×
Cloud

PSA: Apple Can't Run CSAM Checks On Devices With iCloud Photos Turned Off (imore.com) 62

An anonymous reader quotes a report from iMore: Apple announced new on-device CSAM detection techniques yesterday and there has been a lot of confusion over what the feature can and cannot do. Contrary to what some people believe, Apple cannot check images when users have iCloud Photos disabled. Apple's confirmation of the new CSAM change did attempt to make this clear, but perhaps didn't make as good a job of it as it could. With millions upon millions of iPhone users around the world, it's to be expected that some could be confused.

"Using another technology called threshold secret sharing, the system ensures the contents of the safety vouchers cannot be interpreted by Apple unless the iCloud Photos account crosses a threshold of known CSAM content," says Apple. "The threshold is set to provide an extremely high level of accuracy and ensures less than a one in one trillion chance per year of incorrectly flagging a given account." The key part there is the iCloud Photos bit because CSAM checks will only be carried out on devices that have that feature enabled. Any device with it disabled will not have its images checked. That's also a fact that MacRumors had confirmed, too. Something else that's been confirmed -- Apple can't delve into iCloud backups and check the images that are stored there, either. That means the only time Apple will run CSAM checks on photos is when it's getting ready to upload them to iCloud Photos.

Electronic Frontier Foundation

Edward Snowden and EFF Slam Apple's Plans To Scan Messages and iCloud Images (macrumors.com) 55

Apple's plans to scan users' iCloud Photos library against a database of child sexual abuse material (CSAM) to look for matches and childrens' messages for explicit content has come under fire from privacy whistleblower Edward Snowden and the Electronic Frontier Foundation (EFF). MacRumors reports: In a series of tweets, the prominent privacy campaigner and whistleblower Edward Snowden highlighted concerns that Apple is rolling out a form of "mass surveillance to the entire world" and setting a precedent that could allow the company to scan for any other arbitrary content in the future. Snowden also noted that Apple has historically been an industry-leader in terms of digital privacy, and even refused to unlock an iPhone owned by Syed Farook, one of the shooters in the December 2015 attacks in San Bernardino, California, despite being ordered to do so by the FBI and a federal judge. Apple opposed the order, noting that it would set a "dangerous precedent."

The EFF, an eminent international non-profit digital rights group, has issued an extensive condemnation of Apple's move to scan users' iCloud libraries and messages, saying that it is extremely "disappointed" that a "champion of end-to-end encryption" is undertaking a "shocking about-face for users who have relied on the company's leadership in privacy and security." The EFF highlighted how various governments around the world have passed laws that demand surveillance and censorship of content on various platforms, including messaging apps, and that Apple's move to scan messages and "iCloud Photos" could be legally required to encompass additional materials or easily be widened. "Make no mistake: this is a decrease in privacy for all "iCloud Photos" users, not an improvement," the EFF cautioned.

Encryption

Facebook's WhatsApp Takes Aim At Apple Over Child Safety Software Plan (wsj.com) 51

Facebook's WhatsApp messaging unit blasted Apple's plan to monitor sexually exploitative images of children on iPhones as bad for privacy, opening a new front in the battle between two of the world's biggest tech companies. From a report: "This approach introduces something very concerning into the world," Will Cathcart, the head of WhatsApp, said Friday. "We will not adopt it at WhatsApp." Apple a day earlier said it planned to release an update for U.S. users later this year designed to identify and report collections of sexually exploitative images of children, as part of a series of changes it is preparing for the iPhone to protect children from sexual predators.

WhatsApp's position deepens the battle between Facebook and Apple about data. Facebook Chief Executive Mark Zuckerberg has long bemoaned what he sees as too much power Apple has over the social-media giant's business. Apple has made the protection of user information on the iPhones and some other devices a key part of its pitch to consumers and taken shots at Facebook for its data-collection practices. Tensions have intensified in recent months as Apple rolled out a new privacy feature for the iPhone that restricts Facebook's ability to collect data. Mr. Zuckerberg said Apple was using its platform to interfere with how Facebook apps work. At the heart of the latest dispute is the question of whether tech companies can insert software that identifies inappropriate or illegal content without compromising privacy. Apple claims to have found a way to do this. WhatsApp, and Apple's critics, liken this software to a surveillance system.

IOS

In Internal Memo, Apple Addresses Concerns Around New Photo Scanning Features (9to5mac.com) 101

Sebastien Marineau-Mes, a software VP at Apple, talks about the company's upcoming controversial photo scanning features in an internal memo to employees: Today marks the official public unveiling of Expanded Protections for Children, and I wanted to take a moment to thank each and every one of you for all of your hard work over the last few years. We would not have reached this milestone without your tireless dedication and resiliency.

Keeping children safe is such an important mission. In true Apple fashion, pursuing this goal has required deep cross-functional commitment, spanning Engineering, GA, HI, Legal, Product Marketing and PR. What we announced today is the product of this incredible collaboration, one that delivers tools to protect children, but also maintain Apple's deep commitment to user privacy.

We've seen many positive responses today. We know some people have misunderstandings, and more than a few are worried about the implications, but we will continue to explain and detail the features so people understand what we've built. And while a lot of hard work lays ahead to deliver the features in the next few months. [...]

Privacy

Apple Confirms It Will Begin Scanning iCloud Photos for Child Abuse Images (techcrunch.com) 135

Apple will roll out a technology that will allow the company to detect and report known child sexual abuse material to law enforcement in a way it says will preserve user privacy. From a report: Apple told TechCrunch that the detection of child sexual abuse material (CSAM) is one of several new features aimed at better protecting the children who use its services from online harm, including filters to block potentially sexually explicit photos sent and received through a child's iMessage account. Another feature will intervene when a user tries to search for CSAM-related terms through Siri and Search.

Most cloud services -- Dropbox, Google, and Microsoft to name a few -- already scan user files for content that might violate their terms of service or be potentially illegal, like CSAM. But Apple has long resisted scanning users' files in the cloud by giving users the option to encrypt their data before it ever reaches Apple's iCloud servers. Apple said its new CSAM detection technology -- NeuralHash -- instead works on a user's device, and can identify if a user uploads known child abuse imagery to iCloud without decrypting the images until a threshold is met and a sequence of checks to verify the content are cleared. News of Apple's effort leaked Wednesday when Matthew Green, a cryptography professor at Johns Hopkins University, revealed the existence of the new technology in a series of tweets. The news was met with some resistance from some security experts and privacy advocates, but also users who are accustomed to Apple's approach to security and privacy that most other companies don't have.

Encryption

Apple Plans To Scan US iPhones for Child Abuse Imagery (ft.com) 314

Apple intends to install software on American iPhones to scan for child abuse imagery, Financial Times is reporting citing people briefed on the plans, raising alarm among security researchers who warn that it could open the door to surveillance of millions of people's personal devices. From the report: Apple detailed its proposed system -- known as "neuralMatch" -- to some US academics earlier this week, according to two security researchers briefed on the virtual meeting. The plans could be publicised more widely as soon as this week, they said. The automated system would proactively alert a team of human reviewers if it believes illegal imagery is detected, who would then contact law enforcement if the material can be verified. The scheme will initially roll out only in the US.

The proposals are Apple's attempt to find a compromise between its own promise to protect customers' privacy and ongoing demands from governments, law enforcement agencies and child safety campaigners for more assistance in criminal investigations, including terrorism and child pornography. [...] "This will break the dam -- governments will demand it from everyone," said Matthew Green, a security professor at Johns Hopkins University, who is believed to be the first researcher to post a tweet about the issue. Alec Muffett, a security researcher and privacy campaigner who formerly worked at Facebook and Deliveroo, said Apple's move was "tectonic" and a "huge and regressive step for individual privacy. Apple are walking back privacy to enable 1984," he said.

Education

Colleges Across the US and Canada Are Adopting Virtual Student IDs (theverge.com) 49

Apple Wallet is expanding access to its contactless student IDs, a feature it first debuted in 2018. A number of U.S. universities are adopting the new format for the first time. Apple Wallet student IDs will also arrive in Canada later this fall. The Verge reports: The University of New Brunswick and Sheridan College will be the first two Canadian schools to use Apple Wallet IDs. The new US roster includes Auburn, Northern Arizona University, University of Maine, and New Mexico State University, in addition to "many more colleges across the country." The University of Alabama, one of the program's early adopters, will also be the first school to issue exclusively mobile student IDs (to students with eligible devices) this fall. (Those with Android phones can use the digital cards through Google Pay.) Apple claims that "tens of thousands of college students" will have access to the feature during this upcoming school year.

In theory, the virtual student ID should offer all the functionality of a regular student ID -- holders can access restricted areas of campus or pay for amenities like food and laundry by placing their iPhone or Apple Watch near a physical reader. Transaction history isn't shared with Apple or stored on Apple's servers.

Apple

Apple's Touch ID-enabled Keyboard is Finally Available on Its Own (techcrunch.com) 61

Three-and-half months after launching the Magic Keyboard with Touch ID, Apple is finally breaking it out from its iMac bundle. The accessory is now available as a standalone through Apple Stores and the company's site. From a report: There are two versions: the standard and a longer model with a numeric keypad (pretty much what the company offers with all of its Magic Keyboards), running $149 and $179, respectively. There's also a $99 version that keeps the new rounded, compact design, but drops the Touch ID in favor of a key that locks the system. But where's the fun in that? All of the models have keys devoted to Spotlight, Dictation, Do Not Disturb and Emoji.
Desktops (Apple)

Mac Pro Gets a Graphics Update (sixcolors.com) 23

On Tuesday, Apple rolled out three new graphics card modules for the Intel-based Mac Pro, all based on AMD's Radeon Pro W6000 series GPU. From a report: (Apple posted a Mac Pro performance white paper [PDF] to celebrate.) The new modules (in Apple's MPX format) come in three variants, with a Radeon Pro W6800X, two W6800X GPUs, and the W6900X. Each module also adds four Thunderbolt 3 ports and an HDMI 2 port to the Mac Pro. The Mac Pro supports two MPX modules, so you could pop in two of the dual-GPU modules to max out performance. They can connect using AMD's Infinity Fabric Link, which can connect up to four GPUs to communicate with one another via a super-fast connection with much more bandwidth than is available via the PCIe bus.
Apple

Elon Musk and Apple Deny Wild Story That He Tried To Replace Tim Cook (theverge.com) 26

Several readers shared this story: Tesla CEO Elon Musk reportedly demanded to become Apple's CEO in a 2016 phone call with current Apple CEO Tim Cook, according to an upcoming book about Tesla. The story, shared by the Los Angeles Times, comes from Power Play: Tesla, Elon Musk, and the Bet of the Century by The Wall Street Journal reporter Tim Higgins. As the book tells it, Cook suggested to Musk that Apple acquire Tesla, and Musk said he wanted to be CEO. Cook reportedly agreed, but Musk clarified that he wanted to be the CEO of Apple. "According to a former aide who heard (Musk's) retelling of the exchange," Cook said "Fuck you" before hanging up the phone.

But Musk and Apple have both suggested that the conversation couldn't have happened because Musk and Cook have never spoken. Musk, in a tweet on Friday, flat out said that "Cook & I have never spoken or written to each other ever." He also said that he attempted to meet with Cook about Apple acquiring Tesla, a meeting that Cook refused. When asked for comment about the reported conversation, Apple pointed to remarks Cook made during an interview with The New York Times' Kara Swisher where he denied having ever spoken to Elon. "You know, I've never spoken to Elon, although I have great admiration and respect for the company he's built," Cook said.

Apple

Elon Musk Backs Epic in Fight Against Apple Over App Store Fees (twitter.com) 80

Epic, which sued Apple last year and has expressed concerns about the exorbitant fees the iPhone-maker charges on App Store (30% on each transaction on year 1 for apps that are not games and 15% on year 2 and beyond), has found a new backer in the court of public opinion: Elon Musk. In a tweet Friday, Musk likened Apple's App Store charges to "a de facto global tax on the Internet." He added, "Epic is right."

Epic CEO Tim Sweeney added today: The Apple Tax is far more pernicious than many realize. "It only applies to digital goods accessible on iOS," they say -- but in the future all physical goods will have a digital presence, and Apple will tax and gatekeep world commerce. Apple must be stopped.
Friday's remarks follows Musk sniping at Apple during an earnings call earlier this week. From that story: Apple's walled garden is facing scrutiny from lawmakers and other companies, including in an antitrust trial that took place earlier this year after it was sued by Epic Games over App Store fees and policies. "I think we do want to emphasize that our goal is to support the advent of sustainable energy," Musk said in response to a question about letting competitors use its charger network. "It is not to create a walled garden and use that to bludgeon our competitors which is used by some companies." Musk then faked a cough and said, "Apple."
United States

Cook, Pichai Join CEOs Urging Congress Pass Path to Citizenship (bloomberg.com) 172

More than 90 chief executive officers, including those at Apple, Amazon and Facebook on Thursday urged Congress to pass a law offering a citizenship path to young immigrants brought illegally to the U.S. as children. From a report: In a letter to President Joe Biden and congressional leaders, the executives said thousands of the immigrants -- known as Dreamers -- are "valued employees at our companies," but a federal judge's recent ruling against a program protecting them "throws into chaos" their ability to live and work legally in the U.S. "Securing a pathway to citizenship for Dreamers not only is the right thing to do, but is a huge economic benefit to the United States," the CEOs wrote in the letter. "The latest court ruling makes it all the more urgent that Congress take up and pass a legislative solution right away." The letter seeks to increase pressure on Republicans in Congress who are likely to oppose Democrats' efforts to pass the measure allowing for legal status for as many as 8 million undocumented immigrants.
Businesses

Apple Closing Down Internal Slack Channels Where Employees Debate Remote Work (cultofmac.com) 116

An anonymous reader quotes a report from Cult of Mac: Apple is closing down internal Slack channels to stop employees discussing remote working options, reports Zoe Schiffer from The Verge. Many Cupertino employees are currently engaged in a Cold War of sorts with their employer over the remote working arrangement coming out of the coronavirus pandemic. As the arguments flare up among staff, Apple has taken the step of shuttering the Slack channels where these are taking place. "Apple recently began cracking down on Slack channels that aren't directly related to work," Schiffer wrote on Twitter. "The company bans channels 'for activities and hobbies' that aren't directly related to projects or part of official employee groups -- but this wasn't always enforced, employees say."

Two public letters from Apple employees have requested more flexible working conditions. A recent petition this month was shared on Apple's internal Slack channel, with more than 6,000 members discussing remote work. It noted that: "We continue to be concerned that this one-size-fits-all solution is causing many of our colleagues to question their future at Apple. With COVID-19 numbers rising again around the world, vaccines proving less effective against the delta variant, and the long-term effects of infection not well understood, it is too early to force those with concerns to come back to the office." According to Schiffer, "internally, [many] people feel like [Apple] isn't listening to their demands." She continues that: "Since Friday, three Apple employees have resigned specifically because of the remote work policies. One had been at the company for nearly 13 years. I've seen a bunch of these resignation notes and they're pretty heart wrenching."

Businesses

Apple Tells Leaker To Snitch On Sources Or It Will Report Them To the Police (vice.com) 45

Apple is escalating its war against leakers, sending out cease and desist letters, according to a copy of a letter obtained by Motherboard. An anonymous reader writes: The letter was sent by Fangda Partners, Apple's law firm in China, on June 18, 2021. In the letter, Apple asked the seller to stop acquiring, advertising, and selling leaked Apple devices, and requested a list of anyone who provided them with the leaked devices. In other words, Apple wants the reseller to say who gave them the devices. Finally, the company requested the seller to sign a document promising to comply with the request within 14 days of receiving the letter. "You have disclosed without authorization a large amount of information related to Apple's unreleased and rumored products, which has constituted a deliberate infringement of Apple's trade secrets," the letter read.
Apple

Elon Musk Sniped at Apple Twice on Earnings Call (cnbc.com) 51

Tesla CEO Elon Musk sniped at Silicon Valley neighbor Apple twice during a conference call to discuss Tesla earnings on Monday. From a report: Although the companies don't compete directly today, Apple is reportedly building an electric self-driving vehicle under a project code-named Titan, and has attracted a number of engineers and executives away from Tesla. When asked about Tesla's supply chain, Musk said that there's a misperception that Tesla uses a lot of cobalt, a key material in the production of lithium-ion cells used in both smartphones and electric cars. "Apple uses I think almost 100% cobalt in their batteries and cell phones and laptops, but Tesla uses no cobalt in the iron-phosphate packs, and almost none in the nickel-based chemistries," Musk said. "On a weighted-average basis we might use 2% cobalt compared to say, Apple's 100% cobalt. Anyway, so it's just really not a factor."

[...] Later in the call, Musk made a crack about Apple's so-called "walled garden," which is named because Apple strictly controls what software can be installed on the iPhone through its App Store. Apple's walled garden is facing scrutiny from lawmakers and other companies, including in an antitrust trial that took place earlier this year after it was sued by Epic Games over App Store fees and policies. "I think we do want to emphasize that our goal is to support the advent of sustainable energy," Musk said in response to a question about letting competitors use its charger network. "It is not to create a walled garden and use that to bludgeon our competitors which is used by some companies." Musk then faked a cough and said, "Apple."

Iphone

LG Might Sell iPhones In Its Stores After Quitting Android Devices (androidauthority.com) 20

LG will reportedly start selling iPhones and iPads in its South Korean stores this August -- mere months after the company quit making Android devices. Android Authority reports: According to MacRumors, the Herald Economic Daily claims LG has struck a deal with Apple to sell the iPhone and iPad in 400 stores across South Korea starting in August. LG may have to overcome some hurdles to make this happen. The company reportedly signed a "win-win" agreement with the country's National Mobile Communication Distribution Association that bars it from selling a direct competitor's phones in its stores. That deal was made in 2018, however, or well before LG signaled that it would quit making phones and tablets. LG is supposedly planning to renegotiate the agreement once it officially sells the iPhone and iPad in its shops. The deal unsurprisingly wouldn't include Macs, as systems like the MacBook Air compete directly with the Gram series and other LG computers where the iPhone and iPad are relatively safe.
Businesses

Amazon Asked Apple To Remove an App That Spots Fake Reviews, and Apple Agreed (cnbc.com) 45

Apple has removed Fakespot, a well-known app for detecting fake product reviews, from its App Store after Amazon complained the app provided misleading information and potential security risks. From a report: Fakespot's app works by analyzing the credibility of an Amazon listing's reviews and gives it a grade of A through F. It then provides shoppers with recommendations for products with high customer satisfaction. Amazon said it reported Fakespot to Apple for investigation after it grew concerned that a redesigned version of the app confused consumers by displaying Amazon's website in the app with Fakespot code and content overlaid on top of it. Amazon said it doesn't allow applications to do this. An Amazon spokesperson claimed, "The app in question provides customers with misleading information about our sellers and their products, harms our sellers' businesses, and creates potential security risks." By Friday afternoon, following a review from Apple, the app was no longer available on the App Store.
Iphone

Despite the Hype, iPhone Security No Match For NSO Spyware (washingtonpost.com) 116

International investigation finds 23 Apple devices that were successfully hacked. From a report: The text delivered last month to the iPhone 11 of Claude Mangin, the French wife of a political activist jailed in Morocco, made no sound. It produced no image. It offered no warning of any kind as an iMessage from somebody she didn't know delivered malware directly onto her phone -- and past Apple's security systems. Once inside, the spyware, produced by Israel's NSO Group and licensed to one of its government clients, went to work, according to a forensic examination of her device by Amnesty International's Security Lab. It found that between October and June, her phone was hacked multiple times with Pegasus, NSO's signature surveillance tool, during a time when she was in France. The examination was unable to reveal what was collected. But the potential was vast: Pegasus can collect emails, call records, social media posts, user passwords, contact lists, pictures, videos, sound recordings and browsing histories, according to security researchers and NSO marketing materials.

The spyware can activate cameras or microphones to capture fresh images and recordings. It can listen to calls and voice mails. It can collect location logs of where a user has been and also determine where that user is now, along with data indicating whether the person is stationary or, if moving, in which direction. And all of this can happen without a user even touching her phone or knowing she has received a mysterious message from an unfamiliar person -- in Mangin's case, a Gmail user going by the name "linakeller2203." These kinds of "zero-click" attacks, as they are called within the surveillance industry, can work on even the newest generations of iPhones, after years of effort in which Apple attempted to close the door against unauthorized surveillance -- and built marketing campaigns on assertions that it offers better privacy and security than rivals.

[...] Researchers have documented iPhone infections with Pegasus dozens of times in recent years, challenging Apple's reputation for superior security when compared with its leading rivals, which run Android operating systems by Google. The months-long investigation by The Post and its partners found more evidence to fuel that debate. Amnesty's Security Lab examined 67 smartphones whose numbers were on the Forbidden Stories list and found forensic evidence of Pegasus infections or attempts at infections in 37. Of those, 34 were iPhones -- 23 that showed signs of a successful Pegasus infection and 11 that showed signs of attempted infection.

Cellphones

China's Xiaomi Overtakes Apple In the Global Smartphone Market (cnbc.com) 26

Chinese smartphone maker Xiaomi was the second-largest smartphone maker in the second quarter, overtaking Apple, according to analyst firm Canalys. CNBC reports: Xiaomi had a 17% share of global smartphone shipments, ahead of Apple's 14% and behind Samsung's 19%. "Xiaomi is growing its overseas business rapidly," Canalys research manager Ben Stanton said in a press release, noting shipments increased 300% year on year in Latin America and 50% in Western Europe. The Chinese smartphone maker posted year-on-year smartphone shipment growth of 83% versus 15% for Samsung and 1% for Apple. Stanton noted, however, that Xiaomi phones are still skewed toward the mass market, with the average selling price of its handsets 75% cheaper than Apple's.
Privacy

Apple's IDFA Change Has Triggered 15% To 20% Revenue Drops For iOS Developers (venturebeat.com) 120

AmiMoJo shares a report from VentureBeat: Apple critics such as Epic Games CEO Tim Sweeney have complained about Apple's alleged anticompetitive behavior with the App Store. But Consumer Acquisition's Brian Bowman has frequently sounded the alarm on Apple's decision to favor user privacy over targeted ads by changing access to its Identifier for Advertisers (IDFA). Based on Consumer Acquisition's analysis of $300 million in paid social ad spending, IDFA has had a devastating impact, Bowman said in an interview with GamesBeat. In a report issued today, Bowman said that iOS advertisers are experiencing a 15% to 20% revenue drop and inflation in unattributed organic traffic.

Starting in April, Apple began releasing iOS 14.5, which prompted users to answer whether they would allow their data to be tracked for advertising purposes. Apple believes this puts privacy front and center. But Consumer Acquisition and many of its game developer advertisers worry it will break personalized advertising. Only 20% of consumers are saying yes to Apple's App Tracking Transparency prompt, which means they will enable apps to personalize ads by tracking their personal data. For the traffic Bowman's company evaluated, performance has faded. Across paid social platforms, downstream event optimization and "lookalike audience performance" is also eroding. [...] Bowman believes -- or at least holds out hope -- that Apple will roll back or soften the IDFA changes by Black Friday.

Slashdot Top Deals