An anonymous reader writes: Over at DIYPhotography (which we spotted via Daring Fireball), writer and photographer Dunja Djudjic says that she caught Samsung Malaysia using one of her photos to advertise the portrait mode capabilities of the Galaxy A8 Star, a midrange phone that came out over the summer. Djudjic suspects that Samsung licensed the picture from her through the photo site EyeEm, so payment isn't necessarily a problem. But Djudjic does say that the photo wasn't taken with an A8 Star. Instead, it was taken with an (unnamed) DSLR she owns. Samsung doesn't state outright that the photo was taken on the A8 Star, but it's certainly implied by the page it's on, which is meant to illustrate the phone's capabilities. The page doesn't note that the images are simulated, and after showing Djudjic's photo, it proceeds to show the A8's dual rear cameras, implying a connection.

The days of double-digit smartphone growth are over -- and the next decade may start to see smartphone sales decline. A report adds: From roughly 2007 until 2013, the smartphone market grew at an astonishing pace, posting double-digit growth year after year, even during a global recession. They were the good years, the type that would inspire a Scorsese montage: millions and then billions of smartphones going out; billions and then trillions of dollars in rising company valuations; every year new models of phones hitting the market, held up triumphantly at events that were part sales pitch, part tent revival. (To nail the Scorsese effect, imagine "Jumpin' Jack Flash" playing while you think about it.) But just like every Scorsese movie, the party ends. Smartphone growth began to slow starting in 2013 or 2014. In 2016, it was suddenly in the single digits, and in 2017 global smartphone shipments, for the first time, actually declined -- fewer smartphones were sold than in 2017 than in 2016. Every smartphone manufacturer is now facing a world where, at best, they can hope for single-digit growth in smartphone sales -- and many seem to be preparing for a world where they face declines.

An anonymous reader shares a report: Sitting in front of a Converus EyeDetect station, it's impossible not to think of Blade Runner. In the 1982 sci-fi classic, Harrison Ford's rumpled detective identifies artificial humans using a steam-punk Voight-Kampff device that watches their eyes while they answer surreal questions. EyeDetect's questions are less philosophical, and the penalty for failure is less fatal (Ford's character would whip out a gun and shoot). But the basic idea is the same: By capturing imperceptible changes in a participant's eyes -- measuring things like pupil dilation and reaction time -- the device aims to sort deceptive humanoids from genuine ones. It claims to be, in short, a next-generation lie detector. Polygraph tests are a $2 billion industry in the US and, despite their inaccuracy, are widely used to screen candidates for government jobs. Released in 2014 by Converus, a Mark Cuban-funded startup, EyeDetect is pitched by its makers as a faster, cheaper, and more accurate alternative to the notoriously unreliable polygraph. By many measures, EyeDetect appears to be the future of lie detection -- and it's already being used by local and federal agencies to screen job applicants.

Earlier this year, many Android users were shocked to discover that Facebook had been collecting a record of their call and SMS history, as revealed by the company's data download tool. Now, internal emails released by the UK Parliament show how the decision was made internally. From a report: According to the emails, developers knew the data was sensitive, but they still pushed to collect it as a way of expanding Facebook's reach. The emails show Facebook's growth team looking to call log data as a way to improve Facebook's algorithms as well as to locate new contacts through the "People You May Know" feature. Notably, the project manager recognized it as "a pretty high-risk thing to do from a PR perspective," but that risk seems to have been overwhelmed by the potential user growth. Initially, the feature was intended to require users to opt in, typically through an in-app pop-up dialog box. But as developers looked for ways to get users signed up, it became clear that Android's data permissions could be manipulated to automatically enroll users if the new feature was deployed in a certain way.

One of the most galling mysteries in physics is that of the dark matter and dark energy. Scientists believe that together, these could account for up to 95 percent of the total mass in the universe. Now, a researcher at the University of Oxford says a new theory could explain all that "dark phenomena." From a report: The two mysterious dark substances can only be inferred from gravitational effects. Dark matter may be an invisible material, but it exerts a gravitational force on surrounding matter that we can measure. Dark energy is a repulsive force that makes the universe expand at an accelerating rate. The two have always been treated as separate phenomena. But my new study, published in Astronomy and Astrophysics, suggests they may both be part of the same strange concept -- a single, unified "dark fluid" of negative masses. Negative masses are a hypothetical form of matter that would have a type of negative gravity -- repelling all other material around them. Unlike familiar positive mass matter, if a negative mass was pushed, it would accelerate towards you rather than away from you. Negative masses are not a new idea in cosmology. Just like normal matter, negative mass particles would become more spread out as the universe expands -- meaning that their repulsive force would become weaker over time. However, studies have shown that the force driving the accelerating expansion of the universe is relentlessly constant. This inconsistency has previously led researchers to abandon this idea. If a dark fluid exists, it should not thin out over time. In the new study, I propose a modification to Einstein's theory of general relativity to allow negative masses to not only exist, but to be created continuously. "Matter creation" was already included in an early alternative theory to the Big Bang, known as the Steady State model. The main assumption was that (positive mass) matter was continuously created to replenish material as the universe expands. We now know from observational evidence that this is incorrect. However, that doesn't mean that negative mass matter can't be continuously created. I show that this assumed dark fluid is never spread too thinly. Instead it behaves exactly like dark energy.

An anonymous reader writes: The best job for someone is not always in the area where they live. Often times, the job that will pay them most, and make the best use of their skills means moving to another city, state or country. Though making the choice to move can be difficult emotionally, it is extremely good for economic growth. Productive people make productive economies. Unfortunately for the US economy, people don't move they like they used to. According to recently released data from the US Census, only 10.1% of adults moved homes from August 2017 to August 2018. This is the lowest rate of moving since the government began collected data in 1948. The census tracks moves within counties, within states, or across states, and no matter how you look at it, moving rates are way down from just 15 years ago. For example, from 2002 to 2003, 2.8% of Americans moved across state lines. From 2017 to 2018, it was just 1.5%.

Newly public documents reveal just how paranoid Facebook was of its potential competitors and shines new light on some of the company's most important acquisitions. From a report: The internal documents, made public as part of a cache of documents released by UK lawmakers, show just how close an eye the social network was keeping on competitors like WhatsApp and Snapchat, both of which became acquisition targets. The documents, which are labeled "highly confidential," show slides from an internal presentation in 2013 that compares Facebook's reach to competing apps, including WhatsApp and Snapchat. While Facebook and Instagram lead in marketshare, it's clear why Facebook may have viewed Snapchat and WhatsApp as potential threats. [...] Facebook's presentation relied on data from Onavo, the virtual private network (VPN) service which Facebook also acquired several months later. Facebook's use of Onavo, which has been likened to "corporate spyware," has itself been controversial.

In what appears to be a first on the cyber-espionage scene, a nation-state-backed hacking group has used a Google Chrome extension to infect victims and steal passwords and cookies from their browsers. From a report: This is the first time an APT (Advanced Persistent Threat -- an industry term for nation-state hacking groups) has been seen (ab)using a Chrome extension, albeit it's not the first time one has used a browser extension, as the Russian-linked Turla APT previously used a Firefox add-on in 2015. According to a report that's going to be published later today by the ASERT team at Netscout reveals the details of a spear-phishing campaign that's been pushing a malicious Chrome extension since at least May 2018. Hackers used spear-phishing emails to lure victims on websites copied from legitimate academic organizations. These phishing sites, now down, showed a benign PDF document but prevented users from viewing it, redirecting victims to the official Chrome Web Store page to install a (now removed) Chrome extension named Auto Font Manager.

An anonymous reader quotes a report from CBC.ca: According to Markham automotive security specialist Jeff Bates, owner of Lockdown Security, wireless key fobs have a role to play in many recent car thefts, with thieves intercepting and rerouting their signals -- even from inside homes -- to open and steal cars. According to Bates, many of these thieves are using a method called "relay theft." Key fobs are constantly broadcasting a signal that communicates with a specific vehicle, he said, and when it comes into a close enough range, the vehicle will open and start. The thief will bring a device close to the home's door, close to where most keys are sitting, to boost the fob's signal. They leave another device near the vehicle, which receives the signal and opens the car. Many people don't realize it, Bates said, but the thieves don't need the fob in the car to drive it away. Bates says, if you have a key fob that can wirelessly unlock/start your car, you should not keep it by the front door. "If you do live in a house, try to leave your keys either upstairs or ... as far away from the vehicle as possible," he said. "The other thing that you can do is there are products out there that you can put your key fob into," such as a faraday cage -- a box used to block radio signals -- a key pouch, which works similarly, or even a steel box.

On Wednesday, SpaceX successfully sent a Dragon spacecraft to the International Space Station to deliver supplies, but unfortunately it wasn't able to recover the Falcon 9 rocket that launched with it. "The first stage of the Falcon 9 launch vehicle appeared to lose control as it approached Landing Zone 1 at Cape Canaveral," reports CNET. "The live feed from the rocket cut away on the SpaceX webcast, but video from people in the media area at the cape showed the Falcon 9 appearing to regain control before making an unplanned landing in the water rather than ashore at the landing area." From the report: Musk tweeted shortly afterward that cutting the live feed "was a mistake" and shared the full clip of the water landing from the rocket's perspective. The rocket took off from Kennedy Space Center in Florida at 1:16 p.m. local time, a little more than 48 hours after SpaceX sent another Falcon 9 to space from the West Coast on Monday. Dragon's flight to low-Earth orbit was supposed to happen Tuesday, but the mission was pushed back a day to replace some food being sent to the space station for experimental mice living there. SpaceX had planned to land the first stage of the brand-new Block 5 Falcon 9 rocket at a landing zone ashore at Cape Canaveral, but as the rocket descended toward the cape, the live feed from the booster's onboard cameras appeared to show the craft going into some sort of uncontrolled spin. Musk tweeted that the problem was that a "grid fin hydraulic pump stalled, so Falcon landed just out to sea." Musk also tweeted that the pump that failed didn't have a backup because "landing is considered ground safety critical, but not mission critical. Given this event, we will likely add a backup pump & lines."

According to 9to5Google, citing a source familiar with the plan, Google will "soon" announce that it will be shutting down its Google Allo messaging app. "This development comes almost 8 months after Anil Sabharwal, Vice President of Chrome, Comms and Photos at Google, said that the company was 'pausing investment' in Google Allo," reports 9to5Google. It also comes less than a week after 9to5Google reported that Google will be shutting down Google Hangouts for consumers sometime in 2020. Google may delay the news about Allo due to the backlash stemming from the article about Hangouts. From the report: Lately, some of the app's remaining users have complained of bugs and broken functionality: there have been messages not being delivered, features like hearting posts randomly disappearing for some, and the latest stable version has been unable to perform Google Drive restores of chats for several weeks. Meanwhile, essentially the entire Allo team was moved to work on Android Messages and spent the last several months porting over much of Allo's features and functionality -- all leading up to the recent beginnings of evidence that the rollout of Google's RCS 'Chat' initiative is gaining traction.

Ammalgam writes from a report via Business Insider: A credible business school professor who correctly predicted that Amazon would buy Whole Foods now says an AWS spinoff is inevitable. Marketing guru Scott Galloway said Monday at Business Insider's IGNITION conference. The move will also help the company placate regulators who are starting to scrutinize its anticompetitive practices, said Scott Galloway, a professor at New York University's Stern School of Business. After the e-commerce giant spins it off, Amazon Web Services (AWS) "will be one of 10 most valuable companies in the world," he said. "The question then becomes, what happens to the old retail-side of Amazon," Galloway added. Amazon will decide to split off AWS, because it makes a lot of sense and market forces will dictate it, Galloway said. Cloud computing is one of the most important trends taking place in the technology industry, but there's no simple way for investors to profit off it. The three biggest cloud services -- AWS, Microsoft Azure, and Google Cloud -- are all part of much bigger companies whose results only partially reflect their cloud businesses. As the biggest of the bunch, AWS would be a natural to become its own standalone business, he said. And it could be a huge windfall for Amazon shareholders. Depending on how it would be valued and the multiple to earnings that the market would assign to it, AWS by itself could be see a valuation of anywhere from $70 billion to $600 billion, he said. What do you think? Is this possible?

Microsoft is throwing in the towel with Edge and is building a new web browser for Windows 10, this time powered by Chromium, news blog Windows Central reported Monday. From the report: Microsoft's Edge web browser has seen little success since its debut on Windows 10 back in 2015. Built from the ground up with a new rendering engine known as EdgeHTML, Microsoft Edge was designed to be fast, lightweight, and secure, but launched with a plethora of issues which resulted in users rejecting it early on. Edge has since struggled to gain any traction, thanks to its continued instability and lack of mindshare, from users and web developers. Because of this, I'm told that Microsoft is throwing in the towel with EdgeHTML and is instead building a new web browser powered by Chromium, a rendering engine first popularized by Google's Chrome browser. Codenamed Anaheim, this new web browser for Windows 10 will replace Edge as the default browser on the platform. It's unknown at this time if Anaheim will use the Edge brand or a new brand, or if the user interface between Edge and Anaheim is different. One thing is for sure, however; EdgeHTML in Windows 10's default browser is dead.

The 30/70 revenue-sharing split that turned into something of an industry standard is on the ropes. From a report: Epic Games, the developer responsible for the Fortnite phenomenon, is launching its own game store. And like with its asset store for developers, Epic is planning to take a 12-percent cut of revenues. This will leave 88 percent for the people who actually make the games. "As a developer ourselves, we have always wanted a platform with great economics that connects us directly with our players," Sweeney explained in a statement. "Thanks to the success of Fortnite, we now have this and are ready to share it with other developers."

AmiMoJo writes: Later this week, China plans to launch its Chang'e-4 spacecraft to the far side of the lunar surface. The aim is to land a rover on the dark side of the moon for the first time. Blocked from direct communication with the Earth, the lander and rover will depend on China's Queqiao communication satellite launched in May. If the landing is successful, the mission's main job will be to investigate this side of the lunar surface, which is peppered with many small craters. The lander will also conduct the first radio astronomy experiments from the far side of the Moon -- and the first investigations to see whether plants will grow in the low-gravity lunar environment. The ultimate goal of the China National Space Administration (CNSA) is to create a Moon base for future human exploration there, although it has not announced when that might happen. Chang'e-4 will be the country's second craft to 'soft' land on the lunar surface, following Chang'e-3's touchdown in 2013.

According to a new study conducted by Google competitor DuckDuckGo, it does not seem possible to avoid personalization when using Google search, even by logging out of your Google account and using the private browsing "incognito" mode. From a report: DuckDuckGo conducted the study in June of this year, at the height of the US midterm election season. It did so with the ostensible goal of confirming whether Google's search results exacerbate ideological bubbles by feeding you only information you've signaled you want to consume via past behavior and the data collected about you. It's not clear whether that question can be reliably answered with these findings, and it's also obvious DuckDuckGo is a biased source with something to gain by pointing out how flawed Google's approach may be. But the study's findings are nonetheless interesting because they highlight just how much variance there are in Google search results, even when controlling for factors like location.

Andrew Martonik, writing for AndroidCentral: YouTube Music as a service has been around for about three years now, though it really only existed in earnest once the revamped version of the YouTube Music app and dedicated website, as we know it today, launched in May. Whether you look at it as three years or just six months old, one thing is clear: YouTube Music isn't finished yet, is filled with issues and is incredibly frustrating to use on a daily basis considering it costs the industry-standard $10 per month. YouTube Music is so unfinished and lacking features that I question whether Google has any intentions of following through with its vision of replacing Google Play Music entirely. Put simply, I can't believe Google thinks anyone will pay $10 per month for it when all signs point to Google itself not caring about YouTube Music's success. YouTube Music effectively doesn't work with Google Home. [...] YouTube Music also still doesn't work with Android Auto, which is just as inexcusable as not working with Google Home.

Nearly 30 years after Microsoft Office came on the scene, it's in the DNA of just about every productivity app. Even if you use Google's G Suite or Apple's iWork, you're still following the Microsoft model. But that way of thinking about work has gotten a little dusty, and new apps offering a different approach to getting things done are popping up by the day. GeekWire: There's a new war on over the way we work, and the old "office suite" is being reinvented around rapid-fire discussion threads, quick sharing and light, simple interfaces where all the work happens inside a single window. In recent years, the buzzwords in tech have been "AI" and "mobile." Today, you can add "collaboration" to that list -- these days, everybody wants to build Slack-like communication into their apps. For notes and docs, there's Quip, Notejoy, Slite, Zenkit, Notion and Agenda. For spreadsheets, there's Bellevue, Wash.-based Smartsheet, as well as Airtable, Coda and, although it's a very different take on the spreadsheet, Trello. The list goes on seemingly ad infinitum, largely thanks to the relative ease with which developers can launch software in the cloud. "Work has totally changed," said Aaron Levie, the co-founder and CEO of Box, the online storage company that is building its strategy around unifying data and messaging from a dizzying mix of cloud apps. "Employees were lucky to have two, three, five modern applications in the 90s. Now they have almost unlimited ways of being productive."

The National Republican Congressional Committee was hacked this election cycle, it admitted Tuesday afternoon. From a report: "The NRCC can confirm that it was the victim of a cyber intrusion by an unknown entity. The cybersecurity of the Committee's data is paramount, and upon learning of the intrusion, the NRCC immediately launched an internal investigation and notified the FBI, which is now investigating the matter," NRCC spokesman Ian Prior said in a statement. "To protect the integrity of that investigation, the NRCC will offer no further comment on the incident." The major breach included thousands of emails from four senior aides, according to Politico, which first reported the hacks. An outside vendor noticed and alerted the committee in April. The committee then launched an internal investigation and alerted the FBI.

Petri's Brad Sams writes: For more than a year, we have been hearing about Windows Core OS and how it is a modern version of Windows. As Microsoft continues to build out the platform, it's time to take a look at what the secret project actually includes and how the company is positioning the platform. In Microsoft's feverish attempts to shove out insider builds at an impressive rate, the company doesn't always do a great job at scrubbing the finer details from the builds. Because of this, and some help from a couple insiders, I have been able to piece together what Lite is and where it's headed. Microsoft is working on a new version of Windows that may not actually be Windows. It's currently called Lite, based on documentation found in the latest build, and I can confirm that this version of the OS is targeting Chromebooks. In fact, there are markings all over the latest release of the insider builds and SDK that help us understand where this OS is headed. If you have heard this before, it should sound a lot like Windows 10 S and RT; Windows 10 Lite only runs PWAs and UWP apps and strips out everything else. This is finally a truly a lightweight version of Windows that isn't only in the name. This is not a version of the OS that will run in the enterprise or even small business environments and I don't think you will be able to 'buy' the OS either; OEM only may be the way forward.

Kubernetes has become the most popular cloud container orchestration system by far, so it was only a matter of time until its first major security hole was discovered. And the bug, CVE-2018-1002105, aka the Kubernetes privilege escalation flaw, is a doozy. It's a CVSS 9.8 critical security hole. From a report: With a specially crafted network request, any user can establish a connection through the Kubernetes application programming interface (API) server to a backend server. Once established, an attacker can send arbitrary requests over the network connection directly to that backend. Adding insult to injury, these requests are authenticated with the Kubernetes API server's Transport Layer Security (TLS) credentials. Can you say root? I knew you could. Worse still, "In default configurations, all users (authenticated and unauthenticated) are allowed to perform discovery API calls that allow this escalation." So, yes, anyone who knows about this hole can take command of your Kubernetes cluster.

Qualcomm announced its new flagship 855 mobile platform today. While the company didn't release all of the details yet, it stressed that the 855 is "the world's first commercial mobile platform supporting multi-gigabit 5G." From a report: The 855 also features a new multi-core AI engine that promises up to 3x better AI performance compared to its previous mobile platform, as well as specialized computer vision silicon for enhanced computational photography (think something akin to Google's Night Light) and video capture. The company also briefly noted that the new platform has been optimized for gaming. The product name for this is "Snapdragon Elite Gaming," but details remain sparse. Qualcomm also continues to bet on AR (or "extended reality" as the company brands it).

An anonymous reader writes: At its Microsoft Connect(); 2018 virtual event today, Microsoft announced the initial public preview of Visual Studio 2019 -- you can download it now for Windows and Mac. Separately, .NET Core 2.2 has hit general availability and .NET Core 3.0 Preview 1 is also available today. At the event today, Microsoft also made some open-source announcements, as is now common at the company's developer shindigs. Microsoft open-sourced three popular Windows UX frameworks on GitHub: Windows Presentation Foundation (WPF), Windows Forms, and Windows UI XAML Library (WinUI). Additionally, Microsoft announced the expansion of the .NET Foundation's membership model.

schwit1 shares a report from CBS News: Information sharing website Quora has announced a data breach which has exposed "approximately 100 million users'" personal data. The company said in a statement released Monday that it discovered the "unauthorized access to one of our systems by a malicious third party," on Friday. Chief Executive Adam D'Angelo wrote in the blog post that Quora had alerted law enforcement authorities and was "working rapidly to investigate the situation further and take the appropriate steps to prevent such incidents in the future." D'Angelo said Quora was working to alert the affected users of the site, whose names, email addresses and encrypted passwords, and public content such as their questions, answers and comments, were exposed through the breach. Those users would be required to reset their passwords, D'Angelo said.

An anonymous reader quotes a report from MacRumors: Streaming TV services offered by companies like Hulu and AT&T are testing the waters for a new type of advertising called "pause ads." The idea behind pause ads is that instead of facing forced commercial breaks at specified interludes, users would be more accepting of ads that play when they choose to pause a show for a bit while they do something else. Hulu says it plans to launch pause ads in 2019, but not much else was given in the way of details regarding which of its numerous streaming plans will include the new type of commercial. The plan likely to see pause ads is Hulu With Limited Commercials, which interjects a few ads throughout a show's runtime, similar to live TV, but again this hasn't been confirmed. AT&T cited similar interest in pause ads, stating that it also plans to launch technology in 2019 that plays a video when a user pauses a TV show. For both companies, it's unclear exactly how long these ads will run for, and if you'll be able to immediately cancel them out by simply hitting the play button and resuming your TV show. According to Hulu vice president and head of advertising platforms Jeremy Helfand, pause ads will not be home to longform advertisements, but will instead focus on commercials where advertisers "have seconds" to deliver a message effectively. Over the next three years, Hulu expects "more than half" of its advertising revenue to come from these so-called non-disruptive experiences.