Update to iOS 11.2 Immediately, Apple’s Bad Bug Week Got Worse

Apple has another serious software flaw, this one isn’t a security vulnerability but it causes some iOS devices (iPhones, iPads) with third-party apps installed that use local notifications to get stuck in a reboot loop on December 2nd. iOS 11.2 is out now and resolves the issue along with adding other features like Apple Pay Cash to send money to your friends and family, and resolves other issues. If you’re already experiencing the reboot loop then Apple has some steps for you to do before updating.

Other workarounds include setting your time back by a day or disabling notifications for the apps that cause it, but it’s better to just update.

Some people have an idea that staying on an older version of the software is more stable or more secure, this is always a bad idea in our day of networked devices that are constantly under attack from governments and other bad actors.

It must really be crappy to be on the teams responsible for these issues this week but it’s difficult to blame anyone specifically for them. With the root exploit it looks like a reasonable mistake that could happen to anyone. We don’t have all the details of the December 2nd bug yet, but both of these issues require an extremely specific set of things to go wrong before they happen. I have no doubt that Apple’s QA processes will change to include testing for these kinds of issues, but there isn’t any perfect software. What they have done well is the delivery mechanism for getting those updates out to users.

When Android has issues like these they are difficult to resolve because so many different companies have to get involved in order for updates to get released to end-users. I don’t envy anyone trying to resolve that issue at Google.

 

Apple Has a Patch out for the macOS Root Access Security Vulnerability

Go to the Updates tab in the Mac App Store to apply it now, you won’t even need to reboot. Apple has more details about the update at this link.

Here’s the post from yesterday with the details of the vulnerability.

Update:
If you have any trouble with file sharing after applying this security patch Apple has another fix for that, oops.

The macOS Root Access Security Vulnerability

There’s a vulnerability in the latest version of macOS High Sierra (10.13.1) that may let anyone with physical access to a Mac log in and gain system administrator (root) access. Or, if they already have an account, upgrade their access to the system administrator (root) level.

You can work around the issue by setting a root password as described in this support document from Apple. They’re working on fixing it.

The vulnerability works like this:

  1. At any login or a privilege escalation dialog a user types in the username root
  2. The user hits the login button or enter a few times in quick succession
  3. The system enables the root user account and assigns it no password.

This is incredibly bad for Apple to have a vulnerability this easy to exploit, and it’s ridiculous that it was also apparently publicly available on Apple’s developer forums weeks ago.

Nick Heer on the iPhone X

There are plenty of reviews out there now, but few had much time with the iPhone X  before it was released because Apple chose to not give reviewers an opportunity to spend much time with it.

Nick Heer:

The iPhone X is a product that feels like it shouldn’t really exist — at least, not in consumers’ hands. I know that there are millions of them in existence now, but mine feels like an incredibly well-made, one-off prototype, as I’m sure all of them do individually. It’s not just that the display feels futuristic — I’ll get to that in a bit — nor is it the speed of using it, or Face ID, or anything else that you might expect. It is all of those things, combined with how nice this product is.

Uber Had the Opportunity to Monitor Everything on Your iPhone’s Screen

Daniel Jalkut:

Yesterday, Gizmodo reported that Uber had been granted an entitlement for their iOS app that allowed them to capture an image of an iPhone’s screen at any time, even when the Uber app was not the active app on the phone. This is a big deal, because users don’t typically expect than an iPhone app that is not active might have the ability to eavesdrop on anything they are doing.

I have long felt that the sandboxing infrastructure on both iOS and Mac should be used to more accurately convey to users specifically what the apps they install are capable of doing. Currently the sandboxing system is used primarily to identify to Apple what a specific app’s privileges are. The requested entitlements are used to inform Apple’s decision to approve or reject an app, but the specific list of entitlements is not easily available to users, whose security is actually on the line.

This is absolutely fucking ridiculous. Fuck Uber. Apple should be ashamed for working with them at any level. Allowing an app to covertly record your screen without any prompting is exactly the kind of thing that Apple’s iOS app review process should prevent.

Uber claims they didn’t do anything wrong with this ability, the security researchers told Gizmodo that they didn’t detect anything going on with this code.

There are companies that are less trustworthy than Uber, but few have the opportunity to be as evil on such a large scale. Enabling them to do anything more than operate at a basic level on your platform is a mistake. At this point Apple should block them entirely and attempt to help the Taxi industry to reform and compete with Uber. Not that Apple would ever would, but still that would be the best thing to come out of this. The next best thing would be the improvements to the entitlement system that Jalkut suggests.

I wouldn’t even bother to wonder what Uber are doing on Android, where security is a fucking joke and carriers are still selling devices running ancient versions of that operating system that are affected by dozens of security vulnerabilities. This is especially true for pay-as-you-go phones sold cheaply at places like Walmart, Target, and so on. Those carriers and stores are endangering their customers by continuing to sell these devices.

iOS 11 Out Today; Here’s How to Check If You Have Any Apps That Won’t Run

iOS 11 is going to be available today. If you’ve been reading Nuclear Monster for a while you already know that some apps won’t be compatible with iOS 11 as Apple drops the 32bit software layer. Developers have been expecting this change for a long time, and it’s unfortunate that some haven’t been able to update their apps, but here is how you check to see if any of the apps you use haven’t been updated for iOS 11 yet.

  1. Open Settings and tap General
  2. Within General Settings, Tap on About
  3.  Tap on Applications:
  4. You should be presented with a list of applications that won’t be compatible with iOS 11:
    Hopefully these developers will update their apps, but if there’s anything critical to you in this list without an update available you might want to consider holding off on an upgrade to iOS 11.

Apple iPhone & Watch Event Follow-up

After the recent Apple event ended I wanted to follow-up on a few points about the new iPhones as well as the cellular stuff for the Watch.

First of all, there’s the size comparison between the X and the 8 Plus.

It’s clear after watching this Apple developer video about making apps for the X that the X’s screen really isn’t as wide as the 8 Plus. This makes the X more of a taller 4.7-inch non-Plussed iPhone. You can see the width in this screenshot of that video below and the height in the one above:

This means that the X won’t get the same layout for display as apps on the Plus phones. These measurements are in points, abbreviated as pt, because they’re a more reliable indicator when developing for high DPI (Retina) screens and devices like the iPhone. The baked-in rounded corners of the display, the area at the bottom of the screen for the on-screen home-swipe indicator, and the status bar accommodations, are all going to trim the total pixels of the display available to apps.

Marques “MKBHD” Brownlee has a great hands-on video demonstrating the X in motion. I strongly recommend watching it to anyone considering that device over the 8 or 8 Plus:

The notch for the front-facing camera and other sensors, and the “ears” on the right and left side of the iPhone X, are going to take some getting used to. I suspect that Apple can’t wait to get rid of it as soon as possible. In the video you can see MKBHD watching a movie trailer or clip and it’s shocking to see the X displaying in “full” mode with the movie partially occluded by the notch.

The naming of these devices is also bonkers this year. By calling one device the X, and pronouncing that as 10, this is going to be confusing as hell for people who want to compare it to the 8.  They should have called one of these phones something else in order to distinguish the X line of devices as high-end if they’re set on continuing this practice into the future.

I wonder what this means for the future of the iPhone. Is Apple going to have three phones announced in September 2018? Maybe they’ll update the SE in the first half of the year as well. I would expect them to bring this edge-to-edge screen to all of their handheld devices eventually, but that might take a while. I’ll look forward to an iPhone Plus device with that screen, or one with even less bezel, hopefully next year.

The supposition I’ve heard from other writers about the higher cost of the iPhone X is that it gives Apple the ability to make a smaller batch of devices with different parts that they might not be able to source at the scale they need for a typical iPhone launch. If that’s true, well, I don’t give a shit about Apple’s supply issues, neither will anyone else so it’s good that Apple didn’t make a big deal out of that during the event and simply presented the X as a futuristic device available today.

The one distinguishing physical feature of the iPhone 8 versus the 7 is the glass back. I haven’t seen the back of my iPhone since the last time I changed the case. I don’t think most people use their phones without a case unless they don’t mind replacing them often.

With the Series 3 Watch there’s that cellular plan to think about. If you get a Series 3 Watch with LTE you don’t have to activate a plan at all. It’s optional. If you do, It turns out that it’ll be ten bucks a month to bring it online and tie it to your iPhone’s cellular plan according to iMore who also have more details rounded up. Although they’re missing Sprint’s information that attaching the Watch to their network will cost the same $10. The Watch also won’t roam onto other networks even if your iPhone can.

The more expensive Series 3 with cellular also has twice as much internal storage, iMore guesses that this is due to the Apple Music support. It’s also gonna have worse battery life if you want to use it to replace your iPhone and remain on LTE all day. And since you have to have an iPhone on your carrier’s plan to use the Watch on a cellular network it can’t be a real replacement for an iPhone today.

Apple Special Event September 2017 Notes

Apple held their first iPhone event at their new Steve Jobs Theater on their UFO campus in California today. The event opened with Tim Cook memorializing Jobs. Then he discussed disaster relief projects and encouraged donations. Finally Cook talked about Apple’s new campus. No mentions of offices for the engineers, who have complained that the new campus is almost entirely an open space.

Angela Ahrendts talked about their stores before Cook came back out to start announcing devices and software.

Here’s what they announced.

WatchOS 4
Tim Cook talked about their success then played a video featuring letters from users about how the watch has helped them. Here’s that video:

Jeff Williams reiterated WatchOS 4 updates with better coaching, a redesigned workout app, features for swimmers, and integration with gym equipment. The new OS also gets a new heart rate app and a heart rate complication for the watch faces. The watch will now alert you to an unusually high heart rate when it thinks you’re not active. It’ll also monitor for arrhythmias in a study with Stanford Medicine and the FDA later this year.

WatchOS 4 will be out on September 19th.

Apple Watch Series 3
Here’s their ad for the new Series 3 watch:

It’s a cellular device that takes calls with your regular iPhone’s phone number. Of course it’ll also have data capabilities and will stream music from Apple Music.

There’s a new faster processor and Siri finally speaks on the watch if you want to hear them instead of reading a response. The device also has a barometric altimeter built-in.

The Series 3 Apple Watch retains the form factor of the previous watches. Cellular models of the Series 3 have a red dot on the crown so that you can feel special.

Williams made a very awful joke during this presentation about a potential device with all of this functionality looking like a house arrest bracelet. Not funny.

Obviously Apple is very focused on this being an activity monitoring device. I’m not very active but I still appreciate mine as a device for triaging notifications.

Series 2 watches are getting dropped. The Series 1 will remain in the lineup at $250. The base series 3 watch will be $330 and the Series 3 with cellular capabilities will be $400.

No word on the cost for the cellular plan to go with it, but Williams said they have a special deal worked out with some carriers.

The new Series 3 watches will be available to pre-order on September 15th, they’ll be generally available on September 22nd.

I don’t see much reason to upgrade from my Series 0, but I’m glad they’re continuing to work on improvements.

Apple TV 4K

The Apple TV is one of the most expensive devices you can buy to put under your TV, and it has been a long time since Apple made any changes to the hardware. Eddy Cue’s pitch for this upgrade talked about how the new device also includes support for HDR standards. It also has an A10X Fusion chip, Eddy reminds us that it’s same one as in the iPad Pro. He boasted that it’s twice as fast at general computing tasks — and four times as fast on the GPU side — as the current 1080p 4th generation Apple TV.

Apple’s Aerial screensaver that displays high-resolution footage of interesting places to look at is getting updated with 4K footage.

4K movies will cost the same from Apple’s iTunes store as they currently charge for HD films. Any movies people currently own in HD that have 4K versions will be upgraded to 4K HDR for free.

Cue also said that Netflix and Amazon are on-board for the 4K update. Cue didn’t mention that the Amazon Prime Video app still isn’t available on the Apple TV even though Apple said they had a deal worked out with Amazon earlier this year.

Live news and sports are coming to the TV app on the Apple TV and iOS devices.

That Game Company’s Jenova Chen demoed a new game called Sky for the Apple TV. It’s a fun multiplayer game that has a similar style as their previous games like Journey. It’s temporarily exclusive to the Apple TV and iOS devices and will be out this winter. I didn’t hear anyone mention if the game runs in 4K.

Here’s a trailer for it:

The Apple TV lineup will now be:

  • Old Apple TV 32GB at $150.
  • Apple TV 4K 32GB $180
  • Apple TV 4K 64GB $200

It’ll be up for pre-orders on the 15th and have general availability on the 22nd.

Unfortunately there were no updates to the Apple TV Siri Remote announced, which is a shame because it’s not great for gaming and has some other design issues. Especially regarding picking up the remote and accidentally pressing the wrong button because it’s not easy to tell which orientation you’re holding it in without looking at it.

iPhone 8, 8 Plus

The rumors and leaks were accurate , there were three new iPhones announced today instead of two. An iPhone X, iPhone 8, and iPhone 8 Plus.

Here’s the iPhone 8 ad:

Phil Schiller did his bit to sell the iPhone 8 and 8 Plus. As rumored it has a glass back as well the front. It’ll be in Silver, Space Gray, and Gold. They assure that the glass is reinforced with steel and the “most durable ever” glass.

The display has been updated. It now has the True Tone technology from the iPad Pro that adjusts the display’s color temperature to look correct in different lighting conditions. The iPad Pro still doesn’t have the iPhone’s 3D Touch feature and that makes writing on it a little bit more frustrating when I switch back and forth between my iPhone and iPad.

The iPhone 8 and 8 Plus speakers are louder and more accurate.

There’s a new A11 Bionic chip with six cores inside the iPhone 8. It’s supposedly 25% faster than the A10. Two of the six A11 cores are tuned for performance, and four of the cores are set up for tasks that can run efficiently and don’t require as much performance so that the device can save you some battery life. Those four low-power cores are supposedly 70% faster than the ones in the A10 chip.

The GPU on the 8 is the first one Apple has developed, it’s supposed to be 30% faster than last year’s A10 while taking half the power.

There’s a new image processing engine in the A11 that Schiller says will deliver faster autofocus in low-light conditions among other improvements that should make photos taken with the 8 look sharper and have less noise.

The cameras still shoot 12 megapixels, but Apple says that the sensor is larger and lets in more light. The Plus still has the exclusive on the dual camera setup versus the regular iPhone 8.

Apple’s photos captured with the 8 and 8 Plus’ cameras look fantastic, but they are just demonstrating the difference between an experienced photographer shooting for demonstration purposes and someone taking snapshots. Of course these camera improvements will help with either type of scenario, but they’re not going to turn Frank G. iPhoneOwner into a pro photographer unless they’re interested enough to edit their photos and think about what they’re doing before taking the photo.

Schiller says that there will be a new feature called Portrait Lighting in beta for the iPhone 8 Plus. He promises that this feature will be more than a filter, it’ll present you with different lighting choices for your subject in Portrait Mode within Apple’s Camera app. You’ll be able to edit those photos and choose different lighting scenarios after the fact.

Phil Schiller also promised that these phones have better video quality. You’ll be able to record 4K videos at 60 frames-per-second and if you like slo-mo you’ll be able to record 1080p video at 240 FPS.

Schiller says that the cameras and the A11 are also configured for augmented reality. The demos I have seen for AR on the iPhone 7 and 7 Plus are impressive, it could be useful to have a focus on AR in the hardware as well. Schiller played pre-recorded AR demos of a Warhammer game, an MLB overlay on a live game at a stadium, and an astronomy app called Sky Guide overlaying star charts directly on the sky as viewed through an iPhone.

Directive Games’ Atli Mar demoed their AR game, The Machines. It looked a little bit like an RTS but overlaid on a table. Mar said that there was a strategic advantage to being able to move the game’s camera around by moving the physical phone, but I’m not sure if that lines up with reality. It looked almost as awkward as the AR demo from WWDC but it is very difficult to play a game for an audience and line up your view to present something cinematic, especially in front of a live audience.

The iPhone 8 also has “wireless charging” which is just contact charging, it isn’t truly wireless. It’ll use the Qi charging standard that is already widely supported. It’s good that Apple didn’t make another standard, but they aren’t including a contact charging device in the box.

The iPhone 8 and 8 Plus will be up for pre-order on September 15th and available in-stores on September 22nd. Here are the prices for different configurations:

iPhone 8

  • 64 GB for $700
  • 256 GB for $850

iPhone 8 Plus

  • 64GB for $800
  • 256GB for $950

iOS 11 will be out on September 19th.

iPhone X

Apple’s surprise of the iPhone X was spoiled by leaks and rumors, I was pretty disgusted with some journalists who took umbrage with the person who leaked the information. It’s only in Apple’s promotional interests to keep these things a secret and they aren’t going to affect our national security.

Here’s the iPhone X ad:

 

Phil Schiller called it “the iPhone 10,” skipping 9, I wasn’t sure if that was intentional or not at first, but then they continued it and I guess this is just what it is now.

The X’s OLED display is 5.8 inches diagonally and continues the journey to a rounded rectangular slab that is all display without any border. It’s almost there, there’s just a notch at the top of the phone for the front-facing camera, earpiece, and other sensors. Apple calls this new display a “Super Retina Display” at 2436×1125 pixels and  It’s 458 pixels-per-inch. So you’re getting a display that’s larger than the Plus and has more resolution in a smaller package. It’s also got an HDR standard for films and Apple’s True Tone tech.

Last year we lost the headphone TRSS jack and the home button was replaced with a simulation that I’ve grown accustomed to. This year the home button is just gone. You can wake the phone up by tapping on the display when it is in sleep mode.

iOS has other changes to accommodate the lack of a home button, of course. To get to the home screen from a “locked” iPhone X you now just swipe up from the bottom of the screen. It’s the same gesture when you’re in an app. Pausing mid-swipe, instead of raising your hand off the screen to complete the gesture, will bring up the multitasking switcher to choose from your recent apps.

I’m curious how that will work out with games. This overloading of gestures is a lot for users to take in.

The iPhone X’s sleep/wake switch is larger and can also be used to activate Siri.

Without a home button there isn’t room for a sensor to read your fingerprint for TouchID, so the iPhone X will have a face recognition system that Apple calls FaceID. Phil Schiller assures us that new sensors at the top of the phone in the notch will securely detect your face, even in the dark, to authorize your iPhone to be unlocked or in other places where you use TouchID. Including with Apple Pay.

Phil Schiller’s pitch for FaceID included a terrifying image of a wall of fake faces that Apple’s engineers used to test the face unlocking feature.

Apple are making an API available to developers for accessing the kinect-style data from the sensors on the front of the iPhone. They’re using the sensors internally to make 12 animated emojis that respond to your face and can be recorded along with audio messages to send over iMessage. Snapchat was demonstrated with it for face masking as well. They had a pretty impressive Ultimate Warrior style mask.

Craig Federighi demonstrated the iPhone X and showed that you can access the new iOS 11 Control Center by swiping down from the upper right corner where the connection status indicators are.

Phil Schiller boasted about the iPhone X cameras, they’re even better than the ones in the iPhone 8 Plus with optical image stabilization on both cameras. The front-facing camera is supposed to be better for selfies as well.

The iPhone X is supposed to get 2 more hours of battery life over the base iPhone 7, and have the same Qi charging as the 8.

The iPhone X will be up for pre-order on October 27th and shipping on November 3rd. Here are the prices for different configurations:

  • 64GB for $1000
  • 256GB for $1150

AirPower & Updated AirPods

Apple also has a new oval Qi charging mat coming out next year that will charge the iPhone 8 and X, as well as their Apple Watch and a new case for the AirPods that Phil Schiller said was “optional.” I’m not sure yet if “optional” means a more expensive set of AirPods or a separate purchase after the fact or both. I’d hope I could upgrade my current AirPods with a one-time purchase.

Overall:
I’m kind of disappointed with the pitch for the iPhone 8 versus the iPhone X. I don’t think I would personally want the iPhone 8 or 8 Plus when there’s an iPhone X available. Although I’m sure the iPhone X will not be available in as large a quantity as the 8. I also am not looking forward to an upgrade to the AirPods already. They don’t seem like something that should change as often, but I guess it might end up being similar to the Watch where there are updates but they seem less necessary than the phone.

I’m very disappointed that Apple is calling contact charging “wireless” when there are wires involved and you can’t just hold your iPhone five feet from the AirPower dingus to charge it.

It’s Time For iOS To Allow Apps From Outside the App Store

Recently, Apple started removing VPN apps from their iOS App Store in China in order to comply with local laws. That may be something they have to do as a business, but it’s time to allow apps from developers outside of the App Store. Gruber:

To me, the more interesting question isn’t whether Apple should be selling its products in China, but rather whether Apple should continue to make the App Store the only way to install apps on iOS devices. A full-on “install whatever you want” policy isn’t going to happen, but something like Gatekeeper on MacOS could.

Keep iOS App Store-only by default. Add a preference in Settings to allow apps to be downloaded from “identified developers” (those with an Apple developer certificate) in addition to the App Store. In that scenario, the App Store is no longer a single choke point for all native apps on the device.

The App Store was envisioned as a means for Apple to maintain strict control over the software running on iOS devices. But in a totalitarian state like China (or perhaps Russia, next), it becomes a source of control for the totalitarian regime.

Gruber doesn’t think this will happen, but it should. These pocket computers are supremely important to communications and it’s well past time for Apple to open things up.