Lit Apple Mac, iPhone, iPad User Group

[sandysgeek]

Scam iOS apps latest: a VPN that charges $9.99/wk uses ‘Recommended by Apple’ pop-ups

FlickType and Fleksy founder Kosta Eleftheriou has been pretty busy over the past few months exposing scam iOS apps, some of them bringing in millions of dollars of revenue. The latest of these is a VPN app that is promoting itself as “recommended by Apple” and which is estimated to be earning a million dollars a month.

Eleftheriou highlights six eye-opening aspects of the app, which not only made it through Apple’s vetting process, but was given significant visibility in the App Store thanks to the number of (fake) reviews …


Background

Back in February, we noted Eleftheriou referencing fake versions of his own Apple Watch keyboard app, FlickType.

Eleftheriou began highlighting applications that were essentially non-functional ripoffs of FlickType. One of the most blatant ones was KeyWatch […] When users downloaded the app, the first screen was a blank interface with an “Unlock now” button. Tap the “Unlock now” button, and you’d be prompted with Apple’s buy screen to confirm an $8/week subscription for an app that was nonfunctional.

He followed this by expressing concern about what amounts to an entire industry in fake reviews, giving the example of Roki among others.

This app has already stolen more than $2M from people since 2019, and is on track to steal more than double that this year alone. And it’s only one of the many scams this same “developer” is currently operating. All because they can keep buying their ratings.

Scam iOS apps continue to benefit from fake reviews

While Apple has removed scam iOS apps previously identified, Eleftheriou asks how they are able to make it through app review in the first place – let alone remain in the App Store until reported – when there are so many red flags.

He gives the example of StringVPN.

• I don’t know what’s worse about this app:“Translated” fake reviews

• Recommended by Apple” popups in Safari​
• http://gmail**** contact email ( gmail . r u)​
• Blank website, registered in India​
• $9.99/week subscription​
• Grossing $1M (!) a month​

• What is Apple even doing??

• 
  What is Apple even doing??
  
• Apple: "Security!"
  
• Also Apple: We carefully reviewed this VPN scam, and we think you're gonna love it!

— Kosta Eleftheriou (@keleftheriou) April 7, 2021

Adding to the pressure on Apple to fix its broken review process is the potential impact on antitrust investigations. When the iPhone maker responds to complaints about its complete control over the iOS apps marketplace, it frequently cites the benefit to users of vetting every app submitted.

 

[sandysgeek]

Developer Recreates Flappy Bird as Interactive macOS Notification

after the recent week of Facebook, LinkedIn. Q Link Wireless, and yet another scam app, want something lighter



Developer brings ‘Flappy Bird’ to the Mac as an interactive macOS Big Sur notification

Flappy Bird, despite being removed from the App Store seven years ago, remains one of the most iconic iPhone games of all time. Now, developer Neil Sardesai has taken to Twitter to showcase how he brought a clone of the game directly to the macOS Big Sur Notification Center.

Sardesai tweeted the project this weekend, showcasing that you can “put a whole game inside of a push notification” thanks to the new UserNotificationsUI framework. It’s a pretty impressive feat that showcases the power of notifications in Big Sur.

Flappy Bird originated on the iPhone and a variety of clones have popped up on the web and on macOS over the years. Sardesai’s implementation into the Big Sur Notification Center is based on the Flappy Bird clone created by Play Cavnas. Touch interactions are simulated using clicks rather than tap, but the goal of avoiding obstacles remains the same.

Flappy Bird was one of the most viral games to ever come to iPhone back in 2014. Created by developer Dong Nguyen, the app is rumored to have generated an average of $50,000 a day in revenue at its peak. The popularity, however, is what ultimately led to Nguyen removing it from the App Store.

“I can call ‘Flappy Bird’ is a success of mine,” he tweeted at the time. “But it also ruins my simple life. So now I hate it.”

Sardesai hasn’t made his macOS Big Sur Notification Center version of Flappy Bird available to the public, so this video serves more as a proof concept for now. You can play the clone version on which it’s based right here on the Play Canvas website.

Did you know you can put a whole game inside of a push notification pic.twitter.com/LlMx2AjvHH
https:// t . c o /LlMx2AjvHH

— Neil Sardesai (@neilsardesai) April 9, 2021

 

[sandysgeek]

Clubhouse data leak: 1.3 million scraped user records leaked online for free

So far, it seems like it’s been the worst week of the year for social media platforms in terms of data leaks, with Clubhouse seemingly joining the fray.

Days after scraped data from more than a billion Facebook and LinkedIn profiles, collectively speaking, was put for sale online, it looks like now it’s Clubhouse’s turn. The upstart platform seems to have experienced the same fate, with an SQL database containing 1.3 million scraped Clubhouse user records leaked for free on a popular hacker forum.

What was leaked?

The leaked database contains a variety of user-related information from Clubhouse profiles, including:

• User ID
  
  
• Name
  
  
• Photo URL
  
  
• Username
  
  
• Twitter handle
  
  
• Instagram handle
  
  
• Number of followers
  
  
• Number of people followed by the user
  
  
• Account creation date
  
  
• Invited by user profile name

Example of leaked data:

Clubhouse API allows anyone to carry out mass scrapes of user data?

Updated on 11/04: Clubhouse has issued a statement about the incident on social media, saying they have not experienced a breach of their systems. The company said that the data is already publicly available and that it can be accessed by “anyone” via their API.

This is misleading and false. Clubhouse has not been breached or hacked. The data referred to is all public profile information from our app, which anyone can access via the app or our API. https:/*******I1OfPyc0Bo (https:// t . c o /I1OfPyc0Bo)
— Clubhouse (@joinClubhouse) April 11, 2021

(note - Still, this raised privacy concerns about the app. As the privacy of user data becomes more important every day, the fact that anyone can download a database with a list of all users from a social network is questionable to say the least.)

In addition to sparking a heated debate under the company’s statement on Twitter, this raises some questions about the privacy stance of the company: allowing everyone to gather and download even public profile information on a mass scale can have severe negative consequences for user privacy.


Updated on 12/04: According to CyberNews senior information security researcher Mantas Sasnauskas, the posting of scraped Clubhouse user data reveals a potential privacy issue within the social media platform itself: “The way the Clubhouse app is built lets anyone with a token, or via an API, to query the entire body of public Clubhouse user profile information, and it seems that token does not expire.”

Sasnauskas argues that even though the Clubhouse privacy policy does not allow unauthorized data mining and data scraping, the platform should go beyond simply stating it in the rules. “This should not only be reflected in the ToS, but also in the technical implementation of the app, making it harder for anyone to scrape user data. Having no anti-scraping measures in place can be seen as a privacy issue.”

We reached out to Clubhouse regarding their API policy and will update the story as soon as we have more information.


What’s the impact?

The data from the leaked files can be used by threat actors against Clubhouse users by carrying out targeted phishing or other types of social engineering attacks.

The SQL database posted on the hacker forum only contains Clubhouse profile information – we did not find any deeply sensitive data like credit card details or legal documents in the archive posted by the threat actor. With that said, even a profile name, with connections to the user’s other social media profiles identified and established, can be enough for a competent cybercriminal to cause real damage.

Particularly determined attackers can combine information found in the leaked SQL database with other data breaches in order to create detailed profiles of their potential victims. With such information in hand, they can stage much more convincing phishing and social engineering attacks or even commit identity theft against the people whose information has been exposed on the hacker forum.


Next steps

If you suspect that your Clubhouse profile data might have been leaked by threat actors, we recommend you:

• Beware of suspicious Clubhouse messages and connection requests from strangers.
  
  
• Consider using a password manager to create strong passwords and store them securely.
  
  
• Enable two-factor authentication (2FA) on all your online accounts.

Also, watch out for potential phishing emails and text messages. Again, don’t click on anything suspicious or respond to anyone you don’t know.

 

[sandysgeek]

Clubhouse CEO says user data was not leaked, contrary to reports

Paul Davison said a report of a breach was “false”

Clubhouse CEO Paul Davison said Sunday that a report claiming personal user data had been leaked was “false.” Cyber News reported a SQL database with users’ IDs, names, usernames, Twitter and Instagram handles and follower counts were posted to an online hacker forum. It did not appear that sensitive user information such as credit card numbers were among the leaked info.

Clubhouse did not immediately reply to a request for more information from The Verge on Sunday. But Davison said in response to a question during a town hall that the platform had not suffered a data breach. “No, This is misleading and false, it is a clickbait article, we were not hacked. The data referred to was all public profile information from our app. So the answer to that is a definitive ‘no.’”

Last week, it was reported that personal data for 500 million LinkedIn users had been scraped and posted online. The Microsoft-owned company said that no private member account data from LinkedIn was included in the leak.

That news came just a couple of days after it was discovered that personal data for some 533 million Facebook users was leaked online for free. The Facebook leak reportedly included users’ phone numbers, birthdates, locations, email addresses, and full names.

Clubhouse had a monster first year—despite being invite-only and available only on iOS devices— seeing more than 10 million downloads. Twitter, LinkedIn, Discord, Spotify, and Slack have all launched or are working on competing social audio platforms, and Facebook reportedly has one in the works as well.

 

[sandysgeek]

Apple officially announces special event for April 20: ‘Spring Loaded’

Apple has announced the first Apple event of the year for April 20, and it will be completely virtual.

April Apple event details

After holding three special events in three months last fall (September, October, and November), the April event will mark Apple’s first event of 2021. The event will once again be held remotely due to the ongoing COVID-19 pandemic.

This continues Apple’s trend of spring events. In 2019, Apple held an event at Steve Jobs Theater to unveil new Services initiatives such as Apple Card, Apple Arcade, and Apple TV+. Last year, Apple did not hold a March event due to the pandemic, but it did announce a new iPad Pro, Magic Keyboard, and MacBook Air via press releases in March, followed by the second-generation iPhone SE via a press release in April.

Apple’s April event will be live-streamed across Apple’s website, in the Apple TV app, and on YouTube. We’ll have more details on this process, including instructions on how to watch, when event day rolls around.



All sorts of scuttlebutt what could be announced and released: iPad Pro, iPad mini, AirPods, Apple Silicon iMacs possibly offered in a variety of color options, and bigger screens (replacing discontinued the iMac Pro?), iOS 14.5, macOS 11.3, and more.






Cute how the news of this event was first revealed via Siri this morning.

And the jokes are going around that the event is on 4/20

 

[sandysgeek]

Apple trusts Phobio for its trade-ins, but maybe you should think twice

The Atlanta-based firm is the behind-the-scenes operator of Apple’s trade-in program, and its online reputation raises questions

When Daniel McGloin decided to trade in his mid-2017 Apple MacBook in February of this year, he thought he was getting a pretty good deal. The software engineer and San Diego native initiated the trade-in with Apple through the Apple Store mobile app, where he was quoted $350 for his used laptop. He felt it was in pretty good condition, with no apparent damage to the case and a fully functioning display and keyboard. So McGloin packed up the device and shipped it in, expecting to receive his money in the coming weeks, which would help offset his purchase of a MacBook Air carrying Apple’s new M1 chip.

The situation soon changed after his laptop arrived for inspection. Suddenly, McGloin was told his MacBook was worth just $140, less than half what Apple originally quoted. The mysterious culprit: “display has 3 or more white spots,” the Apple Store app told him. It’s a defect McGloin doesn’t remember ever seeing, and one that he should have noticed: typically, white spots on an LCD display are evidence of serious damage or burn-in and are clearly visible. In McGloin’s estimation, however, the laptop was in “excellent” condition, he said, and he didn’t see any white spots when he packed it up.

So McGloin decided to search around online, where he discovered a lesser-known fact about Apple’s trade-in program. The company he had been dealing with was not actually Apple, but an Atlanta-based contractor named Phobio. Founded in 2010, Phobio is an enterprise service provider that specializes in offering white label trade-in services other companies can pass off as their own.

McGloin also found Phobio had a pretty questionable online reputation when it came to Apple products.

2,360px × 1,640px
Daniel McGloin sent in his 2017 MacBook after receiving a quote of $350, only to have his quote marked down to $140. “Display has 3 or more white spots,” was the reason, though no such issue was wound when it inspected the computer in person.


“It’s here I realized that number one, the trade-in program is not run by Apple, number two, there are lots of people observing the same behavior, and number three, this seems to be a new development in the last few months,” McGloin says.

Inspecting McGloin’s MacBook in person after he rejected the trade-in offer and Phobio returned the computer to him. We could detect no such white spots or any discernible damage whatsoever. The laptop booted up and operates like new, and it has since passed numerous online diagnostic tests.

It’s not clear why McGloin’s estimate was halved. But his experience is indicative of a common belief that’s emerged about Phobio online — that the company stiffs owners of Apple products out of hundreds of dollars in trade-in value — and the supposed “3 or more white spots” defect seems unlikely enough that it bears investigation.

Two other people who spoke provided documentation of their Phobio trade-in processes also experienced a similar situation, in which “white spots” or other supposed defects, only detected after the device was shipped to a Phobio facility, resulted in reduced trade-in quotes. And that’s just a tiny sample of an online torrent of complaints against Phobio and its practices across multiple types of gadgets and with an alarming uptick in the last few months.

1,196px × 1,556px
Another Apple customer, Carlos Pero, had their laptop marked down from $640 to $210 over display white spots Phobio claims it detected.


“Having used it for three years, I can tell you I never noticed a problem,” Carlos Pero, another Apple customer who had their laptop trade-in quote reduced by Phobio from $640 to $210. Pero also asked for his laptop back, and Phobio returned it. Upon inspection, Pero could not detect any issues with his computer, and he showed us a video of his MacBook Pro booting up to verify there were no “white spots” present. “Maybe they have some diagnostic tool? But from a consumer perspective, no way I see a problem before I sent it or after receiving it back.”

Pero says he was never given any photographic proof of the white spots when his trade-in was adjusted. “They sent no such thing. Just the notification of the change in value and essentially the take-it-or-leave-it message which came by way of Apple,” he says. “I imagine it would be a tougher choice for someone who was counting on realizing the full value of the trade-in, who may not be able to afford a new computer otherwise.”

Scores of other instances of this exact situation happening to Apple product owners can be found online, too, with numerous customers citing Phobio’s “3 or more white spots” explanation as the reason for their adjusted trade-in, as well as stories of other types of apparent damage detected only after sending a device in for inspection. This isn’t just restricted to MacBooks, either. Customers often complain of reduced trade-in quotes for iPhones, iPads, and iMacs, too.

In some cases, like McGloin’s, Phobio’s name never comes up, so customers are left with the impression Apple inspected it and reduced their quote accordingly. “The only real ‘correspondence’ I had with Apple and Phobio were the interactions in the Apple Store app. I didn’t otherwise contact them through email or phone,” McGloin says. He tells us he was faced with the tough decision to either accept less than half the promised money or try to sell his computer elsewhere after going through the hassle of wiping it clean and shipping it. “I’m actually a pretty big Apple fan, but this feels off-brand and pretty shady,” he says.

A mid-2017 Apple MacBook Phobio says was worth $140, down from $350, due to “3 or more white spots” in the display. No evidence of white spots could be find

ppleApple often prides itself on customer service and in handling many of its sales operations in-house. So the use of a third-party vendor not advertised publicly on its trade-in website — even in receipts, Apple only refers to an unnamed “trade-in partner” — is a peculiar approach for the iPhone maker.

Outsourcing trade-ins is common in the industry, though. Many businesses pick white-label inspection and recycling firms to cut costs and avoid the hassle of managing a cumbersome operation. Phobio also happens to be the trade-in partner of OnePlus in the US, and the firm also inked a deal with Amazon Canada just last month to handle trade-ins of “certain eligible mobile phones, laptops, iPads and Apple watches.” It handles trade-ins for Costco and B&H Photo, too.

Yet for Apple, which stakes its reputation on quality control, the negative experiences customers report having with Phobio threaten to undermine the image Apple has cultivated as a customer-obsessed product company, which, in turn, helps justify the company’s high-priced consumer tech.

Apple tells us Phobio is not the only company that helps manage its US trade-in program, but it wouldn’t name any others — and we verified that every type of product you’d trade in at Apple.com (computers, phones, tablets, and watches) is currently handled by Phobio in the United States. Apple also has a trade-in partner named Brightstar servicing Canada and other parts of the globe, but two Brightstar employees told us it no longer accepts US trade-ins. One referred us to Phobio specifically.

A podcast interview with Phobio founder and CEO Stephen Wakeling in 2018 includes vague details on the partnership. At one point, Wakeling tells the podcast host he’s not sure Apple would permit him to talk further about the program. Some news posts and forum threads as far back as 2017 mention Phobio as Apple’s trade-in partner, but it’s not clear how long the two have been in business; Apple first began accepting used iPhones at its retail stores in 2013, and the Apple trade-in program has since expanded to include close to its full lineup of hardware products.

It’s not like customers could just walk into an Apple Store to avoid Phobio, at least not where laptops are concerned. Up until last summer, Mac trade-ins, unlike with iPhones or iPads, were not eligible for in-store inspections by Apple employees at the company’s retail locations. Macs had to be sent in the mail, where Apple’s trade-in partner Phobio steps in. (Due to COVID-19 store closures and limitations on in-store services, it’s likely many customers have kept using the mail-in service for Macs.)

And even a cursory Google search on Phobio and its handling of Apple trade-ins returns dozens upon dozens of message board threads detailing bad experiences and a Better Business Bureau page with more than 500 complaints and new entries added almost every day. Many of these complaints are recent, and some are from Apple customers wondering openly if they’ve been a victim of some type of fraud or whether Phobio is a legitimate company.

When some customers complained, they reported Phobio’s provided proof consisted of grainy images that didn’t show clear-cut evidence. Some customers have detailed how they took photos of their devices prior to shipping them in in the event of disputes, only for Phobio to return photographic evidence they say either doesn’t illustrate the alleged issue or is too low-quality or obfuscating to serve as proper proof.

2/ So on with them now, it turns out they use "trusted partners" to do fulfillment on the trade-ins. So the outsourced company can I guess either break it or report damage to stiff you on the price.
— Josh Marshall (@joshtpm) December 22, 2020

“Your trade-in value has changed.”
I don’t remember white spots but that’s not the damage I made. What a scam. #apple #tradein pic.twitter.com/hlgebhxCgq
https:// t . c o /hlgebhxCgq
— Naoki Hiroshima (@N) December 10, 2020

I know what everyone is going to say. @Apple is just being apple. But when you offer me $120 to trade-in my old device and then drop that offer to $30 for an imaginary "white spot", that is BS. What white spot?!?!? You put the red sticker to identify it but I don't see it #sus pic.twitter.com/gnAyp044x0
https:// t . c o /gnAyp044x0
— A Mindful Minx (@TweetaVonTease) November 9, 2020

A large number of the complaints about Phobio have a common theme: a MacBook or iPhone that seems to be in perfect working order, only for the device to later have an unexplained deficiency. Phobio, which is at that point in possession of the device, then offers the customer the option to accept the reduced quote or ask for the product to be shipped back. (Phobio does offer to ship the product both ways for free.)

This presents a thorny set of choices for a device owner, primarily by seeding self-doubt as to the real value of the product they’re hoping to trade in and what their best option might be. What if the product did have the damage beforehand and they simply didn’t notice or perhaps something happened during transit? Maybe Phobio is using a proprietary diagnostic tool that reveals something no consumer could ever find on their own? What if, by some stroke of bad luck, the device was somehow damaged during transit, and you’d have a hard time using it or selling it somewhere else if you ask for it back?

Pretty disappointed in Apple’s trade in vendor. Trade in value dropped from $490 to $180 after “three white spots” magically appeared on my old MBP while in transit. Certainly feels like bait and switch on that one.
— Rob Zimmerman (@taintedzodiac) December 23, 2020

Chris Dwan calls his experience with Phobio a “pretty straightforward bait and switch,” saying that he mailed in his MacBook Air with an expected trade-in value of $370, only for it to be knocked down to $150 for damage to the outer shell he suspects happened during transit or inspection. “At that point it was take-it-or-leave-it. They did offer to ship the laptop back, but I caved and took my $150.”

At the end of the day, someone trading in their used Apple device is looking to get rid of it and hoping they’ll get a little cash for their trouble, instead of simply recycling it or leaving it to collect dust. That could make them easy to take advantage of: many are likely willing to take what they can get, rather than spend additional time and energy trying to get satisfaction from a company that’s holding all the cards, particularly when it’s not clear who’s to blame or whether their product is actually damaged.

“White spots” or no, it’s not surprising that a company like Phobio would be facing loads of complaints. Every company working in customer service is likely to have its fair share of disgruntled customers complaining online; people with positive experiences tend to have little reason to share those stories with the world. Trade-in programs can involve especially fraught negotiations because of the money involved and the fear customers harbor of being scammed. Even rightful adjustments to trade-in quotes might inspire someone to leave a negative review or feel as if they’ve been had.

So upset at @Apple. I traded in my watch, which was in perfect working conditions and no screen issues. They now saw it had white spots. That isn’t true. I have pictures of it before packing it. So mad!!
— Mari (@Busyspider23) October 7, 2020

In fact, many people have reported positive experiences with Phobio — many never realizing they weren’t dealing with Apple directly. One staffer says they were even given more money for an Apple trade-in after the device exceeded the quality estimate they were initially quoted on.

Phobio customer service representatives can also be seen replying to almost every single tweet, tagging the company’s support account, and Better Business Bureau post, asking how to remedy the situation. In the latter cases, many of the customers who complained post to the bureau’s website after the fact saying Phobio resolved their issues with fixed trade-in values or Apple Store gift cards to make up the difference.

In a tour of one of its so-called aggregation facilities posted to LinkedIn last month, a Phobio representative shed some light on how Apple products are evaluated. “We have very simple grading criteria. We only have two of course, which is working and damaged to make it easy for folks at home to grade their own devices,” the representative explains, before transitioning to a Phobio employee inspecting a MacBook. “He’s making sure the screen is intact and functional, he’s making sure the keys function, and then he’s checking to see if there’s any wear or tear to the computer or any major dents or damage.”

05:26
https://vimeo.com/524211358?utm_campaign=5370367&utm_source=affiliate&utm_channel=affiliate&cjevent=21b504b29d8811eb80b500050a18050d&clickid=21b504b29d8811eb80b500050a18050d


“A couple of other things to look out for: LCD damage, screen spotting and dead pixels, cracked screen, missing or malfunctioning buttons, and large dents,” the representative says. When asked by Wakeling, Phobio’s CEO who appears on-screen at the beginning and end of the video, what the top issues are with devices sent in for trade-in, the representative simply says “screen delamination” or “any major damage” to the device.

In a Phobio inspection guideline document posted online for business trade-ins (which may have different standards than consumer trade-ins), the company details its processes for inspecting products like iPhones and Macs. Under the display portion, the document says “a device is considered ‘Damaged’ if the display: is cracked, fractured and/or shows signs of delamination; does not function as designed (displaying single colors, lines, flickering); is scratched such that it affects readability.”

However, no mention of white spots can be found in the document, nor did Phobio mention that issue in its facility tour.

750px × 971px


You could chalk up these bad customer experiences with Phobio to the sheer volume of products Apple’s trade-in program likely deals in or discrepancies in the level of diligence of its individual employees. But that doesn’t explain the mystery of the white spots, and why we’ve seen perfectly functional MacBook computers have their trade-in value cut in half — or more.

What we do know about the white spots scenario is that it typically involves an Apple laptop in seemingly good condition quoted at one price, only for the trade-in estimate to be knocked down by more than 50 percent upon inspection. The common response from Phobio is that the display suffers from “3 or more white spots.” In McGloin’s case, these apparent spots were not detectable by a human eye before or after Phobio inspected the device. It doesn’t add up.

So we felt it necessary to ask Phobio if they had a reasonable explanation for cases like these that went beyond the standard “screen spotting,” “dead pixels,” and other general LCD damage that would be perceptible by looking at the screen yourself.

Phobio did not have a media contact line or any other form of public-facing public relations department we were able to locate for this story. We did, however, contact a third-party PR representative for Phobio, who forwarded our questions to the company. We repeatedly asked for the opportunity to speak on the record with an official Phobio representative about our findings, but we were ultimately denied. We instead sent a series of questions.

Phobio would not comment directly on the white spots issue, and it would not offer an explanation as to what tools it uses to evaluate MacBook displays or why it seems some customers have had their trade-in quotes adjusted because of the alleged white spots.

When asked, Phobio would not say how long it’s been Apple’s trade-in partner or if it is Apple’s only US trade-in partner, and the company would not comment on the financial terms of its contract, including whether Phobio or Apple gets to keep and resell the devices customers send in. Phobio would also not say whether it receives any guidance from Apple on how to inspect products and make adjustments to trade-in quotes.

Phobio would also not tell us how frequently it negatively adjusted Apple trade-in quotes by up to or more than half. It would also not say how often customers accept these lowered adjustments versus rejecting them and asking for the product back.

In the end, Phobio would only provide this statement:

We carefully assess each device sent to us, and only change the initial quote if the device we receive or its condition differs from what was initially indicated by the customer. We document our findings at every step of the way with photos that are shared with the customers. The customer can then agree to the revised quote, or if they do not, we express ship it back to them at our expense.

We specifically train our support team to see the trade from the point of view of the customer, with empathy, and to advocate for the customer. If devices are damaged in transit or we make a mistake in the inspection, we seek to fix it immediately. We strongly believe in giving full and fair value to customers for their trade ins. This helps fuel the circular economy, and sustainability, and it is part of our corporate purpose.

Apple declined to comment further.

As for McGloin, he’s not sure what’s he’s going to do now with his returned MacBook. “I actually have no idea. I’m not really aware of alternative trade-in options,” he says, adding that he has in the past opted to donate used products or gifted them to a friend.

For now, the computer sits packed up in Phobio’s shipping box, with no visible white spots and no explanation as to how a perfectly functional Apple laptop from four years ago could now be considered worth less than a pair of AirPods.

 

[sandysgeek]

Latest App Store scam exposed is a kids game with a hidden online casino

Developer Kosta Eleftheriou has developed a knack for finding App Store scams over the last few months. And the latest one he’s exposed is quite interesting. The app disguises itself as a kids’ game but in reality, it’s an online casino that bypasses Apple’s in-app purchase system and appears to be scamming users out of unknown sums.

Kosta shared about this latest scam he discovered on Twitter today. In the description, “Jungle Runner 2k21” claims to be a “fun running game” for ages 4+ (Apple appears to have pulled the game in the US). However, for those opening the game from an IP address in Turkey (or with a VPN), the app is actually a crooked online casino that uses its own payment system.

Notably, another case where a developer snuck a banned Iranian app back into the App Store with this same strategy.

Kosta also detailed the misleading ads the developer uses for Jungle Runner – fake CNN Turk features – to entice users.

The developer uses shady ads to attract unsuspecting users, pretending the app was featured on CNN Turk. pic.twitter.com/zbuddS8Jrf
https:// t . c o /zbuddS8Jrf
— Kosta Eleftheriou (@keleftheriou) April 15, 2021

Kosta says the game that shows up in the US and elsewhere works but is “extremely basic and very poorly designed.”

He believes that since users trust the App Store, people think it must be safe to try the app:

But since the scammers are not using Apple’s IAP, and an online casino could just be a website, why are they even going through the App Store?

To take advantage of people’s misplaced trust due to Apple’s “Security! Privacy!” marketing.

In fact, this *is* just a web view! pic.twitter.com/LqKHpSOw74
https:// t . c o /LqKHpSOw74
— Kosta Eleftheriou (@keleftheriou) April 15, 2021

Kosta says Jungle Runner was on the App Store for a few months and had a couple of updates successfully go through Apple. And some of the reviews say users were scammed out of large amounts of money and not receiving what they purchased.

As an icing on the cake, people in the reviews say that they deposited large sums for the promise of a bonus, but they never received the promised payouts.

Surprising no one, the scammers aren’t even operating a fair casino.

— Kosta Eleftheriou (@keleftheriou) April 15, 2021

Apparently the Jungle Runner developer also had another app pulling the same scam.

Last month after publicly calling out a variety of App Store abuse, Kosta filed a lawsuit against Apple over “monopoly muscle” and a failure to police App Store scams.

 

[sandysgeek]

PSA: Apple is Updating Old Apps With Latest Signing Certificate Ahead of iOS 14.5

Users may notice that a number of very old apps are receiving new App Store updates. Instead of fixing bugs or adding new features, the updates are occurring because Apple is updating developers' apps that use a legacy *App Store* code signing certificate with the latest version so that they can launch correctly in the upcoming releases of iOS 14.5 and iPadOS 14.5.

Developers of affected apps do not need to re-sign their apps themselves, since Apple will issue the update and new signing certificate itself. Apple is issuing the updates with the What's New text "This app has been updated by Apple to use the latest Apple signing certificate."

Apple alerted developers of affected apps about the required update and its purpose, and the updates have now started rolling out to users.

Ah yes, legacy, ye olden time of *checks notes* 2018 To be fair, that does feel like a decade ago… pic.twitter.com/RCnk7hZVnB

— Steve Troughton-Smith (@stroughtonsmith) April 13, 2021​

https://twitter.com/stroughtonsmith/status/1381771866080219139?ref_src=twsrc^tfw

The change only affects apps that have not been updated at all for several years, and therefore have an outdated code signing certificate. Apple conducted a similar wave of signing certificate updates in July last year.

The updated signing certificates will allow apps to launch as expected in iOS 14.5 and iPadOS 14.5, which are due to be released very soon.

 

[sandysgeek]

Select 21.5-inch iMac models back-ordered amid chip shortages, rumors of a refresh

As rumors about a potential 24-inch Apple Silicon iMac continue to swirl, various models of the current 21.5-inch iMac are significantly back-ordered from Apple’s Online Store. Many models are also unavailable for pickup from Apple Stores around the United States, but this could be due to chip shortages.

Currently, Apple’s Online Store indicates that the base model 21.5-inch iMac is back-ordered until April 27 through April 29. Upgrading to the 16GB RAM/1TB Fusion Drive configurations further delays delivery, pushing estimations into May.

Apple Store pickup is also widely unavailable for the base 21.5-inch iMac configuration across the United States. Upgraded configurations of the base model are also completely unavailable for Apple Store pickup, although that is not out of the ordinary for custom orders.

This isn’t the first hint we’ve seen at a potential new iMac. Last month, Apple officially discontinued the 512GB and 1TB SSD options for the 21.5-inch iMac, signaling production changes could be underway.

But something else to keep in mind is that there is currently a worldwide chip shortage affecting virtually every technology company. In the past, the availability of current-generation Apple products could sometimes serve as a good indication of an update looming, but that’s not necessarily the case right now due to the broader industry chip shortages.

For comparison’s sake, the 27-inch iMac is still largely in stock and available, although certain custom configurations are back-ordered a bit further than usual. The higher-end 21.5-inch iMacs are also still largely available.

Rumors have suggested that Apple has a redesigned iMac with Apple Silicon on the way sometime this year. The 21.5-inch model will reportedly get a larger 24-inch display, while the 27-inch could be boosted to 30-inches. It is possible that the 24-inch iMac is released before the 27-inch iMac, given potential differences in performance.

 

[sandysgeek]

Switching apps and using background app refresh on your iPhone and iPad

You can quickly switch apps from one app to another on your iPhone, iPad, or iPod touch. When you switch back, you can then pick up right where you left off. After you switch to a different app, some apps run for a short period of time before they’re set to a suspended state. Apps that are in a suspended state aren’t actively in use, open, or taking up system resources. With Background App Refresh, suspended apps can check for updates and new content.


Switch apps on iPhone X and iPad

If you have an iPhone X or later, or an iPad:

1. Swipe up from the bottom to the middle of your screen and hold until you see the App Switcher (see animation above).

2. Swipe left or right to find the app that you want to use.

3. Tap the app.

If you have a Smart Keyboard or Bluetooth keyboard paired to your iPad, press Command-Tab to switch between apps.


Switch apps with the Home button

If you have an iPhone 8 or earlier, or an iPad:

1. Double-click the Home button to see recently used apps.

2. Swipe left or right to find the app that you want to use.

3. Tap the app.

Use Background App Refresh


Use Background App Refresh

If you want suspended apps to check for new content, go to Settings > General > Background App Refresh and turn on Background App Refresh. If you quit an app from the app switcher, it might not be able to run or check for new content before you open it again.

 

[sandysgeek]

few of Apple Inc's milestones

April 1, 1976 - Apple starts

Steve Jobs and Steve Wozniak founded Apple Computer in the Jobs' family garage in Los Altos, California. The company unveiled the Apple II in 1977

January 1984 - Macintosh computer

Apple grabbed the world's attention with the 1984 introduction of the Macintosh.

August 1998 - iMac

Steve Jobs rejuvenated Apple with the first iMac. Its colorful, translucent design stunned the tech industry. The iMac was also famous for what it didn't have: A floppy disk drive.

January & October 2001 - iTunes and iPod

The iPod wasn't the first digital music player, but it quickly became the most popular. Launched in 2001, the iPod became the primary driver of Apple's renaissance.

Apple's iTunes software contributed to the iPod's success. Apple released the software for Microsoft Windows in 2003, the same year Apple launched the iTunes Store, selling songs for 99 cents apiece and creating the online music market.

March 2001 - OS X

Apple's OS X was a marriage of NeXT's software and Apple's designs. The technology built in OS X was later used in the software that powered the iPhone, the iPad and the Apple Watch.

January 2007 - iPhone

Steve Jobs showed off Apple's first iPhone during a keynote presentation at the 2007 Macworld Expo in San Francisco. He said Apple would "reinvent the phone." The day the iPhone was announced, the company also changed its name from Apple Computer to Apple Inc.

April 2010 - iPad

Apple followed up with the iPad in 2010, finally giving the tablet market the jolt it needed to go mainstream.

September 2014 - Apple Watch

The Apple Watch, unveiled at an event in September 2014, went on sale in April 2015. Apple hasn't released sales data, and the tech community can't decide whether it's a success or a failure.






Sandy posted this a year ago at this time

The Bill of Rights contains our freedom of speech, denies the government the authority to infringe on our right to bear arms, but it does not mention our right to privacy. And we do not have it, especially on the web.


The adage goes, "If you're not paying for a service, you're the product, not the customer,"

Besides developers’ self-reported privacy practices in their apps in Apple's App Store, also alerting a user whenever an app uses the microphone, camera or clipboard, Tuesday Apple will finally be releasing App Tracking Transparency — which will let users opt out of being tracked by apps, and we believe will impact the web.

 

[sandysgeek]

Roundup: Everything Apple announced at its ‘Spring Loaded’ event

Apple yesterday officially held its first event of the year with the tagline “Spring Loaded.” During the event, the company unveiled updates for the iPad Pro, iMac, its AirTag item trackers, and much more. Read on as we recap everything Apple announced during yesterday’s event.


Services update

Apple kicked things off with an update on its Services products. First, for Apple Card, Apple announced a new “Apple Card Family” feature that lets users share the same Apple Card with other family members. Apple says that it created this feature to “reinvent how spouses, partners, and the people you trust most share credit cards and build credit together.”

Secondly, Apple introduced Podcasts Subscriptions, a new feature in Apple Podcasts that allows users to directly support podcasters through the Podcasts app. The new service will be available starting in May.


Purple iPhone

In terms of hardware, Apple announced a new color for the iPhone 12 mini and iPhone 12. Purple will join the iPhone 12 lineup as the sixth color option from which shoppers can choose.

So this means the iPhone 12 lineup is now available in white, black, blue, green, (PRODUCT)RED, and purple.

The new purple iPhone 12 mini and iPhone 12 will be available for pre-orders on Friday, April 23, with the first orders shipping on April 30. We’ve got a handful of images of the new color at the link in the show notes below.


AirTags

Following the purple iPhone announcement, Apple shifted its focus to the Find My application and finally introduced its AirTag item tracker, which has been rumored for over two years at this point.

AirTags can be attached to any item in order to track it using the Find My app. For example, you can attach them to your backpack, to keys, to your wallet, or anything else.

Apple touts that AirTags have a “lightweight design,” and there are two key factors to this: water-resistance and a user-replaceable battery. Apple says AirTags are rated for IP67 water and dust resistance.

Apple also says that AirTag offers “over a year’s worth of battery life with everyday use” and features a removable cover that makes it easy for users to replace the battery. The battery inside is a CR2032, which is a standard coin cell battery

The pairing and setup experience is very similar to AirPods, making it a very integrated process within iOS.

Each AirTag incorporates a U1 chip, which Apple says enables unique precision tracking features for users with the iPhone 11 and iPhone 12. The U1 chip can be used to more accurately determine the distance and direction to a lost AirTag when it is in range. As a user moves, Precision Finding fuses input from the camera, ARKit, accelerometer, and gyroscope, and then will guide them to AirTag using a combination of sound, haptics, and visual feedback.

AirTag is also designed with a handful of privacy features in mind. One of the most notable things here is “proactive features” that are there to “discourage unwanted tracking.”

Apple explains that:

Bluetooth signal identifiers transmitted by AirTag rotate frequently to prevent unwanted location tracking. iOS devices can also detect an AirTag that isn’t with its owner, and notify the user if an unknown AirTag is seen to be traveling with them from place to place over time. And even if users don’t have an iOS device, an AirTag separated from its owner for an extended period of time will play a sound when moved to draw attention to it. If a user detects an unknown AirTag, they can tap it with their iPhone or NFC-capable device and instructions will guide them to disable the unknown AirTag.

You can buy a singular AirTag for $29 or a pack of four for $99. Pre-orders begin this Friday, April 23, at 8 a.m. ET/5 a.m. PT. The first orders will arrive on April 30. You can personalize AirTags with engravings and emoji as well, and Apple has a range of different accessories to go with them.

Apple TV

The Apple TV was next on the docket. Apple announced a new version of the Apple TV 4K with an A12 Bionic processor on the inside, giving it even more power compared to the competition. There is also support for higher refresh rate content, though full support for 120Hz refresh rates is not there yet.

Perhaps even more notably, Apple also introduced a new version of the Siri Remote. The new Siri Remote features a silver design with a new click wheel at the top alongside a power button for the first time. There’s also a back button that replaces the old menu button.

The new Apple TV will be available to order starting April 30, and the first orders will ship in the second half of May. Pricing is the same as its predecessor at $179 for 32GB of storage and $199 for 64GB. The new Siri Remote will also available on its own for $59.

 

[sandysgeek]

iMac

Next up, Apple introduced its first redesign of the iMac in over a decade. The new iMac features an all-new design with minimal bezels, plus Apple Silicon on the inside.

The new iMac features a 24-inch display with True Tone display technology. It is available in an array of new colors. Inside of the iMac is an M1 processor, which is also what we saw in last year’s Mac mini, MacBook Pro, and MacBook Air.

The new iMac also features an upgraded FaceTime camera with a resolution of 1080p, doubling the resolution of the previous entry-level iMac. The camera works with the M1’s Neural Engine to improve your video quality. There is also a studio-quality microphone array as well as spatial audio support.

In terms of design, the new iMac features a slim profile with smaller bezels around the display, but the chin is still there and is similar to the previous-generation iMac design but without the Apple logo.

To go along with the new iMac, Apple has also announced a new Magic Keyboard with Touch ID. This marks the first time that Apple has expanded Touch ID to an external keyboard, and it allows you to unlock your Mac, authenticate for Apple Pay and App Store purchases, and more. The keyboard is also color-matched to the color of the iMac itself, as are the Magic Mouse and the Magic Trackpad.

In terms of pricing, there are essentially two tiers of the 24-inch iMac.

• $1,299 – 8-core CPU and 7-core GPU with 8GB of unified memory, 256GB SSD, two Thunderbolt ports, a Magic Keyboard without Touch ID, and a Magic Mouse.
  
  
• Available in: Green, pink, blue, and silver.
  
  
• $1,499 – 8-core CPU and 8-core GPU with 8GB of unified memory, 256GB SSD, two Thunderbolt ports, two USB 3 ports, a Magic Keyboard with Touch ID, a Magic Mouse, and Ethernet connectivity.
  
  
• Available in: Green, yellow, orange, pink, purple, blue, and silver

You’ll be able to pre-order the new iMac starting on April 30, and the first orders will begin shipping during the second half of May.


iPad Pro

Last but certainly not least, we also got a new iPad Pro lineup during yesterday’s Apple event.

The 2021 11-inch and 12.9-inch iPad Pro feature the 8-core CPU and 8-core GPU M1 chip and a new Thunderbolt connector (over the same USB-C port). The larger 12.9-inch model also sports a new mini-LED screen, which Apple calls “Liquid Retina XDR.”

Apple says this new display “offers an even more expansive view and a stunning HDR experience.” The iPad Pro has around 2500 local dimming zones, enabling a 1,000,000:1 contrast ratio and 1600 nits peak brightness.

The new iPad Pro also features an upgraded camera system for photography and augmented reality use cases. The front camera now features a 12-megapixel ultra-wide lens. For FaceTime calls, the new ultra-wide camera now automatically pans around to keep the person in frame as they move around the room.

The 11-inch iPad Pro starts at $799 – the same as its predecessor – and the 12.9-inch model starts at $1,099, which is a $100 price increase.

Both models are available in 128GB, 256GB, 512GB, 1TB, and an all-new 2TB configurations. There’s also 5G connectivity for the first time, including mmWave 5G support in the United States.

• 11-inch iPad Pro with cellular and 2TB storage: $2,099
  
  
• 12.9-inch iPad Pro with cellular and 2TB storage: $2,399

The new iPad Pro will be available to pre-order on April 30 and start shipping in the second half of May.

Alongside the new iPad Pro, Apple updated the Magic Keyboard accessory with a new white color option, but the functionality is the same.


Apple Event wrap up

Yesterday’s Apple event was exactly 60 minutes long, and almost every minute was filled with an announcement. From the first iMac redesign in over a decade to an all-new product category in AirTag, there were a lot of notable moments during the event.






M1 Chip now in iPad Pro video - 2:01

https://www.youtube.com/watch?v=234ng-sUFEA

 

[sandysgeek]

Apple iOS 14.5 release date with ATT, IDFA restrictions confirmed for next week

Apple will start enforcing the iPhone privacy change that Facebook is worried about next week

The next major update to the iPhone operating system, iOS 14.5, will be released “next week,” Apple said Tuesday.

The detail was slipped into new product announcements Apple made Tuesday. IOS 14.5 has a lot of new features, but the one that’s being most closely watched is called ATT, or App Tracking Transparency.

After iPhone users install iOS 14.5, when they open any app that wants to access a device ID called the Identifier for Advertisers, or IDFA, they will see a pop-up. The pop-up will ask if they want to be tracked and give them an opportunity to opt in. Companies that rely on online advertising, especially Facebook, have said that the privacy change will reduce the effectiveness and profitability of targeted ads and potentially roil the online advertising business.

Apple has also said that it is prepared to remove apps that don’t comply with the new policy. In a blog post, Apple said that all apps submitted starting on April 26 must be ready to support ATT.

IOS 14.5 also has other new features, including a redesigned vaccine emoji, a feature that helps quickly unlock an iPhone while wearing a mask, and new voices for Siri.

Apple typically releases major software updates on Tuesdays. A new purple iPhone that hits stores on April 30 will have the software pre-installed.

 

[sandysgeek]

Apple reminds developers about ATT requirements ahead of iOS 14.5 launch

iOS 14.5 is arriving to the public next week with a host of new features and changes and a major one is the new App Tracking Transparency. Today Apple has shared a reminder with developers to have ATT requirements met for apps by April 26.

Apple hasn’t officially announced when the ATT feature will show up for users other than “early spring.” However, it’s expected to get turned on with iOS 14.5 (at some point) and Apple gave a heads up to developers today about making sure their apps are ready by April 26:

With the upcoming public release of iOS 14.5, iPadOS 14.5, and tvOS 14.5, all apps must use the AppTrackingTransparency framework to request the user’s permission to track them or to access their device’s advertising identifier. Unless you receive permission from the user to enable tracking, the device’s advertising identifier value will be all zeros and you may not track them.

When submitting your app for review, any other form of tracking — for example, by name or email address — must be declared in the product page’s App Store Privacy Information section and be performed only if permission is granted through AppTrackingTransparency. You’ll also need to include a purpose string in the system prompt to explain why you’d like to track the user, per App Store Review Guideline 5.1.2(i). These requirements apply to all apps starting April 26, 2021.

As a reminder, collecting device and usage data with the intent of deriving a unique representation of a user, or fingerprinting, continues to be a violation of the Apple Developer Program License Agreement.

 

[sandysgeek]

New M1 iMac vs Intel: Specs, features, price, more

There's a 10 image limit per post, so breaking into two posts



Here’s how the new M1 iMac compares to the Intel iMacs

After over a decade with the same design, the most exciting release for many at Apple’s Spring Loaded event was the totally redesigned all-in-one Mac. From the move to Apple Silicon and bright new colors, to a super-thin design, larger 24-inch size, and much more, let’s look at the M1 iMac vs Intel iMac.


The 2021 M1 iMac replaces the 21.5-inch 4K Intel iMac. But with the first iMac to make the shift to Apple Silicon being more entry-level, the company is continuing to sell the 27-inch 5K iMac. The latter is configurable with up to 8TB SSD storage, 128GB RAM, and high-end GPUs (Apple is continuing to sell the 21.5-inch non-Retina iMac too).

That’s not to say the M1 iMac will be in any way slow. Just like we’ve seen with the M1 MacBook Air, Pro, and Mac mini, Apple’s first desktop-class SoC outperforms a host of more expensive computers with Intel guts – including machines like its 2019 16-inch MacBook Pro.

The higher-end Apple Silicon Macs are yet to come, but the new iMac will be plenty powerful enough for regular users and even some pro workflows. But since there are some limitations, we’ve included the 27-inch 5K Intel iMac in the comparisons below for reference.


M1 iMac vs Intel iMac – Hardware

When comparing the new M1 iMac to the 21.5-inch Intel iMac, Apple says it offers up to 85% faster CPU performance, up to 2x faster GPU performance, and up to 3x faster machine learning performance. Apple hasn’t shared improvement figures when stacking up against the 27-inch iMac.

The M1 chip also allows the new iMac to edit up to five streams of 4K video footage “without dropping a frame in Final Cut Pro.”

Like the first three M1 Macs, the new iMac is limited to a maximum of 16GB unified RAM. While that may sound light to some, the tight integration Apple brings with the custom SoC and macOS is able to provide more performance than you’d expect. As my colleague Stephen Hall wrote about the M1 MacBook Air, 8GB RAM is going to be plenty on Apple Silicon machines for many users, but go for 16GB if you’re on the fence.


M1 iMac vs Intel – Display

The M1 iMac comes with a handful of nice display improvements. First, of course, you’ve got the bump from a 21.5-inch panel to 24-inches. And Apple didn’t just keep the 4K resolution from the 2019 Intel Retina iMac, the M1 iMac has a 4.5K resolution at 4480 x 2520.

Also, the bezels are much slimmer (shown off in top image) but Apple kept the chin – likely to have someplace to put the fan system. And removing the Apple logo from the front brings a more minimalist design.

The new display also been upgraded to include Apple’s True Tone tech for a better viewing experience that adjusts based on ambient light. However, the Nano-texture screen option remains exclusive to the 27-inch iMac and Apple’s Pro Display XDR.

M1 iMac vs Intel – I/O

The M1 iMac gets a number of improvements and modernizations when it comes to I/O. The ports included are now 2 Thunderbolt/USB 4 + 2 more USB 3 Type-C on higher-end models. That does mean no USB-A and no SD card slot.

Gigabit Ethernet has been cleverly moved to the power brick for more expensive models (optional on the base version) and the power cable attaches magnetically.

Other improvements include WiFi 6, Bluetooth 5, a 1080p FaceTime camera, and Touch ID on the new Magic Keyboard (optional on base model, incl. with mid+ models).

Like the other M1 Macs, one limit compared to Intel iMacs is support for only one external display. But that may not be as much of an issue since this is an iMac with an included display.

 

[sandysgeek]

Audio

The verdict is still out on whether the new M1 iMac’s 6-speaker system can rival external speakers, but Apple says they’re impressive.

You get wide stereo sound produced by two sets of force-canceling woofers + tweeter, Dolby Atmos support, and the studio-quality 3-mic array we’ve seen land in other Macs.

Colors, size, weight

The M1 iMacs are getting lots of attention over not just the new form factor, but particularly the finishes. There are seven colors to pick from (four with the base model). And a lot of people are excited to see the fun vibe come back to the Mac. For those that don’t dig that, there’s the silver option. However, none of the new iMacs come with black bezels – only white.

The new M1 iMac features a super-thin 11.5 mm depth (14.7 cm counting the stand).

Pricing

The M1 iMac starting at $1,299 feels like a great value when you consider everything you’re getting. However, keep in mind the base model skips niceties like the Magic Keyboard with Touch ID, 2x USB-C ports, Ethernet in the power adapter, and four colors choices instead of seven.

M1 iMac vs Intel wrap-up

The new M1 iMac is a big step forward for Apple’s iconic all-in-one desktop. It offers a lot of value at the same starting price of the old 21.5-inch 4K Intel iMac – a larger, sharper screen, notably faster performance with the M1 chip, Thunderbolt/USB 4, all-new design, Touch ID, 1080p FaceTime camera, and more.

I think the colors are really fun and for those that want to keep it simple, you’ve still got the classic silver. The only downside I see is those who would like black bezels are out of luck.

Unless you’re waiting for the higher-end iMac to be released or need a really powerful machine like a Mac Pro or portability of a MacBook, the new iMac is a compelling buy starting at $1,299. It’s also very competitive with the Mac mini that starts at $699 since a display, mouse, and keyboard is sold separately.

Orders are opening for the new M1 iMac on April 30 with the first deliveries starting in the second half of May.

 

[sandysgeek]

Brace yourselves. Facebook has a new mega-leak on its hands

VIDEO DEMO —

Facebook Email Search v1.0 can process 5 million email addresses per day, researcher says.

Still smarting from last month's dump of phone numbers belonging to 500 million Facebook users, the social media giant has a new privacy crisis to contend with: a tool that, on a massive scale, links Facebook accounts with their associated email addresses, even when users choose settings to keep them from being public.

A video circulating on Tuesday showed a researcher demonstrating a tool named Facebook Email Search v1.0, which he said could link Facebook accounts to as many as 5 million email addresses per day. The researcher—who said he went public after Facebook said it didn't think the weakness he found was "important" enough to be fixed—fed the tool a list of 65,000 email addresses and watched what happened next.

"As you can see from the output log here, I'm getting a significant amount of results from them," the researcher said as the video showed the tool crunching the address list. "I've spent maybe $10 to buy 200-odd Facebook accounts. And within three minutes, I have managed to do this for 6,000 accounts."


[IMG]https://cdn.arstechnica.net/wp-content/uploads/2021/04/facebook-email-search.jpg[/IMG]


The video was obtained on condition the video not be shared. A full audio transcript appears at the end of this post.


[B]Dropping the ball[/B]

In a statement, Facebook said: "It appears that we erroneously closed out this bug bounty report before routing to the appropriate team. We appreciate the researcher sharing the information and are taking initial actions to mitigate this issue while we follow up to better understand their findings."

A Facebook representative didn't respond to a question asking if the company told the researcher it didn't consider the vulnerability important enough to warrant a fix. The representative said Facebook engineers believe they have mitigated the leak by disabling the technique shown in the video.

The researcher, and agreed not to identify, said that Facebook Email Search exploited a front-end vulnerability that he reported to Facebook recently but that "they [Facebook] do not consider to be important enough to be patched." Earlier this year, Facebook had a similar vulnerability that was ultimately fixed.

"This is essentially the exact same vulnerability," the researcher says. "And for some reason, despite me demonstrating this to Facebook and making them aware of it, they have told me directly that they will not be taking action against it."


[B]On Twitter[/B]

Facebook has been under fire not just for providing the means for these massive collections of data, but also the way it actively tries to promote the idea they pose minimal harm to Facebook users. An email Facebook inadvertently sent to a reporter at the Dutch publication [URL="https://datanews.knack.be/ict/nieuws/interne-mail-toont-hoe-facebook-veiligheidsproblemen-wil-normaliseren/article-news-1724927.html?cookie_check=1618964208"][COLOR="Blue"]DataNews[/COLOR][/URL] instructed public relations people to "frame this as a broad industry issue and normalize the fact that this activity happens regularly." Facebook has also made the distinction between scraping and hacks or breaches.

It's not clear if anyone actively exploited this bug to build a massive database, but it certainly wouldn't be surprising. "I believe this to be quite a dangerous vulnerability, and I would like help in getting this stopped," the researcher said.

Here's the written transcript of the video:

[QUOTE] So, what I would like to demonstrate here is an active vulnerability within Facebook, which allows malicious users to query, um, email addresses within Facebook and have Facebook return, any matching users.

Um, this works with a front end vulnerability with Facebook, which I've reported to them, made them aware of, um, that they do not consider to be important enough to be patched, uh, which I would consider to be quite a significant, uh, privacy violation and a big problem.

This method is currently being used by software, which is available right now within the hacking community.

Currently it's being used to compromise Facebook accounts for the purpose of taking over pages groups and, uh, Facebook advertising accounts for obviously monetary gain. Um, I've set up this visual example within no JS.

What I've done here is I've taken, uh, 250 Facebook accounts, newly registered Facebook accounts, which I've purchased online for about $10.

Um, I have queried or I'm querying 65,000 email addresses. And as you can see from the output log here, I'm getting a significant amount of results from them.

If I have a look at the output file, you can see I have a user ID name and the email address matching the input email addresses, which I have used. Now I have, as I say, I've spent maybe $10 using two to buy 200-odd Facebook accounts. And within three minutes, I have managed to do this for 6,000 accounts.

I have tested this at a larger scale, and it is possible to use this to extract feasibly up to 5 million email addresses per day.

Now there was an existing vulnerability with Facebook, uh, earlier this year, which was patched. This is essentially the exact same vulnerability. And for some reason, despite me demonstrating this to Facebook and making them aware of it, um, they have told me directly that they will not be taking action against it.

So I am reaching out to people such as yourselves, uh, in hope that you can use your influence or contacts to get this stopped, because I am very, very confident.

This is not only a huge privacy breach, but this will result in a new, another large data dump, including emails, which is going to allow undesirable parties, not only to have this, uh, email to user ID matches, but to append the email address to phone numbers, which have been available in previous breaches, um, I'm quite happy to demonstrate the front end vulnerability so you can see how this works.

I'm not going to show it in this video simply because I don't want the video to be, um, I don't want the method to be exploited, but if I would be quite happy to, to demonstrate it, um, if that is necessary, but as you can see, you can see continues to output more and more and more. I believe this to be quite a dangerous vulnerability and I would like help in getting this stopped.[/QUOTE]

 

[sandysgeek]

iOS 14.5 now available to everyone

Throwing this together on-the-fly, and hopefully more later about releases and other news.

NOW

Apple releases iOS 14.5 and iPadOS 14.5 with App Tracking Transparency



After a beta testing cycle that spanned nearly three months, iOS 14.5 is now available to everyone alongside iPadOS 14.5. You can update your iPhone or iPad by going to the Settings app, choosing General, then choosing Software Update.



Hands-on: How to allow or block iPhone apps from tracking you in iOS 14.5

iOS 14.5 comes with a host of new features, and one of those is apps have to request permission before they can track you. Along with that, you have total control to allow or block iPhone app tracking, read on for how it works.

Apps with ability to track you across the web and other apps is very common and in many cases, can be harmless. However, there are examples where app tracking is abused. In a report from the Washington Post, 5,400 iPhone apps were found to be using trackers and, in some examples, were sending personal data like phone numbers and users’ locations to third-party research and marketing firms.

With iOS 14.5, Apple will force apps to get user approval to use trackers. Users now have total control with the latest operating system to fully block iPhone app tracking.
How to allow/block iPhone app tracking

Keep in mind that some apps may not function properly without the ability to use trackers. There are two ways you can allow/block iPhone app tracking.

When you open an app in iOS 14.5 for the first time and it wants to track you, you’ll see a prompt like this:


If you allow tracking for an app, it will appear in your Tracking settings that you can manage at any time. Here’s where to find that:

1. On your iPhone, head to Settings
   
   
2. Swipe down and tap Privacy
   
   
3. Choose Tracking at the top
   
   
4. The default setting is to allow apps to ask for permission to track you
   
   
5. Toggle it off to block all apps from being able to track you – and even ask to track
   
   
   Choose “Ask Apps to Stop Tracking” or “Allow Apps to Continue Tracking” for any you’ve already approved​
   
   
6. If/when you do give permission for an app to track you, you’ll see a list of them under the Privacy > Tracking settings
   
   
7. You can block tracking at any time for individual apps by tapping the toggle next to it

Here’s how these steps look:

 

[sandysgeek]

Following iOS 14.5 release, Apple details App Tracking Transparency in new video

Apple today finally released iOS 14.5 to the public, which comes with the long-awaited App Tracking Transparency feature. With this new option available in the iOS settings, users can opt-out of being tracked by third-party apps across other apps and websites. To further highlight this new feature, the company has now shared a new video explaining how App Tracking Transparency works.

The two-minute video explains that apps often ask for access to data such as your location, health information, and photos in order to work. At the same time, it warns about apps that use this data to track you across the internet for things like offering personalized advertisements.

Apple emphasizes that some apps do this “without your knowledge or permission,” making the user become the product. The video also says that it is okay if the user chooses to share their data with third parties, but now, the prompt is there so that everyone has the choice to be tracked or not.

That’s why iPhone users will now be asked a single, simple question: Allow apps to track you or not? Maybe you’re okay giving an app your email or location, so they can share your data with others to personalize ads or build a profile about you. And if you’re not? Well, that’s what the prompt is for. Whatever you choose is up to you. But at Apple, we believe that you should have a choice.

note -
even though ATT has finally been released, I don't think this is over either.

Another lawsuit was filed this morning:
German advertisers file antitrust complaint over Apple's App Tracking Transparency
German media and advertising companies have filed a complaint with the country's competition regulator, accusing Apple of antitrust abuse with the introduction of App Tracking Transparency. The complaint mirrors a similar tactic attempted by lobbyist group France Digitale, which filed complaints in October and March.


There are also reports of major US firms working on how to get around it, which Apple stated will not be tolerated.


So-called free apps and websites have been harvesting people's data without their knowledge, much less permission, for more than twenty years, and this is the first major measure offered to users the option to help protect their privacy.


It's my opinion those that do not follow Apple's rules that their apps will be removed from the app store, and websites blocked for (potentially) being dangerous.

 

[sandysgeek]

Apple to Ban Apps That Reward Users For Enabling ATT Tracking

Apple says that it will ban and reject apps on the App Store that attempt to offer users monetary incentives to enable tracking with ATT, one of many measures the company is taking to ensure developers follow through with the new framework.

Yesterday the Cupertino tech giant released iOS and iPadOS 14.5 with several headlining features, including ATT or App Tracking Transparency. ATT is a new framework on iOS and iPadOS devices that requires apps to ask for users' permission before tracking them across others apps and websites.

It's received significant criticism from companies such as Facebook, which deems it a threat to its business. With the new framework, all apps on the *App Store* must present users with a pop-up that asks whether they wish to be tracked or not. Users are shown "Ask App Not to Track" and "Allow" in the pop-up.

Following ATT's release, the company also majorly updated its Human Interface Guidelines with a new section titled "Accessing User Data." In this section, offering a mix of new and previously known information, Apple outlines the design policies that all apps must follow when they attempt to ask a user for their permission to access personal data, device capabilities such as microphone and camera, and consent to track them across apps and websites.

Apple's senior vice president of software engineering, Craig Federighi, recently said that Apple can only enforce its privacy values through the policies to which apps on the *App Store* are subject to and that it entirely can't be done at a system level. The executive, sitting below CEO Tim Cook, referred to ATT, echoing that Apple will enforce the new change as vigorously as it can through the *App Store*'s rules.

The new additions to the Human Interface Guidelines are reflective of Federighi's comments. Apple can expect to see some apps try and circumvent ATT with gimmicks such as imitation or limiting an app's functionality unless permission to track is given. To counter this, Apple's new guidelines bar apps from attempting to mislead users to enable "Allow" for ad-tracking by imitation or using a graphic that mimics the system pop-up.

Most notably, however, Apple says that any app that attempts to offer monetary incentives to users to convince them to enable tracking will be banned from the *App Store*.

Don't offer incentives for granting the request. You can't offer people compensation for granting their permission, and you can't withhold functionality or content or make your app unusable until people allow you to track them.

Don't display a custom message that mirrors the functionality of the system alert. In particular, don't create a button title that uses "Allow" or similar terms, because people don't allow anything in a pre-alert screen.

Don't show an image of the standard alert and modify it in any way.

Don't draw a visual cue that draws people's attention to the system alert's Allow button.

Apple also outlines the do's and don'ts on how apps can provide additional information for why users should enable ad-tracking. The native ATT pop-up offers developers the choice to customize the text to explain why tracking is needed.

Apps can also employ a splash screen before the pop-up appears that provides information about what the tracking is used for. These splash screens, however, most use wording like "Continue," "Next," and not "Allow," which may mislead and confuse users, according to Apple.

If you display a custom screen that precedes a privacy-related permission request, it must offer only one action, which must display the system alert. Use a word like "Continue" to title the action; don't use "Allow" or other terms that might make people think they're granting their permission or performing other actions within your custom screen.

The new section will be helpful for developers looking to make sure they're up to date with Apple's latest guidelines and can be an exciting read for users looking to learn more about ATT, and the privacy aspects of *App Store* apps.






this reminds me of companies that provide a service, but seem to be in business for charging customers fees, such as banks, cell phone providers, and cable companies. You know, the industries that repeatedly come in the lowest customer service satisfaction survey

 

[sandysgeek]

Apple blowout quarter with sales up 54%, authorizes $90 billion in share buybacks

think may break this into two or three posts



Apple reports another blowout quarter with sales up 54%, authorizes $90 billion in share buybacks


Apple reported a blowout quarter on Wednesday, announcing companywide sales up 54% higher than last year, and significantly stronger profits than Wall Street expected.

Apple reported double-digit growth in every single one of its product categories, and its most important product line, the iPhone, was up 65.5% from last year. Its Mac and iPad sales did better, with its computers up 70.1% and iPad sales growing nearly 79% on an annual basis.

Apple said it would increase its dividend by 7% to $0.22 per share and authorized $90 billion in share buybacks, which is significantly higher than last year’s $50 billion outlay and 2019′s $75 billion.

Here’s how Apple did versus estimates:

• EPS: $1.40 vs. $0.99 estimated
  
  
• Revenue: $89.58 billion vs. $77.36 billion estimated, up 53.7% year-over-year
  
  
• iPhone revenue: $47.94 billion vs. $41.43 billion estimated, up 65.5% year-over-year
  
  
• Services revenue: $16.90 billion vs. $15.57 billion estimated, up 26.7% year over year
  
  
• Other Products revenue: $7.83 billion vs. $7.79 billion estimated, up 24% year-over-year
  
  
• Mac revenue: $9.10 billion vs. $6.86 billion estimated, up 70.1% year-over-year
  
  
• iPad revenue: $7.80 billion vs. $5.58 billion estimated, up 78.9% year-over-year
  
  
• Gross margin: 42.5% vs. 39.8% estimate

Apple did not issue official guidance for what it expects in the quarter ending in June. It hasn’t provided revenue guidance since the start of the pandemic, citing uncertainty. This is Apple’s second quarter in a row with double-digit growth in all product categories. Apple CFO Luca Maestri told analysts that the company expects June quarter revenue to rise by double digits year-over-year, although it faces some supply shortages due to the worldwide chip shortage.

Apple has said in the past months that its business has been boosted by the pandemic as consumers and businesses bought computers to work and entertain themselves while at home. But Apple’s strong results in the quarter suggest that the trend may persist as more economies open up.

Mac sales were up 70%, and Cook said that the result was “fueled by” the company’s introduction of its Mac laptops that used its own M1 chips for longer battery life, instead of processors sold by Intel. iPad sales were up nearly 79% year-over-year.

Neither of those results include iPad Pro or iMac models the company announced in March, which are expected to drive additional demand.

Apple’s high-margin services business, including iCloud, App Store, and subscriptions like Apple Music, also showed 26.7% growth.

One metric that Apple uses to show the growth in services is the number of subscriptions it has, which not only include its own subscriptions like Apple One, but also subscriptions through its App Store.

“We now have over 660 million paid subscriptions across the services on the platform, and that’s up 40 million from the previous quarter, which is an acceleration from 35 million,” Cook said.

However, Apple’s App Store has been challenged by lawmakers and companies that say it costs too much and has too much power. A closely-watched trial with Fortnite maker Epic Games over App Store policies kicks off next week.

“The App Store has been an economic miracle. Last year, the estimates are that there was over a half a trillion dollars of economic activity because of the store. And, so, this has been just an economic gamechanger for not only the United States, but several countries around the world. And, we’re going to go in and tell our story. And we’ll see where it goes. But, we’re confident,” Cook said.

Apple’s gross margin was also unusually elevated for the company. Most quarters, it tends to be in the 38% to 39% range, but in the quarter ending in March, Apple reported 42.5% margins.

 

[sandysgeek]

For the quarter, Apple posted revenue of $89.6 billion and net quarterly profit of $23.6 billion, or $1.40 per diluted share, compared to revenue of $58.3 billion and net quarterly profit of $11.2 billion, or $0.64 per diluted share, in the year-ago quarter.

 

[sandysgeek]

some Wall Street calls on Apple

NOTE
This post is NOT a hot stick tip, recommendation, or even a suggestion.



Found it interesting after Apple (read many different adjectives and adverbs used) beat Wall Street projections, many different Wall Street analyst calls. Thought would post a few headlines:


Also, Apple (AAPL) is trading at approximately $133.00 at this minute.


Piper Sandler expects Apple growth to continue, margins to expand
Following Apple's strong March quarter results, investment bank Piper Sandler believes Apple is well-positioned to continue seeing strong growth and wider margins throughout 2021. Kumar maintains his 12-month AAPL price target of $160


Wedbush raises AAPL to $185, predicts $3T market cap by early 2022
Wedbush has raised its AAPL price target to $185 after Apple reported "drop the mic" March quarter earning results that the bank says backs up its iPhone 12 "supercycle" thesis.


JP Morgan ups Apple price target to $165, raises revenue and earnings forecasts
Investment bank JP Morgan has raised its Apple price target to $165 after the Cupertino tech giant broadly beat expectations during the March quarter.


Cowen raises AAPL price target to $180, says growth will continue into 2022
Cowen and Company has raised its Apple stock price target to $180 and has revised its Apple estimates upwards across the board after the company's Q2 2021 earnings beat.


Morgan Stanley bumps Apple price target to $161 after record March quarter
Morgan Stanley has raised its AAPL price target to $161 from $158 after Apple reported better-than-expected and record-setting earnings for its second quarter.



and the one analyst many are pointing out:

Goldman Sachs Rod Hall admits defeat, hikes Apple target to $130
After a year of sub-$100 predictions for Apple stock, Goldman Sachs' Rod Hall has upped his 12-month price target to $130 from $83 after Apple posted another profound earnings beat for the second quarter.

Also, when the weather is different that a meteorologists/weather man/woman's predictions, they don't blame it's the weather's fault. However on Wall Street, they say it's the company's fault for not matching what they predicted.

 

[sandysgeek]

Warren Buffett calls Tim Cook a 'fantastic manager' of Apple

Warren Buffet has hailed Tim Cook as a "fantastic manager" of Apple, declaring him "one of the best managers in the world," during the annual Berkshire Hathaway shareholders meeting.

Streamed on Saturday, Warren Buffett answered questions from shareholders about Berkshire Hathaway and its investments. In one question asking why the investment firm sold some common stock in Apple despite being considered the company's "fourth jewel," Buffett moved to compliment Apple as a company, and Cook as its leader.

"It's an extraordinary - Apple - it's got a fantastic manager," starts Buffett in a video feed aired by Yahoo Finance. "Tim Cook was underappreciated for a while. He's one of the best managers in the world. And I've seen a lot of managers. And he's got a product that people absolutely love. And there's an installed base of people, and they get satisfaction rates of 99%."

"It's an extraordinary business. But I do want to emphasize that, in his own way - it's a different way - but Tim Cook is - we see a lot of managers of a lot of businesses, and you're looking at two great ones on both ends here," Buffett continued, before comparing Cook to co-founder and previous CEO Steve Jobs as men with different capabilities.

In the comparison, Buffet says Cook "handled that business so well. He couldn't do what Steve Jobs obviously could do in terms of creation. But Steve Jobs couldn't really, I don't think, do what Tim Cook has done in many respects."

Also present at the meeting, Berkshire vice chairman Charlie Munger offered further praise of big tech in general, but warned antitrust pushes against the companies in the U.S. and Europe could hold back their growth. Neither Munger nor Buffett were concerned that any of the tech giants were too big.


"They're a credit to the market, and a credit to their civilization," commented Munger. "They're huge, and that's good for us."

Berkshire joined in by adding "The Googles and the Apples - they are incredible companies in terms of what they earn on capital. They gush out more money."

On the subject of the Berkshire Apple share sale, Buffett said that he sold some stock in 2020, but shareholders still saw their percentage interest rise because Berkshire repurchased shares.

He also admitted that the sale "was probably a mistake," before pointing out Munger let him know "in his usual low-key way" that it was a misstep.

Berkshire Hathaway currently owns 5.3% of Apple, and has invested about $36 billion in the company. Based on the market capitalization as of May 1, that equates to shares worth approximately $117 billion.