May 202013
 

Google Glass: Privacy, policy violation worries arise with wearable gadget

New York Newsday
by Newsday Wires
May 19, 2013

 

Photo credit: AP | Google co-rounder Sergey Brin wears Google Glass glasses at an announcement for the Breakthrough Prize in Life Sciences at Genentech Hall on UCSF’s Mission Bay campus in San Francisco. (Feb. 20, 2013)

Photo credit: AP | Google co-rounder Sergey Brin wears Google Glass glasses at an announcement for the Breakthrough Prize in Life Sciences at Genentech Hall on UCSF’s Mission Bay campus in San Francisco. (Feb. 20, 2013)

 

Google staged four discussions expounding on the finer points of its “Glass” wearable computer during this week’s developer conference. Missing from the agenda, however, was a session on etiquette when using the recording-capable gadget, which some attendees faithfully wore everywhere – including to the crowded bathrooms.

Google Glass, a cross between a mobile computer and eyeglasses that can both record video and surf the Internet, is now available to a select few but is already among the year’s most buzz-worthy new gadgets. The device has geeks all aflutter but is unnerving everyone from lawmakers to casino operators worried about the potential for hitherto unimagined privacy and policy violations.

“I had a friend and we’re sitting at dinner and about 30 minutes into it she said, ‘You know those things freak me out,’” said Allen Firstenberg, a technology consultant at the Google developers conference. He has been wearing Glass for about a week but offered to take them off for the comfort of his dinner companion.

On another occasion, Firstenberg admitted to walking into a bathroom wearing his Glass without realizing it.

“Most of the day I totally forget it’s there,” he said.

Many believe wearable computers represent the next big shift in technology, just as smartphones evolved from personal computers. Apple and Samsung are said to be working on other forms of wearable technology.

Some 70 million connected wearable gadgets will be sold in 2017, up from 15 million this year, according to Juniper Research. While the devices are now mainly fitness monitors from brands such as Nike Inc. and Fitbit Inc., Apple has a team working on a watch-like device, people familiar with the company’s plans said in February. Samsung said in March it was also developing a wristwatch.

The test version of Glass looks like a clear pair of eyeglasses with a hefty slab along the right side. Since it began shipping to a couple thousand carefully selected early adopters who paid about $1,500 for the device, it has inspired a bit of ridicule – from a parody on “Saturday Night Live” to a popular blog poking fun at its users.

Other industry experts take a more serious tack, pointing out the potential for misuse because Glass can record video far less conspicuously than a handheld device.

Glass also has won many fans. Google and some early users maintain that privacy fears are overblown. As with traditional video cameras, a tiny light blinks on to let people know when it is recording.

Several Glass wearers at the developers conference said they whip the device off in inappropriate situations, such as in gym locker rooms or work meetings. Michael Evans, a Web developer from Washington, D.C., attending the Google conference, said he removed his Glass when he went to the movies, even though the device would be ill-suited for recording a feature-length film.

“I just figured I don’t want to be the first guy kicked out of the movies,” he said.


NO GLASS ALLOWED

A stamp-sized electronic screen mounted on the left side of a pair of eyeglass frames, Glass can record video, access email, provide turn-by-turn driving directions and retrieve info from the Web by connecting wirelessly to a user’s cell phone.

Google Executive Chairman Eric Schmidt dismissed concerns about the brave new world of wearable computers during a talk at Harvard University’s Kennedy School of Government in April.

“Criticisms are inevitably from people who are afraid of change or who have not figured out that there will be an adaptation of society to it,” he said.

Schmidt acknowledged that there are certain places where Glass will not be appropriate but that he believed new rules of social etiquette will coalesce over time. Firstenberg said it will take time for all sides to get comfortable with the new technology.

“I don’t think we should go into the conversation assuming that Glass is bad,” he said.

Indeed, previous technology innovations such as mobile phones and wireless headsets that initially raised concerns are now subject to tacit rules of etiquette, such as not talking loudly on the bus and turning a ringer off in a meeting.

Still, some have decided to leave nothing to chance.

Casino operator Caesar’s Entertainment recently announced that Glass is not permitted while gambling or when in showrooms, though guests can wear it in other areas. In March, Seattle‘s Five Point Cafe made headlines for becoming the first bar to ban Glass. “Respect our customers privacy as we’d expect them to respect yours,” says a statement on the café’s website.

The California Highway Patrol says there is no law that explicitly forbids a driver from wearing Glass while driving in the state. But according to Officer Elon Steers, if a driver appears to be distracted as a result of the device, an officer can take enforcement action.

PRIVACY TRACK RECORD

Lawmakers are beginning to consider Glass.

On Thursday, eight members of the U.S. Congress sent a letter to Google Chief Executive Larry Page, asking for details about how Glass handles various privacy issues, including whether it is capable of facial recognition.

According to Google, there are no facial recognition technologies built into the device and it has no plans to do so “unless we have strong privacy protections in place.” During one of this week’s conference sessions – an open discussion about Glass – members of the Glass team answered a question about privacy by noting that social implications and etiquette have been a big area of focus during the development of the product, which is still a test version.

Some of the Glass-phobia may stem from Google’s own track record on privacy. In 2010, Google revealed that its fleet of Street View cars, which criss-cross the globe taking panoramic photos for the Google Maps product, also had captured personal information such as emails and web pages that were transmitted over unencrypted home wireless networks.

“The fact that it’s Google offering the service, as opposed to say Brookstone, raises privacy issues,” said Marc Rotenberg, the executive director of the Electronic Privacy Information Center, a non-profit privacy advocacy group, citing Google’s history and its scale in Internet advertising.

Rotenberg says his main concern centers on the stream of data collected by the devices – everything from audio and video to a user’s location data – going to Google’s data centers.

Ryan Calo, a University of Washington law professor who specializes in privacy and technology, said Glass is not very different from other technologies available today, whether it is a smartphone or “spy” pens that secretly record audio.

But Glass is on people’s faces, so it feels different.

“The face is a really intimate place and to have a piece of technology on it is unsettling,” Calo said. “Much as a drone is unsettling because we have some ideas of war.” For all the hand-wringing, some early adopters are sold.

Ryan Warner, who recently graduated from college and who has developed a recipe app for Glass with Evans, said he was surprised by the reaction he got when he went to a bar.

“I was like, ‘I don’t know if I should have it on or not.’ I was kind of in that phase,” he said, “and the bouncer was like, ‘Oh, my god, is that Google Glass?’ He was excited.”

 

Direct Link:  http://newyork.newsday.com/business/technology/google-glass-privacy-policy-violation-worries-arise-with-wearable-gadget-1.5292623

May 202013
 

Google Glass gets apps for Facebook, Twitter, Tumblr and more


NBC News

by Rosa Golijan
May 16, 2013

Google Glass gets apps for Facebook, Twitter, Tumblr and more. (Tony Quintano / NBC News)

Google Glass gets apps for Facebook, Twitter, Tumblr and more. (Tony Quintano / NBC News)

 

While very few folks have access to Google Glass, a wave of apps is already available for the futuristic headsets.

On Thursday, during a developer session at the Google I/O conference in San Francisco, Timothy Jordan, a senior developer advocate at Google, unveiled the latest apps available for Glass. Joining the New York Times and Path apps, there are now apps for Facebook, Twitter, Evernote, Elle, Tumblr and CNN.

With the Twitter app, Glass users can post photos (which are flagged with a “Just shared a photo #throughglass” caption). It’s also possible to keep up on tweets, including mentions and direct messages, and you can also reply, retweet, and favorite.

Google Glass Screenshot

Google Glass Screenshot

 

The CNN app sends news stories and videos to Glass, in user-specified categories, which are updated at user-selected intervals.

Similar to CNN, the Elle app sends the latest news right to Glass. It mainly focuses on headlines, so you can easily add items to reading lists for later (though you can also have articles read aloud by Glass).

The Facebook app is fairly limited, mainly allowing you to share photos directly from Glass to Facebook, along with captions. If you accidentally share an item, the app allows you to quickly remove it right away through Glass.

Google Glass App

Google Glass App

 

The Evernote app seems to revolve around two activities — sending photos or videos to Evernote and sending notes from the Web version of Evernote to Glass, so the content is available for later reference. There’s no way to do any elaborate editing via Glass just yet.

With the Tumblr app, you can get updates just as you might in your Tumblr dashboard. You can adjust how often you get updates and also post your own, including videos, text and photos.

Those who already have Glass can enable these new apps by heading to google.com/myglass.

 

Direct Link:  http://www.nbcnews.com/technology/google-glass-gets-apps-facebook-twitter-tumblr-more-1C9959298

 

 

May 152013
 

Hotel Lock Hack Still Being Used In Burglaries, Months After Lock Firm’s Fix


FORBES

by Andy Greenberg
5/15/2013

 

Photos released by Arizona police of two suspects alleged to have robbed a 27-year-old girl's hotel room using the Onity lock-hacking method at the Coast Hotel in Phoenix.

Photos released by Arizona police of two suspects alleged to have robbed a 27-year-old girl’s hotel room using the Onity lock-hacking method at the Coast Hotel in Phoenix.

 

More than nine months after the hotel lock firm Onity announced a fix for a security flaw that allowed anyone to gain access to millions of hotel rooms in seconds, that lock-hacking technique seems to be thriving–and thieves are still using it to perform dozens of burglaries with hardly a trace.

The latest reports of criminals implementing the Onity lock hack come from Arizona, where police say that hotel rooms have been burglarized across the cities of Phoenix, Scottsdale, Tempe, and Mesa, with between six and nine robberies in each city. In every case, police and hotel staff believe that the burglars used a small device that can be inserted into a data port on the underside of hotel locks to read their memory, access a digital key, and trigger the locks’ opening mechanism in seconds. The targeted hotels include the Holiday Inn, Extended Stay, Quality Inn, Laquinta Inn, Red Roof Inn, Motel Six, Budget Inn, Courtyard By Marriot, and Comfort Inn, according to a Phoenix police spokeperson.

The video below shows two of the suspects entering the Coast Hotel in Phoenix and allegedly leaving with a 27-year old woman’s suitcases. Though the video footage doesn’t capture the accused thieves using the lock-hacking device to open the room’s door, police say that hotels found evidence in its lock’s memory that a device accessed the lock during the brief time when the men were in the building. That hacking device, which was first revealed by the security researcher and software developer Cody Brocious at the Black Hat security conference last year, can be built for less than $50, and spoofs the “portable programmer” used by hotel staff to change locks’ settings and open locks with depleted batteries.

Local police are offering a $1,000 reward for information about the suspects.

In cases at other hotels, thieves stole luggage, TVs, laptops, iPads, the gun and badge of a U.S. marshall, and the full uniform of an airline pilot, along with every other possession he’d left in the Tempe hotel room. “Since all my stuff was cleaned out, I thought I was in the wrong room,” pilot Ahmiel Fried told local news TV station ABC15, who first reported the break-ins. “[I was] not expecting everything to be gone.

 

Photos released by Arizona police of two other suspects believed to have used the hotel lock-hacking devices.

Photos released by Arizona police of two other suspects believed to have used the hotel lock-hacking devices.

 

Phoenix police spokesperson Darren Burch says it’s still not clear how many people are exploiting the vulnerability in Onity’s locks to rob hotels, or even whether the Arizona burglaries were performed by a single group or by individuals working separately. But he warns that while he’s only aware of the Arizona thefts, it’s likely that the lock-hacking technique is being exploited across the country, and that it may be being used more often than it’s being reported. After all, Onity’s keycard locks protect more than four million rooms worldwide. “We’ve just learned about this locally, but it’s my understanding this is happening elsewhere,” Burch says. “This is just the tip of the iceberg.”

In November of last year I reported that the same vulnerability in Onity locks was used to break into a series of hotel rooms in Houston, Texas. In that case, police arrested and charged 27-year-old Matthew Allen Cook with theft. Cook, who still awaits trial, was identified when a stolen HP laptop ended up at a local pawnshop, whose staff helped to identify him.

An Onity lock and (inset) the circuit board Onity has offered to replace for a full reimbursement in many hotels' doors.

An Onity lock and (inset) the circuit board Onity has offered to replace for a full reimbursement in many hotels’ doors.

This latest round of burglaries comes months after Onity became aware of its security issue and began working to fix it. In August, Onity announced it would be releasing temporary plugs to cover its locks data ports, and would follow up with a software update, albeit one that hotel customers themselves would have to pay for. But after the string of Texas break-ins, I obtained memos from Onity to Marriott, InterContinental Hotel Group, and Hyatt in which it agreed to reimburse those major chain hotels for a full circuit-board fix.

Given that some of the Arizona hotels are among the customers whose fixes Onity agreed to cover, it’s not clear how they’ve remained vulnerable. I’ve reached out to Onity for a response and will update this post if I hear from the company.

Onity’s troubles began in July, when Cody Brocious demonstrated to me in a series of New York hotels that his lock-opening trick could work. At the time, Brocious’ technique was unreliable, only opening one of the three hotel room doors we tested. But he soon released the method online, and hackers began to post YouTube videos of themselves adapting and improving the lock-opening device until it worked reliably and could fit into an iPhone case or even a dry-erase marker.

At the time, Brocious argued that his hacking trick was intended to demonstrate Onity’s security vulnerability and force the company to fix it–not to take advantage of the security flaw for criminal purposes. But nearly a year after he first showed me his trick, it’s transformed from a theoretical bug to a very real criminal technique. And unless Onity and its customer hotels take greater care to update their locks, there’s no end to the insecurity in sight.
Direct Link:  http://www.forbes.com/sites/andygreenberg/2013/05/15/hotel-lock-hack-still-being-used-in-burglaries-months-after-lock-firms-fix/

May 152013
 

Car Hacking Threat Prompts New Effort by Auto Regulator


BLOOMBERG

by Angela Greiling-Keane
May 15, 2013

Cars are increasingly controlled electronically rather than mechanically, from acceleration and starting to rolling down the windows.  (Ralph Orlowski / Bloomberg)

Cars are increasingly controlled electronically rather than mechanically, from acceleration and starting to rolling down the windows. (Ralph Orlowski / Bloomberg)

 

Rising hacking risks to drivers as their cars become increasingly powered by and connected to computers have prompted the U.S.’s auto-safety regulator to start a new office focusing on the threat.

“These interconnected electronics systems are creating opportunities to improve vehicle safety and reliability, but are also creating new and different safety and cybersecurity risks,” David Strickland, head of the National Highway Traffic Safety Administration, said at a Senate Commerce Committee hearing today. “We don’t want to be behind the eight ball.”

Cars are increasingly controlled electronically rather than mechanically, from acceleration and starting to rolling down the windows. Photographer: Ralph Orlowski/Bloomberg

A new office within the agency to research vehicle-electronics safety will look at risks to the systems in cars and those that communicate with other vehicles. NHTSA is conducting a pilot project in Ann Arbor, Michigan, of so-called talking-car technology intended to prevent crashes.

Senate Commerce Committee Chairman Jay Rockefeller, a West Virginia Democrat, said while he’s excited about safety improvements through technology, he’s concerned about new risks including hacking.

“As our cars become more connected — to the Internet, to wireless networks, with each other, and with our infrastructure — are they at risk of catastrophic cyber attacks?” Rockefeller asked.

 

Remote Access

Regulators are preparing for the possibility that cars could be accessed remotely in the future, though now a person would need to have physical access to a vehicle to redirect its electronic functions, Strickland said.

“If there is a chance of it happening, we have to address it,” Strickland told reporters after leaving the hearing.

NHTSA, part of the U.S. Transportation Department, was criticized by Congress and safety advocates in 2010 for lacking expertise in automotive electronics during hearings about Toyota Motor Corp. (7203)’s unintended-acceleration recalls.

No electronic cause was found for the incidents after the agency asked NASA and the National Academy of Sciences for help with the probe.

Cars are increasingly controlled electronically rather than mechanically, from acceleration and starting to rolling down the windows. Infotainment systems connect drivers to satellite and wireless networks.

 

100 Million

Today’s typical luxury car has more than 100 million lines of computer code, while software and electronics account for 40 percent of the car’s cost and half of warranty claims, said John D. Lee, a professor at the University of Wisconsin-Madison’s industrial and systems engineering department. Lee also testified at today’s hearing in Washington.

NHTSA and others developing new vehicle-control technologies need consumers to accept them if they’re to penetrate the market and provide safety benefits, Strickland said. If consumers don’t trust the technology, they won’t buy it, he said.

“Cybersecurity is hard,” he told reporters. “Even the best systems in the world can be compromised, as we have seen.”

Strickland said the agency plans to decide by the end of this year whether to regulate crash-imminent braking, a technology that applies brakes automatically if sensors indicate there’s about to be a crash.
Direct Link:  http://www.bloomberg.com/news/2013-05-15/car-hacking-threat-prompts-new-effort-by-auto-regulator.html

May 142013
 

Sexual Assaults in Military Raise Alarm in Washington


The New York Times

by Jennifer Steinhauer
May 7, 2013

Survivors Share Experiences of Sexual Assault in the Military

Survivors Share Experiences of Sexual Assault in the Military

WASHINGTON —

The problem of sexual assault in the military leapt to the forefront in Washington on Tuesday as the Pentagon released a survey estimating that 26,000 people in the armed forces were sexually assaulted last year, up from 19,000 in 2010, and an angry President Obama and Congress demanded action.

 

The study, based on a confidential survey sent to 108,000 active-duty service members, was released two days after the officer in charge of sexual assault prevention programs for the Air Force was arrested and charged with sexual battery for grabbing a woman’s breasts and buttocks in an Arlington, Va., parking lot.

At a White House news conference, Mr. Obama expressed exasperation with the Pentagon’s attempts to bring sexual assault under control.

“The bottom line is, I have no tolerance for this,” Mr. Obama said in answer to a question about the survey. “If we find out somebody’s engaging in this stuff, they’ve got to be held accountable, prosecuted, stripped of their positions, court-martialed, fired, dishonorably discharged. Period.”

The president said he had ordered Defense Secretary Chuck Hagel “to step up our game exponentially” to prevent sex crimes and said he wanted military victims of sexual assault to know that “I’ve got their backs.”

In a separate report made public on Tuesday, the military recorded 3,374 sexual assault reports last year, up from 3,192 in 2011, suggesting that many victims continue not to report the crimes for fear of retribution or a lack of justice under the department’s system for prosecution.

The numbers come as the Pentagon prepares to integrate women formally into what had been all-male domains of combat, making the effective monitoring, policing and prosecuting of sexual misconduct all the more pressing.

Pentagon officials said nearly 26,000 active-duty men and women had responded to the sexual assault survey. Of those, 6.1 percent of women and 1.2 percent of men said they had experienced sexual assault in the past year, which the survey defined as everything from rape to “unwanted sexual touching” of genitalia, breasts, buttocks or inner thighs.

From those percentages, the Pentagon extrapolated that 12,100 of the 203,000 women on active duty and 13,900 of the 1.2 million men on active duty had experienced some form of sexual assault. In 2010, a similar Pentagon survey found that 4.4 percent of active-duty women and fewer than 0.9 percent of active-duty men had experienced sexual assault.

Pentagon officials could not explain the jump in assaults of women, although they believed that more victims, both men and women, were making the choice to come forward. In the general population, about 0.2 percent of American women over age 12 were victims of sexual assault in 2010, the most recent year for which data is available, according to the Justice Department’s Bureau of Justice Statistics.

**********

Honor Betrayed

A two-part series that examined women in the military who were sexually assaulted.

Part I: Attacked at 19 by an Air Force Trainer, and Speaking Out

Part II: Trauma Sets Female Veterans Adrift Back Home

*********

In response to the report, Mr. Hagel said at a news conference on Tuesday that the Pentagon was instituting a new plan that orders the service chiefs to incorporate sexual assault programs into their commands.

“What’s going on is just not acceptable,” Mr. Hagel said. “We will get control of this.”

The report quickly caught fire on Capitol Hill, where women on the Senate Armed Services Committee expressed outrage at two Air Force officers who suggested that they were making progress in ending the problem in their branch.

“If the man in charge for the Air Force in preventing sexual assaults is being alleged to have committed a sexual assault this weekend,” said Senator Kirsten Gillibrand, Democrat of New York, “obviously there’s a failing in training and understanding of what sexual assault is, and how corrosive and damaging it is to good order and discipline.”

Ms. Gillibrand, who nearly shouted as she addressed Michael B. Donley, the secretary of the Air Force, said that the continued pattern of sexual assault was “undermining the credibility of the greatest military force in the world.”

She and some other members of the committee are seeking to have all sex offenders in the military discharged from service, and she would like to replace the current system of adjudicating sexual assault by taking it outside the chain of command. She is particularly focused on decisions, including one made recently by an Air Force senior officer, to reverse guilty verdicts in sexual assault cases with little explanation.

Senator Claire McCaskill, a Missouri Democrat who is also on the Senate Armed Services Committee, is holding up the nomination of that Air Force officer, Lt. Gen. Susan J. Helms, to be vice commander of the Air Force’s Space Command. Ms. McCaskill said she wanted additional information about General Helms’s decision to overturn a jury conviction in a sexual assault case last year.

Gen. Mark A. Welsh III, the Air Force chief of staff, told the committee at the same hearing on Tuesday that he was “appalled” by the conduct and the arrest of Lt. Col. Jeffrey Krusinski, the Air Force officer accused of sexual battery on Sunday. The police say that Colonel Krusinski was drunk when he approached the woman in the parking lot and that the victim was ultimately able to fend him off and call 911.

Mr. Hagel called Mr. Donley on Monday evening to express his “outrage and disgust” over the matter, a Pentagon statement said.

Ms. McCaskill was particularly critical of Colonel Krusinski as well as the Air Force for placing him in charge of sexual assault prevention. “It is hard for me to believe that somebody could be accused of that behavior with a complete stranger and not have anything in his file,” she said.

While Mr. Hagel and others in the military seem open to changes to the system that allows cases to be overturned, they remained chilly to the idea of taking military justice out of the chain of command.

“It is my strong belief that the ultimate authority has to remain within the command structure,” Mr. Hagel said, which is almost certain to meet with objections as the issue continues to come under the scrutiny of the Armed Services Committee.

Under Mr. Hagel’s plan, the military would seek to quickly study and come up with ways to hold commanders more accountable for sexual assault. The chiefs of the Army, Navy and Air Force and the commandant of the Marines have until Nov. 1 to report their findings. Mr. Hagel also directed the services to visually inspect department workplaces, including the service academies, for potentially offensive or degrading materials, by July 1.