‘ElectroRAT’ is the First Mac Malware Spotted in 2021

We’re barely a week into 2021 and a piece of Mac malware has already been spotted. Dubbed “ElectroRAT” its primary goal is to steal personal information from cryptocurrency users.

These [malicous] applications were promoted in cryptocurrency and blockchain-related forums such as bitcointalk and SteemCoinPan. The promotional posts, published by fake users, tempted readers to browse the applications’ web pages, where they could download the application without knowing they were actually installing malware.

Microsoft Ends Support for Minecraft Earth in June 2021

Microsoft announced on Tuesday that it plans to end support for Minecraft Earth on June 30. Demoed at Apple’s WWDC event in 2019, the game was built for augmented reality as a way to make you feel as if you were actually in the game.

Today we are releasing the final build of the game, containing some changes to make your time in Minecraft Earth as fun as possible. We hope these adjustments will allow you to explore, craft, and build more – while staying safe indoors.

Hartford Man Bought Apple Watch Using Fraudulent Credit Cards

Bankole Awosika of Hartford, Connecticut, used fraudulent credit cards to purchase an Apple Watch, two iPhones, and five other “cheaper phones”. He was charged with forgery and identity theft.

The man, Bankole Awosika, 34, was arrested by local police Dec. 11 and charged with four counts of first-degree forgery, five counts of third-degree identity theft, five counts of criminal impersonation, three counts of illegal use of a payment card, three counts of receiving goods from the illegal use of a payment card, third-degree larceny, first-degree attempt to commit forgery, third-degree attempt to commit identity theft, attempt to commit criminal impersonation, and second-degree breach of peace.

Even Facebook Submitted Privacy Labels. How Bad Could Google’s Be?

The last update for Google’s iOS apps was on December 7, one day before App Store privacy labels went into effect. Is Google delaying the inevitable?

As for why Google might be trying to delay revealing its privacy label information, it’s possible the company saw all the bad press Facebook got when the social media giant was forced to reveal all the ways its apps track users, and the press and social media reactions spooked the company. Facebook Messenger’s privacy labels are horrifyingly long, for example.

For this one I’m going with a modified version of Hanlon’s Razor: “Never attribute to malice that which is adequately explained by the holidays.” I haven’t gotten updates for a bunch of other apps, either.

Twitter Acquires Podcasting Company ‘Breaker’ for Twitter Spaces

Twitter has acquired a social broadcasting app called Breaker and its team to help build Twitter Spaces, a new product in beta that lets users chat in real time with voice.

On January 15, 2021, Breaker will shut down for good. Up until that point, Breaker users will be able to export their OPML file to transfer their subscriptions to another podcasting app. Breaker recommends apps like Apple, Spotify, Stitcher, Overcast, Pocket Casts or Castro as an alternative. For those hosting a podcast on Breaker, these can be transferred elsewhere via the RSS feed.

Ex-Apple Employees' Lidar Startup to Get Major Cash Injection

A Lidar sensor startup founded by two former Apple engineers, set for a $200 million investment by a Hong Kong-based hedge fund, Bloomberg News reported. The firm is also set to go public via a reverse merger.

Aeva — a company that’s yet to turn a profit — is valued at about $3 billion, the startup’s chief executive officer, Soroush Salehian, said in an interview. Aeva plans to use the extra cash to meet demand from consumer device companies and speed up some of its technological achievement milestones, he said. “We are seeing interest from a number of new customers, from auto and industrial and consumer applications,” Salehian said, adding the company is working on applications for mobile phones, tablets and consumer health. Salehian, who helped develop the Apple Watch during his almost five years as a product manager at the tech giant, says Aeva has an edge in consumer devices because its tech can be fit onto a chip small enough for tablets and smartphones, as well as the bulkier boxes used for automotive lidar.

 

Will Apple’s ‘Wolfwalkers’ Win a Best Animated Feature Oscar?

Brandon Zachary makes an argument that the “Wolfwalkers” animated movie on Apple TV+ should win an Oscar for Best Animated Feature instead of yet another Disney movie.

It’s a highly engaging film, and one that never loses steam throughout the runtime. Wolfwalkers is passionate in a way the more heady Soul isn’t, taking audiences on a massive journey that touches on the plight of young women in this era, as well as men who are trapped by duty; however, it shows how people can grow to be better humans.

Using iOS Shortcuts to Quantify Your Self

Jackson Dame shared how he uses iOS shortcuts and an Apple Watch for lifelogging. I experimented with lifelogging back in 2014-2015, but I gave up after a while. Shortcuts would’ve made it a whole lot easier. Mr. Dame shares a list of all of the data he collects and what tools he uses to collect it, like Data Jar (love this app), Timelines, iA Writer, Charity, Microsoft Excel, and more.

Latest T-Mobile Data Breach Exposes Customer Data

The latest T-Mobile data breach (this is the third time and the second breach in 2020) has affected an estimated 200,000 people.

The data accessed did NOT include any names associated with the account, financial data, credit card information, social security numbers, passwords, PINs or physical or email addresses. The information that was accessed may have included phone numbers, number of lines subscribed to and in a small number of cases some call-related information collected as part of normal operation and service.

‘GetSchooled’ Charity Data Breach Exposes Data of 900,000 Kids

GetSchooled, a charity run by the Bill & Melinda Gates Foundation, has leaked the details of over 900,000 children in a data breach.

The breached information contains extensive personal details of children, teenagers and young adults including: full addresses, schools, full student PII including student phone numbers and emails, graduation details, ages, genders and more…

Full everything. What could be “and more”, medical records? GetSchooled got schooled.

US Government Appeals Injunction Against TikTok Ban

The U.S. government is appealing an injunction from S. District Court Judge Carl Nichols that blocked its ban of TikTok.

The Trump administration had raised concerns over the video-sharing app due to its Chinese ownership by way of parent company ByteDance, and the potential risk of TikTok’s U.S. user data being accessed by the Chinese government.

[…]

Judge Nichols in the separate case led by TikTok ruled that Trump overstepped his authority in trying to ban the app from the U.S., referring to the agency’s action as “arbitrary and capricious.”

That Video of an Apple Car Parking is Fake

There was a video making the rounds on social media recently showing an Apple Car with bizarre, round wheels. As The Drive points out, such wheels are physically impossible. The car is a 3D model of a Mercedes concept vehicle.

If you take a hard look at one about the imaginary Apple Car, you’ll see the shadows don’t match up and it’s low resolution, which camouflages the CGI seams you might spot otherwise. But still, you can bet that right now, someone is searching “Apple car” and trying to figure out a way to get on the waiting list. They’ll stand outside of the Apple store all night if they have to.

Fashion App ‘21 Buttons’ Exposes Data of European Influencers

An e-commerce app called 21 Buttons has exposed the private data of hundreds of people across Europe.

Among the millions of photos and videos, we also viewed hundreds of invoices detailing payments to users in the 21 Buttons Rewards program, covering the last few months. Some of these invoices appear to be test data, but many of them were definitely legitimate invoices detailing real records of payments made.

Cellebrite Has Not Broken Signal’s Encryption

On Tuesday, security company Cellebrite claimed to have broken the encryption that Signal uses to keep user communication safe. The blog post has since been removed, but the BBC has an archived version here. But Signal says that claim isn’t true.

It is important to understand that any story about Cellebrite Physical Analyzer starts with someone other than you physically holding your device, with the screen unlocked, in their hands. Cellebrite does not even try to intercept messages, voice/video, or live communication, much less “break the encryption” of that communication. They don’t do live surveillance of any kind.

Should Apple Open its NFC Chip to Third Parties?

Karen Webster writes about Apple’s position in the payments industry and how Apple’s restriction of its NFC chip has hurt consumers.

Granted, it’s always hard to prove a negative, but not having access to the NFC chip has likely prevented innovators from investing time and money in developing the innovations that could have made the in-store POS experience better for iPhone users. And since iPhone users skew more to the affluent, it also denied those innovators the opportunity to monetize their spend.

Google Faces Major Antitrust Lawsuit From Texas

Google is facing a major antitrust lawsuit from Texas and other states, Politico reported. If successful, the search giant could be hit with trillions of dollars worth of fines.

The lawsuit, which also includes eight other states, accuses Google of rigging online ad auctions to increase its own profits at the expense of website publishers, who have struggled to make the same kind of money from web ads as from television, print and radio. The states have asked the court to force the company to sell off pieces of its business to take away its power to control such auctions. But there are other allegations that could cut Google even more deeply. Texas also alleges that Google violated state laws that forbid unfair or deceptive business practices — laws that mandate steep fines for each violation. The attorneys general plan to argue that every online bid allegedly manipulated by Google violates state laws, which would lead to a massive pileup of fines.

SolarWinds Hack Affected Tech Companies Like Intel, Cisco, VMware

The SolarWinds cyber attack didn’t just affect government agencies; big tech companies were affected too. Intel, Nvidia, Cisco, Belkin, and VMware were also infected. The Wall Street Journal reports. If the link below is paywalled, try this article from The Verge.

Intel downloaded and ran the malicious software, the Journal’s analysis found. The company is investigating the incident and has found no evidence the hackers used the backdoor to access the company’s network, a spokesman said.

COVID-19 Stimulus Bill Makes Illegal Streaming For Profit a Felony

The COVID-19 Stimulus Bill, passed Monday, makes illegal streaming for profit a felony. The Hollywood Reporter explained.

It’s been less than two weeks since Sen. Thom Tillis released his proposal to increase the penalties for those who would dare stream unlicensed works. In doing so, the North Carolina Republican flirted with danger. About a decade ago, Sen. Amy Klobuchar (D-Minn.) made a similar proposal before it ended up dying as people worried about sending Justin Bieber to jail. (No, seriously.) But Tillis’ attempt has been winning better reviews for more narrowly tailoring the provisions toward commercial operators rather than users. That said, it’s had very little time to circulate before evidently becoming part of the spending package. If passed, illegal streaming of works including movies and music tracks could carry a penalty of up to 10 years in jail. That’s not the only change to copyright law, either. The spending bill also appears to adopt a long-discussed plan to create a small-claims adjudication system within the U.S. Copyright Office.

 

Apple, Google, Microsoft, Mozilla Take on Kazakhstan Government

Apple, Google, Microsoft, and Mozilla are teaming up to ban a root certificate used by the Kazakhstan government to decrypt HTTPS traffic for residents in the country’s capital, the city of Nur-Sultan.

Kazakh officials justified their actions claiming they were carrying out a cybersecurity training exercise for government agencies, telecoms, and private companies.

The government’s explanation did, however, make zero technical sense, as certificates can’t prevent mass cyber-attacks and are usually used only for encrypting and safeguarding traffic from third-party observers.

Like Apple, Microsoft is Designing its Own ARM Chips

Microsoft is working on its own in-house designs for ARM chips. The company is exploring server processors as well as another variant that may be used in its Surface line of consumer computers.

Microsoft’s efforts are more likely to result in a server chip than one for its Surface devices, though the latter is possible, said one of the people. The company’s chip design unit reports to Jason Zander, head of the Azure cloud business, rather than Panos Panay, who oversees Surface products. Representatives of Microsoft and Arm declined to comment on whether Microsoft is working on server and PC processors.

Facebook Warns of iOS 14 Privacy With App Banners

Facebook’s latest move is to display banners in its business apps saying there will be an impact to marketing efforts. In this case, the “users” that Mr. Espósito refers to in his article are the actual users—the advertisers. This banner is seen in Facebook Business Suite and Facebook Ads.  The problem with Facebook’s argument though is that, like Tim Cook tweeted, they can still track you across all the apps like before. What angers Mark Zuckerberg is user consent (sorry, product consent, products being the people that use Facebook).

The fact that Facebook is now showing these messages in its iOS apps criticizing Apple demonstrates that the company is trying to get popular appeal to change Apple’s mind about its new App Store privacy rules.

Audiophile Gives AirPods Max ‘B-‘ Score in Detailed Review

Crinacle.com has given a detailed review of AirPods Max. Overall, while the conclusion says don’t get the headphones if you’re expecting US$500 sound quality, the headphones do get a score of B-.

But I’ll deviate a little for the sake of the “typical usecase” for the APM. After all, one does not buy an Apple headphone purely for sound quality, much like how one does not purchase an iMac for raw horsepower. Looking at the APM’s immediate competition, we have the two biggest ones: the Bose 700 ($350) and the Sony WH-1000XM4 (also $350). Effectively, the APM is a $200 premium over the two, so begs the question: can that be justified?

Barack Obama Names Apple TV’s ‘Boys State’ Among Favorite Movies

Former President Barack Obama has shared his favorite movies and TV shows of 2020, and one of them is “Boys Statefrom Apple TV+.

Like everyone else, we were stuck inside a lot this year, and with streaming further blurring the lines between theatrical movies and television features, I’ve expanded the list to include visual storytelling that I’ve enjoyed this year, regardless of format.

France Labels Electronics With Repairability Scores

France has become the first country to label electronics with a score of how repairable they are.

This means MEPs have called on the European Commission to grant consumers a ‘right to repair’ by making repairs more attractive, systematic and cost effective, whether by extending warranties, providing warranties for replaced parts, or better access to repair and maintenance information.

I’m curious to see what kind of scores Apple products receive. Zero? One?