The investigative news "I-Team" of a local TV station in Washington D.C. drove around with "a leading mobile security expert" -- and discovered dozens of StingRay devices mimicking cellphone towers to track phone and intercept calls in Maryland, Northern Virginia, and Washington, D.C. An anonymous reader quotes their report: The I-Team found them in high-profile areas like outside the Trump International Hotel on Pennsylvania Avenue and while driving across the 14th Street bridge into Crystal City... The I-Team's test phones detected 40 potential locations where the spy devices could be operating, while driving around for just a few hours. "I suppose if you spent more time you'd find even more," said D.C. Councilwoman Mary Cheh. "I have bad news for the public: Our privacy isn't what it once was..."

The good news is about half the devices the I-Team found were likely law enforcement investigating crimes or our government using the devices defensively to identify certain cellphone numbers as they approach important locations, said Aaron Turner, a leading mobile security expert... The I-Team got picked up [by StingRay devices] twice off of International Drive, right near the Chinese and Israeli embassies, then got another two hits along Massachusetts Avenue near Romania and Turkey... The phones appeared to remain connected to a fake tower the longest, right near the Russian Embassy.
StringRay devices are also being used in at least 25 states by police departments, according to the ACLU. The devices were authorized by the FCC back in 2011 for "federal, state, local public safety and law enforcement officials only" (and requiring coordination with the FBI).

But back in April the Associated Press reported that "For the first time, the U.S. government has publicly acknowledged the existence in Washington of what appear to be rogue devices that foreign spies and criminals could be using to track individual cellphones and intercept calls and messages... More sophisticated versions can eavesdrop on calls by forcing phones to step down to older, unencrypted 2G wireless technology. Some attempt to plant malware."

Earlier this week, ZDNet shed some light on a company called LocationSmart that is buying your real-time location data from four of the largest U.S. carriers in the United States. The story blew up because a former police sheriff snooped on phone location data without a warrant, according to The New York Times. ZDNet is now reporting that the company "had a bug in its website that allowed anyone to see where a person is located -- without obtaining their consent." An anonymous reader shares an excerpt: "Due to a very elementary bug in the website, you can just skip that consent part and go straight to the location," said Robert Xiao, a PhD. student at the Human-Computer Interaction Institute at Carnegie Mellon University, in a phone call. "The implication of this is that LocationSmart never required consent in the first place," he said. "There seems to be no security oversight here." The "try" website was pulled offline after Xiao privately disclosed the bug to the company, with help from CERT, a public vulnerability database, also at Carnegie Mellon. Xiao said the bug may have exposed nearly every cell phone customer in the U.S. and Canada, some 200 million customers.

The researcher said he started looking at LocationSmart's website following ZDNet's report this week, which followed from a story from The New York Times, which revealed how a former police sheriff snooped on phone location data without a warrant. The sheriff has pleaded not guilty to charges of unlawful surveillance. He said one of the APIs used in the "try" page that allows users to try the location feature out was not validating the consent response properly. Xiao said it was "trivially easy" to skip the part where the API sends the text message to the user to obtain their consent. "It's a surprisingly simple bug," he said.

OnePlus has launched their newest flagship smartphone today at an event in London. The OnePlus 6, as it is called, features a 6.28-inch 2280x1080 display with 19:9 aspect ratio and notch, Snapdragon 845 octa-core processor with up to 8GB of RAM, 16- and 20-megapixel rear-facing cameras, 3,330mAh battery, 3.5mm headphone jack, and Android 8.1 Oreo running out of the box with support for Android P coming soon. Strangely, the phone features a glass build construction but no support for wireless charging. OnePlus claims the glass back will be better for transmitting radio waves, but it's likely included in preparation for the OnePlus 6T, which will likely launch several months later and include wireless charging. PhoneDog reports: Around on the back of the OnePlus 6 is a vertically stacked dual rear camera setup that's now in the center of the phone for symmetry. There's a 16MP camera with Sony IMX 519 sensor, f/1.7 aperture, and support for optical image stabilization and electronic image stabilization, as well as a 20MP camera with Sony IMD 376K sensor and f/1.7 aperture. Also included are portrait mode and slow-motion 480fps video capture features.

The body of the OnePlus 6 is made of Gorilla Glass 5, which OnePlus says will be better for transmitting radio waves. Rounding out the OP6's spec list is a 16MP front-facing camera, NFC, Bluetooth 5.0, USB-C, an alert slider, and a 3.5mm headphone jack. On the security side of things, there's a rear fingerprint reader and face unlock, and when it comes to wireless capabilities, the OnePlus 6 supports 40 global LTE bands as well as 4x4 MIMO for speeds up to 1Gbps. The OnePlus 6 will be available on May 22 with the following prices: 6GB/64GB: $529; 8GB/128GB: $579; 8GB/256GB: $629.

On Thursday, a federal appeals court ruled that U.S. border agents need some sort of reason to believe a traveler has committed a crime before searching their cellphone. Slashdot reader Wrath0fb0b shares an analysis via Reason, written by Fourth Amendment scholar Orin Kerr: Traditionally, searches at the border don't require any suspicion on the theory that the government has a strong sovereign interest in regulating what enters and exits the country. But there is caselaw indicating that some border searches are so invasive that they do require some kind of suspicion. In the new case, Kolsuz (PDF), the Fourth Circuit agrees with the Ninth Circuit that at least some suspicion is required for a forensic search of a cell phone seized at the border. This is important for three reasons. First, the Fourth Circuit requires suspicion for forensic searches of cell phones seized at the border. Second, it clarifies significantly the forensic/manual distinction, which has always been pretty uncertain to me. Third, it leaves open that some suspicion may be required for manual searches, too.

But wait, that's not all. In fact, I don't think it's the most important part of the opinion. The most important part of the opinion comes in a different section, where the Fourth Circuit adds what seems to be a new and important limit on the border search exception: a case-by-case nexus requirement to the government interests that justify the border search exception. Maybe I'm misreading this passage, but it strikes me as doing something quite new and significant. It scrutinizes the border search that occurred to see if the government's cause for searching in this particular case satisfied "a 'nexus' requirement" of showing sufficient connection between the search and "the rationale for the border search exception," requiring a link between the "predicate for the search and the rationale for the border exception." In other words, the Fourth Circuit appears to be requiring the government to identify the border-search-related interest justifying that particular search in order to rely on the border search exception. "The analysis is interesting throughout, and it would be a fairly large limitation on digital searches conducted at the border, both in requiring some articulable suspicion for digital searches and in the requirement to justify the relationship between the search and the border inspection," writes Wrath0fb0b.

An anonymous reader quotes a report from The Daily Beast: Securus Technologies' programs are used in thousands of prisons and detention centers nationwide to track calls to inmates, but the company's offerings are also capable of tracking and geolocating people's cellphones without any warrant or oversight, The New York Times reports. Securus obtains location information though data from major cellphone providers the same way marketers do. It also advertises the technology to law-enforcement agencies as a tool to find murder suspects, missing people, and those at-large -- but the feature can easily be abused for access to millions of cellphone users.

One Missouri sheriff used the service at least 11 times between 2014 and 2017, and secretly tracked state highway patrol members and a judge, prosecutors said. While the company said it "required customers to upload a legal document" to certify the location lookup, the Federal Communications Commission claims Securus did not "conduct any review of surveillance requests" -- giving law enforcement tracking power without verification of approval or oversight.

The volume of pesky robocalls -- and their scams -- have skyrocketed in recent years, reaching an estimated 3.4 billion in April. [Editor's note: the link may be paywalled; alternative source.] From a report: In an age when cellphones have become extensions of our bodies, robocallers now follow people wherever they go, disrupting business meetings, church services and bedtime stories with their children. Though automated calls have long plagued consumers, the volume has skyrocketed in recent years, reaching an estimated 3.4 billion in April, according to YouMail, which collects and analyzes calls through its robocall blocking service. That's an increase of almost 900 million a month compared with a year ago. Federal lawmakers have noticed the surge. Both the House and Senate held hearings on the issue within the last two weeks, and each chamber has either passed or introduced legislation aimed at curbing abuses.

Federal regulators have also noticed, issuing new rules in November that give phone companies the authority to block certain robocalls. Law enforcement authorities have noticed, too. Just the other week, the New York State attorney general, Eric T. Schneiderman, warned consumers about a scheme targeting people with Chinese last names, in which the caller purports to be from the Chinese Consulate and demands money. Since December, the New York Police Department said, 21 Chinese immigrants had lost a total of $2.5 million.

UnknownSoldier writes: The Oculus Go is finally available for purchase. Amazon is selling the 32GB model for $199, while the 64GB model is selling for $249. As a standalone virtual reality unit, it doesn't require a computer or phone to use. Ironically, you must use a phone for the initial setup. Reviews are out on The Verge and Ars Technica. The TL;DR -- Pros: Inexpensive; Cons: LCD, fixed 72 Hz rate, limited motion tracking. Will 2018 finally will be the year of cheap VR?

An anonymous reader shares an exclusive report from The Verge about Google's next big fix for Android's messaging mess: Instead of bringing a better app to the table, it's trying to change the rules of the texting game, on a global scale. Google has been quietly corralling every major cellphone carrier on the planet into adopting technology to replace SMS. It's going to be called "Chat," and it's based on a standard called the "Universal Profile for Rich Communication Services." SMS is the default that everybody has to fall back to, and so Google's goal is to make that default texting experience on an Android phone as good as other modern messaging apps. As part of that effort, Google says it's "pausing" work on its most recent entry into the messaging space, Allo. It's the sort of "pause" that involves transferring almost the entire team off the project and putting all its resources into another app, Android Messages. Google won't build the iMessage clone that Android fans have clamored for, but it seems to have cajoled the carriers into doing it for them. In order to have some kind of victory in messaging, Google first had to admit defeat. Some of the new features associated with Chat include read receipts, typing indicators, full-resolution images and video, and group texts. It's important to keep in mind that it's a carrier-based service, not a Google service. It won't be end-to-end encrypted, and it will follow the same legal intercept standards. The new Chat services will be switched on in the near future, but ultimately carriers will dictate exactly when Chat will go live. Also, you may be persuaded to upgrade your data plan since Chat messages will be sent with your data plan instead of your SMS plan.

According to 9to5Google, Google's dialer app for Pixel, Nexus, and Android One devices is being upgraded with the ability to send spam calls straight to voicemail. "In 2016, the app began alerting users to potential spam callers by flashing the incoming call screen bright red, with another 'Suspected spam caller' alert just underneath the phone number," reports 9to5Google. The new spam filtering feature goes a step further. From the report: [U]sers will not receive a missed call or voicemail notification, though filtered calls will appear in call history and any voicemails left will still show up in that respective tab. This feature is rolling out worldwide over the next few weeks, but those who join the new beta will have initial access to it. Like its other programs, Google notes that the test allows you to use experimental features before they're released. Google warns that features will still be in-development, might be unstable, and have "a few problems." Meanwhile, users will have the ability to submit in-app feedback throughout the process. Head to the Google Play listing for the Phone app and scroll down to "Become a tester" in order to join.

Zorro shares a report from The Washington Post: When the Trump-affiliated firm Cambridge Analytica obtained data on tens of millions of Facebook users, it used the "Big 5" or "Five Factor Model" personality test to target them with ads designed to influence their votes in the 2016 election. The test scores people on five traits -- openness, conscientiousness, extroversion, agreeableness and neuroticism -- and was used in the election to predict the way a voter would respond to an advertisement. But the Big 5 can predict a lot more -- including how likely you are to even use Facebook or any other social media (Warning: source may be paywalled; alternative source).

That's because the way you score on the test can tell you how likely you are to become addicted to your screen. Research shows that people who score high on neuroticism, low on conscientiousness, and low on agreeableness are more likely to become addicted to social media, video games, instant messaging, or other online stimuli. Studies have also found that extraverts are more likely to become addicted to cellphone use than introverts. Some of the correlations make sense. Less agreeable people may be more apt to immerse themselves in technology because it does not require the kind of friendly interactions that real life does. Neurotic people have been shown to spend more time online because it validates their desire to belong or be part of a group. Conscientious people are less impulsive and therefore more able to control and organize their time. But then it gets complicated. Because according to a new study out of the State University of New York at Binghamton, specific combinations of those personality traits can mitigate or exaggerate one's propensity to addiction.

Earlier this morning, LG announced in a blog post that it will be hosting an event on May 2nd in New York City, where it would unveil its upcoming "LG G7 ThinQ" Android smartphone, with a public event in Korea on May 3rd. While LG has yet to confirm any other details of the phone in this post, we do have a pretty good idea as to what this flagship smartphone will feature thanks to some recently-leaked renders courtesy of Android Headlines. 9to5Google reports: This latest shot of the phone gives us a clear look at the design on the front and back. Up front, there's the same notched display we saw at MWC with questionably thick bezels on the bottom and top. With those bezels and the notch, users are undoubtedly going to be questioning LG's design choices this time around. There's also a glass back that comes in several colors with a fingerprint sensor and vertically oriented camera in tow. According to the report, LG will be launching the phone in Aurora Black, Platinum Grey, Moroccan Blue, Moroccan Blue (Matte), and Raspberry Rose, but it's unclear which markets those colors will be available in.

The New York Times reports of the Indian government's intent to build an identification system of unprecedented scope. The country is reportedly "scanning the fingerprints, eyes and faces of its 1.3 billion residents (alternative source) and connecting the data to everything from welfare benefits to mobile phones." Here's an excerpt from the report: Civil libertarians are horrified, viewing the program, called Aadhaar, as Orwell's Big Brother brought to life. To the government, it's more like "big brother," a term of endearment used by many Indians to address a stranger when asking for help. For other countries, the technology could provide a model for how to track their residents. And for India's top court, the ID system presents unique legal issues that will define what the constitutional right to privacy means in the digital age. The government has made registration mandatory for hundreds of public services and many private ones, from taking school exams to opening bank accounts.

Technology has given governments around the world new tools to monitor their citizens. In China, the government is rolling out ways to use facial recognition and big data to track people, aiming to inject itself further into everyday life. Many countries, including Britain, deploy closed-circuit cameras to monitor their populations. But India's program is in a league of its own, both in the mass collection of biometric data and in the attempt to link it to everything -- traffic tickets, bank accounts, pensions, even meals for undernourished schoolchildren.

For the first time, the U.S. government has publicly acknowledged the existence in Washington of what appear to be rogue devices that foreign spies and criminal could be using to track individual cellphones and intercept calls and messages. From a report: The use of what are known as cellphone-site simulators by foreign powers has long been a concern, but American intelligence and law enforcement agencies -- which use such eavesdropping equipment themselves -- have been silent on the issue until now. In a March 26 letter to Oregon Sen. Ron Wyden, the Department of Homeland Security acknowledged that last year it identified suspected unauthorized cell-site simulators in the nation's capital. The agency said it had not determined the type of devices in use or who might have been operating them. Nor did it say how many it detected or where.

The agency's response, obtained by The Associated Press from Wyden's office, suggests little has been done about such equipment, known popularly as Stingrays after a brand common among U.S. police departments. The Federal Communications Commission, which regulates the nation's airwaves, formed a task force on the subject four years ago, but it never produced a report and no longer meets regularly. The devices work by tricking mobile devices into locking onto them instead of legitimate cell towers, revealing the exact location of a particular cellphone. More sophisticated versions can eavesdrop on calls by forcing phones to step down to older, unencrypted 2G wireless technology. Some attempt to plant malware.

An anonymous reader quotes a report from Quartz: [A] pair of studies by the U.S. National Toxicology Program found "clear evidence" that exposure to radiation caused heart tumors in male rats, and found "some evidence" that it caused tumors in the brains of male rats. (Both are positive results; the NTP uses the labels "clear evidence," "some evidence," "equivocal evidence" and "no evidence" when making conclusions.) Tumors were found in the hearts of female rats, too, but they didn't rise to the level of statistical significance and the results were labeled "equivocal;" in other words, the researchers couldn't be sure the radiation is what caused the tumors. The next scientific step will be to determine what this means for humans. The peer-reviewed papers will be passed on to the U.S. Food and Drug Administration, which is responsible for determining human risk and issuing any guidelines to the public, and the Federal Communications Commission, which develops safety standards for cell phones. The FDA was part of the group of federal agencies who commissioned the studies back in the early 2000s.

Ronald Melnick, the NTP senior toxicologist who designed the studies (and who retired from the agency in 2009), says it's unlikely any future study could conclude with certainty that there is no risk to humans from cell phone use. "I can't see proof of a negative ever arising from future studies," Melnick says. He believes the FDA should put out guidance based on the results of the rat studies. "I would think it would be irresponsible to not put out indications to the public," Melnick says. "Maintain a distance from this device from your children. Don't sleep with your phone near your head. Use wired headsets. This would be something that the agencies could do right now." Quartz notes that when the draft results were published earlier this year, all the results were labeled "equivocal," meaning the study authors felt the data weren't clear enough to determine if the radiation caused the health effects or not. "But the panel of peer reviewers (among them brain and heart pathologists, toxicologists, biostaticians, and engineers) re-evaluated the data and upgraded several of the conclusions to 'some evidence' and 'clear evidence.'"

Within the last few months, AT&T and Verizon have reportedly decided not to sell Huawei's flagship smartphone due to pressure from the U.S. government, with Best Buy opting to stop offering all Huawei products. Despite all of this, though, the company isn't giving up its U.S. ambitions. PhoneDog reports: Richard Yu, CEO of Huawei's consumer business group, says that Huawei will continue working to establish itself in the U.S. and earn consumers' trust. Yu's statement to CNET: "We are committed to the U.S. market and to earning the trust of U.S. consumers by staying focused on delivering world-class products and innovation. We would never compromise that trust." Yu went on to say that the security concerns that the U.S. government has about Huawei are "based on groundless suspicions and are quite frankly unfair." He added that Huawei is open having a discussion with the heads of the CIA, FBI, and NSA so long as it is based on facts.

Verizon is planning on launch a Palm-branded smartphone later this year, an anonymous source told Android Police. The rumor backs up what a TCL executive said last August, when they confirmed that the company would launch a Palm phone this year. From the report: Sadly, we don't know anything about the phone itself at this time (well, we know it runs Android), but the fact that TCL is working with Verizon is telling. The carrier was a longtime Palm partner, selling most of the brand's webOS handsets all the way through the Pre 2. Verizon had intended to carry the ill-fated Pre 3, but the phone was cancelled by Palm's then-buyer HP before it could be released in the U.S. TCL acquired the rights to the Palm name back in 2015, and it's starting to get something of a reputation for reviving dead and dying brands: the Chinese firm manufactures BlackBerry handsets, which have received a surprising amount of attention in the mainstream press.

Wednesday police in Austin, Texas finally located the "serial bomber" believed to be responsible for six package bombs which killed two people over the last three weeks. "The operation was aided by different uses of technology, including surveillance cameras and cell phone triangulation." An anonymous reader shares this article: The suspect, who has been identified as 24-year-old Mark Anthony Conditt, was killed near the motel he was traced to thanks to surveillance footage from a Federal Express drop-off store, The Austin American-Stateman reported. The authorities were able to gather information after police noticed the subject shipped an explosive device from a Sunset Valley FedEx store, a suburb approximately 25 minutes away from Austin. The evidence included the security footage from the store, as well as store receipts obtained showing suspicious transactions. The authorities were also able to look at the individual's Google search history, the Statesman noted, which gave them further insight into his dealings...

The authorities were also able to use cell phone triangulation technology, which provides a cell phone's location data via information collected from nearby cell towers... The phone's GPS capabilities can track the phone within 5 to 10 feet and can also provide "historical" or "prospective" location information. It can also "ping" the phone, forcing it to reveal its exact location... As cell phone companies store this type of data, law enforcement authorities must request it via the appropriate court processes.
"Authorities in Austin were able to use this technology to trace the suspect to a hotel in Williamson County."

capedgirardeau shares a report from Digital Journal: Researchers with the renowned Ramazzini Institute (RI) in Italy announce that a large-scale, lifetime study (PDF) of lab animals exposed to environmental levels of cell tower radiation developed cancer. The RI study also found increases in malignant brain (glial) tumors in female rats and precancerous conditions including Schwann cells hyperplasia in both male and female rats. A study of much higher levels of cell phone radiofrequency (RF) radiation, from the U.S. National Toxicology Program (NTP), has also reported finding the same unusual cancer called Schwannoma of the heart in male rats treated at the highest dose.

The Ramazzini study exposed 2448 Sprague-Dawley rats from prenatal life until their natural death to "environmental" cell tower radiation for 19 hours per day (1.8 GHz GSM radiofrequency radiation (RFR) of 5, 25 and 50 V/m). RI exposures mimicked base station emissions like those from cell tower antennas, and exposure levels were far less than those used in the NTP studies of cell phone radiation. "All of the exposures used in the Ramazzini study were below the U.S. FCC limits. These are permissible exposures according the FCC. In other words, a person can legally be exposed to this level of radiation. Yet cancers occurred in these animals at these legally permitted levels. The Ramazzini findings are consistent with the NTP study demonstrating these effects are a reproducible finding," explained Ronald Melnick PhD, formerly the Senior NIH toxicologist who led the design of the NTP study on cell phone radiation now a Senior Science Advisor to Environmental Health Trust (EHT). "Governments need to strengthen regulations to protect the public from these harmful non-thermal exposures."

According to the FCC, there are only about 100,000 phone booths left in the United States, and about a fifth of those are in New York. The number has decreased rapidly over the last couple decades as cellphones have been adopted by 95% of Americans. CNN reports of how these remaining pay phones still remain a steady business for some of the 1,100 companies operating them across the country: Pay phone providers reported $286 million in revenue in 2015, according to the most recent FCC report. They can still be profitable, particularly in places where there isn't cell phone or landline coverage, said Tom Keane, president of Pacific Telemanagement Services. Keane's company operates 20,000 pay phones around the country. "We have phones in Yosemite Valley that are extremely busy when there's not snow on the ground," he said. Victor Rollo said he is still making money off his 170 phones in the San Diego area. Rollo declined to say how much, but he believes pay phones are a lifeline for people who don't have other options and are valuable during emergencies or natural disasters. Rollo says he evaluates how many calls are made on the phones every month, how far away they are from each other, and how much his expenses are per month to determine whether to keep them in the ground. Phones in hospitals and along the border, where cell coverage is weak, are some of his most profitable ones.

hyperclocker shares a report from BGR: Samsung announced on Wednesday that it is partnering with uBreakiFix to bring same-day, in-person phone repairs to Galaxy device owners across the United States. Starting on March 15th, Samsung customers will be able to bring their phones to any of more than 300 uBreakiFix service locations and have their devices repaired on the spot and usually within two hours or less. Samsung plans to expand the program throughout 2018 as well. Galaxy owners will have the option to either schedule an appointment at a uBreakiFix location, or just drop the phone off without calling ahead. Samsung assures customers that all uBreakiFix repair centers will have genuine Samsung parts, proprietary Samsung tools for the repairs, and conduct repairs by Samsung certified pros.