Those encrypted messaging apps you may have been using to avoid prying eyes had a major flaw that could have allowed access to hackers, according to a cybersecurity firm.

According to Check Point Software Technologies, both Telegram and WhatsApp, which is owned by Facebook, were vulnerable.

The company said it withheld the information until the security holes were patched, saying “hundreds of millions” of users could have been compromised.

The vulnerability involved infecting digital images with malicious code that would have been activated upon clicking the pic. That, according to Check Point, could have made accounts susceptible to hijacking.

“This new vulnerability put hundreds of millions of WhatsApp Web and Telegram Web users at risk of complete account take over,” Check Point head of product vulnerability Oded Vanunu said in a news release. “By simply sending an innocent looking photo, an attacker could gain control over the account, access message history, all photos that were ever shared, and send messages on behalf of the user.”

Both apps tout so-called end-to-end encryption to ensure privacy, but according to Check Point, that made it hard to spot malicious code.

Patching the vulnerability involved blocking the code before the messages were encrypted.

WhatsApp claims to have more than one billion users, while Telegram has more than 100 million.
…

Hacking means tinkering, whether with computers, woodworking or really anything. Tinkerers around the world come together at hacker-spaces, to share tools, camaraderie and expertise. Shelley Schlender takes us to a hacker space in Oakland, California, called Ace Monster Toys, where members lend each other a “hacking” hand.
…

Visitors to Bangalore, India, these days can see street art, have beer at local microbreweries or take an Uber ride to a distant neighborhood to meet with venture capitalists about a recent startup that grabbed their attention.

Gone are the days of a city dominated by call centers and American visa seekers.

“There’s an artisanal hot dog place there,” Sean Blagsvedt, founder of online job portal Babajob, said of a nearby neighborhood, speaking over his plate of salmon sashimi. “You have a bazillion 20-something tech people who don’t like to cook and suddenly have a [large amount] of money to start paying for interesting food. … You saw the same things in San Francisco.”

A wide variety of dining options, nightlife and other activities has blossomed alongside the tech industry in “India’s Silicon Valley.”

Bangalore was rated the most dynamic city in the world, two spots ahead of California’s Silicon Valley — which isn’t a city but was ranked as one — by the JLL City Momentum Index this year. The index looks at more than 100 cities around the world, rated by their “ability to embrace technological change, absorb rapid population growth and strengthen global connectivity.”

Not looking abroad

Call centers and outsourced IT workers still make up a part of Bangalore, but a vibrant crowd of modern, enthusiastic, tech-minded people has grown to dominate the city — and for most of them, the promise of “a better life” abroad is not on their radar.

Bangalore, however, has been attracting Americans and Europeans to start companies in India for Indians. And this phenomenon is hardly new.

 

Blagsvedt, who is also Babajob’s CEO, moved to Bangalore from his hometown of Seattle, Washington, when he was 28 to work with Microsoft. Although Blagsvedt enjoyed his work, he felt compelled to work more directly with Indians, for Indians.

“I always had this nagging thing, like, am I doing enough to address the inequity that I saw, am I doing enough to make the best use of my skills, to try to do something important to make a difference?” he said.

After reading a study that said to get out of poverty, one needed to either change jobs or start a successful business, Blagsvedt was inspired to change how people found those positions.

“If only we could find a way to digitize all the jobs, make it accessible to people who don’t use computers, and digitize the social network, then we might be able to catalyze the escape from poverty for a lot of people,” he said.

Twelve years, a successful company and a family later, Blagsvedt is “more Bangalorean than me!” according to an Indian on his team, Akshay Chaturvedi.

In the past 10 years, however, it’s not just Americans and Europeans with humanitarian motivations who are starting companies in Bangalore.

Indians, even those who paid for American educations and planned to pay off those debts with American jobs, have seen the increasing opportunity back home.

‘A lot of vibrancy’

“[There is] a lot of young talent trying to build solutions that are uniquely India on almost every sector, whether that’s health services, education, digital media, even financial inclusion,” said Vani Kola, a venture capitalist who has been in Bangalore for 10 years after working in Silicon Valley. “I see a lot of vibrancy with respect to opportunity for building unique companies with unique solutions for India.”

And Indians have taken advantage of that opportunity. The number of startups in Bangalore rivals those in the top tech cities around the world. In 2015, San Francisco research firm Compass rated Bangalore as the second fastest-growing startup ecosystem in the world, and it was the only Asian city besides Singapore to place in the top 20 startup ecosystems.

 

Chaturvedi is one such person who, after completing a fellowship in the United States, returned to India, specifically Bangalore, to join the world of unique Indian startups.

“I can’t imagine my life without startups,” Chaturvedi told VOA. “Everything I do — I’m touched by a startup at least 20 times a day. Every single dinner I order by some food tech startup.”

In the days after we spoke with him at Babajob, Chaturvedi quit to work on his own startup — Leverage, an online platform for higher education services.

Although the question of the future of H1-B visas, a visa most often granted to IT workers from India, is on the minds of American companies that employ them, Bangalore seems less concerned.

“When students studied there, I said, ‘Look, there’s a lot of opportunity calling in India — can’t I do something here?’ That, I think, was a trend that was already there for the last few years,” Chaturvedi said. “And now [the] Indian economy seems to be strong and the opportunity from startups seems very viable in India.”

Fewer seeking H1-Bs

Blagsvedt holds a stronger opinion, saying that H1-B visas are exploitative, and that the rise of opportunity in Bangalore has limited the number of people desperate for those options.

“They haven’t raised that minimum salary in 22 years,” Blagsvedt said. “Now you tell me where you can hire a five-year programmer in Silicon Valley for $65,000 [a year]. You just can’t. And what does that guy have as recourse? If he doesn’t like the job, his visa is sponsored fully … he can’t complain, he can’t even switch jobs!”

Blagsvedt and Chaturvedi both said that in the Bangalore startup ecosystem, they had heard no talk, or worry, about the proposed changes to the U.S. visa program.

Chaturvedi did admit, however, that any threats to the H1-B program “would have been far scarier 10 years back.”

In today’s Bangalore, any widespread panic that Silicon Valley might imagine simply hasn’t taken hold.
…

The mysterious Facebook blogger kept dishing up alleged government secrets. One day it was a shadowy faction looting cash from Uganda’s presidential palace with impunity. The next was a claim that the president was suffering from a debilitating illness.

For authorities in a country that has seen just one president since 1986, the critic who goes by Tom Voltaire Okwalinga is an example of the threat some African governments see in the exploding reach of the internet – bringing growing attempts to throttle it.

Since 2015 about a dozen African countries have had wide-ranging internet shutdowns, often during elections. Rights defenders say the blackouts are conducive to carrying out serious abuses.

The internet outages also can inflict serious damage on the economies of African countries that desperately seek growth, according to research by the Brookings Institution think tank.

Uganda learned that lesson. In February 2016, amid a tight election, authorities shut down access to Facebook and Twitter as anger swelled over delayed delivery of ballots in opposition strongholds. During the blackout, the police arrested the president’s main challenger. Over $2 million was shed from the country’s GDP in just five days of internet restrictions, the Brookings Institution said.

The shutdowns also have “potential devastating consequences” for education and health, says the Mo Ibrahim Foundation, an organization founded by a mobile phone magnate that monitors trends in African governance.

As more countries gain the technology to impose restrictions, rights observers see an urgent threat to democracy.

“The worrying trend of disrupting access to social media around polling time puts the possibility of a free and fair electoral process into serious jeopardy,” said Maria Burnett, associate director for the Africa division of Human Rights Watch.

In the past year, internet shutdowns during elections have been reported in Gabon, Republic of Congo and Gambia, where a long-time dictator cut off the internet on the eve of a vote he ultimately lost.

In Uganda, where the opposition finds it hard to organize because of a law barring public meetings without the police chief’s authorization, the mysterious blogger Okwalinga is widely seen as satisfying a hunger for information that the state would like to keep secret. His allegations, however, often are not backed up with evidence.

It is widely believed that Uganda’s government has spent millions trying to unmask Okwalinga. In January an Irish court rejected the efforts of a Ugandan lawyer who wanted Facebook to reveal the blogger’s identity over defamation charges.

“What Tom Voltaire Okwalinga publishes is believable because the government has created a fertile ground to not be trusted,” said Robert Shaka, a Ugandan information technology specialist. “In fact, if we had an open society where transparency is a key pillar of our democracy there would be no reason for people like Tom Voltaire Okwalinga.”

In 2015, Shaka himself was arrested on suspicion of being the blogger and charged with violating the privacy of President Yoweri Museveni, allegations he denied. While Shaka was in custody, the mystery blogger kept publishing.

“Who is the editor of Facebook? Who is the editor of all these things they post on social media? Sometimes you have no option, if something is at stake, to interfere with access,” said Col. Shaban Bantariza, a spokesman for the Ugandan government.

Although the government doesn’t like to impose restrictions, the internet can be shut down if the objective is to preserve national security, Bantariza said.

In some English-speaking territories of Cameroon where the locals have accused the central government of marginalizing their language in favor of French, the government has shut down the internet for several weeks.

Internet advocacy group Access Now earlier estimated that the restrictions in Cameroon have cost local businesses more than $1.39 million.

“Internet shutdowns – with governments ordering the suspension or throttling of entire networks, often during elections or public protests – must never be allowed to become the new normal,” Access Now said in an open letter to internet companies in Cameroon, saying the shutdowns cut off access to vital information, e-financing and emergency services.

In Zimbabwe, social media is a relatively new concern for the government following online protests launched by a pastor last year. Aside from blocking social media at times, the government has increased internet fees by nearly 300 percent.

In Ethiopia, where a government-controlled company has a monopoly over all telecom services, internet restrictions have been deeply felt for months. The country remains under a state of emergency imposed in October after sometimes deadly anti-government protests. Restrictions have ranged from shutting down the internet completely to blocking access to social media sites.

Just 30 days of internet restrictions between July 2015 and July 2016 cost Ethiopia’s economy over $8 million, according to figures by the Brookings Institution. The country has been one of Africa’s fastest-growing economies.

Ethiopia’s government insists social media is being used to incite violence, but many citizens are suspicious of that stance.

“What we are experiencing here in Ethiopia is a situation in which the flow of information on social media dismantled the traditional propaganda machine of the government and people begin creating their own media platforms. This is what the government dislikes,” said Seyoum Teshome, a lecturer at Ethiopia’s Ambo University who was jailed for 82 days last year on charges of inciting violence related to his Facebook posts.

“The government doesn’t want the spread of information that’s out of its control, and this bears all the hallmarks of dictatorship,” Seyoum said.
…

Facebook barred software developers on Monday from using the massive social network’s data to create surveillance tools, closing off a process that had been exploited by U.S. police departments to track protesters.

Facebook, its Instagram unit and rival Twitter came under fire last year from privacy advocates after the American Civil Liberties Union (ACLU) said in a report that police were using location data and other user information to spy on protesters in places such as Ferguson, Missouri.

In response to the ACLU report, the companies shut off the data access of Geofeedia, a Chicago-based data vendor that said it works with organizations to “leverage social media,” but Facebook policy had not explicitly barred such use of data in the future.

“Our goal is to make our policy explicit,” Rob Sherman, Facebook’s deputy chief privacy officer, said in a post on the social network on Monday. He was not immediately available for an interview.

The change would help build “a community where people can feel safe making their voices heard,” Sherman said.

Racially charged protests broke out in the St. Louis suburb of Ferguson in the aftermath of the August 2014 shooting of black teenager Michael Brown by a white police officer.

In a 2015 email message, a Geofeedia employee touted its “great success” covering the protests, according to the ACLU report based on government records.

Representatives of Geofeedia could not immediately be reached for comment on Monday. The company has worked with more than 500 law enforcement agencies, the ACLU said.

Geofeedia Chief Executive Officer Phil Harris said in October that the company was committed to privacy and would work to build on civil rights protections.

Major social media platforms including Twitter and Alphabet Inc’s YouTube have taken action or implemented policies similar to Facebook’s, said Nicole Ozer, technology and civil liberties policy director at the ACLU of Northern California.

Ozer praised the companies’ action but said they should have stopped such use of data earlier. “It shouldn’t take a public records request from the ACLU for these companies to know what their developers are doing,” she said.

It was also unclear how the companies would enforce their policies, said Malkia Cyril, executive director of the Center for Media Justice, a nonprofit that opposes government use of social media for surveillance.

Inside corporations, “is the will there, without constant activist pressure, to enforce these rules?” Cyril said.
…

So what was the FBI doing at the South by Southwest Conference and Festivals in Austin, Texas, primarily known for music, movies and interactive media?

James Baker, the Federal Bureau of Investigation’s general counsel, took the stage at a hotel in Austin, Texas, on Monday to present a human face to the issues of encryption and cyber security. He talked about the quandaries law enforcement grapples with in the digital age.

The FBI has been in the center of a maelstrom over Wikileaks disclosures about CIA practices, foreign government election tampering and whether President Donald Trump was subject to a wiretap when he was a presidential candidate.

Baker steered clear of those topics. Instead, he focused on an issue near to the heart of the tech-focused attendees: encryption of devices. 

Still fresh in the audience’s minds was the San Bernardino, California, terror attack in 2015 that led to a standoff between law enforcement and Apple over one of the iPhones used by one of the attackers.

The FBI sought Apple’s help in getting access to the mobile phone. Apple balked, arguing that strong encryption was important to protect privacy. In the end, the government dropped its legal efforts to force Apple to open the phone and reportedly found other ways into the device. 

But the case highlighted disagreements within American society, Baker said. In the last three months of 2016, the FBI received more than 2,000 devices from law enforcement agencies seeking access. The FBI had no solutions in nearly half of the devices. 

“This is happening all the time,” he said. “It’s impeding investigations.”

While the questioner Jeffrey Herbst, chief executive of Newseum, spoke to Baker, audience members asked questions on Sli.do, a web-based Q&A and polling platform for live events.

Their focus showed an interest in the FBI’s greater maelstrom: “Is there any evidence that foreign governments tried to impact the campaign?” asked one questioner.

Baker did not address any questions on the issue but spoke broadly about security in the digital age. 

“We have to do a better job at explaining the cost of having better encryption,” Baker said. 

He suggested that lawmakers might break down the complex topic of encryption and look for areas where they can make progress, such as carving out new rules for devices law enforcement has in its possession to allow access. “What we don’t want to do is wait for an event to happen,” he said. 

In the end, Baker said that the American people need to hold the FBI accountable and be skeptical about what it does, but also invest the time to understand the issues. 

“The FBI has to deal with the reality of what is,” he said. “Not what we wish it to be.” 
…

As the director of the Carter Center’s Conflict Resolution Program, Lebanese-born Hrair Balian had a problem at the onset of the war in Syria in 2011.

“There really was a shortage of reliable information of developments on the ground,” he told VOA in an interview at the Atlanta headquarters of the Carter Center. “All we were seeing was propaganda.”

The widely used quote, “The first casualty when war comes is truth,” is evident today in Syria, where journalists have been killed and others forced or frightened out of the country. 

Despite a gap in media coverage, however, a then-enterprising intern discovered reliable information was available, hiding in plain sight, due largely to the fact the Syrian conflict unfolded in a part of the world where many are connected, digitally.

“Syrians, and people in the Middle East in general, are two to four times more likely to share information about politics, and religious views online,” said that former intern, Christopher McNaboe, citing a Pew Research Center study on social media habits of those living in the Middle East.

“In the case of Syria, there’s just too much. Videos, Facebook posts, tweets, blogs, photos, you name it…Syrians are very active and passionate about getting information out,” he said.

“One of the first things we started seeing online was the announcement of defections. As the conflict turned violent, people started defecting from the Syrian security forces. And they did so online.”

McNaboe began documenting where those defections occurred in Syria, who the defectors aligned with, and who was joining them. It was information that started to give Balian a better understanding of the growing complexities of the conflict.

“Through this process, we’ve been able to document the formation of over 7,000 opposition armed groups in Syria. Not all of them remain active to this day.”

From a laptop computer, McNaboe demonstrates how he has compiled and charted the information, using different colored dots on an interactive map to show the positions of a variety of groups engaged in the conflict, over different periods of time. This interactive map allows users to watch the evolution of the conflict and the changing front lines of the war. Almost all of the information that helps illustrate the map is culled from the volume of material publicly available on social media.

“The information available online ranges anywhere from political statements, and defections, and armed group formations, to footage of the actual fighting, and humanitarian relief efforts; you name it,” says McNaboe. 

“I think the Syrian conflict represents a major paradigm shift, a major change in the way in which conflict plays out,” he adds. “Previous conflicts did not take place in connected environments like Syria. There wasn’t YouTube. There wasn’t Twitter.”

Watching and documenting the information in that connected environment is now McNaboe’s full-time job as director of the Syria Conflict Mapping Project at the Carter Center, which former President Jimmy Carter says has been particularly useful for humanitarian organizations.

“So when the United Nations needs to find the best avenue to take in relief supplies, we can tell them which way to go,” he told VOA in a recent, exclusive interview.

The Carter Center also shares some of its Syria maps and reports publicly, making them available to non-profit organizations, governments and the news media. 

“We give the same information to The New York Times, and to The Economist magazine, and other notable news media, so they can be accurate when they describe the location of folks inside Syria,” Carter says.

Accuracy was part of Carter’s motivation to share the information with Russian President Vladimir Putin when his forces entered Syria in 2015.

“When he got ready to join in, and bomb, factions within Syria, I wanted to make sure he would bomb the right ones or at least he knew what he was bombing,” Carter said. “So I sent him a message through his embassy and told him we have this capability within Syria to tell you where people are located; do you want to have that? So the next day I got a response from him, ‘Yes, I would like to have your maps.’ So we sent our maps, on a current basis, to President Putin.”

McNaboe says the intention was to engage in “direct and frank contact with the Russian government” and put the Russians on notice the Carter Center could monitor their targets in Syria; but, he stresses there is limited military value in the information the center compiles and shares.

“If you were analyzing exactly where an armed group were announcing themselves, maybe you could act upon it, but it’s unlikely that it would be timely enough for actual military action,” he says. “What we report on publicly, things like front lines, are widely known; but, we analyze and structure the data in ways so that we can get insights to the bigger trends in the conflict.”

McNaboe says the information the Carter Center gathers is based on material publicly available to anyone with the means to compile and understand it.

“Any participant in the Syrian conflict, almost everybody has engaged online,” he says.

“It happens that with these kinds of transmissions, the people are very eager to identify themselves,” Carter told VOA.

Despite any perceived military or intelligence value of the information, McNaboe says the Carter Center doesn’t share information they believe would put people at risk.

“If you are a combatant in the conflict and you don’t know where the front lines are, our information is not going to help you too much,” McNaboe says. “So we are careful about what we make totally public.  We want our effort to pursue peace and support peace efforts, and do everything it can to reduce the risk to any civilian or participant in the conflict.”

A conflict now entering its seventh year, at a time when more U.S. military forces are joining the fight on the ground, engaged in a war with no clear end in sight.
…

Before Donald Trump’s election, Laurence Berland viewed political protest as a sort of curiosity. He was in a good place to see it: San Francisco’s Mission District, once an immigrant enclave in the country’s heartland of radicalism that is increasingly populated by people like him — successful tech workers driving up rents while enjoying a daily commute to Silicon Valley on luxury motor coaches.

Berland regarded the activism of his adopted city with a mix of empathy and bemusement, checking out Occupy Wall Street demonstrations and protests against the gentrification of his own neighborhood. But now there is less distance between him and activists on the street.

On a recent day, Berland stood with about 100 others — from software engineers like himself to those who work in tech company cafeterias — outside a downtown museum for a rally against Trump. A clipboard-carrying organizer approached Berland to ask if he wanted to join a network of grassroots activists, but Berland waved him away. He had already signed up.

In the place that fought against the Vietnam War and for gay rights and, more recently, has been roiled by dissent over the technology industry’s impact on economic inequality, an unlikely alliance has formed in the left’s resistance against Trump. Old-school, anti-capitalist activists and new-school, free-enterprise techies are pushing aside their differences to take on a common foe.

For years, these two strands of liberal America have been at each other’s throats. There’ve been protests against evictions of those who can’t afford the Bay Area’s ever-soaring rents. And think back, not so long ago, to the raucous rallies to block those fancy buses shuttling tech workers from city neighborhoods to the Silicon Valley campus of Google, where Berland once worked.

Cat Brooks, a Black Lives Matter activist in Oakland, has seen the toll the tech industry has taken on some. Her daughter’s elementary school teacher just moved to a distant suburb after her rent skyrocketed, and Brooks thinks more tech money must find its way into local communities. She nevertheless welcomes the infusion of new energy to the protest arena.

“It’s not about the business of we were here first,” Brooks said. “We’re about the business of how can we support? Division at this time is not helpful.”

The tech industry opposition started when Trump imposed his initial travel ban on immigrants and refugees from seven majority-Muslim nations. The industry prides itself on its openness to immigrants, who comprise about one-quarter of the U.S. technology and science workforce and include the founders of iconic institutions.

Nearly 100 tech companies, including Google, Facebook and Uber, filed a court brief urging suspension of the ban, while Google co-founder Sergey Brin, a Russian immigrant, joined protests at San Francisco International Airport. That was followed by an unprecedented company-wide walkout at Google and now, on March 14, nationwide rallies are planned for a “Tech Stands Up” day of protest.

“People whose pedigree is knocking on doors and calling representatives and waving signs are getting together with people who design apps,” said Ka-Ping Yee, a software engineer from Canada who is a legal permanent resident of the U.S. and who works at a startup to help immigrants send cash home. “People are working with people who do really, really different things because they realize it’s an emergency.”

After the election he helped create an online pledge, signed by thousands of technology workers, against building databases for any potential Muslim registries or to aid deportations of immigrants.

Some aren’t so sure about sharing the streets because they don’t think they share the same goals.

Franki Velez, an Iraq War veteran on disability, stood outside an Oakland rental office recently with other longtime activists and renters fighting eviction. There was not a technology worker in sight, and she worried that they are missing the point anyway. They want to change, but preserve, a system that’s benefited them, she said, while protesters like her want to tear the system down and start from scratch.

“They don’t understand it’s a colonial system that’s never meant to be reformed,” she said.

Still, while their approaches can be strikingly different, Velez’s causes are increasingly being adopted by people not like her.

Velez’s group marched to a Wells Fargo branch to hand over a demand that the bank stop investing in the Dakota Access Pipeline. Two hours later, in the comfortable Silicon Valley suburb of Campbell, biotech executive Michael Clark drew cheers after telling a gathering of anti-Trump activists that he’d closed his Wells Fargo account to protest the pipeline.

Clark grew up in New Hampshire and then in Silicon Valley, when his mother took a job at Apple in the 1990s. He always considered himself a political independent, a moderate. But Trump’s election horrified him and, with a friend who runs a gourmet chocolate shop, he founded a chapter of the national liberal group “Indivisible” in Campbell.

“The country has moved so much to the right that puts me in the middle with people I wouldn’t have previously been aligned with,” Clark said. “It’s interesting that someone like me is on the same side as a lot of socialists.”
…

Humankind wastes a lot of energy, but thanks to new technologies, it is increasingly affordable to harvest and use it. At a recent energy summit in Washington, one of the participating commercial firms exhibited photovoltaic cells that turn waste heat into electricity. VOA’s George Putic reports.
…