ban these cars and other vehicles before they reach US consumers.

“Today’s vehicles are more sophisticated than ever, carrying cameras, radars and other sophisticated sensors, plus the ability to process, transmit and store the data they gather from the United States,” said Slotkin. “If allowed into our markets, Chinese connected vehicles offer the Chinese government a treasure trove of valuable intelligence on the United States, including the potential to collect information on our military bases, critical infrastructure like the power grid and traffic systems, and even locate specific U.S leaders should they so choose.”

Campaign photo for US Representative Elissa Slotkin. She stands in a factory, wearing goggles, talking with several workers.
Rep. Elissa Slotkin

In a speech on the House floor earlier this month, Slotkin noted that Chinese EVs, often sold much cheaper than their US and European counterparts, could quickly gain a significant share of the American market. She cited how Chinese vehicles, first sold in Europe in 2019, now make up almost a quarter of its market. The representative also recently pushed Secretary of the Army Christine Wormuth and Secretary of Defense Lloyd Austin on the security gap.

Alternatively (and perhaps ideally), legislators could pass a comprehensive data privacy law rather than dealing with these issues piecemeal.

The bill’s introduction follows the Biden Administration’s quadrupling of import tariffs on Chinese EVs. The White House’s new EV levies grew from 25 percent to 100 percent, following China’s EV exports rising 70 percent between 2022 and 2023.

In February, the White House also ordered the Department of Commerce to investigate the risks of connected vehicles from China and other adversaries. However, that action was conducted through an executive order and could be undone by future administrations. Slotkin’s legislation would close those loopholes if it makes it through Congress — rarely a safe bet in today’s highly obstructed and contentious political environment.

This article originally appeared on Engadget at https://www.engadget.com/us-house-bill-would-require-national-security-reviews-on-connected-vehicles-from-china-211505179.html?src=rss