google-site-verification=cXrcMGa94PjI5BEhkIFIyc9eZiIwZzNJc4mTXSXtGRM The US government says a vulnerability in the Chirp Systems app allows anyone to remotely control smart home locks - 360WISE MEDIA
Connect with us

Technology

The US government says a vulnerability in the Chirp Systems app allows anyone to remotely control smart home locks

Published

on

A flaw in a smart access control system used in hundreds of U.S. rental homes allows anyone to remotely control any lock in the affected home. However, Chirp Systems, which produces the system, ignored requests to fix the fault.

The US cybersecurity agency CISA followed a safety advisory was made publicly available last week claiming that Chirp-developed phone apps that residents use as an alternative of a key to access their homes “improperly store” hard-coded credentials that might be used to remotely control any Chirp-compatible smart lock.

Applications that use passwords stored in the source code, called hardcoded credentials, pose a security risk because anyone can extract these credentials and use them to perform actions that impersonate the application. In this case, the credentials allowed anyone to remotely lock or unlock a door lock connected to Chirp over the Internet.

In its advisory, CISA said that a successful exploitation of the vulnerability “could allow an attacker to gain control and gain unrestricted physical access” to smart locks connected to the Chirp smart home system. The Cybersecurity Agency gave the vulnerability a severity rating of 9.1 out of a maximum of 10 for its “low attack complexity” and distant exploitability.

The cybersecurity agency said Chirp Systems didn’t respond to either CISA or the researcher who discovered the vulnerability.

said security researcher Matt Brown veteran security journalist Brian Krebs that it notified Chirp of a security issue in March 2021, but the vulnerability stays unpatched.

Chirp Systems is one among a growing variety of real estate technology firms providing rental giants with keyless access control that integrates with smart home technologies. Rental firms are increasingly forcing tenants to allow the installation of smart home equipment in accordance with their lease agreements, nevertheless it is at best unclear who takes responsibility or is held accountable when security issues arise.

Property and rental giant Camden Property Trust signed a deal to introduce Chirp-connected smart locks in 2020 over 50,000 premises in over a hundred facilities. It is unclear whether affected facilities, equivalent to Camden, are aware of the vulnerability or have taken motion. Kim Callahan, a spokesman for Camden, didn’t respond to a request for comment.

Chirp was acquired by property management software giant RealPage in 2020, and RealPage was acquired by private equity giant Thoma Bravo later that 12 months in a deal valued at $10.2 billion. RealPage stands several legal challenges following the allegations, rent-setting software uses secret and proprietary algorithms to help landlords raise the highest possible rents for tenants.

Neither RealPage nor Thoma Bravo have yet confirmed vulnerabilities in the acquired software or said whether or not they plan to notify affected residents of the security risk.

Jennifer Bowcock, a spokeswoman for RealPage, didn’t respond to requests for comment from TechCrunch. Megan Frank, a spokeswoman for Thoma Bravo, also didn’t respond to requests for comment.

This article was originally published on : techcrunch.com

Technology

TechCrunch Minute: Spotify’s paywall move to lyrics puts pressure on free users

Published

on

By

 

Spotify’s slow move to put song lyrics behind a wall of paid services on its music service is as popular as you’d expect. The exact details of the update are still evolving, but at this point we are able to say that Spotify has a brand new feature up its sleeve that goals to encourage free users to upgrade to its paid service.

What’s behind the movement is more vital than what it’s. Sure, it’s a little bit weird that Spotify would want to put publicly available information on the Internet behind a paywall, but the corporate is in a little bit of a bind today. With an early start and attractive pricing, Spotify is big. It does billions in revenuesand helped shake up the music industry for good.

That said, it largely offers paid access to other people’s music. Other firms do the identical. Apple is one in all them. This means Spotify’s pricing power is modest at best. Features just like the annual music review are nice, but they do not allow Spotify to charge more for a mostly music service than, say, Apple Music.

However, since Spotify makes so way more from its paid accounts than from its free users, it might try to get them to upgrade. And there are only so many knobs you may turn. So behind the paywall are the texts. For those of us who already pay, this will not be an issue. However, budget conscious people may feel that their current service is deteriorating for no reason they’ll understand. As long as some people convert to paying users, Spotify will endure the complaints. I want gross profit.

 

This article was originally published on : techcrunch.com
Continue Reading

Technology

Google says Epic’s demands arising from antitrust case win are “unnecessary” and “far beyond the scope” of the ruling

Published

on

By

In a brand new filing, Google is taking a stand against multiple Fortnite developers, Epic Games proposed remedies after the court found that Google had engaged in anti-competitive practices in its Play Store. Following the jury’s decision late last yr, either side presented their arguments about how Google should change its behavior in light of the verdict. For its part, Epic Games issued a crazy list of demands, this included access to the Play Store’s catalog of apps and games for six years, the ability to distribute your personal app store on Google Play without spending a dime, and way more. It also desired to put an end to any deals, incentives and offers, in addition to penalties that will allow the Play Store or Google Play Billing to realize a bonus over its rivals.

The tech giant’s surprising and quick defeat was a historic ruling, especially since Epic Games largely lost an identical antitrust case against Apple that was not heard by a jury. In the Epic-Apple lawsuit, the court ruled that Apple isn’t a monopoly, but agreed that developers should have the option to direct their customers to alternative routes to pay online. The case was appealed to the Supreme Court, which refused to listen to it, leaving the lower court’s ruling in force.

Although the jury in the Google case was convinced that the tech giant had used its market power illegally, it didn’t choose next steps – that is as much as the judge. The recent filing, together with Epic’s proposal, will help inform Judge James Donato during a hearing scheduled for May 23 on what actions must be taken next to examine Google’s power.

Epic Games had it in April specific your demands in the proposed injunction, found here. Overall, Epic wants Google to permit users to download apps from any app store or the Internet, depending on their preferences. He doesn’t want Google to have the option to dam OEMs or carriers or force them to favor Google Play. He also doesn’t want Google to have the option to impose additional fees for routing through the Play Store, which Epic Games also argues is an anti-competitive practice.

The Fortnite creator moreover asked the court to implement other changes, including giving Epic access to the Play Store catalog so it will probably update users’ apps by surprise screens or additional fees. Additionally, Epic wants developers to have the option to inform users learn how to pay for his or her apps and services elsewhere and how much they’ll save by doing so. It desires to eliminate the requirement to make use of Google’s “User Choice Billing” service, which offers only small discounts to developers who process payment transactions themselves, and way more.

Google obviously disagrees on how the court should proceed.

In an announcement, Google’s vp of government affairs and public policy, Wilson White, called Epic’s demands excessive and unnecessary.

“Epic’s demands would harm the privacy, security and overall experience of consumers, developers and device manufacturers,” it said. “Not only does their proposal go far beyond the scope of the recent US trial verdict – which we will be challenging – it is also unnecessary given the agreement we reached last year with state attorneys general from all states and many territories. We will continue to vigorously defend our right to a sustainable business model that allows us to keep people safe, work with developers to innovate and grow their businesses, and maintain a thriving Android ecosystem for all.”

In an injunction filed Thursday in a U.S. District Court in California, Google argues that Epic’s demands threaten users’ security and privacy because they deprive it of the ability to implement trust and security measures regarding the use of third-party app stores. (Apple has used an identical technique to fight regulations opening its App Store to competition, arguing that it’s liable for user privacy and security.)

Additionally, Google says it will be required to inform all third-party app stores, without the user’s consent, what apps the user has installed. This would expose the use of personal apps, including in sensitive areas resembling religion, politics and health, without rules on how this data is used.

The company also said Epic is asking it to remove protections related to sideloading of apps.

And if those arguments fail, Google uses a distinct tactic to indicate that Epic’s proposed remedies are unnecessary since it has already agreed with state attorneys general that it is going to not sign broad exclusivity agreements with developers. Epic’s proposal would further prevent Google from working with developers to deliver exclusive content through Play Store apps, which it says represents a crucial opportunity for developers.

Finally, the AG’s state settlement would allow any app store to compete for space on Android devices, Google argues, but Epic’s proposal would exclude it from the process, limiting competition. It said that without Google’s involvement, competing app stores can be underpriced, impacting OEM margins.

The judge’s upcoming decision on the treatment on this case might be interesting because it is going to set the stage for a way app stores considered monopolies could have to make concessions to permit for more competition. Although Epic lost its battle with Apple, the Justice Department’s case against the iPhone maker remains to be pending, as is its lawsuit against Google over its alleged monopoly on search. The end result of these cases will determine the extent to which the power of the tech giants stays unchecked, given the glaring lack of laws in the US to rein in tech monopolies.

This article was originally published on : techcrunch.com
Continue Reading

Technology

Apple: Pay attention to emerging markets, not falling sales in China

Published

on

By

Apple CFO Luca Maestri allayed investor concerns about an 8% revenue decline in China, noting that sales in other emerging markets are rising.

“When we start looking at places like India, Saudi Arabia, Mexico, Turkey, Brazil… and Indonesia, the numbers get bigger and bigger and we are very happy because these are markets where our market share is (currently) low” – Maestri said Thursday during Apple’s second-quarter earnings call.

Revenue in China fell to $16.37 billion in the second quarter

“Populations are large and growing, and our products are really making great progress in these markets,” Maestri continued. “The level of interest in the brand is very high.”

One thing, Maestri says, might be verified: Populations in emerging markets are in fact large and growing. However, available data shows that Apple’s growth in these regions is not as rosy as the manager tried to paint.

Net sales in the Americas – which incorporates places like Brazil and Mexico – fell barely year-over-year from $37.8 billion to $37.3 billion, the info showed. Apple Q2 2024 Report. Sales in the “rest of Asia-Pacific,” which incorporates emerging markets corresponding to India and Vietnam, fell 17% from $8.1 billion in the second quarter of 2023 to $6.7 billion as of March 31.

To play devil’s advocate, Apple’s declining sales in these regions can have more to do with pricing than product hype.

Maestri noted that Apple has introduced several financing solutions and trade-in programs that “lower the affordability threshold” in order that customers should purchase high-end products.

“This is very valuable to us in developed markets, but especially in emerging markets where affordability issues are more pronounced,” Maestri said.

However, pointing to a glimmer of hope in emerging markets may not be enough to reassure investors. China is Apple’s third-largest market and has grow to be a battleground for fierce competition with dominant domestic firms corresponding to Oppo and Xiaomi. According to counterpoint researchHuwaei has seen a sea change in the country after being completely sidelined by US sanctions. The company’s phone sales were up nearly 70% from a 12 months earlier, while Apple’s sales were down 19%. In September 2023, Beijing imposed a ban on using iPhones for presidency officials in the workplace, echoing U.S. actions against Huawei.

China and emerging markets weren’t the one declines in Apple’s balance sheet this quarter. The company also saw a ten% decline in iPhone sales across all markets. Apple’s slow adoption of artificial intelligence compared to competitors like Google and Microsoft also potentially played a job in slowing iPhone sales.

Despite unimpressive hardware numbers, Apple managed to beat Wall Street expectations. He also called for a rise in the corporate’s shares greater than 10% in after-hours trading, driven by each growth in service revenues and large $110 billion in share repurchases, a jump from last 12 months’s $90 billion purchase.

Investors on the decision tried to get Maestri and Apple CEO Tim Cook to reveal additional details concerning the upcoming generative artificial intelligence launches that Apple has been teasing over the past few months, however the executives only revealed that announcements were imminent.

We’ll be following Apple’s Global Developer Conference closely for more news.

This article was originally published on : techcrunch.com
Continue Reading
Advertisement

OUR NEWSLETTER

Subscribe Us To Receive Our Latest News Directly In Your Inbox!

We don’t spam! Read our privacy policy for more info.

Trending