MacRumors

A sudo bug that can grant an attacker root access has been discovered to affect macOS Big Sur (via ZDNet).

The security vulnerability, identified last week as "CVE-2021-3156" by the Qualys Security Team, affects sudo, which is a program that allows users to run commands with the security privileges of another user, such as an administrator. The bug triggers a "heap overflow" in sudo that changes the current user's privileges to enable root-level access. This can give an attacker access to the entire system. An attacker would need to gain low-level access to a system first to be able to exploit the bug, such as via planted malware.

Sudo is part of many Unix-like systems, including macOS, but it was initially unknown if the vulnerability affected Mac machines since it was only tested by Qualys on Ubuntu, Debian, and Fedora. Security researcher Matthew Hickey has now confirmed that the most recent version of macOS, macOS Big Sur 11.2 can be subject to the sudo attack.

Last week, there was speculation that the macOS Big Sur 11.2 update may address the sudo vulnerability, though it was not definitively known at the time if the bug would affect macOS. While it was found that sudo was left unchanged in macOS Big Sur 11.2, it is now clear that macOS is affected by the exploit.

With some minor modifications, Hickey found that the sudo bug could be used to grant attackers access to macOS root accounts, and the discovery has now been verified by Carnegie Mellon University vulnerability analyst Will Dormann.

Apple has reportedly been notified of the CVE-2021-3156 vulnerability, and due to the severity of the issue, a patch will likely be released soon.

First introduced during CES 2021 last month, Kensington's new StudioDock docking station for the iPad Pro and fourth-generation iPad Air is now available to pre-order. Pricing starts at $379.99, and pre-orders are estimated to begin shipping in March.

12.9-inch iPad Pro, 11-inch iPad Pro, and 10.9-inch iPad Air models can be magnetically attached to the dock and charged with 37.5W USB-C Power Delivery. The dock can be rotated to use the iPad in either portrait or landscape mode.

A recipient of a CES 2021 Innovation Award, the StudioDock greatly expands an iPad's connectivity options, with three USB-A ports, one USB-C port, one HDMI 2.0 port, a 3.5mm headphone jack, an SD card reader, and a Gigabit Ethernet port. The dock also has built-in iPhone and AirPods wireless charging, and an optional Apple Watch charger that connects to the dock will be available later this year.

For the StudioDock's complete specifications, visit the Kensington website.

(Thanks, Liam!)

Apple's rumored virtual reality (VR) headset may be released as soon as the first quarter of 2022, according to JP Morgan analysis seen by China Times.

The report, spotted by iMore, explains that the "industrial design of Apple's headset will be close to that of other brands of VR headsets." The headset is said to feature six lenses and an optical LiDAR scanner to map the wearer's environment.

Most of the components for the headset will reportedly be manufactured starting in the fourth quarter of 2021. JP Morgan revealed some of Apple's suppliers for the device, such as TSMC for the device's processor, Largan and Genius Electronic Optical for the camera lenses, and Pegatron for assembly. The report also notes that the headset's supply chain is heavily concentrated in Taiwan.

JP Morgan believes that Apple's VR headset will be targeted at the top end of the consumer market, with pricing being "more expensive than VR headsets currently on the market." This is apparently explained by the cost of the device's materials, which "alone may exceed $500." This mirrors Mark Gurman's recent report that stated Apple's VR headset "will be far more expensive than those from rivals" and "on par with other pricey Apple products, such as the $5,999 Mac Pro desktop computer."

Gurman also said that "Apple has planned to launch the product as soon as 2022," which aligns with JP Morgan's first quarter of 2022 prediction.

Separately, JP Morgan also provided some information about Apple's rumored augmented reality (AR) glasses project. Due to the "extremely difficult supply chain management and industrial design specifications," JP Morgan predicts that Apple's glasses are unlikely to launch within the next 12 to 18 months, and that Apple is conscious to make the device "light, beautiful, easy to wear, and able to withstand long-term use." The need for prescription lenses and customization may also be hampering the move toward mass production.

Rumors surrounding Apple's VR headset and AR glasses have been increasing in recent months, with one of the devices said to be moving into the "second phase of development." Bloomberg recently clarified that Apple is planning to launch a virtual reality headset as a "pricey, niche precursor" to a more ambitious AR glasses product that is set to follow at a later date. Reliable analyst Ming-Chi Kuo said earlier this month that Apple will unveil an unspecified augmented reality device at some point in 2021.

Update: Citing industry sources, DigiTimes is now reporting that Pegatron and Quanta Computer are vying for final assembly orders from Apple for its AR glasses product. Foxconn has reportedly obtained orders for component assembly.

Most recent rumors have centered on Apple's VR headset, which is thought to be much closer to production than its AR glasses, so it is possible that DigiTimes has conflated the two products. Regardless, in view of recent reports, it seems that Apple is focusing on establishing suppliers for its unreleased VR and AR hardware, which suggests that development on the products is continuing at pace.

Apple-owned Shazam version 14.4 was released today, and the latest update to the music recognition app brings a new widget to the iPhone Home Screen, where users can see their recent song history at a glance.

The Shazam widget is available in three sizes: The smallest square widget displays the last track that you've discovered with Shazam; the larger oblong widget shows the last three tracks found with the most recent prominently displayed along the top; and the largest square widget shows the last four tracks, with the most recent similarly headlining above the previous three songs.

• iOS 14: How to Use Home Screen Widgets

In addition, all the widget types include a Shazam button in the upper right corner that when tapped will automatically start listening for any music that's currently being played in the environment.

Apple acquired Shazam in 2018, and has been gradually bringing the app into closer alignment with ‌Apple Music‌ ever since, offering trials to the streaming service through the app and the ability to sync Shazams directly to Apple Music. The app recently surpassed 200 million monthly active users worldwide.

• How to Link Shazam to Your Spotify Account

Shazam can be downloaded from the App Store for free, and it can be accessed through the Control Center on ‌iPhone‌ and ‌iPad‌, through ‌Siri‌ commands, or on the Mac. Shazam is also available on Android devices and select features can be accessed on the web.

Apple has received trademark approval for Apple Cash and Apple Card from the Government of Canada, suggesting the services might one day launch in the country.

According to trademark database notes discovered by the tech website iPhone in Canada, Apple applied for the trademarks in July 2019, and recent action history shows that both were approved on January 25, 2021.

Apple released ‌Apple Card‌ in the United States in August 2019, but it remains the only country in which the service is available. The credit card is linked to Apple Pay and built right into the Wallet app. Apple partnered with Goldman Sachs for the card, which is optimized for ‌‌Apple Pay‌‌ but still works like a traditional credit card for transactions.

It's uncertain whether the trademark approvals point to an imminent launch in Canada, since the services are likely to face several financial regulatory hurdles that diverge from country to country, but they at least offer a positive sign that it could happen one day. Apple has also already been granted trademarks on the terms in numerous other countries where it has yet to launch.

In related news, code recently discovered in iOS 14.5 suggests that Apple is planning to introduce a new ‌Apple Card‌ feature that will allow for multiple people to use the same ‌Apple Card‌ account.

Currently, ‌‌Apple Card‌‌ usage is tied to an individual and there is no option to share an account with another person. In future, ‌‌Apple Card‌‌ account holders should be able to invite family members to use their ‌‌Apple Card‌‌ account, with family spending available for viewing in the Wallet app.

Apple Korea's correction scheme to spend 100 billion won ($89.7 million) to support consumers and small-sized businesses has been accepted by the country's antitrust watchdog, following a years-long investigation into the company's unfair market practices (via The Korea Herald).

Apple has been under investigation in Korea since 2016 over unfair iPhone contracts that required local carriers to pay advertising and repair costs, with the Korean Federal Trade Commission conducting raids in June 2016 and November 2017.

The Korean FTC initially looked into imposing penalties on Apple Korea and held several plenary sessions to discuss the issue. Instead, Apple suggested a voluntary correction scheme to conclude the case, and the FTC agreed to review the proposal last year. Today's report confirms that the watchdog has now accepted the plan under its Monopoly Regulation and Fair Trade Act.

Under the Monopoly Regulation and Fair Trade Act, companies that are accused of antitrust activities are allowed to state a correction scheme. Should the FTC view the suggested corrective measures as reasonable, it is to close the case without judging the illegality of the case.

The related clause was introduced in 2011 in order to add speed to pending cases and to provide tangible remedies to consumers, instead of holding on to legal means.

The plan consists of Apple spending 40 billion won on the construction of an R&D center for local small-sized businesses involved in smartphone manufacturing, with 25 billion going into offering consumers 10% discounts in iPhone repairs and warranties.

Another 25 billion won will be used to establish an education center for training ICT developers, while the remaining 10 billion won will go toward supporting digital education in schools and public facilities.

"We are pleased this process has reached a conclusion and look forward to expanding and accelerating our existing commitments here with these new investments that will benefit local suppliers and manufacturers, small businesses, entrepreneurs, and education," Apple said in a statement.

"This broad range of initiatives will strengthen innovation and economic opportunity across Korea. We look forward to sharing more details on these plans in the months to come."

The FTC will appoint an accounting firm to review Apple's implementation of the plan on a half-year basis over the next three years. If Apple Korea doesn't follow through on its commitment, the company could face an enforcement penalty of 2 million won per day and have the correction scheme declared invalid.

Apple is rumored to be planning to invest 4 trillion won ($3.6 billion) in Kia Motors as part of a planned manufacturing partnership between the two companies, according to Korean site DongA Ilbo (via Bloomberg).

Apple and Kia (an affiliate of Hyundai) are said to be establishing a production relationship that will see Kia build Apple Cars at its U.S. facility located in Georgia.

Apple could sign a deal with Kia as soon as February 17, with the aim of introducing Apple Cars in 2024, though that release timeline is earlier than some prior launch estimates. Apple and Kia are aiming to produce 100,000 vehicles per year when manufacturing kicks off.

There have been multiple reports of a partnership between Apple and Hyundai, and prior reports have suggested that Hyundai's Kia brand will handle manufacturing. Earlier in January, Korea IT News also said that electric vehicles manufactured by Apple would likely be made at Kia's Georgia factory.

When rumors of talks between Hyundai and Apple first hit, Hyundai confirmed that it was holding discussions with Apple, but later revised the statement and eliminated the Apple mention.

Apple analyst Ming-Chi Kuo said today that Apple is planning to collaborate with Hyundai and will use Hyundai's E-GMP battery electric vehicle platform for its first vehicle chassis in addition to using the Kia factory for U.S. production. Kuo believes an Apple Car will come in 2025 "at the earliest" but Apple is already on a tight schedule if it wants to meet that deadline, so a launch could be pushed back further.

Apple today released the first beta of an upcoming macOS 11.3 update to developers for testing purposes, and among other features, the new software adds an option to set a pair of stereo-paired HomePods as the default sound output.

In current versions of macOS, HomePods set up as a stereo pair can be used in the Music app or for AirPlay content, but it's necessary to select them manually through the ‌AirPlay‌ interface.

With the macOS Big Sur 11.3 beta, a HomePod stereo pair is displayed as a single option in the sound output list rather than displaying each ‌HomePod‌ as separate as before. Selecting a pair of HomePods as an audio option plays audio in stereo mode by default.

Support for stereo-paired HomePods was first noticed by 9to5Mac, and the site says that the feature is not yet working consistently, so Apple still has some work to do. Using paired HomePods in this way works for music and videos in apps, but system sounds will continue to play on the built-in Mac speakers.

Stereo-paired HomePods can already be set as an audio output option on iPhone, iPad, and Apple TV, so the update brings the same functionality to the Mac. Stereo pairing is available with two HomePods or two ‌HomePod‌ minis, but the ‌HomePod‌ and HomePod mini can't be paired together.

There are several other new features in the macOS Big Sur 11.3 update, including new customization options for Safari, optimizations for using iOS apps on M1 Macs, new features for Reminders, Apple Music, and Apple News, and support for the latest console controllers. More details can be found in our macOS Big Sur 11.3 article.

Apple CEO Tim Cook last week spoke at the virtual Computers, Privacy, and Data Protection conference, where he highlighted Apple's commitment to user privacy and condemned the data-hungry business models of companies like Facebook.

Apple today shared Cook's full 12-minute speech on its YouTube channel for those who missed the initial release.

On January 28, 2021, Apple CEO Tim Cook delivered remarks at Computers, Privacy & Data Protection Conference: Enforcing Rights in a Changing World. The virtual conference -- hosted annually in Brussels, Belgium -- is one of the foremost international privacy and technology conferences bringing together leaders from academia, government, civil society and the private sector. Learn more about the features and controls Apple provides users to safeguard their privacy at http://www.apple.com/privacy​.

Cook's speech didn't mention Facebook by name, but his comments on disinformation and conspiracy theories being "juiced by algorithms" were clearly directed at the company.

"At a moment of rampant disinformation and conspiracy theories juiced by algorithms, we can no longer turn a blind eye to a theory of technology that says all engagement is good engagement -- the longer the better -- and all with the goal of collecting as much data as possible. It is long past time to stop pretending that this approach doesn't come with a cost -- of polarization, of lost trust and, yes, of violence."

Cook also used his speech to highlight new Apple privacy initiatives including App Store privacy labels and the App Tracking Transparency rules that will be enforced following the launch of iOS 14.5. Our original article also has a full transcript of Cook's comments for those who would prefer to read what he said rather than watch the video.

Following the release of iOS 14.4 on January 26, Apple has stopped signing iOS 14.3, the prior version of iOS 14. With the software no longer being signed, it is not possible to downgrade from iOS 14.4 to iOS 14.3 if you've already upgraded.

Apple routinely stops signing older versions of software updates after new releases come out in order to encourage customers to keep their operating systems up to date.

iOS 14.4 introduced some notable security fixes for vulnerabilities that Apple says may have been actively exploited, so if you haven't updated yet, it's a good idea to do so.

The update also brought support for smaller QR codes, a feature for assigning device types to Bluetooth accessories, camera authenticity warnings for iPhone 12 models, and more, with details available in our iOS 14.4 guide.

iOS 14.4 is the current publicly available version of iOS that people can download, but Apple has also seeded an iOS 14.5 beta to developers for testing purposes. iOS 14.5 is one of the biggest updates to iOS 14 to date, introducing a feature for unlocking an iPhone when wearing a mask with an Apple Watch, adding Dual-SIM 5G support, introducing compatibility with the latest gaming controllers, and more.

A leaked Tesla FCC document shared by The Verge suggests that Tesla's next cars will support Ultra Wideband, a technology that's built into the latest iPhones and in vehicles, allows for greater accuracy when unlocking a car with a smartphone.

Tesla in September submitted documentation on new key fobs, a controller, and endpoints that would be installed inside the frame and cabin of a vehicle, some of which support Ultra Wideband communication. Tesla is using a standards-based implementation of Ultra Wideband, so it should be compatible with the iPhone 11 and iPhone 12 models that support the technology if it ultimately ends up in Tesla vehicles.

Apple's iPhone 11 and iPhone 12 devices are equipped with a U1 chip that supports Ultra Wideband technology for improved spatial awareness and indoor location detection. Apple has likened Ultra Wideband to "GPS at the scale of the living room," and it is designed for accurate close proximity tracking.

Right now, Apple is using the U1 chip for a directional AirDrop feature and to interact with the U1-equipped HomePod mini for handing off songs, but it otherwise doesn't do much. In the future, Apple is expected to use the U1 chip for AirTags, and it also has applications like integration with vehicles.

There's no explicit word that Tesla's Ultra Wideband implementation will work with the iPhone, but Tesla already has an iPhone app that allows Tesla owners to lock and unlock their cars, among other features. According to the FCC document, Tesla's Ultra Wideband feature will more accurately determine how far a person is from their car for unlocking and activation purposes, and Tesla describes it as more secure.

Future Tesla vehicles will include several Ultra Wideband endpoints in the vehicle for proper location triangulation and to determine whether a person is inside or outside of the car, and these will likely be able to interface with Apple's iPhones.

Other vehicle manufacturers are also working on Ultra Wideband technology that will work with the iPhone 11 and iPhone 12 models. In January, BMW said that it is working on Digital Key Plus, a new Ultra Wideband version of the Apple Car Keys feature that is designed to allow drivers to unlock and start their vehicles without removing their iPhone from their pocket or bag.

BMW's Ultra Wideband technology will be built into the iX electric vehicle set to launch in Europe in late 2021 and in North America in early 2022.

Apple today seeded the first beta of an upcoming macOS Big Sur 11.3 update to developers for testing purposes, with the new beta coming just a few days after the release of macOS Big Sur 11.2, a bug fix update.

Developers can download the ‌‌macOS Big Sur‌‌ 11.3 beta using the Software Update mechanism in System Preferences after installing the proper profile from the Apple Developer Center.

macOS Big Sur 11.3 introduces more customization options for Safari, adding a way to rearrange the different sections on the Start Page like Favorites, Reading List, Siri Suggestions, Privacy Report, and more. Developers also have access for a new integration to develop features for the Start Page.

The update includes optimizations for using iOS apps on M1 Macs. When running iPhone and iPad apps on ‌M1‌ Macs, there's a Touch Alternatives preference pane that allows users to set keyboard commands for touch input alternatives, plus iPadOS apps launch with a larger window if the Mac's display allows it. Touch Alternatives can be enabled for iPhone or ‌iPad‌ apps by clicking on the app's name in the menu bar and then selecting the Preferences option. Touch Alternatives let you customize taps, swipes, and drags.

macOS Big Sur 11.3 also adds support for the latest PlayStation 5 DualSense and Xbox Series X/S controllers for use with macOS games.

In the Reminders app, reminder lists can be sorted by Due Date, Creation Date, Priority, or Title, and there is an option to print lists by going to File > Print. Reminders can also be moved manually across lists with drag and drop, something that wasn't possible before.

Apple is adding a new "Made For You" library shortcut in Apple Music for finding personal mixes and Replay playlists, and the Listen Now section has been updated with support for highlighting live events.

In the Apple News app, there's a redesigned ‌Apple News‌+ tab with a dedicated "For You" section and a new Browse tab that makes it easier to browse through available content. The new For You section is designed to help ‌Apple News‌+ users find favorite magazines and newspapers much faster, plus it adds new tools for managing downloaded issues.

9to5Mac discovered that macOS Big Sur 11.3 includes an updated "Support" interface when accessing "About This Mac." The new design includes details on your warranty and it allows for starting a repair right from the Mac interface.

The tab will work similarly to the AppleCare coverage menu in the iOS Settings app, which lets users request repairs, buy an ‌AppleCare‌ plan, and check their coverage. This updated support menu is not visible in the first beta of macOS Big Sur 11.3, but it could come at a later date. There are also signs that Apple may be planning to bring a support app to the Mac.

macOS Big Sur 11.3 adds support for HomePod Stereo pairs, allowing a set of paired HomePods to be set as the default sound output option, with the two HomePods showing up as a single selectable speaker rather than separate as in prior versions of macOS.

Apple today began offering refurbished versions of the iPhone 11, iPhone 11 Pro, and iPhone 11 Pro Max, marking the first time that the 2019 iPhones have been available at a discounted price directly from Apple.

Savings on the iPhone 11 models ranges from $100 to $170, and for the 11 Pro and 11 Pro Max, the refurbished store is the only way to get one of these devices from Apple as they have since been discontinued.

Apple has limited stock available as the contents of the refurbished store fluctuate based on what people have sent in for repair. There's a single refurbished iPhone 11 model with 128GB of storage priced at $549, which is a $100 savings.

There are several 11 Pro and 11 Pro Max variants with 64 to 256GB of storage. An entry-level 11 Pro Max with 64GB of storage is available for $849, which Apple says is a $150 discount.

Color availability is limited with Apple offering the iPhone 11 in black, and the iPhone 11 Pro and Pro Max only in space gray and midnight green, but color options and available capacities will change over time.

Refurbished iPhone 11 models are SIM-free, carrier unlocked and can be used with any supported carrier.

All of Apple's refurbished iPhones include the same one-year warranty provided to a brand new iPhone, along with all manuals and accessories. Each refurbished device from Apple goes through a rigorous testing, repair, repackaging, and cleaning process, with Apple providing new outer shells and batteries.

Aside from the plain white box that a refurbished device is shipped in, it is virtually impossible to tell the difference between a refurbished iPhone and a new model. Standard one-year warranties can be extended with an AppleCare+ purchase, and there's also a standard 14-day return policy.

Apple has been picking up car experts on an ongoing basis over the course of the last few years as development continues on the rumored Apple Car, and at the end of last year, the Cupertino company hired Manfred Harrer, a Porsche executive with expertise in chassis design.

According to Business Insider Deutschland (via 9to5Mac), Harrer was considered one of the best engineers in the Volkswagen Group, serving as the head of chassis development at Porsche prior to overseeing the Cayenne product line.

A former top Volkswagen manager told Business Insider that Mr. Harrer was a "hidden champion," and the "measure of all things in his field." Harrer worked for Volkswagen Group for more than 13 years before he left at the end of last year without telling his former colleagues where he was heading.

Harrer's LinkedIn profile still lists Porsche as an employer, and there was reportedly a waiting period before Harrer was able to begin working for a new company. Prior to working on chassis development at Porsche, Harrer worked for BMW and Audi.

Current rumors suggest that Apple is pursuing a full Apple-branded car, and right now, it looks like the company will be partnering up with Hyundai. Just this morning, Apple analyst Ming-Chi Kuo said that Apple is likely to use Hyundai's E-GMP Battery Electric Platform for the Apple Car, with the future vehicle set to be marketed as a "very high-end" model.