×
IOS

iOS Zero-Day Let SolarWinds Hackers Compromise Fully Updated iPhones (arstechnica.com) 22

The Russian state hackers who orchestrated the SolarWinds supply chain attack last year exploited an iOS zero-day as part of a separate malicious email campaign aimed at stealing Web authentication credentials from Western European governments, according to Google and Microsoft. Ars Technica reports: In a post Google published on Wednesday, researchers Maddie Stone and Clement Lecigne said a "likely Russian government-backed actor" exploited the then-unknown vulnerability by sending messages to government officials over LinkedIn. Attacks targeting CVE-2021-1879, as the zero-day is tracked, redirected users to domains that installed malicious payloads on fully updated iPhones. The attacks coincided with a campaign by the same hackers who delivered malware to Windows users, the researchers said.

The campaign closely tracks to one Microsoft disclosed in May. In that instance, Microsoft said that Nobelium -- the name the company uses to identify the hackers behind the SolarWinds supply chain attack -- first managed to compromise an account belonging to USAID, a US government agency that administers civilian foreign aid and development assistance. With control of the agency's account for online marketing company Constant Contact, the hackers could send emails that appeared to use addresses known to belong to the US agency. In an email, Shane Huntley, the head of Google's Threat Analysis Group, confirmed the connection between the attacks involving USAID and the iOS zero-day, which resided in the WebKit browser engine.

IOS

Apple's Weather App Won't Say It's 69 Degrees (theverge.com) 177

An anonymous reader shares a report: If you're an iPhone user, the weather is always a particularly nice 70 degrees. Or 68 degrees. Any temperature but 69 degrees, actually, because it turns out that the built-in weather app on some versions of iOS -- including the current version, iOS 14.6 -- will refuse to display the internet's favorite number, even if the actual temperature in a given location is, in fact, 69 degrees. It's not clear if this is a bug or an intentional attempt from Apple to cut down on 69-related humor. The rounding is only visible in the weather app itself: clicking through to Apple's source data from Weather.com will show the proper temperature, as does Apple's home screen widgets.
Advertising

After Apple's 'App Tracking Transparency', Advertisers Spent More Money Targeting Android Users (macrumors.com) 21

Earlier this year in April Apple started mandating "App Tracking Transparency," which gives users a choice about whether they can be tracked across app.

Now tlhIngan (Slashdot reader #30,335) writes: The numbers are in and a number of ad companies are reporting lowered iOS spending, but 10% or more increases in Android ad spending. The complaint is, of course, that without the granular data they used to get from tracking it's no longer worth spending on iOS ads.

Interestingly, only about 66% of users have actually denied tracking.

That's based on early data from the ad-measurement firm Branch Metrics (as reported by The Wall Street Journal ). MacRumors write: As a result, the amount of advertiser spending on Apple's mobile platform has fallen by about one-third between June 1 and July 1, while spending on Android rose over 10% for the same month, according to ad-measurement firm Tenjin Inc...

Without proper user tracking, advertisers have significantly less data about a user's interests, preferences, and more. Advertisers and companies, such as Facebook, use that data to compile a profile of a user. The type of data collected from tracking helps advertisers to ensure that their ads are being targeted to potential customers. [According to ad-measurement firm Tenjin Inc], "The shortage of user data to fuel Facebook Inc.'s suite of powerful ad-targeting tools reduces their effectiveness and appeal among some advertisers, ad agencies say."

Australia

Fortnite Maker Wins Appeal in Australia (cnet.com) 40

Epic's legal spat with Apple over App Store practices will spill over to Australia. From a report: After a series of hearings and trials that stretched nearly nine months, Apple and Epic made their final pitches to a US District Court in California on May 24. Both companies now await Judge Yvonne Gonzalez Rogers' decision, but that doesn't mean the litigation is over. After a successful appeal Thursday by Epic, the case will soon be brought to an Australian court. At the center of the legal action is Apple's App Store. Epic's ultrapopular Fortnite was kicked off the iOS App Store in August after Epic built a direct payment system into the game that would allow it to bypass Apple's 30% fee for App Store purchases. Epic sued Apple immediately, accusing the company of anticompetitive practice. Epic argues that the App Store is monopolistic, that developers hoping to get their apps to customers have no choice but to go through the App Store -- and pay the fees associated with that. Apple calls Epic's lawsuit a marketing stunt and argues that the App Store gives developers access to a huge audience of iPhone and iPad users.

In November, Epic brought the issue to Australia, initiating proceedings against Apple by arguing that the iPhone-maker's practices contravene Australia's Competition and Consumer Act. Apple was able to appeal against the suit in April, arguing that the case should be settled in the US District Court. Epic quickly counter-appealed, arguing that public policy concerns justify a separate trial. Australia's Federal Court ruled in favor of Epic on Thursday. "This is a positive step forward for Australian consumers and developers who are entitled to fair access and competitive pricing across mobile app stores," an Epic spokesperson said. "We look forward to continuing our fight for increased competition in app distribution and payment processing in Australia and around the world."

Advertising

Advertisers Concerned iCloud Private Relay Could Put An End To Fingerprinting (9to5mac.com) 84

One of the new features announced at WWDC 2021 is iCloud Private Relay, a new security feature that lets users hide their real IP address from third-party servers so that they cannot track them across the web. It's called fingerprinting and it is quickly becoming a popular method for advertisers because it allows them to pull together information about your device to pinpoint your identity. As 9to5Mac reports, Apple's new fingerprint-blocking feature has the ad tech industry worried. From the report: As pointed out by a Digiday report, Private Relay comes to join forces with App Tracking Transparency, a feature introduced with iOS 14.5 to prevent apps from tracking users without asking permission. With ATT, Apple relies on developers to update their apps and ask users whether or not they want to be tracked. Private Relay is expected to considerably reduce user tracking at a deeper system level: "And herein lies the rub for ad execs. Apple has told them fingerprinting is off-limits but doesn't seem to be aggressively enforcing this policy. Few execs, however, believe this perceived inaction will last. Eventually, goes the thinking, Apple won't need to enforce a policy like ATT to rid its mobile operating system of fingerprinting -- it will have the technology to block it from ever happening in the first place. The reason: Private Relay."

However, this will probably result in even more companies upset with Apple. Nii Ahene, head of strategy at Tinuiti, warns that Apple needs to be careful to avoid Private Relay being considered "anti-competitive or too dictatorial," as the company has been facing accusations of monopolistic practices. Digiday reports: "'Apple needs to be careful when it uses its market position in a way that could be interpreted as either anti-competitive or too dictatorial,' said Nii Ahene, chief strategy officer at digital agency Tinuiti. 'This is why there's a gradual rollout of Apple's privacy plan. The company communicates what it will do early, starts to have conversations behind the scenes, and then over some time the enforcement of the ATT policy starts to kick in.'" When Apple introduced ATT, companies like Facebook publicly criticized the feature since it directly affects the advertising business, which is responsible for the main income of these companies. Now, it's only a matter of time before more companies speak out against iCloud Private Relay.

Google

Google Feared Samsung Galaxy Store and Tried To Quash It, Lawsuit Alleges (theverge.com) 34

Google used anticompetitive practices in an attempt to "preemptively quash" Samsung's Galaxy Store, and prevent it from becoming a viable competitor to its own Play Store. From a report: That's according to an antitrust lawsuit filed by a coalition of three dozen state attorney general, which accuses Google of illegally attempting to control app distribution on Android. The suit also alleges Google paid off app developers to stop them circumventing its store. The allegations challenge one of Google's core defenses of its policies, which is that unlike Apple's iOS rules, Android allows both competing app stores and side-loading apps directly. The lawsuit is effectively claiming that this openness is a facade, because while customers technically have the choice of where to get their apps from, Google's business practices have prevented a viable app store competitor from emerging.

"Google felt deeply threatened when Samsung began to revamp its own app store, the Samsung Galaxy Store," the suit says, and describes Google's approach to the competing store as "a threat it needed to preemptively quash." The suit outlines a range of tactics Google allegedly used to prevent Samsung's store from becoming a viable competitor. It claims Google used revenue share agreements with Android phone manufacturers that "outright prohibited" pre-installing some other app stores, and that it made "a direct attempt to pay Samsung to abandon relationships with top developers and scale back competition through the Samsung Galaxy Store."

Android

Apple and Google Crowd Out the Competition With Default Apps (theverge.com) 79

If you use an iPhone or Android phone, chances are the majority of your most-used apps were made by Apple and Google. From a report: That's the takeaway from a new Comscore study that ranks the popularity of preinstalled iOS and Android apps, such as Apple's Messages, alongside apps made by other developers. The results show that the majority of apps people use on their phones in the US come preinstalled by either Apple or Google. The first-of-its-kind report was commissioned by Facebook, one of Apple's loudest critics, and shared exclusively with The Verge. Preinstalled services dominate when it comes to basics like weather, photos, and clocks, according to the report, suggesting these categories will be difficult for other apps to compete in. Defaults don't win out exclusively, though: Apple Maps and Music don't appear on the iOS list at all, and Gmail makes the iOS list several entries below Apple Mail.

The timing, as Facebook likely intentioned, is apt: Apple and Google are increasingly under scrutiny for how they favor their own services over competitors like Spotify. US lawmakers are currently reviewing a new set of bills designed to curb the power of Big Tech, including legislation that could potentially bar Apple and Google from giving their services the upper hand against rivals. The pushback stems from how Apple and Google bundle their apps and services with their mobile operating systems in ways that some of their competitors think is unfair. The criticism is harsher against Apple, given that it more tightly controls the apps that come preinstalled on the iPhone and doesn't allow developers to circumvent its App Store.

EU

Apple Shouldn't Use Privacy and Security To Stave Off Competition, Warns EU Antitrust Head (appleinsider.com) 57

An anonymous reader quotes a report from Apple Insider: Responding to comments made by Apple CEO Tim Cook in June, European Union competition chief Margrethe Vestager said that Apple shouldn't use privacy and security concerns to stifle competition on the App Store. Vestager, the European Commission's executive vice president, has proposed regulations that could force Apple to allow alternate app stores. Apple CEO Tim Cook spoke out against the proposal, stating that they could threaten the privacy and security of iOS.

In an interview with Reuters, Vestager agreed with Cook that privacy and security are important factors for consumers, but warned the Cupertino tech giant against using concerns about them to fend off competition. "I think privacy and security is of paramount importance to everyone," Vestager said. "The important thing here is, of course, that it's not a shield against competition, because I think customers will not give up neither security nor privacy if they use another app store or if they sideload." Vestager added that she was open to changes in her proposals, which need input from EU member states and lawmakers before it can become law. "I think that it is possible to find solutions to this," Vestager said.

The EU competition chief told Reuters that recent privacy changes to iOS, including App Tracking Transparency, aren't currently an antitrust target. In fact, she praised Apple's new privacy controls. "As I have said, I think actually several times, that it is a good thing when providers give us the service that we can easily set our preferences if we want to be tracked outside the use of an app or not as long as it's the same condition for everyone," Vestager added. "So far, we have no reason to believe that this is not the case for Apple."

XBox (Games)

Xbox Cloud Gaming On iOS Arrives On Game Pass Ultimate For All (cnet.com) 12

Browser-based Xbox Cloud Gaming leaves the limited beta it's been in since the end of April and formally rolls out an open beta for iPhone, iPad and Windows 10 (or Windows 11!) PCs. CNET reports: In conjunction, the Backbone One mobile gaming controller for the iPhone [...] joins the Designed for Xbox program, with specific features designed to make you feel more like you're playing on an Xbox or standalone device. Xbox Cloud Gaming, nee Project xCloud, lets you play a subset of Xbox Game Pass games on a device other than a console by streaming them from the cloud, a la Google Stadia and Nvidia GeForce Now. It, like others, follows Amazon Luna's lead of using a web app to circumvent Apple's App Store policies which effectively shut out cloud gaming apps. For Windows PCs, it lets you play games your system might not otherwise have the power or space to run locally via Game Pass for PC.
Bitcoin

El Salvador is Giving Away Free Bitcoin To Its Citizens (fortune.com) 68

Millions of Americans received stimulus checks in the past year, but Salvadoreans will be soon be receiving one paid in Bitcoin. From a report: The Central American country will give U.S. $30 worth of Bitcoin to each adult citizen that downloads and registers on the country's new cryptocurrency app, Chivo, President Nayib Bukele said during a televised speech Thursday. The $30 promotion is the nation's latest effort to push adoption of Bitcoin as legal currency. Bukele announced via video at the Bitcoin 2021 conference in Miami earlier this month that he would be introducing legislation to make Bitcoin legal tender. His "Bitcoin Law" goes into effect on Sept. 7.

"This law is made to generate employment, to generate investments, and at no moment will it affect anybody, like opponents have tried to say with their dirty campaign," Bukele said during the hour-long speech Thursday. Chivo, the crypto wallet whose name translates to "goat" in English, will be compatible with both dollars and Bitcoin, and will be available on both iOS and Android devices, Bukele said. Since former Salvadorean President Francisco Flores passed a 2001 dollarization law, the U.S. dollar has been the most used legal tender in the country.

Windows

Satya Nadella's Closing Windows 11 Remarks Were a Direct Shot Across Apple's Bow (theverge.com) 71

At the end of a surprisingly eventful, exciting presentation of Windows 11, Microsoft CEO Satya Nadella came on the video feed to deliver some closing remarks. He laid out his vision for Windows 11 as a "platform for platform creators," and in doing so, he issued a subtle but nonetheless stinging critique of Apple. From a report: Nadella's speech was almost entirely about building a case that Windows would be a better platform for creators than either macOS or (especially) iOS. He argued that "there is no personal computing without personal agency," insisting that users should be more in control of their computers. Nadella called out the changes Microsoft is making to its app store rules, allowing more types of apps, Android apps, and -- most importantly -- allowing apps to use their own payment systems if they so choose. He said, "A platform can only serve society if its rules allow for this foundational innovation and category creation." That rhetoric sounds vaguely nice and inspiring out of context, but in the specific context of the current debates, lawsuits, and legislation over app store rules, it's a sharp and direct critique.
IOS

Apple Says Third-Party App Stores Would Open iPhones To Scammers (bloomberg.com) 154

Apple is raising fears about letting users install applications outside the company's App Store, an issue being targeted by lawmakers and regulators that also played a prominent role in its recent trial against Epic Games. From a report: The company said Wednesday on its website that requiring apps to be downloaded from the App Store protects consumers against scams, keeps their privacy secure and provides developers payment for their work. All those benefits could disappear if apps can be downloaded from third-party app stores with lesser protections or users get an app from a website or PC and "sideload" it onto the phone. The timing of Apple's push back isn't coincidental.

The U.S. House Judiciary Committee Wednesday is scheduled to discuss six proposed antitrust bills, including one sponsored by Rhode Island Democrat Representative David Cicilline, a Democrat from Rhode Island and chairman of the antitrust subcommittee that, if passed into law, could call for Apple to open up to third-party app stores and provide all of its iPhone technologies to third-party software makers. "It shall be unlawful for a person operating a covered platform, in or affecting commerce, to restrict or impede the capacity of a business user to access or interoperate with the same platform, operating system, hardware and software features that are available to the covered platform operator's own products, services, or lines of business," according to an early copy of the bill.

"Allowing sideloading would degrade the security of the iOS platform and expose users to serious security risks not only on third-party app stores, but also on the App Store," the Cupertino, California-based technology giant said on its website. "Because of the large size of the iPhone user base and the sensitive data stored on their phones -- photos, location data, health and financial information -- allowing sideloading would spur a flood of new investment into attacks on the platform."

Apple

German Watchdog Probes Apple's Market Dominance (bbc.com) 16

An anonymous reader quotes a report from the BBC: Apple is under investigation by the German competition watchdog. The Federal Cartel Office (FCO) said the initial investigation will look at whether the company is of "paramount significance across markets." Apple said it looked forward to "having an open dialogue" with the FCO about any of its concerns. In a statement, Andreas Mundt, President of the FCO, said it would examine whether with iOS Apple had created "a digital ecosystem around its iPhone that extends across several markets." He added that a focus of the investigation would be the App Store, "as it enables Apple in many ways to influence the business activities of third parties."

Depending on the outcome of its investigation, the FCO said it would look in more detail at specific practices of Apple, in a possible further proceeding. The FCO said it had received various complaints alleging anti-competitive practices, which a further probe could consider. The watchdog noted that App developers had criticized "the mandatory use of Apple's own in-app purchase system and the 30% commission rate associated with this." It had also received a complaint from the advertising and media industry about restrictions on user tracking in iOS 14.5, the watchdog said. The FCO said it would establish contact, where necessary, with the European Commission, which is currently investigating how App Store policies affect music streaming.
In response, Apple said the "iOS app economy" supported more than 250,000 jobs in Germany. It added that the App Store had given "German developers of all sizes the same opportunity to share their passion and creativity with users around the world, while creating a secure and trusted place for customers to download the apps they love with the privacy protections they expect."
Facebook

Facebook Launches Its Clubhouse Clone (theverge.com) 12

Facebook's Clubhouse competitor, Live Audio Rooms, is making its way stateside. From a report: The company announced today that some US-based public figures, as well as certain groups, can start hosting rooms through the main Facebook iOS app. (People can join, however, from both iOS and Android.) Anyone can be invited up as a speaker with up to 50 people able to speak at once. There's no cap on the number of listeners allowed in -- a major shot at Clubhouse, which imposes room size limitations. It's also introducing other nifty features, like notifications when your friends or followers join a room, as well as live captions. There will be a "raise a hand" button to request to join the conversation, and reactions will be available to to interact throughout the chat. Twitter Spaces, Twitter's live audio feature, includes captions, but Clubhouse still does not.

Within groups, admins can control who's allowed to create a room: moderators, group members, or other admins. Public group chats will be accessible both in and outside the group, but private group chats will be restricted to members. Additionally, hosts can also select a nonprofit or fundraiser to support during their conversation with a button to directly donate showing up on the chat. Again, this feels like a feature directly built to address a key Clubhouse use case and make it frictionless. (Many Clubhouse creators have hosted fundraisers on the app but have to direct people to outside links in order to facilitate donations.)

Government

Apple Pre-Installed Apps Would Be Banned Under Antitrust Package (bloomberg.com) 185

Apple would be prohibited from pre-installing its own apps on Apple devices under antitrust reform legislation introduced last week, said Democratic Representative David Cicilline, who is leading a push to pass new regulations for U.S. technology companies. From a report: Cicilline told reporters Wednesday that a proposal prohibiting tech platforms from giving an advantage to their own products over those of competitors would mean Apple can't ship devices with pre-installed apps on its iOS operating platform. "It would be equally easy to download the other five apps as the Apple one so they're not using their market dominance to favor their own products and services," the Rhode Island Democrat said. The proposal is part of a package of bipartisan bills that would impose significant new constraints on how tech companies operate, restricting acquisitions and forcing them to exit some businesses. The House Judiciary Committee will mark up the five bills in a hearing next week, Representative Jerrold Nadler of New York, the committee's chairman, said.
United Kingdom

Apple-Google Mobile 'Duopoly' Faces UK Antitrust Scrutiny (bloomberg.com) 71

Google and Apple face a sweeping probe into the "duopoly" power of their mobile ecosystems, in the U.K. antitrust watchdog's latest attack on Silicon Valley. From a report: The increasingly tech-focused Competition and Markets Authority opened a 12-month market study into broad aspects of the iOS and Android systems, saying it feared the companies' dominance is stifling competition. The investigation adds to the regulator's separate investigations into both tech giants. "Our ongoing work into big tech has already uncovered some worrying trends and we know consumers and businesses could be harmed if they go unchecked," CMA Chief Executive Officer Andrea Coscelli said in a statement.

The CMA uses market studies to gather information before upgrading investigations. The mobile review comes as the U.K. watchdog seeks to move to the forefront of tech regulation after emerging from the shadow of European Union regulators at the end of the Brexit transition. The authority is preparing to set up a tech-focused unit and has warned that the largest companies will face extra scrutiny of everything from mergers to monopoly behavior.

Software

Dark Sky's iOS App and Website Will Shut Down At the End of 2022 (theverge.com) 45

Following Apple's acquisition of popular weather app Dark Sky in March 2020, Dark Sky's iOS app and website will be available until the end of 2022, co-founder Adam Grossman said in a Monday update to Dark Sky's blog. The Verge reports: The update about the 2022 shutdown hit the same day that Apple announced new weather features coming to iOS 15 as part of its WWDC keynote presentation. The stock Weather app is getting a new design, full-screen weather maps, next-hour precipitation notifications, and even new animated backgrounds. Dark Sky shut down the Android and Wear OS versions of its apps on August 1st, 2020. But the iOS app is still available for $3.99 on the App Store, if you're interested in buying it ahead of next year's shutdown. The Dark Sky API will also continue to work for existing customers until the end of 2022. Previously, the API was set to stop working at the end of this year; now, it will work for a little while longer.
Microsoft

Microsoft is Building Its Own Streaming Devices as Part of a Major Xbox Game Pass Expansion (protocol.com) 33

Microsoft on Thursday announced plans to expand its Xbox Game Pass subscription service to many more screens, including third-party smart TVs and also streaming devices the company is currently building itself. From a report: Microsoft intends to deliver its subscription platform on less powerful hardware via the cloud, as it does now with Android and iOS smartphones using a beta version of its Xbox Cloud Gaming service. "We believe that Microsoft can play a leading role in democratizing gaming and defining the future of interactive entertainment," said Microsoft CEO Satya Nadella in a prerecorded interview with Xbox chief Phil Spencer. "There are really three key areas where we believe we have an incredible competitive advantage: First, our leadership in cloud computing. Second, the resources we have to build our subscription service, Xbox Game Pass. And third, our overall focus on empowering creators." Microsoft says it's in the process of "working with global TV manufacturers to embed the Xbox experience directly into internet-connected televisions," adding that no extra hardware will be required, save a controller. The company is also "building its own streaming devices for cloud gaming to reach gamers on any TV or monitor without the need for a console at all."
Facebook

Instagram CEO Says Facebook Will Help Users Get Around Apple's Cut of Transactions (cnbc.com) 30

An anonymous reader quotes a report from CNBC: Facebook is setting its sights on the creator economy, hoping to allow millions of people to make a living off its family of apps. But the company wants to promote offline transactions between creators and companies in order to avoid Apple's 30% cut of in-app purchases, Instagram head Adam Mosseri said Wednesday. "When there are digital transactions that happen on iOS, Apple insists that they take 30% of that. There's a very few number of exceptions. For transactions that happen in iOS, we're going to have to abide by their rules... but in general we're going to look for other ways to help creators make a living and facilitating transactions that happen in other places," Mosseri told CNBC's "Squawk Box." "So, for instance, if we could help brands and creators vet each other and find each other, they could make those transactions happen offline. For affiliate marketing, it's real goods, not digital goods. So we're going to try and lean in to the places creators can actually make a stable living," he added.

Apple generally takes a 30% rake from purchases of software or digital goods from apps distributed through the App Store. That would mean creators would eventually have to split revenue from goods sold within the app between themselves, Facebook and Apple. (Facebook hasn't said how much of a cut it will take, but did say it will be less than 30%.) In order to skirt around that, Instagram could push for creators to connect offline with brands or other people, in an effort to make money off the iOS operating system. It'll be a key issue for the company, which has spent the past several years feuding with the Apple.

IOS

Apple Brings Back Magnifying Glass For Selecting Text In iOS 15 (theverge.com) 15

Apple's text selection magnifying glass has reappeared in the iOS 15 beta, and Apple's own site confirms its return by listing it as a feature. The Verge reports: Bringing the feature back is a reversal from when Apple made the decision to dump it in iOS 13, which is a bit of a rare occurrence... The new version of the text magnifier seems to be a bit smaller than the old one (in case you've forgotten what it used to look like, you can see a great demonstration here), but it's at least better than the nothing that appears in iOS 13 and 14.

It will, at the very least, solve the biggest problem with the current selection system: that your thumb is covering the text you're trying to select, which makes it a little difficult to see what's being selected until you pick your thumb up from the screen. Then, if you're like me, you'll probably sigh seeing that the wrong thing is selected, then struggle with the text selection handles to try to highlight what you were actually going for (squinting at the small screen the whole time).

Slashdot Top Deals