Tech News Weekly 400: How Security Experts Hacked the Hackers

Summary

Tech News Weekly 400: How Security Experts Hacked the Hackers

Release Date: August 14, 2025

In the milestone 400th episode of Tech News Weekly, host Micah Sargent is joined by Jennifer Pattison Tuohy of The Verge and special guest Harrison Sand, a senior security consultant from Mnemonic. The episode delves into Apple's rumored expansion into AI-driven home robotics, the revival of the Pebble smartwatch, a deep dive into a sophisticated global SMS phishing scam, and Apple's innovative workaround to reintroduce blood oxygen sensing in its smartwatches amidst patent disputes.

---

1. Apple's Foray into AI Home Robotics

Timestamp: [01:24]

Jennifer Pattison Tuohy kickstarts the discussion by exploring Bloomberg's report from Mark Gurman, which unveils Apple's ambitious plans to enter the AI robot market. According to the report, Apple is developing a tabletop robot expected to debut in 2027. This device resembles an iPad mounted on a movable limb, allowing it to swivel and reposition itself to engage with users within a room.

Jennifer Pattison Tuohy [03:30]: “The tabletop robot will serve as a virtual companion. It could even interrupt conversations between friends about dinner plans and suggest nearby restaurants or relevant recipes.”

The robot is designed to enhance interactivity in the home, facilitating functions like FaceTime calls and video conferencing with dynamic display adjustments. Notably, Apple aims to infuse the robot with a personality, transitioning from mere utility to a more personable household member. This shift aligns with the broader industry trend of moving from command-based voice assistants to more conversational, AI-driven companions.

Additionally, the report touches upon Apple's potential expansion into home security systems, featuring battery-powered cameras with facial recognition capabilities. These cameras are designed to operate for extended periods—several months to a year—on a single charge, a feat that, if achieved, would set a new standard in home security technology.

Micah Sargent [06:45]: “If the camera doesn't turn on, then it'll last a year.”

Jennifer expresses both excitement and caution regarding the integration of personality into home devices, highlighting the delicate balance between enhancing user experience and avoiding intrusive interruptions.

---

2. Pebble Time 2 Smartwatch Revival

Timestamp: [17:06]

Transitioning from robotics to wearables, the episode spotlights the highly anticipated Pebble Time 2 smartwatch. Eric Medjikovsky, the original creator of Pebble, reveals the final design, which boasts significant upgrades such as a stainless steel construction, RGB LED backlight, and an impressive 30-day battery life—a standout feature in the current smartwatch landscape.

Micah Sargent [24:45]: “But still, I love the idea of not having to charge everything in my life, but unfortunately, that is kind of our future.”

The Pebble Time 2 retains the beloved E-paper display that Pebble users adored, coupled with modern enhancements like heart rate monitoring and dual microphones for improved environmental noise cancellation. Priced at $225, the smartwatch is available for pre-order with four customizable colorways pending community feedback.

Jennifer shares her admiration for Pebble's enduring legacy and the brand's reputation for exceptional battery life, comparing it favorably against competitors like Garmin and Apple Watch. The discussion also touches upon the aesthetic considerations, with Jennifer advocating for a more streamlined and unisex design to appeal to a broader audience.

Jennifer Pattison Tuohy [26:01]: “But I like this more sort of democratic way of choosing how divided devices look. But it's please everyone, that's the problem.”

The Pebble Time 2’s revival exemplifies the enduring demand for customizable, long-lasting smartwatches, positioning Pebble uniquely in a saturated market.

---

3. Unmasking Global SMS Phishing Scams: An Interview with Harrison Sand

Timestamp: [33:56]

The episode's centerpiece is an in-depth interview with Harrison Sand from Mnemonic, who shares the riveting story of how his team uncovered and dismantled a massive global SMS phishing operation known as Magic Cat.

Discovery and Investigation

Approximately a year ago, Sand and his colleague noticed a surge in phishing messages across various countries, primarily in Norwegian. Unlike typical smishing (SMS phishing) attacks, Magic Cat exhibited a high level of sophistication and scale, prompting the Mnemonic team to investigate further.

Harrison Sand [35:16]: “We were like, not too much, you know, we were googling around like these people have to be making money. Like it has to cost something to be sending out a text message to the whole planet.”

Their initial attempts to analyze the phishing platform using standard penetration testing tools were thwarted by advanced anti-forensic measures designed to deceive security researchers. The site employed techniques to differentiate between genuine users and researchers, complicating efforts to trace the perpetrators.

Unraveling the Atrocity

Despite these obstacles, Sand and his team persevered, eventually infiltrating a Telegram group associated with the phishing network. This group revealed a highly organized ecosystem where operatives boasted about their illicit gains, showcasing luxury items like high-end cars and sophisticated infrastructure set-ups such as racks of phones running automated software to dispatch phishing messages globally.

Harrison Sand [38:25]: “It was very open, it was very professionalized. People were showing off their fancy cars that they bought going out and partying.”

The investigation culminated in identifying the individual behind Magic Cat through meticulous OSINT (Open Source Intelligence) techniques. By tracking an IP address linked to a GitHub account and leveraging social engineering tactics—sending a deceptive email with a tracking link—the team successfully exposed the scammer's true identity.

Harrison Sand [47:12]: “We could see that like this is just one out of hundreds. So there's probably just the scale of this was just massive.”

Implications and Recommendations

Sand emphasizes the staggering scale of Magic Cat, estimating that hundreds of thousands, if not millions, fell victim to the scam. He attributes the proliferation of such sophisticated phishing operations to fragmented responsibility across telecom providers, financial institutions, and insufficient fraud detection mechanisms.

Harrison Sand [51:30]: “I think in a way the responsibility is kind of spread between so many different areas.”

To mitigate such threats, Sand advocates for a collaborative approach involving enhanced filtering by phone companies, improved fraud detection by banks, and robust action from law enforcement agencies. Educating the public on recognizing and avoiding phishing attempts remains a crucial frontline defense.

Harrison Sand [53:36]: “If it has a link in it, nine times out of ten you don't need to click it.”

---

4. Apple’s Innovative Workaround for Blood Oxygen Sensing

Timestamp: [58:05]

In a groundbreaking move, Apple has reintroduced the blood oxygen monitoring feature in its smartwatches sold in the U.S. by leveraging a workaround that processes sensor data on the paired iPhone rather than directly on the watch. This approach circumvents an ongoing patent dispute with medical device maker Mossimo, allowing Apple to comply with an import ban imposed by the International Trade Commission (ITC).

The update, rolled out with iOS 18 and WatchOS 7-1-11, affects Apple Watch models Series 9, Series 10, and Ultra 2 purchased in the U.S. post-January 17, 2024. Users of these models will now need to view their blood oxygen readings through the Health app on their iPhones, as the watch itself no longer performs the calculations internally.

Micah Sargent [59:43]: “It all feels like a little bit of language change there just to very narrowly define the scope and therefore get past this ban.”

This strategic maneuver not only reinstates a vital health monitoring capability for users but also highlights Apple's innovative resilience in navigating complex legal landscapes. However, it raises questions about the implications for future patent disputes and the potential boundaries of such workarounds.

---

Conclusion

Timestamp: [58:40]

Throughout this episode, Tech News Weekly offers a compelling blend of industry insights, technological advancements, and critical security investigations. From Apple's ventures into AI companions and smartwatches to the heroic efforts of security experts in combating sophisticated phishing scams, the episode underscores the dynamic and multifaceted nature of the tech world.

Listeners are encouraged to explore the detailed Bloomberg report referenced in the discussion for a comprehensive understanding of Apple's AI robotics ambitions and to stay informed about evolving security threats through ongoing updates from security professionals like Harrison Sand.

---

Stay Connected:

• Visit Twit TV for more exclusive content.
• Follow Micah Sargent on social media at @ikasargent.
• Explore Jennifer Pattison Tuohy's work on The Verge.
• Learn more about Mnemonic's security research at Mnemonic.

---

This summary captures the essence of Tech News Weekly's 400th episode, providing a thorough overview for those who haven't had the chance to listen.

Transcript

[Micah Sargent]

Coming up on Tech News Weekly, Jennifer Pattison Tuohy of the Verge is here and we talk about the Bloomberg report from Mark Gurman about Apple's expansion into AI robots. Then I talk about the new Pebble Time 2 design reveal before Harrison Sand, a senior security consultant from Mnemonic, talks about how he and the Mnemonic team tracked down the person behind those global SMS scams. And round things out with an update from Apple on blood oxygen sensing via the iPhone instead of the Apple watch. Tune in to this week's episode of Tech News Weekly. Podcasts you love from people you Trust.

[TWiT]

This is TWiT.

[Micah Sargent]

This is Tech News Weekly. Episode 400 with Jennifer Pattison Tuohy and me, Micah Sargent. Recorded Thursday, August 14, 2025 How Security Experts hacked the hackers hello and welcome to Tech News Weekly, the show where every week we talk to and about the people making and breaking that tech news. I am your host, Micah Sargent, and I am joined this week by Jennifer Pattison Tuohy of the Verge and the Verge cast. Hello, Jen.

[Jennifer Pattison Tuohy]

Hi, Micah. Happy to be here as always. Nice that there's not such a big gap this time.

[Micah Sargent]

Yeah, exactly. Instead of going, I feel like it's been forever since I've seen you, I go, oh, it's nice to see you again. So for people who are tuning in for the first time or who need a little reminder, this of course is the part of the show where we share our stories of the week. These are stories that we find interesting or in some cases kind of late breaking, as is the case here. And I'm really excited to hear your excitement or lack thereof. You know, you tell me about this story that you've chosen.

[Jennifer Pattison Tuohy]

Yeah, so it's funny, I was just saying to Micah, happy to come on, but I don't really have much to talk about. And then boom. Mark Gurman at Bloomberg, as he's wont to do, just spilled all this exciting Apple home robot series stuff. And I was like, oh look, I want to talk about this. This is exciting for me. This is, you know, very much in my, in my space. But basically, just to sort of summarize, it's a very long article, lots and lots of things to dive into. But I think probably there's three things that I'm most excited about. The first is a lot more juicy detail on the new tabletop robot that Apple has been rumored to have been working on for a while. It's now got a potential date, which is exciting. 2027, I think. So it's not soon but it's going to. What really struck me about this so the way he describes it says that the new tabletop robot resembles an iPad mounted on a movable limb that can swivel and repossession itself to follow users in a room. Like a human head, it can turn toward a person who is speaking or summoning it and even seek to draw the attention of someone not facing it. So like this is going to be. Sounds like a very sort of interactive device. They're saying it's going to be the. A key function will be facetime calls video conferencing. Like the display will shift. And that's something we've already seen with like echo show devices. They have a shifting display. Then it. But it's the kind of interesting part here is that it's going to have a personality. They're going. They say it's. The quote is the tabletop robot will serve as a virtual companion. It could even interrupt conversations between friends about dinner plans and suggest nearby restaurants or relevant recipes.

[Micah Sargent]

Really doesn't sound like interrupted. That sounds like a great idea. I love that.

[Jennifer Pattison Tuohy]

That's the kind of like this is a personality in your home, not just a tool which is something I have very mixed feelings about. But they're also going to have it be that there was a comment in there that it may look a little bit like a sort of animated clippy. They were going to the one of the things they were talking about using was the finder icon as like a little face. So the. I mean I love the idea Apple using a clippy style. This just feels like a complete circle here. A clippy style robot. But all of this obviously is rumor. None of it's been fully confirmed but. And that is very much in the future. But they are. There was more reporting here about the actual smart display that we've heard more about recently, coming next spring, getting a much more sort of definitive timeline. And all of this is going to be powered by this new LLM series. And one of the key kind of nuggets in this story was that Apple as. As Amazon had to do is sort of stripping away the old Siri and building a whole new Siri. And this sort of has been the theme we've started to see with the transition from the command and control voice assistant to the LLM powered generative AI voice assistant. And that kind of goes towards this idea of having a more human like companion robot in your home. Which you know, again I have thoughts on. But just before we get to any of thoughts the other thing that came out of this is more information about potential Apple smart home products outside of smart displays, more details about cameras and potential video doorbell, which was exciting and also sort of a hint that maybe Apple may be developing a home security system. Gurman writes at the the security system which could include the cameras. You know, when people say a security system, they don't necessarily mean like a keypad and contact sensors on the door, but the security system will be able to automate household functions. So it would actually also act like sensors. So you'd be using the camera and infrared sensors, he says, to sort of help determine who's in the house and what's happening. He did say that this, these cameras will be battery powered, which I thought was very interesting because that's not normally something you would use inside a home. Saying that they could last from several months to a year on a single charge, which I'm like, no, there are no battery powered cameras that do that. So I'd be very interested to see if they manage that.

[Micah Sargent]

If it does, it doesn't. If the camera doesn't turn on, then it'll last year.

[Jennifer Pattison Tuohy]

Absolutely not helpful. And then it'll also have facial recognition. So again they'd be able to kind of respond to who's in the home. And also as a security system, if someone who shouldn't be in the home is in the home. So, yeah, a lot of sort of really interesting things. There was also a lot of detail about new software, home OS type. Well, not home os. It was actually a new operating system that's going to come to this. These robot smart displays called Charismatic and that it would actually adapt based on who is looking at it. Which means it will be potentially one of the first Apple products that's multi user.

[Micah Sargent]

Truly multi user.

[Jennifer Pattison Tuohy]

Truly multi user. I mean obviously homepods have that a little bit, but yeah, that's. Yeah. So that's sort of a really brief summary. You highly recommend people reading the whole thing if you have the Bloomberg subscription or can find your way around the paywall, because there's a lot of, a lot of juicy details and it was very exciting. What grabbed you, Maika?

[Micah Sargent]

Well, the one thing that you talk about there is the change right in interaction based on the user. And it made me kind of think about how my significant other. I'm not sure what your experience is, but mine is particularly allergic to when technology is trying to be clever and it's sort of like, don't do that, just do what I need you to do. Whereas I find some of that quirkiness. Kind of adorable. A great example of this is just the other day I was in the kitchen, I think, cooking, I don't remember. It doesn't really matter. But I said to the HomePod mini that was in the kitchen, turn the volume to 100, because if you've had a HomePod mini, you know, they're not very loud. And so I said, you know, turn the volume to 100. And it responded. It said, are you sure that's pretty loud. And I said, yes. And I had a little chuckle at that, as you just did. But when I explained that to my significant other, he was sort of put off by the idea that it would, you know, ask that instead of just doing what I asked it to do. So I had this thought of when I walk up to this thing, it's, you know, moving its head back and forth. It's sort of, you know, nodding along or whatever and following me. And then if you were to walk in the room, the thing would just go into this mode of just only doing what it's told to do.

[Jennifer Pattison Tuohy]

Whatever you say, sir.

[Micah Sargent]

Yeah, whatever. Exactly. Whatever you say. And how different that that could be, because, yeah, I think that kind of thing can be delightful, and I enjoy that aspect of it. But I do wonder. The one thing that kind of made me go. I made all of those noises was the idea that it would cut in to a conversation.

[Jennifer Pattison Tuohy]

And that was the first thing I picked up. I'm like, interrupt. I don't want a device to interrupt me. I want. When I say, what do you think? Maybe s. Or, yeah, if I bring you in suggestions, but don't interrupt me. I mean, to be fair, that did look like that was kind of the context that. That the reporter added, rather than like a direct quote from someone. But, yeah, that just. It just stuck me. Because when you have any kind of a technology device in your home that interrupts you like a. Amazon's a. Does that a lot by mistake, because it thinks it hears its wake word. And it's so frustrating. It's like, shush.

[Micah Sargent]

Yeah, yeah, you be quiet. I'm not talking to you. But that, I think, is the problem with that, too, that I have seen is people are already convinced, as we've talked about before, that their devices are constantly listening to them. So the idea that one would interrupt to say, oh, they are listening. Yeah, they are listening. Oh, I hear that right now you're talking about going to a restaurant. So let me. But then I think maybe the people who have that distaste or dislike would not have this in their home in the first place. I mean, who does it? Who then does it? Who is it for then? If anecdotally speaking, but largely speaking, in the anecdotal situations, people who I see who are not us, these tech enthusiasts don't seem to like that. So it does make me wonder, is it just a matter of the right company doing it? Which I think is what some would argue, particularly Apple enthusiasts would argue this is Amazon vs Amazon or is it that this would be a product for people who are super into this in the first place? I don't know, you know, the, I don't know the, the customer base of the HomePod mini, for example. I know I would imagine that a lot more people have Apple TVs than have HomePod minis, but I could be wrong about that. And so it makes me and the HomePod. I'm using the HomePod mini as an example because it is sort of what Apple offers as a smart home, quote unquote product, even though it's not really. But it does have the little humidity and temperature sensor built into it and it does serv as the device for helping communicate with your other smart home stuff.

[Jennifer Pattison Tuohy]

Yeah, interesting. I think it's going to be really down to what that functionality it can offer is. I don't think interrupting me to tell me I might want to go to this restaurant is good function, but if it's going to interrupt me to say, oh, you left your garage door open, would you like me to shut it? Or if it can have context from around the rest of the home and be able to do helpful, useful things, be able to help manage your home. I mean, we've talked about the idea of these robots being kind of the brain of your home. I mean, it's a rope. Is it? Robot is a loose term because this is city. This isn't like a Rosie that's going to roam around your home. It's just sort of sitting on a tabletop. It's just the next step up from a smart speaker having more personality and some mobility. I mean, in fact, we've already, I think we talked about this a few episodes ago. They have. Apple had released a sort of a white paper about tabletop robot that looks like the Pixar lamp.

[Micah Sargent]

Yes.

[Jennifer Pattison Tuohy]

And I think that obviously seems to be what they've connected to here. I think there is a fine line between personality, you know, charm and endearing and annoyance. And that is going to have to be, you know, that fine line is really ruled by Functionality. If you're doing something useful and productive for me, I'm going to of put up with that a little more. Even if I'm like your spouse and don't like it. Mine is the same. Like we're testing Alexa at the moment and whenever you ask it, things that you used to ask it to do, it now adds a little kicky line at the end all the time. And everyone in my house is like, woo. Yeah. It's like when I ask what the weather is, it'll tell me and then it'll say sounds like it's going to be a good one today.

[Micah Sargent]

Oh boy. Yeah. And we've gotten used to the other way of it doing things too. And so sometimes I think it might be just a matter of, of adapting to a change and you'll need to.

[Jennifer Pattison Tuohy]

Be able to dial up and down the personality I think based on what you like.

[Micah Sargent]

Yeah, yeah, I think that that that works. There's a weather app, carrot weather and it has different personality modes that you can choose for it. And, and I think that, yeah, that's been. Or that was something that I always found delightful about it where you could say I really just want to know the weather. Don't do any clever messages or anything like that or I want you to say some wild stuff when you're talking about the weather. And that's good too. But it's your choice and maybe that's the aspect of it that's important is the person gets to make a choice on how they have theirs set up.

[Jennifer Pattison Tuohy]

Yeah, yeah. And you know, choice if they want a kind of AI robot companion in their home or if they just want something that's going to set a timer and play music. Because I think you still, you know, the utility is the important part. I mean there's a lot of interesting work being done I think on that companion side and I think we'll see a lot of that coming in the future. But I feel like there isn't the demand for it yet. So I think it's to going once it's out there the reaction will be interesting to sort of see whether people really enjoy this and whether it brings more to their life, especially people that live alone. I can, you know, I know people that use it a Amazon's a. As a companion already because it is, you know, the loneliness is a real thing.

[Micah Sargent]

Yes.

[Jennifer Pattison Tuohy]

But whether artificial intelligence is the solution to that, that sort of gets into a real psychological. What's the, what's the word for society?

[Micah Sargent]

Oh goodness. Which one?

[Jennifer Pattison Tuohy]

You know what I'm trying to say.

[Micah Sargent]

I do, I do. I do it.

[Jennifer Pattison Tuohy]

So yeah, something it is a big question for sure.

[Micah Sargent]

All right, let us take a quick break. A reminder again to definitely go and check out that Bloomberg article as it has loads more detail and interesting aspect. It's one of Gurman's longer pieces and is filled with lots of good stuff. But we'll take a quick break and come back.

[Jennifer Pattison Tuohy]

Sociology. That's what I was trying to say.

[Micah Sargent]

Ah, sociology. There we go.

[Jennifer Pattison Tuohy]

Sorry, there's the. It came to me eventually.

[Micah Sargent]

We got around to it. Your a said I heard you were talking and I think the word you're looking for.

[Jennifer Pattison Tuohy]

Here's the word you need. Okay, I can deal with that. Thank you. You're helpful. No, it's not.

[Micah Sargent]

All right, we'll take a quick break and come back with my story of the week. I want to tell you about ZocDoc bringing this episode of Tech News Weekly. So remember that doctor's appointment you were supposed to make a while ago? That one you meant to book and completely forgot about until now? Perhaps it's that dentist appointment for your biannual cleaning? That overdue annual checkup that instead of being annual has been three years in the making? Or the dermatologist visit for that mole you keep meaning to get looked at. Or the rash you diagnosed with Google but still haven't had checked out. Why not go and book it today with zocdoc? It makes it easy to find the right doctor right now and it's all online for those of you who hate calling. You might even be able to book an appointment before the end of this ad. Read ZocDoc is a free app and website where you can search and compare high quality in network doctors and click to instantly book an appointment with Zocdoc. You can book in network appointments with more than 100,000 doctors across every specialty from mental health to dental health, primary care to urgent care, and more. You can filter for doctors who take your insurance, are located nearby, and are a good fit for any medical need you may have, and are highly rated by verified patients. Once you find the right doctor, you can see their actual appointment openings. Choose a time slot that works for you and click to instantly book a visit. I mentioned before, when I first moved moved to Portland and had to switch insurance, Zocdoc very much came in handy for finding doctors that were within my plan and I ended up finding a doctor within walking distance from my house and then a dentist within walking distance from my house. That all took my insurance. It was incredibly helpful. And for those of you who you know are continuing to look for new doctors of different types, this is so great for that Appointments made through Zocdoc happen fast, typically within 24 to 72 hours of booking. More often than not you can even get same day appointments. So stop putting off those doctors appointments and go to Zocdoc.com TNW to find and instantly book a top rated doctor today. That's z O C doc.com T NW Zocdoc.com thank you Zocdoc for sponsoring this week's episode of Tech News Weekly. All right, back from the break, joined this week by Jennifer Pattison Tuohy. And it's time to talk about a smartwatch. The Pebble Smartwatch, which is making a comeback and its creator, Eric Medjikovsky has just revealed the final design for the Pebble Time 2. After successfully recovering the pebble trademark, company Core Devices is bringing back the beloved smartwatch brand with RGB LED backlight, more significant upgrades including a stainless steel construction and an impressive 30 day battery life estimate. The watch, which is available for Pre order at $225, represents a refined evolution of the original Pebble Time design, this time with modern features like heart rate monitoring, dual microphones, while maintaining that delightful E paper display that made pebble famous. So let's talk about the kind of resurrection story. Eric Miczikovsky, who we've had on the show before, is the original creator of Pebble. And remember, back then a Kickstarter project announced plans to return to the smartwatch market in March of 2024 through core devices. Now, as we talked about on the show, the watches were originally branded as Core2 Duo and Core Time 2 because of the fact that they didn't have the ability to call them pebble due to the trademark issue. But Mizikovsky has since successfully regained that pebble trademark and therefore the watches will change from being called the Core 2 Duo to the Pebble 2 Duo and the Core Time 2 to the Pebble Time 2. So what's changed? Well, the final design offers, you know, it's that's, I think, quite a bit of a change from what we originally saw in those preliminary versions that Medzikovsky showed in March. They've been able to tweak and improve the industrial design quite a bit since then, says Mizzikovsky. I think it's turned out fantastically well, even has a working engineering sample that he's been wearing. Of course, the final quality and finish is not there yet because the company is asking for feedback. But what can we expect from this new hardware? Multicolor RGB LED backlight so that you get better visibility. And with that E Ink display, that RGB LED backlight is helpful. A second microphone so that can be used for environmental noise cancellation when you're talking into it. Compass sensor for navigation features. Screw mounted back cover for durability but also fixability. Stainless steel construction for the front and the back. And stainless steel buttons that are similar to that Pebble Time steel of yesteryear. The display is a 1.5-inch 64 color E paper display. It's got touchscreen functionality and hardened glass lens. Interestingly, I think for this product, a 30 day estimated battery life, which in the smartwatch market is pretty wild. Yeah, where are you going to find that? And a quick release 22 millimeter watch strap as well. One last thing I'll say before we kind of chat about this a little bit. It's currently available for Pre order at $225. According to Miekovsky, the company plans to release the watch in four colorways. Those four colorways haven't been finalized as they are looking to hear from everyone about the colors. So we'll see how that goes. But yeah, I imagine it's a little difficult to break into the smartwatch market at this time. But I think pebble is uniquely positioned in the sense that it has quite the enthusiastic fan base and that 30 day battery life could really speak to some people. What do you think?

[Jennifer Pattison Tuohy]

Well, it's the original smartwatch. I remember always wanting a Pebble. I didn't get one, but when they first came out and you know, they definitely have that name recognition which goes a long way in this space, I think. I mean my husband has a, one of the Garmins and that does get pretty good battery life. I think it's the forerunner, I think that he has and he gets at least a month, I think on it.

[Micah Sargent]

Oh, wow. Okay.

[Jennifer Pattison Tuohy]

Well, I may be wrong. I know it's a lot better than an Apple watch because he did, he was like, I cannot do, like, I just don't, you know, the fact that I have to charge it every day. No. So he went, he went with this. Oh, no. Ten days. Sorry. So over a week, that was it. It was like he needed it to be over a week. So he will, he can just take it off on the weekend and he doesn't really need it on the weekend, but 30 months, 30 months, 30 days is like you almost in a way. It would be hard to kind of get into the routine.

[Micah Sargent]

Yes, that's what I was thinking.

[Jennifer Pattison Tuohy]

But still, I love the idea of not. Not. I mean, I don't want to charge everything in my life, but unfortunately, that is kind of our future. I think so. And it just looks great. Like, the Garmin that my husband has looks good on him. But all the Garmins are really chunky. I think there's one that's a little streamlined, but they're just a bit chunky for me. I like the. I really like the look of these. I think they're. They're much sleeker. There's still a bit more on the sort of unisex masculine side, I would say, rather than necessarily feminine. But I guess you could sort of swap that out with maybe some band options, which is what the Apple Watch does nicely. Like, I don't have it on now, but I have the Milanese loop, which I just love on my Apple Watch. So it's interesting that they're asking for sort of ideas for the design and the colors, because I'm like, I know it's weird how fashion has kind of shifted from what people. You know, people kind of being told what's right to more of a kind of, you know. That excellent scene in the Devil Wears Prada, I'm so excited for the second. Second movie, because that's coming out soon. But the Excellency in the Devil Wear Prada, where she talks about how color has been kind of, you know, comes up, comes down, trickles down.

[Micah Sargent]

Yeah.

[Jennifer Pattison Tuohy]

From the runways. But I like this more sort of democratic way of choosing how divided devices look. But it's please everyone, that's the problem. So, I don't know, It'll be interesting to see what they end up with from that.

[Micah Sargent]

Design by committee is, of course, sort of a joke in and of itself. I do think that it's part of the, what the ethos of this company in particular, given that it was a Kickstarter project in the first place, which is as much of a grassroots sort of supporter system as could be to now, where, when we had Eric on the show, he talked about the main reason that he wanted to do this was because he has been wearing his original, or wearing the original design for years at this point. And he basically just had sort of. Not actually, but a safe with several of them in there, and as they kind of died or whatever happened.

[Jennifer Pattison Tuohy]

And he would get a new one.

[Micah Sargent]

Yeah. And he's like, well, I've been running out and I really want to bring it back. And so when Google open sourced the or you know, made that, that, that system available again. I said oh, you know, now's my chance. But hearing then the excitement from the community to bring it back in this way I think is really cool. I have my pebble still and every once in a while I'll go on because iFixit has been great in providing, in offering for sale replacement batteries for the pebble and so being able to keep it going that way. Yeah, the original smartwatch, I remember just being so enamored of it and getting it and having it on my wrist for as I said, days. And that was a difference to now where I mean I've got my nightstand has a place for my Apple watch, a place for my phone, a place for my AirPods. So it's not hard for me to do that.

[Jennifer Pattison Tuohy]

I keep forgetting to put mine back on in the morning and that's why I don't have it on now. And it's that I want that I don't have to work and I know where it is but I took it off in the evening when I was watching TV and I put it on the counter rather than on my bedside table where I have the charger and it's like that there's just too many things to charge in my life. That's very true.

[Micah Sargent]

But yeah, I'm looking around at all the different things I've got plugged in right now. But yeah, I think that that multi day battery life is very handy as a, an aura ring wearer though I do agree with that idea of while it's good, it also is a difference in behavior. And so I find myself looking down on my ring, not seeing any green lights and realizing, oh right, two days ago I got that notification telling me I needed to charge it and I just sometimes forget because it's not a thing that I'm regularly doing. Whereas for me at this point I do feel, I feel it if I'm not wearing my Apple watch because every night I take it off, I put it on the charger every morning. It is part of me literally like standing out, standing up out of bed is I put my watch on, I grab my phone so it's just built in. Whereas something that once a month is a little less. Yeah, I don't know that I would be as good about it, but I can't, you know, I can't say for sure. Regardless, really exciting stuff, they're working on it. Of course there's the pre order that's going on right now and we've got time until it is fully available but you can still get in on the pre order $225 price point. So if that is of interest to you, you can head over to the site. Will of course include a link in the show notes to check it out but repebble.com r e pebble.com which has all of the information about it if.

[Jennifer Pattison Tuohy]

He'S listening Rose Gold let's have a rose gold one please.

[Micah Sargent]

Rose gold would be good. Very good.

[Jennifer Pattison Tuohy]

I want some Goldie in there or even just gold.

[Micah Sargent]

Yeah yeah, yeah. But Rose gold very good. Jennifer Pattison Tui I want to thank you so much for taking the time to join us today. If people would like to check out the work you're doing and listen the work you're doing, where should they go to do so?

[Jennifer Pattison Tuohy]

Yeah, everything'[e-mail] and as Maika mentioned at the top of the show I I mentioned a while back I was guest hosting a couple Vergecast podcast episodes this month so those going live one went live on Tuesday and the next one is next Tuesday. So you can head to the link there and download the episode or go to your podcast player of choice or YouTube to see a video. Hope I'd love any feedback. It was a lot of fun. I don't know how you do this all the time Micah, but yeah it was. It's great fun and I love being on here too. So hopefully actually I will be on Twitter this weekend too so. Oh wonderful guys. Get double dose of Jen.

[Micah Sargent]

Well Jen, thank you so much. We appreciate it and we'll see you on Sunday.

[Jennifer Pattison Tuohy]

All right, thanks. Bye bye.

[Micah Sargent]

All righty. We're going to take a quick break before we come back. If you've ever received one of those messages telling you that you need to pay your toll, well your hero is on the phone very soon. Before we get to that interview though, let's take a quick break so I can tell you about Cashfly bringing you this episode of Tech News Weekly, literally, figuratively and everywhere in between. For more than 20 years, CashFly has held a track record for high performing ultra reliable content delivery serving more than 5,000 companies in more than 80 countries. And at TWIT, we have been using Cashfly for more than a decade now. We love the lag free video loading, the hyper fast downloads. I'm sure you love those too. And friction free site interactions. And Cashfly's proof is in the petabytes. Events are going to stream smoothly for millions of concurrent users worldwide. Online games will start 70% faster, scale instantly and play without lag. Software downloads flawlessly during releases, patches and updates. HD video plays on demand with ultra fast sub second start on every device and podcasts reach global audiences in record speed at any scale. Cashfly delivers rich media content up to 158% faster than other major CDNs and allows you to shield your site content in the cloud, ensuring a 100% cash hit ratio. And with Cashfly's elite managed packages, you will get the VIP treatment. Cashfly is like gaining an extension of your team. When your entire business model depends on delivering massive amounts of content, you can't afford to go it alone. You can count on personalized help anytime from a tenured expert who gets IT Engineer to Engineer 24 7. So learn how you can get your first month [e-mail] TWIT that's C-A C-H-E-F-L-Y.com TWIT and we thank Cashfly for sponsoring this week's episode of Tech News Weekly. All right, we are back from the break and as I said, there goes my hero. If you have received one of those SMS messages or like me, you received from a family member a screenshot saying, is this real or is this a scam? Should I give them my money? I didn't think I had tolls. Well, someone is here to tell us all about what in the world is going on and tell us how, you know, they worked to defeat and we hope this issue. Harrison Sands, thank you for being here.

[Harrison Sand]

Thank you so much. Thank you so much for having me. Really, really glad to get to talk about it.

[Micah Sargent]

Yeah, absolutely. So I would love it if we could kick off by having you kind of walk us through what made this particular phishing campaign stand out from the typical smishing, by the way, that was a new term for me, smishing attacks that you encounter and what technical approach you took to start investigating. What we'll learn is the magic cat platform, of course.

[Harrison Sand]

So, I mean, to start off, most of our research took place, I would say, about a year and a half ago. A year ago. And seemingly everybody on the planet was getting these text messages, right? Like either, you know, you have to, you have to pay a toll, like easy pass or something, or you have a package stuck at the post office. So I'm based out of Norway. We were getting those text messages in Norwegian. You know, you look online, you know, have relatives in the US everyone's getting text messages in every country. And my colleague Arland and myself, we were sitting there and we're like, not too much, you know, we were googling around like these people have to be making money. Like it has to cost something to be sending out a text message to the whole planet. So like they have to be making money. There's no information about these people. Who are they? So we kind of took the advice that most people give not to do and we clicked on the link and started poking around to see what was on, going, going on.

[Micah Sargent]

So you clicked it, you followed the path, the one that many of us attempt to avoid and started digging into. What you came to discover was kind of this platform, this software to discover that there were protections in place, right? Several anti forensics features designed to hide the operation from people like you, from security researchers. Can you tell us about that experience and some of the protective measures that were in place that you had to workarounds to actually access the phishing platform?

[Harrison Sand]

For sure. So normally my colleague and I, we work, among other things, we do penetration testing. And when you look at web applications like this was, you know, this is just a website basically and use a piece of software called man in the Middle Proxy, right? So it kind of sits in between the browser, either your phone or Chrome or whatever, and the backend server. And you kind of watch that data going back and forth. And when we tried to, you know, that's the first step you normally take. When we tried to load it up on our, on our computer to see that, that traffic going back and forth, it didn't like, basically the website said, sorry, you know, we're not running, nothing's going on. And so what we realized was that, you know, they're starting to put some protections in place. And we were trying to think, you know, why is this the case? You know, what, what are they doing?

[Micah Sargent]

It wasn't.

[Harrison Sand]

There were a few, without getting too, too technical, you know, they were, they were checking a few things that a phone would send differently than your desktop computer. And they were also checking what we believe was the IP address that you were coming from. You know, are you coming from a cell phone network? Are you coming from a, you know, a WI fi network? Because, you know, you're sending text messages. A lot of your victims are probably going to be on cell phones. But we also think it was, it was for researchers to, you know, slow us down. But also imagine, you know, you submit, you know, you take a screenshot and you submit it to whoever, you know, you start trying to report this as a phishing link, it's just going to be that one Extra step to slow down the process. You know, if the person on the other end getting that report just clicks on the link and nothing shows up, up, you know, are they, are they really going to spend the time to like dig down and say, like, oh yeah, this is a phishing link, or are they just going to, you know, pass it off and say like, okay, yeah, maybe it was a false positive, I don't know.

[Micah Sargent]

Right. Yeah. So that, that makes sense. I imagine that part of the aspect of this, this system is you send out a bajillion messages because some of them are going to come back and are going to be profitable as opposed to kind of more targeted. Right, targeted.

[Harrison Sand]

Just send everything out and hope you get a few back. Exactly.

[Micah Sargent]

Now you did end up gaining access, is my understanding, to a telegram group that revealed an entire ecosystem around this being an actual phishing as a service operation. Racks. Tell us about that. Like, what surprised you most about the scale and sophistication of what these operators are working, running?

[Harrison Sand]

I mean, I would say initially what surprised me just that the group was open and out there for anybody to find. If you just knew at the time when we looked, if you just knew where to look, it was just there. And you know, we just joined this telegram group after you knew the, you know, the name of this phishing platform. You could just search for it, go in and it was very, it was very open, it was very professionalized. You know, there were people, people showing off their fancy cars that they bought going out and partying.

[Micah Sargent]

Wow.

[Harrison Sand]

It was, you know, racks of phone. They were, you know, like you mentioned, just like, because you need, need quite a bit of infrastructure to send out a message to everybody out on the planet. And you know, so you just have like hundreds and hundreds of phones on racks running automated software, just sending text messages to, to everybody.

[Micah Sargent]

That the, the fact that they're showing their, their vehicles and just like, like, look what I was able to do. That is something else.

[Harrison Sand]

It's like advertising in a way. Right? So like if you, hey, look, look at all this stuff I got. You should, you know, my, you know, there's a few different platforms and they're kind of competing for different scammers, I guess, to use their platform. And if you say, hey, I got this cool stuff, you know, maybe you'll be more likely to use them.

[Micah Sargent]

Holy cow. It's. I will not name specific companies because I don't want them to come after me, but I can think of a few cosmetics aesthetics companies that have pink cars that their People can get, if they get high enough up into the system. And now I'm thinking about sort of the comparisons between the two. You're showing off what you're able to get and that draws more people in for sure. Oh, I want that fleece. So you did manage to join a sort of admin room where you were able. Can you tell us about this sort of real time data stream and then tell us about that moment of getting into this room and seeing this stuff flow in and the scope of how many people were being actively phished?

[Harrison Sand]

Absolutely. So simplifying a bit things, but more or less basically you have a few servers that are kind of running by the admins of this group and then all the scammers kind of have their own phishing servers. So you have let's say hundreds, maybe a thousand individual scamming servers, a few master servers, you could say. And then what we found out when we started looking at that data going back and forth using this man in the middle proxy I mentioned earlier, you could see that this, the as you typed in data as if you were a victim, it was kind of getting sent to this chat room and all of the data you were sending was getting sent to this like admin chat room. And there was, it was basically kind of sitting right in front of us and we're like, well, what happens if we just like join the admin chat room? So we're not just sending messages to there, but what if we just join it to see what's going on? And this was just on one server of probably hundreds or a thousand and there was just a stream of victim data coming down real time. Right. So like every time, you know, character for character as you're typing in, you know, your credit card number or your address, you know, you just see it flying by this in this admin chat room. And that was shocking to see that like, you know, I could see real time hundreds of people getting scammed and just knowing that like this is just one out of hundreds. Right. So there's probably just. The scale of this was just massive, massive that.

[Micah Sargent]

Wow. And the platform as you talk about appears to be kind of run like enterprise software. Licensing, updates, even customer support. What was that like? Who's buying these phishing kits? Of course. And was that a surprise to you that it's run like enterprise software? Or is that kind of what's to be expected at this point?

[Harrison Sand]

I mean, the software was run honestly better than some enterprise software I've used.

[Micah Sargent]

Wow.

[Harrison Sand]

It was. I know that this isn't the only piece of software that's come to this level of sophistication in terms of support and updates and so on. But it was very well maintained, very easy to use the people. So you have a few key players in this telegram group and you could kind of reach out to them and they would facilitate getting a license. So you'd send some cryptocurrency, you'd buy a license for a week or a month at a time. You get a license key and. Yeah, and then you download the software. It was just a one line installation. Way easier than probably setting up tons of software out there. A lot of the people we saw in the group, like what you mentioned, what types of people? People, I mean it was hundreds, so I can't say, but I speak for all. But it seemed like a lot of opportunists, right? So like 20, 20 to 30 year olds just like, hey, you know, I'm, I'm online, like I'll make a quick buck, you know, if I'm on the other side of the world, maybe, you know, I'll probably never get caught. So it's just, God. My impression is it's mainly opportunists.

[Micah Sargent]

It's just for me, it just blows my mind because I think about it seems different from sort of classic pirating of some. I'm thinking of like you want to install Microsoft Office on your machine and back in the day there were a few places to get the software keys, right. But this is in theory in this way it's like you have to rely on what was it the thieves code, like the honor among thieves situation where everybody is a bad actor here and you potentially could be faced with what if that, that, that company that you're getting this from decides to turn the tables on you and has your. It just. Anyway, the idea of even going to this platform and getting a license key and going through that process, the level of in, in my mind not thinking things through that has to be involved with that is, is wild.

[Harrison Sand]

But yeah, the risk assessment, not, not necessarily a risk I would take, right. You're, you're giving all this information to a guy who's also a criminal. Like. Yeah, exactly like. Yeah, yeah.

[Jennifer Pattison Tuohy]

High Key.

[Cashfly]

Listen to High Key, a new weekly podcast. You better listen. That's literally the definition of being an Aries Moon. Just one little spicy off comment. That's all it takes. Everyone loves me at the cancer and then the Aries comes out and they said, who the is that? No, you're gonna come for me Being an Aries and you have a sag moon. Get out of here. But I'm a Capricorn rising, so that honestly balances it out and makes me more likable. Okay, that is your Capricorn talking. Listen to High key on the iHeartRadio app, Apple Podcasts, or wherever you get your podcasts.

[Ryan Seacrest]

Hey, it's Ryan Seacrest for Albertsons and Safeway. Now through August 26th, it's back to Deals time, where you can enjoy storewide deals and earn four times points. Look for in store tags to earn on eligible items from Hershey's, Cheez It, Kellogg's, Gatorade, Smart Water, Skinny Pop, Oberto, Zoa and Activia. Then clip the offer in the app for automatic event long savings. Shop in store or online for easy drive up and go pickup or delivery subject to availability restrictions.

[Micah Sargent]

Apply.

[Ryan Seacrest]

Visit Albertsons or Safeway.com for more details.

[TWiT]

You can make a difference in someone's life, including your own, with a job in home care. These jobs offer flexible schedules, health care, retirement options, and free training. They also provide paid time off and opportunities for overtime. Visit oregonhomecarejobs.com to learn more and apply. That's oregonhomecarejobs.com.

[Micah Sargent]

Now this is where I think it's starting to become cinematic is you mnemonic started to track down the identity of the person behind this platform. Can you tell us about, like, what that process involved to be able to uncover a real person's identity whom you believe was responsible for the creation of of Magic Cat?

[Harrison Sand]

Sure. So, you know, as part of our investigation, we were, you know, digging as deep as we could into this, you know, centralized infrastructure to see like any kind of clues as to who these people were. Eventually we came across an IP address and we believed that this IP address was probably associated with one of these developers. We looked again, simplifying a bit, but basically we looked to see what has this IP address been used for previously. And we found that about a year prior to our research, the IP was used. It was linked to a GitHub account and this GitHub account seemed it was. This didn't really seem super related to Magic Cat. It was out in the open, some benign, innocent repositories in there. But eventually we found an email and we kept just going down the rabbit hole and eventually we were like, this kind of feels like it might be the guy. We actually sent him an email just asking about one of the repositories that were open in the public and was like, hey, we got A question about one of your repos. Maybe you could help us debug something. And we had a link in there, and the link recorded the IP address when he clicked it. And that actually pointed back to the same IP that we knew was getting used to log in to the backend infrastructure. So it was like, okay, this is probably the guy. And then we kind of just did a bunch of OSINT on that email and we worked with the Norwegian state media and they were able to kind of work with their sources and eventually get the identity and a photo of the guy.

[Micah Sargent]

Wow. So you used. Is it often that you end up using some of the same techniques that these phishing scams use themselves to sort of track down and get at these people? The idea that someone who's so involved with this would click, in theory, unprotected on a URL, knowing sort of what's possible in terms of that just kind of. That also blows my mind. Do you find that it ends up being a situation where somebody's feeling invulnerable or is it just. It just takes one slip up? Can you speak to that a little bit? Like, how would you not be going through every protection possible to not let something like that happen?

[Harrison Sand]

Yeah, so. And there's definitely a bit of irony here, right? So. But I think, because, I mean, we did sit and think about this a lot, but it's like, I mean, imagine you've been running this infrastructure for a long time. You know, all you have to do is slip up once and remember, we sent that email we didn't send, because he has. He has two identities. He has his, like, Telegram identity where he's, you know, the developer behind the software and he's doing all his illegal stuff, right? And then he has this, presumably, you know, this open identity where he's not doing anything illegal. So, like, you know, so if you send a link to that, Right. So if you send that, you know, link to his open, you know, good guy role, and then, you know, maybe you're a bit more, you know, your guard's not as up. You know, when you click on that.

[Micah Sargent]

It'S almost a Dr. Jekyll, Mr. Hyde situation where. Yeah, I guess, yeah. If you've got these two Personas that you're playing and this comes through the legitimate means, you're sort of in that mindset that makes sen sense. Very, very cool stuff. Of course, for everyone listening out there, you got to go read the full piece because there's so much juicy detail. And as I said, I wanted to Turn it into a movie right then and there. Look, we know that this operation, as you saw, has likely hundreds of thousands of victims globally. I was just reading about how, how Magic Cat might be out the door. But then there's a new thing that's popped up in its place, continues to evolve. Do you have any thoughts on what needs to happen from financial institutions, telecom companies, law enforcement to combat these actual phishing as a service operations?

[Harrison Sand]

Sure. I mean, the numbers. Yeah. So just to real quick, to point on the numbers. So I'm definitely, I mean, when we did our research, hundreds of thousands of victims, that's just what we were only able to see, a small portion. I would imagine it's millions out there. But to speak on your second point, I think in a way, this is my personal opinion, but I think in a way the reason this type of fraud has been able to proliferate is that you have. So the responsibility is kind of spread between so many different areas you have. So what they're doing is you receive a text message or an imessage. Okay, then that's your phone company or maybe Apple if it's an imessage, for example, so a bit of responsibility there for filtering out the messages. Then you have banks. What are they doing for fraud detection? And if you read the piece that goes a bit deeper, you'll see that a lot of the ways that they're able to monetize these cards is by onboarding them into a mobile wallet like Apple Pay or Google Pay. Right. So then that's another thing is maybe there's some kind of fraud metric saying that like, hey, I have 100 Apple Pay cards on my iPhone. Maybe this iPhone is a bit suspicious. Could Apple pass that information onto the banks and use that as some kind of metric? And then of course, law enforcement, I'm not going to. I think it's a bit of everybody. So yeah, there's a lot we could do as a society, I think.

[Micah Sargent]

Then I think the final question I'll ask you, you what advice do you have for us, the people who are out there who get these messages? What would we add to our toolkit of protecting ourselves from these phishing schemes? And maybe more importantly, the people listening to this probably can avoid a lot of it. What do we tell our family members who come to us for the tech questions about how to avoid this?

[Harrison Sand]

Yeah, so I know I'm not the person, I'm not the first person to say this by any means. Whenever you get a text message, just if it has a link in it, nine times out of ten you don't need to click it. If it's from your bank, for example, if you're unsure, go to the website directly, open up your laptop, type in the URL, URL. Call your bank, you know, with the phone number, not the, not the phone number in the text message, but the phone number, you know to be the phone number for your bank. Right. And, and, but I think actually like there's, what we can do individually is actually quite small. I think the, the actual solution to this it actually, it lies on, you know, big tech and phone companies and law enforcement. It's a, it's hard for the, it's hard for us individ for us individuals to make a huge, huge change.

[Micah Sargent]

Absolutely. Yeah, I agree. Well, I want to thank you so much for taking the time to join us to tell us all about this. And to you and the researchers who worked on this specifically, this is something that as I mentioned at the start of the interview, messages, screenshots that I get regularly from family members asking me, should I do you think this is, what is it? It's a horrible, horrible thing that takes advantage of a lot of people. And so the fact that there are people out there like you who are actively tracking this down and putting as much of a stop to it as possible is fantastic. We know that folks can head to the link we'll have in the show notes to check out this work. Is there anywhere else you would suggest people go to keep up to date with the work that you're doing as a security research researcher?

[Harrison Sand]

I would say you know the link, I'm sure you could find it based on the links you guys are going to put down there. I have a, you know, mnemonic, we have a, we have a blog. I'm sure if there's any updates we're gonna, we're gonna put it out there. LinkedIn, the Norwegian state media, they have a few articles that have been in English if not Google Translate does a really good job. I'd recommend, you know, you could check them out and there's also links if you. Yep you not too hard to find.

[Micah Sargent]

Wonderful. Thank you so much for your time. We appreciate it.

[Harrison Sand]

Thank you.

[Micah Sargent]

Alrighty folks, we have one more story, sort of truly another late breaking story here. But before we get there, I want to remind you about Club twit at twit tv clubtwit. When you head to twit tv club twit and join our club. $10 a month, $120 a year. You gain access to some pretty awesome stuff. First and foremost, the main attraction ad free versions of all of our shows. It's just the contents and none of the ads. And you get your own personalized feeds. It's kind of cool when you subscribe to these personalized feeds, it actually has your name right there in the title of the feed that will be an ad free version of again, every single one of our shows. You also gain access to our Twit plus feeds that include behind the scenes, before the show, after the show. We also have a feed for our news events now that we're doing those in the club and access and we've got the Made by Google event coming up very soon. So watching that in the club and gaining access to that afterward will be there. And then our club Twit only shows like Micah's Crafting Corner upcoming show that I will be doing where I'm running an adventure, a D and D adventure. So if you like D and D or other tabletop role playing games, now's the time to join the club. To get to check that out. I had a poll out and it's overwhelmingly decided and so I will be working on that soon and I'll have more information about that soon. And a couple other things that I'm working on. All of that are all of that is available in the club and access lastly to the Club Twit Discord. A fun place to go to chat with your fellow Club Twit members and also those of us here at TWiT. So if you would like to be part of the club, we'd love, love, love to. You know, it's also nice to get that warm fuzzy feeling knowing that you are helping make what we do here possible. Plus, did I mention you start with a two week free trial? Yeah. So go ahead, join the club, check it out. I think you'll end up staying. You're gonna love it and we thank you for your support. Alrighty folks, let's head back to the show with our final story.

[Cashfly]

Listen to High Key, a new weekly podcast. You better listen. Listen. That's literally the definition of being an Aries moon. Just one little spicy off comment, that's all it takes. Everyone loves me at the Cancer and then the Aries comes out and they said who the is that? No, you're gonna come for me being an Aries and you have a Sag moon. Get outta here. But I'm a Capricorn Rising, so that honestly balances it out and makes me more likable. Okay, that is your Capricorn talking. Listen to High key on the iHeartRadio app, Apple Podcasts or wherever.

[Ryan Seacrest]

Get your podcasts hey, it's Ryan Seacrest for Albertsons and Safeway. Now through August 26th, it's back to Deals time where you can enjoy store wide deals and earn four times points. Look for in store tags to earn on eligible items from Hershey's, Cheez It, Kellogg's, Gatorade, Smart Water, Skinny Pop, Alberto Zoa and Activia. Then clip the offer in the app for automatic event long savings. Shop in store or online for easy drive up and go pickup or delivery subject to availability restrictions. Apply. Visit Albertsons or Safeway.com for more details.

[TWiT]

You can make a difference in someone's life, including your own, with a job in home care. These jobs offer flexible schedules, health care, retirement options and free training. They also provide paid time off and opportunities for overtime. Visit oregonhomecarejobs.com to learn more and apply that's Oregon Home.

[Micah Sargent]

Apple Again Late Breaking is bringing blood oxygen monitoring back to newer Apple Watch models in the US Through a clever workaround that sidesteps an ongoing patent dispute with medical device maker Mossimo. Starting today as we record this show on Thursday, August 14, the company is rolling out iOS 18 and WatchOS 7-1-11. These updates will enable a redesigned version of the feature for Apple Watch Series 9, Series 10 and Ultra 2 units sold after the import ban took effect. The twist? Instead of calculating blood oxygen levels directly on the watch, the data will now be processed on the paired iPhone, allowing Apple to circumvent the itc, the International Trade Commission's import restrictions while still delivering health monitoring capabilities to users. I have to tell you, I'm really excited about this because just the other day I wanted to use the blood oxygen sensor on my Apple Watch and I remembered, oh right, I've got the Ultra 2. So not bashable. How does the new system work? Well, the blood oxygen feature represents a, you know, kind of a big change in terms of how it's set up for the purpose of being able to go around this band rather than performing the measurements and calculations on the Apple Watch itself. What happens is sensor data from the blood oxygen app on the watch gets transmitted over to the iPhone. So with that, it does mean that you're not going to be able to view the readings directly on your wrist. You will have to go into the health app on the iPhone and in the respiratory section. That is where your readings will be. It does only affect specific models because if it was before the ban. Then it doesn't apply. So Apple Watch Series 9 Series 10 Ultra 2 units sold in the US after January 17th of 2024. That's when the ban took effect. And you can identify if you have an effective model by checking if your serial number ends with LW A or again, just go by the model number and you most likely fall within that. So what was the whole issue here? Well, Mossimo and Apple sort of entered into this multi year dispute. It dates back to 2020 when Mossimo, which does make medical grade pulse oximeters, accused Apple of stealing trade secrets. The company filed a separate case with the ITC in 2021. So that was after the 2020 conflict alleging patent infringement which led to an import ban in December of 2023. We talked about that on the show as well. Apple did not take this lying down. In fact it worked regularly to counter sue Mossimo claiming that these smartwatches are claiming that Mossimo's smartwatches are Apple Watch clones. And then Apple filed a massive 916 page appeal of the ITC ban with which remains ongoing. Now here's the interesting aspect. It's all about timing because Massimo's patents are actually set to expire in 2028. So it's somewhat likely that this workaround will only be needed for another three years before those patents expire. Of course, if you're a new purchaser, if you're buying an Apple Watch Series 910 or Ultra 2 in the US right now, you will get this redesign feature after updating. If you're an existing owner like myself and you got your watch before January 17th, then it's still going to work the same way that it worked before, meaning that it will read right there on your wrist, not after the fact on the iPhone international users, it doesn't apply to you because this is just a US issue. The update was enabled by what Apple describes as a recent U.S. customs rule ruling. So it seems that the company did successfully argue that this iPhone based processing method doesn't violate the import ban. So seems to have taken it to the authorities and said check it out. Look what we can do here is this okay? Can we get the thumbs up? Well, it seems that they did. Now this of course is not the one health tracking feature that the Apple Watch has. It's it has a bunch of different health monitoring capabilities, irregular rhythm for your heart, notifications about that ECG functionality, sleep apnea notifications, fall detection, sleep tracking in general, wrist temperature sensing, and the new Vitals app which includes Lots of different information. So only the blood oxygen sensor and system was impacted by. But it seems like what Apple didn't want was for the Apple Watch to be seen as this device that can do all of these things, but it doesn't do blood oxygen. So now there's this workaround. What is fascinating is, of course, the question of whether or not this workaround will set precedent for future disputes. If the letter of the law versus the spirit of the law, or in this case, the letter of the ban versus the spirit of the ban, will come into play more in the future. That is, of course, one of those we'll have to wait and see. I think the fact that I will have blood oxygen sensing again on the watch, well, not on the watch via the iPhone, is cool. And I'm happy to have that back because for me, as an Apple Watch user, that's more important to me than this legal dispute between two companies. But of course, from the perspective of Massimo, I'm sure this is a frustration. And from the perspective of anyone who is heavily invested in the idea that one can create a thing. Thing, get a patent for said thing and have it protected to a certain extent, of course, is also at risk here in a way. But it also comes down to the fact that Apple has figured out a way to not do the very specific thing that the patent set forth and therefore is able to go forth with this new methodology. One aspect of this that sticks out to me though, is is the idea that the measurement and calculation is happening on the iPhone according to sort of the language that is included when surely it requires the sensors that are on the Apple Watch itself. So part of this feels like a clever use of language because is it a matter of. Of the phone sort of pairing in the moment with the Apple Watch or connecting in the moment with the Apple Watch and having that raw data streamed over. And so because that raw data is streamed over, then technically that means that the iPhone is performing the measurement versus before, where it would use the led, the lights that are built in, and the sensors themselves. Because it's not as if you're taking the iPhone and putting it on your wrist and you using the sensors that are there to do the blood oxygen calculation. It is going to require the sensor suite on the back of the Apple Watch to actually pull that data. So it all feels like a little bit of language change there just to very narrowly define the scope and therefore get past this ban. So I will be checking this out as soon as I can to see how it's working, working. And we'll see how Massimo responds, if it can, to kind of combat what has come forth. In any case, this is the end of this episode of Tech News Weekly. I want to thank you all for tuning in today. Of course you can head to Twitt TV tnw if you are not currently subscribed to the show, that's where you go to subscribe to the show in audio and video formats. Again, I talked about Club Twit during the show, but head to Twitt TV Club Twit to check it out. If you'd like to follow me online, I'm ikasargent on many a social media network where you can head to Chihuahua Coffee, that's C H I H u A H u a Coffee where I've got links to the places I'm most active online. Be sure to check out my shows that publish later today. Hands on Apple and Hands Nope, Hands on Apple and iOS today. Hands on Tech publishes every Sunday. Thanks for being here this week. Thanks for tuning in and I will catch you again next week for another episode of Tech News Weekly. Bye Bye.

[TWiT]

From Silicon Valley boardrooms to tomorrow's AI breakthroughs, if you need to keep up to date with tech, you need TWiT TV. At TWiT, we are tech experts who understand what's happening and can keep you in the loop. And we do it in a thoughtful, informed and fun way. Start your Sundays with this Week in Tech, a roundtable of tech journalists and people in the know with a race rundown of the week's most important tech news. But that's not all. All week long you can stay ahead of Security Threats with Steve Gibson and Security Now. Keep up on all things Apple with MacBreak Weekly. Listen to the most informed Microsoft experts in the world with Paul Thurat and Richard Campbell on Windows Weekly. Our flagship shows feature tech's most respected voices, giving you the insight you need to understand and benefit from the change world of technology. We give you analysis you won't find anywhere else so you can make smarter business decisions and take advantage of the technologies transforming your world. Whether you're a CEO, IT professional, or simply passionate about technology, TWiT's network of shows gives you the edge you need in today's digital landscape.

[Ryan Seacrest]

Don't miss a minute.

[TWiT]

Subscribe to TWiT TV today.

This episode is brought to you by Progressive Insurance. You chose to hit play on this podcast today. Smart Choice make another smart choice with Auto Quote Explorer. To compare rates from multiple car insurance companies all at once. Try [e-mail] Progressive Casualty Insurance Company and affiliates not available in all states or situations. Prices vary based on how you buy.