MacRumors

Multiple popular iPhone apps from major companies are using intrusive analytics services that capture detailed data like taps, swipes, and even screen recordings without customer knowledge, reports TechCrunch.

Apps that include Abercrombie & Fitch, Hotels.com, Air Canada, Hollister, Expedia, and Singapore Airlines are using Glassbox, a customer experience analytics firm that lets developers use "session replay" screen recording technology within their apps.

Session replays let developers screenshot or record or a user's screen and then play back those recordings to see how users interact with their apps. Taps, button pushes, and keyboard entries are all captured and provided to app developers.

Some apps, such as Air Canada, don't properly mask data that's recorded, exposing information like passport numbers and credit card information. Air Canada employees with access to the screenshot database can readily see this data.

TechCrunch had mobile app expert The App Analyst look at some of the apps that Glassbox lists as a customer. Not all apps leaked masked data, and most appeared to be obfuscated, but there were instances where email addresses and postal codes were visible.

"Since this data is often sent back to Glassbox servers I wouldn't be shocked if they have already had instances of them capturing sensitive banking information and passwords," The App Analyst told TechCrunch.

As TechCrunch points out, all of the apps have a privacy policy, but not one makes it clear that they're recording a user's screen. Glassbox does not require special permission from either Apple or the user to record the screen, and without checking specific app data, there is no way to know if an app is doing this.

Glassbox also does not require its customers to mention the usage of the screen recording feature in their privacy policies.

"Glassbox has a unique capability to reconstruct the mobile application view in a visual format, which is another view of analytics, Glassbox SDK can interact with our customers native app only and technically cannot break the boundary of the app," the spokesperson said, such as when the system keyboard covers part of the native app/ "Glassbox does not have access to it," the spokesperson said.

There are other analytics companies that have practices similar to Glassbox, like Appsee and UXCam, and there are a lot of major companies that are using this kind of technology, based on their customer lists. This kind of tracking is also not limited to iOS apps -- it can be done on the web as well.

With no way to detect that this is going on, all customers can do is refuse to use the apps and services of companies that are found to be engaging in shady analytics tracking purposes without clear privacy policies.

Apple has once again reclaimed the title of most valuable publicly traded company marking the first time the Cupertino company has held that title since December.

As noted by CNBC, Apple surpassed Microsoft and Amazon this afternoon with a closing price of $174.24, for a market capitalization of $821.59 billion.

That beats out Microsoft's market value of $813.48 billion and Amazon's market value of $805.70 billion. Earlier this week, Apple also briefly surpassed the other two companies, and the top title has been shifting back and forth for months now.

Apple saw a significant drop in market value in January after lowering its revenue guidance for the first fiscal quarter of 2019 to $84 billion, down from $89 to $93 billion.

Apple's stock has recovered somewhat since its earnings release on January 29 where it reported revenue of $84.31 billion and net quarterly profit of $19.965 billion, or $4.18 per diluted share.

It was Apple's second best quarter ever in terms of revenue and profit, despite the fact that it ultimately ended up being lower than expected due to flagging iPhone sales.

In the release notes for Safari 12.1, the new version of Apple's browser installed in iOS 12.2, Apple says that it is removing support for the "Do Not Track" feature, which is now outdated.

From the release notes: "Removed support for the expired Do Not Track standard to prevent potential use as a fingerprinting variable."

"Do Not Track" is an outdated feature that was added to Safari quite a long time ago, first showing up in OS X Lion in 2011. Proposed by the FTC, "Do Not Track" is a preference that is sent by a user's browser to various websites requesting that advertising companies not use tracking methods.

It is entirely up to the advertising companies to comply with the "Do Not Track" messaging, and it has no actual function beyond broadcasting a user preference. All it does is say something to the effect of "hey, I prefer not to be tracked for targeted advertisements," which websites, advertisers, and analytics companies are free to ignore.

In the settings for Safari in iOS 12.2, Apple is no longer listing "Do Not Track" as a setting that can be toggled off or on, and in the Safari Preview browser, "Ask websites not to track me" is no longer listed as an option.

To replace Do Not Track, Apple has been implementing much more stringent Intelligent Tracking Prevention options, which do actually have a tangible effect and prevent the tracking methods that many advertisers and analytics sites use to detect your cross-site internet browsing.

German security researcher Linus Henze this week discovered a new zero-day macOS vulnerability dubbed "KeySteal," which, as demoed in the video below, can be used to get to all of the sensitive data stored in the Keychain app.

Henze appears to use a malicious app to extract data from the Mac's Keychain app without the need for administrator access or an administrator password. It can get passwords and other information from Keychain, as well as passwords and details for other macOS users.

"Finding vulnerabilities like this one takes time, and I just think that paying researchers is the right thing to do because we're helping Apple to make their product more secure."

Apple has a reward program for iOS that provides money to those who discover bugs, but there is no similar payment system for macOS bugs.

According to German site Heise Online, which spoke to Henze, the exploit allows access to Mac Keychain items but not information stored in iCloud. Keychain is also required to be unlocked, something that happens by default when a user logs in to their account on a Mac.

Keychain can be locked by opening up the Keychain app, but an admin password then needs to be entered whenever an application needs to access Keychain, which can be inconvenient.

Apple's security team has reached out to Henze, according to ZDNet, but he has continued to refuse to provide additional detail unless they provide a bug bounty program for macOS. "Even if it looks like I'm doing this just for money, this is not my motivation at all in this case," said Henze. "My motivation is to get Apple to create a bug bounty program. I think that this is the best for both Apple and Researchers."

This isn't the first Keychain-related vulnerability discovered in macOS. Security researcher Patrick Wardle demoed a similar vulnerability in 2017, which has been patched.

Apple may be working on new versions of the iPhone 7, 7 Plus, 8, and 8 Plus with updated modem hardware that does not violate the injunction levied against Apple in Germany.

As FOSS Patents points out, German website WinFuture says that sources in German retail have said that Apple will introduce modified ‌iPhone‌ 7 and 8 models that it will be able to sell in the Germany despite the sales ban enacted in December.

WinFuture says that Apple is set to begin selling modified versions of the ‌iPhone‌ 7 and ‌iPhone‌ 8 in approximately four weeks, and German retailers have already received lists of model numbers for the new devices.

The site does not list all of the new model numbers, but includes MN482ZD/A, which is a black ‌iPhone‌ 7 Plus with 128GB of storage, and MQ6K2ZD/A for the 64GB ‌iPhone‌ 8 in space gray. Neither of these new model numbers matches existing model numbers for the ‌iPhone‌ 7 and ‌iPhone‌ 8.

According to FOSS Patents, WinFuture has a credible reputation in Germany, and, coupled with the discovery of the new model numbers, there's a good chance this is true despite the fact that it has yet to be confirmed by an official source.

In its ongoing dispute with Qualcomm, Apple has had older ‌iPhone‌ models banned in both China and Germany. In China, Apple was able to get around the ban with a software update and has continued selling ‌iPhone‌ 7 and ‌iPhone‌ 8 models in that country.

In Germany, things are more complicated. A German court says that some ‌iPhone‌ models equipped with Intel modems infringe on Qualcomm's hardware patents, so there is a hardware issue that Apple needs to address. Apple has been ordered to cease the import and sale of infringing ‌iPhone‌ 7 and ‌iPhone‌ 8 models in Germany, both at its own retail stores and from third-party suppliers.

Introducing tweaked versions of the ‌iPhone‌ 7 and ‌iPhone‌ 8 without the allegedly infringing hardware would allow Apple to continue to sell its older iPhones in Germany while the legal battle with Qualcomm goes on.

There appears to be an issue with recent versions of Adobe Premiere Pro that can result in blown out MacBook Pro speakers.

MacRumors reader Alvin Shen alerted us to multiple users on the Adobe support forums who report that Premiere Pro suddenly caused loud, distorted audio to play through their ‌MacBook Pro‌ speakers, resulting in permanent damage. In many cases, the issue arose when users were editing the audio settings of video clips.

"I was using the Adobe Premiere 2019 Audio suite for background sound and while tweaking the settings it made a loud distorted noise that hurt even my ears," wrote one user. "After that my speakers are unusable."

The discussion topic was posted in November, and there are replies from affected users through January, suggesting that the apparent bug is present in both versions 12.0.1 and 12.0.2 of Premiere Pro CC for Mac. It's unclear when the issue began, how many users are affected, or what the exact cause is.

It appears Adobe advised at least one customer to try disabling the ‌MacBook Pro‌'s microphone in Premiere Pro by selecting No Input under Preferences > Audio Hardware > Default Input, but the issue persists for some users.

Our tipster Shen took his ‌MacBook Pro‌ to the Genius Bar at an Apple Store in Canada and was provided with an over $600 repair quote for his 2018 15-inch ‌MacBook Pro‌. The price is so high because Apple replaces the entire top case assembly containing the speakers, keyboard, trackpad, and battery.

It's unclear if Adobe, Apple, or both companies are at fault. We've reached out to both Adobe and Apple for comment.

Apple on Tuesday filed suit against Fundamental Innovation Systems International (FISI), preemptively asking a California court to declare that Apple has not infringed upon a number of USB power patents held by FISI.

FISI, described by Apple as a patent assertion entity formed for the sole purpose of generating revenue through patent litigation, acquired a portfolio of charging-related patents from BlackBerry that it has asserted against several tech giants, including LG, Samsung, and Huawei, who are now listed as FISI licensees.

Apple believes it could be sued next and is seeking a declaration of non-infringement in advance, according to the complaint:

Defendants have claimed, through letters, claim charts, telephone calls and in-person meetings with Apple personnel in this District, that certain Apple products infringe the Patents-in-Suit and that Apple requires a license to the Patents-in-Suit. However, Apple's products do not infringe the Patents-in-Suit.

This Court should not allow the threat of a future lawsuit to harm and cause uncertainty to Apple's business.

The former BlackBerry patents generally relate to USB-based charging protocols, systems, and methods dating back to the early 2000s.

Apple believes none of its products violate the patents, including its power adapters. One of Apple's consistent defenses throughout its complaint is that its devices and power adapters rely on its proprietary Lightning connector rather than adhering to the USB 2.0 protocols described in the patents.

Apple has demanded a jury trial in the U.S. District Court of Northern California. Beyond a declaration of non-infringement, Apple is seeking legal fees and any other relief which Apple may be entitled to as deemed appropriate by the court.

As part of its efforts to rebuild Apple Maps "from the ground up," Apple has been collecting street-level data with LiDAR-equipped vehicles for over three years. Apple also deployed employees wearing LiDAR-equipped backpacks to collect pedestrian-based data starting in California late last year.

As these efforts expand around the world, Apple recently transitioned to a revamped Apple Maps image collection website with a list of locations it will be surveying both in vehicles and on foot in the upcoming months.

The page reveals a few new pieces of information, including that pedestrian-based data collection has expanded to Hawaii and Nevada through February. Vehicle-based data collection will also be expanding to the tiny European country of Andorra, landlocked between France and Spain, in April 2019.

The new page, which replaces the previous Apple Maps vehicles list, also indicates that Apple will "periodically revisit some locations to gather new data in an effort to maintain a high-quality, up-to-date map."

Apple Maps vehicles have been collecting mapping data in the United States since 2015, with over 45 states at least partially surveyed to date. The vehicles have also surveyed parts of Croatia, France, Ireland, Italy, Japan, Portugal, Slovenia, Spain, Sweden, and the United Kingdom, according to Apple.

Back in June 2018, Apple said the revamped mapping data would roll out section by section across the rest of the United States over the following year. The improvements first rolled out in Northern California in iOS 12 and have extended to Hawaii and Southern California over the past few months.

The overall look and feel of ‌Apple Maps‌ is mostly the same, but zooming and panning reveals more details like grass, trees, sports fields, and parking lots. Apple also said search results would become more relevant.

Apple has added a listing for a new custom-designed pair of Beats Studio3 Wireless headphones that celebrate the 27th birthday of Brazilian soccer star Neymar Jr.

The Neymar Jr. Custom Edition headphones feature graffiti-style decals over the outside of the ear cups and headband that hark back to the soccer player's childhood roots in the streets of São Paulo and pay homage to his famous "Shhh..." tattoo.

The headphones also feature a number 10 inside the headband, representing the Paris Saint-Germain player's shirt number and 10-year professional soccer career.

Inspired by the graffiti-writing style from the São Paulo streets where it all began, the Beats Studio3 Wireless – Neymar Jr. Custom Edition honors Neymar’s strength of character. The design is a tribute to his famous "Shhh…" tattoo, representing his ability to adapt to anything, on and off the field, staying true to himself.

Priced at $349.95, the new Beats Studio3 custom-designed headphones are listed by Apple as "coming soon," but anyone interested in picking up a pair shouldn't have to wait too long, as Neymar Jr's birthday was just yesterday.