Posted on Leave a comment

Australian ‘big four’ bank NAB adopts Apple Pay, Westpac lone holdout

 

National Australia Bank (NAB) on Monday announced immediate support for Apple Pay, becoming the third of Australia’s “big four” banks to integrate with Apple’s payments platform after a failed boycott.

NAB

NAB announced the arrival of Apple Pay in a tweet posted to the bank’s official account.

“It’s here. NAB customers can now use Apple Pay. Just add your NAB Visa Card and start using Apple Pay wherever you can tap and pay. Apple Pay with NAB. Easy,” the tweet reads.

Along with the announcement, an accompanying link points to a comprehensive mini-site detailing the service. Customers are provided information regarding compatible devices, credit and debit cards and a quick setup guide for iPhone and Apple Watch.

Ironically, NAB touts Apple Pay’s security, a feature largely reliant on Apple’s tight control of the NFC hardware stack to which NAB and its collaborators sought to access through a collective boycott in 2016.

In a move designed to put banks in a better position to bargain with then-newcomer Apple, Australia’s Commonwealth Bank, National Australia Bank and Westpac Banking Corp, along with Bendigo and Adelaide Bank, filed a complaint with the Australian Competition and Consumer Commission seeking to negotiate access to Apple’s NFC technology. The banks initially sought to force Apple into integrating third-party mobile payments software with iPhone hardware and later requested direct access to iPhone’s NFC controller.

The banking bloc argued its stipulations would foster increased competition and consumer choice, as well as accelerated innovation and investment in the digital wallet space.

In March 2017, the ACCC denied permission to collectively bargain and boycott Apple, putting an end to the banks’ gambit.

With NAB on board, Westpac becomes the last of Australia’s “big four” banks to resist Apple Pay.

Australia and New Zealand banking group, which was not involved in the attempted forced negotiations, was the first major lender to offer Apple Pay in 2016. The Commonwealth Bank of Australia, Australia’s largest bank, rolled out support for the mobile payments solution late last year.

Posted on Leave a comment

Google suspends Huawei’s Android license, forces switch to open-source version

 

Following newly-authorized rules by the Trump administration, Google has reportedly terminated Huawei’s Android license, forcing it to move to the Android Open Source Project.

Huawei Nova4

The change won’t immediately affect owners of Huawei phones, since they’ll be able to update individual apps through the Google Play Store, Reuters noted. The company will however have to use its own system to push broader OS updates, and only once they’ve been published through AOSP.

It may cut Huawei off from key apps and services such as Gmail, YouTube, and even Chrome. Most Google mobile apps are already banned in Huawei’s Chinese homeland, but they are licensed for devices in markets like Europe.

The company has reportedly spent several years preparing for such a contingency, and is even using some of that fallback technology in Chinese versions of its phones. Westerners, though, are unlikely to be happy without access to services many consider cornerstones of the internet.

Last week the U.S. Commerce Department added Huawei and 70 affiliates to its “Entity List,” preventing it from buying from American businesses without a license demonstrating there’s no national security risk. Simultaneously, President Donald Trump signed an executive order blocking corporations from using telecoms equipment from firms deemed a national security risk — such as Huawei and ZTE.

The Trump administration has expressed worries that Huawei’s ties with the Chinese government could lead to backdoors, and indeed a report recently claimed the discovery of such activity in the Netherlands. Huawei has denied any such threat, and argued U.S. actions are really meant to thwart Chinese business.

Indeed the U.S. bans could kick a leg out from under Huawei, since until this month it was dependent on American suppliers like Qualcomm. That could give companies like Apple a better chance in China, even if it will still have to deal with price obstacles and local brands like Xiaomi, Oppo, and Vivo.

Posted on Leave a comment

25,000 Linksys routers are reportedly leaking details of any device that has ever connected to it

 

The flaw that may have been leaking data since 2014 reportedly exposes routers that haven’t had their default passwords changed, and it can even help lead hackers to physically locate devices and users in the real world.

Researcher Troy Mursch claims that in excess of 25,000 Linksys Smart Wi-Fi routers currently in use have a flaw that means significant data is accessible by hackers. Writing in Bad Packets Report, a “cyber threat intelligence” company, he says sensitive information is being leaked, although the manufacturer now denies this.

Linksys was bought in 2013 by Belkin —and that firm was then bought by Foxconn in 2018 —and that firm says that its staff haven’t been able to reproduce Mursch’s findings.

“We quickly tested the router models flagged by Bad Packets using the latest publicly available firmware (with default settings) and have not been able to reproduce [it],” said Linksys in an online security advisory, “meaning that it is not possible for a remote attacker to retrieve sensitive information via this technique.”

Linksys further says that this is because the flaw was fixed in 2014. However, Mursch disagrees.

“While [this flaw] was supposedly patched for this issue, our findings have indicated otherwise,” says Bad Packets. “Upon contacting the Linksys security team, we were advised to report the vulnerability… After submitting our findings, the reviewing analyst determined the issue was ‘not applicable/won’t fix’ and subsequently closed.”

If your router is one of those leaking information in this way, then the details that may be available to hackers include the MAC address of every device connected now —or ever.

It can also include device names like “William’s iPhone” plus whether the device is a Mac, PC, iOS or Android device. The combination of a MAC address and Linksys Smart Wi-Fi routers’ public IP address can mean that hackers could geo-locate or track “William,” claims Mursch.

More easily and immediately discovered, though, is whether a router’s default admin password has been changed or not.

This flaw and Linksys/Belkin’s response were first reported by Ars Technica which notes that the number of affected routers appears to be reducing. After the initial report of 25,617, a repeat of the test some days later revealed 21,401 vulnerable devices.

A complete list of the Linksys router models reported affected is on the Bad Packets site.

Posted on Leave a comment

Spotify begins testing ‘Car Thing’ voice assistant accessory

 

In the next few weeks Spotify will begin a U.S. test of its first hardware device, an auto accessory offering hands-free music control.

Spotify Car Thing

Dubbed the Car Thing, the device is powered by a 12-volt outlet and links to both a smartphone and car over Bluetooth. A small circular screen shows what’s playing, while buttons offer access to preset playlists.

By saying, “Hey Spotify,” people can make Siri- or Alexa-style requests, such as “play ‘A Flaming Ordeal’ by Raison d’etre” or “shuffle my ‘Bedtime for Bonzo’ playlist.”

Spotify is only reaching out to a select group of people for testing, and the company says it’s interested primarily in gauging in-car music and podcast habits. Spotify is concentrating on being “the world’s number one audio platform — not on creating hardware,” it wrote in a blog post.

An anonymous source for the The Verge backed this statement, saying there are no intentions to launch the Car Thing as-is, or even to the general public. Nevertheless the company has trademarked “Car Thing,” “Voice Thing” and “Home Thing,” laying the groundwork for potential commercial products.

Hardware like the Car Thing could get around a key limitation on iPhone, which is Apple’s control over voice commands. While people can ask Siri to play songs if they have an Apple Music subscription, they can’t do the same if they have Spotify Premium or any other on-demand third-party service.

Posted on Leave a comment

Apple redesigns Investor Relations webpage, incorporates Newsroom feed

 

Apple on Thursday pushed out a redesign for its Investor Relations webpage that provides easy access to current and historical financial data, and integrates a live feed from the company’s Newsroom.

Sharing a general design theme with Apple’s product pages, the updated Investor Relations mini-site is dominated by a “News and Results” header, below which are — as described — the company’s most recent quarterly results and press releases. The banner was titled “Apple Investor News” in prior iterations of the site.

A section titled “Investor Updates” includes links to information covering the just ended fiscal quarter, specifically Apple’s official press release and Form 10-Q Securities and Exchange Commission filing. Previously, the same links were presented at the top of Apple’s Investor Relations webpage, but lacked the Investor Updates designation.

A second section presents a feed from Apple’s Newsroom, which collects the company’s latest press releases, photo galleries and corporate statements. More recently, editorial “features” penned by members of Apple’s PR team provide insight into corporate initiatives and new products. For example, a feature in April highlighted Apple’s efforts to mangrove forests, while a similarly labeled release in March promoted AirPods with the help of choreographer Hope Boykin.

Financial Data — previously a separate page accessed through a tab at the top of the Investor Relations homepage — is now included at the bottom of the front page. Past quarterly press releases, financial statements, data summaries and SEC filings are arranged by fiscal year, while a separate section breaks out annual 10-K filings dating back to 2015. Miscellaneous reports are also displayed and currently include a reclassification of net sales for fiscal 2018, capital return history, dividend history and an annual green bond impact report.

Also new is a revamped SEC Filings subsection, accessed through a dedicated tab on the Investor Relations homepage. Here, users can now subscribe to receive email alerts for Apple’s latest SEC filings, insider transactions and quarter and annual reports.

An Apple Values tab redirects visitors to the company’s various corporate initiatives: Accessibility, Education, Environment, Inclusion and Diversity, Privacy, and Supplier Responsibility. The mini-site’s Stock Price, Leadership and Governance, FAQ and Contact pages also feature minor graphical tweaks.

Posted on Leave a comment

Steam Link debuts on iOS and tvOS a year after Apple rejected title for violating App Store guidelines

 

A year after Apple rejected it from entering the App Store, Valve’s Steam Link app is now available to stream games from user Steam libraries on Mac and PC to compatible iPhones, iPads or Apple TV devices.

Announced more than a year ago, Steam Link promised to deliver iOS and tvOS access to desktop class games through a clever software solution that streams game video to a client device while simultaneously relaying controller commands back to the host computer.

The app works with both a wired ethernet connection or a 5GHz Wi-Fi network, which is responsible for ferrying the video and game data between linked devices.

Apple initially approved Steam Link for distribution but recanted the endorsement three days later. Valve in a statement at the time said Apple cited a breach of App Store Guidelines, specifically “business conflicts with app guidelines,” in revoking its approval.

Apple SVP of Worldwide Marketing Phil Schiller confirmed the move in an email to customers, saying the app “violates a number of guidelines around user generated content, in-app purchases, content codes, etc.” The ability to purchase games — through roundabout methods — from the Steam store was thought to be among the issues at play in Apple’s decision.

Schiller went on to say that Apple was working with Valve to update the app for reinstatement. Why it took the gaming company a year to facilitate the changes needed to return to the App Store is unknown.

[youtube https://www.youtube.com/watch?v=-YQ8YkfcAUM&w=560&h=315]

The recent App Store addition was noted in a tweet from former Valve VR engineer Nat Brown.

Steam Link is a free 28.8MB download from the App Store.

Posted on Leave a comment

Apple contributes to new Statue of Liberty audio tour and AR app

 

Apple reportedly lent a hand in — or at least facilitated — the creation of a new iOS app designed for the soon-to-open Statue of Liberty Museum, with the title serving both as a modern location-based audio tour and an augmented reality tool that brings Lady Liberty into the homes of millions.

Statue of Liberty

Called “Statue of Liberty,” the app is the brainchild of renowned fashion designer Diane von Fürstenberg, who spearheaded a three-year fundraising initiative to build the new Statue of Liberty Museum slated to open its doors on Liberty Island on Thursday.

Developed by Yap Studios in association with the Statue of Liberty-Ellis Island Foundation, the app melds a year’s worth of digital scans and photographs to generate a highly detailed 3D model of sculptor Frédéric Auguste Bartholdi’s iconic figure, reports Vogue.

Leveraging Apple’s ARKit latticework, the title allows users to soar above the statue, view it from different angles, scales and during different times of day, as well as peer inside its skin to reveal the internal frame designed by Gustave Eiffel. A time-lapse mode offers a look at the statue against an ever-changing Manhattan skyline.

According to CNET, the app also includes a location-specific audio guide that details 15 points of interest on Liberty Island and another 20 in the museum itself. MapKit was used to enable indoor mapping, which triggers the audio assets on location.

Apple CEO Tim Cook touted the launch of “Statue of Liberty” in a tweet on Tuesday. It appears a chance meeting with Cook sparked von Fürstenberg’s interest in AR as an innovative solution for the museum.

“I met Tim Cook from Apple, and discovered first of all that he had never been to Liberty Island, so I arranged for him to go,” von Fürstenberg told Vogue. “Not even knowing what I was talking about, I said, Wouldn’t it be wonderful to give people an Apple experience when they go on the Island?’ I met the people who do apps and we started, not knowing where it would all end up. The foundation created this app that will reach hundreds of millions of people.”

At a launch event on Tuesday, von Fürstenberg said she met Cook after filming “Mother of Exile,” a documentary about the statue slated for release on HBO later this year. The designer also narrated a podcast called “Raising the Torch” to go along with the museum’s opening. It is unclear if Cook is involved in the documentary or podcast.

Vogue cites Apple as a “star donor” to von Fürstenberg’s project, though it remains unclear if the company committed funds to the initiative, assisted in development of the app or took part in the podcast production process. Considering the company is not affiliated with Yap or FRQNCY Media, co-producers of “Raising the Torch,” it seems the publication is confusing Apple’s technologies and platforms for active participation in the enterprise.

Posted on Leave a comment

WhatsApp vulnerability left iOS open to spyware attack

 

Facebook-owned WhatsApp on Monday disclosed the recent fix of a VoIP-related vulnerability that allowed nefarious parties to remotely install spyware on both iOS and Android handsets.

WhatsApp

Discovered in early May, the now-patched bug in the app’s audio call feature allowed hackers to deliver a spyware payload to target devices, a process that worked even if the WhatsApp call recipient failed to answer.

It took WhatsApp less than ten days to patch the security hole following its discovery, reports TechCrunch. How long the vulnerability existed without detection is unknown, but the company confirmed hackers took advantage of the window to install an unknown number of malicious payloads.

Although WhatsApp did not name a specific company or spyware variant associated with the security breach, a statement on the matter points to Israeli vendor NSO Group.

“This attack has all the hallmarks of a private company known to work with governments to deliver spyware that reportedly takes over the functions of mobile phone operating systems,” WhatsApp said.

NSO develops and markets a well-known and notoriously effective piece of spyware called Pegasus. Typically reserved for government buyers, Pegasus is often used by law enforcement agencies to gain wide access to key device functions and data stores.

Apple has in the past attempted to patch flaws in iOS and macOS leveraged by Pegasus, but NSO continues to uncover and exploit zero-day vulnerabilities in iOS to keep its product functional.

WhatsApp believes only a small number of users were impacted by attacks, noting only advanced and highly motivated actors would be capable of leveraging the bug, the report said.

The company alerted the U.S. Justice Department and various human rights organizations after discovering the vulnerability, and urges users to update their respective app versions to protect against future attacks.

“WhatsApp encourages people to upgrade to the latest version of our app, as well as keep their mobile operating system up to date, to protect against potential targeted exploits designed to compromise information stored on mobile devices,” WhatsApp said in a statement.

Posted on Leave a comment

New photos show ‘beta’ Apple Card with NFC-enabled packaging

 

Newly-published photos are said to show one of the first physical Apple Cards, including its special packaging for quick iPhone pairing.

Apple Card

As anticipated the packaging incorporates an NFC tag, according to well-known leak source Ben Geskin. This should link the physical card with the digital one in the Wallet app.

The leaked card is said to belong to someone in a “semi-private” beta internal to Apple. Geskin’s name was Photoshopped in to protect the real person’s identity.

He noted also that while the card appears gold-like, that’s likely an illusion caused by ambient color temperature. In person, cards should have the same silver hue Apple showcased at its March 25 press event.

The physical Apple Card is notable not just for NFC pairing, but being made of real titanium instead of plastic. For security purposes it lacks visible account or CVV numbers, which instead have to be retrieved from the Wallet app.

Apple Card

Apple is partnering with Goldman Sachs and Mastercard for the initial U.S. launch. It has yet to set a firm date beyond sometime this summer.

[youtube https://www.youtube.com/watch?v=rE8DqSadUjg&w=560&h=315]

Posted on Leave a comment

Tim Cook inaugurates Apple Carnegie Library with help from DC’s mayor

 

Apple drew special attention to the launch of its Carnegie Library store in D.C. on Saturday, bringing not just CEO Tim Cook but retail head Deirdre O’Brien, marketing chief Phil Schiller, and the city’s mayor, Muriel Bowser.

Apple Carnegie Library opening with Tim Cook and Muriel Bowser

The event was publicized on Twitter by Cook and Bowser, the latter of whom shared a video of some of the first shoppers entering the store. The pair were joined by a media pool and some of the store’s staff, who cheered and clapped to drum up excitement. Sizable crowds were in attendance.

Further photos were published on Instagram by O’Brien.

Development on Apple Carnegie Library began in 2016. Apple calls it its “most extensive historic restoration project to date,” requiring lengthy work on facades and details. Running with the theme of the building — and possibly trying to counter controversy over the relocation of the Library’s book collection — the store will be hosting a “StoryMakers Festival” series of events between May 18 and June 29, featuring 40 artists.

Apple retail VP Deirdre O'Brien posing with shoppers.

Apple retail VP Deirdre O’Brien posing with shoppers.