iOS

Link

‘SolarWinds’ Hackers Used iOS Zero Day Against Government Officials

Andrew Orr ·

The Russian hackers behind the SolarWinds attack used an iOS zero day to steal credentials from Western European governments.

Attacks targeting CVE-2021-1879, as the zero-day is tracked, redirected users to domains that installed malicious payloads on fully updated iPhones. The attacks coincided with a campaign by the same hackers who delivered malware to Windows users, the researchers said.

Google published a blog post about zero-days here, and you can read coverage from Ars Technica at the link below.

Link

How Apple Arcade Shows an OS Merger Isn’t Wise

Andrew Orr ·

Alex Blake of Digital Trends writes how the nature of Apple Arcade shows the pitfalls of merging iOS and macOS.

You see, Apple Arcade is a showcase for all that’s wrong with taking two very different operating systems and mashing them together into a mixed-up medley where no one wins. Because developers have to make games that work on the tiniest iPhone and the largest iMac, they are forced into compromises that weaken the games on both platforms.

I see his point and I think I agree with him. No one wins except maybe the lowest common denominator. Maybe the more powerful M1 chip would change that, but probably not. iPadOS apps haven’t yet taken full advantage of the chip, as one example.

Link

WebKit Flaw Crashes Safari, Could Lead to Further Exploits

Andrew Orr ·

A WebKit flaw on iOS and macOS can cause Safari to crash and could lead to further malicious attacks.

The vulnerability stems from what security researchers call a type confusion bug in the WebKit implementation of AudioWorklet, an interface that allows developers to control, manipulate, render, and output audio and decrease latency. Exploiting the vulnerability gives an attacker the basic building blocks to remotely execute malicious code on affected devices.

Link

Discord Servers Can be Marked NSFW and Blocked on iOS

Charlotte Henry ·

Discord servers can now be marked NSFW and blocked on iOS. The label is required and the messaging platform will mark relevant servers if users do not The Verge reported.

The NSFW marker does two things. First, it prevents anyone under the age of 18 from joining. But the bigger limitation is that it prevents NSFW servers from being accessed on iOS devices — a significant restriction that’s almost certainly meant to cater to Apple’s strict and often prudish rules around nudity in services distributed through the App Store. Tumblr infamously wiped porn from its entire platform in order to come into compliance with Apple’s rules.

Link

Reasons Why Developers Prefer Testing on iOS

Charlotte Henry ·

There are a variety of reasons why many developers prefer to launch and test their apps on iOS instead of Android. Screenrant broke down some of them, including the benefits of the greater control and uniformity found in Apple’s system.

There are many reasons why developers tend to prefer iOS over Android with a commonly suggested one being that iOS users are more likely to spend on apps than Android users. However, the locked down user base is a far more basic and important reason from the developer perspective. With iOS, developers gain access to a significant number of users and on a limited number of devices. This combination lends itself very well to apps that are still in an early and beta testing state. Essentially, the level of control developers have over the iOS experience is far greater than with Android, and that’s likely to make a significant difference when deciding which operating system to launch on first.

TMO Deals

UPERFECT 15.6" Portable Monitor: $204.99

Bryan Chaffin ·

We have a deal on the UPERFECT 15.6″ Portable Monitor. It features an LCD HDR screen with 1920 x 1080 resolution, and it has built-in quad speakers. It also supports USB-C, Mini HD, PD, and Micro USB ports, and is compatible with macOS, iOS, Android, Windows, and Linux, as well as Xbox, PlayStation 4, and Rasberry Pi. This device is $204.99 through our deal.