In iOS 17, iPhone users who change their passcode will be able to reset it within 72 hours using the previous passcode. However, users can choose to expire the previous passcode immediately in the Settings app to increase security. MacRumors reports: If you enter an incorrect passcode, tapping on "Forgot Passcode?" at the bottom of the screen will lead to another screen with a "Try Passcode Reset" option. Tapping this option allows you to enter the iPhone's previous passcode and create a new passcode. As a safeguard, an option in the Settings app lets you expire the previous passcode immediately so that it cannot be used to reset the new passcode. As of the first beta of iOS 17, it is still possible to change an Apple ID account's password with an iPhone's passcode, despite a Wall Street Journal report in February highlighting instances of thieves spying on an iPhone user's passcode in public and then stealing the device in order to gain widespread access to the device. In an interview with Daring Fireball's John Gruber last week, Apple's software engineering chief Craig Federighi said Apple has continued to "look at other ways to address this," but no changes have been made as of yet.

Read more of this story at Slashdot.

Apple's new iOS 17 includes a Sensitive Content Warning feature that notifies users when they receive unsolicited nude images. Insider reports: Apple said in a press release that the Sensitive Content Warning would help adult users avoid seeing unwanted nude images and videos. The company would not get access to the content as processing for the new feature occurred on the user's device, the press release added. The tech giant is also expanding Communication Safety, a feature aimed at protecting children, to cover sending and receiving content via AirDrop, Contact Posters, and FaceTime messages. The privacy feature will also expand to cover video content, as well as images. Further reading: Apple Announces iOS 17 With StandBy Charging Mode, Better Autocorrect

Read more of this story at Slashdot.

Apple is supposed to release an iOS 17 public beta in July, but the company inadvertently gave users an early peek. From a report: As AppleInsider explains, Connor Jewiss and other users have noticed that the iOS 17 developer beta was available to install in the Beta Updates section of Settings whether or not you paid for the necessary account. The macOS Sonoma and watchOS 10 previews have been available this way, too. We wouldn't count on any of the developer betas being available as we write this. As it is, you likely won't want to install them. These are the first pre-release versions available to people outside of Apple, and they're the most likely to include bugs and app compatibility issues. That could cause problems if you install them on must-have devices. Unless you're a developer who wants to start preparing app updates, you're probably better off waiting until either the public beta or the finished version releases this fall.

Read more of this story at Slashdot.

At WWDC today, Apple debuted iOS 17. "Highlights include new safety features, a built-in journaling app, a new nightstand mode, redesigned contact cards, better auto-correct and voice transcription, and live voicemail," reports The Verge. "And you'll be able to drop the 'hey' from 'Hey Siri.'" From the report: Your contact book is getting an update with a new feature called posters, which turns contact cards into flashy marquee-like images that show up full-screen on your recipient's iPhone when you call them. They use a similar design language as the redesigned lock screens, with bold typography options and the ability to add Memoji, and will work with third-party VoIP apps. There's also a new live transcription feature for voicemail that lets you view a transcript of the message a caller is leaving in real time. You can choose to ride it out or pick up the call, and it's all handled on-device. You'll also be able to leave a message on FaceTime, too. Some updates to messages include the ability to filter searches with additional terms, a feature that jumps to the most recent message so you can catch up more easily, transcriptions of voice messages -- similar to what the Pixel 7 series introduced -- and a series of new features called Check In that shares your live location and status with someone else. It can automatically send a message to a friend when you've arrived home, and it can share your phone's battery and cell service status to help avoid confusion if you're in a dead zone. Stickers are getting an overhaul, too, with the ability to add any emoji or photo cutout as a "sticker" positioned on iMessages or anywhere within the system. Live photos can be turned into animated stickers, too, and you can now add effects to stickers. AirDrop gets an update to send contact information -- cleverly called NameDrop -- which will send your selected email addresses and phone numbers (and your poster) just by bringing two iPhones near each other. It also works between an iPhone and an Apple Watch. Photos can be shared the same way, and if the file is a big one, it's now possible to move out of range while continuing the download. iOS 17 also includes keyboard updates, including enhancements to autocorrect. It now relies on a new language model for better accuracy, plus an easier shortcut to revert to the original word you wrote if necessary. There's now in-line predictive typing and sentence-level autocorrections to correct more grammatical mistakes. It'll finally learn your favorite cuss words, too; Apple's Craig Federighi even made a "ducking" joke onstage. Dictation uses a new AI model, too, that's more accurate. A new app called Journal automatically suggests moments that you might want to commemorate in a journal entry. Your entries can include photos, music, and activities, and you can schedule reminders for yourself to start writing. It's end-to-end encrypted, too, to keep things private. StandBy is a new mode for charging that turns the screen into a status display with the date and time. It can show information from Live Activities, widgets, and smart stacks and automatically turns on when your phone is in landscape mode while charging. You can swipe to the right to see some of your highlighted photos, and it comes with customizable clockfaces. Siri will surface visual results in StandBy, and the display shifts to a red tone at night to avoid disrupting sleep. Last but not least, Siri gets a boost, too, and finally lets you drop the "hey" from "Hey Siri." It will also recognize back-to-back commands. iOS 17 is available to developers today, with a public beta released next month.

Read more of this story at Slashdot.

Apple has announced a new operating system for its Vision Pro headset. Called visionOS, the operating system has been designed from the ground up for spatial computing and will have its own App Store where people can download Vision Pro apps and compatible iPhone and iPad apps. The Verge reports: The operating system is focused on displaying digital elements on top of the real world. Apple's video showed new things like icons and windows floating over real-world spaces. The primary ways to use the headset are with your eyes, hands, and your voice. The company described how you can look at a search field and just start talking to input text, for example. Or you can pinch your fingers to select something or flick them up to scroll through a window. The Vision Pro can also display your eyes on the outside of the headset -- a feature Apple calls "EyeSight." It seems Apple envisions this in part as a productivity device; in one demo, it showed a person looking at things like a Safari window, Messages, and Apple Music window all hovering over a table in the real world. Apple also showed a keyboard hovering in midair, too. And the Vision Pro can also connect to your Mac so you can blow up your Mac's screen within your headset. It will also be a powerful entertainment device, apparently. You can make the screen really big by pinching a corner of a window (Apple demoed this with a clip of Foundation). You can display the screen on other backgrounds, including a cinema-like space or in front of Mt. Hood (Apple's suggestion!), thanks to a feature Apple calls Environments. You'll also be able to watch 3D movies on the device. And Disney is working on content for the headset, which could be a major way for people to get on board with actually using it to watch shows and movies -- Disney Plus will be available on day one, Disney CEO Bob Iger said during the show. Apple Vision Pro will play games, too, and support game controllers; Apple showed somebody using the device with a PS5 DualSense headset. Over 100 Apple Arcade titles will be available to play on "day one," Apple said during its keynote. The Vision Pro also has a 3D camera, so you can capture "spatial" photos and video and look at those in the headset. And panorama photos can stretch around your vision while you're wearing the device. FaceTime is getting some "spatial" improvements, too; as described in Apple's press release, "Users wearing Vision Pro during a FaceTime call are reflected as a Persona -- a digital representation of themselves created using Apple's most advanced machine learning techniques -- which reflects face and hand movements in real time." You can learn more about Apple's first spatial computer here. A dedicated page for the Vision Pro headset is also now available on Apple.com.

Read more of this story at Slashdot.

Linux computer vendor System76 shared some news in a recent blog post. "We prefer to disable the Intel Management Engine wherever possible to reduce the amount of closed firmware running on System76 hardware. We've resolved a coreboot bug that allows the Intel ME (Management Engine) to once again be disabled." Phoronix reports that the move will "benefit their latest Intel Core 13th Gen 'Raptor Lake' wares as well as prior generation devices." Intel ME is disabled for their latest Raptor lake laptops and most older platforms with some exceptions like where having a silicon issue with Tiger Lake. System76 has also added a new firmware setup menu option for enabling/disabling UEFI Secure Boot. The motivation here with making it easier to toggle Secure Boot is for allowing Windows 11 support with SB active while running System76 Open Firmware.

Read more of this story at Slashdot.

At its Build 2023 conference this week, Microsoft announced Windows 11 will soon be able to run Win32 apps in isolation mode. XDA Developers reports: Starting [today], Microsoft is launching a preview of Win32 apps in isolation for Windows 11 customers. As the name suggests, it will allow users to run Win32 apps in an isolated environment so that they can be sandboxed from the rest of the operating system in order to further strengthen security. The idea is to leverage Windows 11's isolation capabilities to run Win32 apps in an environment where they don't have access to critical Windows components and subsystems. This will ensure that if someone runs a compromised Win32 app in isolation, it will be very difficult for an attacker to break through the sandbox and penetrate the rest of the system. This capability will be available in public preview for both enterprise customers and consumers.

Read more of this story at Slashdot.

Apple is planning a new interface for iPhones that shows information such as calendar appointments, the weather and notifications in the style of a smart-home display, part of a flurry of new features coming in its iOS 17 software update. From a report: The view will appear when an iPhone is locked and positioned horizontally, operating similarly to dedicated displays offered by Alphabet's Google and Amazon.com, according to people familiar with the project. The idea is to make iPhones more useful when they're, for example, lying on a person's desk or nightstand. The move is part of a broader push to embed live information in more parts of the company's software -- an approach that also includes the Apple Watch's interface. The new view is one of several changes planned for iOS 17, codenamed Dawn, which will be released to consumers later in 2023. Apple plans to unveil the software alongside its mixed-reality headset at the Worldwide Developers Conference on June 5.

Read more of this story at Slashdot.

metrix007 writes: OpenBSD, the OS that earned an exaggerated reputation for security simply by disabling services by default, has released version 7.3. Plenty of new improvements and bug fixes including to the editor, although still no real security features to help lock down a system, no virtual machine support for non-OpenBSD guests and no modern file system.

Read more of this story at Slashdot.

Tumblr's parody of paid verification has already delivered the social network and blogging platform a 125% boost in iOS in-app purchase revenue since November, according to a new analysis of the app's in-app consumer spending. TechCrunch reports: The company, now operated by WordPress.com owner Automattic following its 2019 acquisition, launched its response to Twitter's paid verification hustle with the addition of its own purely cosmetic double blue checks -- a sort of tongue-in-cheek rebuttal to the idea that subscription-based verification had any real value. As it turns out, at least some Tumblr users were willing to pay -- though perhaps not for clout, but because in-jokes have proven to be a more successful monetization strategy for the blogging network than some of its more legitimate attempts to make money, such as its creator-focused subscription, Post+. After being met with community backlash, at one point Post+ was being outperformed from a monetization perspective by crabs -- a goofy paid feature that let users send animated dancing crabs to each other's dashboards. According to new data from app intelligence firm Sensor Tower provided to TechCrunch, consumer spending on Tumblr's iOS app increased since November 2022's double-blue check launch, now totaling $263,000 in net revenue. While that's not a significant figure in the grand scheme of things by any means, it still represents a 125% jump in spending compared with the prior three-month total of August through October 2022. When looking at more long-term trends, Tumblr's revenue remains up -- but not by as much. Sensor Tower says the in-app purchase revenue on iOS is up 19%, compared with the prior ten months ahead of the blue check's launch (January through October 2022).

Read more of this story at Slashdot.

Steven Vaughan-Nichols, writing for ZDNet: Linux 6.2 was released yesterday, and Linus Torvalds described the latest Linux kernel release as, "Maybe it's not a sexy LTS release like 6.1 ended up being, but all those regular pedestrian kernels want some test love too." For once, I disagree with Torvalds. By adding upstream support for the Apple M1 Pro, M1 Max, and M1 Ultra chips, newer Mac owners can look forward to running Linux on their M1-powered machines. And, for techies, that's sexy. Getting Linux to run on the M1 family wasn't easy. When these high-powered ARM chips first arrived, Torvalds told me in an exclusive interview that he'd like to run Linux on these next-generation Macs. But, while he'd been "waiting for an ARM laptop that can run Linux for a long time," he worried, saying, "The main problem with the M1 for me is the GPU and other devices around it because that's likely what would hold me off using it because it wouldn't have any Linux support unless Apple opens up."

Read more of this story at Slashdot.

Linux 6.1 was widely anticipated to be a Long-Term Support (LTS) kernel with normally the last major release series for the calendar year normally promoted to LTS status. Greg Kroah-Hartman as the Linux stable maintainer went ahead today and formally recognized Linux 6.1 as the 2022 LTS kernel. From a report: Greg KH was planning on Linux 6.1 being LTS given its December debut. But he was waiting on feedback from kernel stakeholders over their test results with Linux 6.1 and plans around using Linux 6.1 for the long-term. He's finally collected enough positive responses -- along with co-maintainer Sasha Levin -- that there is confidence in maintaining Linux 6.1 as an LTS series. As of now the plan is on maintaining Linux 6.1 through December 2026, which is just a few months longer than the current Linux 5.15 LTS series that will be maintained through October 2026. We'll see over time if Linux 6.1 ends up potentially being maintained for the longer six-year LTS period that would put it through 2028. However, the number of Linux LTS series being maintained in tandem is growing and will ultimately depend upon how much these kernels are used by major industry players and how much commitment there is for testing of the point release candidates, etc.

Read more of this story at Slashdot.

Apple released iOS and iPadOS 16.3, macOS Ventura 13.2, and watchOS 9.3 today. The updates focus primarily on bug fixes and under-the-hood improvements, but there is one notable addition: Apple ID got support for hardware security keys. From a report: Once they've updated to the new software, a user can opt to make a device like a YubiKey a required part of the two-factor authentication process for their account. It's unlikely most users will take advantage of this, of course, but for a select few, the extra security is welcome. Other additions in iOS 16.3 include support for the upcoming new HomePod model, a tweak to how Emergency SOS calls are made, and a new Black History Month wallpaper. On the Mac side, hardware security key support is joined by the rollout of Rapid Security Response, a means for urgent security updates to be delivered to Macs without issuing a major software update. The watchOS update is oriented around bug fixes.

Read more of this story at Slashdot.

A developer managed to use an exploit found in iOS 16 to change the default font of the system without jailbreak. 9to5Mac reports: Zhuowei Zhang shared his project on Twitter, which he calls a "proof-of-concept app." According to Zhang, the app he developed uses the CVE-2022-46689 exploit to overwrite the default iOS font, so that users can customize the system's appearance with a different font other than the default (which is San Francisco). The CVE-2022-46689 exploit affects devices running iOS 16.1.2 or earlier versions of the operating system, and it basically lets apps execute arbitrary code with kernel privileges. The exploit was fixed with iOS 16.2, which also fixed a bunch of other security breaches found in the previous version of iOS. Since iOS has its own font format, the developer performed the experiment using only a few fonts, including DejaVu Sans Condensed, Serif, Mono, and Choco Cooky. And in case you're wondering, Choco Cooky is the weird font that used to come pre-installed by default on Samsung smartphones. Now you can finally have it on your iPhone. Zhang explains that the process should be safe for everyone, since all changes are reversed after rebooting the device. Still, the developer recommends users trying out the app to back up their devices before replacing the default system font. He also details that the change only affects some of the text on iOS, as other parts of the system use different fonts. More details about the project, including its source code, are available on GitHub.

Read more of this story at Slashdot.

Apple has decided to call the software that will run on its upcoming AR/VR headset "xrOS," an update from the original "RealityOS or "rOS" naming the company was planning on, according to Bloomberg. MacRumors reports: The name change comes as Apple begins to prepare for the launch of the headset, which is expected at some point in 2023. The headset will feature its own operating system, much like the Apple TV and the Apple Watch, and it will have a dedicated App Store. "XR" is meant to stand for extended reality, which pertains to both augmented and virtual reality. Rumors indicate that the headset Apple is working on will be "mixed reality" like the Microsoft HoloLens, supporting both augmented and virtual reality capabilities. Augmented reality augments what the user is seeing in the real world, while virtual reality is an entirely digital experience. Apple internally referred to the headset's operating system as "rOS" during the development process, but Bloomberg suggests that xrOS is a less generic name that will allow the headset to stand out more. In addition to confirming the name change with unnamed Apple sources, Bloomberg also discovered that a shell company named Deep Dive LLC has been registering the xrOS name across several countries, and Apple could potentially be behind these filings. Apple often uses shell companies to try to secretly register for trademarks for upcoming products.

Read more of this story at Slashdot.

Developer Dan Leveille received "a sketchy voicemail from a random number about a class action lawsuit settlement..." he posted on Twitter. "I thought it was a scam and almost ignored it." But he didn't — and ended up with $8,064.88 in his Venmo account. Back in 2019 a lawsuit by U.S. developers accused Apple of "profit-killing" App Store commissions, reports TechForge Media. Apple settled that suit by agreeing to create a $100 million Small Developer Assistance Fund (for developers who sold in Apple's app store between June of 2015 and April of 2021). And this month Apple has finally started sending out those payments, Apple Insider reports: Developers had until May 20 to submit a request to an independent administrator to become a "Settlement Class Member." If they met the criteria, the developers stood to receive a payment from $250 to $30,000 in value.... Along with the fund, the settlement also introduced a number of changes to App Store policies, including modifications relating to customer and developer communication, new pricing tiers, and a promise by Apple to continue offering its 15% reduced App Store commission for at least three years.

Read more of this story at Slashdot.

It's a major Apple update day, as the company is rolling out new versions of its iPhone, iPad and Mac operating systems. While iPhone users at large have already had a taste of iOS 16, this will be the first time that most folks will get their hands on iPadOS 16 and macOS Ventura. From a report: Apple delayed the release of iPadOS 16 amid reports suggesting it needed more time to polish up the Stage Manager multitasking feature (which we felt was unrefined in an early iPadOS 16 beta). In fact, Apple said it was skipping a public release of iPadOS 16 and going straight to version 16.1 -- just in time for the company's latest iPad Pro and entry-level iPad shipping this week. The latest version of the iPad operating system will include many of the same updates as iOS 16, including significant changes to Mail, Safari, Messages and other key apps. There are more collaboration-centric features, while the Weather and Clock apps are finally coming to iPad. External display support for Stage Manager will arrive within the next couple of months. Also later this year, Apple will release a collaborative productivity iPad app called Freeform. It seems like a souped-up whiteboard where users can sketch out ideas with Apple Pencil. The company says you'll be able to attach just about any kind of file to the canvas, including images, videos, audio, PDFs, documents and URLs, and preview the content inline.

Read more of this story at Slashdot.

Longtime Slashdot reader lazyeye writes: The 53rd release of OpenBSD, version 7.2, has officially been released. Support for new platforms such as the Ampere Altra, Apple M2 chip, and support for Lenovo ThinkPad x13s and other machines using the Qualcomm Snapdragon 8cx Gen 3 (SC8280XP) SoC are now included, along with various kernel improvements. The announcement with all the details are available at the link [here] from the openbsd-announce mailing list.

Read more of this story at Slashdot.

Last Friday, Google announced the release of KataOS, a security-minded operating system focused on embedded devices running ambient machine learning workloads. As Phoronix notes, it uses the Rust programming language and is "built atop the seL4 microkernel as its foundatin." From Google's Open-Source Blog: As the foundation for this new operating system, we chose seL4 as the microkernel because it puts security front and center; it is mathematically proven secure, with guaranteed confidentiality, integrity, and availability. Through the seL4 CAmkES framework, we're also able to provide statically-defined and analyzable system components. KataOS provides a verifiably-secure platform that protects the user's privacy because it is logically impossible for applications to breach the kernel's hardware security protections and the system components are verifiably secure. KataOS is also implemented almost entirely in Rust, which provides a strong starting point for software security, since it eliminates entire classes of bugs, such as off-by-one errors and buffer overflows. The current GitHub release includes most of the KataOS core pieces, including the frameworks we use for Rust (such as the sel4-sys crate, which provides seL4 syscall APIs), an alternate rootserver written in Rust (needed for dynamic system-wide memory management), and the kernel modifications to seL4 that can reclaim the memory used by the rootserver. KataOS code is being worked on via GitHub under the AmbiML umbrella.

Read more of this story at Slashdot.

AmiMoJo shares a report from MacRumors: iOS 16 continues to leak data outside an active VPN tunnel, even when Lockdown mode is enabled, security researchers have discovered. Speaking to MacRumors, security researchers Tommy Mysk and Talal Haj Bakry explained that iOS 16's approach to VPN traffic is the same whether Lockdown mode is enabled or not. The news is significant since iOS has a persistent, unresolved issue with leaking data outside an active VPN tunnel. According to a report from privacy company Proton, an iOS VPN bypass vulnerability had been identified in iOS 13.3.1, which persisted through three subsequent updates. Apple indicated it would add Kill Switch functionality in a future software update that would allow developers to block all existing connections if a VPN tunnel is lost, but this functionality does not appear to prevent data leaks as of iOS 15 and iOS 16. Mysk and Bakry have now discovered that iOS 16 communicates with select Apple services outside an active VPN tunnel and leaks DNS requests without the user's knowledge. Mysk and Bakry also investigated whether iOS 16's Lockdown mode takes the necessary steps to fix this issue and funnel all traffic through a VPN when one is enabled, and it appears that the exact same issue persists whether Lockdown mode is enabled or not, particularly with push notifications. This means that the minority of users who are vulnerable to a cyberattack and need to enable Lockdown mode are equally at risk of data leaks outside their active VPN tunnel. [...] Due to the fact that iOS 16 leaks data outside the VPN tunnel even where Lockdown mode is enabled, internet service providers, governments, and other organizations may be able to identify users who have a large amount of traffic, potentially highlighting influential individuals. It is possible that Apple does not want a potentially malicious VPN app to collect some kinds of traffic, but seeing as ISPs and governments are then able to do this, even if that is what the user is specifically trying to avoid, it seems likely that this is part of the same VPN problem that affects iOS 16 as a whole.

Read more of this story at Slashdot.