Blog

7-Eleven Japan’s weak app security led to a $500,000 customer loss

[ad_1]

The app was troubled from the start, with customers complaining of illegal transactions made through their accounts since day one. According to ZDNet, the app’s poorly designed password retrieval method was to blame. Instead of automatically sending an email to the address users had on file, the app allowed them to retrieve their passwords using any email address.

In other words, the high-tech thieves didn’t even have to make the extra effort of infiltrating users’ inboxes: they only had to find out people’s email addresses, their dates of birth and their phone numbers. And we all know how easy it is to look those up these days, with almost everyone having social media accounts. The fact that the app used January 1st, 2019 as the default birthday of everyone who signed up without specifying their own made it much easier for the bad players, as well. All they needed to do after they gained entry to an account was to generate a barcode with the app every time they paid at a 7-Eleven outlet.

The company promises to compensate everyone who fell victim to the breach. Japanese authorities arrested a couple of Chinese men who attempted to pay for purchases amounting to thousands of dollars using stolen 7pay IDs. They now believe that an international group, which includes a hacker, might be involved. While the incident is still under investigation, the country’s Ministry of Economy, Trade and Industry has determined that company failed to follow guidelines to prevent unauthorized access. The agency is urging the company boost its security measures if it wants to re-launch 7pay in the future.

[ad_2]

Source link

Huawei is helping all the UK’s top carriers build their 5G networks

[ad_1]

The companies are all believed to be using Huawei technology in the “non-core” elements of their networks. That would be in line with the UK government’s rumored strategy, but they’re still gambling that officials won’t take a stricter attitude and issue an outright ban on Huawei networking gear.

There might be reasons to take a chance on Huawei, apart from the lack of publicly available evidence of surveillance. Assembly’s Matthew Howett noted that reliance on a single supplier for a cellular network is dangerous. A major failure in Ericsson equipment left O2 users without 3G and LTE service for a full day — if everyone had been using similar hardware, the UK as a whole might have suffered the same problem. It might also delay launches by as much as two years, Howett said. Like it or not, Huawei could be useful in helping some countries offer 5G in a timely and reliable fashion.

[ad_2]

Source link

Watch VW’s electric race car smash a 20-year-old Goodwood record

[ad_1]

The trick, as you might imagine, was to save weight. Unlike the Pikes Peak variant, the ID.R at Goodwood was optimized for a “sprint” — it carried a smaller battery pack tuned for a brief but fierce assault up the 1.16-mile hill. There won’t be too many complaints given that an F1 car set the previous best, but this is a reminder that it still requires a lot of work for an EV to emerge triumphant.

As with VW’s other record-breaking runs, this is ultimately a media campaign. VW wants to show that it’s a big supporter of electric cars, and that its diesel emissions scandals are firmly in the past. Few things demonstrate that quite so clearly as proving that EVs can outperform gas-guzzlers in some of the toughest motorsport challenges on the planet.

[ad_2]

Source link

The surprising story behind the Apple Watch’s ECG ability

[ad_1]

Deep Medicine: How Artificial Intelligence Can Make Healthcare Human Again
by Eric Topol


Book cover

The Apple Watch produced a seismic shift in the public’s acceptance of biometric monitoring. Sure, we’ve had step counters, heart rate and sleep monitors for years, but the Apple Watch made it hip and cool to do so. In Deep Medicine, author Eric Topol examines how recent advances in AI and machine learning techniques can be leveraged to bring (at least the American) healthcare system out of its current dark age and create a more efficient, more effective system that better serves both its doctors and its patients. In the excerpt below, Topol examines the efforts by startup AliveCor and the Mayo Clinic to cram an ECG’s functionality into a wristwatch-sized device without — and this is the important part — generating potentially lethal false positive results.

In February 2016, a small start-up company called AliveCor hired Frank Petterson and Simon Prakash, two Googlers with AI expertise, to transform their business of smartphone electrocardiograms (ECG). The company was struggling. They had developed the first smartphone app capable of single-lead ECG, and, by 2015, they were even able to display the ECG on an Apple Watch. The app had a “wow” factor but otherwise seemed to be of little practical value. The company faced an existential threat, despite extensive venture capital investment from Khosla Ventures and others.

But Petterson, Prakash, and their team of only three other AI talents had an ambitious, twofold mission. One objective was to develop an algorithm that would passively detect a heart-rhythm disorder, the other to determine the level of potassium in the blood, simply from the ECG captured by the watch. It wasn’t a crazy idea, given whom AliveCor had just hired. Petterson, AliveCor’s VP of engineering, is tall, blue-eyed, dark-haired with frontal balding, and, like most engineers, a bit introverted. At Google, he headed up YouTube Live, Gaming, and led engineering for Hangouts. He previously had won an Academy Award and nine feature film credits for his design and development software for movies including the

Transformers, Star Trek, the Harry Potter series, and Avatar. Prakash, the VP of products and design, is not as tall as Petterson, without an Academy Award, but is especially handsome, dark-haired, and brown-eyed, looking like he’s right out of a Hollywood movie set. His youthful appearance doesn’t jibe with a track record of twenty years of experience in product development, which included leading the Google Glass design project. He also worked at Apple for nine years, directly involved in the development of the first iPhone and iPad. That background might, in retrospect, be considered ironic.

Meanwhile, a team of more than twenty engineers and computer scientists at Apple, located just six miles away, had its sights set on diagnosing atrial fibrillation via their watch. They benefited from Apple’s seemingly unlimited resources and strong corporate support: the company’s chief operating officer, Jeff Williams, responsible for the Apple Watch development and release, had articulated a strong vision for it as an essential medical device of the future. There wasn’t any question about the importance and priority of this project when I had the chance to visit Apple as an advisor and review its progress. It seemed their goal would be a shoo-in.

The Apple goal certainly seemed more attainable on the face of it. Determining the level of potassium in the blood might not be something you would expect to be possible with a watch. But the era of deep learning, as we’ll review, has upended a lot of expectations.

The idea to do this didn’t come from AliveCor. At the Mayo Clinic, Paul Friedman and his colleagues were busy studying details of a part of an ECG known as the T wave and how it correlated with blood levels of potassium. In medicine, we’ve known for decades that tall T waves could signify high potassium levels and that a potassium level over 5.0 mEq/L is dangerous. People with kidney disease are at risk for developing these levels of potassium. The higher the blood level over 5, the greater the risk of sudden death due to heart arrhythmias, especially for patients with advanced kidney disease or those who undergo hemodialysis. Friedman’s findings were based on correlating the ECG and potassium levels in just twelve patients before, during, and after dialysis. They published their findings in an obscure heart electrophysiology journal in 2015; the paper’s subtitle was “Proof of Concept for a Novel ‘Blood-Less’ Blood Test.” They reported that with potassium level changes even in the normal range (3.5–5.0), differences as low as 0.2 mEq/L could be machine detected by the ECG, but not by a human-eye review of the tracing.

Friedman and his team were keen to pursue this idea with the new way of obtaining ECGs, via smartphones or smartwatches, and incorporate AI tools. Instead of approaching big companies such as Medtronic or Apple, they chose to approach AliveCor’s CEO, Vic Gundotra, in February 2016, just before Petterson and Prakash had joined. Gundotra is another former Google engineer who told me that he had joined AliveCor because he believed there were many signals waiting to be found in an ECG. Eventually, by year’s end, the Mayo Clinic and AliveCor ratified an agreement to move forward together.

The Mayo Clinic has a remarkable number of patients, which gave AliveCor a training set of more than 1.3 million twelve-lead ECGs gathered from more than twenty years of patients, along with corresponding blood potassium levels obtained within one to three hours of the ECG, for developing an algorithm. But when these data were analyzed it was a bust.

Here, the “ground truths,” the actual potassium (K+) blood levels, are plotted on the x-axis, while the algorithm-predicted values are on the y-axis. They’re all over the place. A true K+ value of nearly 7 was predicted to be 4.5; the error rate was unacceptable. The AliveCor team, having made multiple trips to Rochester, Minnesota, to work with the big dataset, many in the dead of winter, sank into what Gundotra called “three months in the valley of despair” as they tried to figure out what had gone wrong.

Petterson and Prakash and their team dissected the data. At first, they thought it was likely a postmortem autopsy, until they had an idea for a potential comeback. The Mayo Clinic had filtered its massive ECG database to provide only outpatients, which skewed the sample to healthier individuals and, as you would expect for people walking around, a fairly limited number with high potassium levels. What if all the patients who were hospitalized at the time were analyzed? Not only would this yield a higher proportion of people with high potassium levels, but the blood levels would have been taken closer to the time of the ECG.

They also thought that maybe all the key information was not in the T wave, as Friedman’s team had thought. So why not analyze the whole ECG signal and override the human assumption that all the useful information would have been encoded in the T wave? They asked the Mayo Clinic to come up with a better, broader dataset to work with. And Mayo came through. Now their algorithm could be tested with 2.8 million ECGs incorporating the whole ECG pattern instead of just the T wave with 4.28 million potassium levels. And what happened?

asdf

The receiver operating characteristic (ROC) curves of true versus false positive rates, with examples of worthless, good, and excellent plotted. Source: Wikipedia (2018)

Eureka! The error rate dropped to 1 percent, and the receiver operating characteristic (ROC) curve, a measure of predictive accuracy where 1.0 is perfect, rose from 0.63 at the time of the scatterplot to 0.86. We’ll be referring to ROC curves a lot throughout the book, since they are considered one of the best ways to show (underscoring one, and to point out the method has been sharply criticized and there are ongoing efforts to develop better performance metrics) and quantify accuracy—plotting the true positive rate against the false positive rate (Figure 4.2). The value denoting accuracy is the area under the curve, whereby 1.0 is perfect, 0.50 is the diagonal line “worthless,” the equivalent of a coin toss. The area of 0.63 that AliveCor initially obtained is deemed poor. Generally, 0.80–.90 is considered good, 0.70–.80 fair. They further prospectively validated their algorithm in forty dialysis patients with simultaneous ECGs and potassium levels. AliveCor now had the data and algorithm to present to the FDA to get clearance to market the algorithm for detecting high potassium levels on a smartwatch.

There were vital lessons in AliveCor’s experience for anyone seeking to apply AI to medicine. When I asked Petterson what he learned, he said, “Don’t filter the data too early. . . . I was at Google. Vic was at Google. Simon was at Google. We have learned this lesson before, but sometimes you have to learn the lesson multiple times. Machine learning tends to work best if you give it enough data and the rawest data you can. Because if you have enough of it, then it should be able to filter out the noise by itself.”

“In medicine, you tend not to have enough. This is not search queries. There’s not a billion of them coming in every minute. . . . When you have a dataset of a million entries in medicine, it’s a giant dataset. And so, the order or magnitude that Google works at is not just a thousand times bigger but a million times bigger.” Filtering the data so that a person can manually annotate it is a terrible idea. Most AI applications in medicine don’t recognize that, but, he told me, “That’s kind of a seismic shift that I think needs to come to this industry.”

Excerpted from Deep Medicine: How Artificial Intelligence Can Make Healthcare Human Again. Copyright © 2019 by Eric Topol. Available from Basic Books.

[ad_2]

Source link

AMD’s pre-release Radeon RX 5700 price drop

[ad_1]


Pre-release price drop.AMD fires back at ‘Super’ NVIDIA with Radeon RX 5700 price cuts

AMD unveiled its new Radeon RX 5700 line of graphics cards with 7nm chips at E3 last month, and with just days to go before they launch on July 7th, the company has announced new pricing. The standard Radeon RX 5700 with 36 compute units and speeds of up to 1.7GHz was initially announced at $379, but will instead hit shelves at $349 — the same price as NVIDIA’s RTX 2060. The 5700 XT card that brings 40 compute units and up to 1.9GHz speed will be $50 cheaper than expected, launching at $399 — lower than the $499 2070 Super.


Ready to go to the beach, or to Burning Man.Volkswagen’s Type 20 electric concept merges old-school and new

The VW Type 20 concept car is essentially a tech-filled 1962 Microbus with its engine swapped for a battery pack and electric motor.


Here’s why everyone is waiting for iPadOS.Engadget readers love the iPad Pro 12.9 — but not iOS 12

While the iPad Pro 12.9 is an “impressive technical achievement,” our reviewer Chris Velazco ultimately wanted more from the software side and gave the tablet a solid, but not spectacular, score of 84. Users were actually more disappointed by iOS 12, awarding the device an average score of 78.


Sticker price £300,000.Charge’s Mustang hides an EV inside classic American muscle

So why this 1960s Mustang shell? Well, Charge knew it would be a head-turning project. The car’s enormous size, though, also made it easier to squeeze in all of the necessary EV components. Plus, Charge’s version is effectively a brand-new car powered by modern and, hopefully, more reliable components.


Due to ‘maintenance related issues.’MoviePass temporarily shuts down service

It’s unclear how long the outage will last, but in a tweet MoviePass said the service could be down for “several weeks.”

But wait, there’s more…


The Morning After is a new daily newsletter from Engadget designed to help you fight off FOMO. Who knows what you’ll miss if you don’t Subscribe.

Craving even more? Like us on Facebook or Follow us on Twitter.

Have a suggestion on how we can improve The Morning After? Send us a note.



[ad_2]

Source link

Recommended Reading: Apple's ambitious TV plan

[ad_1]


Can Apple hack it in Hollywood? We talk to the man behind Apple TV+
Stuart McGurk,
GQ UK

Apple officially revealed it's TV streaming service in March, but it won't debut for the masses until this fall. There have been all kinds of reports swirling…

[ad_2]

Source link

Jaguar confirms that the I-Pace team is building an electric XJ

[ad_1]

The reveal didn’t dismiss rumors that it will eventually also release a combustion-engine powered version of the new XJ. The plant is being retooled to handle Jaguar Land Rover’s Modular Longitudinal Architecture (MLA) platform that’s intended to support diesel, gasoline, electric and hybrid models.

The idea, apparently, is to give customers choice on the powerplant, while still fulfilling a promise to provide electrified options on all new Jaguar and Land Rover models introduced from 2020 on. Also, Jaguar is asking for the UK government and other manufacturers to “bring giga-scale battery production to the country.” According to CEO Dr. Ralf Speth, “Affordability will only be achieved if we make batteries here in the UK, close to vehicle production, to avoid the cost and safety risk of importing from abroad.”

[ad_2]

Source link

YouTube says its policy on ‘instructional’ hacking videos isn’t new

[ad_1]

YouTube TOS

One argument against the updated policy language with a specific line asking users not to upload “instructional hacking and phishing videos” comes from someone with relevant experience. Marcus “MalwareTech” Hutchins has worked to secure networks and was able to stop the spread of the “WannaCry” ransomware, and also plead guilty to charges for writing malware years earlier.

As he explains in a blog post, making sure ethical hacking videos are accessible could keep others from experiencing a similar path:

One has to ask, where would we rather kids learn about computer security?
A site like YouTube, where security professionals will steer them in the direction of a legitimate job, six figure salaries, and strong ethics?
Or a shady forum where they will not only be exposed to crime, but criminals who believe what they are doing is both legal and ethical?



[ad_2]

Source link

Capcom’s ‘Teppen’ card game pits Chun-Li against Dante

[ad_1]

There is a slight twist to the familiar formula of these games. Teppen uses an Active Response system that adds a dash of real-time thrills to the usual turn-based gameplay — you might not have long to think about your next move.

The game is technically free to play. Like so many of its competitors, though, you’re going to see a flood of in-app purchases. Season passes will provide “various extras,” and there’s plenty more beyond that. Google Play lists goodies over $100, so you can easily spend a small fortune trying to gain an edge over rivals. More characters are coming over time, though, and this might do the trick if Hearthstone and other (mostly fantasy-based) games just don’t scratch your itch.

[ad_2]

Source link

AI can simulate quantum systems without massive computing power

[ad_1]

It’s difficult to simulate quantum physics, as the computing demand grows exponentially the more complex the quantum system gets — even a supercomputer might not be enough. AI might come to the rescue, though. Researchers have developed a computational method that uses neural networks to simulate quantum systems of “considerable” size, no matter what the geometry. To put it relatively simply, the team combines familiar methods of studying quantum systems (such as Monte Carlo random sampling) with a neural network that can simultaneously represent many quantum states.

[ad_2]

Source link