(252) 565-1235

Carolina IT Group

Call Us (252) 565-1235 Request Support Contact Us

Archives for November 2018

Deleting Your Google Search History Will Soon Be Easier

by

Google is rolling out some important changes that will make it easier for people who use their services to control their data.

They’re starting with their most widely used service, which is search.  In the weeks ahead, it will be easier than ever for users to delete their search history, on both PC and Android devices.

The official company announcement reads, in part, as follows:

“Today, we’re making it easier for you to make decisions about your data directly within the Google products you use every day, starting with Search.  Without ever leaving Search, you can now review and delete your recent Search activity, get quick access to the most relevant privacy controls in your Google Account, and learn more about how Search works with your data.

For example, to control the ads you see when you search, we give you access to your Ad Settings.  Additionally, you can access your Activity Controls to decide what information Google saves to your account and uses to make Search and other Google services faster, smarter, and more useful.”

As things stand now, the only way it’s possible to access this kind of information and see how Google uses your data is by using your Google Account.  The coming change makes it substantially easier, and Search is just the tip of the iceberg.  Next year, similar changes will be coming to Google Maps, with other services following behind those two.

This is good news, and the early response from privacy advocates has been positive.  Of course, the jury will still be out until we see the new implementation in action. However, based on the announcement, these changes represent a big step forward that will put more control in the hands of the individual user. That can’t be seen as anything other than a positive development.

Google Finally Cracking Down On Manufacturer Device Updates

by

Security in the Android ecosystem is awful.  There’s just no other word to describe it.

In large part, the blame for that can be placed at the feet of Google.  Although they have succeeded in creating a wildly successful platform, their management of OEM devices (in particular, security updates for them) have been virtually nonexistent.

This has led to a situation where many device manufacturers don’t bother to push critical updates at all.  It costs money to do so, and until now, there hasn’t been a downside for failing to.  That, however, is about to change.

Recently, Google announced some big changes coming to their OEM agreements that would require Android device manufacturers to roll out security updates on a regular basis.

The company offered few details when the announcement was made, but since that time, an unverified copy of the new contract was leaked and obtained by The Verge.  It sheds some additional light on what’s coming.

Specifically, the new agreement requires OEMs to regularly schedule updates for any device launched after January 31, 2018 if that device has been activated by more than 100,000 users.  OEMs will be required to provide security updates for a minimum of two years.

In addition to that, they must make updates that address security vulnerabilities available to their customers no more than 90 days after the patch is released.  Taken together these two pieces of information point to the fact that OEMs will be required to issue quarterly updates to their customers, at a minimum.

It’s a good move and one that’s long overdue.  When this new agreement becomes official corporate policy, it will have an almost immediate, profound impact on security in the Android ecosystem.  While it’s far from a perfect solution, it represents a very good beginning.

IBM Invests Billions To Purchase Popular Red Hat Linux

by

IBM has recently announced what is to be the largest open source acquisition in history.  They’re buying Red Hat for a staggering $34 billion dollars.  This, as the saying goes, changes everything.

IBM has lagged behind its competitors for years in the area of cloud computing.  When the ink dries on this deal, they’ll move from a virtual non-entity in the market to the world’s #1 hybrid cloud provider.

If you’re a Red Hat supporter, don’t worry that the company is going away.  The company is to retain its independence.  Rather than being rolled into the corporate structure of IBM, it will be run as a distinct entity and will continue to be led by Red Hat’s current CEO, Jim Whitehurst.  Red Hat’s headquarters, facilities and their corporate culture will all remain intact.

Whitehurst himself had this to say about the announcement:

“…Importantly, Red Hat is still Red Hat.  When the transaction closes, as I noted above, we will be a distinct unit within IBM, and I will report directly to IBM CEO Ginni Rometty.  Our unwavering commitment to open source innovation remains unchanged.

The independence IBM has committed to will allow Red Hat to continue building the broad ecosystem that enables customer choice and has been integral to open source’s success in the enterprise.”

At this point, most of the hurdles standing in the way of the acquisition have been cleared.  All that remains is gaining Red Hat shareholder and regulatory approval, both of which are deemed likely.  Assuming there are no unexpected wrinkles in the plan, the deal is expected to be finalized sometime during the second half of 2019.

IBM has long supported Linux and other open source initiatives, and this deal is unlikely to change that. That is one of the reasons the proposed deal is unlikely to meet much resistance from either Red Hat’s shareholders or governmental regulatory agencies.

Uninstall Fake App Called “The Album by Google Photos”

by

If you take a lot of photos with your Android device, you’re probably constantly on the lookout for a better way to organize them and access them.  That’s exactly what the authors of the malicious app called “The Album, by Google Photos” are hoping for.

The app put in a brief appearance on the Microsoft store, where it claimed to be from Google but it’s clearly not.  Unfortunately, the authors have gone to great lengths to make it appear legitimate, and as such, it has been downloaded and installed an alarming number of times.

When this app is installed and run for the first time, users are presented with a (legitimate) Google sign in page.  It is not known whether the authors of the app siphon user login credentials from this page, but it’s certainly possible. So if you have installed the app but haven’t run it yet, don’t log in.

Once you’re logged in, the app will connect to a malicious URL and download a configuration file.  Using the information contained in the config file, it will begin running in the background, displaying ads invisibly and then clicking on them, earning revenue for the app’s creators and slowing your Android device to a crawl in the process.

Note that the authors were careful, but only to a point.  Although the ads themselves are invisible, if those ads have an audio component, the user will hear the sounds associated with the ad, although of course, they won’t have any clear indication of where the sounds are coming from.  This is, in fact, how researchers became aware of the malicious nature of the app.

If you’ve downloaded this app, please uninstall it immediately.  Doing so will improve your device’s performance and stop those sounds that have no apparent source from troubling you further.

Contact Info

740 Greenville Blvd. SE., Ste. 400-374
Greenville, NC 27858

Phone: (252) 565-1235