Cellphones

Your Next Phone Might Come Without a USB Cable (androidauthority.com) 107

Android Authority notes the start of a new trend we're seeing in some new smartphones: devices shipping without USB cables. It follows the earlier industry shift away from bundled charging bricks, which Apple started back in 2020 with the launch of the iPhone 12. While manufacturers cite environmental benefits, "the main driver behind these decisions for companies like Apple and Sony is, of course, profit," writes Android Authority's Taylor Kerns. From the report: Now, it looks like we may be in for a similar shift with bundled USB cables. As shared on the Linus Tech Tips subreddit, user Brick_Fish's recently purchased Sony Xperia 10 VII came without a charger or a charging cable. In a photo included with the post, you can see iconography on the back of the phone's box that spells out these omissions. Sony's not really a major player in the smartphone space these days, but this seems like the type of trend we should expect to see gain traction over the next couple of years. [...]

Apple actually beat Sony to the punch here, in a way. The company's latest earbuds, the AirPods 4 and AirPods Pro 3, both ditched bundled USB cables, as well. Still, Sony's the first manufacturer I've heard of to omit charging cables with its smartphones.

Windows

Apple Turned the CrowdStrike BSOD Issue Into an Anti-PC Ad (theverge.com) 103

An anonymous reader shares a report: It's been a while since Apple last mocked Windows security, but the iPhone maker has just released an ad that hits Windows hard. The eight-minute commercial pokes fun at the CrowdStrike Blue Screen of Death (BSOD) issue that took down millions of Windows machines last year.

Apple's ad follows The Underdogs, a fictional company that's about to attend a trade show, before a PC outage causes chaos and a Blue Screen of Death shuts down machines at the convention. If it wasn't clear Apple was mocking the infamous CrowdStrike incident, an IT expert appears in the middle of the ad and starts discussing kernel-level functionality, the core part of an operating system that has unrestricted access to system memory and hardware.

Businesses

Apple Hardware Head John Ternus Top Pick To Succeed Tim Cook As CEO (indiatimes.com) 28

Bloomberg reports (paywalled) that Apple's hardware chief John Ternus is the frontrunner to replace Tim Cook as CEO, as Cook nears retirement and prepares to transition into a board chairman role. The Economic Times reports: Cook is turning 65 next month. Chief operating officer John Williams -- once heir apparent -- has handed over the reins of day-to-day operations to Sabih Khan and is on his way out. Even as Cook steps down as CEO, he will stay involved in some capacity, likely as board chairman. [...]

While Khan and Apple's retail chief Deirdre O'Brien can run daily operations, Ternus remains the leading contender for the corner office after Cook, Gurman said. Firstly, he is 50 years old -- the same as Cook when he became CEO -- giving him over a decade to hold the office, he noted. Secondly, Apple needs a technologist instead of a sales person at the helm, considering the company's ambitions, Gurman wrote in the newsletter. While the Cupertino tech giant has managed to expand its homegrown line of chipsets, and the recently launched iPhone 17 lineup is drawing in customers, the company has struggled to find success in categories such as mixed reality, generative artificial intelligence (AI), smart homes and autonomous driving.

Ternus was in the spotlight during Apple's annual hardware event in September, which saw the launch of the iPhone 17 Air, the first major design overhaul for the smartphone family in a long time. Over the years, he has gained more responsibilities under Cook, taking calls on product roadmaps, features and strategies, overseeing matters beyond the traditional scope of a hardware engineering chief, Gurman said.

Apple

Steve Jobs Remembered on 14th Anniversary of His Death (macrumors.com) 103

Steve Jobs died 14 years ago. But the blog Cult of Mac remembers that "Jobs himself was not sentimental." When he left Apple in the mid-1980s, he didn't even clear out his office. That meant personal mementos like his first Apple stock certificate, which had hung on his office wall, got tossed in the trash. Shortly after returning to Apple in the late 1990s, he gave the company's historical archive to Stanford University Libraries. The stash included records that Apple management kept since the mid-1980s. The reason Apple handed over this historical treasure trove? Jobs didn't want the company to fixate on the past...

All of which goes some way to saying why it was so heartening that Steve Jobs' death received so much attention. He wasn't the richest technology CEO to die. But the reaction showed that his life — faults and all — meant a lot to a great number of people. Jobs helped create products people cared about, and in turn they cared about him.

The site Mac Rumors remembered Sunday that Jobs "died just one day after Apple unveiled the iPhone 4S and Siri." Six years later, Apple CEO Tim Cook reflected on Jobs while opening Apple's first-ever event at Steve Jobs Theater in 2017. "There is not a day that goes by that we don't think about him."

And Sunday Cook posted this remembrance of Steve Jobs. "Steve saw the future as a bright and boundless place, lit the path forward, and inspired us to follow.

"We miss you, my friend."
Privacy

Amazon's Ring Plans to Scan Everyone's Face at the Door (msn.com) 106

Amazon will be adding facial recognition to its camera-equipped Ring doorbells for the first time in December, according to the Washington Post.

"While the feature will be optional for Ring device owners, privacy advocates say it's unfair that wherever the technology is in use, anyone within sight will have their faces scanned to determine who's a friend or stranger." The Ring feature is "invasive for anyone who walks within range of your Ring doorbell," said Calli Schroeder, senior counsel at the consumer advocacy and policy group Electronic Privacy Information Center. "They are not consenting to this." Ring spokeswoman Emma Daniels said that Ring's features empower device owners to be responsible users of facial recognition and to comply with relevant laws that "may require obtaining consent prior to identifying people..."

Other companies, including Google, already offer facial recognition for connected doorbells and cameras. You might use similar technology to unlock your iPhone or tag relatives in digital photo albums. But privacy watchdogs said that Ring's use of facial recognition poses added risks, because the company's products are embedded in our neighborhoods and have a history of raising social, privacy and legal questions... It's typically legal to film in public places, including your doorway. And in most of the United States, your permission is not legally required to collect or use your faceprint. Privacy experts said that Ring's use of the technology risks crossing ethical boundaries because of its potential for widespread use in residential areas without people's knowledge or consent.

You choose to unlock your iPhone by scanning your face. A food delivery courier, a child selling candy or someone walking by on the sidewalk is not consenting to have their face captured, stored and compared against Ring's database, said Adam Schwartz, privacy litigation director for the consumer advocacy group Electronic Frontier Foundation. "It's troubling that companies are making a product that by design is taking biometric information from people who are doing the innocent act of walking onto a porch," he said.

Ring's spokesperson said facial recognition won't be available some locations, according to the article, including Texas and Illinois, which passed laws fining companies for collecting face information without permission. But the Washington Post heard another possible worst-case scenario from Calli Schroeder, senior counsel at the consumer advocacy and policy group Electronic Privacy Information Center: databases of identified faces being stolen by cyberthieves, misused by Ring employees, or shared with outsiders such as law enforcement.

Amazon says they're "reuniting lost dogs through the power of AI," in their announcement this week, thanks to "an AI-powered community feature that enables your outdoor Ring cameras to help reunite lost dogs with their families... When a neighbor reports a lost dog in the Ring app, nearby outdoor Ring cameras automatically begin scanning for potential matches."

Amazon calls it an example of their vision for "tools that make it easier for neighbors to look out for each other, and create safer, more connected communities." They're also 10x zoom, enhanced low-light performance, 2K and 4K resolutions, and "advanced AI tuning" for video...
Crime

Cops: Accused Vandal Confessed To ChatGPT 59

alternative_right shares a report from the Smoking Gun: Minutes after vandalizing 17 cars in a Missouri college parking lot, a 19-year-old sophomore had a lengthy ChatGPT conversation during which he confessed to the crime, asked about the possibility of getting caught, and wondered, "is there any way they could know it was me," according to a police probable cause statement. Ryan Schaefer was arrested yesterday and charged with felony property damage for a rampage early Sunday at a Missouri State University parking lot. Investigators allege that Schaefer shattered car windows, ripped off side mirrors, dented hoods, and broke windshield wipers during the 3 AM spree.

When confronted with surveillance footage and other evidence, Schaefer said that he could see the resemblance between the suspect and himself. At that point, Schaefer reportedly consented to a search of his iPhone. A subsequent review of the device revealed location data placing Schaefer "at or near the scene of the crime," as well as a "troubling dialogue exchange this defendant seems to have had with artificial intelligence software installed on his phone," prosecutors reported.
The incriminating ChatGPT conversation can be found here.
AI

Apple Shelves Vision Headset Revamp to Prioritize Meta-Like AI Glasses 37

Apple has paused development of a cheaper, lighter Vision Pro headset to shift resources toward AI-powered smart glasses aimed at competing with Meta. Bloomberg's Mark Gurman reports: The company had been preparing a cheaper, lighter variant of its headset -- code-named N100 -- for release in 2027. But Apple announced internally last week that it's moving staff from that project to accelerate work on glasses, according to people with knowledge of the matter. The company is working on at least two types of smart glasses. The first one, dubbed N50, will pair with an iPhone and lack its own display. Apple aims to unveil this model as soon as next year, ahead of a release in 2027, said the people, who asked not to be identified discussing internal matters.

Apple is also working on a version with a display -- something that could challenge the just-released Meta Ray-Ban Display. The Apple version had been planned for 2028, but the company is now looking to accelerate development, the people said. [...] Apple's glasses will rely heavily on voice interaction and artificial intelligence -- two areas where it hasn't always excelled. It was slow to introduce the Apple Intelligence platform and had to delay upgrades to its Siri voice assistant.

The Apple glasses are expected to come in a variety of styles and run a new chip. They'll include speakers for music playback, cameras for media recording, and voice-control features that will work with a connected phone. Apple has also been exploring a suite of health-tracking capabilities for the device. The priority shift to glasses is just the latest change to the company's headset strategy following an underwhelming debut by the Vision Pro. The $3,499 product, which melds virtual and augmented reality, is seen as too heavy and expensive to be a mainstream hit. It's also short on both video content and apps. Apple executives have acknowledged the product's shortcomings in private, viewing it as an overengineered piece of technology.
Social Networks

OpenAI's New Social Video App Will Let You Deepfake Your Friends (theverge.com) 22

Alongside its updated Sora 2 AI video generator, OpenAI has launched an iPhone-only social app called Sora that lets users consent to have friends create deepfake-style cameos of them. The invite-only app works a lot like TikTok with short remixable videos but enforces restrictions on public figures and explicit content. The Verge reports: In a briefing with reporters on Monday, employees called it the potential "ChatGPT moment for video generation." The Sora app is currently only available to US and Canada users, with other countries set to follow, and when someone receives access, they also get four additional invites to share with friends. There's no word on when an Android version might be released.

Sora users can give their friends -- or, if they're feeling bold, everyone -- permission to create "cameos" with their own likeness using the new video model, which is dubbed Sora 2. The person whose likeness is being generated is a "co-owner" of that end result, OpenAI employees said, and they can delete it or revoke access to others at any time. Like TikTok, OpenAI's Sora app allows you to interact with other videos and trends using a "Remix" feature, but it only allows for the generation of 10-second videos for now.

Iphone

FCC Mistakenly Leaks Confidential iPhone 16e Schematics (appleinsider.com) 50

The FCC mistakenly published a 163-page PDF containing detailed schematics for Apple's upcoming iPhone 16e, despite Apple explicitly requesting indefinite confidentiality to protect trade secrets. AppleInsider reports: A cover letter is also distributed alongside the schematics, addressed to the FCC and dated September 16, 2024. The letter from Apple is a request for the confidential treatment of documents that are filed with the FCC. [...] The letter from Apple requests a series of documents are withheld from public viewing "indefinitely." The justification is that they contain "confidential and proprietary trade secrets" that are not disclosed to the public post-release, due to giving competitors an "unfair advantage."

The list of documents, Apple states, includes: Block Diagrams, Electrical Schematic Diagrams, Technical Descriptions, Product Specifications, Antenna Locations, Tune-Up Procedure, and Software Security Description. Other documents, such as external and internal photographs, shots of the test setup, and the user manual, are deemed to be less damaging and have "short-term confidentiality" requirements. In those cases, Apple asks for short-term confidentiality for 180 days after the equipment authorization is granted by the FCC.

Transportation

SFMTA Scambles To Shut Down Viral Parking Ticket Tracker (sfgate.com) 34

An anonymous reader quotes a report from SFGATE: It had all the makings of a viral X post, and viral it did go, with over 8 million views in under 24 hours. The message was straightforward: "I reverse engineered the San Francisco parking ticket system. I can see every ticket seconds after it's written." Underneath it was a familiar image for any iPhone user -- an Apple map of the city dotted with gray, initialed bubbles, and an explanation: "So I made a website. Find My Friends?" No. "AVOID THE PARKING COPS." The anarchy, however, was short-lived. [...]

Given the potential lost revenue at stake, the San Francisco Municipal Transportation Agency caught on like the rest of the internet, and by Tuesday afternoon, the site had been quickly rendered obsolete. Undeterred, [creator of the site, Riley Walz] restored the site again after 10 p.m., though this, too, didn't last. By his estimation, it was only active for a few more hours. "We made sure that all access to citation data was via authorized routes," said Erica Kato, a spokesperson for SFMTA, in an email to SFGATE. "But when our staff's safety, and personal information of people who have received parking citations, is at risk, we must act on that swiftly."

Yet the saga wasn't over. By Wednesday, the official SFMTA ticket payment site was also down, citing "maintenance." "I'm curious what was going on there," said Walz over the phone. "If it is even because of me." As of Wednesday afternoon, that site is functional and the chaos seems over for now. According to SFMTA, there is no need for a site like Walz's."The official way to access our parking citation data is via our public website on DataSF," Kato said. "Anyone is still able to see [the] type of citation, date of issuance and data that can be mapped and analyzed on DataSF daily."

Privacy

Neon Goes Dark After Exposing Users' Phone Numbers, Call Recordings, Transcripts (techcrunch.com) 29

An anonymous reader quotes a report from TechCrunch: A viral app called Neon, which offers to record your phone calls and pay you for the audio so it can sell that data to AI companies, has rapidly risen to the ranks of the top-five free iPhone apps since its launch last week. The app already has thousands of users and was downloaded 75,000 times yesterday alone, according to app intelligence provider Appfigures. Neon pitches itself as a way for users to make by providing call recordings that help train, improve, and test AI models. But now Neon has gone offline, at least for now, after a security flaw allowed anyone to access the phone numbers, call recordings, and transcripts of any other user, TechCrunch can now report.

TechCrunch discovered the security flaw during a short test of the app on Thursday. We alerted the app's founder, Alex Kiam (who previously did not respond to a request for comment about the app), to the flaw soon after our discovery. Kiam told TechCrunch later Thursday that he took down the app's servers and began notifying users about pausing the app, but fell short of informing his users about the security lapse. The Neon app stopped functioning soon after we contacted Kiam.
TechCrunch found that the app's backend services didn't properly restrict access, allowing any logged-in user to request and receive data belong to other users. This included call transcripts, raw call recordings, and sensitive metadata, including phone numbers, the date/time of calls, and their durations.
Intel

Intel Approaches Apple For Potential Investment Amid Struggles (reuters.com) 79

Intel has approached Apple about a possible investment and closer collaboration, following recent multibillion-dollar deals with Nvidia, the U.S. government, and SoftBank to stabilize the struggling chipmaker. Reuters reports: The iPhone maker and Intel have also discussed how to work more closely together, the report said, adding that the talks are at an early stage and may not lead to an agreement. Shares of Intel closed 6% higher after the news. [...] Striking lucrative partnerships and persuading outside clients to use Intel's factories remain key to its future. Intel has also reached out to other companies about possible investments and partnerships, according to the Bloomberg News report. The reported investment from Apple would come as another vote of confidence for Intel - Apple had been a longtime customer of Intel before it transitioned to using its own custom-designed silicon chips in 2020.

For Apple, which relies heavily on Intel's rival TSMC to manufacture its chips, the new partnership would allow it to diversify its chipmaking supplier base - a move that would be valuable if geopolitical risks in Taiwan worsen due to China's role in the region. It would also help Apple improve its relationship with U.S. President Donald Trump, by showing that it is investing in the United States - while much of Apple's supply chain remains international, the company has committed about $600 billion to domestic initiatives over the next four years.

AI

MediaTek Launches Improved AI Processor To Compete With Qualcomm 2

An anonymous reader quotes a report from Bloomberg: MediaTek is launching a mobile processor more capable of handling agentic AI tasks on devices, positioning to better compete with Qualcomm. The new Dimensity 9500 will provide users with better summaries of calls and meetings, improved output from AI models and superior 4K photos, the Taiwanese company said in a statement. The chip is made using an advanced 3-nanometer process by Taiwan Semiconductor Manufacturing Co., according to MediaTek, and handsets carrying the new chip will become available in the fourth quarter.

Xiaomi is set to launch its latest handset range powered by Qualcomm's newest Snapdragon processor later this week, and the Chinese smartphone maker is aiming to benchmark its upcoming devices against Apple Inc.'s iPhone 17. MediaTek's processor, meanwhile, is expected to give Xiaomi's rivals including Vivo a boost in the premium segment. [...] Separately, the Taiwanese company is preparing to place chip orders for automotive and more sensitive applications with TSMC's Arizona plant as some US customers have security concerns, according to the executives.
Iphone

iFixit Tears Down the iPhone Air, Finds That It's Mostly Battery (arstechnica.com) 38

iFixit's teardown of Apple's iPhone Air reveals a device dominated by its battery, which occupies approximately two-thirds of the internal space while critical components including the logic board cluster at the top. The battery matches the component used in Apple's iPhone Air MagSafe battery pack and can be swapped between devices.

The top-heavy component layout addresses the bendgate vulnerability that damaged logic boards in previous thin iPhone models when pressure was applied to the device's middle section. Despite the iPhone Air's thinner profile, iFixit awarded it a 7 out of 10 repairability score, citing reduced component layering that provides more direct access to the USB-C connector, battery, and other serviceable parts compared to standard iPhone models. The dual-entry system further contributes to the device's serviceability.
Iphone

Apple's iPhone 17 Pro Can Be Easily Scratched (theverge.com) 31

An anonymous reader shares a report: The iPhone 17 Pro and 17 Pro Max appear to provide little resistance to scratches and scuffs around the sharp edges of the camera bump. Tech blogger Zack Nelson demonstrates this weakness in a durability test on his JerryRigEverything YouTube channel, explaining that the anodized aluminium layer on the iPhone 17 Pro and 17 Pro Max "does not stick to corners very well" -- creating a weak point in the coating. This is a known issue with the electrochemical anodizing process, so it was a design decision Apple knowingly made.

"For some reason, Apple didn't add a chamfer, fillet, or radius around the camera plateau, and I think it was intentional, so it looks cooler," Nelson says in the video. "But that decision to look cool out of the box is going to plague everyone who owns this phone down the road." The video shows that everyday objects, like a coin or house key carried in the same pocket as the iPhone 17 Pro, can chip away at the anodized coating around the sharp corners of the camera bump. However, that same mildly aggressive scratching on the flat surface of the camera plateau only produced dust that could be easily wiped away.

Biotech

Apple Watch's New High Blood Pressure Notifications Developed With AI (msn.com) 34

Many Apple Watches will soon be able to alert users about possible high blood pressure, reports Reuters — culminating six years of research and development: Apple used AI to sort through the data from 100,000 people enrolled in a heart and movement study it originally launched in 2019 to see whether it could find features in the signal data from the watch's main heart-related sensor that it could then match up with traditional blood pressure measurements, said Sumbul Ahmad Desai [Apple's vice president of health]. After multiple layers of machine learning, Apple came up with an algorithm that it then validated with a specific study of 2,000 participants.

Apple's privacy measures mean that "one of the ironies here is we don't get a lot of data" outside of the context of large-scale studies, Desai said. But data from those studies "gives us a sense of, scientifically, what are some other signals that are worth pulling the thread on ... those studies are incredibly powerful."

The feature, which received approval from the U.S. Food and Drug Administration, does not measure blood pressure directly, but notifies users that they may have high blood pressure and encourages them to use a cuff to measure it and talk to a doctor. Apple plans to roll out the feature to more than 150 countries, which Ami Bhatt, chief innovation officer of the American College of Cardiology, said could help people discover high blood pressure early and reduce related conditions such as heart attacks, strokes and kidney disease. Bhatt, who said her views are her own and do not represent those of the college, said Apple appears to have been careful to avoid false positives that might alarm users. But she said the iPhone maker should emphasize that the new feature is no substitute for traditional measurements and professional diagnosis.

The article notes that the feature will be available in Apple Watch Series 11 models that go on sale on Friday, as well as models back to the Apple Watch Series 9.
Portables (Apple)

$599 MacBook With iPhone Chip Expected To Enter Production This Year (macrumors.com) 122

An anonymous reader shares a report: Apple supply chain analyst Ming-Chi Kuo today reiterated that a more affordable MacBook powered by an iPhone processor is slated to enter mass production in the fourth quarter of 2025, which points towards a late 2025 or early 2026 launch.

Kuo was first to reveal that Apple is allegedly planning a more affordable MacBook. In late June, he said the laptop would have around a 13-inch display, and an A18 Pro chip. Kuo said potential color options include silver, blue, pink, and yellow, so the laptop could come in bright colors, like 2021-and-newer models of the 24-inch iMac.

This time around, he only mentioned the MacBook will have an unspecific iPhone processor. Apple recently introduced the A19 Pro chip, which has 12GB of RAM, so it will be interesting to see if the lower-cost MacBook uses that chip instead. The entire Mac lineup has started with at least 16GB of RAM since last year, with the only option with 8GB being the MacBook with an M1 chip, which is sold exclusively by Walmart for $599.

IOS

Apple Ships iOS 26, iPadOS 26 and macOS Tahoe 26 With 'Liquid Glass' UI Overhaul (apple.com) 33

Apple released iOS 26, iPadOS 26 and macOS Tahoe 26 today, introducing Liquid Glass, a translucent design language that represents the biggest visual redesign since iOS 7 in 2013. The new interface elements dynamically refract and reflect background content across all three platforms. iOS 26 requires iPhone 11 or later and second-generation iPhone SE or newer. iPadOS 26 runs on the same hardware as iPadOS 18 except the 7th-generation iPad. macOS Tahoe 26 supports all Apple silicon Macs, the 2019 16-inch MacBook Pro, 2020 13-inch MacBook Pro, 2020 and later iMac, and 2019 and later Mac Pro. The transparent menu bar on macOS increases perceived display size.

iOS 26's adaptive Lock Screen time display resizes around notifications and Live Activities. Desktop icons, folders, app icons and widgets support light, dark, tinted, and clear appearances across all systems. iOS 26 adds Visual Intelligence for on-screen content analysis through screenshot button combinations. Live Translation operates across Messages, FaceTime and Phone on all platforms, translating text and audio in real-time on-device. The Camera app received streamlined navigation and lens cleaning hints for iPhone 15 and later models.

iPadOS 26 brings Mac-style windowing and multitasking. Apps support free-form placement and menu bars. The Phone app and new Apple Games app arrived on iPad. macOS gained the Phone app through Continuity, including Call Screening and Hold Assist features. Spotlight executes hundreds of actions without opening applications and automatically assigns quick keys to frequent actions. Apple Intelligence expands across all systems. The Shortcuts app gained intelligent actions for text summarization and image generation. The Wallet app tracks orders across platforms, while Apple Music introduced AutoMix for song transitions.
Security

Apple Claims 'Most Significant Upgrade to Memory Safety' in OS History (apple.com) 39

"There has never been a successful, widespread malware attack against iPhone," notes Apple's security blog, pointing out that "The only system-level iOS attacks we observe in the wild come from mercenary spyware... historically associated with state actors and [using] exploit chains that cost millions of dollars..."

But they're doing something about it — this week announcing a new always-on memory-safety protection in the iPhone 17 lineup and iPhone Air (including the kernel and over 70 userland processes)... Known mercenary spyware chains used against iOS share a common denominator with those targeting Windows and Android: they exploit memory safety vulnerabilities, which are interchangeable, powerful, and exist throughout the industry... For Apple, improving memory safety is a broad effort that includes developing with safe languages and deploying mitigations at scale...

Our analysis found that, when employed as a real-time defensive measure, the original Arm Memory Tagging Extension (MTE) release exhibited weaknesses that were unacceptable to us, and we worked with Arm to address these shortcomings in the new Enhanced Memory Tagging Extension (EMTE) specification, released in 2022. More importantly, our analysis showed that while EMTE had great potential as specified, a rigorous implementation with deep hardware and operating system support could be a breakthrough that produces an extraordinary new security mechanism.... Ultimately, we determined that to deliver truly best-in-class memory safety, we would carry out a massive engineering effort spanning all of Apple — including updates to Apple silicon, our operating systems, and our software frameworks. This effort, together with our highly successful secure memory allocator work, would transform MTE from a helpful debugging tool into a groundbreaking new security feature.

Today we're introducing the culmination of this effort: Memory Integrity Enforcement (MIE), our comprehensive memory safety defense for Apple platforms. Memory Integrity Enforcement is built on the robust foundation provided by our secure memory allocators, coupled with Enhanced Memory Tagging Extension (EMTE) in synchronous mode, and supported by extensive Tag Confidentiality Enforcement policies. MIE is built right into Apple hardware and software in all models of iPhone 17 and iPhone Air and offers unparalleled, always-on memory safety protection for our key attack surfaces including the kernel, while maintaining the power and performance that users expect. In addition, we're making EMTE available to all Apple developers in Xcode as part of the new Enhanced Security feature that we released earlier this year during WWDC...

Based on our evaluations pitting Memory Integrity Enforcement against exceptionally sophisticated mercenary spyware attacks from the last three years, we believe MIE will make exploit chains significantly more expensive and difficult to develop and maintain, disrupt many of the most effective exploitation techniques from the last 25 years, and completely redefine the landscape of memory safety for Apple products. Because of how dramatically it reduces an attacker's ability to exploit memory corruption vulnerabilities on our devices, we believe Memory Integrity Enforcement represents the most significant upgrade to memory safety in the history of consumer operating systems.

Security

Thieves Busted After Stealing a Cellphone from a Security Expert's Wife (elpais.com) 41

They stole a woman's phone in Barcelona. Unfortunately, her husband was security consultant/penetration tester Martin Vigo, reports Spain's newspaper El Pais.

"His weeks-long investigation coincided with a massive two-year police operation between 2022 and 2024 in six countries where 17 people were arrested: Spain, Argentina, Colombia, Chile, Ecuador, and Peru...." In Vigo's case, the phone was locked and the "Find my iPhone" feature was activated... Once stolen, the phones are likely wrapped in aluminum foil to prevent the GPS from tracking their movements. "Then they go to a safe house where they are gathered together and shipped on pallets outside of Spain, to Morocco or China." This international step is vital to prevent the phone from being blocked if the thieves try to use it again. Carriers in several European countries share lists of the IMEIs (unique numbers for each device) of stolen devices so they can't be used. But Morocco, for example, doesn't share these lists. There, the phone can be reconnected...

With hundreds or thousands of stored phones, another path begins: "They try to get the PIN," says Vigo. Why the PIN? Because with the PIN, you can change the Apple password and access the device's content. The gang had created a system to send thousands of text messages like the one Vigo received. To know who to target with the bait message, the police say, "the organization performed social profiling of the victims, since, in many cases, in addition to the phone, they also had the victim's personal belongings, such as their ID." This is how they obtained the phone numbers to send the malicious SMS...

Each victim received a unique link, and the server knew which victim clicked it... With the first click, the attackers would redirect the user to a website they believed was credible, such as Apple's real iCloud site... [T]he next day you receive another text message, and you click on it, more confidently. However, that link no longer redirects you to the real Apple website, but to a flawless copy created by the criminals: that's where they ask for your PIN, and without thinking, full of hope, you enter it... "The PIN is more powerful than your fingerprint or face. With it, you can delete the victim's biometric information and add your own to access banking apps that are validated this way," says Vigo. Apple Wallet asks you to re-authenticate, and then everything is accessible...

In the press release on the case, the police explained that the gang allegedly used a total of 5,300 fake websites and illegally unlocked around 1.3 million high-end devices, about 30,000 of them in Spain.

Vigo tells El Pais that if the PIN doesn't unlock the device, the criminal gang then sends it to China to be "dismantled and then sent back to Europe for resale. The devices are increasingly valuable because they have more advanced chips, better cameras, and more expensive materials."

To render the phone untraceable in China, "they change certain components and the IMEI. It requires a certain level of sophistication: opening the phone, changing the chip..."

Slashdot Top Deals