AppleInsider New Zealand
Apple news and rumors since 1997
Windows vulnerability enables remote PC access via iPhone video file - AppleInsider
Apple iPhone owners who use Windows-based machines to view and edit video files are potentially at risk to remote hacking thanks to a vulnerability that exists in the way Microsoft's operating system handles HEVC files.
Apple iPhone owners who use Windows-based machines to view and edit video files are potentially at risk to remote hacking thanks to a vulnerability that exists in the way Microsoft's operating system handles HEVC files. Discovered last week, the bug in Microsoft's Windows Codecs Library can be exploited to take over and execute code on an unpatched host machine. The threat was flagged by the U.S. Cybersecurity and Infrastructure Security Agency on Friday. Like most remote attack vectors, users trigger arbitrary code execution by opening a specially designed payload, in this case an HEVC image file. Windows mishandles the codec, triggering what appears to be a memory overflow that enables system intrusion and, potentially, remote takeover. As noted by PC World, iPhone users are particularly susceptible to hacks that take advantage of the Windows flaw, as modern iterations of the handset rely heavily on HEVC for video recording. The codec has been offered by Apple since iPhone 7 and became the standard high-resolution video file format with iOS 11. HEVC assets are required to view or edit video on a Windows PC. Further, longtime iPhone owners might be accustomed to receiving HEVC video attachments or seeing the file format online, meaning it is unlikely to raise red flags. Users who manually downloaded HEVC or "HEVC from Device Manufacturer" codecs from the Microsoft Store are also vulnerable to attack. Microsoft released a patch for the flaw last week. Versions 1.0.32762.0, 1.0.32763.0, and later are deemed safe for use and can be downloaded from the company's online store.
Masimo alleges Apple is delaying legal fight to boost Apple Watch market share - AppleInsider
Medical technology company Masimo is accusing Apple of delaying their patent legal fight in order to sell more Apple Watch models.
Medical technology company Masimo is accusing Apple of delaying their patent legal fight in order to sell more Apple Watch models. Masimo filed a lawsuit in January accusing Apple of infringing on 10 of its patents. It also alleged that Apple promised a working relationship, but turned out to actually stole secrets and poached key employees. Apple hasn't responded to the allegations, but has moved to dismiss parts of the case and lodged petitions to invalidate Masimo patents. In a court filing spotted by Bloomberg on Tuesday, Masimo claims that the Cupertino tech giant is strategically delaying the trial. The Cupertino tech giant has petitioned the trial court to keep the case on hold while the trade secret allegations and patent invalidation requests are being considered, a move that it says will narrow the issues at hand and "reduce wasted resources." But any delay in the trial, Masimo contends, "would allow Apple to on a critical window of opportunity to capture an emerging field. Just as it has done in numerous other markets, Apple seeks to use its considerable resources and ecosystem to capture the market without regard." Masimo, based in Irvine, Calif., produces and sells various medical sensors and health monitors. In its filing, it said that it fears Apple will use its power to stifle competition to the Apple Watch, including the new blood oxygen sensor-equipped Apple Watch Series 6. Apple has sold Masimo's products on its online storefront in the past. For example, the MightySat fingertip pulse oximeter was available directly from Apple's website but has since been removed sometime between January and September. Apple does typically remove products from its online store when it's embroiled in legal fights with their manufacturers. "I have seen reports from consumers and others suggesting that the Series 6 be used as a medical product," Masimo CEO Joe Kiani said in the filing. "Not only will that harm consumers themselves, it will also reduce our opportunities to sell truly clinical-grade products to consumers." The brief also claims that Apple initially dodged queries about whether future Apple Watch models would have a blood oxygen sensor — one of the patented technologies involved in the original lawsuit. At the time, Apple dismissed those claims as "Internet rumors." U.S. District Judge James Selna has set a series of dates on the case, with the first hearing to be held in April — unless the delays are done away with sooner. Updated with information about Apple's decision to remove Masimo's MightySat from its online store.
Apple and Google's contact tracing will launch early, on April 28 - AppleInsider
The EU has revealed that the COVID-19 contact tracing technology jointly developed by Apple and Google will be released to developers weeks ahead of schedule.
The EU has revealed that the COVID-19 contact tracing technology jointly developed by Apple and Google will be released to developers weeks ahead of schedule.The first version of Apple and Google's technology for contact tracing will be made available to developers on April 28, according to the French government. Tim Cook reportedly revealed the date during a scheduled video meeting with Thierry Breton, European Commissioner. "Tim Cook told me that a first version of the technology that Apple is preparing in partnership with Google will be available to developers on April 28," Breton told French publication iGeneration in a report about his video meeting. The video conference meeting with Tim Cook follows a similar one with Google CEO Sundar Pichai. Along with others, the European Union is concerned about the privacy implications of the technology and Breton has pressed both companies about adhering to what the EU calls its "toolbox" of standards. According to iGeneration, Breton used this conversation with Tim Cook to also work with national authorities to help with their own alternatives. In particular, France's own StopCovid system will not use the forthcoming Apple/Google technology and Breton wanted to ensure that it not be blocked. "It is the responsibility of companies like Apple to do everything possible to develop appropriate technical solutions so that national applications work," said Breton. Apple and Google had previously estimated that their joint technology would be available from around mid-May.