MyAppleMenu

The Malicious-iMessage Edition Thursday, December 28, 2023

4-year Campaign Backdoored iPhones Using Possibly The Most Advanced Exploit Ever, by Dan Goodin, Ars Technica

Over a span of at least four years, Kaspersky said, the infections were delivered in iMessage texts that installed malware through a complex exploit chain without requiring the receiver to take any action.

With that, the devices were infected with full-featured spyware that, among other things, transmitted microphone recordings, photos, geolocation, and other sensitive data to attacker-controlled servers. Although infections didn’t survive a reboot, the unknown attackers kept their campaign alive simply by sending devices a new malicious iMessage text shortly after devices were restarted.

Apple Watch Ban Temporarily Halted Thanks To US Appeals Court, by Zac Hall, 9to5Mac

Apple has won a temporary pause on the Apple Watch ban thanks to the U.S. Court of Appeals for the Federal Circuit.

[...]

Apple’s victory today puts the watch ban on hold until January 10. Apple has also submitted a software update that it believes will resolve the issue. The decision on whether or not that will satisfy the government is expected on January 12.

Apple Watch Saga Set In Motion By Late-Night Email To Tim Cook, by Mark Gurman, Bloomberg

While the Lamego email was a key piece of evidence for Masimo’s lawyers, the effort didn’t make much headway with the judge after a senior Apple engineer testified that development of the blood-oxygen feature started in late 2014 — after Lamego had already left. Further, the judge threw out parts of the case relating to Apple’s practice of hiring Masimo employees, saying that “recruiting or hiring employees from another company, including from a competitor, does not on its own constitute improper means.” The judge also dismissed the idea that Apple stole trade secrets, and a jury sided with Apple 6-to-1.

[...]

When Masimo filed its initial lawsuit, Apple hadn’t yet brought a blood-oxygen sensor to market. But eight months later, the Apple Watch Series 6 was introduced with the feature — known in the industry as pulse oximetry — as its key new addition. That led Masimo to file a separate complaint with the US International Trade Commission in 2021 alleging that the feature infringed its patents.

Develop

10 Things Software Developers Should Learn About Learning, by Neil C. C. Brown, Felienne F. J. Hermans, Lauren E. Margulieux, Communications of the ACM

Decades of research into cognitive psychology, education, and programming education provide strong insights into how we learn. The next 10 sections of this article provide research-backed findings about learning that apply to software developers and discuss their practical implications. This information can help with learning for yourself, teaching junior staff, and recruiting staff.

Notes

India Targets Apple Over Its Phone Hacking Notifications, by Gerry Shih and Joseph Menn, Washington Post

In private, according to three people with knowledge of the matter, senior Modi administration officials called Apple’s India representatives to demand that the company help soften the political impact of the warnings. They also summoned an Apple security expert from outside the country to a meeting in New Delhi, where government representatives pressed the Apple official to come up with alternative explanations for the warnings to users, the people said. They spoke on the condition of anonymity to discuss sensitive matters.

New York Times Sues Microsoft And OpenAI For 'Billions', by Tom Gerken, BBC

The lawsuit claims "millions" of articles published by the New York Times were used without its permission to make ChatGPT smarter, and claims the tool is now competing with the newspaper as a trustworthy information source.

It alleges that when asked about current events, ChatGPT will sometimes generate "verbatim excerpts" from New York Times articles, which cannot be accessed without paying for a subscription.

Bottom of the Page

Oh gosh, it's almost 2024. I am not prepared.

~

Thanks for reading.