Future iPhones could automatically detect nuisance callers using spoofed phone numbers

Written by

Malcolm Owen, Apple Insider:

Published on Thursday by the U.S. Patent and Trademark Office, Apple’s patent application for “Detection of spoofed call information” proposes a system where an iPhone or other mobile device could perform checks on a call to ascertain if it is genuine, then either warn the user of the problematic call or prevent it from disturbing the phone user at all.

This is a pretty interesting read. Seems like Apple is on to something here. God bless ’em if they can reduce the scourge of spam calling.

Hackers are using stolen Apple IDs to swipe cash in China

Written by

Bloomberg:

Ant Financial’s Alipay and Tencent Holdings Ltd. warned that cyber-attackers employed stolen Apple IDs to break into customers’ accounts and made off with an unknown amount of cash, in a rare security breach for China’s top digital payments providers.

Alipay, whose parent also operates the world’s largest money market fund, said on its Weibo blog that it contacted Apple and is working to get to the bottom of the breach. It warned users that’ve linked their Apple identities to any payment services, including Tencent’s WePay, to lower transaction limits to prevent further losses. Tencent said in a separate statement it too had noticed the cyber-heist and reached out to the iPhone maker.

And:

It’s unclear how the attackers may have gotten their hands on the Apple IDs, which are required for iPhone users that buy content such as music from iTunes or the app store. Apple representatives haven’t responded to requests and phone calls seeking comment.

As always, I take stories like this with a grain of salt. But this does not strike me as simple alarmist reporting. Clearly, there’s an underlying problem. But is the core of the issue about stolen Apple IDs? Lack of security on the part of those customers? A problem with the Alipay/WePay/Apple ID mechanism? Is this issue restricted to China?

Looking forward to hearing an official take from Apple.

Apple officially says iOS 12 is now in use on 50% of all iPhones and iPads

Written by

Benjamin Mayo, 9to5Mac:

Mixpanel reported that Apple had crossed the magic 50% milestone for iOS 12 at the weekend, and now Apple has released its first usage numbers which are based off visits to the App Store.

Apple says 50% of all devices are running iOS 12, and 53% of devices introduced within the last four years. This four year timespan metric is new, and it means that it only counts devices launched since September 2014 (iPhone 6 and later).

I would bet that these numbers would be even higher if there weren’t so many 8GB and 16GB phones out there. When your phone is full, it is no trivial matter to update to a new version of iOS.

Given that the absolute smallest capacity of Apple’s new line of phones is 64GB, I’d expect transition to new versions of iOS to come a lot faster over time, and for adoption rates to soar as older, smaller phones drop out of usage.

Side note: Here’s an Apple Support document talking you through updating your phone if space is an issue.

The moment last night’s Soyuz launch went bad

Written by

[VIDEO] Some heart pounding moments last night for space aficionados around the world, as the two-person crewed Soyuz rocket took off from the Kazakh launch base and then had to abort high above the Earth.

Follow the headline link and scroll all the way to the bottom to follow the launch from the start, scrolling up to reveal the sequence.

And watch the video embedded in the main Loop post to see the moment when everything went bad.

Both astronauts are back and safe on the ground.

How to use Apple News in Mojave regardless of where you live

Written by

Adam Engst, TidBITS:

Every time I’ve written about Apple News recently, I’ve received comments from readers outside of the US, UK, and Australia expressing annoyance that Apple restricts Apple News to just those three English-speaking countries. Even Canada is left out!

And:

The point is now moot for anyone running macOS 10.14 Mojave because there’s an easy workaround for people in unsupported countries.

Read on if this is you.

Everything you wanted to know about Activation Lock and iCloud Lock

Written by

Oleg Afonin, ElcomSoft:

Activation Lock, or iCloud Lock, is a feature of Find My iPhone, Apple’s proprietary implementation of a much wider protection system generally referred as Factory Reset Protection (FRP). Factory Reset Protection, or “kill switch”, is regulated in the US via the Smartphone Theft Prevention Act of 2015. The Act requires device manufacturers to feature a so-called “kill switch” allowing legitimate users to remotely wipe and lock devices. The purpose of the kill switch was to discourage smartphone theft by dramatically reducing resale value of stolen devices.

According to Apple, “Activation Lock is a feature that’s designed to prevent anyone else from using your iPhone, iPad, iPod touch, or Apple Watch if it’s ever lost or stolen. Activation Lock is enabled automatically when you turn on Find My iPhone. … Even if you erase your device remotely, Activation Lock can continue to deter anyone from reactivating your device without your permission. All you need to do is keep Find My iPhone turned on, and remember your Apple ID and password.”

Follow the headline link, nice explainer.

Apple plans to give away original content for free to device owners as part of new digital TV strategy

Written by

Alex Sherman, CNBC:

Apple is preparing a new digital video service that will marry original content and subscription services from legacy media companies, according to people familiar with the matter. Owners of Apple devices, such as the iPhone, iPad and Apple TV will find the still-in-the-works service in the pre-installed “TV” application, said the people, who asked not to be named because the details of the project are private.

The product will include Apple-owned content, which will be free to Apple device owners, and subscription “channels,” which will allow customers to sign up for online-only services, such as those from HBO and Starz.

Paralleling Amazon Prime Video, if you buy into the Apple ecosystem, you get Apple’s original content for free. This seems a reasonable strategy, as it reduces the pressure for Apple to have to produce content worth paying for, à la Netflix.

Seems to me, this is Apple easing their way into a market they have no experience with, reducing their chance of failure to almost zero. Over time, if they find the path to creating truly compelling content, they can ease into another business model.

Interesting take on Facebook Portal

Written by

Benjamin Mayo:

When a normal person sees a Portal, I don’t think they are going to turn a blind eye to it because of the existential fears of personal data exploitation. There are a handful of reasons why this product is going to fail in the market, but I don’t see privacy worries as a legitimate death-on-arrival poison.

I have to say, I don’t worry so much about the exploitation of my data, as much as I worry about Big Brother looking over my shoulder; The surveillance aspect more than the profiling aspect.

The key marketing point that Facebook is pushing here is video calls, through Messenger. I don’t get it. It just seems so much easier to talk on something that you can hold in your hand — be it a phone, tablet, or laptop in your lap — that you can freely move around with.

I totally agree with this take. I see little appeal to a non-portable video conferencing device. I do think Benjamin is right on this: The Facebook Portal will face an uphill battle in both perceived usability and security fears.

A future where everything becomes a computer is as creepy as you feared

Written by

Farhad Manjoo, New York Times:

More than 40 years ago, Bill Gates and Paul Allen founded Microsoft with a vision for putting a personal computer on every desk.

No one really believed them, so few tried to stop them. Then before anyone realized it, the deed was done: Just about everyone had a Windows machine, and governments were left scrambling to figure out how to put Microsoft’s monopoly back in the bottle.

This sort of thing happens again and again in the tech industry.

And:

The industry’s new goal? Not a computer on every desk nor a connection between every person, but something grander: a computer inside everything, connecting everyone.

And:

At a press event last month, an Amazon engineer showed how easily a maker of household fans could create a “smart” fan using Amazon’s chip, known as the Alexa Connect Kit. The kit, which Amazon is testing with some manufacturers, would simply be plugged into the fan’s control unit during assembly. The manufacturer also has to write a few lines of code — in the example of the fan, the Amazon engineer needed just a half-page of code.

And that’s it. The fan’s digital bits (including security and cloud storage) are all handled by Amazon. If you buy it from Amazon, the fan will automatically connect with your home network and start obeying commands issued to your Alexa. Just plug it in.

All of this is happening without any sort of oversight. Over time, we’ll have built a dystopiaNet that rides along the regular internet, unregulated, free of any sort of protections, while we whistle happily away.

Good read.

Why does Google need hardware?

Written by

Shira Ovide, Bloomberg:

In 2017 and the first half of this year, Google shipped about 5 million Pixel smartphones worldwide, according to the research firm IDC. Apple Inc. sells as many iPhones in about eight days as Google did in 18 months — and even Apple has a relatively small minority market share in smartphones.

And:

Small numbers aren’t confined to Google, either. Journalists like me can’t stop talking about the “runaway success” of the Echo devices, Amazon.com Inc.’s rapidly expanding lineup of voice-activated home doodads. Amazon sold about 3.6 million of the two most popular Echo models from April to June, Strategy Analytics estimated. Fitbit, a company that journalists like me stopped talking about long ago, sold 2.7 million motion-tracking gadgets in the same period.

And:

For most software or internet tech empires, hardware is a niche hobby, and it will remain so for the foreseeable future.

It take a lot of R&D dollars, fragmentation of company focus, to design, test, build, and ship a hardware product. Why does Google do it? Interesting question.

Rolling your own Apple Watch face

Written by

Developer Steve Troughton-Smith used SpriteKit to create his own Apple Watch face:

https://twitter.com/stroughtonsmith/status/1049803260478009344

This is an end-around, bypassing Apple’s lack of support for 3rd party watch faces. Scroll through the Twitter thread, check out all the faces. I hope Apple allows this bit of a market to evolve, eventually adding official support.

One concern about all this is the fear that Apple would be liable for watch face copyright infringement. Some say that that’s the reason Apple does not allow 3rd party watch faces. Does this eliminate that liability? Will Apple allow this to continue?

Stay tuned.

Google announces Call Screen, a feature Apple should copy

Written by

Buzzfeed:

To help you avoid calls from scammers, Google is adding Call Screen to the Pixel, a new option that appears when you receive a phone call. Whenever someone calls you, you can tap a “Screen call” button, and a robot voice will pick up.

And:

“The person you’re calling is using a screening service and will get a copy of this conversation. Go ahead and say your name and why you’re calling,” the Google bot will say. As the caller responds, the digital assistant will transcribe the caller’s message for you. If you need more information, you can use one of the feature’s canned responses, which include “Tell me more” and “Who is this?” There are also buttons to either pick up or hang up the call, so you can accept or reject it at any time.

I wonder if it’d be possible for Apple to implement a feature like this that let you actually screen the call screening audio as it happens. In other words, the phone rings, ScreenBot answers, and you hear the back and forth with ScreenBot, then you jump into the call if it’s someone you know.

As is, sounds like Google’s Call Screen is all done via text transcription, rather than via listen-in audio. Could be wrong about this. We’ll know for sure once it ships.

Trailer for season two of Apple’s Carpool Karaoke

Written by

[VIDEO] I wonder what Apple’s business model is here. They made a second season, so the show has got to have some value to Apple. Is this purely filling the content pipeline, in preparation for the eventual launch of Apple’s media service? The trailer is embedded in the main Loop post.

iPhone XS vs $10K Canon C200 cinema camera

Written by

[VIDEO] Interesting setup, comparison. A few comments:

When viewed the footage on a small iPhone scene they both looked fantastic. I was impressed to say the least but it all fell apart when viewing in fullscreen on my 27inch iMac. Too much sharpening meant the details just got lost and all the leaves with details just got smushed together. The C200 still looked great.

No surprise there. But:

The dynamic range however is super impressive. it’s able to keep the highlights on the bright sun while keeping details in the shadows. This is some crazy multiple exposure processing thats been done.

And:

In conclusion the iPhone camera is a smartphone camera and always will be. It is incredibly small but to be honest give completely mind blowing results.

And:

Is it as good as a cinema camera, not at all. Is it the best camera I have ever seen on a smartphone? 100%.

Good stuff. Watch the video (embedded in the main Loop post). [Via 9to5Mac]

How to delete your Google+ account

Written by

Washington Post:

Hundreds of thousands of accounts on Google’s long-suffering social media service, Google+, may have been affected by a security flaw, the company said Monday, exposing personal information such as names and email addresses.

In the wake of the accidental exposure, Google said it is planning to shut down Google+ for consumers. But that will not happen for about 10 months. If you are wondering whether you still have a Google+ account — and if so, how to delete it — you can follow these instructions.

If nothing else, good to know how to tell if you have a Google Plus profile tied to your Google account.

Apple discontinues Lightning to 30-pin adapter

Written by

Had to read this headline a few times. I’m amazed that this adapter is still a thing after all these years.

It’s been six years since Lightning was introduced. But Apple wouldn’t be selling if people weren’t buying.

Apple’s letter to Congress

Written by

This is the actual letter Apple sent to Congress calling the recent Bloomberg account of compromised servers and a spy chip untrue.

This is interesting both for the content of the letter (it’s short, an easy read) and the fact that you are seeing a copy of the actual letter.

TIL Safari on iOS 12 has built-in protection against fake software keyboard

Written by

Reddit:

Safari on iOS 12 has a security mechanism in place to make sure malicious websites aren’t displaying a software keyboard that mimics the iOS one in order to act as a keylogger.

To trigger the warning: open a webpage in full-screen mode, for example a full-screen video on YouTube’s mobile website. Then tap several times at the bottom of the screen, as if you were typing on an invisible keyboard.

A warning message will appear telling you the website may be showing you a fake keyboard to trick you into disclosing personal or financial information.

Worth reading the comments on this page.

Note that this seems to only work on an iPad (something to do with the way iPad supports a full-screen mode that iPhone does not).

I have not been able to replicate this, but I am running a beta, so that might be an issue. A number of people have replicated this. If you can, please do ping me with specifics.

And here’s a screen shot of the warning message.

Jeff Benjamin’s Apple Watch Series 4 video

Written by

[VIDEO] The beginning of the video (embedded in the main Loop post) is all about unboxing. If you want to skip ahead to the actual features, jump to about five minutes in.

One thing Jeff does that really shows off the difference between Apple Watch Series 3 and Series 4? He puts both on his wrist at the same time, so you really get a sense of how much more screen real estate you get with the Series 4. Nicely done.

How to delete Facebook and not lose your friends (and photos)

Written by

This was an interesting read, an update on downloading your Facebook data more than anything else. The author ends up with a JSON version of their friend list, which is really just a list of friend names.

It’d be interesting if there was a way to end up with a JSON list of links to your friends as part of this process. Though, personally, I’m shed of the whole thing.

AnandTech’s iPhone XS and XS Max review

Written by

This is a really detailed review, with no kowtowing to Apple. One particular point worth highlighting:

The Apple A12 is a beast of a SoC. While the A11 already bested the competition in terms of performance and power efficiency, the A12 doubles down on it in this regard, thanks to Apple’s world-class design teams which were able to squeeze out even more out of their CPU microarchitectures. The Vortex CPU’s memory subsystem saw an enormous boost, which grants the A12 a significant performance boost in a lot of workloads. Apple’s marketing department was really underselling the improvements here by just quoting 15% – a lot of workloads will be seeing performance improvements I estimate to be around 40%, with even greater improvements in some corner-cases. Apple’s CPU have gotten so performant now, that we’re just margins off the best desktop CPUs; it will be interesting to see how the coming years evolve, and what this means for Apple’s non-mobile products.

Good read.

TidBITS: Why SMS is not reliable for two factor authentication

Written by

Glenn Fleishman, TidBITS:

Many Web sites and apps now offer two-factor authentication (2FA), which requires you to enter a short numeric code—the so-called second factor—in addition to your username and password. These temporary codes are either sent to you via text message or are generated by an authentication app. In iOS 12 and macOS 10.14 Mojave, Apple has streamlined entering such codes when sent via an SMS text message, reducing multiple steps and keyboard entry to a single tap or click.

I explain just below how this new feature works, but I also want to raise a caution flag. SMS is no longer a reliable way to send a second factor because it’s too easy for even small-time attackers to intercept those messages.

Read the article, especially the section titled “It’s Easy to Hijack SMS Codes”.

Oddly satisfying videos

Written by

[VIDEO] These videos (the first one is embedded in the main Loop post) really click for me. There’s a sense of the real world about these objects, a sense of gravity-obeying mass.

Apple’s new proprietary software locks kill independent repair on new MacBook Pros

Written by

Jason Koebler, Motherboard:

Apple has introduced software locks that will effectively prevent independent and third-party repair on 2018 MacBook Pro computers, according to internal Apple documents obtained by Motherboard. The new system will render the computer “inoperative” unless a proprietary Apple “system configuration” software is run after parts of the system are replaced.

According to the document, which was distributed to Apple’s Authorized Service Providers late last month, this policy will apply to all Apple computers with the “T2” security chip, which is present in 2018 MacBook Pros as well as the iMac Pro.

I’m looking forward to reading a response from Apple on this issue. I can’t imagine, if true, that this is an effort from Apple to keep all those sweet, sweet repair dollars all to themselves. I’d expect this has something to do with protecting the chain of security, preventing malware from somehow gaining a foothold.

Grain of salt.

PSA: When you switch phones and you have your health data in the cloud, be very, very patient for it to come back

Written by

Reddit user u/pilif:

Since September of 2016 I’m running daily and tracking the runs with the Apple Watch. Sometime last year, I have told iCloud to store the health data in the cloud and now that I have updated to an XS Max, I noticed that most of my past workout data was gone.

Don’t worry though – it’s still there, the phone downloaded 2228 (in my case) files that contain the actual workout data and it’s processing them one by one.

But the kicker: This can only run while the phone is unlocked. When it’s locked, /var/mobile/Library/Health becomes inaccessible and the process stops.

This is a solid PSA. I hear complaints about lost “ring closing” data all the time, from people who switch to a new iPhone and fear they’ve lost their workout history. Read the rest for a way the more ambitious of you can track the transfer progress.