Monday, 24 September 2018

Security researcher claims macOS Mojave privacy bug on launch day

A security researcher has claimed a new vulnerability in the latest version of macOS — just hours before the software is due to be released.

Patrick Wardle, chief researcher officer at Digita Security, tweeted a video Monday of an apparent privacy feature bypass that’s designed to prevent apps from improperly accessing a user’s personal data.

For years, Macs have forced apps to ask for permission before accessing your contacts and calendar after some iOS apps were caught uploading private data. Apple said at its annual developer conference this year that it would expand the feature to include apps asking for permission to access the camera, microphone, email and backups.

Wardle told TechCrunch that his findings are “not a universal bypass” of the feature, but that the bug could allow a malicious app to grab certain protected data, such as a user’s contacts, when a user is logged in.

The video shows the operating system initially rejecting access to his stored contacts, but later copying his entire address book to the desktop after running an unprivileged script simulating a malicious app.

Wardle isn’t releasing specifics of the bug yet, he said, because he doesn’t want to put users at risk, but dropped the video out of frustration at the company’s lack of bug bounty, which he said disincentives security researchers from reporting bugs to the company.

“Other operating system vendors have acknowledged that any software is going to have vulnerabilities,” but that Apple is “sticking its head in the sand.”

Apple was one of the last major companies to roll out a bug bounty program — giving security researchers money in exchange for responsibly disclosed vulnerabilities. Apple began offering cash bounties of up to $200,000 for the most severe iOS bugs. But the company has neglected to port the program over to macOS, for reasons unknown.

“Unfortunately until there’s a reason for Apple to change its approach to security, it’s not going to,” he said. “Generally, companies don’t change something until they realize it’s broken.”

We reached out to Apple for comment and will update if we hear back.

It’s the second time Wardle released details of a serious vulnerability in macOS on launch day — the most recent case was almost exactly a year ago at the launch of macOS High Sierra.

Wardle is expected to talk more of the technical details of the Mojave bug at the Objective-by-the-Sea conference in November, he said.

Apple will release macOS Mojave later on Monday.



from Apple – TechCrunch https://ift.tt/2OS1kDy

It sounds like Apple’s original content is going to be really, really bad

Last year, an investor projected that Apple would be spending up to $4.2 billion on original content by 2022, but if the reports coming out now about what that content will look like are correct, the company may want its money back.

A new Wall Street Journal article highlights some of the tensions that Apple faces as it looks to create a streaming media service in the age of Handmaid’s TaleHouse of CardsOrange is the New Black, Game of Thrones, and even The Marvelous Mrs. Maisel.

To set the table, The Journal walked readers through some of the issues Tim Cook apparently had with Vital Signs, a title the company had acquired loosely based on the biography of rap legend (and former head of the billion dollar Apple acquisition, Beats) Dr. Dre.

Reportedly, after Cook saw scenes including a mansion orgy, white lines, and drawn guns the Apple chief put the kibosh on the whole production saying it was too violent and not something that Apple can air.

For Apple’s content business, gratuitous profanity, sex or violence are all verboten as the company tries to thread the needle between being a widely beloved producer of high quality consumer goods and purveyor of paid entertainment to a public that’s increasingly enthralled with blood and gore at its circuses.

In other words, Apple’s mores seem a little misplaced.

There’s a problem for Apple as it tries to stitch together a studio while limiting itself to the entertainment equivalent of cream of wheat. Plenty of other other technology companies are gunning for that number one slot and studios are fighting for their very survival.

Money may talk in Hollywood, but creative control, ensuring an audience for a show, and the continued viability of programming also have their place. Creators may find that they’re far more comfortable wrapped in a quilt that has more varied programming where their shows may be buoyed by the success of other, darker programming that appeals to a broader audience.

If Apple’s aversion to potentially scandalous storylines is as extreme as The Wall Street Journal article makes it seem — requesting the removal of crucifixes from a set to avoid offending religious sensibilities in an M. Night Shyamalan drama; parting ways with show-runners because of the “dark tone” they were taking in a reboot of Steven Spielberg’s Amazing Stories and the big budget vehicle for Jennifer Aniston and Reese Witherspoon; spiking the Dr. Dre show entirely — it may not even be able to field series as enjoyable as reported Cook favorite Friday Night Lights (which featured teenage sex, underage drinking, abortion, and extreme religiosity alongside the familial and football foibles of Eric and Tammy Taylor).

Apple’s ambitions to be the go to spot for family friendly fare also risks being thwarted by the only studio that’s managed to fend off the tech giants encroaching on the entertainment world — Disney. The mighty mouse house has plans for its own streaming service (and already has a place for more mature content to reside). A bundled package that includes discounts could be an unbeatable option for would-be subscribers — and makes up for the fact that Disney’s own streaming service won’t have R-rated films.

With competition so fierce it doesn’t make much sense for Apple to box its own content service into a corner just as it’s struggling to get its footing the ring.

All that said, having a roughly $200 billion pile of cash sitting in the corner definitely gives Apple’s streaming contender a fighting chance. The question is whether an audience will stick around to watch what’s likely to be a bloodless fight.



from Apple – TechCrunch https://ift.tt/2O3FiQU

iPhone XS Max is reportedly dramatically outselling the XS

According to some early numbers from Apple analyst extraordinaire, Ming-Chi Kuo, the iPhone Max XS is currently running laps around its smaller counterpart. In a note posted by MacRumors, Kuo suggested that the 6.5-inch handset sold three to four time as well as the XS during its inaugural weekend.

“We have determined that the demand for XS Max is better than expected (3–4 times that of XS),” says Kuo. “The gold and space-grey colors are significantly more popular than the silver. 256GB is the most popular, and 512GB is subject to a serious shortage because only Samsung can currently ship NAND Flash well. We are positive that XS Max shipments will grow steadily in 4Q18 thanks to demand from Asia market and the gift season.”

The higher demand shouldn’t be altogether surprising. After all, the XS doesn’t mark an earth shattering upgrade over its predecessor. The Max, on the other hand, is a pretty sizable jump in display size for the company that was once suggested that consumers simple don’t want a larger phone. 

And while the two models are quite similar from the standpoint of specs, the bigger display will only run an extra $100. If you’re already in for $1,000, what’s another $100 between friends, right?

The note also states that Apple Watch Series 4 demand is better than anticipated, while the iPhone XR is expected to be a good seller for the company. No surprise on that last one, really. The XR represents an attainable upgrade for those users unwilling or unable to pull the trigger for a $1,000 phone with last year’s handset.



from Apple – TechCrunch https://ift.tt/2Q40eVs

iPhone XS Max is reportedly dramatically outselling the XS

According to some early numbers from Apple analyst extraordinaire, Ming-Chi Kuo, the iPhone Max XS is currently running laps around its smaller counterpart. In a note posted by MacRumors, Kuo suggested that the 6.5-inch handset sold three to four time as well as the XS during its inaugural weekend.

“We have determined that the demand for XS Max is better than expected (3–4 times that of XS),” says Kuo. “The gold and space-grey colors are significantly more popular than the silver. 256GB is the most popular, and 512GB is subject to a serious shortage because only Samsung can currently ship NAND Flash well. We are positive that XS Max shipments will grow steadily in 4Q18 thanks to demand from Asia market and the gift season.”

The higher demand shouldn’t be altogether surprising. After all, the XS doesn’t mark an earth shattering upgrade over its predecessor. The Max, on the other hand, is a pretty sizable jump in display size for the company that was once suggested that consumers simple don’t want a larger phone. 

And while the two models are quite similar from the standpoint of specs, the bigger display will only run an extra $100. If you’re already in for $1,000, what’s another $100 between friends, right?

The note also states that Apple Watch Series 4 demand is better than anticipated, while the iPhone XR is expected to be a good seller for the company. No surprise on that last one, really. The XR represents an attainable upgrade for those users unwilling or unable to pull the trigger for a $1,000 phone with last year’s handset.



from iPhone – TechCrunch https://ift.tt/2Q40eVs

macOS Mojave is now available

Enjoy reading lots of words about new operating systems? Good news! There are plenty of those here. Enjoy actually downloading and running said new operating systems? Gooder news! macOS 10.14 Mojave is now available in final public form over at the Mac App Store.

As with the last several versions of the desktop OS, Mojave’s a free download — though every time the company launches a new one, there tends to be a bit of a bottleneck with downloads, so you may want to give this one a bit of time before attempting.

As far as what you’ve got to look forward to on the this new version, Dark Mode is the biggest marquee feature here. Mojave offers the ability to switch windows and backgrounds to a dark design with light text — which, like many of the OS’s new features, is targeted at the company’s core audience of creative pros.

Stacks is probably my personal favorite of the bunch. With a click of a button, it cleans your ridiculously messy desktop into piles of files sortable by type and various other categories. The first batch of iOS apps have been ported to the desktop here, as well, including Voice Memos, Stocks, Home and News.

Screenshots have been pretty thoroughly tweaked, while Safari’s got a bunch of new security features.



from Apple – TechCrunch https://ift.tt/2OKGiXf

macOS 10.14 Mojave review

Against my better judgement and repeat warnings from those who knew better, I went ahead and installed Mojave on my work computer the first chance I got. Sure, there were certain standard beta bugs and capability issues that made me regret the decision on occasion, but the only way to sufficiently test a product like this is use it day to day.

I can’t claim to have used every feature with any regularity. But that’s just the nature of an operating system upgrade. There’s a lot of ground to cover, in order to assure the update covers as wide a swath of users as possible. There are international features and updates to Apple’s machine learning offering — things that, in my case, don’t really impact usage.

Even with the broad scope of updates contained herein, however, 10.14 represents what is arguably the most focused macOS release in recent memory. Unlike High Sierra, which felt, in many respects (name included), like a refinement over its predecessor, Mojave finds Apple with specific mission in mind.

The last few years have seen the company hit mounting criticism that it had taken its eye off the ball when it comes to creative professionals — a segment of users long regarded to be the spirital core of its desktop offerings. There was a backlash against Final Cut, when Apple made changes for the sake of simplifying/streamlining, removing the high level of customization videographers had come to rely on.

Last year, meanwhile, Apple presented an uncharacteristically transparent view into the trials and tribulations of the Mac Pro line. “If we’ve had a pause in upgrades and updates,” Phil Schiller said during a roundtable discussion, “we’re sorry for that — what happened with the Mac Pro — and we’re going to come out with something great to replace it.”

Companies like Microsoft have seen opportunity in Apple’s further push into populism, targeting the ever-growing Surface line at those creative Pros. After all, while the category isn’t ultimately a huge one, the videographers, artists, musicians, et al. who use the products are among the most influential when it comes to buying decisions.

But Apple has begun to address these concerns. While the Mac Pro won’t be arriving until next year, it’s made important strides on the hardware front. The iMac Pro, for instance, presents an all-in-one alternative to the modular desktop, while the latest MacBook pros offer up some downright nutty specs on the high-end.

Mojave plays a central role in all of this. Many of the operating system’s marquee features cater to precisely those power users. Dark Mode, Gallery View, file metadata and Stacks are among the top new features here, and each have creative pros firmly in their sights.

I’ll be the first to admit that you’ll need to broaden your definition of “creative professional” pretty damn wide before I start to fit in. When Apple trotted out photogs, producers and interactive artists for a recent event, I’d be lying if I said I felt like I belonged.

That said, I’ve found a place for many of the aforementioned features in my own daily workflow. In the interest of giving the most time to those features I’ve spent the most time with over the course of the last four or so months, let’s start with the Mojave additions I’ve found the most useful.

Stacks

Every new version of macOS comes with several features that I can easily visualize becoming a part of my daily process. I get excited about the ways in which these additions will help me become faster, more productive, better organize. Invariably, however, they slowly fade into the background. I stop making the effort to engage and ultimately forget they’re even there.

In the case of many of them, I know my own disorganization and idiosyncratic methods are as much to blame as anything. The features are well-intentioned, but workflows are stubborn. And besides, just because you pay for the gym membership doesn’t mean you’re going to keep that New Year’s resolution, right?

Stacks, on the other hand, is straight up useful. As Apple has moved away from the desktop-based folder system, I’ve found my desktop growing more and more messy. It’s become the throw the dirty laundry anywhere approach to computer use. It’s bad and I hate myself for it, but what are you going to do?

Upgrade to Mojave, for one thing. While it’s true the company’s leaning heavily on Dark Mode as the flagship feature, Stacks is quietly the best and most useful addition. If you’ve got a messy desktop, simply Control+click the wallpaper or chose Use Stacks under view in the menu bar. Choosing this will automatically sort files into piles.

By default, the feature groups files by type. From the drop down, you can toggle this to group things by Date Last Opened, Date Modified, Date Added, Date Created or Tags. Clicking the top of the pile expands them out, so you can view everything at once.

Oh, and if you click Use Stacks again, everything will fly back into place, resorting your unruly desktop in the process.

Dark Mode

When Apple announced Mojave back at WWDC, Dark Mode got far and away the biggest response from the crowd. That’s what you get for putting on a show in a room full of developers. Of course, they’re not the only ones who’ve been champing at the bit for the feature. Videographers, photographers — really anyone who spends a lot of time staring at screens in dark rooms will likely appreciate the option.

When the feature is enabled, those applications that support it will default to the mode. The borders and backgrounds turn dark and white text is highlighted on a black background. In my Mojave first look a few months back, I lamented the lack of apps supporting the feature. At the time, Dark Mode was largely the realm of Apple’s own apps. Mail, Contacts, Calendar, and Safari Reader are among them.

Understandably so. Lead by example, I guess. Things have improved a bit since then. According to the site Dark Mode List, which aggregates examples from both macOS and iOS, there are at least 78 applications that currently support the feature .

It’s a start, but there’s still a long ways to go. After all, you lose some of the effect when you switch back and forth between apps that do and don’t offer the setting. For example, while Safari supports it, neither Firefox nor Chrome do. Also, some of Apple’s own, not pre-installed applications don’t support it either, including Pages. That said, the list is understandably pretty heavy on developer tools.

With Mojave launching today, however, I’d anticipate that we’re going to see more companies rolling out the option soon. In the meantime, it’s a handy feature for those who need it and it’s a nice option for the rest of us.

Dynamic Desktop is a fun addition — though there are two options at the moment. there’s the standard Mojave sand dune, and Solar Gradient. Both shift during the day, gradually darkening as the sun starts going down. It’s a nice complement to Dark Mode, and a neat spin on the blue light reducing Night Shift feature that’s been around for a while now. Of course, more wallpaper options would be welcome.

Screenshots

Okay, this is one of those ones I know I’m going to get a lot more use out of than most of you normal folks. Day to day, however, I’d say this is the feature I interact with the most. When you take a screenshot, a small thumbnail pops up in the bottom, right hand corner of the screen, similar to what you get on iOS.

It stays for a few seconds and then quickly slides off screen. It’s a quick and handy way to see if you got the job done. You can also click into the thumbnail to open it up to full size and edit it accordingly. Screenshots can now be saved to a number of different destinations to help avoid messing up your desktop, including Preview, Messages, Mail, Documents and Clipboard.

There’s a new control panel accessible by hitting Shift-Command-5. From here, you can capture the entire screen, capture a window, select a portion of the screen, record a video of the full screen or just record a piece of the screen. I used those last bits with a little less regularity, but all of the above really came in handy when putting together the images for this writeup.

Continuity Camera is a new feature worth mentioning in the same breath. It’s yet another avenue where the company is able to flex its cross-device functionality. The somewhat clunkily named feature is built into updates to first-party apps like Pages, Keynote, Numbers, Notes, Mail, Messages and Text Edit.

Once in the program, click Take Photo and it will utilize a connected iPhone or iPad to capture media. Take the shot, click Use Photo and boom, the image is inserted into the application. It’s a clever feature that works like a charm, though I’ll be honest — I haven’t found a ton of applications for it in my own life. The number of times I’ve been writing something on my laptop I felt would be enhanced by taking a shot of something nearby have been fairly limited, thus far.

That said, I could certainly see using it to scan a document into a PDF being a handy one. I probably could/should have used then when applying for a Chinese visa a few months back. With so many of these new features, however, the trick is making a point to make it a part of your workflow.

Finder

Gallery View is a nice tweak on the old Apple Cover flow feature, offering large thumbnails of files, with smaller, scrollable versions down below. Here, however, you get a full, straight on shot of the image. It’s particularly useful when scrolling through a lot of images quickly.

The addition of full metadata is clearly another bit aimed at appealing to professionals. Click a photo and you get a LOT of information in the side pane — more than most users will likely know what to do with. Along with the standard file size and dimensions, Apple now serves up things like camera model, aperture number and other EXIF data.

Quick Actions, meanwhile, brings some iPhone-style editing tools to the bottom of the side pane. From here, you can rotate an image — which is actually pretty helpful in my line of work — or mark it up in a number ways, including highlighting and the adding in a signature, a la Adobe PDF. Apple’s actually made Preview a bit redundant here, by bringing some of its best features directly to the desktop.

iOS apps on desktop

This is arguably the most interesting addition from an overall strategy perspective. Apple made a point of assuring its audience of developers and users that macOS and iOS are not merging, as has long been rumored. We all breathed a collective sigh of relief, before the company showed off one new way in which the lines are being further blurred.

The company is making it easier to convert mobile apps into a desktop versions. Why? For one thing, Apple would love it if more desktop applications were purchased through the Mac App Store — there are plenty of economic, ecosystem and security reasons for this, most of which should be fairly obvious. It’s also in the company’s best interest to have its most popular developers creating content for all of its platforms.

To kick things off, Apple made three of its own first-party apps available in desktop form: Voice Memos, Stocks, Home and News. Of the three, News is the one that’s made its way into my heavy rotation. It seems a bit silly to have a standalone news app, with all of the access desktop browsers afford. But after installing it and walking through the curation process, I’ve grown to appreciate the desktop notifications for breaking news.

Again, there are a thousand other ways to access that information, but News is a handy one-stop shop. That said, I rarely found myself interacting directly with the app. I mostly clicked through interesting notifications as they popped through. Thankfully, they never came through with too much frequency, which would be absolutely maddening.

Voice Memo is an interesting addition, as well. The cloud sharing with iOS devices is the killer app here. You can record something on your iPhone and listen to and edit it on the desktop. The use for desktop recording is a bit less clear. In most cases, it probably makes more sense to pull out your smartphone to record.

The gesture makes it clear that you’re recording the other person, it’s easier to move to device closer to the source of audio, and you don’t have to deal with the sound of your own typing during the recording process.

The desktop versions of iOS apps are also interesting from a UX perspective. Aside from scaling, not all that much appears to be tweaked — and that’s kind of the point. It’s a heck of a lot easier to essentially port something over than it is to rebuild from the ground up. Of course, without a touchscreen Mac, you’re interfacing with the applications through the cursor. In a few of my less proud moments, if found my hand wanting to reach out to tap the screen.

This is particularly the case with Home. The desktop version of Apple’s smart home app retains the square tiles from its predecessors. Still, the inclusion of the app in this original quartet makes sense from a user stand point. It’s handy, having access to all your connected home info in a single place accessible at work or on the road.

Odds and ends

Okay, time to bust out the bullet points.

  • That 32-person FaceTime chat is arriving some time later this fall on macOS. That will be a fun one to test — and I suspect a bit more manageable on a larger screen.
  • Both the Mac App Store and iTunes have gotten makeovers. The updates are in keeping with the company’s push toward editorial curation to help drive engagement. Anything that pays more humans to write about things like music is a good thing, in my book.
  • Your Mac will now ask for consent when apps access your camera or microphone, similar to what the company does on the iPhone. I people won’t be in a rush to remove the masking tape from their webcams, but this is definitely a good thing.
  • Safari’s protections have been beefed up. Passwords are stronger and last year’s cookie-busting Intelligent has been beefed up. Per Apple,

When you browse the web, the characteristics of your device can be used by advertisers to create a “fingerprint” to track you. Safari now thwarts this by only sharing a simplified system profile. And now improved Intelligent Tracking Prevention keeps embedded content such as social media Like buttons, Share buttons, and comment widgets from tracking you without your permission.

Time to upgrade

Is Mojave worth the upgrade? Well, yeah, duh. It’s free and brings a number of interesting new features. I’m not sure I’d call it a “love letter to developers,” to borrow a phrase from our iMac Pro review, but coupled with that new hardware, Apple’s clearly letting creatives know that there’s a place for them in the Mac’s future.

Your mileage will vary, of course, but I’ve found plenty of new features that integrate nicely into my own workflow. Stacks, Dark Mode and improved screenshots have all proven handy in the months I’ve been running the beta on both my work and personal systems. The final version of the operating system drops today for everyone, so you can partake without in all of those with a much more certainty.



from Apple – TechCrunch https://ift.tt/2ONwcoB

Apple closes its $400M Shazam acquisition and says the music recognition app will soon become ad free

Last year, we broke the news that Apple was buying the music recognition startup and app Shazam for about $400 million, and nearly one year later, the deal has finally closed. Today, Apple announced that it has completed the acquisition, and that it would soon be making the service ad free to use for everyone, removing the app’s ad-supported free tier.

“Apple and Shazam have a long history together. Shazam was one of the first apps available when we launched the App Store and has become a favorite app for music fans everywhere,” said Oliver Schusser, Apple’s vice president of Apple Music, in a statement. “With a shared love of music and innovation, we are thrilled to bring our teams together to provide users even more great ways to discover, experience and enjoy music.”

It’s not clear how Apple longer term will integrate Shazam’s core product into its service — a pretty clever piece of technology that can identify a song by hearing a fragment of it. The two main directions appear to be to let it continue to remain a standalone app longer term, or to subsume part or all of it into a bigger Apple Music offering. (The two are not mutually exclusive.)

At $400 million — a figure confirmed to us by several sources when we were first reporting on the deal — Shazam is one of Apple’s biggest acquisitions both in music and overall, and it underscores the amount of investment that the iPhone maker is willing to put into expanding its role as a force not just in hardware, but in the services that run on that hardware.

In music, it’s in hot competition with over-the-top providers like Spotify — which, along with Snap, was also looking into buying Shazam — and Pandor, (which is now going to be a part of SiriusXM. Other notable Apple acquisitions specifically in music have included the acquisition of Beats, which became the basis of Apple Music, which Apple acquired for $3 billion in 2014.

In May, Apple announced that it has passed the 50 million user mark for Apple Music.

The deal comes three weeks after the EU finally gave a green light to the deal after Apple first made public its intention to buy the startup. (We write “startup” only in name: it was venture-backed to the tune of about $143 million but had been around since 1999.)

The app has hundreds of millions of users and had passed 1 billion downloads back in September 2016, but it had never managed to turn a profit.

In September 2017, Shazam reportedly made £40.3 million ($54 million) in revenues in its 2016 fiscal year, which was a turnaround from the declines between FY 2014 and 2015. It made a statutory pre-tax loss of £4 million ($5.3 million) in 2016, which was still a loss but significantly smaller than the £16.6 million loss in FY 2015.

Although it is one of the most popular apps in the music category, Apple was not found to be making an antitrust violation in buying it.

“Any concerns in that respect were dismissed because Shazam’s data is not unique and Apple’s competitors would still have the opportunity to access and use similar databases,” the EU noted in its approval earlier this month.

More to come.



from Apple – TechCrunch https://ift.tt/2Dp4blN