New submitter evansspann sends word that Samsung will be making a smartwatch. Rumors have been swirling for a few months that Apple is working on a 'watch-like' device, but Samsung's CEO was willing to confirm that his company is working on such a product. "We've been preparing the watch product for so long. We are working very hard to get ready for it. We are preparing products for the future, and the watch is definitely one of them." The companies are now likely racing to be the first to market. Production of such a device will likely be easier for Samsung, since it can produce its own screens and chips. It's also likely to work well with the popular Galaxy Phone lines. However, it will have a tougher time with app distribution than Apple, since it doesn't control Google Play the way Apple controls the App Store. "Apple's critics like to say the company's ideas are obvious, but as some pundits have noted, those very ideas once seemed unimaginable. The smartwatch will be a great test for that theory. It'll be interesting to see if Samsung can strike first in a nascent category and still rival Apple's work."

An anonymous reader writes "A spate of smart LED bulbs and light sockets are coming to market and seeking crowdfunding, following the (apparent) success of Philips Hue. But do they really make sense for lighting control? Here's a comprehensive roundup of 13 products and the pros and cons of the category." I like the idea of controllable, long-lasting light bulbs, but I haven't yet been tempted enough to pay $50 apiece.

holy_calamity writes "Companies large and small are working to create the first "killer app" for Google Glass, the wearable display to go on sale later this year, reports MIT Technology Review. Evernote is among large companies that got early access to prototypes and has been testing ideas for some time, but is staying quiet about its plans. Meanwhile new startups with apps for Glass are being created and funded, although uncertainty about whether consumers will embrace the technology has steered them towards commercial and industrial ideas, such as apps for for doctors and maintenance technicians."

rtoz writes with a quick bite from rtoz.org about Google's latest news about Project Glass: "Google has released video preview of its forthcoming Google Glass wearable headset, providing a fresh, and more realistic look at the device's user interface. Based on the demo, Google Glass will allow users to receive and execute onscreen directions, send voice-controlled messages, and search the web through speech. The UI also includes voice-controlled photos, and suggests that the device will offer onscreen translation support. And, it looks like the Google Glass will be water-resistant. Google has previously said it is aiming to launch Glass by early 2014, though it is already pushing out developer editions priced at $1,500." They're looking for developers, but only if you're hip enough.

FreeMichael61 writes "In the latest episode of Spy vs. Spy, China rejects accusations it's hacking U.S. companies to steal IP or bring down the grid. But there's no doubt the grid can be hacked, CIO Journal's Steve Rosenbush and Rachael King report. Industrial control networks are supposed to be protected from the Internet by an air gap that, it turns out, is largely theoretical. Internal security is often lax, laptops and other devices are frequently moved between corporate networks and control networks, and some SCADA systems are still directly connected to the internet. What security standards actually exist are out of date and don't cover enough, and corporations often use questionable supply chains because they are cheaper."

Timothy Lord starts this video with these words: "Sensors are a big deal at CES this year. They are small devices that track everything from the location of your pets to how many steps you have taken today." And so he chatted with Phillip Bolliger, founder of Swiss company Koubachi AG, which makes Wi-Fi sensors that help you give your plants the right amount of water and light and to keep them at the right temperature. As of this writing, the prices on their online store are in Euros, not dollars, but the sensors are now available through Amazon with U.S. pricing. Koubachi also has a free app for your iOS device, and a Facebook app for your computer or Android device, that will help you give your plants the right amount of fertilizer and other love even if you don't buy a Koubachi sensor.

coop0030 writes "Open source hardware company Adafruit has announced a new tiny wearable electronics platform board called the Gemma. The Gemma is a tiny, 1-inch diameter and 4-mm thick package. It's powered by an Attiny85 and programmable with an Arduino IDE over USB. There are three available I/O pins, one of which is also an analog input and two of which can do PWM output. Gemma is currently wrapping up development, but should be available soon."

hypnosec writes "Babak Parviz, the founder and head of Project Glass at Google, has revealed that the feature set of Google Glass and state of apps is still in flux and that there is a lot of testing going on at the moment. In an interview with IEEE Spectrum, Parviz provided insights into Project Glass, the reasons behind having such a gadget and what's there for the project in near future. Parviz said that they are trying out new ideas and ways in which the platform can be used while also trying to make the platform more robust. There is no specific feature set that Google has been talking about and 'It is still in flux.'" My favorite question / answer pair: "IEEE Spectrum: What kind of business model is associated with Google Glass? Babak Parviz: This is still being worked on, but we are quite interested in providing the hardware."

The NSA was originally supposed to handle foreign intelligence, and leave the domestic spying to other agencies, but Presto Vivace writes with this bit from CNET: "'The National Security Agency's Perfect Citizen program hunts for vulnerabilities in 'large-scale' utilities, including power grid and gas pipeline controllers, new documents from EPIC show.' 'Perfect Citizen?' Who thinks up these names?" "The program is scheduled to continue through at least September 2014," says the article.

Last week, you asked questions of Eugene Kaspersky; below, find his answers on a range of topics, from the relationship of malware makers to malware hunters, to Kasperky Labs' relationship to the Putin government, as well as whitelisting vs. signature-based detection, Internet ID schemes, and the SCADA-specific operating system Kaspersky is working on. Spoiler: There are a lot of interesting facts here, as well as some teases.

Trailrunner7 writes "It is open season on SCADA software right now. Last week, researchers at ReVuln, an Italian security firm, released a video showing off a number of zero-day vulnerabilities in SCADA applications from manufacturers such as Siemens, GE and Schneider Electric. And now a researcher at Exodus Intelligence says he has discovered more than 20 flaws in SCADA packages from some of the same vendors and other manufacturers, all after just a few hours' work."

BeatTheChip writes "Lawyers representing Andrea Hernandez, a science and engineering student at John Jay High School, are fighting an expulsion notice issued a week ago for refusing to wear a Smart ID badge. To represent her, lawyers filed a preliminary court injunction, seeking legal restraints on the school. She maintains stance of refusal to wear any badge containing an RFID tag for reasons of basic privacy and conflicts with her belief system. The controversial decision for her school to adopt the NFC badges is part of the Student Locator Project, tracking attendance. Local schools started issuing the lanyard badges this fall despite parental outcry at NISD school board meetings."

DeptofDepartments writes "With Kindles and ebooks on everyone's lips (sc. hands) nowadays, this might come as a surprise to some, but besides being a techie, I have also amassed quite a collection of actual books (mostly hardcover and first editions) in my personal library. I have always been reluctant to lend them out and the collection has grown so large now that it has become difficult to keep track of all of them. This is why I am looking for a modern solution to implement some professional-yet-still-home-sized library management. Ideally, this should include some cool features like RFID tags or NFC for keeping track of the books, finding and checking them out quickly, if I decide to lend one." For more on what DeptofDepartments is looking for, read on below.

Penurious Penguin writes "The Wall Street Journal, in correspondence with Chevron representatives, reveals that back in 2010, Stuxnet reached Chevron, where it managed to infect — but not significantly affect — the oil giant's network. According to a Chevron representative speaking to CNET, the issue was 'immediately addressed ... without incident.' The Stuxnet worm is believed to be the work of the U.S. and Israel, and this report is confirmation that it struck well wide of its intended targets. Chevron's general manager of the earth sciences department, Mark Koelmel, said to CIO Journal, 'I don't think the U.S. government even realized how far it had spread ... I think the downside of what they did is going to be far worse than what they actually accomplished.'"

Several outlets are reporting, based on screenshots posted by Android Police that Google is (or "may be" — CNet calls the report "loosely sourced") about to introduce a lower-tech variant on its smartphone-based Google Wallet payment system. Instead of transferring payment information from an NFC-equipped phone, this would mean a physical payment card (like a conventional plastic credit or debit card), but one linked via Google's databanks to the user's existing bank or credit accounts. Upsides: less to carry, a simple way to suspend or cancel service on them (should the card be lost or stolen), and doesn't require you to carry your phone to make a credit or debit transaction — handy, since NFC readers are still thin on the ground. Downside: while perhaps no worse than putting the same information on your phone, it's one more step toward giving a third party all of your personal information in one place. A card that fits in a wallet probably makes a lot of sense: I live in a city with at least three pay-by-phone options in trials or fully available (CitiBank, Isis, and Google Wallet), but I can't buy ice cream or coffee with them yet. And there's no reason a card-shaped token couldn't use mag-stripes and NFC, too.

dcblogs writes "Iran recently held a security trade show and conference, attended by high-ranking police and military officials. A video by an Iranian news outlet shows some of the products, from crossbows to unidentified systems, and includes an interview with Iran's police chief, Brig. Gen. Esmail Ahmadi-Moqadam: 'It's true that the U.S. made Stuxnet virus did some damage to our facilities but we were able to get them all up and running in no time. However, those who attack should expect retaliation and we haven't gone there just yet.'"

CWmike writes "Eugene Kaspersky, the $800-million Russian cybersecurity tycoon, is, by his own account, out to 'save the world' with an exploit-proof operating system. Given the recent declarations from U.S. Secretary of Defense Leon Panetta and others that the nation is facing a 'digital Pearl Harbor' or 'digital 9/11' from hostile nation states like Iran, this sounds like the impossible dream come true — the cyber version of a Star Wars force field. But on this side of that world in need of saving, the enthusiasm is somewhat tempered. One big worry: source. 'The real question is, do you trust the people who built your system? The answer had better be yes,' said Gary McGraw, CTO of Cigital. Kaspersky's products are among the top ranked worldwide, are used by an estimated 300 million people and are embraced by U.S. companies like Microsoft, Cisco and Juniper Networks. But while he considers himself at some level a citizen of the world, he has close ties to Russian intelligence and Vladimir Putin. Part of his education and training was sponsored by the KGB, he is a past Soviet intelligence officer (some suspect he has not completely retired from that role) and he is said have a 'deep and ongoing relationship with Russia's Federal Security Service, or FSB,' the successor to the KGB and the agency that operates the Russian government's electronic surveillance network."

Trailrunner7 writes "Attacks against SCADA and industrial-control systems have become a major concern for private companies as well as government agencies, with executives and officials worried about the potential effects of a major compromise. Security experts in some circles have been warning about the possible ramifications of such an attack for some time now, and researchers have found scores of vulnerabilities in SCADA and ICS systems in the last couple of years. Now, engineers at Kaspersky Lab have begun work on new operating system designed to be a secure-by-design environment for the operation of SCADA and ICS systems. 'Well, re-designing ICS applications is not really an option. Again, too long, too pricey and no guarantees it will fit the process without any surprises. At the same time, the crux of the problem can be solved in a different way. OK, here is a vulnerable ICS but it does its job pretty well in controlling the process. We can leave the ICS as is but instead run it in a special environment developed with security in mind! Yes, I'm talking about a highly-tailored secure operating system dedicated to critical infrastructure,' Eugene Kaspersky said in an interview."

tsu doh nimh writes "Telvent, a multinational company whose software and services are used to remotely administer and monitor large sections of the energy and gas industries, began warning customers last week that it is investigating a sophisticated hacker attack spanning its operations in the United States, Canada and Spain. Brian Krebs reports that the attacker(s) installed malicious software and stole project files related to one of Telvent's core offerings — OASyS SCADA — a product that helps energy firms mesh older IT assets with more advanced 'smart grid' technologies. A follow-up story from Wired.com got confirmation from Telvent, and includes speculation from experts that the 'project files' could be used to sabotage systems. 'Some project files contain the "recipe" for the operations of a customer, describing calculations and frequencies at which systems run or when they should be turned on or off. If you're going to do a sophisticated attack, you get the project file and study it and decide how you want to modify the pieces of the operation. Then you modify the project file and load it, and they're not running what they think they're running.'"

DavidGilbert99 writes "Security researchers have discovered a single line of code embedded in websites which could wipe all data from your Samsung Galaxy S3 and other smartphones. Samsung smartphones including the Galaxy S3, Galaxy S2, Galaxy Ace, Galaxy Beam and Galaxy S Advance all appear to be affected by the bug which triggers a factory reset on your phone if your web browser is pointed to a particular website. Smartphones can also be directed to the code through NFC or using a QR code. Once the process has been initiated, users are have no way of stopping it. The hack was unveiled at the Ekoparty 2012 security conference in Argentina by Ravi Borgaonkar, a security researcher at the Security in Communications department at Technical University Berlin. ... Only Samsung smartphones running the company's proprietary TouchWiz user interface appear to be affected. According to telecoms engineer Pau Oliva, the Samsung Galaxy Nexus is not affected, as it runs on stock Android and doesn't use the TouchWiz skin on top." Hit the link above for a video demonstration.