The Federal Communications Commission announced Friday that it has proposed fining the nation's four largest wireless carriers $200 million for selling access to their customers' location information without taking reasonable measures to protect customers' real-time location information. From a report: The agency is proposing T-Mobile face a fine of more than $91 million. AT&T will be fined more than $57 million. It's fining Verizon more than $48 million. And Sprint's fine will be more than $12 million. FCC Chairman Ajit Pai said the proposed fines have put wireless carriers on notice that they need to do a better job protecting consumers' privacy. "This FCC will not tolerate phone companies putting Americans' privacy at risk," he said in a statement. Still, the amount of the fines is a drop in the bucket for the nation's carriers. For instance, Verizon reported fourth quarter revenue of $34.78 billion; AT&T reported revenue of $46.82 billion; and T-Mobile reported revenue of $11.88 billion.

U.S. regulators approved a plan to pay Intelsat SA and other satellite providers to give up airwaves so they can be redeployed for the fast 5G mobile networks being rolled out. From a report: The Federal Communications Commission on a 3-2 vote Friday approved Chairman Ajit Pai's plan for as much as $9.7 billion to clear the frequencies, with the money coming from bidders expected to include large telephone companies such as Verizon Communications Inc. The action "will help deliver 5G services to consumers across our country and promote our global leadership," said Pai. The satellite companies use the spectrum to beam TV and radio programs to stations, but say they can give up part of it while still serving customers on frequencies they retain, in part because they would use new satellites to carry data. The FCC will sell the airwaves at a public auction. Pai earlier proposed that Intelsat get as much as $4.85 billion for clearing airwaves quickly. The FCC in its vote didn't say if that figure had changed.

A Slashdot reader shared a warning from the editor-in-chief at How-To Geek about a "shockingly convincing" scam: The scam text message says, "Your Verizon account security needs validation" and invites you to tap a link to "validate your account." Once you do, you end up at a phishing website that looks almost exactly like Verizon's real website. The fake website asks for your My Verizon mobile number or user ID and password. After you provide those, it'll ask for your account PIN. Finally, it requests all your personal details to "identify yourself."

For smishing scams, this is convincing work. The website looks real and authentic — if you don't look too hard at the address, which isn't actually Verizon's actual website... At the end of the process, the phishing website thanks you for providing your information and "redirects you to the home page." For maximum deception, the phishing website actually redirects you to Verizon's real website at the end of the process. If you don't look too close, you might be deceived into thinking you were on Verizon's website the whole time.

What's the game? We didn't provide real Verizon account details, so we can't say for sure. The scammer will probably try to take over your Verizon account, order smartphones on credit, and stick you with the bill.

An anonymous reader quotes a report from Reuters: T-Mobile's edged closer to a takeover of Sprint after a federal judge on Tuesday approved the deal, rejecting a claim by a group of states that said the deal would violate antitrust laws and raise prices. During a two-week trial in December, T-Mobile and Sprint argued the merger will better equip the new company to compete with top players Verizon and AT&T as the third-largest U.S. wireless carrier, creating a more efficient company with low prices and faster internet speeds. The states, led by California and New York, had said the deal would reduce competition, leading to higher prices.

The decision by U.S. District Court Judge Victor Marrero clears the path for the deal, which already has federal approval and was originally valued at $26 billion. In his ruling, the judge noted the difficulty in deciding an antitrust case since it forces the judge to predict the future in deciding if a deal will lead to higher prices. But Judge Marrero said that he based his decision on three essential points. The first was that he was not persuaded by the states that the deal would lead to higher prices or lower quality wireless services. He disagreed that Sprint would remain a strong competitor and was unconvinced that DISH, who is buying divested assets from the deal, would fail to live up to its promises to enter and compete in the wireless market. Sprint and T-Mobile said in a statement they would move to finalize the merger, which is still subject to certain closing conditions and possible court proceedings. New York's attorney general said the state is considering an appeal; California's attorney general said that state is "prepared to fight."

A software flaw exposed the personal data of every eligible voter in Israel -- including full names, addresses and identity card numbers for 6.5 million people -- raising concerns about identity theft and electoral manipulation, three weeks before the country's national election. The New York Times reports: The security lapse was tied to a mobile app used by Prime Minister Benjamin Netanyahu and his Likud party to communicate with voters, offering news and information about the March 2 election. Until it was fixed, the flaw made it possible, without advanced technical skills, to view and download the government's entire voter registry, though it was unclear how many people did so. How the breach occurred remains uncertain, but Israel's Privacy Protection Authority, a unit of the Justice Ministry, said it was looking into the matter -- though it stopped short of announcing a full-fledged investigation. The app's maker, in a statement, played down the potential consequences, describing the leak as a "one-off incident that was immediately dealt with" and saying it had since bolstered the site's security. "Ran Bar-Zik, the programmer who revealed the breach, explained that visitors to the Elector app's website could right-click to 'view source,' an action that reveals the code behind a web page," the report adds.

"That page of code included the user names and passwords of site administrators with access to the voter registry, and using those credentials would allow anyone to view and download the information. Mr. Bar-Zik, a software developer for Verizon Media who wrote the Sunday article in Haaretz, said he chose the name and password of the Likud party administrator and logged in."

The flaw was first reported on Sunday by the newspaper Haaretz.

A group of U.S. states suing to block T-Mobile from merging with Sprint on Wednesday told a federal judge that the deal would violate antitrust laws and raise wireless prices for consumers. Reuters reports: The states filed a lawsuit in June to block the merger, saying it would harm low-income Americans in particular. T-Mobile and Sprint contend that the merger would enable the combined company to compete more effectively with dominant carriers Verizon and AT&T. U.S. District Court Judge Victor Marrero, who presided over a two-week trial last month in federal court in Manhattan, began hearing closing arguments in the case on Wednesday.

"I'm here speaking on behalf of 130 million consumers who live in these states," Glenn Pomerantz, a lawyer for the states, said at the outset of his argument. "If this merger goes forward, they're at risk for paying billions of dollars more every single year for those services." When T-Mobile majority shareholder Deutsche Telekom first contemplated the deal in 2010, it "expressly and unambiguously admitted that it had potential to reduce price competition," Pomerantz said. The states also emphasized that the carriers did not need a merger to introduce previous generations of wireless technology, and Pomerantz argued that T-Mobile would continue to acquire spectrum, or airwaves that carry data, from a variety of sources even if the merger was blocked.

An anonymous reader quotes a report from VentureBeat: Verizon Media, the media and digital offshoot of telecommunications giant Verizon, has launched a "privacy-focused" search engine called OneSearch. With OneSearch, Verizon promises there will be no cookie tracking, no ad personalization, no profiling, no data-storing, and no data-sharing with advertisers.

With its default dark mode, OneSearch lets you know that Advanced Privacy Mode is activated. You can manually toggle this mode to the "off" position which returns a brighter interface, but with this setting deactivated you won't have access to privacy features such as search-term encryption. With Advanced Privacy Mode on, links to search results will only be shareable for an hour, after which time they will "self-destruct" and return an error to anyone who clicks on it. More broadly, the OneSearch interface is clean and fairly familiar to anyone who has used a search engine before. But at its core, it promises to show the same search results to everyone given that it's not tailored to the individual. In the OneSearch privacy policy, Verizon says it it will store a user's IP address, search query, and user agent on different servers so that it can't draw correlations between a user's specific location and the query that they've made.

"Verizon said that it will monetize its new search engine through advertising; however, the advertising won't be based on browsing history or data that personally identifies the individual -- it will only serve contextual advertisements based on each individual search," reports VentureBeat. OneSearch is currently available on desktop and mobile web, with mobile apps coming later this month.

A Princeton University academic study found that five major US prepaid wireless carriers are vulnerable to SIM swapping attacks. From a report: A SIM swap is when an attacker calls a mobile provider and tricks the telco's staff into changing a victim's phone number to an attacker-controlled SIM card. This allows the attacker to reset passwords and gain access to sensitive online accounts, like email inboxes, e-banking portals, or cryptocurrency trading systems. All last year, Princeton academics spent their time testing five major US telco providers to see if they could trick call center employees into changing a user's phone number to another SIM without providing proper credentials. According to the research team, AT&T, T-Mobile, Tracfone, US Mobile, and Verizon Wireless were found to be using vulnerable procedures with their customer support centers, procedures that attackers could use to conduct SIM swapping attacks. In addition, the research team also looked at 140 online services and websites and analyzed on which of these attackers could employ a SIM swap to hijack a user's account. According to the research team, 17 of the 140 websites were found to be vulnerable.

An anonymous reader quotes a report from CNN: Verizon is changing the way it sells its internet and cable packages as customers are increasingly seeking ways to cut the costly cord. The company is eliminating bundles and contracts, Verizon announced Thursday. Instead, it will sell its Fios TV and internet services separately. Long-term contracts are also being trashed in favor of charging customers month-to-month. That is similar to how streaming services charge customers. Verizon is calling the new offers "Mix and Match on Fios." There are now three internet packages and five Fios TV packages. Notably, Verizon will continue selling Google's YouTube TV for $49.99 per month as a TV option under an agreement the two companies signed last year. A home telephone package will also be sold for $20 per month. The new bundle-free packages offer more price transparency for customers, Verizon claims. Not all surcharges are going away though. "Verizon will continue charging a $15 monthly fee for routers in some of its internet packages and a $12 set-top monthly fee in most of its Fios TV packages," the report adds. "But other fees it previously charged, including for regional sports networks, will now be included in the total Fios TV price."

Slashdot reader DevNull127 writes: CNBC Explores released a 14-minute documentary this month called "The Rise Of Open-Source Software." It's already racked up 558,802 views on YouTube, arguing that open-source software "has essentially taken over the world. Companies in every industry, from Walmart to Exxon Mobile to Verizon, have open-sourced their projects. Microsoft has completely changed its point of view, and is now seen as a leader in the space. And in 2016 the U.S. government even promised to open-source at least 20% of all its new custom-developed code."

The documentary does mention the 1990s, when Microsoft "even went so far as to call Open Source 'Unamerican' and bad for intellectual property rights." But two and a half minutes in, they also tell the famous story of that 1970s printer jam at MIT which led to the purchase of a proprietary printer that inspired Richard Stallman to quit his job to develop the GNU operating system and spearhead the free software movement. And at three and a half minutes in, they also describe how Linus Torvalds "unceremoniously released" Linux in 1991, and report that "By the turn of the century, NASA, Dell, and IBM were all using it." And at 4:18, they mention "other open source projects" gaining popularity, including MySQL, Perl, and Apache.

"But for the layperson at the turn of the century, the rise of these technologies could have gone unnoticed. After all, hardly anyone ran Linux on their personal computers. But then in 2008, Google released Android devices, which ran on a modified version of Linux. Suddenly the operating system blew up the smartphone market..." (Chen Goldberg, Google's Director of Engineering, cites 2.5 billion active Android devices.) The documentary then traces the open source movement up through our current decade, even mentioning Microsoft's acquisition of GitHub, IBM's acquisition of Red Hat, and various monetization models (including GitHub's new "Sponsors" program). And it ends with the narrator calling open source development "the new norm..."

"After all, the success of Open Source reveals that collaboration and knowledge-sharing are more than just feel-good buzzwords. They're an effective business strategy. And if we're going to solve some of the world's biggest problems, many believe that we can't afford to hoard our resources and learnings."
Here's a list (in order of appearance) of the people interviewed:

• Nat Friedman, CEO of GitHub
• Devon Zuegel, Open-Source Product Manager, GitHub
• Chris Wright, CTO of Red Hat
• Jim Zemlin, Executive Director of the Linux Foundation
• Feross Aboukhadijeh, Open-Source Maintainer
• Chen Goldberg, Google's Director of Engineering

Jim Zemlin, Executive Director of the Linux Foundation, even tells CNBC that 10,000 lines of code are added to Linux every day. "It is by far the highest-velocity, the most effective software development process in the history of computing... As the idea of sharing technology and collaborating collectively expands, we're moving into open hardware initiatives, data-sharing initiatives. And that's really going to be the future...

"The complexity of building these technologies isn't going down, it's only going up. We can get that technology out there faster when everybody works together."

After months of negotiations, Congress approved a landmark bill on Thursday to stop the flood of illegal robocalls. The president is expected to sign it into law within the next few days. The Verge reports: The Telephone Robocall Abuse Criminal Enforcement and Deterrence Act, or the TRACED Act, empowers the federal government with new abilities to go after illegal robocallers. Once TRACED is enacted, the Federal Communications Commission could fine robocallers up to $10,000 per call. It also would require major carriers like AT&T, Verizon, and T-Mobile to deploy a new technology called STIR/SHAKEN into their networks, which will make it easier for consumers to know if they're receiving a call from a spoofed number.

The House voted overwhelmingly to approve the measure earlier this month, and Thursday's unanimous Senate vote means the bill only requires President Trump's signature to become law. Rep. Mike Doyle (D-PA) said that the bill should be signed into law within the "next week or so."

There are real concerns about the way 5G is being deployed in the US, including security issues, the potential to interfere with weather forecasting systems, and the FCC steamrolling local regulators in the name of accelerating the 5G rollout. But concerns over the potential health impacts of 5G are overblown. From a report: If you weren't worried about prior generations of cellular service causing cancer, 5G doesn't produce much new to worry about. And you probably didn't need to be worried before. Few 5G services will use higher frequencies in the near term, and there's little reason to think these frequencies are any more harmful than other types of electromagnetic radiation such as visible light. Most concerns about health impacts from 5G stem from millimeter-wave technology, high-frequency radio waves that are supposed to deliver much faster speeds. The catch is that millimeter-wave transmissions are far less reliable at long distances than transmissions using the lower frequencies that mobile carriers have traditionally used. To provide reliable, ubiquitous 5G service over millimeter-wave frequencies, carriers will need a larger number of smaller access points.

That's led to two fears: That the effects of millimeter-wave signals might be more dangerous than traditional frequencies; and that the larger number of access points, some potentially much closer to people's homes, might expose people to more radiation than 4G services. But millimeter waves aren't the only, or even the main, way that carriers will deliver 5G service. T-Mobile offers the most widespread 5G service available today. But it uses a band of low frequencies originally used for broadcast television. Sprint, meanwhile, repurposed some of the "mid-band" spectrum it uses for 4G to provide 5G. Verizon and AT&T both offer millimeter-wave-based services, but they're only available in a handful of locations. The wireless industry is focused more on using mid- and low-band frequencies for 5G, because deploying a massive number of millimeter-wave access points will be time-consuming and expensive. In other words, 5G will continue using the same radio frequencies that have been used for decades for broadcast radio and television, satellite communications, mobile services, Wi-Fi, and Bluetooth.

Verizon is laying off 150 U.S. staffers this week across multiple teams in the organization. CNN reports: Verizon Media employs around 10,500 people [across media brands that include Yahoo, AOL, TechCrunch and HuffPost], so these cuts will amount to 1.4% of its work force. It's unclear which brands will be affected. In January, Verizon Media laid off roughly 800 employees, or about 7% of its staff at the time, as the division's revenues failed to meet expectations.

A spokesperson for Verizon Media confirmed the layoffs to CNN Business. "Our goal is to create the best experiences for our consumers and the best platforms for our customers. Today we are investing in premium content, connections and commerce experiences that connect people to their passions and continue to align our resources to opportunities where we feel we can differentiate ourselves and scale faster," the spokesperson said in a statement.

An anonymous reader shares a report: Verizon, which bought Yahoo in 2017, has suspended email addresses of archivists who are trying to preserve 20 years of content that will be deleted permanently in a few weeks. As Verizon announced in October, the company intends to wipe all content from Yahoo Groups. As of December 14, all previously posted content on the site will be permanently removed. The mass deletion includes files, polls, links, photos, folders, database, calendar, attachments, conversations, email updates, message digests, and message histories that was uploaded to Yahoo servers since pre-Google 1990s. Verizon planned to allow users to download their own data from the site's privacy dashboard, but apparently it has a problem with the work of The Archive Team who wants to save content to upload it to the non-profit Internet Archive, which runs the popular Wayback Machine site.

"Yahoo banned all the email addresses that the Archive Team volunteers had been using to join Yahoo Groups in order to download data," reported the Yahoo Groups Archive Team. "Verizon has also made it impossible for the Archive Team to continue using semi-automated scripts to join Yahoo Groups -- which means each group must be rejoined one by one, an impossible task (redo the work of the past four weeks over the next 10 days)."

A new FCC study confirms what most people already knew: when it comes to wireless coverage maps, your mobile carrier is often lying to you. From a report: If you head to any major wireless carrier website, you'll be inundated with claims of coast to coast, uniform availability of wireless broadband. But, as countless studies have shown, these claims usually have only a tenuous relation to reality, something you've likely noticed if you've ever driving across the country or stopped by mobile carrier forums. But just how bad is the disconnect? A new FCC study released this week suggests that wireless carriers may be lying about mobile coverage 40 percent of the time or more. The full study, part of the FCC's efforts to beef up wireless subsidies ahead of fifth-generation (5G) deployments, states that FCC engineers measured real-world network performance across 12 states. Staffers conducted a total of 24,649 tests while driving more than 10,000 miles.

"Only 62.3% of staff drive tests achieved at least the minimum download speed predicted by the coverage maps -- with U.S. Cellular achieving that speed in only 45.0% of such tests, T-Mobile in 63.2% of tests, and Verizon in 64.3% of tests," the FCC said. And while carriers have historically claimed they offer faster 4G LTE service to the vast majority of the country, the FCC found that wasn't actually true either. "Staff was unable to obtain any 4G LTE signal for 38% of drive tests on U.S. Cellular's network, 21.3% of drive tests on T-Mobile's network, and 16.2% of drive tests on Verizon's network, despite each provider reporting coverage in the relevant area," the agency said. But of course, the FCC also has no plans to punish the carriers.

T-Mobile's nationwide 5G network launches on Friday, the company announced Monday morning. But don't fall for the marketing hype. From a report: It's still too early to buy a 5G phone, even though T-Mobile is now taking orders for two new ones, including the Samsung Galaxy Note 10+ and OnePlus 7T Pro McLaren. It's still a big step, though. T-Mobile will turn on its 600 Mhz 5G network, which will cover most of the country. That's impressive, since most of the 5G networks you've heard about so far are only available in limited areas in a small number of cities. The trade-off though, is T-Mobile's network is using low-band 5G, which means it's good at providing slightly boosted speeds inside buildings and is available in far more places than what competitors offer. Some of the 5G Ultra Wideband networks you've heard about from AT&T and Verizon provide the opposite. They have super fast speeds, but only work in really small pockets when you're standing near a tower outside.

A standard used by phone carriers around the world can leave users open to all sorts of attacks, like text message and call interception, spoofed phone numbers, and leaking their coarse location, new research reveals. From a report: The Rich Communication Services (RCS) standard is essentially the replacement for SMS. The news shows how even as carriers move onto more modern protocols for communication, phone network security continues to be an exposed area with multiple avenues for attack in some implementations of RCS. "I'm surprised that large companies, like Vodafone, introduce a technology that exposes literally hundreds of millions of people, without asking them, without telling them," Karsten Nohl from cybersecurity firm Security Research Labs (SRLabs) told Motherboard in a phone call.

SRLabs researchers Luca Melette and Sina Yazdanmehr will present their RCS findings at the upcoming Black Hat Europe conference in December, and discussed some of their work at security conference DeepSec on Friday. RCS is a relatively new standard for carrier messaging and includes more features than SMS, such as photos, group chats, and file transfers. Back in 2015, Google announced it would be adopting RCS to move users away from SMS, and that it had acquired a company called Jibe Mobile to help with the transition. RCS essentially runs as an app on your phone that logs into a service with a username and password, Nohl explained.

In early 2018, the Department of Justice launched an investigation into whether AT&T, Verizon and the GSM Association (GSMA) worked together to limit eSIM technology. Today, The New York Times reports that the DOJ is closing the investigation and has found no evidence of wrongdoing. From a report: The DOJ was initially concerned that AT&T and Verizon attempted to lock devices on their networks even if the device had an eSIM. But the parties have agreed to change how they determine standards for eSIM, which will allow consumers to use eSIM to switch carriers, rather than having to insert a new SIM card. And as a result, the DOJ is dropping the investigation.

Chairman Ajit Pai is pressing for a public auction of wireless frequencies in the C-band spectrum (the 4GHz to 8GHz range often used by satellite companies) for the sake of 5G service. Engadget reports: This would help the FCC clear up "significant" frequency space in a quick fashion, generate money for the government and "ensure continued delivery" of existing services, Pai argued. He hoped to auction off a 280MHz slice while leaving the upper 200MHz available. An FCC official told the Wall Street Journal that the regulator hoped to bring the C-band auction up for a vote in 2020 and start the auction by the end of that year.

Satellite companies, however, might not be so happy. Industry giants like Intelsat and SES haven't been averse to selling their spectrum, but they've wanted a private auction to share the money they make and have claimed the FCC isn't allowed to take in-use spectrum without paying them. A public auction flies in the face of that. The C-Band Alliance, a group representing the satellite firms, has hinted at "protracted litigation" if the FCC pushes forward. Carriers are also of mixed opinions. AT&T, which owns DirecTV, has called C-band an "opportunity" but also wanted compensation and a "reasonable transition plan" to avoid disruptions. Verizon (Engadget's parent company and Pai's former employer) likewise wanted "appropriate incentives and protections" to ensure a quick process.

The share of cryptocurrency jobs per million has risen 1,457% over the past four years, according to a study by job site Indeed.com. VentureBeat reports: Indeed analyzed millions of job postings on Indeed.com to unpack how Bitcoin, cryptocurrency, and blockchain trends have affected the job market. Searches for Bitcoin, blockchain, and cryptocurrency roles are going down -- yet employer demand has skyrocketed. According to Indeed, in the four-year period between September 2015 and September 2019, the share of these jobs per million grew by 1,457%. In that same time period, the share of searches per million increased by 469%.

In the past year, the share of cryptocurrency job postings per million on Indeed.com has increased by 26%, while the share of searches per million for jobs has decreased by 53%. Bitcoin's volatility seems to correlate with job seeker interest, and the change in Bitcoin price this year might be why job searches have declined. Employers, however, are doubling down on the technology, which uses decentralized ledgers to produce secure and transparent transactions. The report says that if you want a better chance at getting a job in this field you should be a programmer familiar with basic cryptography, P2P networks, and a language like C++, Java, Python, or JavaScript (along with certain soft crypto skills). To stand out, you should learn new blockchain development languages, like Hyperledger, Bitcoin Script, Ethereum's Solidity, the Ripple protocol, or even languages currently in development -- like Rholang.

The top hirers are as follows: Deloitte, IBM, Accenture, Cisco, Collins Aerospace, Ernst & Young, Coinbase, Overstock, Ripple, Verizon, Circle, Kraken, ConsenSys, JP Morgan Chase, and Signature Bank.