Connect with us

Tech News

Just *one* Android game infected half a million users

(TECH NEWS) Just one lone Android app was able to infect hundreds of thousands before being pulled – will Google improve security?

Published

on

google play store android app

Are you an Android phone user? If so, you could be one of the more than 560,000 users who recently downloaded a malware-filled Google Play app, according to TechSpot. Yep. You read that correctly. On November 19, a security researcher named Lukas Stefanko announced on Twitter that he had discovered 13 Android game apps that were actually carefully disguised malware and that more than half a million users had already downloaded them.

According to Stefanko, all the apps in this particular security breach were car simulator games with names like “Truck Cargo Simulator.” All 13 were developed by someone going by the name of Luiz O Pinto and averaged decent reviews in the Google Play store, which are now assumed to be paid and/or fake.

What users saw when they tried to play these games was a “Made with Unity” logo, followed by the app immediately crashing and the icon seemingly disappearing, making it harder to delete the app from phones. But these apps turned out to be more than just buggy annoyances. Instead, they were surreptitiously downloading an APK (Android application package) called “Game Center” as well as installing additional malware.

According to TechCrunch, there isn’t a consensus among malware scanners on what the malware actually does at this point. However, it says that the malware will launch every time an Android device starts up, allowing the malware creator to have “full access” to its network traffic, which could easily lead to data theft.

The good news: All 13 apps have since been pulled from the Google Play store due to violation of Google’s policies, according to Google spokesperson Scott Westover.

The bad news: This this isn’t the first time Google has had to deal with issues in its Google Play store. According to TechCrunch, more than 700,000 malicious apps had to be removed from the store in 2017.

In response to these multiple security breaches — including the Google+ user-data fiasco, which led to its demise — Google announced that it began an effort dubbed “Project Strobe” earlier this year. According to the company this so-called “root-and-branch” review looked at third-party developer access to Google accounts and Android device data.

The company says it will roll out additional controls and update policies in the coming months.

Staff Writer, Krystal Hagan holds a bachelor of journalism from the University of Texas at Austin. She lives the full-time RV life just outside Austin, Texas, with her musician partner, three dogs, and a six-toed cat. In her free time, she binges TV shows, brandishes her otherwise useless pop-culture knowledge at trivia nights, and tries to become BFFs with every animal she meets.

Business Finance

Personal finance steps every freelancer must take to avoid ruin

(FINANCE) The government shutdown showcased financial instability, but what do people that have no paycheck guarantee need to do to be secure?

Published

on

personal finance

In light of the recent government shutdown, there has been a lot of attention in regards to how missing paychecks impacts the average American. Most Americans don’t have a regular savings account and could not handle a $1,000 emergency, let alone miss practically a month of pay.

While things look positive for the backpay of those government workers, we all could benefit from some careful reflection about the precarious nature of our personal finances.

Particularly those of us who don’t receive a regular paycheck.

Entrepreneurs and those invested in the gig economy have volatile incomes, and literally no promise of a paycheck ever – that can impact your personal finances in a number of ways.

Variable incomes are normal for this group and can impact entrepreneurs in ways as simple as handling debt.

If this is you – here a few things to keep in mind that can help you deal with the volatility of living on a variable income and handling your personal finances.  

  • Set up an emergency fund. Start with 500 if you have too, and remember this an emergency fund for your personal expenses, not your business. If you have an emergency fund, make sure you identify what an emergency is and also be prepared to put money back when it comes out. If you have a hard time not spending money in front of you, put your money in a local bank or CU that you don’t have immediate access too.
  • Stick to a budget. when you can’t forecast your income appropriately, controlling expenses is so critical it’s the few things that are in your control.
  • Don’t mix business with personal. While you may be pouring your personal energy and time into your start up or gig, be careful about mixing expenses for two reasons: First, it messes up your budget. You need to have separate budgets for personal and business. Second, there could be tax challenges – consult a tax professional for more information. Here’s a little primer to get you started.
  • Save for retirement. There are tax benefits and come on, don’t wait till you can’t work anymore. Also, an IRA IS NOT AN EMERGENCY FUND.
  • Practice good financial behaviors. Automate bill pay. Online statements. Digital receipt tracking. The more you can automate your life, the better you are. You already have so many demands on your time, reduce that so you can spend more time doing what you love and what matters.
  • Consider diversifying your income. Either ensure you have multiple strings or a backup gig (even if it’s just uber driving); or be prepared to do temporary or contract labor during your slow seasons.

The path to entrepreneurship is rough. What we can learn from the very struggles of the federal employees and the government shutdown is that if the government can be unstable, those of you who work in the world of startups, gigs, and entrepreneurship, need to be even more on our toes. The “normal recommendation” for saving is 10% of your income, but normal may not be enough for you. Be prepared and save (more).

Disclaimer: I am neither a tax or investment professional. This is personal financial advice and I encourage you to visit a professional if you need more specific plans of action.

Continue Reading

Business Finance

Delivery startups skim customer tips to pay employees #wth

(FINANCE) Grocery delivery startups are flourishing, but stealing from employees isn’t a sustainable move…

Published

on

theft delivery startups

Popular grocery app Instacart has been using customers’ tips to pay its guaranteed $10/hour rate to employees, rather than using the tips as, you know, bonus money paid to workers on top of their normal pay. The way that you’d expect something called a “tip” to work.

According to the report, “Instacart confirmed that when its payment algorithm determines a driver should be paid below that guaranteed $10, the company uses the customer’s predelivery, ‘up front’ tip to cover the difference. The ‘up front’ tip is automatically set to 5% on the Instacart app; if the customer removes the tip, and the payout would be below $10, Instacart itself covers the cost.”

In this system, the customer’s tip for the deliverer subsidizes the company’s commitment to its employees. Once the change to the tipping policy was announced in workers began complaining about how it affected their earnings in 2017.

Even though the app’s customers have taken to social media to compare the policy to wage theft, the practice is actually legal. Because Instacart and other apps in the gig economy classify their workers as contractors instead of employees, they do technically still get 100 percent of the tips in their wages (even if the company doesn’t supply the same percentage of the wage they’d give the worker without the customer throwing in).

This kind of payment structure may be familiar to you if you’ve ever working in restaurants, bars, or another establishment that uses subminimum wages.

Sadly, Instacart is not the only grocery app that uses a dodgy tipping system. Shipt, DoorDash, and others have similar tipping policies. And they aren’t interested in changing them after all this week’s backlash.

If you’re concerned about making sure that you’re supporting the contractors for these grocery delivery services, some of the contracted workers have requested that you provide the tip in cash instead of tipping through the app and activating its algorithm.

Continue Reading

Tech News

How blockchain has the power to improve democracies

(TECH) Blockchain is changing the face of democracy with a magical fix to basically all the problems.

Published

on

blockchain

Despite our best intentions to be active, informed citizens in democratic practices, not everyone has time, figuring out how to be engaged can be confusing, and reps don’t always vote how you want. Plus, confidence in Congress is hilariously/depressingly low with all the scandals and thinly veiled corporate interests.

Well hooray for the future, because now we have blockchain technology to propel us out of the murky waters of representative democracy and into a more efficient liquid democracy.

A liquid democracy platform, also referred to as delegative democracy, has voters select a personal representative as a proxy for their vote. In our current set up, elected representatives vote for things on your behalf, and the best you can do other than running for office yourself is call in and ask them to vote your way.

With a liquid democracy, everyone votes on each piece of legislation.

You can assign a delegate to vote on your behalf by proxy when you’re not available. Personal representatives can be removed and reassigned at any time unlike set terms for elected officials.

The delegate can even select a proxy for their votes, creating a directed network graph, where voters and politicians are connected on a publicly verified blockchain. Anyone can be selected as a delegate as long as they’re a legal resident of your jurisdiction registered to vote.

Quick refresher course: Blockchain is essentially a decentralized digital list of records with timestamps and transaction data information. Each individual record is considered a block, which is cryptographically secured and resistant to modification.

Blocks contain a cryptographic hash of the previous block, creating a chain. Once recorded, data cannot be altered without network majority consent. As an open, peer-to-peer distributed ledger, blockchain is a permanent and efficient way to record transactions.

Used by Satoshi Nakamoto in 2008 for cryptocurrency exchange to create Bitcoin, blockchain has now expanded to the healthcare industry, banking, and now potentially democratic practices.

David Ernst, one of the leaders of the liquid democracy movement, founded United.vote, a platform established to get the ball rolling. The site helps connect voters to personal representatives, and provides a scorecard that tracks how elected politicians’ votes compare to constituents wishes.

“What if instead centralizing authority into the hands of a few strong men, we expanded political power to many, many more voices,” Ernst suggested at the 2017 CyFy conference.

His plan to expand power is liquid democracy via the United.vote platform, which he notes is backwards-compatible with our current system. Ernst is also running as an independent candidate for California Assembly District 19.

He was partially inspired by the Flux Party’s 2016 campaign in Australia, who tried to implement an issue-based direct democracy similar to liquid democracy. Although the party only got 0.15 percent of the vote nationwide, Ernst stands by the idea.

A liquid democracy via blockchain would theoretically increase accountability, participation, and representation.

Through direct participation and personal representation, elections would no longer be necessary.

Instead, voters simply choose someone to represent them, and can select a different person for individual issues. Delegation can be changed at any time, so you’re not stuck with someone if they end up being a total weasel.

So far, only a little over one thousand people have signed up for United.vote, but Ernst stated, “If I got elected, but only 20 people were actually using [the platform], I would still follow those people.”

Although the concept may be ahead of its time (and possibly a wishful Utopian dream), Ernst is confident that these changes can fix democracy.

Continue Reading
Advertisement

Our Great Partners

The
American Genius
news neatly in your inbox

Subscribe to our mailing list and get interesting stuff and updates to your email inbox.

Emerging Stories