Power

'Your AirPods Will Die Soon' -- The Shrinking Charge Capacities of Lithium-Ion Batteries (theatlantic.com) 250

Some of the same podcasters who first extolled AirPods are now complaining about them, reports the Atlantic: The battery can no longer hold a charge, they say, rendering them functionally useless. Apple bloggers agree: "AirPods are starting to show their age for early adopters," Zac Hall, an editor at 9to5Mac, wrote in a post in January, detailing how he frequently hears a low-battery warning in his AirPods now. Earlier this month, Apple Insider tested a pair of AirPods purchased in 2016 against a pair from 2018, and found that the older pair died after two hours and 16 minutes. "That's less than half the stated battery life for a new pair," the writer William Gallagher concluded. Desmond Hughes, who is 35 and lives in Newport News, Virginia, has noticed a similar thing about his own set: At first, their charge lasted five hours, but now they sometimes last only half an hour. He frequently listens to one while charging the other -- not optimal conditions for expensive headphones. He's now gearing up to plunk down more money on another pair....

The lithium-ion batteries that power AirPods are everywhere. One industry report forecast that sales would grow to $109.72 billion by 2026, from $36.2 billion in 2018. They charge faster, last longer, and pack more power into a small space than other types of batteries do. But they die faster, too, often after just a few years, because every time you charge them, they degrade a little. They can also catch fire or explode if they become damaged, so technology companies make them difficult, if not impossible, for consumers to replace themselves. The result: A lot of barely chargeable AirPods and wireless mice and Bluetooth speakers are ending up in the trash as consumers go through products -- even expensive ones -- faster than ever....

Of the 3.4 million tons of electronic waste generated in America in 2012 -- an 80 percent increase from 2000 -- just 29 percent was recycled.

The article notes that Wednesday Apple announced a new generation of AirPods -- but "did not say whether the devices would have longer lives."

They also report that Apple "does allow consumers to pay for what it calls a 'battery replacement' for AirPods, but each 'replaced' AirPod is $49."
Cloud

How The FBI Easily Retrieved Michael Cohen's Data From Both Apple and Google (cnn.com) 153

Court documents unsealed Tuesday showed just how much information America's FBI was able to gather on Donald Trump's lawyer Michael Cohen -- from both Google and Apple products. An anonymous reader quotes CNN: Notably, the FBI made use of Cohen's use of Touch ID and Face ID on his Apple devices, which allow users to quickly log into iPhones and computers by scanning their face or fingerprint rather than typing in a password... But that gives law enforcement an additional means to access those devices. In one warrant application for Cohen, an FBI agent requested authorization "to press the fingers (including thumbs) of Cohen to the Touch ID sensors of the Subject Devices, or hold the Subject Devices in front of Cohen's face, for the purpose of attempting to unlock the Subject Devices via Touch ID or Face ID...."

One warrant requested not simply access to three of Cohen's Gmail accounts, as well as other email accounts, but also some of the wide array of information Google keeps for its users by default, including search history, web cookies associated with an account, device information, and a host of other metadata categories. One affidavit describes how the FBI narrowed down Cohen's temporary location at the Loews Regency Hotel in New York through his cell phone location data. Agents then used a "triggerfish" -- a reference to a stingray, or IMSI catcher, a suitcase-sized device that mimics a cell tower to convince a cell phone to connect and reveal its location...

Prosecutors also made use of a new law that Trump recently signed. Investigators in the Southern District of New York compelled Google to turn over some documents on Cohen, but the tech giant initially "declined to produce data that it stored on computer servers located outside of the United States," according to an affidavit submitted to the court by an FBI agent working on Cohen's case. Weeks later, Trump signed the CLOUD Act into law, which gave US law enforcement more legal pathways to pursue data stories overseas.... In an April 2018 affidavit, the FBI agent argued that "providers are required to disclose data even if it is stored abroad" under the new law. The judge approved the new search warrant later that day, giving investigators access to additional information from Google, including Cohen's emails, attachments, address book and files stored on Google Drive.

One technology law expert told CNN that police now seek access to more and more information.

"I think any of the electronic debris that people leave online on these services is all potentially subject to being used against you."
News

The New York Times CEO Warns Publishers Ahead of Apple News Launch (reuters.com) 55

An anonymous reader shares a report: Apple is expected to launch an ambitious new entertainment and paid digital news service on Monday, as the iPhone maker pushes back against streaming video leader Netflix. But it likely will not feature the New York Times. Mark Thompson, chief executive of the biggest U.S. newspaper by subscribers, warned that relying on third-party distribution can be dangerous for publishers who risk losing control over their own product. "We tend to be quite leery about the idea of almost habituating people to find our journalism somewhere else," he told Reuters in an interview on Thursday. "We're also generically worried about our journalism being scrambled in a kind of Magimix (blender) with everyone else's journalism."
Businesses

Apple's Plan For Its New TV Service: Sell Other People's TV Services (recode.net) 95

An anonymous reader quotes a report from Recode: After years of circling the TV business, Apple is finally ready to make its big splash: On Monday it will unveil its new video strategy, along with some of the new big-budget TV shows it is funding itself. One thing Apple won't do is unveil a serious competitor to Netflix, Hulu, Disney, or any other entertainment giant trying to sell streaming video subscriptions to consumers. Instead, Apple's main focus -- at least for now -- will be helping other people sell streaming video subscriptions and taking a cut of the transaction. Apple may also sell its own shows, at least as part of a bundle of other services. But for now, Apple's original shows and movies should be considered very expensive giveaways, not the core product.

All of this might very well work. Apple has an installed base of 1.4 billion users, and some of them will buy the things Apple promotes: Look at the success of Apple Music, which launched seven years after Spotify but quickly amassed 50 million subscribers due to a free trial period and prominent real estate on Apple's devices. Another reason this could work: Amazon has already been very successful with its own version of the same idea. Facebook is also bullish on selling TV subscriptions and is pushing would-be partners to sign up so it can launch later this spring or summer, according to industry sources. Similarly, Comcast (which is a minority investor in Vox Media, which owns this site) is rolling out Flex, a $5-a-month service that gives you a bunch of free content (some of which you can also get other places) and the ability to easily buy HBO, Showtime, etc. Instead of offering exclusive content, Comcast is offering subscribers a Roku-like streaming box.
According to people who've talked to Apple about its plans, Apple's new TV service will consist of selling TV subscription apps surrounded by millions of other apps in its main app store. "Apple plans on making a new storefront that's much more prominent for those who use Apple TV boxes and other Apple hardware," reports Recode. "It will also be able to offer its own bundles -- for instance, it could offer a package of HBO, Showtime, and Starz at a price that's lower than you'd pay for each pay TV service on its own."
Portables (Apple)

Is It Time For Apple To Acknowledge Flexgate? (macobserver.com) 92

In January 2019, iFixit revealed a design flaw where the ribbon cable that connects the body of some MacBook Pros to their display wears down too quickly, causing uneven backlighting at the bottom of the display. There now appears to be growing frustration among users at Apple's reaction. Vlad Savov from The Verge said it is time for the company to acknowledge and deal with the issue: A petition, now numbering more than 15,000, would beg to differ. It calls for Apple to publicly recognize Flexgate as a design flaw, and to commit to repair all MacBook Pro laptops affected by it. I think that's exactly what Apple should do, and it's no less than we should expect from a company that touts its reliability and user satisfaction numbers any chance it gets. No one should have to pay upwards of $500 to replace an entire display just because Apple (a) decided to affix a fragile cable to one of the most expensive components in its MacBook Pro, and (b) miscalculated the necessary length of that cable in its first design.
Television

Netflix Won't Join Apple's Video Streaming Service (cnet.com) 46

Netflix CEO Reed Hastings confirmed that his company won't be playing a role in Apple's upcoming video streaming service. From a report: "We want to have people watch our content on our service," he said Monday. "We've chosen not to integrate into their service." Apple is expected to reveal its offering at an event next Monday. Apple is trying to supplement its original shows by finalizing deals with networks like HBO, Showtime and Starz to license a library of already released content. Hastings pointed out that Netflix has already been competing with Amazon, so it's used to rivals with deep pockets. "You do your best job when you have great competitors," he said, but he acknowledged that sourcing original content is getting more expensive.
iMac

The Most Powerful iMac Pro Now Costs $15,927 (vice.com) 201

Apple recently updated the upgrade options for the iMac Pro, and getting the very best will cost you. A baseline model will cost you just under $5,000, and maxing out the hardware to absurd heights runs a whopping $15,927. An anonymous reader writes: The most expensive possible upgrade is a $5,200 charge for upgrading the RAM from 32GB to a startling 256GB. Other addons include an additional $700 for a 16GB Radeon video card and $2,400 for a 2.3 Ghz Intel processor with 18 cores. Almost $16,000 is a lot of money for a computer, especially one so overpowered that there are very few reasonable applications of its hardware. Most people will never need more than 16GB of RAM to play video games, and 32-64GB will take care of most video editing and 3D modeling tasks. With 256GB of RAM, you could run advanced AI processes or lease computing power to other people.
iMac

Apple Finally Updates the iMac With Significantly More Powerful CPU and GPU Options (arstechnica.com) 143

Today, Apple will finally begin taking orders for newly refreshed 21- and 27-inch iMacs. The new versions don't change the basic design or add major new features, but they offer substantially faster configuration options for the CPU and GPU. From a report: The 21.5-inch iMac now has a 6-core, eighth-generation Intel CPU option -- up from a maximum of four cores before. The 27-inch now has six cores as the standard configuration, with an optional upgrade to a 3.6GHz, 9th-gen, 8-core Intel Core i9 CPU that Apple claims will double performance over the previous 27-inch iMac. The base 27-inch model has a 3GHz 6-core Intel Core i5 CPU, with intermediate configurations at 3.1GHz and 3.7GHz (both Core i5). The big news is arguably that both sizes now offer high-end, workstation-class Vega-graphics options for the first time. Apple added a similar upgrade option to the 15-inch MacBook Pro late last year. In this case, the 21.6-inch iMac has an option for the 20-compute-unit version of Vega with 4GB of HBM2 video memory. That's the same as the top-end 15-inch MacBook Pro option.

The 27-inch iMac can now be configured with the Radeon Pro Vega 48 with 8GB of HBM2. For reference, the much pricier iMac Pro has Vega 56 and Vega 64 options. Apple claims the Vega 48 will net a 50-percent performance improvement over the Radeon Pro 580, the previous top configuration. Speaking of the previous top configuration, the non-Vega GPU options are the same as what was available yesterday. The only difference is that they now have an "X" affixed to the numbers in their names, per AMD branding conventions -- i.e., Radeon Pro 580X instead of 580. RAM options are the same in terms of volume (up to 32GB for the 21.5-inch and 64GB for the 27-inch), but the DDR4 RAM is slightly faster now, at 2666MHz.

IOS

Apple Announces 10.5-inch iPad Air and Refreshed iPad Mini (engadget.com) 112

Ahead of a planned event next week, Apple today unveiled two new iPads. From a report: The new, larger, 10.5-inch iPad Air will arrive with a 70 percent performance boost compared to its predecessor, thanks to the company's A12 Bionic chip with Apple's Neural Engine. That'll be useful alongside the now 20-percent larger display -- which is compatible with the first-gen Apple Pencil too.

A new iPad Mini has been a long time coming. The 7.9-inch option will, barring screen size, match the Air on specs. The screen is also 25 percent brighter versus old iPad minis, and will also support Apple Pencil -- the tiniest model to do so. Both new iPads have a laminated display that brings the surface glass and screen closer together to improve visibility -- and making them at least a little more desirable than Apple's entry-level iPad. Neither has FaceID built-in, it seems. Look, there's that Home button.
The new iPad mini starts at $399 for the Wi-Fi model and $529 for the variant that includes cellular support. The new iPad Air starts at $499 for Wi-Fi, and $629 for Wi-Fi and cellular model.
Medicine

Massive Study Finds Apple Watch Can Detect Undiagnosed Heart Rhythm Problems (engadget.com) 67

An anonymous reader quotes Engadget: Researchers from Stanford University's School of Medicine presented results from a giant study sponsored by Apple Inc. that showed the Apple Watch can sometimes spot patients with undiagnosed heart-rhythm problems, without producing large numbers of false alarms. The Apple-sponsored trial enrolled 419,297 people and was one of the largest heart-screening studies ever.

The study, details of which are being presented today at the American College of Cardiology conference in New Orleans, used the watch's sensors to detect possible atrial fibrillation... People who have atrial fibrillation are at risk of blood clots and strokes. In the U.S., it causes 750,000 hospitalizations a year and contributes to 130,000 deaths, according to the Centers for Disease Control and Prevention. Because it doesn't always produce outward symptoms, it can go undiagnosed. According to results presented Saturday, about 0.5 percent of patients in the study -- or almost 2,100 people -- received notices from their watch indicating that they might have a heart-rhythm problem. That relatively low number showed that the technology wasn't inundating people with worrisome alerts.

People receiving a notification were asked to then wear an ECG (electrocardiography) patch, according to the Verge, adding that Stanford reports "84 percent of the time, participants who received irregular pulse notifications were found to be in atrial fibrillation at the time of the notification."

The dean of Stanford's medical school says the study "opens the door to further research into wearable technologies and how they might be used to prevent disease before it strikes."
Patents

Apple Dealt Legal Blow as Jury Awards Qualcomm $31 Million (cnet.com) 47

Apple violated three Qualcomm patents and should pay the chipmaker $31 million for infringing on its technology, a jury decided Thursday, giving Qualcomm momentum as it heads into another legal skirmish with the iPhone maker next month. From a report: Qualcomm, which filed the suit in July 2017, alleged Apple had used its technology without permission in some versions of its popular iPhone. The jury awarded Qualcomm the full amount it requested at the start of the two-week trial, which was held in San Diego. One disputed Qualcomm patent covers technology that lets a smartphone quickly connect to the internet once the device is turned on. Another deals with graphics processing and battery life. The third addresses technology that shifts traffic between a phone's apps processor and modem. The $31 million in damages -- or $1.41 per infringing iPhone -- is a drop in the bucket for Apple, a company that briefly became a $1 trillion company last year. But it marks an important victory for Qualcomm, burnishing its reputation as a mobile components innovator. The win also lends credibility to the notion that much of the company's innovation is reflected in iPhones.
Businesses

Apple Says Spotify Wants 'the Benefits of a Free App Without Being Free' (engadget.com) 215

Apple has responded to Spotify's European Commission (EC) complaint. In a press release, the company said that Spotify "seeks to keep all the benefits of the App Store ecosystem ... without making any contributions to that marketplace." It added that the App Store has generated $120 billion for developers while offering users a secure platform, and that Spotify is seeking to side to sidestep the rules that every other app follows. From a report: "Spotify has every right to determine their own business model, but we feel an obligation to respond when Spotify wraps its financial motivations in misleading rhetoric about who we are," the company wrote. Spotify's main argument was that Apple's own music service, Apple Music, isn't subject to the same restrictions of its own app. "[A]pps should be able to compete fairly on the merits, and not based on who owns the App Store," wrote CEO Daniel Ek. "We should all be subject to the same fair set of rules and restrictions -- including Apple Music." It added that Apple had often stymied it on app updates and locked it out of Apple services, "such as Siri, HomePod and Apple Watch." Finally, it noted that Apple had blocked communication with its own customers on things like special offers. In response, Apple addressed each complaint point by point, while criticizing Spotify's treatment of musicians and artists. It said that it has approved nearly 200 app updates, and "the only time we have requested adjustments is when Spotify has tried to sidestep the same rules that every app follows."
Businesses

Spotify Files Complaint Against Apple With the European Commission Over 30% Tax and Restrictive Rules (spotify.com) 257

Spotify today filed a complaint with EU antitrust regulators against Apple, saying the iPhone maker unfairly limits rivals to its own Apple Music streaming service. Spotify CEO Daniel Ek writes in a blog post: In recent years, Apple has introduced rules to the App Store that purposely limit choice and stifle innovation at the expense of the user experience -- essentially acting as both a player and referee to deliberately disadvantage other app developers. After trying unsuccessfully to resolve the issues directly with Apple, we're now requesting that the EC take action to ensure fair competition. Apple operates a platform that, for over a billion people around the world, is the gateway to the internet. Apple is both the owner of the iOS platform and the App Store -- and a competitor to services like Spotify. In theory, this is fine. But in Apple's case, they continue to give themselves an unfair advantage at every turn.

To illustrate what I mean, let me share a few examples. Apple requires that Spotify and other digital services pay a 30% tax on purchases made through Apple's payment system, including upgrading from our Free to our Premium service. If we pay this tax, it would force us to artificially inflate the price of our Premium membership well above the price of Apple Music. And to keep our price competitive for our customers, that isn't something we can do. As an alternative, if we choose not to use Apple's payment system, forgoing the charge, Apple then applies a series of technical and experience-limiting restrictions on Spotify.

For example, they limit our communication with our customers -- including our outreach beyond the app. In some cases, we aren't even allowed to send emails to our customers who use Apple. Apple also routinely blocks our experience-enhancing upgrades. Over time, this has included locking Spotify and other competitors out of Apple services such as Siri, HomePod, and Apple Watch. We aren't seeking special treatment. We simply want the same treatment as numerous other apps on the App Store, like Uber or Deliveroo, who aren't subject to the Apple tax and therefore don't have the same restrictions.

Chrome

Chrome 73 Arrives With Support For Hardware Media Keys, PWAs and Dark Mode On Mac (venturebeat.com) 25

An anonymous reader quotes a report from VentureBeat: Google today launched Chrome 73 for Windows, Mac, and Linux. The release includes support for hardware media keys, PWAs and dark mode on Mac, and the usual slew of developer features. You can update to the latest version now using Chrome's built-in updater or download it directly from google.com/chrome. Chrome 73 supports Progressive Web Apps (PWAs) on macOS. These apps install and behave like native apps (they don't show the address bar or tabs). Google killed off Chrome apps last year and has been focusing on PWAs ever since. Adding Mac support means Chrome now supports PWAs on all desktop and mobile platforms: Windows, Mac, Linux, Chrome OS, Android, and iOS. Chrome now also supports dark mode on Apple's macOS; dark mode for Windows is on the way, the team promises.

The VentureBeat report includes a long list of developer features included in this release, as well as all the security fixes found by external researchers. Chrome 73 implements a total of 60 security fixes.
Television

Apple Confirms March 25th Event, Expected To Announce New TV Service (theverge.com) 38

Apple is holding an event on March 25th where it's expected to announce its long-rumored TV streaming and Apple News subscription services. The invitation shows an animated countdown GIF with the caption "It's show time," hinting that the new TV service will play a big role. The Verge reports: Rumors of an event at the end of March began last month, saying that the company will reportedly focus exclusively on services. Although, there is always a chance that we could see the anticipated announcements of revamped AirPods, a new entry-level iPad, and the long-delayed AirPower wireless charging pad. This is not the first time that Apple has used this tagline for an event: the company first used it for a September 2006 event where it announced that it would start offering movies on iTunes, along with the first reveal of the iTV (which would be renamed Apple TV on release in 2007). It's certainly a fitting teaser for the upcoming event. Just like in 2006, we could see Apple's media offerings for its devices expand yet again.

Along with the TV service, which is rumored to launch later this spring, Apple is also expected to take the wraps off its Apple News subscription service. The Apple News service will reportedly look to offer a Netflix-style bundle for magazines and subscription newspapers all in one convenient place. An early report from The Wall Street Journal indicated that Apple was having trouble with negotiations, reportedly demanding a staggering 50 percent of revenue from the service.

Businesses

Apple Is Now Forcing Its Suppliers to Go 'Green' (afr.com) 114

Apple is already running on 100% green energy, according to Fast Company. But Apple is still "keen to show it's a good corporate citizen," reports the Australian Financial Review: Apple's annual supplier responsibility report released on Thursday revealed 20 manufacturing supplier facilities had been removed from the company's supply chain for breaches of environmental permits or workplace rules. "Smelters and refiners deeper in our supply chain are held to similar standards and if they exhibit a lack of commitment to meet our supplier code of conduct, they risk losing Apple's business," the report said...

In 2018, Apple completed 770 audits of its supplier manufacturing facilities, logistics and repair centres and contact centre facilities. There were also 279 third-party mineral smelter and refiner audits conducted... Apple's 13th annual supplier responsibility progress report said all final assembly points for iPhone, iPad, Mac, Apple Watch, AirPods and HomePod, were now certified zero waste to landfill, while conserving billions of litres of water and reducing greenhouse gas emissions.

Apple's suppliers in 45 countries have diverted 1 million tonnes of garbage in three years, saved 28.7 gigalitres of water and reduced greenhouse gas emissions by more than 466,000 annualised metric tons, which is the equivalent to taking 100,000 cars off the road for one year.

Desktops (Apple)

Prioritizing the MacBook Hierarchy of Needs (sixcolors.com) 240

Jason Snell, writing for Six Colors: This week on the Accidental Tech Podcast (ATP), John Siracusa floated the concept of a MacBook Hierarchy of Needs, a priority list of features for the next time Apple redesigns the MacBook line, as is rumored to happen later this year. It's a fun thought experiment, because it requires you to rank your wish list of laptop features. That's important, because if I've learned anything in this wacky world of ours, it's that you can never get everything you ask for, so you've got to prioritize.

The ATP hosts all made a "good keyboard" their top priority, an idea that would've been surprising a few years ago but now is almost a given. Yes, of course, Apple laptops need to be fast and reliable and have great displays and good battery life, but the past few years' worth of MacBooks have made a lot of people realize the truth: a bad/unreliable laptop keyboard isn't something you can really work around if you're a laptop user. This is why a lot of nice-to-have-features, like SD card slots, have to fall way down the hierarchy of needs. Any feature that can be rectified with an add-on adapter falls immediately to the bottom of the list. You're stuck with a laptop keyboard forever, and if you're committed to the Mac and every single Mac laptop that's sold uses the exact same keyboard, there's nowhere to run.

Music

Spotify, Google, Pandora, Amazon Go To US Appeals Court To Overturn Royalty Increase (variety.com) 35

Spotify, Google, Pandora and Amazon have teamed up to appeal a controversial ruling by the U.S. Copyright Royalty Board that, if it goes through, would increase payouts to songwriters by 44%, Variety is reporting. From the report: A joint statement from the first three of those companies reads: "The Copyright Royalty Board (CRB), in a split decision, recently issued the U.S. mechanical statutory rates in a manner that raises serious procedural and substantive concerns. If left to stand, the CRB's decision harms both music licensees and copyright owners. Accordingly, we are asking the U.S. Court of Appeals for the D.C. Circuit to review the decision."

The four companies all filed with the court separately. Sources say that Apple Music is alone among the major streaming services in not planning to appeal -- as confirmed by songwriters' orgs rushing to heap praise on Apple while condemning the seemingly unified front of the other digital companies.

PlayStation (Games)

PS4's Remote Play Update Lets You Stream To iOS Devices (theverge.com) 38

Version 6.50 of the PlayStation 4's firmware now allows you to remotely play your PS4 games from an iPhone or iPad. "To access it, you'll need to download the Remote Play app for your iOS device, and then pair it with your console," reports The Verge. "Compatible games can then be played over Wi-Fi using the on-screen buttons." From the report: Announced back in 2013, Remote Play originally let you stream games from a PS4 console to the handheld PlayStation Vita, but later in 2016, Sony released Remote Play apps for both Windows and Mac. Although Sony has yet to announce a broader Android version of the service, the existence of an Android version of the app that's exclusive to Sony Xperia phones suggests there aren't any technical barriers. Bringing the functionality to iOS is a huge expansion for Remote Play, although it's a shame that you're not officially able to pair a DualShock 4 controller with the app via Bluetooth for a more authentic experience (although some users have reported being able to get the controller working via a sneaky workaround). If you're prepared to use a non-Sony controller, then you'll be happy to know that MacStories is reporting that other MFi gamepads (such as the SteelSeries Nimbus) work just fine with the iOS app. Other limitations with the functionality are that you'll need an iPhone 7 or 6th-generation iPad or later to use it, and it's also only available over Wi-Fi. You can't use Remote Play from another location over a mobile network.

PS4 version 6.50 also adds the ability for you to remap the X and O buttons on the controller.
Security

Google's Project Zero Team Releases Details On High-Severity macOS Bug 'BuggyCow' (wired.com) 40

Google's bug-hunting researchers known as Project Zero have revealed a fresh zero-day vulnerability in macOS called "BuggyCow." "The attack takes advantage of an obscure oversight in Apple's protections on its machines' memory to enable so-called privilege escalation, allowing a piece of malware with limited privileges to, in some cases, pierce into deeper, far more trusted parts of a victim's Mac," reports Wired. "The trick's name is based on a loophole the hackers found in the so-called copy-on-write, or CoW, protection built into how MacOS manages a computer's memory." From the report: Some programs, when dealing with large quantities of data, use an efficiency trick that leaves data on a computer's hard drive rather than potentially clog up resources by pulling it into memory. That data, like any data in a computer's memory, can sometimes be used by multiple processes at once. The MacOS memory manager keeps a map of its physical location to help coordinate, but if one of those processes tries to change the data, the memory manager's copy-on-write safeguard requires it to make its own copy. Which is to say, a program can't simply change the data shared by all the other processes -- some of which could be more highly privileged, sensitive programs than the one requesting the change.

Google's BuggyCow trick, however, takes advantage of the fact that when a program mounts a new file system on a hard drive -- basically loading a whole collection of files rather than altering just one -- the memory manager isn't warned. So a hacker can unmount a file system, remount it with new data, and in doing so silently replace the information that some sensitive, highly privileged code is using. Technically, as a zero-day vulnerability with no patch in sight, BuggyCow applies to anyone with an Apple laptop or desktop. But given the technical skill and access needed to pull it off, you shouldn't lose much sleep over it. To even start carrying out this Rube Goldberg -- style attack, a hacker would need a victim to already have some form of malware running on their computer. And while BuggyCow would allow that malware to potentially mess with the inner workings of higher-privileged parts of the computer, it could do so only if it found a highly privileged program that kept its sensitive data on the hard drive rather than memory.
Project Zero says it warned Apple about BuggyCow back in November, but Apple hadn't acted to patch it ahead of last week's public reveal.

Slashdot Top Deals