Google Pixel Weather App

A first look at Google’s new Weather app

Posted on by Martin Brinkmann

Google announced several new Pixel devices this week as well as new AI and services, some of them exclusive at the time of writing.

The company’s main announcement on its official The Keyword website focuses more on software and services, and less on the hardware of the Pixel devices.

Among the new features is a “better weather app” that uses AI to give “super accurate weather forecasts” and “custom AI weather reports”.

The app is available for Pixel devices, but APK files are available already that can be installed on non-Pixel Android devices. The main restriction is that it requires Android 14.

Some of the advertised features, mostly those linked to KI, do not appear to work at the time of writing. I tried the app on a Samsung Galaxy A55 5G device and it worked. Other users claimed that the app was crashing on them, which some fixed by clearing the cache.

Google Weather App location details

The app is basic at the time of writing and on non-Pixel devices. Weather data comes from weather.com.

You can add multiple locations to it and every location is shown on the startpage. A tap opens more details for the selected location.

Here you get:

  • Warnings
  • Hourly Forecast
  • 10-day Forecast
  • Sunrise & Sunset
  • Wind speed and direction
  • UV Index
  • Air Quality Index (for some locations)
  • Visibility
  • Humidity
  • Pressure.

You can move the items around using drag & drop.

It lacks the weather background for the selected location and the weather map.

A tap on 10-day Forecast opens another page with additional details for the selected day and the period as a whole.

The app has a few widgets that you can place on the screen. At least one of is dynamic, but there are others that you may display.

I have not received any notifications, warnings, or AI reports at the time of writing. Maybe that is reserved for Pixel devices or accounts that are subscribed to Google Gemini in one form or another.

Closing Words

Google’s new Weather app is limited when you run it on a non-Pixel 9 device. It is likely that it may come to older devices, but that some features, mostly those powered by AI, may not come to older devices.

You can download the latest version from APK Mirror to give it a try.

Do you use a weather app on your mobile devices? If so, which app do you use and why? Feel free to leave a comment down below.

Encryption

Windows 11: Device Encryption will be enabled automatically in these cases

Posted on by Martin Brinkmann

The next feature update for Windows 11 enables automatic device encryption for users of the operating system. This happens automatically in the background and for most users, but there are exceptions.

What is Device Encryption and how does it differ from BitLocker Drive Encryption?

Device Encryption is based on BitLocker, Microsoft’s encryption technology. It is an automatic system that will encrypt the Windows partition and other fixed drives.

In other words: most drives that are internal will be encrypted by Device Encryption.

Encryption protects data on the drives to prevent unauthorized access.

BitLocker Drive Encryption on the other hand is only available for Pro, Enterprise, and Education editions of Windows. It gives administrators control over the technology and needs to be enabled manually.

The change in Windows 11 24H2

Starting with the release of Windows 11, version 24H2, Windows 11 will encrypt drives automatically using Device Encryption in the following cases:

  • During first sign-in with a Microsoft account, or work or school account.
  • During first set up of the device, if a Microsoft account is used.

Windows 11 will start the encrypting of the drives immediately in the background.

Windows users who create a local account during set up won’t have their drives encrypted. Microsoft notes here that it is possible to do that manually though.

Note: Microsoft is making it harder and harder to set up Windows without a Microsoft account. It is still possible, but most users are probably unaware of this.

Enabling or disabling Device Encryption manually

Device Encryption setting in Windows 11
Device Encryption setting in Windows 11

You need to sign-in with an administrator account to manage Device Encryption. Also, it is possible that the feature is not supported on the device.

Here is how to find out and manage it:

  1. Select Start and then Settings to open the Settings app.
  2. Go to Privacy & security > Device Encryption.

If you do not see Device Encryption on the page, it is either unavailable on the device or you are signed-in with a standard user account.

Device Encryption offers a simple toggle to turn the feature on or off.

How to find out why Device Encryption is now available

Here is a step-by-step guide on finding out why Device Encryption is not supported.

  1. Open the Start menu.
  2. Type System Information.
  3. Select Run as adminstrator.
  4. Scroll down to Automatic Device Encryption Support or Device Encryption support.
  5. Hover over the entry to see the reason why it is not supported.

What is your take on Device Encryption? Do you use BitLocker encryption on your devices? Let us know in the comments below.

Google Pixel 9 devices

Beyond hardware: these Pixel 9 features launch with the phones

Posted on by Martin Brinkmann

Google announced this year’s Pixel upgrade on its Made by Google event yesterday. As Google puts it, these are the most powerful Pixel devices ever. They are also the most expensive ones.

You find information about the hardware features of the four Pixel devices — Pixel 9, Pro, Pro XL, and Fold — on numerous sites. Check out Android Police’s or Android Central’s coverage, if you are interested in that.

Google’s main blog post on the Keyword website mentions hardware improvements just in passing. Just a few paragraphs that detail improvements over previous Pixel devices.

The majority of text is reserved for software improvements, mostly AI. The clear focus is software, therefore.

Here are the highlights:

Gemini Live — Deeper interactions with Google’s Gemini AI. Available for Gemini Advanced subscribers. Free for one year for Pixel 9 Pro, Pro XL, and Pro Fold buyers (sorry Pixel 9 buyers, no love for your).

Pixel Studio — Is an image generator that uses the “on-device diffusion model” with a text-to-image model that in the cloud. (Not available in all languages or countries, no further info on that).

Pixel Screenshots — Exclusive app for Pixel 9 that makes screenshots searchable using AI. You may later interact with the app to retrieve information. May include links and other information. (Not available in all languages or countries, no further info on that).

Improved Weather app — Google promises “super accurate weather forecasts” and custom AI weather reports. Also more customization options.

Camera improvements — The cameras get several new features and improvements:

  • AI-powered camera experience — Optimizes HDR+, exposure, tone mapping, sharpening, contrast, and more.
  • Super Res Zoom Video — Supports up to 20x super resolution zoom in Night Sight Video or Video Boost. Uses the telephoto camera with “advanced machine learning”. Only available on Pixel 9 Pro and Pro XL.
  • Add Me — Uses AI to merge multiple photos into a single one. One application for this is that you may add the photographer to a scene.
  • Reimagine Magic Editor — Change images using a text box, e.g., by removing objects or people, changing the sky, or placing new objects.
  • Auto frame in Magic Editor — Helps frame a photo that has been taken already.
  • Night Sight in Panorama — Panorama mode is now also available in low-light conditions.
  • Zoom Enhance — This one allows you to zoom in even more using AI. Only available on Pixel 9 Pro, Pro XL, and Pro Fold.
  • Video Boost — upgrades video to 8K resolution.
  • Move anything — Allows you to move objects or people in a photo.

Clear Calling and Call Notes — Clear calling improves the audio quality of calls according to Google. Call Notes on the other hand creates private summaries and full transcripts of phone calls. Everyone is informed about the recording. (only for calls that are at least 30 seconds long. Not available in all languages or countries, no further info on that).

Satellite SOS — known from Apple, this adds an emergency option to Pixel 9 devices to call for help, even when there is no cellular service. (Only available in the U.S., free for the first 2 years).

There you have it, these are the main features that Google announced. Google does not say which of these require Internet connectivity or what data is transferred for the services that require it.

Does this sound interesting to you? Do you plan to buy a Pixel 9 device, or will you skip those? Feel free to leave a comment down below.

Malware

Three year old Malvertising Campaign is still going strong

Posted on by Martin Brinkmann

One of the most important skills of any Internet user is the ability to distinguish between advertising and organic links. A core reason for that is that advertising is regularly abused for malvertising campaigns.

Malvertising refers to ads that in one way or another attack the user or the user’s device. A simple example is a download ad that pushes a malicious file onto the user’s system.

Security researchers at ReasonLabs have discovered a malvertising campaign that has been around for at least three years.

The details:

  • Polymorphic campaign that installs Chrome and Edge extensions on endpoints.
  • Uses multiple attacks, including search hijacking, stealing private data, or executing commands on the user’s device.
  • At least 300,000 users fell victim to the campaign until now.

How the attack works

The attackers use advertising to push malicious downloads. They use fake download sites for legitimate applications such as YouTube, VLC, or Roblox FPS Unblocker.

Users who fall for this, you guessed it, download a malicious payload to their systems. Here is what happens next:

  1. The executable creates a scheduled task, which is designed to run a PowerShell script.
  2. The PowerShell script downloads a payload from a remote server and runs it on the user’s machine.
  3. It then begins to make changes to the user’s system:
    • Adds policies to enforce the installation of Chrome and Edge installations from the Store (which are malicious).
    • Some versions of the script uninstall browser updates.
    • Tampers with browser .lnk file to load another extension for communication with a control server and stealing search queries.
    • Communicate with command center for status reports and the next stage of execution.

The script blocks uninstallation of the installed extensions, even when Developer Mode of the browser is set to on. Users will also see the “your browser is managed by your organization” message.

The blog post offers a deep dive, which interested or affected users may check out. There is also a section on removing the malware from infected hosts.

This involves:

  • Removing the scheduled tasks.
  • Removing the planted Registry keys.
  • Deleting the malicious files.

Closing Words

The security researchers note that many of the used domains, extensions, and scripts are not detected as malicious at the time of writing. Google and Microsoft were notified according to the blog post.

Which brings us right back to the beginning. Ads are not easily distinguishable from organic results in many cases. Google, for instance, displays a simple “sponsored” text above ads. They look exactly like organic results in any other way.

While experienced users may not have any problems differentiating between the two, less tech-savvy users fall for these.

So, if you want to improve security, you better take a good look at links before you click. If you want to be safer, do not click on ads 🙂

Exodus Android App Tracker analysis

Android Apps: Exodus reveals trackers and permissions before installation

Posted on by Martin Brinkmann

Much of what happens during the installation of an Android app happens in the background. While Android may highlight permissions that an app requires, it stays silent when it comes to privacy.

Many apps include trackers and may also contain ads, but ad-free apps may still have trackers.

If you are particularly worried about tracking, you may find the free service Exodus useful. It is available as a web-based version that you can launch from any modern web browser.

To get started, type the name of an Android app in the search field at the top. You can type partial names and pick the app from the list of results. Other options are to type the apps’ unique handle or full Google Play URL.

The number of trackers and permissions is returned then. Select trackers to look through the list of trackers that the application references. Trackers are classified based on their purposes, e.g., advertisement, identification, or analytics.

Exodus uses colors to highlight the number of trackers and permissions. Green apps use 0 trackers and permissions. Yellow apps less than 5, and red apps more than 5.

A click reveals the total number of analyzed apps that use the particular tracker.

Note that Exodus does not decompile applications. It performs a “static analysis of APKs and compares Java class names with a list of trackers”.

In other words, there is a chance that trackers do get overlooked.

As far as permission go, these are also shown on the profile page of the app on the Exodus website.

Another useful feature is the ability to have new apps scanned. You need to supply the full Google Play Store or F-Droid URL for that.

The application will be analyzed, if it is unknown to Exodus. The makers note that apps with geographic restrictions cannot be scanned.

Verdict

Exodus, all in all, is a useful service. It highlights if an application uses trackers. If you do not want to be tracked, you may want to give it a try. Most Android apps use tracking in one form or another though.

Do you use services like Exodus to analyze apps before you install them? Or do you use something else to block trackers? Let us know in the comments.

Paint 3D end of support

Microsoft is retiring a Windows app this year that it at one time had high hopes for

Posted on by Martin Brinkmann

When it comes to the dozen or so Windows app that Microsoft ships with Windows, there are several that most users would probably never touch.

Of these, Paint 3D is probably high up on the list of the majority of Windows users. It sits there at the top with the likes of 3D Builder.

Paint 3d came out at a time when Microsoft wanted to push creativity and creating in Windows. It was set out to replace the original Paint application, which was a trustworthy, albeit basic, image editing app for Windows for a long time.

Many users were not pleased with Paint 3D and Microsoft’s course, as interface and functionality were changed. Eventually, Microsoft realized that Paint was the app that won the popularity contest and decided to deprecate Paint 3D.

Paint 3D is now beginning to show an end of support banner in its interface. First reported by Phantom of Earth on Twitter, the banner notifies users that the app will reach end of support soon.

It says:

Paint 3D won’t be available in the Microsoft Store or receive future updates on November 4, 2024.

It is a crushing defeat for the app, considering that a very similar message was displayed in the original Paint app at one time.

It said:

This version of Paint will soon be replaced with Paint 3D. Classic Paint will then become available in the Store.

Paint 3D is not getting the same treatment. The app is already no longer installed on new Windows devices. Soon, users won’t find it listed anymore on the Microsoft Store.

Microsoft does not say if it is going to remove the app if it is installed on user devices. It likely won’t, but it will certainly remind users that the app is no longer supported when it is run.

Do you have any favorites among the default Windows apps? Is Paint 3D on that list? Let us known in the comments below.

0.0.0.0 Day: decade-old vulnerability affects all browsers

Posted on by Martin Brinkmann

Security researchers have disclosed a vulnerability that affects all modern browsers. What makes it particularly worrisome is that it has been known for 18 years; that goes back to a time before Google even thought of creating Chrome.

The details:

  • The researchers call the issue 0.0.0.0 Day.
  • It allows malicious websites to interact with services that run on the local network.
  • This could lead to unauthorized access or remote code execution attacks on local services from outside the local network.

In other words: the security issue allows the circumvention of security protections by malicious websites. Chromium’s Private Network protection does not protect against this, neither does Firefox. Apple’s Safari browser was also vulnerable, but the company has released a patch that blocks access to 0.0.0.0.

The blog post provides a technical description of the vulnerability. It also explains why it took this long to react on it.

The researchers found a Mozilla bug listing that dates back 18 years. It shows that the developers were not sure whether the reported bug was a security issue, a bug, or no flaw at all.

How Google, Mozilla, and Apple plan to react

Researchers at Oligo disclosed the vulnerability to security teams of major browsers in April 2024.

  • Google: plans to block access starting in Chrome 128 and finalize the rollout by Chrome 133. Other Chromium-based browsers will get this as well.
  • Apple: has implemented a change that blocks destination host IP addresses, if the IP is all zeroes.
  • Mozilla: fix is in progress. Firefox is special, as it never restricted Private Network Access in first place. Will implement Private Network Access, but no ETA on this one.

The fixes are important, but so is standardization of the issue. HTTP requests to 0.0.0.0 should be added to security standards according to the security researchers.

Closing Words

The security researchers note that use of 0.0.0.0 on the Web is on the rise. They use counters provided by Chromium for this. According to those, it is used by 0.015% of all websites. While that may not sound like much, it equates to roughly 100,000 public websites that may communicate with 0.0.0.0.

Malicious actors may exploit the issue in their attacks. Oligo points out that ShadowRay, a recent attack that targets AI workloads, could be executed from browsers using 0.0.0.0 as the attack vector.

It is unclear if browser extensions such as Port Authority for Firefox provide protection against this kind of attack.

What is your take on this new vulnerability? Seems that there is always something new, or shall I say old, that is affecting the security of browsers. (via Born)

Android

Your Android smartphone could soon have a floating taskbar

Posted on by Martin Brinkmann

Android 15 could ship with a taskbar on smartphones. This taskbar works similarly to the one known from tablets or operating systems such as Windows.

Android Authority’s Mishaal Rahman discovered the taskbar feature recently and has published information about its functionality and current state.

Up until recently, taskbars on smartphones were frowned upon. Google, Apple, and the manufacturers of other mobile operating systems focused on minimalism instead.

While Google did implement a taskbar in Android 12 for Android tablets and the new foldable category of phones, it continued its work in future releases.

The initial release fixed the taskbar on the screen. One year later, Google introduced an option to hide the taskbar.

The idea behind this was simple: free up as much room as possible for apps or websites viewed by the user.

In Android 15 Beta 4, Rahman discovered a new “tiny” taskbar feature. While not enabled by default, Rahman found a way to enable it to check it out.

He published a video on YouTube that shows his efforts:

Here is what is known right now:

  • The smartphone taskbar functions exactly like its bigger cousin for tablets and foldables.
  • It has place for fewer shortcuts.
  • Google could implement both the old and new taskbar layout. The main differentiating factor is the position of the taskbar on the screen.

The taskbar for smartphones is a work in progress. It may be included in Android 15 because of that.

While not all Android users may want to use a taskbar on their devices, there are probably a few that like the idea. The main benefit is that it offers faster access to certain apps or functions.

Whether that is enough to warrant the display of the taskbar on the screen is up for the individual user to decide.

I would probably never use the feature outside of testing.

What is your take on this? Would you use a taskbar on Android devices, if Google would launch it as part of Android 15? Feel free to write a comment down below.

Disney+

Like Clockwork: Disney+ is getting another price increase

Posted on by Martin Brinkmann

Disney just announced that it will increase the price of Disney+ in the United States again. The company will charge $15.99 per month from October 2024 onward.

Here are the details:

  • Disney+ with ads: price increases from $7.99 to $9.99 per month.
  • Disney+ ad-free: price increases from $13.99 to $15.99 per month. The yearly price increases to $159.99.

Disney has more than doubled the price of its ad-free plan since its launch in 2019. Back then, customers paid $6.99 per month for the ad-free experience.

Disney-owned Hulu and ESPN are also increasing the price of subscriptions:

  • Hulu with ads: from $7.99 to $9.99
  • Hulu without ads: from $17.99 to $18.99
  • ESPN+ with ads: from $7.99 to $9.99
  • ESPN without ads: from $10.99 to $11.99

The Hollywood Reporter speculates that Disney wants to push more customers to a Disney Bundle subscription. It includes the ad-powered Disney+ and Hulu subscriptions for $10.99.

Considering that both Disney+ and Hulu cost $9.99 with ads already, it is “just” $1 extra to get both services. At least, until the next price increase that is.

Disney has not announced price increases for other regions. It is probably only a matter of time before it will announce those.

Expect more price increases from (most) major streaming providers in the coming 12 months.

Closing Words

Streaming services increase prices regularly, and it seems to work. Netflix is gaining subscribers, even though it has increased the price of its subscriptions several times in recent time.

There are only three options available to break this cycle:

  • Subscription-hopping – subscribe for a month or two, watch everything, unsubscribe. Never have more than one active subscription.
  • Buying physical – you may miss out on some shows, but what you buy is yours forever. Also option to sell again or buy used.
  • Don’t subscribe and do not buy media — Might work for some as well.

Are you subscribed to streaming services? If so, to which and why? Feel free to leave a comment down below.

Google TV Streamer

Google is replacing Chromecasts with Google TV Streamer boxes

Posted on by Martin Brinkmann

Google unveiled Google TV Streamer today. The box will replace the company’s own Chromecast devices to compete against the likes of Apple TV.

Here are the main details:

  • Retails for $99.99 (€119.99).
  • Google says CPU is 22% faster than Chromecast 4K.
  • Has double the RAM (4 GB) and 32 GB of storage compared to Chromecast 4K.
  • Supports Wi-Fi 5 (ac) and Bluetooth 5.1.
  • Comes with an Ethernet port and HDMI 2.1, which supports 4K HDR at 60fps.
  • HDR10(+), Dolby Vision, HLG, and Dolby Digital(+), and Dolby Atmos supported.

Google says that TV Streamer supports Matter and Thread, and that it comes with Gemini technology. Here, Google says that Gemini may provide “full summaries, reviews, and season-by-season breakdowns of content”.

Ambient mode, another new feature, turns an idle TV “into a work of art”. Integration of Google services allows pulling up photos and videos from Google Photos, using either voice or by typing.

The “biggest Google-Home-Panel” is not controllable with the remove. This allows users to control other smart devices, for instance cameras or door bells. Google-owned Nest support is also available.

Integration with Android is also available, which means that Android users may stream content from their devices directly on the Google TV Streamer connected display.

The not so good

While Google TV Streamer offers better functionality than Google Chromecast devices that came before it, it disappoints in some areas.

Here are the main ones:

  • The processor is just 22% faster than the Chromecast 4K model, which Google released in 2020. It remains to be seen how well it performs.
  • The device supports only Wi-Fi 5.
  • Only 32 GB of storage.

Only tests will show how well the device performs when compared to Apple TV or other premium boxes.

This may be an instant buy for heavy Google users. If you are already invested, say with Android and smart home devices, then you may like the idea of getting another option to control all these devices.

If you just want the best streaming box, this may not be it based on the hardware that you get. All in all, you may want to wait for the initial wave of reviews before you make a buying decision.

Do you own streaming boxes or sticks? If so, which do you use currently and why? Is the Google TV Streamer a box that you are interested in? Feel free to write a comment down below.