×
Security

Android Vulnerability Exposes Credentials From Mobile Password Managers (techcrunch.com) 22

An anonymous reader quotes a report from TechCrunch: A number of popular mobile password managers are inadvertently spilling user credentials due to a vulnerability in the autofill functionality of Android apps. The vulnerability, dubbed "AutoSpill," can expose users' saved credentials from mobile password managers by circumventing Android's secure autofill mechanism, according to university researchers at the IIIT Hyderabad, who discovered the vulnerability and presented their research at Black Hat Europe this week. The researchers, Ankit Gangwal, Shubham Singh and Abhijeet Srivastava, found that when an Android app loads a login page in WebView, password managers can get "disoriented" about where they should target the user's login information and instead expose their credentials to the underlying app's native fields, they said. This is because WebView, the preinstalled engine from Google, lets developers display web content in-app without launching a web browser, and an autofill request is generated.

"Let's say you are trying to log into your favorite music app on your mobile device, and you use the option of 'login via Google or Facebook.' The music app will open a Google or Facebook login page inside itself via the WebView," Gangwal explained to TechCrunch prior to their Black Hat presentation on Wednesday. "When the password manager is invoked to autofill the credentials, ideally, it should autofill only into the Google or Facebook page that has been loaded. But we found that the autofill operation could accidentally expose the credentials to the base app." Gangwal notes that the ramifications of this vulnerability, particularly in a scenario where the base app is malicious, are significant. He added: "Even without phishing, any malicious app that asks you to log in via another site, like Google or Facebook, can automatically access sensitive information."

The researchers tested the AutoSpill vulnerability using some of the most popular password managers, including 1Password, LastPass, Keeper and Enpass, on new and up-to-date Android devices. They found that most apps were vulnerable to credential leakage, even with JavaScript injection disabled. When JavaScript injection was enabled, all the password managers were susceptible to their AutoSpill vulnerability. Gangwal says he alerted Google and the affected password managers to the flaw. Gangwal tells TechCrunch that the researchers are now exploring the possibility of an attacker potentially extracting credentials from the app to WebView. The team is also investigating whether the vulnerability can be replicated on iOS.

Businesses

Spotify Cuts 17% Jobs Amid Rising Capital Costs (techcrunch.com) 45

Spotify is eliminating about 1,500 jobs, or about 17% of its workforce, in its third round of layoffs this year as the music streaming giant looks to become "both productive and efficient." From a report: In a note to employees Monday, Spotify founder and chief executive Daniel Ek said right-sizing the workforce is crucial for the company to face the "challenges ahead." He cited the slow economic growth and rising capital costs among reasons for the job cuts, saying the firm took advantage of lower-cost capital in 2020 and 2021 to invest significantly in the business. "I recognize this will impact a number of individuals who have made valuable contributions. To be blunt, many smart, talented and hard-working people will be departing us," he wrote in the note, which the company later published on the blog.
Music

After KISS's Final Show, They'll Become Digital Avatars From Industrial Light & Magic (go.com) 93

Gene Simmons is 74 years old. But as the singer for the classic rock band KISS left the stage after their final show, USA Today reports there was a surprise: in the most on-brand KISS move even by KISS standards, before the quartet likely hit their dressing rooms after disappearing on stage in the blizzard of smoke and confetti that accompanied the set-closing "Rock and Roll All Nite," a message blasted on the video screens: "A new KISS era starts now."

Digital avatars of the band followed, playing their anthem, "God Gave Rock and Roll To You."

ABC News reports: The avatars were created by George Lucas' special-effects company, Industrial Light & Magic, in partnership with Pophouse Entertainment Group, the latter of which was co-founded by ABBA's Björn Ulvaeus. The two companies recently teamed up for the "ABBA Voyage" show in London, in which fans could attend a full concert by the Swedish band — as performed by their digital avatars. Per Sundin, CEO of Pophouse Entertainment, says this new technology allows Kiss to continue their legacy for "eternity." He says the band wasn't on stage during virtual performance because "that's the key thing," of the future-seeking technology. "Kiss could have a concert in three cities in the same night across three different continents. That's what you could do with this."

In order to create their digital avatars, who are depicted as a kind of superhero version of the band, Kiss performed in motion capture suits.

Experimentation with this kind of technology has become increasingly common in certain sections of the music industry. In October K-pop star Mark Tuan partnered with Soul Machines to create an autonomously automated "digital twin" called "Digital Mark." In doing so, Tuan became the first celebrity to attach their likeness to OpenAI's GPT integration, artificial intelligence technology that allows fans to engage in one-on-one conversations with Tuan's avatar. Aespa, the K-pop girl group, frequently perform alongside their digital avatars — the quartet is meant to be viewed as an octet with digital twins. Another girl group, Eternity, is made up entirely of virtual characters — no humans necessary.

Kiss frontman Paul Stanley told ABC News that "The band deserves to live on because the band is bigger than we are."
AI

Amazon Finally Releases Its Own AI-Powered Image Generator (techcrunch.com) 16

During a keynote at its re:Invent conference today, Amazon debuted the Titan Image Generator, which can create new images or customize existing images via a text description. It's now available in preview for AWS customers on Bedrock, Amazon's AI development platform. TechCrunch reports: Amazon says that Titan Image Generator was trained on a "diverse set of datasets" across a "broad range of domains" and can be optionally fine-tuned on custom datasets, and includes built-in mitigations for toxicity and bias. (Barring testing, the jury's out on just how effective those mitigations are, of course.) The company declined to say exactly where those datasets came from however -- and whether it obtained permission from or is compensating all the creators of the images used to train Titan Image Generator. [...] Sivasubramanian did claim onstage, however, that Amazon will protect customers accused of violating copyright with images generated by Titan Image Generator -- in keeping with its AI indemnification policy. That's surely music to the ears of AWS customers worried about regurgitation, or when a generative model spits out a mirror copy of a training example.

Images created with Titan Image Generator will also come with a "tamper-resistant" invisible watermark by default -- an attempt to mitigate the spread of AI-generated misinformation and abuse imagery, Sivasubramanian says. (Deepfakes from the Gaza war and AI-generated child abuse images are the latest illustrations of how major the threat's become.) It's not clear exactly what sort of watermarking technique Amazon's using and which tools beyond Amazon's own API will be able to detect it; we've reached out to Amazon for clarification. Sivasubramanian noted watermarks are a part of the voluntary commitment around AI that Amazon signed with the White House in July.

Businesses

Tech's New Normal: Microcuts Over Growth at All Costs (wsj.com) 78

The tech industry has largely recovered from the downturn, but Silicon Valley learned a long-lasting lesson: how to do more with less. From a report: Amazon, Google, Microsoft and Meta Platforms have been cutting dozens or a few hundred employees at a time as executives keep tight controls on costs, even as their businesses and stock prices have rebounded sharply. The cuts are far smaller than the mass layoffs that reached tens of thousands in late 2022 and early this year. But they suggest a new era for an industry that in years past grew with little restraint, one in which companies are focusing on efficiency and acting more like their corporate peers that emphasize shareholder value and healthy margins.

The launch of the humanlike chatbot ChatGPT late last year served as a bright spot of growth in an industry that was otherwise scaling back. Challenges regarding the technology and calls for regulation remain, but some of the biggest tech companies are starting to make it their priority. There is a reallocation of resources from noncore areas to projects such as AI rather than hiring new people, said Ward, who was previously a director of recruiting at Facebook and the head of recruiting at Pinterest.

Amazon eliminated several hundred roles this month from its Alexa division to maximize its "resources and efforts focused on generative AI," according to an internal memo. The company has also made small cuts in recent weeks to its gaming and music divisions. Facebook's parent, Meta, recently posted its largest quarterly revenue in more than a decade. It laid off 20 people weeks later. Chief Executive Officer Mark Zuckerberg said on an earnings call that the company would continue to operate more efficiently going forward "both because it creates a more disciplined and lean culture, and also because it provides stability to see our long-term initiatives through in a very volatile world."

Music

Spotify To Phase Out Service In Uruguay Following New Copyright Bill (theguardian.com) 36

Laura Snapes reports via The Guardian: Spotify is to phase out its service in Uruguay after the passing of a new music copyright bill requiring "fair and equitable remuneration" for authors, composers, performers, directors and screenwriters. In October, the country's parliament voted on a budget bill that included two new articles: per article 284, social networks and the internet are to be added "as formats for which, if a song is reproduced, the performer is entitled to financial remuneration" -- namely if a link to a song is shared online. Article 285 will put into copyright law the "right to a fair and equitable remuneration" for all "agreements entered into by authors, composers, performers, directors and screenwriters with respect to their faculty of public communication and making available to the public of phonograms and audiovisual recordings."

In response, Spotify said in a statement on November 20 that without changes to the 2023 Rendicion de Cuentas law, the streaming platform "will, unfortunately, begin to phase out its service in Uruguay effective January 1, 2024" and cease trading in the market in February 2024. The Swedish company seeks confirmation on whether additional costs to be paid to musicians are the responsibility of rights holders or the streaming platforms, arguing that the latter means that it would be required "to pay twice for the same music," Music Business Worldwide reports. The statement continued: "Spotify already pays nearly 70% of every dollar it generates from music to the record labels and publishers that own the rights for music, and represent and pay artists and songwriters. Any additional payments would make our business untenable." The platform claimed that it had contributed to a 20% growth in Uruguay's music industry in 2022. That year, the South American nation was the 53rd largest market for music.

Google

A Secret Google Deal Let Spotify Completely Bypass Android's App Store Fees (theverge.com) 22

An anonymous reader quotes a report from The Verge: Music streaming service Spotify struck a seemingly unique and highly generous deal with Google for Android-based payments, according to new testimony in the Epic v. Google trial. On the stand, Google head of global partnerships Don Harrison confirmed Spotify paid a 0 percent commission when users chose to buy subscriptions through Spotify's own system. If the users picked Google as their payment processor, Spotify handed over 4 percent -- dramatically less than Google's more common 15 percent fee. Google fought to keep the Spotify numbers private during its antitrust fight with Epic, saying they could damage negotiations with other app developers who might want more generous rates.

Google's User Choice Billing program, launched in 2022, is typically described as shaving about 4 percent off Google's Play Store commission if developers use their own payment system, bringing down Google's 15 percent subscription service fee to more like 11 percent. That often ends up saving developers little or no money since they must foot the cost of payment processing themselves. And in court, Google has focused on benefits like greater flexibility rather than cost savings. [...] Harrison says Spotify's "unprecedented" popularity was great enough to justify a "bespoke" deal. "If we don't have Spotify working properly across Play services and core services, people will not buy Android phones," Harrison testified. As part of the deal, both parties also agreed to commit $50 million apiece to a "success fund."

Google acknowledged Harrison's testimony in a statement to The Verge. "A small number of developers that invest more directly in Android and Play may have different service fees as part of a broader partnership that includes substantial financial investments and product integrations across different form factors," says spokesperson Dan Jackson. "These key investment partnerships allow us to bring more users to Android and Play by continuously improving the experience for all users and create new opportunities for all developers." Google would not name other developers that have gotten the company to agree to more generous rates. During the trial, we learned that Google offered Netflix a special discounted rate of just 10 percent, but Netflix refused. Netflix no longer offers an in-app purchase option on Android and no longer pays Google anything to distribute its app as a result.

Music

Sonos Teases Plans To Enter Headphones Product Category (macrumors.com) 25

Sonos announced plans to expand into a new "multi-billion dollar" product category next year. Sonos CEO Patrick Spence declined to give specific details, but it's widely expected to be headphones. He said the new product will "complement" current Sonos devices and will "delight customers and drive immediate revenue." MacRumors reports: Spence said that Sonos believes it will generate more than $100 million from new products in 2024, and the new product will account for a "large portion" of this revenue in the second half of the year. There have been rumors for years now that Sonos intends to enter the headphone market with a pair of wireless headphones that could be similar in design to over-ear headphones like the AirPods Max.

Sonos has never confirmed its work on headphones, but a leaked internal memo that was obtained by Bloomberg earlier today confirmed that the company does indeed have a headphone division. [...] Bloomberg in 2019 said that Sonos was targeting a $300 price point and was focusing on features like audio quality and multi-service interoperability, but it has been several years since new details emerged.

Facebook

MediaTek Partners With Meta To Develop Chips For AR Smart Glasses (9to5google.com) 7

During MediaTek's 2023 summit, MediaTek executive Vince Hu announced a new partnership with Meta that would allow it to develop smart glasses capable of augmented reality or mixed reality experiences. 9to5Google reports: As the current generation exists, the Ray-Ban Meta glasses feature a camera and microphone for sending and receiving messages. However, the next generation of Meta smart glasses are likely to have a built-in "viewfinder" display to merge the virtual and physical worlds, allowing users to scan QR codes, read messages, and more. Beyond that, the company wants to bring AR glasses into the fold, which presents a much broader set of challenges. To accomplish this, a few things need to change. AR glasses need to be built for everyday use and optimized to take on an industrial design that looks good but can pack enough tech to ensure a good experience. As it stands, mixed-reality headsets are bulky and take on a large profile. Ideally, Meta's fully AR glasses would be thinner and sleeker.

The new partnership between companies means that MediaTek will help co-develop custom silicon with Meta, built specifically for AR use cases and the glasses. MediaTek brings expertise in developing low-power, high-performance SoCs that can fit within small parameters, like in the frame in a pair of AR glasses. Little to no details were revealed about the upcoming AR glasses, other than directly stating that "MediaTek-powered AR glasses from Meta" would be a thing sometime in the future. Previous leaks position the next generation of smart glasses with a viewfinder as a 2025 release, while a more robust set of AR glasses was referred to as a 2027 product -- if done properly, it would be an incredible product.

Youtube

YouTube Adapts Its Policies For the Coming Surge of AI Videos (techcrunch.com) 20

Sarah Perez reports via TechCrunch: YouTube today announced how it will approach handling AI-created content on its platform with a range of new policies surrounding responsible disclosure as well as new tools for requesting the removal of deepfakes, among other things. The company says that, although it already has policies that prohibit manipulated media, AI necessitated the creation of new policies because of its potential to mislead viewers if they don't know the video has been "altered or synthetically created." One of the changes that will roll out involves the creation of new disclosure requirements for YouTube creators. Now, they'll have to disclose when they've created altered or synthetic content that appears realistic, including videos made with AI tools. For instance, this disclosure would be used if a creator uploads a video that appears to depict a real-world event that never happened, or shows someone saying something they never said or doing something they never did.

It's worth pointing out that this disclosure is limited to content that "appears realistic," and is not a blanket disclosure requirement on all synthetic video made via AI. "We want viewers to have context when they're viewing realistic content, including when AI tools or other synthetic alterations have been used to generate it," YouTube spokesperson Jack Malon told TechCrunch. "This is especially important when content discusses sensitive topics, like elections or ongoing conflicts," he noted. [...] The company also warns that creators who don't properly disclose their use of AI consistently will be subject to "content removal, suspension from the YouTube Partner Program, or other penalties." YouTube says it will work with creators to make sure they understand the requirements before they go live. But it notes that some AI content, even if labeled, may be removed if it's used to show "realistic violence" if the goal is to shock or disgust viewers. [...]

Other changes include the ability for any YouTube user to request the removal of AI-generated or other synthetic or altered content that simulates an identifiable individual -- aka a deepfake -- including their face or voice. But, the company clarifies that not all flagged content will be removed, making room for parody or satire. It also says that it will consider whether or not the person requesting the removal can be uniquely identified or whether the video features a public official or other well-known individual, in which case "there may be a higher bar," YouTube says. Alongside the deepfake request removal tool, the company is introducing a new ability that will allow music partners to request the removal of AI-generated music that mimics an artist's singing or rapping voice.

IT

The $2,000 Phones That Let Anyone Make Robocalls (404media.co) 24

An anonymous reader writes: Videos collected by 404 Media over months give a peek into the world of spoofing numbers, automated call scripts, and a specific seller of the phones. From the report: "Alright lads," a man sitting in the passenger seat of a moving car says in a heavy British accent. In his left hand he holds a special phone he is showing off to his clients, while with the other he films his demonstration which was later uploaded to Telegram. "I'm only going to say it once, yeah. You swipe, and it's gone," he continues, demonstrating one app installed that can instantly destroy data stored on the device. The phone in question is one from "Russiancoms," an underground outfit that sells the devices for just under $2,000 each. For that price, customers get a laundry list of features: the ability to spoof phone numbers, play hold music, and have a computerized voice read pre-determined scripts. While Russiancoms does not acknowledge in its Telegram channel what the phones might really be for, those are features well suited to committing fraud.

The Russiancoms Telegram channel periodically deletes its videos and other messages, but 404 Media has been archiving many of them for months. They provide insight into a little known industry of fraud phones, ones that make it easy for anyone to enter the world of robocalling or other scams. While much of the underground phone industry has been focused on providing secure communications to criminals -- companies like Phantom Secure, Encrochat, and Sky for example -- Russiancoms and similar companies appear to cater to a different use case: enabling people to make calls that fraudulently appear to come from someone else. A common tool in the underground is also so-called Russian SIMs, which can spoof numbers in some cases. Russiancoms' phones, however, are more fully featured.

Music

The Final Beatles Song, 'Now and Then,' Featuring All Four Members and AI, Released 63

More than 50 years after the Beatles broke up, John, Paul, George and Ringo are back together, reunited for one final track that was released Thursday, officially closing the final chapter in the band's musical output and legacy. From a report: The song, titled "Now and Then," was played on BBC radio just after 2 p.m. local time (10 a.m. ET) and simultaneously released on streaming platforms. With the help of digital technology, it features both John Lennon, who was shot dead in 1980, and George Harrison, who died from lung cancer in 2001. With new contributions from Paul McCartney, 81, and Ringo Starr, 83, the song will be the final music released by possibly the most influential and bestselling musical group of the 20th century.
Google

Google Can Turn ANC Earbuds Into a Heart Rate Monitor With No Extra Hardware (9to5google.com) 20

Abner Li reports via 9to5Google: Google today detailed its research into audioplethysmography (APG) that adds heart rate sensing capabilities to active noise canceling (ANC) headphones and earbuds "with a simple software upgrade." Google says the "ear canal [is] an ideal location for health sensing" given that the deep ear artery "forms an intricate network of smaller vessels that extensively permeate the auditory canal."

This audioplethysmography approach works by "sending a low intensity ultrasound probing signal through an ANC headphone's speakers. This signal triggers echoes, which are received via on-board feedback microphones. We observe that the tiny ear canal skin displacement and heartbeat vibrations modulate these ultrasound echoes." A model that Google created works to process that feedback into a heart rate reading, as well as heart rate variability (HRV) measurement. This technique works even with music playing and "bad earbuds seals." However, it was impacted by body motion, and Google countered with a multi-tone approach that serves as a calibration tool to "find the best frequency that measures heart rate, and use only the best frequency to get high-quality pulse waveform."

Google performed two sets of studies with 153 people that found APG "achieves consistently accurate heart rate (3.21% median error across participants in all activity scenarios) and heart rate variability (2.70% median error in inter-beat interval) measurements." Compared to existing HR sensors, it's not impacted by skin tones. Ear canal size and "sub-optimal seal conditions" also do not impact accuracy. Google believes this is a better approach than putting traditional photoplethysmograms (PPG) and electrocardiograms (ECG) sensors, as well as a microcontroller, in headphones/earbuds: "this sensor mounting paradigm inevitably adds cost, weight, power consumption, acoustic design complexity, and form factor challenges to hearables, constituting a strong barrier to its wide adoption."

Piracy

Record Labels Shut Down FileWarez, Brazil's Oldest Pirate Forum (torrentfreak.com) 12

An anonymous reader quotes a report from TorrentFreak: As far as we know, Brazil-based file-sharing forum FileWarez.com first appeared in August 2004, its domain name having been registered the previous month. The default language was naturally Portuguese and according to this image from the Wayback Machine, potential members needed a basic grip of the language to sign up. After all, Google Translate wouldn't exist for another two years. At some point in the years that followed, FileWarez shifted to a Netherlands .NL domain supported by filewarez.no-ip.biz, which may suggest a site regularly on the move. In 2008, unspecified problems saw the .NL domain dumped in favor of a new one. Riding out problems, various issues, and bouts of downtime, FileWarez.tv stayed in place for the next 15.5 years. Then two weeks ago, after establishing itself as Brazil's oldest file-sharing forum, FileWarez suddenly vanished.

In a press release Wednesday, global music industry group IFPI announced that "prominent illegal file-sharing forum, FileWarez," was shut down following co-ordinated action by record companies, anti-piracy body APDIF, and local cybercrime unit, Cyber Gaeco. "IFPI, the organization that represents the recorded music industry worldwide, alongside its Brazilian national group Pro-Musica, have welcomed the successful action against FileWarez.tv -- one of the most prominent illegal file sharing sites in Brazil -- by the Brazilian special cybercrime unit of prosecutor's office of Sao Paulo, Cyber Gaeco," the announcement reads. "FileWarez was the most established illegal filesharing forum in Brazil, dedicated to sharing illegal music content. While active, the site had more than 118,000 registered users with at least 24,000 monthly active users."

Hardware

The Apple Watch's Double Tap Gesture Points At a New Way To Use Wearables (theverge.com) 44

Apple has introduced a completely new way to interact with the Apple Watch without ever needing to use the touchscreen. It's called Double Tap and it arrives today via the watchOS 10.1 update. The Verge reports: With a quick pinching motion, you can use it to scroll through the new smart stack of widgets in watchOS 10, pause or end timers, skip music tracks, and answer phone calls. It's the sort of feature that you might read about and scoff at -- until you're unloading groceries from your car, hands full, and an important call comes through on your watch. [...] Double tap technically isn't a new gesture so much. In 2021, Apple introduced Assistive Touch, an accessibility feature designed for people with limb differences or mobility issues. The idea was to give these folks a way to navigate through menus and control the Apple Watch without needing a second hand.

On the surface, it can seem like double tap is a rebadged version of Assistive Touch. That's led to understandable confusion as to how the two features differ -- and why double tap isn't available on older Apple Watches that support Assistive Touch (Series 4 or later, including the first-gen SE and Ultra). The short answer is that the Apple Watch Series 9 and Ultra 2 have a more powerful chip. Specifically, the new S9 features four neural engines for machine learning, which is what powers double tap. On older watches, Assistive Touch was run on the main CPU.

But practically speaking, it's easier to see how Assistive Touch and double tap differ once you try using both. [...] Double tap isn't designed to help you navigate anything. The best way I can describe it is Assistive Touch is like the mouse to your computer. It scrolls, it selects, and it's highly programmable. Double tap is more like the double-click portion of using a mouse. You use it solely to perform the main action of an app. And to do that, Apple had to spend a lot of time researching what people wanted or expected a single double tap to do. [...] And, when double tap performs as intended, it does feel a bit like the watch can read my mind. It's genuinely cool to see double tap work with not just my index finger but the rest of them as well. To my surprise, it feels less gimmicky than I expected. But despite Apple's efforts, it doesn't take long to run into double tap's limitations...

AI

Inside Apple's Big Plan to Bring Generative AI To All Its Devices (bloomberg.com) 52

An anonymous reader shares a report: Apple was caught flat-footed when ChatGPT and other AI tools took the technology industry by storm. But the company is now preparing its response and plans to develop features for its full range of devices. One of the most intense and widespread endeavors at Apple right now is its effort to respond to the AI frenzy sweeping the technology industry. The company has some catching up to do. Apple largely sat on the sidelines when OpenAI's ChatGPT took off like a rocket last year. It watched as Google and Microsoft rolled out generative AI versions of their search engines, which spit out convincingly human-like responses to users' queries. Microsoft also updated its Windows apps with smarter assistants, and Amazon unveiled an AI-enhanced overhaul of Alexa. All the while, the only noteworthy AI release from Apple was an improved auto-correct system in iOS 17.

Apple's senior vice presidents in charge of AI and software engineering, John Giannandrea and Craig Federighi, are spearheading the effort. On Cook's team, they're referred to as the "executive sponsors" of the generative AI push. Eddy Cue, the head of services, is also involved, I'm told. The trio are now on course to spend about $1 billion per year on the undertaking. Giannandrea is overseeing development of the underlying technology for a new AI system, and his team is revamping Siri in a way that will deeply implement it. This smarter version of Siri could be ready as soon as next year, but there are still concerns about the technology and it may take longer for Apple's AI features to spread across its product line. Federighi's software engineering group, meanwhile, is adding AI to the next version of iOS. There's an edict to fill it with features running on the company's large language model, or LLM, which uses a flood of data to hone AI capabilities. The new features should improve how both Siri and the Messages app can field questions and auto-complete sentences, mirroring recent changes to competing services.

Music

CarPlay? Android Auto? Most People Still Just Listen to AM/FM Radio (9to5mac.com) 209

"New data suggests that what a lot of people do most often in their car is listen to AM/FM radio," writes 9to5Mac. "Yes, it's 2023, and you might think AM/FM radio is on the way out, but new data show that to not be the case for a lot of people..."

The market research company Edison Research used one-day listening diarires (for Americans older than 13) to measure the amount of time spent listening to audio — then compared results for those with and without an in-car entertainment system.

Those without an in-car entertainment system spent 67% of their time listening to AM/FM radio — with the rest listening to Sirius XM (12%), a streaming service (9%), or podcasts (4%).

But among those with an in-car entertainment system... 46% still listened to AM/FM radio. Less than a fifth listened to Sirus XM (19%), a streaming service (18%), or podcasts (7%).

The researchers' conclusion? "Even those with these systems choose AM/FM for nearly half of their in-car listening. For many people, even with so many new options, radio and the in-car environment continue to just go together."
The Courts

Universal Music Sues AI Startup Anthropic For Scraping Song Lyrics (arstechnica.com) 32

Universal Music has filed a copyright infringement lawsuit against artificial intelligence start-up Anthropic, as the world's largest music group battles against chatbots that churn out its artists' lyrics. From a report: Universal and two other music companies allege that Anthropic scrapes their songs without permission and uses them to generate "identical or nearly identical copies of those lyrics" via Claude, its rival to ChatGPT. When Claude is asked for lyrics to the song "I Will Survive" by Gloria Gaynor, for example, it responds with "a nearly word-for-word copy of those lyrics," Universal, Concord, and ABKCO said in a filing with a US court in Nashville, Tennessee.

"This copyrighted material is not free for the taking simply because it can be found on the Internet," the music companies said, while claiming that Anthropic had "never even attempted" to license their copyrighted work. The lawsuit comes as the music industry is grappling with the rise of AI technology that can produce "deepfake" songs that mimic the voices, lyrics, or sound of established musicians. The issue drew attention earlier this year after an AI-produced song that mimicked the voices of Drake and The Weeknd spread online.

Social Networks

'Apple Is Approaching Social On Vision Pro the Way Meta Should Have All Along' (roadtovr.com) 69

Apple is taking a different approach to social with its Vision Pro headset: making apps social right out of the box. This, according to Road to VR's Ben Lang, is what Meta should have done all along. Instead, it's pioneered a social experience on the Quest platform that involves "jumping through a fragmented landscape of different apps and different ways to actually get into the same space with your friends." From the report: Apple is taking a fundamentally different approach with Vision Pro by making social the expectation rather than the rule, and providing a common set of tools and guidelines for developers to build from in order to make social feel cohesive across the platform. Apple's vision isn't about creating a server full of a virtual strangers and user-generated experiences, but to make it easy to share the stuff you already like to do with the people you already know. This obviously leans into the company's rich ecosystem of existing apps -- and the social technologies the company has already battle-tested on its platforms.

SharePlay is the feature that's already present on iOS and MacOS devices that lets people watch, listen, and experience apps together through FaceTime. And on Vision Pro, Apple intends to use its SharePlay tech to make many of its own first-party apps -- like Apple TV, Apple Music, and Photos -- social right out of the box, and it expects developers to do so too. In the company's developer documentation, the company says it expects "most visionOS apps to support SharePlay." [...]

Perhaps most importantly, Apple is leaning on every user's existing personal friend graph (ie: the people you already text, call, or email), rather than trying to create a bespoke friends list that lives only inside Vision Pro. Rather than launching an app and then figuring out how to get your friends into it, with SharePlay Apple is focused on getting together with your friends first, then letting the group seamlessly move from one app to the next as you decide what you want to do.

Even apps that don't explicitly have multi-user experience built-in can be 'social' by default, by allowing one user to screen-share the app with others. Only the host will be able to interact with the content, but everyone else will be able to see and talk about it in real-time. It's the emphasis on 'social by default', 'things you already do', and 'people you already know' that will make social on Vision Pro feel completely different than what Meta is building on Quest with Horizon Worlds and its ecosystem of fragmented social apps.

News

Joseon Becomes First-ever Globally Recognized Cyber Nation-state 115

An anonymous reader quotes a report from U.Today:
The country was reimagined by Joseon King Andrew Lee as a digital nation without territory or borders. In this status, it was recognized by Antigua and Barbuda: the two countries inked a treaty that supports education, economic investment and other developmental initiatives and provides the basis for long-standing friendly relations.

Speaking to U.Today, representatives of the country stressed its unique legal design and state management model:

"Joseon is a crypto safe haven in this world where you can legally engage in crypto without any risk of any kind because sovereignty is the absolute authority in this world and another sovereignty doesn't have authority over another sovereignty"

Per their official statement, cryptocurrencies represent legal tender in Joseon and can be used for investments, daily payments and cross-border transactions.

Another report from Bitcoinist details several companies launching in Joseon, including First Day Out Collective which represents a song from Rundown Spaz and Kanye West:
Let's talk about the banger that's making this all come alive: "First Day Out,: a fire track by Rundown Spaz featuring none other than Kanye West, now owned by a DAO and legally recognized corporation in the progressive cybernation of Joseon, which itself is a legally recognized nation-state.

Slashdot Top Deals