Archive for July, 2018

Review: Asus 5Q

Posted in Products with tags on July 18, 2018 by itnerd

Asus seems to have a great smartphone on their hands with the Asus 5Q smartphone. Why? Let’s start with the looks and the feel of the phone. It looks and feels great and it feels like a very quality device. It has a reflective glass back that’s so nice and shiny, but is a fingerprint magnet. Though I do wonder if it will survive a drop. For the record I didn’t test that. The back has two cameras as well as the fingerprint sensor (it also has a face unlock feature if you choose to use that as well). The power switch is on the right with the volume control rocker switch. The bottom has a Micro USB connector. The top has a headphone jack. The left has a triple-card slot which means you have space for all your SIM cards and a microSD card. The screen is a stunning 6-inch FHD screen is a tall 18:9 display that I found that I could see in most lighting conditions.

In terms of what it comes with under the hood, it runs Android 7.1.1 Nougat which is kind of weird seeing as the world has moved on to Android Oreo. The 5Q is powered by a Snapdragon 630 processor with 4GB of RAM and 64GB of storage. This means the phone is pretty capable and you will not complain about speed. You also get Bluetooth 4.2, 802.11ac WiFi and a NFC chip. But the real story is the camera. Or rather all four of them. There’s a 20MP dual front camera and a 16MP dual real camera. That allows you to take some really wide photos. Let me give you an example This is the normal camera:

P_20180718_060512

This is the wide angle camera from the same spot. P_20180718_060515

I was pretty impressed by that. I also took some pictures of planes landing at Pearson Airport in Toronto. Here’s the result of that:

 

P_20180718_060133P_20180718_060312

The camera has an auto mode that works really well. But for the control freaks out there, it has a pro mode that gives you total control over the camera. One thing that I noted was the autofocus was insanely quick. You could see it do its thing, but you cannot get it to make a mistake. That was impressive.

Next up was the video capabilities. It is capable of 4K video, but I limited myself to 1080P to take this video:

The quality of this video from any perspective is great. It’s stable and sharp.

Finally it has 3300mAh battery can last me a whole day’s use, though the phone doesn’t support fast charging. It takes around two hours to charge from zero to 100 percent which is more than acceptable.

So, what do you have to fork over to get all of this? I can find it on Amazon $420 CDN which is a great price for what you get. If you want an Android phone that will help to keep your selfie and Instagram game strong, the Asus 5Q is worth a look as the camera is the high point of this phone, and the rest of the package is pretty impressive too.

StaffConnect Announces Enhancements To Its Employee Engagement Platform & Mobile App

Posted in Commentary with tags on July 18, 2018 by itnerd

StaffConnect today announced a new release of its enterprise employee engagement platform. StaffConnect version 2.2 includes new features and functionality designed to improve employee engagement and job satisfaction by creating an elevated employee experience. The new capabilities ensure that customers have even greater ability to provide an integrated offering for desk and non-desk employees (NDEs) to access all of the resources they need to do their jobs, and to stay in the communication loop-regardless of their location.

Other new features of version 2.2 include  extended integration into enterprise systems to allow enterprises to easily create a central access hub for their employees to access Payroll, HR and other important resources. Additionally, the new version of StaffConnect brings further security enhancements and data privacy in line with GDPR compliance requirements, customer brand expansion into new functions to increase a positive company brand across a distributed workforce, and even more key mobile features for workforce flexibility, improved job satisfaction, productivity and profitability.

In terms of security enhancements, the new version introduces disk level encryption to further protect data at rest, in addition to the encryption in transit already present throughout the platform. Version 2.2 also introduces an information security management system and risk management framework that allows StaffConnect to manage, monitor, audit, and improve its information security in line with actual user best practices. Another enhanced feature is improved transparency for users about how the platform stores and uses data, as well as about users’ individual rights. In addition to updating the privacy notice to users in accessible language, GDPR owner and processes were added to manage subject access requests.

 Employee engagement remains a priority for business leaders, who are looking for more effective ways to solve engagement-related challenges, since research has shown the direct link between the employee experience (EX) and a company’s revenue and profits, as well as expenses. New survey data from StaffConnect revealed that the vast majority of enterprise organizations-nearly three-quarters-have plans to improve EX for their workers in 2018. The study also highlighted the changing nature of the workforce, with many organizations-across a wide range of industries including finance, healthcare, manufacturing, and retail-reporting that a significant proportion of their workforce is not desk-bound. Over one-third of respondents indicated that half or more of their workforce consists of NDEs.

 StaffConnect Mobile App Platform Version 2.2:

New Rest API for Extended Integration Into Customer Systems

  • Combination of online feeds and APIs, create a central resource hub for employees regardless of their location
  • Desk employees and NDEs can access everything they need from HR to online benefits, PTO and payroll, training systems, policies, etc.
  • Enterprise single sign on integration: Support for Active Directory Federation Services, Azure Active Directory and other identity providers

 Further Security Enhancements

  • Improved data privacy to help customers meet GDPR and compliance requirements
  • Disk level encryption to protect data at rest
  • Information security management system and risk management framework to manage, monitor, audit, and improve information security in line with practice
  • Improved transparency to users to ensure awareness of data storage and use
  • GDPR owner and processes to manage subject access requests
  • Updated privacy notice to users

Improved User Experience

  • Rapid adoption levels, ease of use, and speed
  • Enhanced library and survey functionality

Extended Branding Capability

  • Ability to use customer-branded color palettes
  • Helps customers reflect their own culture and brand to improve EX with the brand

New Enhancements to Quiz Feature

  • New level of scoring to Quiz feature strengthens gamification functionality
  • Enhancements include images, themes, and cumulative scoring
  • When combined with library and images as part of the customer’s communication strategy, this can help drive adoption

Post-Read Acknowledgements

  • Useful for important alerts and policies
  • Ensures policies are clearly communicated, understood, and adopted
  • Can facilitate employee safety measures on the job, particularly for NDEs in distributed jobs with health and safety hazards

Additional Features for Web Version

  • Survey feature, Library feature, and Directory now available in StaffConnect web version for desktop users

To learn more, please watch the following videos:

 

 

Google Gets Smacked With $5 Billion Fine

Posted in Commentary with tags on July 18, 2018 by itnerd

Google has been hit with a $5 billion fine from the EU for breaching antitrust laws. The European Commission, which claims the internet giant abused its dominant position by imposing restrictions on Android manufacturers, could have fined it up to 10% of its annual revenue, or $11.1 billion.

Google has announced that it would be appealing against the record fine via a Tweet:

Keep in mind that Google has previously been fined $2.7 billion fine last year for promoting its own shopping comparison service at the top of its search results. So there’s clearly some bad behaviour going on here as far as the EU is concerned.

Health Care Company CarePartners Pwned By Hackers…. And The Hackers Are Speaking Out

Posted in Commentary with tags on July 17, 2018 by itnerd

This is something that you don’t see everyday. CarePartners which is a health care company that provides home medical care services on behalf of the Ontario government have been pwned by hackers. According to the company, the hackers only got access to a small amount of data.

Now I do admit that companies get pwned by hackers all the time sadly. But what’s unusual about this situation is that the hackers are speaking out:

However, a group claiming responsibility for the breach recently contacted CBC News and provided a sample of the data it claims to have accessed, shedding new light on the extent of the breach.

The sample includes thousands of patient medical records with phone numbers and addresses, dates of birth, and health card numbers, as well as detailed medical histories including past conditions, diagnoses, surgical procedures, care plans and medications for patients across the province.

Another document appears to contain more than 140 active patient credit card numbers and expiry dates, many with security codes.

The attackers claimed the sample was a subset of hundreds of thousands of patient records and related materials in their possession dating back to 2010.

“We requested compensation in exchange for telling them how to fix their security issues and for us to not leak data online,” they told CBC News.

CarePartners did not answer questions about the ransom, and it is not clear if or when the data will be posted online.

For the record, CBC was able to verify that the data they got was on the level. Which isn’t good if you’re CarePartners. Then there’s the fact that the company says that they take protecting data seriously. But the hackers say something entirely different.

The attackers told CBC News in an encrypted message that they discovered vulnerable software on CarePartners’ network that had not been updated in two years “by chance,” and were able to exploit those vulnerabilities and weak passwords to remove hundreds of gigabytes “completely unnoticed.”

#Fail. Clearly CarePartners don’t take the security of data seriously based on that.

Now I get why CarePartners might want to minimize the extent of this. But it’s not a workable strategy long term because in Canada there’s strong privacy laws and this sort of thing does get investigated by Canada’s Privacy Commissioner. So the truth will come out eventually and CarePartners will get smacked pretty hard. Thus if I were them, I would just come clean now and work with everyone from the Privacy Commissioner to law enforcement and security firms to address this.

iPhones Targeted With Data Stealing Malware

Posted in Commentary with tags on July 17, 2018 by itnerd

ZDNet reports of a new mobile malware campaign that is “gaining access to iPhones by tricking users to download an open-source mobile device management (MDM) software package.”

Once in control, the unidentified hackers can steal various forms of sensitive information from infected devices, including the phone number, serial number, location, contact details, user’s photos, SMS, and Telegram and WhatsApp chat messages. Thirteen users — all in India — have been been compromised in the attacks, which have been detailed by Cisco Talos. Those infected use a range of iPhone models and are running iOS versions ranging from 10.2.1 to 11.2.6. The campaign has been active since August 2015. The attackers take control by using the MDM package, which can give attackers complete control of the device and the ability to install fake versions of real apps.

Two different MDM services are used in the campaign, enabling system-level control of multiple devices from one location and the ability to install, remove and exfiltrate data from apps. One method of stealing data comes via malicious versions of messaging services like Telegram and WhatsApp being pushed onto the compromised device via fake updates. The apps look legitimate to the user, but malicious code sends information — including messages, photos and contacts — to a central command and control server. Deploying these apps requires a side-loading injection technique, which allows for the ability to ask for additional permissions, execute code and steal information from the original application.

The article refers to a multistep process  to trick users into adding certificates as trusted. Because if your phone trusts a certificate, you can load developer apps directly onto a phone. In short, you’re basically side-loading an app without having to get past the App Store’s restrictions. This illustrates why you should never do things like install apps from unknown sources or jailbreak an iPhone. Sure you don’t get all the cool apps and tweaks that Android users get, but at least you are safe.

The other thing that I note is that older versions of iOS are mentioned. That kind of implies that if you have an up to date version of iOS, this malware may not work as well if at all. That reinforces the fact that you should always update your device with the latest OS to keep yourself safe.

Sonos Beam Now Available

Posted in Commentary with tags on July 17, 2018 by itnerd

Sonos Beam is officially available via www.sonos.com and global retail partners starting today. The $499 CAD/$399 USD Beam combines three products into one – a Sonos smart speaker featuring Amazon Alexa, a sound bar that packs more than enough punch for most rooms, and is the one device you need for all your music and streaming content in the living room. And, following the launch last week, Beam will come ready with AirPlay 2.

Here are a few things to check out:

  • As we developed Beam, we had a few tracks that we used to test and showcase Beam’s clear, immersive sound. Check out Beam’s Spotify playlist, where each track was carefully selected to showcase vocal clarity, spacious sound, or bass. (Playlist also available on Apple Music or Tidal)

Additionally, you can now control Audible on Sonos using voice with Amazon Alexa. Audible launched on Sonos earlier this year with the ability to control your favorite audiobooks in any room of your home from within the Sonos and Audible Apps, and now with voice.

Apple To World: New MacBook Pro Keyboards Are Only For New MacBook Pros

Posted in Commentary with tags on July 17, 2018 by itnerd

Something that is sure to rile up the Apple Fanboys who are victims of #KeyboardGate is this statement from Apple via MacRumors regarding whether the new keyboards that are used in the new MacBook Pros and the ones that apparently have been designed to avoid #KeyboardGate issues can be used in 2016 and 2017 models that have flakey keyboards:

When asked if Apple Stores and Apple Authorized Service Providers will be permitted to replace second-generation keyboards on 2016 and 2017 MacBook Pro models with the new third-generation keyboards, if necessary, Apple said, no, the third-generation keyboards are exclusive to the 2018 MacBook Pro. 

Now to be fair, that can mean two things. It can mean that Apple has quietly done the same tweak to replacement keyboards for the 2016 and 2017 models as the 2018 keyboard may have other differences that keep it from being used in earlier modes. Or Apple is giving those MacBook Pro owners the same keyboards. Which would be dumb. But I can see that happening. The only way that I can think of to settle this issue is for someone like iFixit to get their hands on one of these replacement keyboards and see what the deal is. Because if Apple is simply replacing faulty keyboards with faulty keyboards, it’s going to be in for a world of hurt.

Darktrace Cloud Announced by Darktrace

Posted in Commentary with tags on July 16, 2018 by itnerd

Darktrace has today announced that Darktrace Cloud can protect the next wave of cloud computing models, applications, and devices with its multi-award-winning cyber AI technology. The enhanced capability announced today comes in response to soaring demand for Darktrace Cloud and the accelerated adoption of innovative cloud architectures, such as edge computing and IoT data stored in the cloud.

Over 500 Darktrace customers use Darktrace Cloud to defend cloud environments and SaaS applications including Addivant, Innovating Capital, TruWest Credit Union, and City of Las Vegas.

Darktrace Cloud, initially launched in 2016, uses software-based sensors and application programming interfaces (APIs) to model the pattern of life of users and devices to detect even subtle changes to configurations or unusual movement of data.

Powered by artificial intelligence, Darktrace Cloud analyzes rich data flows within cloud workloads and SaaS applications, and:

  • Learns a dynamic ‘pattern of life’ for every user, device and container
  • Identifies vulnerabilities and emerging cyber-threats
  • Offers autonomous response for fast-moving attacks
  • Provides unprecedented visibility, removing blind spots
  • Integrates with all major cloud and SaaS platforms

For more information, download the Cyber AI and Darktrace Cloud White Paper.Darktrace Cloud Announced by Darktrace

ZTE Is Back In Business In The US

Posted in Commentary with tags on July 16, 2018 by itnerd

The title says it all pretty much. All the Chinese Telco had to do is fork over $400 million in escrow, do a bunch of other things to make the US happy and boom! Business is on again. At least that’s the key point in a statement that the Commerce Department in the US says. But the question is will they stay in business. After all the company was thumbing its nose at sanctions aimed at North Korea and Iran. Plus their gear was thought to have backdoors in them. Which in turn led to the suggestion that nobody use their gear. Thus I have to wonder if  we’ll be back talking about this in six months time or less?

Perhaps Apple Has Quietly Addressed #KeyboardGate

Posted in Commentary with tags on July 14, 2018 by itnerd

Yesterday, I wrote about the possibility that Apple with it’s new quieter keyboard in their brand new MacBook Pro have addressed the issues around #KeyboardGate without admitting to anything. I also was waiting until iFixit tore one down for confirmation (or not) of that. Well, iFixit did just that and here’s what they found:

Apple has cocooned their butterfly switches in a thin, silicone barrier.

This flexible enclosure is quite obviously an ingress-proofing measure to cover up the mechanism from the daily onslaught of microscopic dust. Not—to our eyes—a silencing measure. In fact, Apple has a patent for this exact tech designed to “prevent and/or alleviate contaminant ingress.”

I’m sure that is going to interest the lawyers that are behind the three #KeyboardGate lawsuits that have been filed so far. I say that because it’s pretty clear what Apple has done here. Which is deal with #KeyboardGate without saying I’m sorry or admitting any wrongdoing. Because that’s so typically them. I also wonder if people who are getting replacement keyboards as part of Apple’s service campaign are getting these new ones.

Though there is a part two to this story from iFixit:

Tune in next week as we put this membrane through its dust-proofing paces, tear down the rest of the device, and speculate whether this really is a feature—or a secret bug fix impacting millions of consumers.

That should prove interesting. I’ll be tuning in. So should you.