Amazon discounts the Echo Buds to only $25 ahead of Prime Day

Amazon Prime Day will officially be here on July 16, but we're already starting to see discounts pop up, particularly on Amazon's own devices. The Amazon Echo Buds are half off in this early Prime Day deal. The wireless earphones, already one of Engadget’s top picks for budget on-the-go buds at $50, are only $25 today. That’s a record low for the latest model, which arrived last year.

This latest iteration of the Echo Buds doesn’t plunge into your ear canals. Instead, the buds have a semi-open fit with a stem, similar to Apple’s standard AirPods. The Echo Buds include removable silicone ear covers (not tips) to help with grip and comfort without stuffing something inside your ear, which can be uncomfortable for some folks.

That means they lack noise cancelation, so don’t expect them to tune or block out the outside world (apart from your music drowning things out if it’s loud enough). This style works better for those who want to maintain awareness of their surroundings while avoiding the feeling of full ear canals.

The third-gen Echo Buds can last up to five hours per charge (up to six with Alexa’s wake-word detection disabled). However, their charging case adds another 15 hours, and you can add a quick two hours to the buds with a quick 15-minute charge.

Sound quality will be noticeably lower than that of competitors in the $200-ish range, but Amazon would’ve been performing miracles if it matched that. Instead, you get a perfectly solid sound profile (lacking a bit of bass) that performs beyond what you’d expect for $50 earbuds. At $25 today, it’s hard to imagine anything else coming close in that price range.

Your Prime Day Shopping Guide: See all of our Prime Day coverage. Shop the best Prime Day deals on Yahoo Life. Follow Engadget for Prime Day tech deals. Hear from Autoblog’s experts on the best Amazon Prime Day deals for your car, garage, and home, and find Prime Day sales to shop on AOL, handpicked just for you.

This article originally appeared on Engadget at https://www.engadget.com/amazon-discounts-the-echo-buds-to-only-25-ahead-of-prime-day-123058567.html?src=rss

NGL becomes the first app banned from hosting minors by the FTC

On Tuesday, the FTC unanimously banned the social messaging app NGL from hosting minors as part of a $5 million settlement. The first-of-its-kind ban comes after revelations that the company actively marketed the app to children with bait-and-switch tactics, false claims about AI moderation and the targeting of “popular” kids (like cheerleaders) to try to lure others onto the predatory hellscape.

“NGL marketed its app to kids and teens despite knowing that it was exposing them to cyberbullying and harassment,” FTC Chair Lina Khan wrote in an agency press release. “In light of NGL’s reckless disregard for kids’ safety, the FTC’s order would ban NGL from marketing or offering its app to those under 18. We will keep cracking down on businesses that unlawfully exploit kids for profit.”

The FTC and the Los Angeles DA’s office worked together on the complaint, which paints a picture of an exploitative business that prioritized building its social graph above honoring even the most fundamental of ethics. (Sound familiar?) Although NGL is still a relatively niche app with nowhere near the popularity of Instagram, TikTok and other first-tier platforms, it has “exploded” in popularity, according to The Washington Post. In 2022, it briefly became the most downloaded app on the iOS App Store.

The company markets the app as a place to message anonymously with unknown friends and contacts from other social channels. That alone sounds like a recipe for disaster. But the FTC says the company made it much worse with false claims of using “world class AI content moderation” with “deep learning and pattern matching algorithms” to prevent cyberbullying and other concerning behavior. It also sent fake, computer-generated messages — which users believed were from their real friends — with provocative prompts like “Are you straight?” and “I know what you did.”

In addition, the company’s predatory business practices also allegedly included bait-and-switch upsell tactics, which promised to reveal the identity of anonymous “friends” (which may have been fake) if they paid up to $10 weekly for a premium subscription. After paying, the service would only supply useless “hints” like the message’s timestamp, the sender’s general location and whether they used an iPhone or Android phone. It would also turn on recurring, hard-to-cancel charges that users didn’t expect.

Even worse, Joao Figueiredo, one of the company’s co-founders, allegedly directed employees to look on “high school cheer [Instagram] pages” to find “kids who are popular to post and get their friends to post.” One user allegedly reported that their friend attempted suicide because of their experience on NGL.

When consumers complained, NGL executives allegedly laughed them off as “suckers.”

The FTC and Los Angeles DA added that NGL violated the COPPA Rule. It requires companies with apps “that are directed to or knowingly being used by children under 13 to inform their parents about the personal information they collect.” Other accusations include a violation of the Restore Online Shoppers’ Confidence Act.

In addition, the dumpster fire known as NGL allegedly made no attempt to verify users’ ages, failed to obtain parental consent to collect and use data from preteen children and failed to honor parents’ requests to delete children’s data. Finally, the company supposedly “retained children’s data longer than reasonably necessary to fulfill the purpose for which the data was collected.”

Under the settlement terms, NGL and its cofounders have agreed to pay $4.5 million to “provide redress to consumers” and a $500,000 civil penalty to the LA DA’s office. From now on, the company will have to require an age gate that prevents new and current users under 18 from using the app, deleting all info associated with those under 13, agreeing not to misrepresent the origins of messages, make false claims about AI tech and received consent from consumers before billing them for subscriptions (while making canceling recurring charges simple).

It remains to be seen whether the FTC can use the unanimous, bipartisan ruling against NGL as a precedent to go after bigger fish in the social sphere using egregiously unethical marketing tactics of their own.

This article originally appeared on Engadget at https://www.engadget.com/ngl-becomes-the-first-app-banned-from-hosting-minors-by-the-ftc-171524202.html?src=rss

Hackers reverse-engineer Ticketmaster’s barcode system to unlock resales on other platforms

Scalpers have used a security researcher’s findings to reverse-engineer “nontransferable” digital tickets from Ticketmaster and AXS, allowing transfers outside their apps. The workaround was revealed in a lawsuit AXS filed in May against third-party brokers adopting the practice, according to 404 Media, which first reported the news.

The saga began in February when an anonymous security researcher, going by the pseudonym Conduition, published technical details about how Ticketmaster generates its electronic tickets. If you aren’t already familiar with how modern e-ticketing systems work, Ticketmaster and AXS lock ticket resales inside their platforms, preventing transfers on third-party services like SeatGeek and StubHub. (For higher-priority events, they often take it a step further by prohibiting transfers to other accounts on the same platform.)

Although the companies claim the practice is strictly a security measure, it also conveniently allows them to control how and when their tickets are resold. (Yay, capitalism?)

Side-by-side phone screenshots of the Ticketmaster app showing event barcodes.
Ticketmaster

Ticketmaster and AXS create their “nontransferable” tickets using rotating barcodes that change every few seconds, preventing working screenshots or printouts. On the back end, it uses similar underlying tech similar to two-factor authentication apps. In addition, the codes are only generated shortly before an event starts, limiting the window for sharing them outside the apps. Without interference from outside parties, the platforms get to lock ticket buyers into their own resale services, giving them vertical control of the entire ecosystem.

That’s where the hackers come in. Using Conduition’s published findings, they extracted the platforms’ secret tokens that generate new tickets, using an Android phone with its Chrome browser connected to Chrome DevTools on a desktop PC. Using the tokens, they create a parallel ticketing infrastructure that regenerates genuine barcodes on other platforms, allowing them to sell working tickets on platforms Ticketmaster and AXS don’t allow. Online reports claim the parallel tickets often work at the gates.

According to 404 Media, AXS’ lawsuit accuses the defendants of selling “counterfeit” tickets (even though they usually work) to “unsuspecting customers.” The court documents allegedly describe the parallel tickets as “created, in whole or in part by one or more of the Defendants illicitly accessing and then mimicking, emulating, or copying tickets from the AXS Platform.”

AXS’ lawsuit claims the company doesn’t know how the hackers are doing it. The promise of essentially jailbreaking Ticketmaster is so lucrative that several brokers have reportedly tried hiring Conduition to help them build their own parallel ticket-generating platforms. Services already operating on the researcher’s findings go by names like Secure.Tickets, Amosa App, Virtual Barcode Distribution and Verified-Ticket.com.

404 Media’s entire story is worth reading. More technically minded folks may take an interest in Conduition’s earlier findings, which illustrate what the ticketing behemoths are doing on their back ends to keep the entire ecosystems in their clutches.

This article originally appeared on Engadget at https://www.engadget.com/hackers-reverse-engineer-ticketmasters-barcode-system-to-unlock-resales-on-other-platforms-194826061.html?src=rss

Early Prime Day deal discounts the Apple Watch Series 9 to $300

An early Prime Day deal has the Apple Watch Series 9 for $100 off. Several color options are available for Apple’s latest model, Engadget’s pick for the best overall smartwatch. The sale brings the Apple Watch down to a record low of $300.

The Apple Watch Series 9 adds Double Tap, a gesture for hands-free controls. With the feature activated, tapping your index finger and thumb together twice can unleash shortcuts for scrolling through widgets, controlling music tracks and more. Great for when you’re holding something like a dog leash or bag of groceries, Double Tap will get more valuable in watchOS 11, as Apple is giving third-party developers an API to customize what the gesture does in individual apps.

Not much has changed on the watch’s outside from its predecessor, but there are other improvements on the inside. That starts with a new S9 SiP that enables Double Tap, on-device Siri processing (great for privacy and when you’re offline) and zippier navigation of watchOS. It also speeds up Siri’s Raise to Speak feature by capturing a rolling two-second audio buffer to understand your requests faster.

The chip also includes a new second-generation ultra-wideband (UWB) chip, also found in the iPhone 15 series. It unlocks a new precision interface for pinging your paired phone if you aren’t sure where it is: The watch will show how many feet away it is as it guides you to the buried (in a couch cushion) treasure.

The Apple Watch Series 9 has a broader range of brightness, reaching a maximum of 2,000 nits (double its predecessor) and a minimum of 1 nit. This can help the watch emit just the right amount for a wider variety of lighting conditions.

The $300 price for Amazon Prime Day is for the 41mm case, the smaller of the two. But the 45mm model is only $330 (usually $429). Not every color is on sale, and some require you to click a “clip coupon” box, so look closely at prices on the product page before checking out.

Your Prime Day Shopping Guide: See all of our Prime Day coverage. Shop the best Prime Day deals on Yahoo Life. Follow Engadget for Prime Day tech deals. Hear from Autoblog’s experts on the best Amazon Prime Day deals for your car, garage, and home, and find Prime Day sales to shop on AOL, handpicked just for you.

This article originally appeared on Engadget at https://www.engadget.com/early-prime-day-deal-discounts-the-apple-watch-series-9-to-300-164458596.html?src=rss

Samsung Unpacked 2024: How to watch Samsung unveil the Galaxy Ring, Galaxy Z Fold and more

Samsung’s summer event is nearly here. Unpacked 2024 will stream live on Wednesday, July 10, at 9AM ET. You can watch it on Samsung’s YouTube channel, Newsroom website and homepage.

The company is holding the shindig in Paris ahead of the Olympics, kicking off there later this month. Perhaps it wants to set the tone for a fashion tie-in with its Galaxy Ring launch. Samsung has already shown what it looks like, and the company wrote in a court filing that it plans to start shipping the ring “in or around August.”

Foldables are expected to be a marquee attraction, with the Galaxy Fold 6 and Galaxy Z Flip 6 rumored to feature heavily at the event. Their updates could be minor, as alleged leaks suggest the Z Flip 6 will have a boosted battery, RAM option and a new Snapdragon chip. Similar iterative update rumors have floated around for the flagship Galaxy Z Fold 6.

The Galaxy Watch 7 is also rumored to be on tap, with better performance and power efficiency. The Galaxy Watch Ultra could be a beefy wearable with a dial. Meanwhile, the Galaxy Buds 3 and Galaxy Buds 3 Pro could make an appearance with richer audio, longer battery life and adaptive noise control in the high-end model.

The tech world’s current trajectory makes new AI features practically inevitable at the showcase. Samsung launched new AI tools with its Galaxy S24 series in January, and it sounds like a safe bet to expect more on Wednesday.

For more on the event, you can check out Engadget’s Samsung Unpacked 2024 in-depth rumor roundup.

This article originally appeared on Engadget at https://www.engadget.com/samsung-unpacked-2024-how-to-watch-samsung-unveil-the-galaxy-ring-galaxy-z-fold-and-more-141053068.html?src=rss

Amazon pulls the plug on the business version of its Astro robot

After less than eight months, Amazon has discontinued the business version of its Astro security robot. GeekWire reported on Wednesday that despite being “fully committed” to its home robotics division, the company has discontinued the higher-end model that doubled as a security guard for spaces as large as 5,000 square feet.

Amazon launched Astro for Business in November 2023, pitching it as a workplace security robot. The $2,350 screen-on-wheels had an HD periscope and a tangled web of subscription types and tiers, including Ring Protect Pro, Astro Security and Virtual Security Guard memberships. Suddenly, only lasting about eight months doesn’t sound so surprising.

An Amazon spokesperson told GeekWire that it hasn’t laid people off because of Astro for Business’ demise, and the company plans to divert resources into its home robotics work. The consumer version of Astro, launched in 2021, is still available (invite-only) for $1,600. Panos Panay, the former Microsoft Surface (and much more) guru, joined the company to head up its Devices & Services division last year, which includes consumer robotics work.

Although Astro’s home version isn’t a full-fledged security guard replacement, it can patrol your home and alert you if it sees someone it doesn’t recognize or hears breaking glass or alarms. It can also do things of sketchier value, like follow you around with music, deliver messages to other people and set timers — most of which can be duplicated by devices that cost much less.

This article originally appeared on Engadget at https://www.engadget.com/amazon-pulls-the-plug-on-the-business-version-of-its-astro-robot-193907015.html?src=rss

Prime Day deals have already discounted our favorite JLab wireless earbuds to only $20

Amazon has Engadget’s favorite pair of budget running headphones on sale for 33 percent off. The JLab Go Air Sport surprised us with its combination of affordability, sound quality and battery life. The hook-style earphones are only $20 when you click a $10-off coupon.

The JLab Go Air Sport adopts the style of workout headphones with flexible hooks that wrap around the outside of your ears. It makes them more comfortable and can help stabilize them during runs, aerobics or other fitness routines with lots of quick or jerky movements.

Although you won’t get sound quality equivalent to high-end models that cost hundreds of dollars, we found them to sound much better than expected (a pleasant surprise for this price range). They have three EQ modes (Signature, Balanced and Bass Boost), which you can cycle through on the device — no need to mess with an app.

The JLab Go Air Sport is IP55-rated for water and dust resistance, so they should be fine if you get caught in the rain.

The JLab earphones have a solid eight hours of playtime on the headphones themselves, and the charging adds another 24 hours. However, one of our biggest gripes is that they have a bulky case with a USB-A cable instead of USB-C. But at this price, that’s a relatively minor gripe.

Your Prime Day Shopping Guide: See all of our Prime Day coverage. Shop the best Prime Day deals on Yahoo Life. Follow Engadget for Prime Day tech deals. Hear from Autoblog’s experts on the best Amazon Prime Day deals for your car, garage, and home, and find Prime Day sales to shop on AOL, handpicked just for you.

This article originally appeared on Engadget at https://www.engadget.com/prime-day-deals-have-already-discounted-our-favorite-jlab-wireless-earbuds-to-only-20-174550539.html?src=rss

Prime Day deals have already discounted our favorite JLab wireless earbuds to only $20

Amazon has Engadget’s favorite pair of budget running headphones on sale for 33 percent off. The JLab Go Air Sport surprised us with its combination of affordability, sound quality and battery life. The hook-style earphones are only $20 when you click a $10-off coupon.

The JLab Go Air Sport adopts the style of workout headphones with flexible hooks that wrap around the outside of your ears. It makes them more comfortable and can help stabilize them during runs, aerobics or other fitness routines with lots of quick or jerky movements.

Although you won’t get sound quality equivalent to high-end models that cost hundreds of dollars, we found them to sound much better than expected (a pleasant surprise for this price range). They have three EQ modes (Signature, Balanced and Bass Boost), which you can cycle through on the device — no need to mess with an app.

The JLab Go Air Sport is IP55-rated for water and dust resistance, so they should be fine if you get caught in the rain.

The JLab earphones have a solid eight hours of playtime on the headphones themselves, and the charging adds another 24 hours. However, one of our biggest gripes is that they have a bulky case with a USB-A cable instead of USB-C. But at this price, that’s a relatively minor gripe.

Your Prime Day Shopping Guide: See all of our Prime Day coverage. Shop the best Prime Day deals on Yahoo Life. Follow Engadget for Prime Day tech deals. Hear from Autoblog’s experts on the best Amazon Prime Day deals for your car, garage, and home, and find Prime Day sales to shop on AOL, handpicked just for you.

This article originally appeared on Engadget at https://www.engadget.com/prime-day-deals-have-already-discounted-our-favorite-jlab-wireless-earbuds-to-only-20-174550539.html?src=rss

Twilio hack leaves Authy users exposed to text-messaging scams

If you use Authy, update your app immediately. Twilio, the messaging company that owns the two-factor authentication service, confirmed to TechCrunch on Wednesday that hackers breached Twilio and acquired mobile phone numbers for 33 million users.

Twilio published a statement on its website also confirming the hack. “Twilio has detected that threat actors were able to identify data associated with Authy accounts, including phone numbers, due to an unauthenticated endpoint,” the statement reads. “We have taken action to secure this endpoint and no longer allow unauthenticated requests.”

The company added that there was no evidence that the hackers accessed Twilio’s systems or sensitive data. But updating to the latest version of the iOS and Android apps (on any devices you’re running) is critical as they include new security updates.

Twilio stressed that Authy accounts weren’t compromised. However, the hackers (and anyone they share the data with) could “try to use the phone number associated with Authy accounts for phishing and smishing attacks.”

If you aren’t familiar with the term, smishing is the text-message equivalent of phishing. So, if you have an Authy account, be extra cautious about any unexpected texts that appear to come from trusted sources, especially Authy or Twilio.

Rachel Tobac, a social engineering expert and CEO of SocialProof Security, illustrated to TechCrunch what that may look like. “If attackers are able to enumerate a list of user’s phone numbers, then those attackers can pretend to be Authy/Twilio to those users, increasing the believability in a phishing attack to that phone number,” Tobac said.

“We encourage all Authy users to stay diligent and have heightened awareness around the texts they are receiving,” Twilio stressed.

This article originally appeared on Engadget at https://www.engadget.com/twilio-hack-leaves-authy-users-exposed-to-text-messaging-scams-165156650.html?src=rss

Twilio hack leaves Authy users exposed to text-messaging scams

If you use Authy, update your app immediately. Twilio, the messaging company that owns the two-factor authentication service, confirmed to TechCrunch on Wednesday that hackers breached Twilio and acquired mobile phone numbers for 33 million users.

Twilio published a statement on its website also confirming the hack. “Twilio has detected that threat actors were able to identify data associated with Authy accounts, including phone numbers, due to an unauthenticated endpoint,” the statement reads. “We have taken action to secure this endpoint and no longer allow unauthenticated requests.”

The company added that there was no evidence that the hackers accessed Twilio’s systems or sensitive data. But updating to the latest version of the iOS and Android apps (on any devices you’re running) is critical as they include new security updates.

Twilio stressed that Authy accounts weren’t compromised. However, the hackers (and anyone they share the data with) could “try to use the phone number associated with Authy accounts for phishing and smishing attacks.”

If you aren’t familiar with the term, smishing is the text-message equivalent of phishing. So, if you have an Authy account, be extra cautious about any unexpected texts that appear to come from trusted sources, especially Authy or Twilio.

Rachel Tobac, a social engineering expert and CEO of SocialProof Security, illustrated to TechCrunch what that may look like. “If attackers are able to enumerate a list of user’s phone numbers, then those attackers can pretend to be Authy/Twilio to those users, increasing the believability in a phishing attack to that phone number,” Tobac said.

“We encourage all Authy users to stay diligent and have heightened awareness around the texts they are receiving,” Twilio stressed.

This article originally appeared on Engadget at https://www.engadget.com/twilio-hack-leaves-authy-users-exposed-to-text-messaging-scams-165156650.html?src=rss