Samsung’s Tizen operating system reported to be riddled with security vulnerabilities

Credit: Samsung

Samsung wants to reduce its dependence on Google’s Android. It’s planned replacement is Tizen – already in Samsung Gear watches, TVs, & phones in limited markets. Tizen smart washing machines & refrigerators are planned for later this year.

Just before you jump on board with Tizen, you may be interested to know that it has been described:

“You can see that nobody with any understanding of security looked at this code.” – Amihai Neiderman, head of research, Equus Software

“It may be the worst code I've ever seen … everything you can do wrong there, they do it.” – Amihai Neiderman, head of research, Equus Software

Motherboard – “Samsung's Android Replacement Is a Hacker's Dream”
https://motherboard.vice.com/en_us/article/samsung-tizen-operating-system-bugs-vulnerabilities

Ars Technica – “Samsung’s Tizen is riddled with security flaws, amateurishly written”
https://arstechnica.com/gadgets/2017/04/samsungs-tizen-is-riddled-with-security-flaws-amateurishly-written/

Extreme Tech – “Samsung’s Tizen OS may be overrun with security flaws”
https://www.extremetech.com/mobile/247043-samsungs-tizen-os-may-overrun-bugs / Samsung’s Tizen operating system riddled with security vulnerabilities Samsung Google’s Android replacement Tizen Samsung Gear watches TVs phones limited markets Tizen smart washing machine refrigerator Tizen worst code I've ever seen everything you can do wrong they do it Amihai Neiderman Israeli researcher Motherboard Samsung's Android replacement hacker's dream security researcher 40 unknown zero-day vulnerabilities Tizen operating system runs on millions of Samsung products CIA got WikiLeaks published internal documents spy agency can monitor people through their Samsung smart TVs hack hijack older models Samsung TVs CIA physical access TV install malware via USB stick window hijacking researcher Israel uncovered 40 unknown vulnerabilities zero-days remotely hack millions newer Samsung smart TVs smart watches mobile phones market slated for future release without needing physical access security holes open-source operating system called Tizen Samsung rolling out in its devices last few years Samsung reduce its reliance on Google Android run Galaxy smartphones tablets other devices Tizen running on 30 million smart TVs Samsung Gear smartwatches some Samsung phones limited countries Russia India Bangladesh plans 10 million Tizen phones Samsung Tizen operating system new line of smart washing machines refrigerators worst code I've ever seen operating system riddled with serious security vulnerabilities hacker to take control Tizen-powered devices Israeli researcher Amihai Neiderman worst code I've ever seen Motherboard in advance talk about research scheduled deliver Kaspersky Lab's Security Analyst Summit island of St. Maarten everything you can do wrong they do it nobody with any understanding of security looked at this code wrote it undergraduate program your software vulnerabilities hackers take control Samsung device from afar remote-code execution security hole Neiderman uncovered critical Samsung's TizenStore app Samsung's version Google Play Store delivers apps software updates to Tizen devices flaw design hijack software deliver malicious code Samsung TV TizenStore software highest privileges device Holy Grail hacker abuse it update Tizen system malicious code TizenStore use authentication only authorized Samsung software gets installed device heap-overflow vulnerability control before authentication function kicked in researchers uncovered problems other Samsung devices in the past Tizen escaped extensive scrutiny security community not widely used on phones yet head of research Equus Software Israel Android phone research began analyzing code eight months ago purchasing Samsung TV Tizen installed Samsung installing operating system on new televisions smart watches limited line of smartphones update Tizen system with any malicious code you want first Tizen phones sold in India since expanded South Africa Nepal Africa Indonesia Samsung plans sell Tizen phones Latin America Middle East Europe eventually the United States expand catalogue Tizen applications developers 100 most downloaded mobile apps how bad Tizen code was on his TV purchase few Tizen phones Tizen code base is old borrows from previous Samsung coding projects Bada previous mobile phone operating system that Samsung discontinued code push it into Tizen vulnerabilities he found new code written specifically for Tizen within the last two years mistakes programmers were making twenty years ago indicating Samsung lacks basic code development and review practices prevent catch flaws strcpy() Tizen Strcpy() function replicating data in memory basic flaw fails to check enough space write data create buffer overrun condition attackers exploit buffer overrun space to which data is being written too small for the data data write adjacent areas of memory programmers function today flawed, yet Samsung coders are using it everywhere programmers failed SSL encryption secure connection transmitting certain data use it on some data transmissions not others not on ones that need it most wrong assumptions about needed encryption extra work move between secure connections unsecure connections didn't do it inadvertently making conscious decisions not to use SSL Samsung report problems automated email response contacted Korean company Samsung spokesperson sent boilerplate response via email Samsung Electronics security and privacy regularly check our systems credible potential vulnerability act promptly investigate and resolve fully committed cooperating mitigate any potential vulnerabilities SmartTV Bug Bounty program Samsung committed working with security experts around the world mitigate any security risks been in contact with Samsung vulnerabilities uncovered Samsung reconsider deploying Tizen in phones major overhaul of the code Tizen Galaxies running Tizen Tizen is not safe /

Never give up – Elon Musk

Easy to say, & he isn’t even the first to say it.



Does he believe it? Does he live by it? Some would say those questions are answered in the video. Not convinced? Check this, from someone who worked for him for over five years – how Elon Musk responded in the minutes after the failure of the third Falcon 1:

Quartz – “What Elon Musk is really like as a boss”
https://qz.com/498030/what-elon-musk-is-really-like-as-a-boss/

Some other thoughts on success


Credit: Bulk Princess/Imgrum / working for Elon Musk SpaceX Head of Talent Acquisition answer coloured colored by my own experiences unbiased personal narrative character leader company Tesla SpaceX working with Elon one really rough day epic aftermath SpaceX launched third flight Falcon 1 launch vehicle Falcon 1 predecessor Falcon 9 launch vehicles company flies today defining moment for the company his $100M personal investment in the company up to three tries successful by the third flight admit defeat pressure created by this narrative press lobbyist armies competitors largest, most powerful defense contractors in the world overdrive in DC undermine SpaceX damage our credibility too risky inexperienced multi-billion dollar interests in the space launch business SpaceX picture perfect flight first stage flight Earth’s gravity vehicle experiences max Q maximum dynamic pressure conditions vehicle physically harshest highest risk points of mission first stage flight stage separation first stage vehicle detaches falls away from the 2nd stage journey to space lost the vehicle and mission SpaceX VP of Propulsion Tom Mueller modern day godfather of rocket science most brilliant scientific minds on the planet team great job redesigning vehicle engines systems more efficient and powerful turned off the first stage engine separate the vehicle stages stages uncoupled kick thrust first stage engine first stage second stage separate two sections of the vehicle devastating and emotional experience 350 employees cheered the vehicle on as it took off mission clock stages were about to separate video feed was cut 20 second viewing delay mission control team projected the external press feed major mission anomalies lost video something had gone wrong Elon Musk most senior technical people SpaceX commanding the mission waited anxiously mood in the building hung thick with despair SpaceX many people have been working 70-80+ hours a week difficult barriers in technology institution politics finance sheer force of their blood and sweat they had all given so much mentally and physically exhausted really needed a win faith depleted the hopes and resources impact the future of the company potential to send the company into a downward spiral failure in leadership press potential customers destroyed us internally addressed the company we knew this was going to be hard rocket science flight taking on a significant investment from Draper Fisher Jurvetson providing SpaceX with ample financial resources to attempt two more launches we need to pick ourselves up and dust ourselves off we have a lot of work to do I will never give up and I mean never if we stick with him we will win most impressive display of leadership energy despair and defeat massive buzz of determination people began to focus on moving forward looking back shifts in body unbelievably powerful experience SpaceX team identified likely cause launch failure turnaround time others in the launch business failure investigations our team data announced the results of our investigation supporters customer community retain their trust another rocket fully manufactured integrated on location ready to fly again unlimited human and financial resources restricted financial diet SpaceX flew Falcon 1 launch vehicle executed first 100% successful launch world’s first privately built rocket to achieve earth orbit accomplishment task previously completed by only six mightiest nations in the history of the world victory entire SpaceX team future of humanity overall true character of Elon Musk undeterred in the face of all odds undaunted by the fear of failure he is never satisfied with himself so he is never really satisfied with anyone around him pushes himself harder and harder worth every ounce of blood and sweat /

Cyclone Debbie turned out the lights in Queensland – isn’t that the Prime Minister’s cue to start criticising sustainable energy?

Cyclone Debbie, 28 March 08:20 AEST
Credit: Himiwari/ABC

On the afternoon of Wednesday 28 September 2016, a once-in-50-year storm damaged critical electrical infrastructure in South Australia, blacking out the entire state. At 07:20 the next morning, the Prime Minister’s office was informed that the black-out was unrelated to the 40%+ renewable energy in that state. Despite this, those on the conservative side of politics, primarily the Prime Minister Malcolm Turnbull & Federal Energy Minister Josh Frydenberg, rushed to criticise sustainable energy.¹

Another extreme weather event on 08 February 2017, caused load shedding in South Australia. Once again, those on the conservative side of Australian politics rushed to judgment.²

At the moment, as a result of cyclone Debbie, electricity supplies are down in much of the coal-dependant state of Queensland.

Prime Minister, isn’t that your cue to start criticising sustainable electricity? Josh?
__________

If the above seems to make little of the disaster (including deaths) still unfolding in Queensland, that was not my purpose. To anyone offended: please accept my apologies. The people of South Australia are still waiting for an apology from the Prime Minister & Energy Minister.
__________

¹ HitchHiker’s Guide 2 Tech: “Turnbull knew renewables were not the cause of SA blackout the next day”, https://hhg2tech.blogspot.com/2017/02/turnbull-knew-renewables-were-not-cause.html

² HitchHiker’s Guide 2 Tech: “Keeping the lights on in a rapidly changing world”, https://hhg2tech.blogspot.com/2017/02/keeping-lights-on-in-rapidly-changing.html

/ Prime Minister Malcolm Turnbull ministers were told wind not to blame renewables for South Australia blackout Turnbull government statements blaming last year's South Australian blackout high renewable energy target ignored confidential public service advice was not the cause emails obtained under freedom-of-information rules febrile debate renewable energy versus coal-fired generation raging in Canberra revelation undermine Coalition's energy messaging shatter confidence call for investment sober debate bipartisan policy solutions government denies it ignored the early advice it was the storm which brought down lines ministers canvassed publicly central state's high renewable energy reliance contributed subsequent assessment refer to the state's energy mix complicating factor security of supply advice to the government dated 29 September 2016 day after the whole of SA went black devastating storm suggested problem state's high reliance on wind generation key parts electricity distribution network wrecked during a severe weather event email trail senior official from Malcolm Turnbull department seeking explanation blackout 8.31 evening of the storm next morning outlines subsequent discussions 5am phone hook-up departmental political staff email sent Prime Minister Malcolm Turnbull's own officials assessment of the blackout including advice Australian Energy Market Operator unprecedented damage network bigger than any other event in Australia 20+ steel transmission towers down State wind damage Adelaide Port Augusta electricity network unable to cope sudden large loss generation capacity AEMO's advice generation mix renewable or fossil fuel was not to blame yesterday's events loss 1000 MW power such a short space of time transmission lines fell over within hours of the calamity Turnbull government capitalising on the blackout suggesting state's unsustainably high quotient wind generation failed to keep working in the conditions Deputy Prime Minister Barnaby Joyce chorus from Canberra state Labor government's unrealistic energy policies other senior ministers including Energy and Environment Minister Josh Frydenberg major storm major blackout across a whole state South Australia renewable energy target storm capacity to handle it intermittent renewables pose real challenges state Labor governments priorities renewable targets extremely aggressive extremely unrealistic energy security blackout South Australia extreme heat event energy blame game intensified evidence again suggests adequate supply gas turbine generation sitting idle wind contribution fell Labor's spokesman climate change energy Mark Butler hysterical Mr Turnbull playing politics very deep crisis enveloping our energy system renewable energy sustainable energy electric power solar photovoltaic photo voltaic coal fired power station wind power wind turbine gas fired power station accurate weather forecasting grid /

Jeans with a dedicated phone pocket

Lithium ion batteries of the type used in phones pose a substantial risk of fire &/or explosion under a range of circumstances,¹ including external force.² With this in mind, a pants pocket is one of the worst possible places to carry a phone.

Even ignoring the risk of a battery fire/explosion, phones carried in a pants pocket pose a risk of damage to the phone itself when the user sits down. Remember bendgate?³

With this in mind, these jeans, with a dedicated phone pocket may be a viable option:


Muji mens organic cotton stretch denim slim jeans
Credit: Muji

The Gadgeteer – “These jeans have a pocket especially designed to hold your smartphone”
http://the-gadgeteer.com/2017/03/31/these-jeans-have-a-pocket-especially-designed-to-hold-your-smartphone/

Buy them at:
https://www.muji.us/store/men-ogc-stretch-dnm-slim-jeansd7se221.html

A conventional pants pocket is one of the worst possible places to carry a phone. Better alternatives include a jacket pocket, backpack, handbag, bumbag, or holster.¹
__________

¹ “More lithium ion battery fires – not just phones”, https://hhg2tech.blogspot.com/2016/11/more-lithium-ion-battery-fires.html

² “Samsung pulls the plug on the Note 7”, https://hhg2tech.blogspot.com/2016/10/samsung-pulls-plug-on-note-7.html

³ “Will it bend? — iPhone 6 Plus”, https://hhg2tech.blogspot.com/2014/09/will-it-bend-iphone-6-plus.html

/ jeans pocket especially designed hold smartphone pants dedicated pocket smartphone Japanese brand Muji new line 100% cotton denim slim jeans for men pocket back right hip location 6th pocket prevent wearer inadvertently sitting on their smartphone uncomfortable wearer phone Muji jeans available three shades several lengths price per pair affordable $33.60 $US33.60 /

Omega 3 fish oil – new evidence

Credit: Skeptical Raptor

You may have read recently on these pages, why omega-3 fish oil supplements appear not to work, & what can be done about it.¹ In summary:

● cold water oily fish, such as salmon & tuna, in the diet, is protective against a large & diverse range of diseases, including cardiovascular disease, prostate cancer, dementia ...¹

● benefits have been attributed to the omega-3 fatty acid which they contain
● omega-3 supplements have, as a result, become popular
● subsequent research has found that omega-3 supplements are ineffective

● only one third of the contents of a typical supplement is actually omega-3

● omega-3 in a typical supplement is oxidised, which makes it ineffective

● omega-3 is easily oxidised, which makes production of un-oxidised supplements difficult & expensive

● all of the above suggests that supplements would be effective if a pure, non-oxidised, source of omega-3 was available

● omega-3 supplements from “algal sources” are claimed to be suitable

Some of the material presented above has been questioned by Professor Peter McLennan of the Faculty of Science, Medicine & Health at the University of Wollongong:

● many studies are flawed

● “main effect is not in preventing heart attacks, preventing the atherosclerosis, but indeed preventing that from causing fatal arrhythmias”

● “anti-inflammatory effects do take high doses, & it is quite effective in that.” – for arthritis 10 millilitres – 10 capsules per day

● fish oil is typically 30% omega 3 – this does not interfere with the therapeutic effect

● “It's very difficult to actually oxidise fish oil … had to bubble it with oxygen for 30 days or more to get a significant degree of oxidation.”

Podcast & transcript at:

Australian Broadcasting Corporation – “Following up on fish oil”
http://www.abc.net.au/radionational/programs/healthreport/following-up-on-fish-oil/8349732
__________

¹ “Can omega-3 fish oil supplements work?”, https://hhg2tech.blogspot.com/2017/03/can-omega-3-fish-oil-supplements-work.html
/ algal sources Something fishy in the oil U.S. study replicates findings USA New Zealand Australia what's really in that fish oil capsule Australian Broadcasting Corporation ABC Health Report Dr. Norman Swan reducing your risk of heart attack stroke US study replicates findings New Zealand Australia far from what you think you are paying for Preston Mason pharmacologist Brigham and Women's Hospital Harvard Medical School in Boston huge industry local stores very popular brands omega-3 dietary supplements laboratory lab capsules examine them for their content interesting observations omega-3 fish oil supplement a third of the overall product two-thirds other fats significant levels of saturated fat saturated fat source preparations remove other fats put it in as it's harvested problem omega-3 fatty acids generally oxidised interacted with oxygen like biological rust no longer effective test them oxides had no benefit biological activity important omega-3 fatty acids Cochrane collaboration trials of fish oil cardiovascular effect effect from fish oil oxidised quality issues confidence in any of these studies well-characterised well qualified product trials don't involve such products how can a manufacturer avoid oxidisation inevitable low-cost product extraordinary efforts isolate unoxidised forms omega-3 production of omega-3 by-product formation of proteins for poultry farmers large study New Zealand Auckland 30 different products over 80% had higher than accepted levels of oxidation parameters high levels of oxidation confirmed other labs Canada other parts of North America poor consumer industry that's not carefully regulated consumer beware lack of oversight levels quality omega-3 fatty acids in fish oils Preston Mason Brigham and Women's Hospital in Boston research group Liggins Institute University of Auckland published extensive analysis fish oil capsules authors Professor David Cameron-Smith New Zealand. Welcome Health Report broadly the same results research fish oil study ability of fish oil to mitigate the risk of diabetes oxidative effects inflammatory effects of diabetes mitigation of diabetes inflammatory events elevated blood glucose fish oil participants in that clinical research same results saturated fatty acids capsules doses omega-3 fatty acids very high rates of oxidation gone off long chain omega-3 fatty acids one of the most unstable compounds on earth long very complicated very prone to oxidation start to go rancid very quickly just like leaving fish on the bench starts to go rancid taste awful very quickly CSIRO researcher saying published a similar study in November David Cameron-Smith data anomalies research journal authors Omega-3 Centre mouthpiece propagating benefits omega-3 commercial laboratory analysis analyses performed using techniques commercial in confidence best efforts supplements methodologies results methodologies are confidential consumer fish oil supplements by-product huge industry food stock most fish oil is farmed from ocean fish off the coast of Peru and Chile large trawling vessels processed onshore conditions ship shore processing can't verify the quality high throughput processing fish oil feeding fish meal single biggest product fisheries smaller by-product less valuable by-product fish oil reliable products market advice source abundant supply of fresh oily fish omega-3 reliable source manufacture omega-3s from algal sources unoxidised source of omega-3 algal sources Health Report Norman Swan Professor David Cameron-Smith human nutritionist Liggins Institute at the University of Auckland /

Nissan is making progress with vehicle autonomy too – Robert Llewellyn takes a ride

Video below, claimed to be provided by Elon Musk, shows a Tesla Model S driving unaided to an office building, dropping off its passenger, & finding a parking spot. While finding the parking spot, the Model S stops for a pedestrian. If this video was not sourced from Tesla, the parking lot contains a surprising number of their products.



Tesla gets the biggest share of the publicity, but most, if not all, car manufacturers are working on an autonomous vehicle. Robert Llewellyn, was recently a passenger in a Nissan Leaf with substantial autonomy. A Nissan engineer was in the driver’s seat & had to take over briefly, but an impressive demonstration, none-the-less.

/ Tesla Model S Autopilot autonomy autonomous Autopilot Nissan Leaf electric vehicle first ride fully autonomous car public roads UK United Kingdom Nissan Tetsuya Iijima not driving car vehicle ride in Nissan’s self-driving electric Leaf all-electric Leaf made by Nissan rolled to a stop combination 12 cameras four side panel laser scanners computing power detailed mapping data self piloted car mostly drive itself Nissan general manager automated driving tech sit hands off the wheel short ride future of driving handful of companies develop autonomous car technology freeway next car heads toward Highway 237 passengers test drive first public Nissan's self driving electric Leaf U.S. U.S.A. United States combination of sensors configuration first time Tokyo immature technology Nissan brought self driving car Silicon Valley start testing on U.S. roads company's Silicon Valley Research center hosted a media event unveiling technology projects Nissan research artificial intelligence connected cars Leaf success self driving cars more cautious methodical manner Google electric cars Nissan self-driving features mass market introduce self driving features autonomous driving traffic jams hands-free lane changing cost low enough safe enough bulk mainstream car lineup sensor computing technology self driving Nissan LEAF costs many times more building autonomous technology beta-tested Nissan CEO Carlos Ghosn Nissan partner French automaker Renault add incremental autonomous features ten vehicle models next four years replacing the driver empowering the driver self driving cars hottest technology Silicon Valley automakers Ford Toyota Volkswagen General Motors GM latest technologies Nissan car companies research centers Silicon Valley attract most talented Bay Area engineers leading tech players /

Samsung Galaxy S8 revealed

Samsung Galaxy S8 is being revealed at the moment. A few things predicted on these pages on 10 March:

☑ 5.8 & 6.2 inch screens

☑ S8 & S8 Plus are much smaller than screen sizes would suggest because bezels are largely eliminated

☑ fingerprint sensor at the back, next to the camera
☑ no physical home button

/ Samsung Galaxy S8 release date specifications specs rumours price explained Samsung Galaxy S8 Olixar Ultra-Thin Case - 100% Clear Samsung's Galaxy S8 flagship is coming on March 29 Galaxy S8 reveal date revealed by Samsung apologizing to fans yet again for its disastrous drama recalling 3 million fire explosion Galaxy Note 7 phones teasing the Galaxy S8 design and announcement date safe buyable Galaxy S8 South Korean company giant mobile show Samsung characteristically launches its Galaxy S phones Samsung's profits are soaring chips S7 and S7 Edge phone sales $5 billion lost on the Note 7 impending lawsuits Samsung truly great phone most impressive phones Samsung ever made Galaxy S8 can Samsung win back buyers' trust Galaxy S8 rumors leaks rumour rumor speculation Samsung official Galaxy S8 announcement Galaxy S8 could start selling mid-April Samsung will reveal the Galaxy S8 March 29 in New York City Samsung's revised eight-point battery testing procedure more space inside for the battery Galaxy S8 Plus Galaxy S8 + Galaxy S8 Edge curved screen Galaxy S8 Samsung's flagship phone dual-curved screens scaled the production process curved screens two phones Galaxy S8 and Galaxy S8 Plus Galaxy S8 could still come in two sizes Galaxy S8 Edge Galaxy S8 Plus sizes hardware specs S8 /