Security

Legit-Looking iPhone Lightning Cables That Hack You Will Be Mass Produced and Sold (vice.com) 57

An anonymous reader quotes a report from Motherboard: Soon it may be easier to get your hands on a cable that looks just like a legitimate Apple lightning cable, but which actually lets you remotely take over a computer. The security researcher behind the recently developed tool announced over the weekend that the cable has been successfully made in a factory. MG is the creator of the O.MG Cable. It charges phones and transfers data in the same way an Apple cable does, but it also contains a wireless hotspot that a hacker can connect to. Once they've done that, a hacker can run commands on the computer, potentially rummaging through a victim's files, for instance.

After demoing the cable for Motherboard at the Def Con hacking conference this summer, MG said "It's like being able to sit at the keyboard and mouse of the victim but without actually being there." At the time, MG was selling the handmade cables at the conference for $200 each. Now that production process has been streamlined. This doesn't necessarily mean that factories are churning out O.MG Cables right now, but it shows that their manufacture can be fully outsourced, and MG doesn't have to make the cables by hand.

Iphone

Apple's New iPhones Will Warn You If They Can't Verify a Replaced Screen (theverge.com) 36

According to a newly published support document, Apple says the new iPhone 11, 11 Pro, and 11 Pro Max will present customers with a warning if the devices are unable to verify a genuine display after a screen repair job. "If you need to replace your iPhone display, it's important for certified technicians who use genuine Apple display parts to repair it," the page reads. "Replacements not performed by Apple, authorized service providers, or certified technicians might not follow proper safety and repair procedures and could result in improper function or issues with display quality or safety." The Verge reports: Apple goes over a laundry list of problems that could arise if your display is swapped the wrong way or with a non-genuine part, such as multi-touch problems, issues with screen color accuracy and brightness, or True Tone failing to work properly. "Additionally, repairs that don't properly replace screws or cowlings might leave behind loose parts that could damage the battery, cause overheating, or result in injury." The company isn't afraid of nagging customers about this, either. Apple says that a notification will appear on the affected iPhone's lock screen for 4 days after a problem is first detected, then it'll move to the main settings menu for 15 more days. After all that, it gets pushed away to Settings -> General -> About. According to Apple, this new measure only applies to its brand new iPhones and not previous models. Even if it can't be verified as genuine, the display isn't prevented from functioning normally by iOS.
Wireless Networking

Both Apple and Amazon Are Quietly Building Networks That Know the Location of Everything (wired.co.uk) 32

Wired reports on both Sidewalk, Amazon's new low-bandwidth long-range wireless networking protocol, and Apple's new position- and distance-measuring U1 chip (mentioned in a recent keynote). Apple's U1 chip -- which allows precise, indoor positional tracking via the latest iPhones and will power, at the very least, directional AirDrop file-sharing -- popped up on screen but was never even mentioned. The interest-piquing phrase "GPS at the scale of your living room" was saved for the online iPhone product pages rather than the bombast of the Steve Jobs Theater... Both Amazon and Apple have the hardware scale to build up the base of access points needed to create a useful network before reaching out to, most likely, iOS developers in Apple's case, and hardware makers already on board with Alexa in Amazon's case. For Amazon, in fact, that work has already begun as Sidewalk originally came out of the Ring team's ambition to extend its connected security devices out into gardens. "Ring lighting was the first time we ran into it as a company, because we wanted to extend out onto the sidewalk," says Daniel Rausch, VP of smart home at Amazon (which owns Ring).

The smart outoor Ring lights are already out. Products like the Smart Floodlight and Pathlight list a "wireless connection to the Ring Bridge" in the tech specs but eagle-eyed Ring owners had already started to figure out what band Amazon was playing with for this connection, before the Sidewalk announcement. "They've been using an internal version of the protocol on the freely available and unlicensed 900MHz part of the spectrum already," explains Rausch. "What we realised was 'woah, we can actually do something special'. We can make a version of this protocol which is secure and have this unbelievably ubiquitous coverage if we bring it all together, neighbours and neighbours and neighbours...." An innocent smart dog tracker like Ring Fetch fits perfectly into this model of Amazon-networked communities sharing video, alerts and location tracking.

Iphone

New iPhone Feature Can Send Unknown Callers To Voicemail Automatically (economist.com) 104

An anonymous reader quotes the Economist: In its latest software release, Apple has made it possible for iPhone users to send all unknown callers to voicemail automatically.

Although the feature will no doubt prove useful to the millions of customers whose peaceful suppers are ruined by fake calls, it could be disastrous for the faltering public-polling industry. The challenges telephone pollsters face have been growing. Polling by phone has become very expensive, as the number of Americans willing to respond to unexpected or unknown callers has dropped.

Back in the mid-to-late-20th century response rates were as high as 70%, according to SSRS, a market research and polling firm. But the Pew Research Centre estimates that it received completed interviews from a mere 6% of the people it tried to survey in 2018. Although polls with low response rates can still be accurate, their costs increase dramatically as pollsters must spend more time and money calling more people.

Movies

Apple TV Plus Movies Might Hit Theaters Before Streaming Service (cnet.com) 6

Apple is reportedly talking to movie theater chains to try and get its Apple TV Plus movies shown in theaters a few weeks before they hit the streaming service. CNET reports: Apple's apparently hoping to attract established directors and producers to the $5-a-month service, and avoid creating industry tension like Netflix -- Martin Scorcese's The Irishman won't be playing in several theater chains because Netflix wouldn't agree to the usual three-month delay between the movie's theatrical debut and its arrival on streaming. The strategy Apple reportedly is taking mirrors that of Amazon, which gave the Oscar-winning Manchester by the Sea a three-month theatrical run in 2016, the Wall Street Journal noted.

Sofia Coppola's On the Rocks, which stars Rashida Jones and Bill Murray, is one of Apple's first major theatrical releases. It could premiere at the Cannes Film Festival prior to its mid-2020 release, according to the Journal. The Cupertino, California, company also reportedly talked about giving The Elephant Queen, a Chiwetel Ejiofor-narrated documentary about an elephant mother leading her herd across Africa, a theatrical release so it's eligible for awards consideration. It's due to be available on Apple TV Plus at launch on Nov. 1.

Iphone

Apple Considers Using Iconic Logo As a Notification Light, Patent App Suggests (theverge.com) 42

Apple has applied for a patent to use the logo on the back of its phones as a notification light. The patent application, which was first spotted by Apple Insider, outlines how the "adjustable decoration" could respond to events such as "incoming communication" or "a calendar reminder" by changing its appearance or flashing to attract your attention. The Verge reports: The feature makes sense for Apple's products. After all, the company has a history of illuminating its logo on its older MacBooks, even if it dropped the design feature with the laptop's 2015 redesign. It wouldn't be a massive leap for it to bring back its illuminated logo with a little practical functionality added. The application makes frequent references to "cellular telephone" calls as part of its description, which heavily suggests that Apple is considering using the feature on a future iPhone. However, the patent also includes images showing a series of "illustrative electronic devices" including a laptop, a tablet, and what appears to be an iMac.
IOS

New Checkm8 Jailbreak Released For All iOS Devices Running A5 To A11 Chips (zdnet.com) 30

An anonymous reader shares a report: A security researcher has today released a new jailbreak that impacts all iOS devices running on A5 to A11 chipsets -- chips included in all Apple products released between 2011 and 2017. This includes iPhone models from 4S to 8 and X. The jailbreak uses a new exploit named Checkm8 that exploits vulnerabilities in Apple's Bootrom (secure boot ROM) to grant phone owners full control over their device. Axi0mX, the security researcher who published Checkm8 today, told ZDNet he'd worked on the jailbreak all year.
IOS

Alternative iOS App Store Doesn't Require a Jailbreak (engadget.com) 55

Developer Riley Testut is launching an alternative to Apple's App Store, called AltStore, that theoretically lets you "push the boundaries" of iOS without either jailbreaking or worrying that Apple will pull access. Engadget reports: AltStore works by fooling your device into believing that you're a developer sideloading test apps. It uses an app on your Mac or Windows PC to re-sign apps every seven days, using iTunes' WiFi syncing framework to reinstall them on your device before they expire. You only need a free Apple ID (a throwaway will do) to install apps that Apple would never allow, such as Testut's Delta emulator for Nintendo consoles.

In theory, there's not much Apple can do to easily shut things down. It could take down individual accounts, but you could just create another Apple ID if needed. Also, iOS only looks for an excessive number of app provisioning profiles, not the number of apps you have installed. So long as AltStore manages those profiles, Apple doesn't know if you're running one app or twenty. Testut told The Verge that measures to block AltStore would break key functionality for developers or iTunes syncing.
AltStore is available in preview form now, with a formal launch due on September 28th. "People who back Testut's Patreon will also have the option to install almost any app, not just those in the store," the report adds.
IOS

Why So Many Apps Are Asking To Use Bluetooth on iOS 13 (theverge.com) 51

Apple's new iOS 13 update adds a new privacy measure that requires apps to get your consent in order to use your device's Bluetooth. From a report: After installing the latest version of iOS, trust me when I say you'll be surprised by the number of apps asking for Bluetooth permission the next time you open them. Some might seem very strange (like Dunkin' Donuts in my case), but others probably won't make you think twice about giving the thumbs-up. The reason Apple implemented this is because Bluetooth has enabled companies to sneakily track your location over Bluetooth by using beacons in stores, shopping malls, and even on popular city streets if they're placed within range of a place you'd walk by.

This is entirely separate from your iPhone's location privacy settings, which makes it seem all the more underhanded. A beacon is very easily able to detect your device's Bluetooth chip and log that with a retailer or some other app on your phone. So getting more strict about Bluetooth is a good move by Apple to prevent unwanted tracking of its customers. Similarly, the company is also getting even more transparent about location, showing you on a map how often and where apps have recorded your position. This prompt is much easier to understand, and will probably startle people into slimming down the list of apps that can monitor where they are. As it should!

Portables (Apple)

Apple is Evaluating New Keyboard Mechanisms To Make Thinner MacBooks (appleinsider.com) 156

Future MacBooks could be made even thinner by using a slimmer keyboard, by switching out the butterfly mechanism for one where the keys are positioned much closer to the circuit board, reducing the amount of travel and materials required to register a key press and to actuate. From a report: The butterfly keyboard mechanism used in the current generation of MacBook Pro models has gone through a number of revisions to fix issues with how it functions, including occasions where debris could interfere with the mechanism's operation. The issues have led to the creation of a repair program to fix the problem, but complaints about the component continue to be made. The keyboard is also a space-occupying component of a notebook's design, with the switch mechanism providing an actuation, namely the physical movement of the key to register a press and to reset. In order to allow this to happen, a mechanism has to sit between the key and the circuit board, taking up valuable space that could be used to make the notebook design even thinner, or to provide more battery capacity. In a patent published by the US Patent and Trademark Office on Tuesday titled "Keyboard assemblies having reduced thickness and method of forming keyboard assemblies," Apple seeks to do just that.
IOS

Apple Says a Bug May Grant 'Full Access' To Third-Party Keyboards By Mistake (techcrunch.com) 52

Apple is warning users of a bug in iOS 13 and iPadOS involving third-party keyboards. From a report: In a brief advisory posted Tuesday, the tech giant said the bug impacts third-party keyboards which have the ability to request "full access" permissions. iOS 13 was released last week. Both iOS 13.1 and iPadOS 13.1, the new software version for iPads, are out today. Third-party keyboards can either run as standalone, or with "full access" they can talk to other apps or get internet access for additional features, like spell check. But "full access" also allows the keyboard maker to capture to its servers keystroke data or anything you type -- like emails, messages or passwords. This bug, however, may allow third-party keyboards to gain full access permissions -- even if it was not approved.
Desktops (Apple)

Mysterious Avid Issue Knocks Out Mac Pro Workstations Across Hollywood (variety.com) 98

A possible computer virus attack has knocked out Mac Pro workstations for many film and TV editors across Los Angeles. According to Variety, the issue -- which is causing the workstations to refuse to reboot -- is widespread among users of Mac Pro computers running older versions of Apple's operating system as well as Avid's Media Composer software. From the report: Avid said in a statement that it was aware of the issue: "Avid is aware of the reboot issue affecting Apple Mac Pro devices running some Avid products, which arose late yesterday. This issue is top priority for our engineering and support teams, who have been working diligently to determine and resolve the root cause. As we learn more, we will immediately publish information -- directly to our customers and via our community forums and social media platforms -- in order to resolve this issue for all affected customers and prevent any further issues."

"A lot of L.A. post shops and people out on shows having their Macs slowly crash," reported video post-production consultant Matt Penn on Twitter. Freelance film editor Marcus Pun reposted a message from a popular Avid Facebook user group, advising users not to turn off their workstations. Other users reported that multiple computers at their company were affected by the issue, with social media chatter indicating that a number of different companies, and even major shows like "Modern Family," were affected by the issue.
UPDATE: The issue appears to be caused by a Google Chrome update gone haywire.
Safari

Apple Neutered Ad Blockers In Safari, But Unlike Chrome, Users Didn't Say a Thing (zdnet.com) 94

sharkbiter shares a report from ZDNet: Over the course of the last year and a half, Apple has effectively neutered ad blockers in Safari, something that Google has been heavily criticized all this year. But unlike Google, Apple never received any flak, and came out of the whole process with a reputation of caring about users' privacy, rather than attempting to "neuter ad blockers." The reasons may be Apple's smaller userbase, the fact that changes rolled out across years instead of months, and the fact that Apple doesn't rely on ads for its profits, meaning there was no ulterior motive behind its ecosystem changes.

The reason may have to do with the fact that Apple is known to have a heavy hand in enforcing rules on its App Store, and that developers who generally speak out are usually kicked out. It's either obey or get out. Unlike in Google's case, where Chrome is based on an open-source browser named Chromium and where everyone gets a voice, everything at Apple is a walled garden, with strict rules. Apple was never criticized for effectively "neutering" or "killing ad blockers" in the same way Google has been all this year. In Google's case, the pressure started with extension developers, but it then extended to the public. There was no public pressure on Apple mainly because there aren't really that many Safari users to begin with. With a market share of 3.5%, Safari users aren't even in the same galaxy as Chrome and its 65% market lead.

Furthermore, there is also the problem of public perception. When Apple rolled out a new content blocking feature to replace the old Safari extensions and said it was for everyone's privacy -- as extensions won't be able to access browsing history -- everyone believed it. On the other hand, ads are Google's life blood, and when Google announced updates that limited ad blockers, everyone saw it a secret plan for a big corp to keep its profits intact, rather than an actual security measure, as Google said it was.

Businesses

Apple Will Manufacture Its New Mac Pro In Texas (engadget.com) 89

Apple has confirmed Monday that it will manufacture the redesigned Mac Pro in Texas. The company said it will assemble the workstation at the same Austin, Texas plant that has produced the cylindrical Mac Pro since 2013. The reason for the move: exemptions from Trump's China tariffs for "certain necessary components" in the system. Engadget reports: Apple had received 10 out of its 15 requested exemptions for components like partial circuit boards. While Apple has a network of U.S. suppliers for its products, many of the parts for computers (and those of rivals) are still made in China -- the company wouldn't have seen much benefit from U.S. assembly if it had to pay a premium for some of the Mac Pro's key ingredients.

CEO Tim Cook (who hinted at this possibility in July) touted this as part of Apple's existing commitment to American jobs, including its recent investment into Corning. However, it's not necessarily the coup it sounds like at first blush. Apple can produce the Mac Pro stateside due to both its low volume (few people will buy a $6,000 tower for home use) and the high levels of automation at the Austin plant. This won't lead to an abundance of new jobs, and it may still be more practical to make high-volume products like iPhones and MacBooks in China even if future tariffs cut into Apple's profit margins.

Google

Challenging Facebook and Google, Apple's New OS Warns Users When Data Is Collected (forbes.com) 97

An anonymous reader quotes Forbes: Apple's updated operating system will now show you how often your location has been recorded and by which apps. It will do this proactively via a pop up, which shows a map of where you have been tracked, including the option to allow or limit it. Previously, many apps were able to track you in the background without your knowledge. They were able to collect vast amounts of data on you, which they could use to target you with advertising.

Along the same theme, another blow to apps such as Facebook and WhatsApp is a change in Apple's iOS 13 that will not allow messaging and calling apps to run in the background when the programs are not actively in use. Before, apps such as these were able to collect information on what you were doing on your device.

People are certainly becoming more aware of the way their data is used, following incidents such as the Cambridge Analytica scandal. In this context, many of the changes could be seen as a direct blow to Apple's rivals Google and Facebook: iOS 13 highlights their data collection practices and gives iPhone users the opportunity to stop them. In this way, it's an attack on Facebook and Google's business models. It's true: There are many apps that track you and collect data on you, and iOS 13 will affect all of these. But it is also worth considering the position that Apple holds in the market. When Apple speaks, people listen.

Forbes concludes that these features in iOS 13 "could encourage even the most apathetic Apple users to care more about their privacy."
Microsoft

How the Microsoft Store Urges Customers To Trade In Their iPhones (zdnet.com) 64

"Have you ever wondered how -- or even why -- Microsoft is offering $650 to switch from iPhone to Samsung's latest phones?" asks tech columnist Chris Matyszczyk.

"A Microsoft store salesman enlightened me. It was spiritual, as much as factual." "This is a Microsoft store," I said. "Why are you pushing these?"

"Because three weeks ago, you couldn't do what you can do now," he said.

This was quite some drama. I hadn't heard that my life had changed just 21 days prior, but Oscar was ready to explain. "Now you can have a terabyte, which means this phone improves your mobility and can now replace your laptop. You can now run your business straight from this phone," he said... With a fervent -- and, I have to say, elegant -- enthusiasm, he talked me through my new possibilities. The ability to have everything from Outlook to Word to Excel to One Drive existing simultaneously on every gadget was, apparently, my new Nirvana. He took me over to a desktop and showed me how to dock my new Samsung phone and work simultaneously on the phone and the desktop.

He then led me to the Surface Pro 6. "This is the one I've got. And, look, you don't need a keyboard," he said, as he brought up the on-screen keyboard that really isn't very easy to type on. Oscar's congenital positivity was so alluring that I had to insert a pause and ask him what phone he had. He pulled out the same iPhone XR as mine, but sadly in a case. "I've been with Apple for a long time," he explained. "But I just need to pay my iPhone down a bit more and I'm going to switch to this Note..."

"Switching from iPhone to Samsung isn't easy, is it?" I muttered.

"It's all in your mind," he replied. "You need to have a growth mindset. That's what leaving your iPhone behind represents. Growth." I had to laugh. Not out of insult, but out of sheer admiration for his TED Talk attempt to inspire. He was appealing to my spirit, not my rational mind. He was right, of course. I have a growth bodyset, not a growth mindset....

[A]s I walked out many minutes later, I remembered there was a new iPhone coming out. Three new iPhones. Would any of them represent personal growth?

Medicine

Apple Watch May Have Saved A Biker's Life (krem.com) 63

"A Spokane man is saying that an Apple Watch helped save his dad's life following a bicycle crash at Doomsday Hill," reports a local TV station: According to a Facebook post, Gabe Burdett was on his way to meet up with his father Bob last weekend at Riverside State Park, but Bob wasn't at their meet up spot. Burdett received a text from his father's Apple Watch, which read, "Emergency SOS Bob Burdett called emergency services from this approximate location after Apple Watch detected a hard fall." Not only had the watch texted Burdett, it also called 911 with his father's location, he said.

Bob had flipped his bike at the bottom of Doomsday Hill and hit his head, knocking him unconscious, Burdett said. Thanks to the watch, Bob was able to be picked up by emergency services and transported to the hospital within 30 minutes of the fall occurring.

Gabe's Facebook post includes a picture of the now-damaged Apple Watch on his father's wrist in the hospital. The Apple Watch even texted a map showing the son his father's new location at the hospital.

And now "Dad is doing great, clear X-Rays and CT scan, but a little sore for sure!"
IOS

iOS 13 Ships With Known Lockscreen Bypass Flaw That Exposes Contacts (arstechnica.com) 19

An anonymous reader quotes a report from Ars Technica: Apple released iOS 13 with a bunch of new features. But it also released the new OS with something else: a bug disclosed seven days ago that exposes contact details without requiring a passcode or biometric identification first. Independent researcher Jose Rodriguez published a video demonstration of the flaw exactly one week ago. It can be exploited by receiving a FaceTime call and then using the voiceover feature from Siri to access the contact list. From there, an unauthorized person could get names, phone numbers, email addresses, and any other information stored in the phone's contacts list. An Apple representative told Ars the bypass will be fixed in iOS 13.1, scheduled for release on Sept. 24.
Businesses

Apple Is Trying To Trademark 'Slofie' (theverge.com) 43

On Friday, Apple applied for a U.S. Trademark on "Slofie," a made-up name for slow-motion selfies, a feature that's new to the iPhone 11 models. "The phones' front camera can now record video at 120 frames per second, which when slowed down, results in a crisp slow-motion effect," writes Jacob Kastrenakes for The Verge. "The results are neat, though I'm not convinced they'll turn into the Animoji-like phenomenon Apple may be hoping for." From the report: Apple is applying for a trademark on slofies in connection with "downloadable computer software for use in capturing and recording video." That means this trademark seems to be more about preventing other companies from making slofie-branded camera apps than it is about limiting popular usage of this totally made-up word. Apple has reason to want to prevent the creation of knock-off slofie apps, too, since slofies are meant to be exclusive to the new iPhones.

Despite the focus on apps, Apple doesn't actually offer a slofie app or a slofie mode on the new iPhones. The feature is just called "slo-mo" in Apple's camera app, and the company's current usage of slofie refers exclusively to the resulting videos, not the app or mode used to capture them. Apple seems to be hoping slofies will be a fun selling point for its new phones. The feature is mentioned across Apple's website, and Apple presented a slofie ad during the phones' launch event. It wouldn't be surprising to see a lot more airing in the coming weeks once the phones are out.

The Almighty Buck

Have Flagship Smartphone Prices Peaked? (ccsinsight.com) 85

Analyst Ben Wood, writing for research firm CCS Insight: Smartphone makers have been testing the economic rule of supply and demand for the past decade, seemingly defying conventional wisdom in consumer electronics products by raising prices. Greater utility and the constant of use smartphones combined to grow the value of devices to customers. But it seems that top phone-makers are learning that no tree grows to heaven, as prices beyond the psychological threshold of $1,000 have created sticker shock among some consumers. Apple's announcement of the iPhone 11 at its annual product event last week largely centered on incremental improvements such as better camera and battery life, but the company's decision to lower the price of its base flagship smartphone caught our eye. The iPhone 11 will cost $699 in the US. A year ago, Apple introduced the iPhone XR at $749. It's a subtle, but interesting move that sees Apple shifting its "mid-range" iPhone back to a price of $699, where it previously resided with the iPhone 8. Apple's decision to lower pricing can be seen as an acknowledgement that it has tested the upper limits of consumer acceptance. At a time when the company wants to expand its number of customers as it builds out its ecosystem of content and services, it's sensible that it slightly brought down the barriers for consumers to get their hands on the new device.

Slashdot Top Deals