MacRumors

Notable computer security researcher Kristin Paget, who worked on Apple's security team before leaving for Tesla in early 2014, has taken to her blog (via Ars Technica) to criticize Apple for fixing more than a dozen security flaws in iOS weeks after patching them in OS X.

iOS 7.1.1, released yesterday, patched multiple WebKit vulnerabilities that were initially fixed in OS X with the release of Safari 7.0.3 on April 1. The delay between fixes, says Paget, alerted hackers to serious flaws potentially exploitable on Apple's mobile operating system and then gave hackers ample time to exploit the vulnerabilities.

Is this how you do business? Drop a patch for one product that quite literally lists out, in order, the security vulnerabilities in your platform, and then fail to patch those weaknesses on your other range of products for weeks afterwards? You really don't see anything wrong with this?

Someone tell me I'm not crazy here. Apple preaches the virtues of having the same kernel (and a bunch of other operating system goop) shared between two platforms – but then only patches those platforms one at a time, leaving the entire userbase of the other platform exposed to known security vulnerabilities for weeks at a time?

Addressing Apple, Paget goes on to write that Apple needs to sit in front of a chalkboard and write out "I will not use iOS to drop 0day on OSX, nor use OSX to drop 0day on iOS."

In addition to the WebKit vulnerabilities that were patched out of sync, Apple also recently exposed a major OS X flaw when patching the same flaw in iOS. Back in February, with the release of iOS 7.0.6, a major SSL connection verification vulnerability came to light. Known as the "goto fail" bug, it left iOS and OS X users vulnerable to man-in-the-middle attacks where hackers could pose as a trusted website to intercept communications or acquire sensitive information.

Apple launched iOS 7.0.6 on a Friday, fixing the vulnerability on iOS but leaving OS X users vulnerable to attack until the following Tuesday, when it released OS X 10.9.2 to patch the security flaw.

Major video game retailer GameStop is making a significant push to broaden its business, expanding its retail operations with new brands and stores that will focus on Apple gear and AT&T Mobility products, reports The Star-Telegram.

While the diversification will include a move into AT&T mobile services through GameStop's acquisition of Spring Mobile, of more interest for Apple users is GameStop's plans for Simply Mac, a chain of authorized Apple resale and repair shops that focuses on smaller markets where Apple has not shown interest in opening its own stores. Founded in 2006 in Utah, Simply Mac grew to eight stores by October 2012 when GameStop acquired a 49.9 percent stake in the Apple reseller. In November 2013, GameStop exercised an option to purchase the rest of Simply Mac, which now includes 23 locations focused in the western half of the United States, and GameStop has plans for a significant expansion of the Simply Mac network.

[GameStop CEO Paul] Raines said GameStop’s confidence in rapid growth at the small chains, acquired for about $110 million last year, is buoyed by their strong ties to industry leaders AT&T and Apple.

Steve Bain and Jason Ellis, the executives who built Simply Mac and Spring Mobile, continue to run the operations for GameStop and see strong growth opportunities. After opening 23 stores this year, Bain said, the company plans to open 50 more Simply Mac stores in 2015.

While its stores are smaller and lower profile than many of Apple's retail stores, Simply Mac's push to open nearly 75 stores through the end of 2015 appears to dwarf Apple's own plans in the United States. Apple typically opens around 30 stores per year, but at this point the majority of those are outside of the United States.

The “transformation,” as CEO Paul Raines dubbed it, is intended to keep GameStop growing and leverage its expertise in store operations and buying and selling used devices. He said he envisions GameStop as a “family of specialty retailers that make your favorite technologies affordable and simple.”

As GameStop expands into the lucrative mobile phone and Apple device market, the retailer plans to downsize its video games operations by closing up to 130 of its 6,400 GameStop stores sometime this year. Though video games will remain its primary focus, GameStop CEO Rob Lloyd believes the company's new technology brands could generate up to $1 billion in revenue and contribute up to 10 percent of GameStop's revenue by 2016.

This move into Apple's retail segment comes at a time when Apple is in the middle of a retail transition. The company is awaiting the arrival of retail head Angela Ahrendts, who is completing her transitionary period at Burberry. Apple also is rumored to be working on a mobile payments system under the leadership of Jennifer Bailey, who allegedly left her executive role in online retail to spearhead this new mobile initiative.

Amid persistant rumors that Apple is developing a revamped Apple TV set-top box, new code appearing in iOS 7.1 indicates that the company is indeed working on building in support for Siri voice input on the Apple TV, as highlighted by 9to5Mac. The references are included in both iOS 7.1 and iOS 7.1.1, but not in earlier releases such as iOS 7.0.6.

The file is a supporting property-list resource for Assistant (Apple's internal name for Siri), containing information about the feature. The UIDeviceFamily array declares what platforms are compatible with the feature.

As shown by Apple’s documentation, '1' and '2' represent the iPhone/iPod touch and iPad families. The '3' represents the Apple TV family.

References to a new Apple TV model were previously found in iOS 7 builds, and today's information suggests that voice input and feedback are likely to be included on the new device.

Apple's launch plans for a new Apple TV box remain unclear, with rumors of a late 2013 launch giving way to reports centering around an introduction in March or April of this year. Those rumors were then quashed by The Loop's Jim Dalrymple, leaving uncertainty about Apple's television plans. A recent product roadmap prediction from KGI Securities analyst Ming-Chi Kuo indicated that the new Apple TV could arrive around September or October of this year.

Apple today unveiled a new section on its website dedicated to the "Powerful" ad that made its prime time television premiere on Tuesday. The commercial promotes the message that with the capabilities of the iPhone 5s "You're more powerful than you think."

The accompanying website continues this "Powerful" theme that promotes the iPhone 5s as having the power "to create, shape, and share your life. The power to do everyday things in extraordinary ways, and to do extraordinary things every day." The new page includes both a high-definition version of the television commercial as well as links to all the apps showcased in the advertisement. The apps include Star Walk [iTunes], Instant Heart Rate [iTunes], Word Lens [iTunes], AmpliTube [iTunes], Luminair [iTunes] and Pacific Rim [iTunes].

The "Powerful" ad features "Gigantic" by the Pixies [iTunes] playing in the background while iPhone 5s owners use their iPhone to play music, create art and even launch amateur rockets. This new television advertisement follows the company's earlier "Your Verse" campaign that showcases how individuals are using the iPad in amazing ways.

In an updated unlocking FAQ found on its website (via Android Police), Sprint has stated that it will make all of its devices released after February 11, 2015 unlockable for use on other domestic networks such as AT&T or T-Mobile.

The move is a part of the agreement that the five major U.S. wireless carriers and the Federal Communications Commission signed in December in order to allow customers to unlock their devices and switch carriers if they wish.

I've been told by another carrier that Sprint needs to unlock my SIM slot in order to use my phone on the other carrier's network.

For eligible devices, Sprint will unlock the SIM slot, to the extent that a device SIM slot is capable of being unlocked. It is important to note that not all devices are capable of being unlocked, often because of the manufacturers' device designs, and that even for those devices capable of being unlocked, not all device functionality may be capable of being unlocked. Specifically, devices manufactured with a SIM slot within the past three years (including, but not limited to, all Apple iPhone devices), cannot be unlocked to accept a different domestic carrier's SIM for use on another domestic carrier's network. Sprint has no technological process available to do this. In accordance with Sprint's voluntary commitment contained within CTIA's Consumer Code for Wireless Service (“Unlocking Commitment”), Sprint is working to ensure that all devices developed and launched on or after February 11, 2015 are capable of being unlocked domestically.

Last year, the Library of Congress ruled that it was illegal for certain mobile phone owners to unlock their phone unless given permission by their wireless carrier. However, the Obama administration filed a petition with the FCC last September asking that carriers be required to unlock mobile devices, which was then followed by the agreement [PDF] between the FCC and the five major U.S. carriers.

Sprint's move to implement domestic unlocking in all of its future devices will likely be followed by similar moves from other U.S. carriers, as all wireless providers pledged last December to implement the changes within 12 months.

Apple tonight released an update for FaceTime on OS X [Direct Link], which resolves connections issues and is recommended for all FaceTime users currently running OS X 10.6 Snow Leopard. The connection issues are presumably related to the problems reported last week which affected both older versions of OS X and iOS 6 versions of FaceTime.

Apple, however, has not yet addressed the problems with FaceTime that are in iOS 6. While it is encouraging that Apple released an update for FaceTime for OS X 10.6, Apple support's recommendations for iOS 6 users has been to upgrade to iOS 7. One user has quoted Apple support as saying that the only fix for iOS 6 is to upgrade to the latest version of iOS 7, with no current plans to release a fix on iOS 6 or iOS 5.

According to Apple's updated FaceTime troubleshooting page, users who are still having trouble with the application are recommended to update to the latest version of iOS or OS X.

Apple has debuted a new TV ad alongside Marvel's Agents of SHIELD tonight on ABC called "Powerful". The ad, which was first spotted by 9to5Mac, showcases iPhone 5s owners using the device to enhance their lives in multiple ways.

Apple has not aired an iPhone 5s ad since the seasonal holiday ad "Misunderstood", which has since been removed from its YouTube channel. In the meantime, Apple has instead focusing its advertising efforts on the iPad's "Your Verse" ad campaign.

Update 8:31 PM: A previous version of this article incorrectly referred to the ad as "Gigantic". It has been corrected to its proper name, "Powerful". Apple's official YouTube video for the ad has also been swapped in.

A research note (via Barrons) from Christopher Caso, an analyst with Susquehanna Financial Group, reiterates previous analyst reporting about the iWatch, saying Apple is looking to enter production with a pair of screen sizes in the fourth quarter of 2014.

Caso says Apple has production targets of 5-6 million units, but believes the iWatch will "essentially replace the iPod in the consumer portion of AAPL's product lineup" and will see lowered iPod sales as a result of customers choosing the iWatch instead. The note says the iPod is not expected to be updated this year.

Apple CEO Tim Cook said earlier this year that the iPod "is a declining business", with sales dropping to under $5 billion in 2013, down from a peak of more than $8 billion in 2008. Apple's iPod lineup has not seen a significant update since Fall 2012, other than a minor color change to match the rest of Apple's portable offerings. The iPod Classic has not been updated in several years.

Apple has worked hard to have products at a variety of price points, from the $49 iPod Shuffle up to the 128GB iPad Air at $799, and then to the various Mac products.

Google is covering lawyer fees and potential damage awards with regards to four patents in the ongoing Apple/Samsung patent case, according to a report from Re/code, quoting deposition testimony from a Google attorney that Apple introduced in court today.

Google's contractual obligations to defend Samsung relate to a "Mobile Application Distribution Agreement" between the two companies related to the distribution of Google applications, including Gmail on Samsung's Android devices. Samsung called several Google employees as witnesses as part of its defense.

The case between Apple and Samsung is seen by many as a proxy for the larger battle between Google and Apple over the company's respective mobile operating systems.

Apple played deposition testimony from Google lawyer James Mccoun, who verified e-mail in which Google agreed to provide partial or full indemnity with regards to four patents as well as to take over defense of those claims.

A Samsung representative said he could not immediately say which if any claims in the case for which Google is in fact providing the defense and indemnity.

Yesterday, Samsung argued that, if it lost at trial, it would only owe Apple $40 million in damages, substantially less than the $2 billion that Apple says it is owed for infringement of five of its patents.

Alongside iOS 7.1.1, Apple has introduced a new OS X beta program that will see non-developers given an opportunity to download OS X betas before they are released to the public. Previously, participating in OS X betas required a developer account, priced at $99 per year.

Join the OS X Beta Seed Program and accept the Beta Seed and Confidentiality Agreement. Apple will provide a Beta Access Utility for your Mac, which gives you access to pre-release versions of OS X in the Mac App Store Updates panel.

Users can apply to join the beta program on Apple's new Appleseed Beta website, which allows users to apply using an Apple ID.Apple requires everyone who signs up to sign a confidentiality agreement, which prevents users from disclosing, publishing, or disseminating confidential information to anyone not also enrolled in the Appleseed program.

After agreeing to keep beta information confidential, Apple asks users to make a backup on their Macs before downloading a special Beta Access Utility App which allows a Mac to be enrolled for beta software updates. All updates will be delivered via the Mac App Store, similar to standard OS X updates.

As part of iOS 7.1.1, released earlier today, Apple has implemented some minor changes to the iOS App Store to make it more clear which apps offer in-app purchases.

Apple has provided an "Offers In-App Purchases" disclosure on individual app detail pages since March of 2013, but now the App Store has been updated to include a small "In-App Purchases" notification for apps in Top Charts listings and on specific featured apps listings, such as in the "Great Free Games" category.

Apple's new in-app purchase warnings come following a January settlement with the FTC that saw Apple providing $32 million in refunds to parents whose children purchased unauthorized in-app items. Apple was also required to obtain express consent from consumers before billing them for an in-app purchase, a measure that it initially implemented with iOS 7.1.

In-app purchases have long been an issue for Apple, first landing the company in hot water with the FTC in 2011 after multiple parental complaints over children over-spending within apps. Apple has made many updates to its in-app purchase policies since that time, including requiring a separate passcode entry for initiating an in-app purchase and providing multiple notifications before a purchase is made.

Along with changes to the App Store, iOS 7.1.1 also includes improvements to Touch ID, Safari support for top-level domains such as .photo, and a few bug fixes. It can be downloaded over-the-air via the Software Update tool in the Settings menu.

Update 3:40 PM PT: Apple has notified developers that it is also adding new app content descriptions to the App Store.

You can now use the following descriptions: Medical/Treatment Information, Gambling and Contests, and Unrestricted Web Access (for apps that permit navigating and viewing web pages, for example with an embedded browser).

There are also new territory specific restrictions based on rating.