Security researcher Jonathan Leitschuh has publicly disclosed a serious zero-day vulnerability for the Zoom video conference app on Macs that could allow websites to turn on user cameras without permission. The Verge reports: He has demonstrated that any website can open up a video-enabled call on a Mac with the Zoom app installed. That's possible in part because the Zoom app apparently installs a web server on Macs that accepts requests regular browsers wouldn't. In fact, if you uninstall Zoom, that web server persists and can reinstall Zoom without your intervention. Leitschuh details how he responsibly disclosed the vulnerability to Zoom back in late March, giving the company 90 days to solve the problem. According to Leitschuh's account, Zoom doesn't appear to have done enough to resolve the issue. The vulnerability was also disclosed to both the Chromium and Mozilla teams, but since it's not an issue with their browsers, there's not much those developers can do. The report notes that you can "patch" the vulnerability by making sure the Mac app is up to date and also disabling the setting that allows Zoom to turn your camera on when joining a meeting. "Again, simply uninstalling Zoom won't fix this problem, as that web server persists on your Mac," reports The Verge. "Turning off the web server requires running some terminal commands, which can be found at the bottom of the Medium post."

AmiMoJo writes: Apple is apparently set to ditch the butterfly mechanism used in MacBooks since 2015, which has been the root of reliability issues and its low-travel design has also not been popular with many Mac users. A report published today says that Apple will roll out a new keyboard design based on scissor switches, offering durability and longer key travel, starting with the 2019 MacBook Air. The MacBook Pro is also getting the new scissor switch keyboard, but not until 2020. The new scissor switch keyboard is a whole new design than anything previously seen in a MacBook, purportedly featuring glass fiber to reinforce the keys.

Apple says a "very small number" of MacBook Air models have an issue with the main logic board and can be replaced at no cost to customers. 9to5Mac reports: Apple's memo to repair staff notes that it has identified "an issue" with the main logic board specifically in Retina, 13-inch, 2018 MacBook Air models with certain serial numbers. Apple will be emailing customers with machines with the serial numbers they've identified as being affected, otherwise customers can take their machine to Apple Stores or authorized repair staff to have their devices checked out. Apple's documents list symptoms as issues with "power," but do not elaborate on what problems users are experiencing exactly. A quick search online for problems with the 2018 MacBook Air logic board shows reports back to when the device first launched with some users' machines not able to power on at all. The affected machines will be covered for four years from the original purchase date. Users that think they might be experiencing the issue can take their MBA to Apple Stores or an Apple authorized service provider.

Slashdot's gotten over 17,000 votes in its poll about which web browser people use on their desktop. (The current leader? Firefox, with 53% of the vote, followed by Chrome with 30%.)

But Slashdot reader koavf asks an interesting follow-up question: "What's everyone's go-to Plan B browser and why?"

To start the conversation, here's how James Gelinas (a contributor at Kim Komando's tech advice site) recently reviewed the major browsers:

• He calls Chrome "a safe, speedy browser that's compatible with nearly every page on the internet" but also says that Chrome "is notorious as a resource hog, and it can drastically slow your computer down if you have too many tabs open."
  
  "Additionally, the perks of having your Google Account connected to your browser can quickly turn into downsides for the privacy-minded among is. If you're uncomfortable with your browser knowing your searching and spending behaviors, Chrome may not be the best choice for you."

• He calls Firefox "the choice for safety".
  
  "Predating Chrome by 6 years, Firefox was the top choice for savvy Netizens in the early Aughts. Although Chrome has captured a large segment of its user base, that doesn't mean the Fox is bad. In fact, Mozilla is greatly appreciated by fans and analysts for its steadfast dedication to user privacy... Speedwise, Firefox isn't a slouch either. The browser is lighter weight than Chrome and is capable of loading some websites even faster."

• He calls Apple's Safari and Microsoft Edge "the default choice...because both of these browsers come bundled with new computers."
  
  "Neither one has glaring drawbacks, but they tend to lack some of the security features and extensions found in more popular browsers. Speedwise, however, both Edge and Safari are able to gain the upper hand against their competition. When it comes to startup time and functions, the apps are extremely lightweight on your system's resources. This is because they're part of the Mac and Window's operating systems, respectively, and are optimized for performance in that environment."

Finally, he gives the Tor browser an honorable mention. ("It's still one of the best anonymous web browsers available. It's so reliable, in fact, that people living under repressive governments often turn to it for their internet needs -- installing it on covert USB sticks to use on public computers.") And he awards a "dishonorable mention" to Internet Explorer. ("Not only is the browser no longer supported by Microsoft, but it's also vulnerable to a host of malware and adware threats.")

But what do Slashdot's readers think? Putting aside your primary desktop browser -- what's your own go-to "Plan B" web browser, and why? Leave your best answers in the comments.

What's your "backup" browser?

puddingebola writes: In May, security researcher Filippo Cavallarin made public a vulnerability in macOS's Gatekeeper. The vulnerability can allow an attacker to use a symlink and an NFS server to bypass Gatekeepers authentication and run malicious code. The malware has been named OSX/Linker and has been tied to the same group that operates the OSX/Surfbuyer adware. All macOS versions are affected, including the latest 10.14.5, and Apple has yet to release a patch to this day, a full month after Cavallarin's public disclosure.

Apple is manufacturing its new Mac Pro computer in China (Warning: source paywalled; alternative source), shifting abroad production of what had been its only major device assembled in the U.S. The Wall Street Journal reports: The tech giant has tapped Taiwanese contractor Quanta Computer Inc. to manufacture the $6,000 desktop computer and is ramping up production at a factory near Shanghai, the people said. Apple can save on shipping costs for components given the proximity of many of its suppliers to Shanghai, rather than having to supply a factory in the U.S. While the Mac Pro isn't one of Apple's higher-volume products, the decision on where to make it carries outsize significance. Apple's reliance on factories in China to manufacture its products has been an issue for the company, especially under President Trump, who has pressured Apple and other companies to make more in the U.S. An Apple spokesman said the new Mac Pro is designed and engineered in the U.S. and includes U.S.-made components. Apple said it supports manufacturing in 30 U.S. states and spent $60 billion last year with more than 9,000 U.S. suppliers.

"Final assembly is only one part of the manufacturing process," the spokesman said, adding that the company's investments support two million American jobs.

Apple's chief designer Jony Ive is leaving after decades at the iPhone maker to form an independent company -- with Apple as one of its primary clients. Ive was at Apple for more than two decades in which his iconic designs for the Mac, iPod and iPhone turned one of Silicon Valley's faded giants into the world's most valuable company and defined a generation of consumer products. From a report: "Jony is a singular figure in the design world and his role in Apple's revival cannot be overstated, from 1998's groundbreaking iMac to the iPhone and the unprecedented ambition of Apple Park," Chief Executive Officer Tim Cook said in a statement. "Apple will continue to benefit from Jony's talents by working directly with him on exclusive projects, and through the ongoing work of the brilliant and passionate design team he has built." Ive will be replaced by existing Apple designers. Evans Hankey, vice president of Industrial Design, and Alan Dye, vice president of Human Interface Design, will report to Jeff Williams, Apple's chief operating officer, the company said. In an interview with Financial Times, Ive said: "While I will not be an [Apple] employee, I will still be very involved -- I hope for many, many years to come. This just seems like a natural and gentle time to make this change."

Apple has hired one of ARM's top chip engineers as the iPhone maker looks to expand its own chip development to more powerful devices, including the Mac, and new categories like a headset. Bloomberg reports: The company hired Mike Filippo in May for a chip architect position, according to his LinkedIn profile. At ARM, Filippo was a lead engineer behind chip designs that power the vast majority of the world's smartphones and tablets and was leading a new push into parts for computers. ARM, owned by SoftBank, designs microprocessors and licenses technology that is fundamental to the chip development efforts of Apple, Samsung, Qualcomm and Huawei.

Prior to his work at ARM, Filippo was also a key designer at chipmakers Advanced Micro Devices and Intel. For Apple, the hire could help fill the void left by the departure of Gerard Williams III earlier this year. Williams was Apple's head architect of chips used in the iPhone and iPad. Apple's A series chips power its mobile devices using ARM technology. Its Mac computers have used processors from Intel for nearly two decades.

Apple today seeded the first beta versions of upcoming macOS Catalina update, iOS 13 update, and iPadOS update to its public beta testing group, giving non-developers a chance to try out the software ahead of their fall public release. Beta testers who have signed up for Apple's beta testing program will be able to download the macOS Catalina beta through the Software Update mechanism in System Preferences after installing the proper profile. Those who want to be a part of Apple's beta testing program can sign up to participate through the beta testing website, which gives users access to iOS, macOS, and tvOS betas. Similarly, beta testers who have signed up for Apple's beta testing program will receive the iOS 13 beta update over-the-air after installing the proper certificate on an iOS device. New features in macOS Catalina update includes: macOS Catalina eliminates the iTunes app, which has been a key Mac feature since 2001. In Catalina, iTunes has been replaced by Music, Podcasts, and TV apps. The new apps can do everything that iTunes can do, so Mac users aren't going to be losing any functionality, and device management capabilities are now handled by the Finder app. macOS Catalina has a useful new Sidecar feature, designed to turn the iPad into a secondary display for the Mac. For those with an Apple Watch set up to unlock the Mac, there's now an option to approve security prompts in Catalina by tapping on the side button of the watch. Macs with a T2 chip in them also support Activation Lock, making them useless to thieves much as it does on the iPhone. There's a new Find My app that lets you track your lost devices, and previously, this functionality was only available via iCloud on the Mac. There's even a new option to find your devices even when they're offline by leveraging Bluetooth connections to other nearby devices, something that's particularly handy on the Mac because it doesn't have a cellular connection. For developers, a "Project Catalyst" feature lets apps designed for the iPad be ported over to the Mac with just a few clicks in Xcode and some minor tweaks. Apple's ultimate goal with Project Catalyst is to bring more apps to the Mac.

Apple is counting on apps built for the iPad and the iPhone being converted to the Mac as a way to infuse new energy -- and a lot of new software -- into the granddaddy of its devices. From a report: The party started last year at WWDC 2018 when Apple announced a "sneak peek" at four of its own apps that it converted from iOS to MacOS. Those four were News, Voice Memos, Home and Stocks. But when the apps showed up in MacOS Mojave, they weren't greeted with much enthusiasm from Mac users because all four were rudimentary at best and didn't take advantage of the Mac's extra capabilities. Good news. Apple is fixing them. At WWDC 2019 earlier this month, Apple announced Project Catalyst, which streamlines the process for all software makers to bring their own iOS apps to Mac.

In an interview with CNET at WWDC, Apple software chief Craig Federighi confirmed that the four iOS apps for Mac released last year will get major updates based on the new technology in Project Catalyst. But he also revealed that the apps will get new designs to make them more Mac-like. "They're getting improvements," Federighi said. "The underlying technology has matured...Some of that is super low-level stuff. Some people have dissected those apps and realized that they were sort of two halves: an AppKit half and a UIKit half, literally running in different processes. That's all unified now. This has become much more of a native Mac framework...So automatically, the apps we built last year are upgraded."

Microsoft has released To-Do for Mac, finally giving Apple users access to the task management tool on their desktops. The Mac app will allow users to work offline, view their upcoming tasks under "My Day," share to-do lists with friends and colleagues and see flagged emails. From a report: "Today, we'd like to announce the arrival of a new family member -- that's right, the moment many of you have been waiting for is here -- say hello to the Mac app. If you've already been using our app on Android, iOS, Windows, or web, then the Mac app will feel very familiar. Sign in and all your tasks will be waiting for you, ready to be checked off. You can work offline, add tasks to My Day, see your flagged email in your Flagged email list, and share your lists with colleagues or friends and family. The Planner integration isn't available yet, but we're already working on bringing the Assigned to Me list to you," says Polly Davidson, Social Media Strategist, Microsoft.

Catalyst is Apple's framework that enables developers to easily bring existing iOS apps to the Mac, while SwiftUI is a new, Swift-based technology that makes it easy for developers to create one app that runs on all of Apple's platforms. Jason Snell from Macworld highlights the slow, invisible transition of these new technologies. From the report: Catalyst, which arrives this fall, will allow developers who are well-versed in the vagaries of writing iOS apps to use those skills to write Mac apps. This will most commonly take the form of bringing iPad apps to the Mac, with additions to make them feel more like native Mac apps, but it's more than that -- it provides iOS developers with a familiar set of tools and access to an entirely new platform, and it makes the target for professional apps across Apple's platforms broader by including both the iPad and the Mac. iOS apps are currently built to run on devices running Apple-designed ARM processors, and if the rumors are true, that's another transition waiting to happen. But given that all Mac and iOS developers are already using Apple's Xcode tools to develop their apps, I suspect that the pieces have been put in place for a fairly simple transition to a new processor architecture.

And then there's SwiftUI, which may be a harder concept for regular users to grasp, but it's a huge step on Apple's part. This is Apple's ultimate long game -- an entirely new way to design and build apps across all of Apple's platforms, based on the Swift language (introduced five years ago as yet another part of Apple's long game). In the shorter term, iOS app developers will be able to reach to the Mac via Catalyst. But in the longer term, Apple is creating a new, unified development approach to all of Apple's devices, based in Swift and SwiftUI. Viewed from this perspective, Catalyst feels more like a transitional technology than the future of Apple's platforms. But we're talking about the long game here. Transitional technologies are all a part of the long game. Catalyst will bring those apps to the Mac. iOS and Mac developers will pick up Swift and SwiftUI. Mac apps can integrate iOS stuff via Catalyst. iOS apps can integrate Mac stuff for use on the Mac. And all developers can begin experimenting with SwiftUI, building new interfaces and replacing old ones in a gradual process. "And then we'll turn around sometime in the 2020s and realize that all of this talk of UIKit and AppKit and Catalyst is behind us, and that our apps are written in Swift with interfaces created using SwiftUI," Snell writes in closing. "It will have all changed due to Apple's slow and steady pace of iterative, continuous improvement. The long game never stops, and it can be hard to see that you're even in it."

Game Builder is a new video game from Google that allows you to create simple Minecraft-style games for yourself and others to play through. "The game lets you drag and drop characters and scenery into an empty sandbox to construct your world, then use preset commands to string together how things interact," reports The Verge. "It's free to play and available on both Windows and macOS." From the report: The game comes from Area 120, Google's incubator for experimental projects (some of which have quickly disappeared, others of which have made their way into other Google products). Game Builder has actually been available through Steam since November 1st last year (it already has 190 reviews, with a "every positive" score), but Google only publicized it today, which is certain to get a lot more people playing. Game Builder has a co-op mode, so multiple people can build a game together at once. You can also share your creations and browse through the games made by others. The interaction system works with "if this then that" logic, and players can craft their own interactions with JavaScript if they're familiar with it.

In an effort to create a "simplified experience," Google said in a blog post today that Google Photos will stop syncing to Drive in July. Digital Trends reports: The change is sure to be controversial. For many, the fact that Photos automatically syncs to Google Drive is a favorite feature, as it allows for much easier organization of photos. Of course, the change will avoid some confusion. According to Google, the change is aimed at helping "prevent accidental deletions of items across products." In other words, it seems like some users were confused about the fact that deleting a copy of a photo in Photos also means that the image is deleted in Drive, and vice versa. The blog post notes that the two services will still work together to an extent. The company announced a new feature called "Upload from Drive," which will allow users to manually select photos and videos to be imported into Photos. Once the items are uploaded, the files won't be connected, so you can delete the file in one without it being removed in the other.

Additionally, Backup and Sync will continue to work on both Windows and Mac, "so if you store your photos locally and want to then sync them to either Google Drive or Google Photos, you'll still be able to do so," reports Digital Trends. Google also notes that existing photos and videos will stay in both Photos and Drive, but the Google Photos folder in Drive will no longer update automatically.

A new strain of malware intercepts and tampers with internet traffic on infected Apple Macs to inject Bing results into users' Google search results. The Register reports: A report out this month by security house AiroAV details how its bods apparently spotted a software nasty that configures compromised macOS computers to route the user's network connections through a local proxy server that modifies Google search results. In this latest case, it is claimed, the malware masquerades as an installer for an Adobe Flash plugin -- delivered perhaps by email or a drive-by download -- that the user is tricked into running. This bogus installer asks the victim for their macOS account username and password, which it can use to gain sufficient privileges to install a local web proxy and configure the system so that all web browser requests go through it. That proxy can meddle with unencrypted data as it flows in and out to and from the public internet.

A root security certificate is also added to the Mac's keychain, giving the proxy the ability to generate SSL/TLS certs on the fly for websites requested. This allows it to potentially intercept and tamper with encrypted HTTPS traffic. This man-in-the-middle eavesdropping works against HTTP websites, and any HTTPS sites that do not employ MITM countermeasures. When the user opens their browser and attempts to run a Google search on an infected Mac, the request is routed to the local proxy, which injects into the Google results page an HTML iframe containing fetched Bing results for the same query, weirdly enough. As for why, "it's believed the Bing results bring in web ads that generate revenue for the malware's masterminds," the report says.

An anonymous reader writes: Google this week released Chrome 75 for Windows, Mac, Linux, Android, and iOS. The release includes hint for low latency canvas contexts, files supported in the Web Share API, numeric separators, and more developer features. [...] Next, files are now supported by the Web Share API. For years, Google has been working to bring native sharing capabilities to the web. The Web Share API allows web apps to invoke the same share dialog box as a native app. The implementation brings a new method and a new shareData property. Numeric literals now allow underscores (_, U+005F) as separators to make them more readable. Underscores can only appear between digits, and consecutive underscores are not allowed. There is also a reader mode that is not enabled by default. From a report: The big feature included with Chrome 75 is the addition of a hidden Reader Mode, similar to the one included with Firefox. This new Reader Mode is not active by default and must be turned on using one of Google Chrome's experimental flags -- which until recently has only been available in the Chrome Canary distribution. To enable and test Chrome's new Reader Mode, users must visit the chrome://flags/#enable-reader-mode section, and enable the Reader Mode option, as in the screenshot below. Chrome for Android includes these two features: 1. Generate strong and unique passwords with Chrome's built-in password manager. 2. Quickly look up your passwords by tapping any password field and using the new keyboard option.

"Apple's Dashboard is getting quietly removed from the company's upcoming macOS Catalina update," reports The Verge, citing Appleosophy and MacRumors. "The Dashboard first launched seven years ago with Mac OS X 10.4 Tiger in 2005 and saw its final update in 2011 with the launch of OS X 10.7 Lion." From the report: The app first introduced the concept of widgets to Apple's desktop operating system and became a hallmark of OS X design for more than a decade. In particularly, Dashboard became well known for its desktop Sticky Note feature and its overall skeuomorphic approach best emphasized by the clock, stocks, and calculator widgets, a design philosophy that formed the foundation of the first version of iOS that launched a few years after OS X Tiger. It wasn't until iOS 7 in 2013 that Apple would abandon that aesthetic for a flatter, more modern one that eventual carried back over to its desktop approach.

Since 2011, Dashboard has been accessible in various forms, but it's had none of its widget design or UI updated, making it a bit of an anachronism existing behind the scenes on macOS. With OS X 10.10 Yosemite, Apple disabled the application by default, but still allowed users to access it either as a hotkey overlay or its own separate space within Mission Control. Now, in macOS Catalina, it appears Dashboard is going away for good. Appleosophy tried to disable and enable the Dashboard via Terminal only for the system to show it as missing even after a forced reboot. The Launchpad overlay also shows the Dashboard app icon as a question mark, the same as with the broken up and effectively killed off iTunes.

Apple announced this week that its new Mac Pro starts at an already pricey $6,000, but the company neglected to mention how much the top-of-the-line model will cost. From a report on The Verge: So we shopped around for equivalent parts to the top-end spec that Apple's promising. As it turns out: $33,720.88 is likely the bare minimum -- and that's before factoring in the four GPUs, which could easily jack that price up to around $45,000. For all that dough, big-budget video editors and other creative types get a lot of firepower: a 28-core Intel Xeon W processor, an almost-impossible-to-comprehend 1.5TB of RAM, 4TB of SSD storage, and four AMD Radeon Pro Vega II Duo GPUs -- assuming you can afford one. Add in a Pro Display XDR monitor (and a Pro Stand to go with it), and you're looking at a workstation that could clear $50,000. Keep in mind too that these estimates are based on market prices for these (or similar) parts: Apple historically has charged far more for its pre-built configurations than for a computer you'd build on your own.

One of the most ridiculous announcements made at Apple's WWDC on Monday was the new Pro Display XDR monitor. It's a monitor made to pair with the new Mac Pro, complete with top-level specs and a staggering $5,000 starting price. CNET reports: The monitor's chief feature is high-dynamic range, aka HDR. Doing HDR correctly requires a lot of horsepower to illuminate the screen, and the XDR monitor can get exceedingly bright -- and stay that way. Apple says an advanced cooling system can maintain its 1,000 nits brightness "indefinitely." The monitor has a full-array backlight with 576 zones of full array local dimming -- more than just about any similarly equipped TV available. That advanced dimming tech likely contributes to the incredibly high 1,000,000:1 contrast ratio specification.

At 32 inches and a resolution of 6,016 x 3,384, the Pro Display XDR is Apple's largest retina display ever. While not used in many TVs (which are either 4K or 8K), the 6K resolution is increasingly popular for video capture, with cameras like the Pansonic Lumix S1H, Sony Venice, and models from Red doing 6K. Apple has also improved the screen to better control reflections and offers a new matte option called "nano-texture, with glass etched at the nanometer level for low reflectivity and less glare." The matte option brings the price of the monitor up to $6,000. Apple also talks up its polarizer technology and wide off-axis viewing angle. Pre-set reference modes include HDR video (P3-ST 2084), Digital Cinema (P3-DCI) and Photography (P3-D65). In traditional Apple fashion, the Pro Display XDR does not ship with a stand -- you'll have to buy that separately. The optional $999 Pro stand allows users to articulate the screen and place it in various positions. It has tilt, height, and rotation adjustment, meaning you can rotate it from landscape to portrait mode, juts like your iPhone.

Apple is also selling a VESA mount adapter for $199, but that will require you to buy another third-party stand.

An anonymous reader quotes a report from CNET: Apple on Monday announced the next version of MacOS. Called Catalina, the next major revision of the MacOS will replace the iTunes app with three dedicated media apps: Apple Music, Apple Podcasts and Apple TV. The update coming this fall will also let Mac users run iPad apps they can download through the Mac App Store. Using the new Project Catalyst development tool, third-party iPad developers will be able to easily bring their iPad apps for the Mac, Craig Federighi, Apple's senior vice president of software engineering, said. Apple's goal for developers is to help them build apps without a lot of extra effort that can run on both iOS and MacOS devices. And Mac users will benefit by getting access to an expanded collection of MacOS apps. MacOS Catalina will also let you use an iPad as a second screen. Developer betas for MacOS Catalina and iOS 13 will be available today. Public betas will come in July, and both desktop and mobile OSes will ship in the fall.