Wired Security Spoken Edition

When you buy an Android smartphone, it’s rarely pure Android. Manufacturers squeeze in their own apps or give it a fresh coat of interface. Carriers do it too. The resulting stew of preinstalled software and vanilla Android sometimes turns out to be rancid, putting flaws and vulnerabilities on the phone before you even take it out of the box. Learn about your ad choices: dovetail.prx.org/ad-choices

Learn about your ad choices: dovetail.prx.org/ad-choices

In 2016 Brendan Eich, the controversial creator of the JavaScript programming language and cofounder and former CTO of Mozilla, announced the launch of a new browser called Brave. The pitch was simple but ambitious: Brave would block invasive ads and tracking scripts, but it would also show its own, privacy-friendly ads in their place. And it would cut both publishers and users in on the proceeds. Nearly four years later, that vision is finally in place. Learn about your ad choices: dovetail.prx.org/ad-choices

Android has a bit of a malware problem. The open ecosystem's flexibility also makes it relatively easy for tainted apps to circulate on third-party app stores or malicious websites. Worse still, malware-ridden apps sneak into the official Play Store with disappointing frequency. After grappling with the issue for a decade, Google is calling in some reinforcements. Learn about your ad choices: dovetail.prx.org/ad-choices

It's not yet prime time for 5G networks, which still face logistical and technical hurdles, but they're increasingly coming online in major cities worldwide. Which is why it's especially worrying that new 5G vulnerabilities are being discovered almost by the dozen. At the Association for Computing Machinery's Conference on Computer and Communications Security in London today researchers are presenting new findings that the 5G specification still has vulnerabilities. Learn about your ad choices: dovetail.prx.org/ad-choices

In charges released Wednesday, the Justice Department accused two former Twitter employees, Ahmad Abouammo and Ali Alzabarah, of abusing their internal system privileges to spy on target users and pass the information they collected to Saudi Arabia. The criminal complaint also alleges that it was trivial for them to do so—a chilling reminder of how much damage an insider can cause. Learn about your ad choices: dovetail.prx.org/ad-choices

Valentine’s Day is a high-pressure event dreaded by millions—precisely the type of holiday you may not want to relive, unless you sell flowers for a living. But that’s exactly what happened to many people across the United States on Thursday, when they awoke to find that their phones had suddenly sent or received text messages originally intended to be sent around February 14. Learn about your ad choices: dovetail.prx.org/ad-choices

Pour one out for the OG Google Pixel 1. This month's Android security patches are out, and while you'll find bulletins covering the Pixel 2, 3, and 4, the original Google Pixel didn't make the cut. Google is ending support this month. ARS TECHNICA This story originally appeared on Ars Technica, a trusted source for technology news, tech policy analysis, reviews, and more. Ars is owned by WIRED's parent company, Condé Nast. Learn about your ad choices: dovetail.prx.org/ad-choices

Scammers are actively exploiting a bug in Firefox that causes the browser to lock up after displaying a message warning that the computer is running a pirated version of Windows that has been hacked. The message, which appears without any any user interaction upon visiting a site, reads: Please stop and do not close the PC … The registry key of your computer is locked. Why did we block your computer? The Windows registry key is illegal. The Windows desktop is using pirated software. Learn about your ad choices: dovetail.prx.org/ad-choices

With hackers deploying sophisticated attacks against operating systems, processors, and even firmware, manufacturers have increasingly turned to a tamper-resistant processor—or part of one—often called a "secure enclave" to stymie all sorts of attacks. They place in that immutable chip the "root of trust" on a device, relying on it to run cryptographic checks every time the system starts to make sure nothing has been subtly, maliciously altered. Learn about your ad choices: dovetail.prx.org/ad-choices

Facebook is refining while Google is designing, but first, a cartoon about when smartphones go rogue. Here's the news you need to know, in two minutes or less. Want to receive this two-minute roundup as an email every weekday? Sign up here! Today’s Headlines Google is helping design an open source, ultra-secure chip Hackers seem to launch new attacks every day, but a new kind of chip could provide some protection. Learn about your ad choices: dovetail.prx.org/ad-choices

Officials around the United States have spent the last three years scrambling to harden election and voting infrastructure against the disinformation campaigns, phishing attacks, and system probing that plagued 2016. With exactly one year to go until the 2020 presidential election, local and state boards of election have made significant progress on improving digital defenses. Learn about your ad choices: dovetail.prx.org/ad-choices

When Microsoft revealed last May that millions of Windows devices had a serious hackable flaw known as BlueKeep—one that could enable an automated worm to spread malware from computer to computer—it seemed only a matter of time before someone unleashed a global attack. As predicted, a BlueKeep campaign has finally struck. But so far it's fallen short of the worst case scenario. Learn about your ad choices: dovetail.prx.org/ad-choices

Nothing motivates me more in acquiring weapons for the Air Force than foreign military threats. Stealth fighters, satellite-guided missiles, and silent submarines were once unique US capabilities; now our troops must face them on future battlefields. WIRED OPINION ABOUT Dr. Will Roper is the Assistant Secretary of the Air Force for Acquisition, Technology and Logistics. Learn about your ad choices: dovetail.prx.org/ad-choices

WhatsApp just took a hard new line against the malware industry, suing notorious Israeli surveillance contractor NSO Group for attacks on more than a thousand of its users. The case could mark a turning point in Silicon Valley's fight against private-sector espionage mercenaries. But before it can convince a court that NSO engaged in criminal hacking, WhatsApp may have to win a thorny legal argument—one that legal experts say could require some creative contortions. Learn about your ad choices: dovetail.prx.org/ad-choices

After months of revelations and apologies, all the major smart assistant makers have revamped how they handle human review of audio snippets. Amazon Alexa, Google Assistant, Apple Siri, and Microsoft Cortana were all using third-party contractors to transcribe and vet recorded snippets, adding some human brain power to underlying machine learning algorithms. But the backlash over the lack of transparency spurred new customer controls. And with the release of Apple's iOS 13. Learn about your ad choices: dovetail.prx.org/ad-choices

Ransomware has steadily become one of the most pervasive cyberattacks in the world. And while high-profile global meltdowns like 2017’s NotPetya strain garner the most attention, localized attacks have devastating consequences as well. Look no further than the cities of Atlanta and Baltimore, whose online operations ground to a halt after ransomware takeovers. Learn about your ad choices: dovetail.prx.org/ad-choices

Russia's state-sponsored hackers have a few predictable fixations: NATO-country embassies. Hillary Clinton. Ukraine. But a less expected target has somehow remained in their sights for more than three years: the Olympics—and specifically anyone who would dare to accuse Russian athletes of cheating. Learn about your ad choices: dovetail.prx.org/ad-choices

TikTok, the app that revolves around sharing short video clips, is in a unique position. It’s arguably the first international social media platform to have built a massive audience in the United States, where it’s been downloaded more than 110 million times since its founding in 2017. TikTok has offices in California near competitors like Snapchat, Instagram, and YouTube, but it’s owned by ByteDance, a Chinese tech giant. Learn about your ad choices: dovetail.prx.org/ad-choices

When you think of online security, hopefully by now two-factor authentication springs to mind. WIRED certainly pushes the feature every chance we get. And for good reason! It's a solid protection against common web attacks like phishing and credential stuffing. But when Chris Coyne and Max Krohn, who previously cofounded OKCupid, launched their own digital identity and encrypted chat platform in 2014, they decided against using 2FA at all. Which is less radical than it sounds. Learn about your ad choices: dovetail.prx.org/ad-choices