MacRumors

Law enforcement agencies have a new iPhone cracking tool that works with all modern iPhones and the newest versions of iOS 11, the GrayKey, designed by a company called Grayshift.

Previous reports have suggested the GrayKey can crack 4-digit passcodes in a matter of hours and 6-digit passcodes in days, but as highlighted by VICE's Motherboard, cracking times for the GrayKey and other similar iPhone unlocking methods can potentially be even faster and 6-digit passcodes no longer offer adequate protection.

Matthew Green, assistant professor and cryptographer at John Hopkins Information Security Institute, said this morning on Twitter that with an exploit that disables Apple's passcode-guessing protections, a 4-digit passcode is crackable in 6.5 minutes on average, while a 6-digit passcode can be calculated in 11 hours.

Apple does have built-in options to erase an iPhone after 10 incorrect passcode guessing attempts and there are automatic delays after a wrong passcode has been entered more than five times, but GrayKey appears to bypass these protections.

It's not clear if the GrayKey can reach the fastest unlocking times outlined by Green, but even at slower unlocking speeds, it only takes days to get into an iPhone with a 6-digit passcode. Comparatively, it takes over a month to crack an iPhone with an 8-digit passcode, or more than 13 years to get into an iPhone with a 10-digit passcode.

With the release of iOS 9 in 2015, Apple switched from a four digit passcode to a 6-digit passcode as the default, making iOS devices more secure, but for those concerned about their iPhones being accessed either by law enforcement with the GrayKey or by a hacker with a similar cracking tool, a 6-digit passcode is no longer good enough.

Several security experts who spoke to Motherboard said people should use an alphanumeric passcode that's at least seven characters long and uses numbers, letters, and symbols.

"People should use an alphanumeric passcode that isn't susceptible to a dictionary attack and that is at least 7 characters long and has a mix of at least uppercase letters, lowercase letters, and numbers," Ryan Duff, a researcher who's studied iOS and the Director of Cyber Solutions for Point3 Security, told me in an online chat. "Adding symbols is recommended and the more complicated and longer the passcode, the better."

To change your iPhone's passcode from a simple numeric 6-digit passcode to something more secure, you'll need to use the Settings app. Go to "Face ID & Passcodes" in the Settings app, enter your current passcode, scroll down, and then choose "Change Passcode."

You'll be asked to enter your new passcode on this screen, but you'll actually want to tap on the blue "Passcode Options" text towards the middle of the display. Choose "Custom Alphanumeric Code" to enter a passcode that consists of letters, numbers, and symbols.

With an alphanumeric passcode in place, you'll no longer be presented with a numeric keyboard when unlocking your iPhone, and instead, you'll see a full keyboard available to type in your passcode.

There's a definite compromise between easy device accessibility and security when using a longer alphanumeric passcode like this. It's a lot easier to type six numbers than it is to type a mixed character alphanumeric passcode into an iOS device, but for complete security, longer and more complex is the way to go.

Apple today seeded the second beta of an upcoming iOS 11.4 update to developers, two weeks after releasing the first beta and three weeks after releasing iOS 11.3, a major update that introduced several new features.

Registered developers can download the new iOS 11.4 beta from Apple's Developer Center or over-the-air once the proper configuration profile has been installed from the Developer Center.

The iOS 11.4 update introduces a new ClassKit framework for educational institutions, which will support new features announced at Apple's March 27 event.

For standard users, the iOS 11.4 update adds features that were originally present in the iOS 11.3 beta but removed ahead of release. It includes support for Messages on iCloud, designed to store your iMessages in iCloud and sync them across devices.

There's also support for AirPlay 2 features, with the Apple TV once again available in the Home app. With AirPlay 2, the same audio content can be played in multiple rooms. On the HomePod, there are signs of support for stereo sound, but stereo sound is not currently available as it requires 11.4 HomePod software not available for developers.

iOS 11.3, the previous update, introduces a new Battery Health feature for monitoring the status of your iPhone's battery, Business Chat for iMessage, which lets you communicate with companies directly in the Messages app, ARKit 1.5 with augmented reality improvements, new Animoji on iPhone X, Health Records from participating medical providers, and more.

Update: Mentions of the non-functional HomePod stereo pairing feature have been removed in iOS 11.4 beta 2, and Apple has added a new (PRODUCT)RED wallpaper for the iPhone 8 and iPhone 8 Plus.

Amazon appears to have gained an edge over Apple in deals with smart home builders, according to The Information.

The paywalled report claims that an increasing number of home builders have agreed to partnerships with Amazon to build homes with preinstalled Alexa-enabled accessories, rather than HomeKit-based products from Apple.

Last year, for example, Amazon reportedly struck a large-scale deal with Lennar, one of the biggest home builders in the United States. Lennar first had a partnership with Apple in 2016, but the company is "prioritizing Amazon now."

As part of its deal, Lennar gets access to Amazon's growing army of so-called Amazon experts, the company's in-home service team, to go around to every new homeowner and make sure their smart home is hooked up. Every new Lennar home comes with Echo Dot speakers and Echo Show displays to connect with Alexa, as well as a suite of connected doorbells, locks, light switches and thermostat.

A few other builders, such as Arizona-based Meritage Homes and Shea Homes, also said they considered Apple but opted for Amazon.

"Apple is closed source about what will talk to their system, so we shied away from it," said CR Herro, a vice president with Arizona-based Meritage Homes. "I don't want to restrict what I think the future could be because I have no idea what it will be."

The report claims that Apple requiring accessory makers to install an authentication chip for HomeKit compatibility has "significantly limited the number of new devices getting to market," but that is no longer the case, as iOS 11.3 introduced software-based authentication for accessories to interface with HomeKit.

Meanwhile, some builders believe there is a downside in allowing Amazon to embed a network of Alexa-powered devices that can collect data into homes, ranging from privacy concerns to competitive reasons.

Startup home builder Kasita, for instance, thinks these traditional players are giving up a huge amount of business by linking up with Amazon. Kasita uses Alexa devices for performing voice control in its "micro homes," but tries to maintain its relationship with the consumer by providing its own app and wants to offer its own services to consumers in the future.

"Amazon owns you when you buy anything online," said Jeff Wilson, founder and chairman of Kasita. "Do you really want them owning home experiences?"

While new homes are estimated to account for only about 10 percent of residential home sales in the United States, Apple believes the best way to introduce homeowners to HomeKit is from the get-go.

"We want to bring home automation to the mainstream," said Greg Joswiak, a marketing executive at Apple, in an interview with Bloomberg. "The best place to start is at the beginning, when a house is just being created."

Apple's latest entry in its online Machine Learning Journal focuses on the personalization process that users partake in when activating "Hey Siri" features on iOS devices. Across all Apple products, "Hey Siri" invokes the company's AI assistant, and can be followed up by questions like "How is the weather?" or "Message Dad I'm on my way."

"Hey Siri" was introduced in iOS 8 on the iPhone 6, and at that time it could only be used while the iPhone was charging. Afterwards, the trigger phrase could be used at all times thanks to a low-power and always-on processor that fueled the iPhone and iPad's ability to continuously listen for "Hey Siri."

In the new Machine Learning Journal entry, Apple's Siri team breaks down its technical approach to the development of a "speaker recognition system." The team created deep neural networks and "set the stage for improvements" in future iterations of Siri, all motivated by the goal of creating "on-device personalization" for users.

Apple's team says that "Hey Siri" as a phrase was chosen because of its "natural" phrasing, and described three scenarios where unintended activations prove troubling for "Hey Siri" functionality. These include "when the primary users says a similar phrase," "when other users say "Hey Siri"," and "when other users say a similar phrase." According to the team, the last scenario is "the most annoying false activation of all."

To lessen these accidental activations of Siri, Apple leverages techniques from the field of speaker recognition. Importantly, the Siri team says that it is focused on "who is speaking" and less on "what was spoken."

The overall goal of speaker recognition (SR) is to ascertain the identity of a person using his or her voice. We are interested in “who is speaking,” as opposed to the problem of speech recognition, which aims to ascertain “what was spoken.” SR performed using a phrase known a priori, such as “Hey Siri,” is often referred to as text-dependent SR; otherwise, the problem is known as text-independent SR.

The journal entry then goes into how users enroll in a personalized "Hey Siri" process using explicit and implicit enrollment. Explicit begins the minute that users speak the trigger phrase a few times, but implicit is "created over a period of time" and made during "real-world situations."

The Siri team says that the remaining challenges faced by speaker recognition is figuring out how to get quality performance in reverberant (large room) and noisy (car) environments. You can check out the full Machine Learning Journal entry on "Hey Siri" right here.

Since it began last summer, Apple has shared numerous entries in its Machine Learning Journal about complex topics, which have already included "Hey Siri", face detection, and more. All past entries can be seen on Apple.com.

Tony Fadell, who was instrumental to the creation of the iPod, believes Apple should tackle the issue of smartphone addiction.

In an editorial with Wired UK, the former Senior Vice President of the iPod division said Apple can solve the problem at the software level by "empowering users to understand more about how they use their devices."

"To do this, it should let people track their digital activity in detail and across all devices," said Fadell. "You should be able to see exactly how you spend your time and, if you wish, moderate your behavior accordingly."

Fadell said his solution would essentially be like a digital scale to monitor time spent in apps, web browsing, and other tasks:

We need a "scale" for our digital weight, like we have for our physical weight. Our digital consumption data could look like a calendar with our historical activity. It should be itemized like a credit-card bill, so people can easily see how much time they spend each day on email, for example, or scrolling through posts. Imagine it's like a health app which tracks metrics such as step count, heart rate, and sleep quality.

He added that Apple could also let users set their device to a "listen-only" or "read-only" mode, but it's unclear how this would differ from Apple's existing Do Not Disturb mode, which can be enabled when an iPhone is locked or unlocked.

Fadell believes Apple is "particularly well-placed to tackle this problem," and that implementing these tools wouldn't be difficult.

Fortunately, it appears that Apple is already working on improved parental controls similar to what Fadell outlined. More specifically, Bloomberg News reported that iOS 12 will feature "new features for parents to better monitor how long apps are being used for by kids and their overall screen time."

In January, Apple confirmed it is working on "even more robust" parental controls following pressure from investors to do more to curb smartphone addiction. The new controls would likely extend to the Mac and other devices.

Fadell's editorial was first published in the May-June issue of WIRED magazine, as part of a series of articles about "Apple's next move."

Duncan Sinfield says that piloting his drones over Apple Park has become increasingly difficult in the past few weeks, and that he believes it's "only a matter of time until the campus becomes shut-off to drones completely." Sinfield's comment on Apple Park security comes in the text description of a new video that he uploaded today, where he talks about the response that he's been getting to drone piloting over the campus.

The drone videographer says that security "generally responds" to his precise takeoff location "in 10 minutes or less." He speculates that Apple has set up a geofence of some kind and that the company could be tracking all drone flights near the campus in an effort to lower the amount of eyes on Apple Park. He further guesses that Apple might be using technology from a company like Dedrone, which describes itself as "the airspace security platform that detects, classifies, and mitigates all drone threats.​"

This is an extended length video, it's only a matter of time until the campus becomes shut-off to drones completely... with a geo-fence, or something similar. Security at Apple Park generally responds in two white Prius's to my precise take-off locations in 10 minutes or less. While this is speculation, my instincts tell me that Apple is tracking all drones in the vicinity of the campus with sophisticated radio frequency technology from companies such as DeDrone (a San Francisco-based aerospace security company).

As always, I respect all requests by Apple Security to land my drone and leave the area when asked to do so. They are always asking if I'm an Apple employee too. So to all of the Apple Employees watching (and reading), don't fly your drones over The Park, it's frowned upon!

Last summer, multiple reports emerged about Apple Park security's first efforts at stopping drone pilots from accessing the airspace above the campus. Despite those attempts, drone update videos have been consistently uploaded to YouTube by multiple videographers, including Sinfield and Matthew Roberts. Apple Park's latest stance on drones appears to be a bit more strict this time around, and follows a recently leaked memo from the company that warned employees against leaking details about future devices to the media.

Besides the security-focused topic of the description, Sinfield's video today is an extended update providing the usual coverage of Apple Park. The campus looks essentially complete except for a few remaining dirt mounds and empty landscaping areas outside of the main spaceship building and near the Steve Jobs Theater. Apple Park has become increasingly busy since more employees began moving in earlier this year, with the campus providing a backdrop for executive interviews as well as housing CEO Tim Cook's own office.

In another drone video posted back in February, Matthew Roberts captured a drone that malfunctioned and crashed among the solar panels covering the roof of Apple Park.

Apple may be considering allowing third-party developers to create custom Apple Watch faces, if a line of code discovered in the latest watchOS beta is anything to go by.

Historically, Apple has resisted allowing third-party developers to create and release custom watch faces for Apple Watch, instead electing to add to its stock options for watch faces in successive iterations of the device's operating system, such as the Siri and kaleidoscope watch faces introduced in watchOS 4.

However, a log message in watchOS 4.3.1 beta, unearthed by 9to5Mac, suggests Apple may be considering the possibility in a future version of Apple Watch software. As part of its NanoTimeKit framework which provides developer access to watch face components, the beta includes references to a currently inactive developer tools server that will likely allow communication with Xcode on macOS.

Within this portion of code is a log message that reads: "This is where the 3rd party face config bundle generation would happen."

Whether or not Apple decides to implement the missing feature for watchOS 5 or in a later version is unknown, but the mere mention of third-party face configuration will likely be cause for hope for anyone longing for additional personalization beyond the existing color-adjustable stock options, custom "Photo" watch face, and accompanying third-party watch complications.

On the other hand, any such hope could prove misplaced given Apple's traditional reluctance to open up the most outward-facing aspects of its operating systems to third parties (such as the lock and home screens in iOS, for example). Apple imposes strict limits on changes to major interface elements out of a concern that they guarantee a high level of usability, stability and security, and it's hard to imagine the company casting aside those principles.

It's worth noting that Apple tends to reject third-party Apple Watch apps that closely duplicate existing functions, as per its developer guidelines, although whether watch faces would come under this provision remains unclear. At any rate, while Apple welcomes "creative ways of expressing time as an app interface", currently it does not allow apps that look like watch faces.

Meanwhile, rival smartwatch operating systems like FitbitOS and Wear OS have allowed users to install third-party watch faces on their devices for some time, but the design and usability standard on offer is highly variable and Apple isn't likely to warm to the idea unless it can enforce a consistent means of quality control.

Apple is expected to release the fifth version of watchOS and iOS 12 at the Worldwide Developers Conference in June.

Apple will repair select Apple Watch Series 2 models that do not power on or have a swollen battery free of charge as part of a new service policy.

"Apple has determined that under certain conditions, some Apple Watch Series 2 devices may not power on or they may experience an expanded battery," wrote Apple, in an internal document distributed to Apple Stores and Apple Authorized Service Providers on Friday and subsequently obtained by MacRumors.

"Apple will service eligible devices free of charge," according to the document, numbered SN4534 in Apple's internal GSX portal. "Apple will authorize coverage for eligible devices for three years after the original date of purchase."

The policy was issued in at least the United States, Canada, Mexico, and Europe, so it is likely a worldwide initiative where service providers are available.

A swollen battery can prevent an Apple Watch from powering on or cause the display to burst open. Photos of the issue have been shared by customers in the Apple Support Communities and MacRumors forums in recent months, but the majority of the incidents are first-generation models released in 2015.

Eligibility is limited to any 42mm-sized Apple Watch Series 2 models, including Sport, Edition, Hermès, and Nike+ variants, pending a visual-mechanical inspection, according to a companion document numbered OP1977. The warranty status of the Apple Watch does not affect coverage, the document states.

This new policy does not apply to the original Apple Watch, Series 1 and Series 3 models, or any 38mm model. A few years ago, however, Apple enacted a similar policy for original Apple Watch models with swollen or expanded batteries that offers free repairs within three years of the original date of purchase.

Affected customers can visit the Contact Apple Support page, select Apple Watch → Battery, Power, and Charging → Bring in for Repair to schedule an appointment with the Genius Bar at an Apple Store or at an Apple Authorized Service Provider. There are also options to contact Apple advisors by phone or online chat. Battery replacements are completed at an off-site Apple Repair Center.

Apple advises customers inquiring about a refund for a previous Apple Watch Series 2 battery replacement to contact its support advisors.

Apple has not announced this policy publicly as it does with some of its other repair programs, but MacRumors has verified the internal document's authenticity with multiple sources. However, outside of our control, some Apple employees advise customers that no such policy exists. In these cases, our only advice is to keep trying or escalate the case to a senior advisor if possible.

Apple early this week introduced new (PRODUCT)RED iPhone 8 and 8 Plus models, which officially launched today. As of this morning, the new (PRODUCT)RED iPhone devices are available for purchase in Apple retail stores, and the first (PRODUCT)RED orders have been delivered to customers.

We got our hands on one of the new candy Apple-colored devices to check out how the new bright red shade looks with a glass body, and, as is no surprise, it's gorgeous.

Apple in 2017 introduced (PRODUCT)RED iPhone 7 and iPhone 7 Plus models, but those devices paired an aluminum shell with a white front plate. 2018's (PRODUCT)RED options are arguably more attractive with a glossy red glass backplate, a red aluminum shell, and a black faceplate for the first time.

The red and black combo is undeniably attractive, and the iPhone 8's glass body looks fantastic with such a bright red shade. Other than the new color, though, the (PRODUCT)RED iPhone 8 and 8 Plus are identical to existing iPhone 8 and iPhone 8 Plus models introduced back in September.

Apple's (PRODUCT)RED iPhone 8 and iPhone 8 Plus are priced the same as other iPhone 8 models, with Apple charging $699 for the 64GB iPhone 8, $849 for the 256GB iPhone 8, $799 for the 64GB iPhone 8 Plus, and $949 for the 256GB iPhone 8 Plus.

Ahead of the unveiling of the 2018 (PRODUCT)RED devices, there were rumors suggesting Apple might also debut a (PRODUCT)RED iPhone X, but no red iPhone X materialized. Instead, Apple introduced a new (PRODUCT)RED Leather Folio for the iPhone X, which is nice looking but somewhat of a disappointment compared to the new iPhone 8 and iPhone 8 Plus.

Given how nice a bright, colorful red shade looks when paired with a glass body, we're hoping Apple plans to expand to other colors in the iPhone lineup in the future. What do you think of the new (PRODUCT)RED iPhone 8 and 8 Plus? Let us know in the comments.