Developers of apps released in Apple's South Korean App Store no longer have to use the company's own in-app payment system, the iPhone maker has announced in a developer update. Instead, developers will be able to take payments using the third-party service providers pre-approved by Apple. From a report: The change comes in response to an amendment to South Korea's Telecommunications Business Act passed last year, which prevents large platform holders like Apple and Google from forcing developers to use their first-party in-app payment systems. Both Apple and Google opposed the legislation, with Apple arguing that it would make it harder for its users to manage their purchases, undermine their privacy protections, and put them at risk of fraud.

Brazil's telecoms regulator Anatel has launched a public consultation on a proposal to make USB-C chargers mandatory for all smartphones sold in the country. The Verge reports: It's the latest example of lawmakers and regulators turning to USB-C as a common charging standard for phones. The EU passed a law on the matter earlier this month, making USB-C mandatory for a range of electronic gadgets (including smartphones) by the end of 2024, and in the US some Democrat politicians are pushing for similar legislation. "Aware of the aforementioned movements in the international market, Anatel's technical area evaluated the topic and presented a proposal with a similar approach for application in the Brazilian market," said Anatel in a blog post (English translation via Google Translate).

In documents supporting the public consultation, Anatel said the advantages for making USB-C mandatory were primarily reducing e-waste and increasing convenience for customers. Disadvantages included higher costs to enforce the regulation and the possibility the law would discourage companies from developing new, better standards. Anatel says its public consultation will run until August 26th.

Apple is rewarding the most active and helpful members of its support forums with its new Community Plus program. The invite-only program gives these "high-level" Support Community members access to exclusive perks and experiences. From a report: Apple's Support Community members can already earn points based on their activity, granting them access to rewards as they level up. This includes the ability to upload a custom avatar as well as participate in conference calls with the Apple Support Community team and even in-person meetups with other members. But the Community Plus program appears to take things a bit further. It applies to the "shining stars" of Apple support forums who provide the most detailed and helpful answers. Apple says it will only add a "small group" of people to the program on a yearly basis. If this type of program sounds familiar, you may remember that Microsoft has had its MVP (most valuable professional) award for over 20 years and has recognized over 4,000 MVPs so far -- at times rewarding them with trips, subscriptions that included free access to expensive software, and free training materials.

In a new documentary about the evolution of the iPhone, Apple's marketing chief Greg Joswiak was seen calling Samsung "annoying" and accusing them of poorly copying Apple's technology. "They were annoying," said Joswiak. "And they were annoying because, as you know, they ripped off our technology. They took the innovations that we had created and created a poor copy of it, and just put a bigger screen around it. So, yeah, we were none too pleased." MacRumors reports: Samsung launched the Galaxy S4 with a 5-inch display in early 2013, at a time when the iPhone 5 had a 4-inch display. Apple did eventually release its first larger smartphones with the 4.7-inch iPhone 6 and 5.5-inch iPhone 6 Plus in 2014, and the devices were met with strong demand and went on to be among the best-selling iPhone models ever.

Apple sued Samsung in 2011 for patent infringement, alleging that Samsung copied the iPhone's design with its own Galaxy line of smartphones. Apple was initially awarded around $1 billion in damages, but the amount was lowered in a subsequent retrial. In 2018, Apple finally settled with Samsung and reiterated the following statement: "We believe deeply in the value of design, and our teams work tirelessly to create innovative products that delight our customers. This case has always been about more than money. Apple ignited the smartphone revolution with iPhone and it is a fact that Samsung blatantly copied our design. It is important that we continue to protect the hard work and innovation of so many people at Apple. We're grateful to the jury for their service and pleased they agree that Samsung should pay for copying our products." The full documentary can be watched on The Wall Street Journal's website.

The Supreme Court declined Apple's bid for a hearing over two Qualcomm patents (US Patent No. 7,844,037 and US Patent No. 8,683,362) that were part of lawsuits filed in 2017, claiming infringement by Apple's iPhones, iPads, and Apple Watches. The Verge reports: Reuters points out that Apple and Qualcomm's 2019 settlement of a worldwide legal battle over patents largely ended the squabbling in favor of a six-year licensing agreement but allowed a case in front of the Patent and Trademark Office's Patent Trial and Appeal Board to continue. There, Apple argued the two patents should be invalid, but the board ruled in Qualcomm's favor. Last April, the Federal Circuit court rejected Apple's request for an appeal based on the 2019 settlement covering thousands of patents, including those two. At the time, Apple argued that its royalty payments and risk of being sued again were reasons for a hearing.

In its appeal to the Supreme Court (pdf), Apple argued that Qualcomm might use the patents in a lawsuit again once the license expires in 2025 or in 2027 if it's extended. The Department of Justice under the Biden administration submitted an amicus brief rejecting those arguments in May and asked the Supreme Court to deny Apple's request. Now that it has, we'll probably have to wait until that license agreement eventually expires to know what will happen next.

Following the launch of Apple's new 13-inch MacBook Pro with the M2 chip, it has been discovered that the $1,299 base model with 256GB of storage has significantly slower SSD read/write speeds compared to the equivalent previous-generation model. From a report: YouTube channels such as Max Tech and Created Tech tested the 256GB model with Blackmagic's Disk Speed Test app and found that the SSD's read and write speeds are both around 1,450 MB/s, which is around 50% slower reading and around 30% slower writing compared to the 13-inch MacBook Pro with the M1 chip and 256GB of storage.

Disk Speed Test app numbers shared by Vadim Yuryev of Max Tech:
13-inch MacBook Pro (M1/256GB) Read Speed: 2,900
13-inch MacBook Pro (M2/256GB) Read Speed: 1,446
13-inch MacBook Pro (M1/256GB) Write Speed: 2,215
13-inch MacBook Pro (M2/256GB) Write Speed: 1,463

Yuryev disassembled the new 13-inch MacBook Pro and discovered that the 256GB model is equipped with only a single NAND flash storage chip, whereas the previous model has two NAND chips that are likely 128GB each. This difference likely explains why the new model has a slower SSD, as multiple NAND chips allows for faster speeds in parallel.

Apple is "likely" to announce its long-rumored mixed-reality headset as soon as January 2023, Apple analyst Ming-Chi Kuo has reiterated. MacRumors reports: In a detailed post on Medium, Kuo explained that Apple's headset will be a "game-changer" for the augmented-reality and virtual-reality market. Describing some of the headset's functionality, Kuo said that while Apple has repeatedly touted its focus on AR, the headset will "offer an excellent immersive experience" and a "video see-thru" mode. The headset is expected to boost demand for immersive gaming and multimedia entertainment experiences.

Kuo said that the device is "the most complicated product Apple has ever designed," leading Apple to use components from many of its existing suppliers. Kuo also believes that Apple will be an industry leader in the headset space, has "significant competitive advantages," and does not need to join the Metaverse Standards Forum. Notably, Kuo thinks that rivals will race to imitate Apple's headset once it launches, "leading the headset hardware industry to the next stage of rapid growth."

"The most impactful change to come out of WWDC had nothing to do with APIs, a new framework or any hardware announcement," writes Jordan Morgan via Daring Fireball. "Instead, it was a change I've been clamoring for the last several years -- and it's one that's incredibly indie friendly. As you've no doubt heard by now, I'm of course talking about iCloud enabled apps now allowing app transfers." 9to5Mac explains how it works: According to Apple, you already could transfer an app when you've sold it to another developer or you would want to move it to another App Store Connect account or organization. You can also transfer the ownership of an app to another developer without removing it from the App Store. The company said: "The app retains its reviews and ratings during and after the transfer, and users continue to have access to future updates. Additionally, when an app is transferred, it maintains its Bundle ID -- it's not possible to update the Bundle ID after a build has been uploaded for the app."

The news here is that it's easier for developers to transfer the ownership of apps that use iCloud. Apple said that if your app uses any of the following, it will be transferred to the transfer recipient after they accept the app transfer: iCloud to store user data; iCloud containers; and KVS identifiers are associated with the app.

The company said: "If multiple apps on your account share a CloudKit container, the transfer of one app will disable the other apps' ability to read or store data using the transferred CloudKit container. Additionally, the transferor will no longer have access to user data for the transferred app via the iCloud dashboard. Any app updates will disable the app's ability to read or store data using the transferred CloudKit container. If your app uses iCloud Key-Value Storage (KVS), the full KVS value will be embedded in any new provisioning profiles you create for the transferred app. Update your entitlements plist with the full KVS value in your provisioning profile." You can learn more about the news via this Apple Developer page.

Tapping on images of traffic lights or deciphering squiggly text to prove you are human will soon be a much less common nuisance for iPhone users, as iOS 16 introduces support for bypassing CAPTCHAs in supported apps and websites. From a report: The handy new feature can be found in the Settings app under Apple ID > Password & Security > Automatic Verification. When enabled, Apple says iCloud will automatically and privately verify your device and Apple ID account in the background, eliminating the need for apps and websites to present you with a CAPTCHA verification prompt.

CNN reports that Apple workers in Towson, Maryland have voted to form the first-ever labor union at one of Apple's U.S. stores: The landmark union election concluded on Saturday evening with 65 workers voting for the unionization and 33 against it, a nearly two-to-one margin in favor of the union, according to a preliminary tally from the National Labor Relations Board.

The victory for union organizers at the Apple store in the Towson Town Center, a mall near Baltimore, comes amid a broader wave of workplace activism that has emerged in the wake of the Covid-19 pandemic. The US labor market has tipped much more strongly in favor of workers over the past two years. There are now roughly twice as many job openings as there are unemployed people looking for work, leaving employers scrambling to fill jobs... That has made employees who are dissatisfied with their jobs more willing to demand better working conditions, including through unionization.

The major issue driving the organizing vote was workers wanting to have a say in the way the store is run, said Christie Pridgen, a technical expert at the store and one of the organizers. Pridgen, 34, said she's worked at the store for more than 8 years. "Compensation is important, considering the cost of living in general and inflation, but the bigger thing is having a say," she told CNN Business Saturday night after the vote. "That was the most important thing to me." Pridgen said workers having a say in hours and scheduling and being involved in establishing safety protocols during the pandemic were the big issues. "We wanted a say in the policies that affect our lives," she said, adding that she wasn't surprised by the outcome of the vote, but was relieved.

"I knew I wasn't alone in being frustrated," she said.
"An Apple spokesperson declined to comment on the vote."

From the MacRumors blog earlier this week: Germany's Federal Cartel Office, the Bundeskartellamt, has initiated proceedings against Apple to investigate whether its tracking rules and anti-tracking technology are anti-competitive and self-serving, according to a press release. The proceeding announced will review under competition law Apple's tracking rules and specifically its App Tracking Transparency Framework (ATT) in order to ascertain whether they are self-preferencing Apple or being an impediment to third-party apps...

Introduced in April 2021 with the release of iOS 14.5 and iPadOS 14.5, Apple's App Tracking Transparency Framework requires that all apps on âOEiPhoneâOE and âOEiPadâOE ask for the user's consent before tracking their activity across other apps. Apps that wish to track a user based on their device's unique advertising identifier can only do so if the user allows it when prompted.

Apple said the feature was designed to protect users and not to advantage the company... Earlier this year it commissioned a study into the impact of ATT that was conducted by Columbia Business School's Marketing Division. The study concluded that Apple was unlikely to have seen a significant financial benefit since the privacy feature launched, and that claims to the contrary were speculative and lacked supporting evidence.
The technology/Apple blog Daring Fireball offers its own hot take: In Germany, big publishing companies like Axel Springer are pushing back against Google's stated plans to remove third-party cookie support from Chrome. The notion that if a company has built a business model on top of privacy-invasive surveillance advertising, they have a right to continue doing so, seems to have taken particular root in Germany. I'll go back to my analogy: it's like pawn shops suing to keep the police from cracking down on a wave of burglaries....

The Bundeskartellamt perspective here completely disregards the idea that surveillance advertising is inherently unethical and Apple has studiously avoided it for that reason, despite the fact that it has proven to be wildly profitable for large platforms. Apple could have made an enormous amount of money selling privacy-invasive ads on iOS, but opted not to.

An anonymous reader quotes a report from ZDNet: The memory of "Batterygate" continues to be a thorn in Apple's side. In case you need a reminder, "Batterygate" refers to a 2016/17 scandal where Apple added an undocumented battery throttling capabilities to iOS 10.2.1 designed to slow the performance of the iPhone if the battery was deemed to be worn. It also came with unexpected side effects, causing handsets to reboot in cold weather or when the battery's charge level was low. The feature was initially rolled out to iPhone 6, iPhone 6s, and iPhone SE and later expanded to include the iPhone 7, 7 Plus, 8, 8 Plus and iPhone X models.

This latest UK-based multimillion-pound legal claim has been launched by Justin Gutmann, a consumer rights campaigner, and alleges that Apple deliberately misled users, and rather than roll out a battery recall or replacement program; the company instead pushed out this feature to cover up the fact that older iPhone batteries were not able to cope with the new power demands put on them.

Apple did eventually roll out a $29 battery replacement program, a program that saw the company carry out 11 million battery replacements in 2018, compared to the 1 to 2 million that would normally be carried out in a year. This resulted in Apple issuing a profit warning in January 2019, the company's first since 2002. If Apple loses, the company could be forced to pay damages of more than $950m to the 25 million people who purchased affected iPhones. Following the US settlement in March 2020, Apple agreed to settle a class-action lawsuit over the same issue, paying out $25 per iPhone, with the total capped at $310m. "We have never -- and would never -- do anything to intentionally shorten the life of any Apple product or degrade the user experience to drive customer upgrades," Apple said in a statement on Thursday. "Our goal has always been to create products that our customers love, and making iPhones last as long as possible is an important part of that."

"Researchers at MIT have discovered an unfixable vulnerability in Apple Silicon that could allow attackers to bypass a chip's 'last line of defense'," writes the Apple Insider blog, "but most Mac users shouldn't be worried." More specifically, the team at MIT's Computer Science & Artificial Intelligence Laboratory found that Apple's implementation of pointer authentication in the M1 system-on-chip can be overcome with a specific hardware attack they've dubbed "PACMAN." Pointer authentication is a security mechanism in Apple Silicon that makes it more difficult for attackers to modify pointers in memory. By checking for unexpected changes in pointers, the mechanism can help defend a CPU if attackers gain memory access.... The flaw comes into play when an attacker successfully guesses the value of a pointer authentication code and disables it.

The researchers found that they could use a side-channel attack to brute-force the code. PACMAN echoes similar speculative execution attacks like Spectre and Meltdown, which also leveraged microarchitectural side channels. Because it's a flaw in the hardware, it can't be fixed with a software patch.

[A]ctually carrying out the PACMAN attack requires physical access to a device, meaning the average Mac user isn't going to be at risk of exploit. The flaw affects all kinds of ARM-based chips — not just Apple's. The vulnerability is more of a technological demonstration of a wider issue with pointer authentication in ARM chips, rather than an issue that could lead to your Mac getting hacked.
MIT has made more information available at the site PACMANattack.com — including answers to frequently asked questions. Q: Is PACMAN being used in the wild?
A: No.
Q: Does PACMAN have a logo?
A: Yeah!
The MIT team says their discovery represents "a new way of thinking about how threat models converge in the Spectre era." But even then, MIT's announcement warns the flaw "isn't a magic bypass for all security on the M1 chip." PACMAN can only take an existing bug that pointer authentication protects against, and unleash that bug's true potential for use in an attack by finding the correct PAC. There's no cause for immediate alarm, the scientists say, as PACMAN cannot compromise a system without an existing software bug....

The team showed that the PACMAN attack even works against the kernel, which has "massive implications for future security work on all ARM systems with pointer authentication enabled," says Ravichandran. "Future CPU designers should take care to consider this attack when building the secure systems of tomorrow. Developers should take care to not solely rely on pointer authentication to protect their software."
TechCrunch obtained a comment from Apple: Apple spokesperson Scott Radcliffe provided the following: "We want to thank the researchers for their collaboration as this proof of concept advances our understanding of these techniques. Based on our analysis as well as the details shared with us by the researchers, we have concluded this issue does not pose an immediate risk to our users and is insufficient to bypass operating system security protections on its own."

Apple's M1 chips have an "unpatchable" hardware vulnerability that could allow attackers to break through its last line of security defenses, MIT researchers have discovered. TechCrunch reports: The vulnerability lies in a hardware-level security mechanism utilized in Apple M1 chips called pointer authentication codes, or PAC. This feature makes it much harder for an attacker to inject malicious code into a device's memory and provides a level of defense against buffer overflow exploits, a type of attack that forces memory to spill out to other locations on the chip. Researchers from MIT's Computer Science and Artificial Intelligence Laboratory, however, have created a novel hardware attack, which combines memory corruption and speculative execution attacks to sidestep the security feature. The attack shows that pointer authentication can be defeated without leaving a trace, and as it utilizes a hardware mechanism, no software patch can fix it.

The attack, appropriately called "Pacman," works by "guessing" a pointer authentication code (PAC), a cryptographic signature that confirms that an app hasn't been maliciously altered. This is done using speculative execution -- a technique used by modern computer processors to speed up performance by speculatively guessing various lines of computation -- to leak PAC verification results, while a hardware side-channel reveals whether or not the guess was correct. What's more, since there are only so many possible values for the PAC, the researchers found that it's possible to try them all to find the right one.

Apple announced on Friday that it's once again updated its rules about how Dutch dating apps can use third-party payment systems, after the company had "productive conversations with the Netherlands Authority for Consumers and Markets (ACM)." From a report: The updated rules give developers more flexibility about which payment systems they use, change the language users see when they go to pay, and remove other restrictions that the previous rules put in place. While the rules aren't wide-reaching (again, they only apply to Dutch dating apps), they do show what Apple's willing to do to comply with government regulation -- which it could be facing a lot more of as the EU and US gear up to fight tech monopolies, and potentially even force the company to ditch the iPhone's Lightning port.

In December the ACM announced a ruling that Apple had to let dating apps use payment services besides the one built into iOS, after the regulator received a complaint from Match Group, the company behind dating services like Tinder, Match.com, and OkCupid. Since then, Apple has proposed a variety of solutions for complying with the order, which the regulator has said aren't good enough. In May, the ACM said that Apple's most recent rules, the ones prior to the Friday update, were improvements over its past ideas, but that they still didn't comply with Dutch and European laws. There's been increasing pressure for Apple to comply: even while the company works on changes, it's been racking up tens of millions of Euros in fines.

The UK's Competition and Markets Authority (CMA) has concluded that Google and Apple "hold all the cards" when it comes to mobile phones a year after taking a closer look at their "duopoly." It's now consulting on the launch of a market investigation into the tech giants' market power in mobile browsers, as well as into Apple's cloud gaming restrictions. From a report: In addition, the CMA has launched a separate investigation into Google's Play Store rules -- the one that requires certain app developers to use the tech giant's payment system for in-app purchases, in particular. The CMA has concluded after its year-long study that the tech giants do indeed exhibit an "effective duopoly" on mobile ecosystems. A total of 97 percent of all mobile web browsing in the UK is powered by Apple's and Google's browser engines. iPhones and Android devices typically come with Safari and Chrome pre-installed, which means their browsers have the advantage from the start. Further, Apple requires developers to make sure their iOS and iPadOS apps are using its WebKit engine to browse the web. That limits the incentives Apple may have to invest in Safari, the CMA said.

Apple plans to expand the lineup of laptops using its new, speedier in-house chips next year, aiming to grab a bigger share of the market, Bloomberg News reported Thursday, citing people with knowledge of the matter said. From the report: The company is working on a larger MacBook Air with a 15-inch screen for release as early as next spring, said the people, who asked not to be identified because the plans aren't public. This would mark the first model of that size in the MacBook Air's 14-year history. Apple is also developing what would be its smallest new laptop in years. The new models underscore Apple's strategy to use homegrown processors to make gains in a market led by Lenovo and HP. The company began splitting from longtime partner Intel in 2020 and announced its latest chip, the M2, at a developers conference earlier this week. Better performance and new designs have helped spur a resurgence for the Mac lineup, which accounts for about 10% of Apple's sales.

An anonymous reader quotes a report from TechCrunch: A new security feature in Apple's upcoming macOS 13 Ventura will automatically block new USB-C devices from communicating with the operating system until the accessory can be approved by the user. Apple dropped details of the new security feature in its release notes, which appears to be aimed at protecting newer Apple laptops that run its bespoke M1 or M2 chips from potentially malicious accessories.

According to Apple's description, the feature will be enabled by default and will require the user to approve a USB-C accessory before it can talk to the operating system -- essentially an on-screen pop-up asking the user for permission. Apple says this doesn't apply to power adapters, standalone displays, and connections to an approved hub -- and devices can still charge even if you don't approve the accessory. Apple says that accessories that are already connected will automatically work when updating to the new macOS software.

An anonymous reader quotes a report from Ars Technica: One of the few things that Intel Macs can do that Apple Silicon Macs can't is run operating systems written for Intel or AMD processors inside of virtual machines. Most notably, this has meant that there is currently no legal way to run Windows on an Apple Silicon Mac. Apple Silicon Macs can, however, run operating systems written for Arm processors inside of virtual machines, including other versions of macOS and Arm-compatible versions of Linux. And those Linux VMs are getting a new feature in macOS Ventura: the ability to run apps written for x86 processors using Rosetta, the same binary translation technology that allows Apple Silicon Macs to run apps written for Intel Macs.

Apple's documentation will walk you through the requirements for using Rosetta within a Linux guest operating system -- it requires creating a shared directory that both macOS and Linux can access and running some terminal commands in Linux to get it set up. But once you do those steps, you'll be able to enjoy the wider app compatibility that comes with being able to run x86 code as well as Arm code. Some developers, including Hector Martin of the Asahi Linux project and Twitter user @never_released, have already found that these steps can also enable Rosetta on non-Apple ARM CPUs as long as they're modern enough to support at least version 8.2 of the Arm instruction set. As Martin points out, this isn't strictly legal because of macOS's licensing restrictions, and there are some relatively minor Apple-specific hardware features needed to unlock Rosetta's full capabilities.

Apple announced some major new features for Mail that finally bring the email app closer to parity with Gmail and other popular email clients. From a report: Perhaps the most useful will be an undo send feature, which will let you call back an email within 10 seconds of hitting the send button. A "remind me" feature will let you set a time for an email to come back to the top of your inbox. A new scheduled send feature that allows you to specify exactly when an email should go out. And Mail will even tell you when it thinks you've forgotten to include an attachment.