Apple is taking a different approach to social with its Vision Pro headset: making apps social right out of the box. This, according to Road to VR's Ben Lang, is what Meta should have done all along. Instead, it's pioneered a social experience on the Quest platform that involves "jumping through a fragmented landscape of different apps and different ways to actually get into the same space with your friends." From the report: Apple is taking a fundamentally different approach with Vision Pro by making social the expectation rather than the rule, and providing a common set of tools and guidelines for developers to build from in order to make social feel cohesive across the platform. Apple's vision isn't about creating a server full of a virtual strangers and user-generated experiences, but to make it easy to share the stuff you already like to do with the people you already know. This obviously leans into the company's rich ecosystem of existing apps -- and the social technologies the company has already battle-tested on its platforms.

SharePlay is the feature that's already present on iOS and MacOS devices that lets people watch, listen, and experience apps together through FaceTime. And on Vision Pro, Apple intends to use its SharePlay tech to make many of its own first-party apps -- like Apple TV, Apple Music, and Photos -- social right out of the box, and it expects developers to do so too. In the company's developer documentation, the company says it expects "most visionOS apps to support SharePlay." [...]

Perhaps most importantly, Apple is leaning on every user's existing personal friend graph (ie: the people you already text, call, or email), rather than trying to create a bespoke friends list that lives only inside Vision Pro. Rather than launching an app and then figuring out how to get your friends into it, with SharePlay Apple is focused on getting together with your friends first, then letting the group seamlessly move from one app to the next as you decide what you want to do.

Even apps that don't explicitly have multi-user experience built-in can be 'social' by default, by allowing one user to screen-share the app with others. Only the host will be able to interact with the content, but everyone else will be able to see and talk about it in real-time. It's the emphasis on 'social by default', 'things you already do', and 'people you already know' that will make social on Vision Pro feel completely different than what Meta is building on Quest with Horizon Worlds and its ecosystem of fragmented social apps.

An anonymous reader quotes a report from SecurityWeek: Tens of thousands of Android devices have been shipped to end-users with backdoored firmware, according to a warning from cybersecurity vendor Human Security. As part of the global cybercriminal operation called BadBox (PDF), Human Security found a threat actor relied on supply chain compromise to infect the firmware of more than 70,000 Android smartphones, CTV boxes, and tablet devices with the Triada malware. The infected devices come from at least one Chinese manufacturer but, before they are delivered to resellers, physical retail stores, and e-commerce warehouses, a backdoor was injected into their firmware. "Products known to contain the backdoor have been found on public school networks throughout the United States," Human says.

Discovered in 2016, Triada is a modular trojan residing in a device's RAM, relying on the Zygote process to hook all applications on Android, actively using root privileges to substitute system files. Over time, the malware went through various iterations and was found pre-installed on low-cost Android devices on at least two occasions. As part of the BadBox operation that Human Security discovered, the infected low-cost Android devices allow threat actors to carry out various ad-fraud schemes, including one named PeachPit, which at its peak relied on 121,000 Android and 159,000 iOS devices infected with malware, and on 39 Android, iOS, and CTV-centric apps designed to connect to a fake supply-side platform (SSP).

One of the modules delivered to the infected devices from the command-and-control (C&C) server allows the creation of WebViews that are fully hidden from the user, but which "are used to request, render, and click on ads, spoofing the ad requests to look like they're coming from certain apps, referred by certain websites, and rendered" on specific devices. BadBox, Human Security notes, also includes a residential proxy module that allows the threat actors to sell access to the victim's network. Furthermore, they can create WhatsApp messaging accounts and Gmail accounts they can then use for other malicious activities. "Finally, because of the backdoor's connection to C2 servers on BadBox-infected smartphones, tablets, and CTV boxes, new apps or code can be remotely installed by the threat actors without the device owner's permission. The threat actors behind BadBox could develop entirely new schemes and deploy them on BadBox-infected devices without any interaction from the devices' owners," Human notes.

Apple rolled out a software update Wednesday to address an overheating issue that plagued some early buyers of the iPhone 15 Pro line. From a report: The update, called iOS 17.0.3, is available as an over-the-air fix in the software update section of the iPhone settings app. The release notes say the update "provides important bug fixes, security updates, and addresses an issue that may cause iPhone to run warmer than expected." The update was also released for older iPhones as well as iPads. Some early iPhone 15 Pro owners reported that their iPhone could get hotter than normal. Apple on Saturday blamed bad code in apps including Uber, Instagram and the Asphalt 9 racing game, in addition to a bug in the device's software. The company said the new device set-up could overwork the processor and lead to overheating.

Android 14 is out today, along with a new Pixel phone. The OS is shipping to supported Pixel devices now, which means the Pixel 4a (5G) and every variant of the Pixel 5, 6, and 7, plus the Fold and Tablet. From a report: The big feature this year is a somewhat customizable home screen. You can pick from several different lock screen clock styles and customize the two bottom app shortcuts. This feels like a response to iOS 16's lock screen widgets (a feature Android used to have back in the 4.2 days) but not nearly as customizable. It's honestly hard to highlight a second Android 14 feature because this is one of the smallest Android releases ever. The first feature Google mentions in its blog post is a new wallpaper picker. On the Pixel 8, Android now has a built-in text-to-image AI wallpaper maker, presumably a feature that lets the Android team adhere to Google's "mandatory AI" company mandate. There's also a new monochrome theme if you're tired of all those "Material You" colors.

Google's newest flagship phone is finally official. The Pixel 8 and Pixel 8 Pro were both unveiled today, with the headline changes being a whopping seven years of updates, flat screens across the board, new CPUs, and a $100 price increase. The Pixel 8 Pro is officially $999, while the Pixel 8 is $699. ArsTechnica: As for specs, the Pro display is a 6.7-inch, 120 Hz, 2992x1344 OLED. Google is branding this display "Super Actua" because it's one of the brightest phone displays on the market at 1600 nits for HDR content and 2400 nits in sunlight mode. That beats the sunlight modes on the S23 Ultra (1750 nits) and iPhone 15 Pro Max (2000 nits) but not the Xiaomi 13T Pro (2600 nits). The storage situation here isn't great. The Pixel 8 Pro has 12GB of RAM and storage tiers of 128GB, 256GB, 512GB, and 1TB. Most other phones in this price range start at 256GB, and the 8 Pro uses slower UFS 3.1 storage instead of the speedy UFS 4.0 a lot of phones ship with now. The 8 Pro battery is 5050 mAh, and there's 30 W wired charging. Wireless charging will hit 23 W on the Pixel charging stand, while Qi chargers will only hit 12 W (it would be great if Qi2 would get its act together). Both phones have IP68 dust and water resistance. On the software update support lifecycle: This year, there is finally something tangible to point to -- 7 years of OS updates. Unlike with previous models, there are no games being played here, as Google says there are "7 years of OS, security, and Feature Drop updates." That's more major OS updates than even iPhone owners are getting, with the iPhone X getting iOS versions 11-16.

An anonymous reader shared this report from CNBC: Apple said on Saturday that it will issue a software update that would address customer complaints about the latest iPhone 15 models, released just over a week ago, running hot.

Apple said that the new iPhone models were running hot because of a combination of bugs in iOS 17, bugs in apps, and a temporary set-up period... After Apple released the new iPhone 15 models earlier this month, user complaints on Apple's forums, Reddit, and social media suggest that all four models can get hotter than expected during use. CNBC's review of the new iPhone Pros also noted the iPhone 15 Pro Max got hot. "I just got the iPhone 15 Pro today and it's so hot i can't even hold it for very long!" wrote one commenter on Apple's forums.

Apple's new high-end models, the $999 iPhone 15 Pro and $1,199 iPhone 15 Pro Max have a redesigned titanium enclosure with an aluminum frame to make them easier to repair. The problem with the new models overheating was not related to the titanium chassis design, Apple said. Instead, Apple points to bugs with specific apps and a bug in iOS that can be fixed with software updates.

A company that acquires and sells zero-day exploits -- flaws in software that are unknown to the affected developer -- is now offering to pay researchers $20 million for hacking tools that would allow its customers to hack iPhones and Android devices. From a report: On Wednesday, Operation Zero announced on its Telegram accounts and on its official account on X, formerly Twitter, that it was increasing payments for zero-days in those platforms tenfold, from $200,000 to $20 million. "By increasing the premium and providing competitive plans and bonuses for contract works, we encourage the developer teams to work with our platform," the company wrote.

Operation Zero, which is based in Russia and launched in 2021, also added that "as always, the end user is a non-NATO country." On its official website, the company says that "our clients are Russian private and government organizations only." When asked why they only sell to non-NATO countries, Operation Zero CEO Sergey Zelenyuk declined to say. "No reasons other than obvious ones," he said. Zelenyuk also said that the bounties Operation Zero offer right now may be temporary, and a reflection of a particular time in the market, and the difficulty of hacking iOS and Android.

The Philips Hue ecosystem of home automation devices is "collapsing into stupidity," writes Rachel Kroll, veteran sysadmin and former production engineer at Facebook. "Unfortunately, the idiot C-suite phenomenon has happened here too, and they have been slowly walking down the road to full-on enshittification." From her blog post: I figured something was up a few years ago when their iOS app would block entry until you pushed an upgrade to the hub box. That kind of behavior would never fly with any product team that gives a damn about their users -- want to control something, so you start up the app? Forget it, we are making you placate us first! How is that user-focused, you ask? It isn't.

Their latest round of stupidity pops up a new EULA and forces you to take it or, again, you can't access your stuff. But that's just more unenforceable garbage, so who cares, right? Well, it's getting worse.

It seems they are planning on dropping an update which will force you to log in. Yep, no longer will your stuff Just Work across the local network. Now it will have yet another garbage "cloud" "integration" involved, and they certainly will find a way to make things suck even worse for you. If you have just the lights and smart outlets, Kroll recommends deleting the units from the Hue Hub and adding them to an IKEA Dirigera hub. "It'll run them just fine, and will also export them to HomeKit so that much will keep working as well." That said, it's not a perfect solution. You will lose motion sensor data, the light level, the temperature of that room, and the ability to set custom behaviors with those buttons.

"Also, there's no guarantee that IKEA won't hop on the train to sketchville and start screwing over their users as well," adds Kroll.

What has your experience been with the Philips Hue ecosystem? Do you have any alternatives you recommend?

An anonymous reader shares a report: A few lucky WhatsApp beta testers got a surprising treat this week: the company appears to be testing a version of its iOS app that is also optimized for the iPad. As first spotted by WABetaInfo, version 23.19.1.71 of WhatsApp's TestFlight app includes the new iPad app as well. From what we can see in screenshots, the iPad app works exactly like you'd expect. You connect to it by scanning a QR code the same way you'd link your account to any other device. You'll see a list of your conversations on the left and your current chat on the right. It's pretty much the iOS app, but instead of seeing one pane at a time, you see both. It almost makes you wonder what took so long, especially when WhatsApp head Will Cathcart said all the way back in January of 2022 that "we'd love to do it."

Apple on Monday rolled out iOS 17, iPadOS 17, tvOS 17, HomePod 17 and watchOS 10, the latest operating system versions for all its devices minus the Mac lineup. iOS 17: iOS 17 expands on last year's Lock Screen updates with the addition of interactive widgets and StandBy, a new feature that turns the iPhone into a mini home hub when it is charging. You can now see voicemail transcriptions in real time, and leave video messages in FaceTime. FaceTime also now works on the Apple TV with tvOS 17. With NameDrop, exchanging contacts is as simple as touching two phones together, and Messages has been overhauled with new safety features and updates to the way that stickers work. Autocorrect is better than ever, Spotlight search has been improved, private browsing in Safari is more secure with Face ID lock, and there's now a mood tracking feature in the Health app. Passwords can be shared in iCloud Keychain and AirTags can be shared among family members too, plus there are new features for the AirPods Pro. Apple has also added updates to Siri, Mail, Reminders, Notes, Home, and more. tvOS 17: In tvOS 17, Apple has added a FaceTime app for FaceTime calls on a larger screen. The feature works through an iPhone or iPad running iOS 17/iPadOS 17, with the iOS device serving as the camera and the TV serving as the display. With a Split View option, you can place your FaceTime call on one side of the TV and a TV show or game on the other side for SharePlay experiences. [...] Other new features include Dolby Vision 8.1 support, an enhance dialogue option to make it easier to hear what's being said over music and effects, and support for third-party VPN apps.

An anonymous reader quotes a report from TechCrunch: Apple released security updates on Thursday that patch two zero-day exploits -- meaning hacking techniques that were unknown at the time Apple found out about them -- used against a member of a civil society organization in Washington, D.C., according to the researchers who found the vulnerabilities. Citizen Lab, an internet watchdog group that investigates government malware, published a short blog post explaining that last week they found a zero-click vulnerability -- meaning that the hackers' target doesn't have to tap or click anything, such as an attachment -- used to target victims with malware.

The researchers said the vulnerability was used as part of an exploit chain designed to deliver NSO Group's malware, known as Pegasus. "The exploit chain was capable of compromising iPhones running the latest version of iOS (16.6) without any interaction from the victim," Citizen Lab wrote. Once they found the vulnerability, the researchers reported it to Apple, which released a patch on Thursday, thanking Citizen Lab for reporting them. Based on what Citizen Lab wrote in the blog post, and the fact that Apple also patched another vulnerability and attributed its finding to the company itself, it appears Apple may have found the second vulnerability while investigating the first. Citizen Lab researcher John Scott-Railton says Apple's Lockdown Mode would have blocked the exploits found in this case. Lockdown Mode is an opt-in feature introduced in iOS 16 that gives users the option to temporarily switch off or limit features for security purposes. According to Apple, it "should be used only if you believe you may be targeted by a highly sophisticated cyberattack, such as by a private company developing state-sponsored mercenary spyware."

Researchers at digital watchdog group Citizen Lab say they found spyware they linked to Israeli firm NSO that exploited a newly discovered flaw in Apple devices. From a report: While inspecting the Apple device of an employee of a Washington-based civil society group last week, Citizen Lab said it found the flaw had been used to infect the device with NSO's Pegasus spyware, it said in a statement.

Bill Marczak, senior researcher at Citizen Lab, said the attacker likely made a mistake during the installation which is how Citizen Lab found the spyware. Citizen Lab said Apple confirmed to them that using the high security feature "Lockdown Mode" available on Apple devices blocks this particular attack. The flaw allowed compromise of iPhones running the latest version of iOS (16.6) without any interaction from the victim, the digital watchdog said. The new update fixes this vulnerability.

The App Store for Apple's Vision Pro headset will include all compatible iPhone and iPad apps "by default." The Verge reports: In an update on Tuesday, Apple said it will release the new App Store with the developer beta of visionOS this fall. Both iPad and iPhone apps will appear alongside visionOS apps in the new App Store. As Apple has said previously, it will automatically import iOS and iPadOS apps to its new mixed reality operating system "with no additional work required." Developers can still optimize their apps if needed.

"By default, your iPad and/or iPhone apps will be published automatically on the App Store on Apple Vision Pro," Apple notes. "Most frameworks available in iPadOS and iOS are also included in visionOS, which means nearly all iPad and iPhone apps can run on visionOS, unmodified." Developers also have the option of building an app for Vision Pro using Apple's visionOS software development kit.

An advertising watchdog has recommended that YouTube TV, Google's growing pay-TV streaming service, drops an ad claim that the service is "$600 less than cable." The recommendation from the National Advertising Division (NAD) stems from a complaint lodged by Charter Communications. From a report: NAD, which used an expedited process for single-issue advertising cases in making this decision, found that YouTube TV's pricing claim, which identifies "comparable standalone cable" as the basis of comparison, doesn't hold up. NAD noted that the price calculation underlying the challenged claim includes the cost of two set-top boxes per household for "standalone cable" services," but argued that such a comparison isn't a good fit because operators such as Charter offer pay-TV streaming options that may not require a set-top box. In Charter's case, its Spectrum TV app, billed as a platform that can "stream outside the cable box," is compatible with iOS and Android mobile devices along with several retail streaming devices and/or integrated connected TVs from companies such as Apple, Roku, Google and Samsung. "In the context of the 'cable' comparison, NAD found the claim reasonably conveys the cost of YouTube TV is compared to all cable services," the organization explained.

According to Windows Central, Microsoft might be bringing AI capabilities to a handful of Windows 11 apps, including Photos, Snipping Tool, and Paint. "Some of this functionality will require dedicated hardware, such as an NPU (neural processing unit) or VPU (vision processing unit,) while others may not," notes the report. From the report: For the Photos app, Microsoft is working on an AI functionality that would allow the app to identify objects or people in photos and enable the ability to cut out and paste those elements elsewhere. This is a functionality that iOS and Android have had for some time, so it's no surprise to hear that Microsoft is also working to bring it to Windows.

Regarding the Snipping Tool, my sources say the company wants to incorporate OCR (optical character recognition) technology to enable Windows to identify text in screenshots for faster clipboard copying. Microsoft is also working on bringing OCR to the Camera app, allowing users to select text in a photo taken on the device.

Lastly, my sources say Microsoft has also been experimenting with bringing generative AI to the Windows 11 Paint app. Users could ask Paint to create a canvas based on criteria set out by the user, similar to how Bing Image Creator currently works. Sources say the Paint AI integration will be based on that same Bing technology.

Apple has moved the "end call" button back to the middle of the screen in the newest developer version of iOS 17, released Tuesday. From a report: The move reverses a change that Apple had been considering over the summer, as CNBC reported last week. Previous beta versions of iOS 17 had moved the red "end call" button to the lower right-hand corner, as opposed to centered in the bottom half of the screen, where it had been for years. However, in the most recent developer beta, the end call button is centered vertically, in the middle of three buttons close to the bottom of the screen.

Google's AI-powered Search Generative Experience (SGE) is getting a major new feature: it will be able to summarize articles you're reading on the web, according to a Google blog post. From a report: SGE can already summarize search results for you so that you don't have to scroll forever to find what you're looking for, and this new feature is designed to take that further by helping you out after you've actually clicked a link. You probably won't see this feature, which Google is calling "SGE while browsing," right away. Google says it's a new feature that's starting to roll out Tuesday as "an early experiment" in its opt-in Search Labs program. (You'll get access to it if you already opted in to SGE, but if you haven't, you can opt in to the feature on its own.) It will be available first in the Google app on Android and iOS, and the company is bringing it to the Chrome browser on desktop "in the days ahead."

The judge overseeing Apple's "batterygate" iPhone throttling lawsuit has cleared the way for payments to be sent out. MacRumors reports: Apple in 2020 agreed to pay $500 million to settle the "batterygate" lawsuit, which accused the company of secretly throttling older iPhone models. The class action lawsuit was open to U.S. customers who had an iPhone 6, 6 Plus, 6s, 6s Plus, 7, or 7 Plus running iOS 10.2.1 or iOS 11.2 prior to December 21, 2017. [...] Apple ultimately apologized for its lack of communication and dropped the price of battery replacements to $29 through the end of 2018. iPhone owners eligible for a payout would have needed to submit a claim back in 2020, and submissions were open through October 6, 2020. Those who submitted a claim back then will be eligible for a payment, which will be around $65 per claimant.

Netflix is officially bringing its games to more devices. So far, the company's impressive library of games has only been available on iOS and Android. Now, though, Netflix is starting to use its streaming tech to publicly test its titles on TVs and computers. From a report: "Our goal has always been to have a game for everyone, and we are working hard to meet members where they are with an accessible, smooth and ubiquitous service," Mike Verdu, Netflix's vice-president of games, wrote in a blog post. "Today, we're taking the first step in making games playable on every device where our members enjoy Netflix." The test appears to be very limited for now. Just two games will be available at the outset: Oxenfree. The beta is only open to a small number of Netflix subscribers in the UK and Canada on Amazon Fire TV streaming media players, Chromecast with Google TV, LG TVs, NVIDIA Shield TV, Roku devices and TVs, Samsung smart TVs and Walmart ONN. The company will add support for more devices later.

"Owners of some older iPhone models are expected to receive about $65 each," reports SiliconValley.com, "after a judge cleared the way for payments in a class-action lawsuit accusing Apple of secretly throttling phone performance." The Cupertino cell phone giant agreed in 2020 to pay up to $500 million to resolve a lawsuit alleging it had perpetrated "one of the largest consumer frauds in history" by surreptitiously slowing the performance of certain iPhone models to address problems with batteries and processors...

According to the lawsuit, filed in 2018, reports of unexplained iPhone shutdowns began to surface in 2015 and increased in the fall of 2016. Consumers complained their phones were shutting off even though the batteries showed a charge of more than 30%, the lawsuit claimed. The lawsuit claimed the shutdowns resulted from a mismatch between phones' hardware, including batteries and processing chips, and the ever-increasing demands of constantly updating operating systems. Apple tried to fix the problem with a software update, but the update merely throttled device performance to cut the number of shutdowns, the lawsuit claimed... In a 2019 court filing in the case, Apple argued that lithium-ion batteries become less effective with time, repeated charging, extreme temperatures and general use. Updating software, Apple asserted in the filing, entails trade-offs. "Providing more features also introduces complexity and can reduce speed, and increasing features or speed may adversely impact hardware lifespan," the company said.

Consumer grief over the shutdowns and alleged throttling also led to a 2020 lawsuit against Apple by the State of California and Alameda and Los Angeles counties. Apple, admitting to no wrongdoing, settled the case for $113 million.
About 3 million claims were received, the article notes, and two iPhone owners who'd objected to the settlement lost their appeal this week, "removing the final obstacle to the deal..."

"The phones at issue in the case were iPhone 6, 6 Plus, 6s, 6s Plus, and SE devices running operating systems iOS 10.2.1 or later before Dec. 21, 2017, and iPhone 7 and 7 Plus phones running iOS 11.2 or later before that date."