Apple Store opens in Wuhan with China's first Apple Pickup area
Apple opened up its retail store in Wuhan, China on Saturday, with customers now able to take advantage of the first Apple Pickup area in the country.Teased in April with a wallpaper, Apple finally opened the doors to its Apple Wuhan store on Saturday. Opened later than anticipated, the outlet is on the second floor of the International Plaza Shopping Center in Hubei province.Apple's description of the store mentions it uses granite floors and wood-trimmed walls to make the store and the mall lobby "brighter and more transparent." The 128-person retail store team at the outlet will be on hand to help customers buy products, with the multilingual team also able to use Chinese sign language and English sign language. Read more...

Read more »

Here comes that Apple Watch redesign we’ve been waiting for [The CultCast]
This week on Cult of Mac’s podcast: That big, flat Apple Watch redesign we expected in 2021 might arrive this year to soothe our lingering disappointment. The latest renders by Ian Zelbo, spurred by a tweet from leaker ShrimpApplePro, make Apple Watch Series 8 look quite appealing. Also on The CultCast: Is Cupertino about to […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple talks to suppliers to increase manufacturing efforts outside of China
Apple is intending to decrease its reliance on suppliers working in China, a report claims, with the iPhone maker telling some contract manufacturers it wants to expand production outside of the country.The Apple supply chain in China is having to deal with regular COVID-19 lockdowns, which impose strict rules that can impact workforces at its contract partners. With continued issues caused by the lockdowns, Apple is now hoping supply partners in other parts of the world can pick up the slack.The company has allegedly told some suppliers it wants to increase production outside of China, reports sources of the Wall Street Journal. People involved in the discussions said Beijing's strict policies over COVID-19 were high up on a list of reasons for looking elsewhere. Read more...

Read more »

Today in Apple history: Apple’s ‘Get a Mac’ campaign comes to an end
May 21, 2010: Apple quietly ends its long-running, award-winning “Get a Mac” marketing campaign. Debuting in 2006, the ads starred actor Justin Long as the cool, youthful Mac. Comedian John Hodgman portrayed the stuffy, awkward PC. Alongside the “Think Different” and iPod “Silhouette” campaigns, “Get a Mac” will become one of the most fondly remembered […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Report: Apple tells suppliers it wants to expand manufacturing outside of China, India and Vietnam likely future production hubs
Apple has apparently advanced its plans to expand manufacturing outside of China, telling contract manufacturer partners that it is aiming to diversify production. This is according to a report posted today by the Wall Street Journal. Although some of Apple’s products are already produced in countries like Vietnam and India, the vast majority of Apple’s manufacturing takes place in China, at Foxconn and Pegatron facilities. more… The post appeared first on 9to5Mac.

Read more »

Daily deals May 21: $100 off 11-inch iPad Pro, $173 Cuisinart Pizza Oven, $100 Linksys Mesh Wi-Fi
Alongside $100 off an 11-inch iPad Pro, Saturday's best deals include $60 Razer Anzu Smart Glasses, a 75-inch Toshiba Smart TV for $750, a $179 Polk Audio soundbar , and much more.Best deals May 21Every day, AppleInsider checks online stores for discounts and deals on a variety of items, including Apple products, smart TVs, cameras, and accessories. The best items are put together in our daily deals list. Read more...

Read more »

Ming-Chi Kuo: New HomePod model coming as soon as this year
Apple uber-analyst Ming-Chi Kuo suggests the compnay may release a new version of the HomePod as soon as this year… The post appeared first on MacDailyNews.

Read more »

Prehistoric Planet will give you your dinosaur fix [Apple TV+ review] ★★★★
Apple TV+’s newest docuseries is Prehistoric Planet, which delvers into the lives and habits of a host of dinosaurs. Arriving next week — just in time to get kids of all ages excited about Jurassic World Dominion — the five-part series offers all the usual pleasures of presenter David Attenborough’s nature documentaries. Viewers can learn […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

iPadOS 16: Here’s what we know so far about new features, supported devices, and more
WWDC 2022 will start a couple of weeks from now. On June 6, Apple will announce iPadOS 16, which will mark the next major release of Apple’s software platform for the iPad. Head below as we recap all of the latest rumors and expectations for iOS 16 this year, including new features, release info, and more. more… The post appeared first on 9to5Mac.

Read more »

Autographed Apple artifacts hit the auction block
A new auction is offering a selection of autographed Apple items up for sale, including photographs, manuals, and other artifacts signed by Steve Wozniak and Ronald Wayne.Running until June 15, RR Auction's Fine Autographs and Artifacts event includes a wide variety of documents and items signed by famous names, including presidents and religious figures, and major historical leaders. As part of the 865 lots, some items in the catalog are linked to Apple.A total of 12 lots are listed as having Apple connections, with signatures from co-founders Steve Wozniak and Ronald Wayne. While some items only feature one signature, many include the scrawls of both men. Read more...

Read more »

Secure your data with any of these 10 VPN deals
Cybersecurity is a major part of everyday life now. Even if you’re not working from home, you likely have some sensitive information you wouldn’t want someone else to get their hands on. Sometimes it’s your browsing data that gets turned into targeted ads. And sometimes it’s your identity that gets fully compromised. Either way, you […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

How to make Twitter fun again
Twitter: the cause of, and solution to, all of life’s problems. People have been talking quite a bit about Twitter lately. When friends of mine complain about how they don’t enjoy using Twitter, I used to be confused. Twitter is what you make it. If you don’t like Twitter, you can simply follow different accounts […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Everything we know so far about a new HomePod model
With Apple discontinuing the original HomePod last year, users were eager for a new iteration of the company’s bigger smart speaker. Although its mini version is slowly expanding globally, it feels that Apple’s audio ecosystem is lacking a more powerful speaker. With new rumors around, it’s possible that the company will soon unveil a new HomePod. Here’s what we know so far. more… The post appeared first on 9to5Mac.

Read more »

EA reportedly talked to Apple about a potential merger
EA has reportedly been seeking out a merger and Apple was a potential suitor, a report about Comcast CEO Brian Roberts' attempt to merge NBC with the game publisher reveals.Apple has a long history of making acquisitions, partly to bolster its employee and knowledge base, partly to quickly shift into new markets. In a Friday report, it is claimed that there were at least discussions of a potential purchase of Electronic Arts.In a piece discussing how Comcast CEO Brian Roberts attempted to court EA CEO Andrew Wilson for a potential merger of EA and NBCUniversal, sources say other talks also took place. Read more...

Read more »

Making sense of the latest rumors about Apple’s looming AR and Mixed Reality headsets
Apple is likely to enter a new product category with headsets in the near future. So far, there are two rumored products: the AR headset and the Mixed Reality headset, usually called AR/VR headset or “Apple Glasses.” With rumors gaining traction about these products, here’s what we know so far about each of them. more… The post appeared first on 9to5Mac.

Read more »

AirTag aids police in tracking robbery suspect
Police in Portland were helped in capturing an armed robber by Apple's AirTag, after the suspect unknowingly picked up the tracking device during a second theft.An armed robbery in the 100 Block of Northwest Broadway in Portland, Oregon on Thursday involved the robbery of a store. The man, identified by police as Justin Johnston, used a gun to demand money from a staff member at the store, and took the victim's cellphone and wallet.The police were able to use the phone to the area of Southwest 3rd Avenue and Southwest Pine Street, reports KATU2, seeing via surveillance video that he entered and left the Embassy Suites Hotel. Later in the day, hotel security contacted the police to say the suspect had returned to the hotel. Read more...

Read more »

Apple needs to stop adding iOS features we don’t need
Welcome to our weekly collection of all the Apple news you missed this week, in a handy bite-sized roundup. We call it Apple Breakfast because we think it goes great with a morning cup of coffee or tea, but it’s cool if you want to give it a read during lunch or dinner hours too. iOS 16 and the dangers of feature creep Lots of fun speculation this week about iOS 16, the major iPhone software update set to be unveiled at WWDC in a few weeks. The latest report says iOS 16 will feature “major changes across the system” and “fresh Apple apps,” while here at Macworld we think Apple itself may have just spilled a bunch of details on iOS 16. All of this is exciting to write and read about, and we’re as interested as anyone to see what Apple has come up with. (Keep up with the latest developments with our iOS 16 superguide.) But it’s hard to escape the feeling that Apple is just adding features for the sake of having something to talk about. When was the last time a new iOS feature actually enhanced your life? I bet it’s harder to remember than the last time you tried a new feature and thought, “That cool,” and then never used it again. Take those “fresh” apps, for instance. (We’re assuming that this means new Apple apps, rather than refreshed versions of existing ones, which would be a bit anticlimactic.) That sounds good, right? Who doesn’t want brand new apps on their iPhone? Well, let’s think about the new apps we’ve got in recent iOS updates. We got Files in iOS 11 (sporadically useful but hasn’t lived up to its potential), Measure in iOS 12 (haven’t used it in years), and Translate in iOS 14 (far worse than Google Translate). Was it worth adding those new apps, or would the time have been better spent ironing out bugs, optimizing performance, and reducing the burden on the hardware so battery life improves? Translate is a particularly interesting case study, because it’s a great example of iOS, for no clear reason, swallowing up a function that a third party already does extremely well. If a user wants great real-time translation they can download Google Translate. Why does that function need to be added to iOS? For that matter, why do half of the functions in iOS need to be there? Somewhere along the line Apple–although I suspect it isn’t alone in this–forgot what an operating system is for. It’s the framework that the rest of the software works around. It’s supposed to do the basics and keep out of the way. And if you start baking in features that would be better served by optional standalone apps created by specialists, you increase the size of the download and waste the time of your in-house software team. And annoy your put-upon developer partners, presumably. Apple’s relationship with app developers has been distinctly rocky for years now, with devs angry about high fees, heavy-handed rules, and what some see as monopolistic behavior. It’s time to make amends. And the company could start by making WWDC actually about developers and what they can offer to users, rather than trying to do everything itself. Trending: Top stories of the week We round up three Google features Apple should borrow for its next big thing. Headphone hypocrites: You can’t have it both ways, scolds the Macalope. Apple has given app developers permission to increase the price of subscriptions without asking. We’ve rounded up 5 overdue Apple Watch features we hope to see in watchOS 9. Despite a contentious court battle that shows no signs of being resolved, iPhone users can once again play Fortnite on their iPhones. Enjoy a complete history of Apple’s pro Macs (and Mac Pros). These incredible CT scans will make you fall in love with the iPod all over again. The rumor mill Apple’s AR/VR headset has taken a huge step toward becoming a reality. The scrapped ‘flat’ Apple Watch redesign may finally arrive on the Series 8. The road to Apple’s next big things could be paved with E Ink, reckons Jason Snell, following news that Apple plans to take a page from the Kindle for its foldable iPhone design. AirPods Pro 2 could be the sleeper hit of Apple’s iPhone 14 event. A new iMac Pro is still coming, but not soon. Podcast of the week WWDC is only three weeks away! Apple will reveal its latest iPhone operating system, but will it have the features that you want? We talk about iOS 16 features on your wish list in this episode of the Macworld Podcast. You can catch every episode of the Macworld Podcast on Spotify, Soundcloud, the Podcasts app, or our own site. Software updates, bugs & other issues A scary new bug could send malware to your iPhone even when it’s turned off. And a ‘nasty’ iPhone 13 bug is causing FaceTime and iMessage to deactivate. macOS Monterey 12.4 fixes 54 security flaws. These are the highest risk. iOS 15.5 is here, bringing dozens of security fixes alongside Wallet and Podcasts updates. And the first iOS 15.6 beta is already here too! Apple has released iTunes 12.12.4 for Windows to plug security holes. That’s right: iTunes still exists. And with that, we’re done for this week. If you’d like to get regular roundups, sign up for our newsletters. You can also follow us on Twitter for breaking news stories. See you next Saturday, enjoy your weekend, and stay Appley! Apple

Read more »

Apple @ Work: Why Apple Business Essentials isn’t a direct competitor to other MDM vendors
Apple @ Work is brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that fully integrates 5 different applications on a single Apple-only platform, allowing Businesses and Schools to easily and automatically deploy, manage & protect all their Apple devices . Over 32,000 organizations leverage Mosyle solutions to automate the deployment,  management and security of millions of Apple devices daily. Request a FREE account today and discover how you can put your Apple fleet on auto-pilot at a price point that is hard to believe. Apple Business Essentials is an important product for Apple. I’ve talked to many companies who manage Macs and iPads, and they’re not interested in the service. This is a good thing though. Apple isn’t looking to control 100% of the device management market. Companies like Kandji, Jamf, Mosyle, JumpCloud, and Addigy do a great job of enabling Apple to work great in the enterprise. The enemy of Apple Business Essentials isn’t other MDM vendors. It’s unmanaged devices. more… The post appeared first on 9to5Mac.

Read more »

Creatives, this Media Mac Bundle can help you edit your images for just $20
There are a few ways to handle your image editing and other content creation issues. Throw hundreds of dollars at a license for the Adobe Creative Cloud and untangle its maze of interconnected apps, dashboards, and functions. Or pick up a handy collection like this Media Mac Bundle to take care of a bunch of those image creation needs quickly and easily – and for a lot less cash. This bundle features 4 apps created to tackle some of the most popular and most necessary image editing functions around, all with just a few simple clicks. The collection starts with GlueMotion, which helps users create gorgeous time-lapse images from virtually any image format you can throw at it: JPEG, PNG, and even most raw formats. SnapMotion turns video into brilliant still images, letting users extract and edit images from a video; while MetaImage handles the gruntwork of organizing your work, allowing full editing of EXIF, IPTC and XMP tags as well as MakerNotes, all in a simple, streamlined interface. Finally, PhotosRevive uses cutting-edge artificial intelligence to do the impossible, turning your old black and white pictures into vibrant full color. Each app in The Media Mac Bundle usually sells for between $8.99 and $18.99, but as part of this collection, all four are available now at about $5 each, only $19.99 for unlimited lifetime access.  The Media Mac Bundle – $19.99 See Deal Prices subject to change. Mac

Read more »

Best external hard drive for Mac
It’s never been easy to upgrade the storage in Macs, so it’s always a good idea to buy an external drive to provide extra storage for all your work files, photos, videos and games. And, of course, you should always have an external drive available for making Time Machine back-ups in case anything ever goes wrong. Modern solid-state drives (SSD) are the best option as they’re really fast, reliable and compact. However, SSDs are still relatively expensive, with 1TB drives costing around $100/£150, whereas that same amount of money can get you a 4TB basic desktop hard drive with a USB interface (drives with high-speed Thunderbolt ports tend to be more expensive) Hard drives are slower than SSDs, but if you need lots of storage for your important files and back-ups then a good old-fashioned hard drive is still the most affordable option. (If it’s an SSD you are after, read Best external SSD for Mac.) There are plenty of choices, too, with compact, portable hard drives designed for use with laptops, and desktop drives with very larger capacities if you really need a lot of storage. Some hard drives also provide additional features, such as built-in docks with lots of Thunderbolt and USB ports, or perhaps allowing you to open up the casing of the drive and insert a new drive for an instant upgrade. Below are the reviews we’ve got along with general buying advice that explains what you should be looking for. LaCie Mobile Drive – Best for travelers and best overall MSRP: $79.99 (1TB); $109.99 (2TB); $149.99 (4TB); $169.99 (5TB) Best Prices Today: $74.99 at Amazon | $144.95 at Apple LaCie’s range of Mobile Drives provide a much wider range of options, as well as a “diamond cut” design. Rather than the neon-orange rubber bumper of its Rugged drives, the new Mobile Drives are wrapped in smart aluminum. They’re available in two colors: Moon Silver and Space Gray that is intended to match the Mac. The “diamond cut” design simply refers to the exaggerated angular edges and corners; looks aside, the aluminum casing feels really sturdy. The Mobile Drives that are 4TB or more are 4.9×3.6×0.8 inches (124×91.2×20 millimeters) and weigh 0.9 pounds (400 grams) and they could give someone a serious concussion if you whacked them over the head with it. Drives that are 2TB or less are physically smaller, measuring 4.8×3.5×0.4 inches (121.6×87.8×10 millimeters and weigh a more modest 0.5 pounds (200 grams). The Mobile Drive has a single USB-C port on the back, but LaCie includes cables for both USB-C and the older USB 3.0, so you can use the drive with any Mac or PC. The drives can be used with Time Machine for Mac backups, but LaCie offers a ToolKit app that allows you to ‘mirror’ individual folders. This is a good option if you use your Mac at work, and have individual projects organized in their own folders. Any folder that is mirrored is automatically backed up and updated as soon as you make any changes to any file within that folder. This ensures that your backups are always up to date with the most recent versions of your files–Time Machine has a one-hour gap between backups. Our only complaint here is that LaCie’s skimpy manual doesn’t provide much information about the ToolKit app, or the various formatting options for the drive, simply leaving you to wade through a bunch of FAQ files on its website. The Mobile Drive provides good performance, with write and read speeds both averaging out at 132MBps in our tests (almost identical to the Rugged Secure drives). Backing up a 5GB batch of iTunes songs took exactly one minute.–Cliff Joseph Seagate Ultra Touch – Best for MacBook owners MSRP: $89.99 (1TB); $109.99 (2TB) Best Prices Today: $64.99 at Amazon The Seagate Ultra Touch is available with either 1TB or 2TB storage. It has a stylish design that makes it a good companion for your MacBook, and also offers encryption to provide extra security for your important files and data. The Ultra Touch measures 4.5×3.1×0.5 inches (115x78x12 millimeters) and weighs 0.3 pounds (151 grams), so you can easily slip it into a jacket pocket or a bag when you’re traveling. It’s available in either black or white and finished off with a smart woven fabric that makes a nice change from the dull monochrome colors of most hard drives. Seagate includes a standard USB 3.0 port on the back of the drive, and a USB 3.0 cable that will work with any Mac or PC, and Seagate also includes a USB-C adapter. The Ultra Touch includes the same ToolKit app that is used with the LaCie Mobile Drive. The drive can be used for automatic Time Machine backups on your Mac, but you can also use the mirror option in the ToolKit app to automatically back up individual folders so that they’re always right up-to-date (and don’t have to wait for Time Machine’s hourly backups). The ToolKit app also handles the encryption process for the Ultra Touch, although we found Seagate’s manual–or lack thereof–to be rather unhelpful, leaving us to look around for FAQs and information about this encryption and other features on the company’s website. Performance is respectable enough, although the Ultra Plus won’t win any awards for high-speed backups. It recorded write and read speeds of 125MBps and 130MBps respectively in our tests, and took 110 seconds to back up a 5GB batch of iTunes music files. Even so, that performance will be fine for routine backups, and the encryption option will be really useful if you want to make sure that your private data stays private even if the drive is lost or stolen.–Cliff Joseph G-Drive ArmorATD – Best rugged portable drive MSRP: 1TB ($89.99) 2TB ($109.99), 4TB ($149.99), 5TB ($179.99) Best Prices Today: $99.99 at Adorama | $99.99 at Best Buy | $109.95 at Apple The ArmorATD is an enclosure with a 2.5-inch hard drive inside that’s shock-mounted, and the rugged aluminum case is surrounded by a silicon sock for extra protection. It will withstand minor abuse, more when off than on and the disks are spinning, but your best bet with any hard drive is not to treat it like a hockey puck. The connection is USB-C with a speed rating of 5Gbps (USB 3.1/Gen 1)–plenty fast enough for any hard drive. The drive warranty is for three years. You’ll get around 120MBps writing and 127MBps reading maximum (with large files) from the ArmorATD on your Mac. Good stuff. The Armor ATD arrives formatted to exFAT so you’re good to go out of the box under both Windows and macOS. However, exFAT will extract a 5 percent max penalty, so Mac users will want to reformat the drive.–Jon L. Jacobi Read our full G-Drive ArmorATD review WD My Passport – Best budget portable MSRP: 1TB – $59.99, 2TB – $79.99, 4TB – $119.99, 5TB – $149.99 Best Prices Today: $49.97 at Amazon | $59.99 at Western Digital Western Digital’s My Passport drive provides plenty of portable storage at a competitive price. The My Passport starts at just $79.99/£49.99 for 1TB storage, going up to $189/£119.99 for 5TB, so it’s a really affordable backup option if you’re on a tight budget. The physical size of the drive depends on the amount of storage you choose. The 4TB drive we tested measured a chunky 4.2×3.0x0.8 inches (107x76x19 millimeters) but the 1TB and 2TB models are just 0.43 inches) (11mm) thick. The 4TB drive is still small enough to slip into jacket pocket with no trouble at all. It’s very solidly built too, so we’d be happy to use it in outdoor locations with our MacBook. However, the drive is showing its age a little, using ye olde USB 3.0 interface, so you’ll need an adaptor if your Mac only has USB-C. Its read and write speeds of 108MBps and 100MBps respectively aren’t going to win any awards either, but the My Passport will still be fine for the occasional Time Machine back-up when you’re on the move with your laptop. There’s also a model called My Passport For Mac that includes extra cables for both USB 3.0 and USB-C, and is pre-formatted in Apple’s HFS+ format, but that’s slightly more expensive so it’s not essential unless you’ve got a bit of extra cash to spare.–Cliff Joseph LaCie 1big Dock – Best for pro and creative users MSRP: $369 (4TB); $469 (8TB); $519 (10TB); $679 (16TB); $789 (18TB) Best Prices Today: $354.00 at Amazon | $369 at LaCie As the name suggests, LaCie’s 1big Dock is more than just a straightforward hard drive. It starts at $369/£349.99 for a drive with 4TB storage, going up to $889/£869.99 for 18TB, and its 7,200rpm IronWolf Pro hard drive provides strong performance with read and write speeds of 235MBps via its Thunderbolt 3 port. That makes it a good option for anyone that needs a fast drive for large video, photos, and audio files. The primary Thunderbolt port also provides power for charging a MacBook laptop as well. You even have the option of popping open the front panel to swap out the standard hard drive and insert a new drive to provide an instant upgrade. But the thing that really makes the 1big Dock stand out from most of its hard drive rivals is its built-in hub and connectivity features. There’s a second Thunderbolt port that will allow you to connect additional Thunderbolt and USB-C devices, and a DisplayPort 1.4 interface for an external monitor. The front of the drive also provides a standard USB 3.0 port and slots for both SD and CompactFlash (CF) memory cards, making it a great option for creative users who need to import files from cameras and other devices. There’s also a version of the 1big Dock available that uses faster solid-state storage too–of course, it’s quite a bit more expensive.–Cliff Joseph Seagate FireCuda Gaming Hard Drive – Best for desktop storage and connectivity MSRP: $79.99 (1TB); $109.99 (2TB); $179.99 (5TB) Best Prices Today: $92.49 at Seagate | $108.41 at Amazon Seagate’s FireCuda Gaming Hub is an impressive all-in-one device that combines a speedy desktop hard drive with a versatile Thunderbolt dock. But all those extra features mean that it’s big and heavy–and also pretty expensive. If you’re looking for a more affordable alternative option that still has a bit of gaming eye-candy then the FireCuda Gaming Hard Drive should fit the bill. It’s not just for gaming, of course, and it’s available with 1TB, 2TB or 5TB of storage, so it provides plenty of room for all your music, photos, videos, and work files. The drive only has a standard USB-A interface (USB 3.2) though, so owners of newer Mac models that only have USB-C will need an adapter (not included). The USB port provides power to the drive, too, so you can use the FireCuda either as a desktop drive or as a portable drive with your laptop if you want to.  The drive works with Time Machine, as you’d expect, but Seagate’s ToolKit app provides additional options for creating sync plans that back-up specific folders. It even allows you to customize the lighting and colors emitted from the drive’s front panel. The drive’s performance is similar to that of other compact hard drives that we’ve seen, recording read and write speeds of 133MBps and 130MBps respectively. And, with its competitive pricing and handy ToolKit app, the Gaming Drive deserves to attract a wider audience than just the gaming market.–Cliff Joseph G-Tech G-Drive USB-C – Best for massive media files MSRP: 4TB – $179.95; 6TB – $249.95; 10TB – $399.95; 14TB – $479.95; 18TB – $549.95 Best Prices Today: $179.95 at Western Digital | $395.00 at Amazon G-Tech has always focused on providing high-performance storage devices for creative users who work with lots of photos, video, and audio files, and the G-Drive USB-C is an affordable desktop drive that provides good performance and bucket-loads of storage space. The G-Drive is neatly designed with a smart, sturdy aluminum casing, and it starts with a minimum of 4TB storage, going right up to 18TB, which should be enough even for professional users working with 8K video. The drive’s high capacity means that it requires an external power supply, but the USB-C port on the back of the drive also provides 45W pass-through power, so you can use it to charge a laptop without needing a separate power supply for the laptop as well. USB-C and USB-A cables are included in the box, so it’ll work with older Macs that don’t have USB-C without needing an adapter. Performance is good too, with the 4TB model recording read and write speeds of 170MBps with the BlackMagic Disk Test. There’s also a version of the G-Drive that has both USB-C and Thunderbolt 3 ports, but that’s a lot more expensive, so this USB-C model is the best option if you simply want lots of hard drive storage at an affordable price.–Cliff Joseph WD_Black D10 – Best budget performer MSRP: 8TB – £259.99 Best Prices Today: $254.84 at Amazon Western Digital’s WD_Black drives are primarily aimed at gamers who want a fast drive to boost loading times for their games, which explains why the menacing black design of this D10 desktop drive looks like a piece of heavyweight munitions from the Call Of Duty games. But a fast drive will also appeal to anyone that has a lot of photo, video, and audio files that they want to store on their Mac, and the D10 has other features that can come in handy too. Some aspects of the design are a little odd. There’s only one version available, with 8TB storage, although its $240/£199.99 price tag on Amazon is still competitive for a fast drive such as this. It’s equipped with only an old USB A interface (even though it is USB 3.2) perhaps to provide compatibility with older games consoles, so you’ll need an adapter if your Mac only has USB-C. Its 7,200-rpm drive provides very good performance, reaching read and write speeds of 245MBps and 240MBps, respectively. The D10 requires an external power supply, so it’s very much designed for desktop use, but it also has two additional USB 3.2 ports on the back of the drive that can provide power to other devices, such as an iPhone or iPad. These ports are only for charging, though, so you can’t use the D10 as a dock for connecting peripherals such as a printer or memory stick.–Cliff Joseph How to choose the right Mac hard drive We’ve rounded up the best Mac hard drives above, but before making a buying decision you need to think about how you’ll be using the device. To find the best hard drive for your needs, you need to answer a few questions. How much storage do I need? Hard drive storage is relatively cheap. Unless you are really out to save your pennies, the smallest size of hard drive we’d recommend is 1TB. Upgrades to 2TB, 3TB, and even 4TB are also cost-effective–the price per megabyte goes down the higher the capacity, so making the bump up to the next model is a good idea. Each terabyte can store around 11,000 music albums at 192kbps quality, but such storage doesn’t seem so grand when you start archiving 4K video. Portable or desktop? If you think you’ll be happy with a 1TB to 4TB hard drive, you can buy a portable drive. These use small 2.5-inch disks, and they fit happily into a coat pocket. Portable drives are usually bus-powered, too. This means you just need to plug them into your desktop or laptop, no separate power supply is required. There’s just one cable, and the drive will barely take up any space. If only an ultra-high capacity hard drive will do, consider a desktop unit. These use larger 3.5-inch drives and tend to cover capacities from 4TB to 18TB. They’ll need to be plugged in for power; that’s fine if it stay home all of the time, or moves from office to office. Rugged drives for travel Some portable drives offer ruggedization. Shock protection is the most important kind for a hard drive, as unlike an SSD they have moving parts that can be permanently damaged following a drop. Rugged drives usually have some form of rubber coating that soaks up impact forces, and a toughened enclosure that won’t dent, crack or collapse under any normal amount of pressure. A few also have water resistance. While few are rated IP68 like an iPhone 11 Pro, meaning they can be submerged in water without damage, several can handle rain or water jets/splashes. What extra features do you need? Buy a larger drive, though, and you’re more likely to get other features. Desktop units may have a built-in “hub”, letting you plug-in memory cards or peripherals using USB ports. These are particularly useful if your current setup has limited connectivity, or the USBs you do have just aren’t that handy. Which connector do you need? Matching the hard drive’s connector to those of your laptop or desktop is also essential. You’ll get a cable in the box, but it will either terminate with a USB-A or USB-C shaped plug, as seen here: USB-A (left) and USB-C. Unless you have an old Mac or MacBook that only offers the old USB-A port, you’ll will want the newer USB-C connector, which also doubles up as Thunderbolt. Every Mac sold by Apple in the past few years features a USB-C style connector, although some Mac desktops still offer the older USB standard as well.  Not all USB-Cs are the same, though. The USB-C port on Macs also supports Thunderbolt 3 and in some cases Thunderbolt 4. USB-C is based on USB 3.1 and offers up to 10Gbps. Thunderbolt 3 offers up to 40Gbps. Thunderbolt 4 also offers 40Gbps, but has a few other advantages, including a 32Gbps data rate, which will be a benefit to anyone who needs to transfer large video files to from the drive to their desktop for editing. There’s also a new USB 4 standard that offers between 20Gbps and 40Gbps bandwidth that you will see alongside the newer Thunderbolt 4 standard, but note that USB 4 doesn’t offer all the features of Thunderbolt. It’s clear that Thunderbolt is a better option than USB if you are looking for the best interface for your hard drive, but Thunderbolt options are likely to be more expensive than their USB counterparts. Wireless and NAS Not every hard drive needs to be plugged in: you can also opt for a network-attached storage (NAS) drive which enables to to wirelessly transfer files and backups. These network-attached storage drives connect to your home Wi-Fi to share their data with other devices in your home. That might be a smart TV, Apple TV, a tablet or laptop. A NAS is particularly useful if you want to set up a media server at home. This is like a wireless jukebox you can fill with videos, photos and music. Read our  best NAS drives feature for more. Computer Accessories, Computer Storage Devices, Mac

Read more »

Deals: save $1,000 on Sonance Outdoor Speakers at Best Buy, with streaming powered by Sonos
An incredible deal at $1,000 off at Best Buy, this Sonance Mag Series 6.1-Channel Outdoor Streaming Sound System powered by Sonos delivers AirPlay 2 and Apple Music support.Save $1,000 on this Sonos Outdoor Speaker Sound System powered by SonosPriced at $1,699.98 after a $1,000 cash discount at Best Buy, the Sonance Mag Series 6.1-Channel Outdoor Streaming Sound System is powered by Sonos. The audio system earned an average of 4.8 stars with 87 user reviews at Best Buy, indicating buyers are happy with the audio system. Along with AirPlay 2 support, the Sonance sound system also works with Apple Music and Spotify. Read more...

Read more »

Apple's Headset Said To Feature 14 Cameras Enabling Lifelike Avatars
Citing a report from The Information's Wayne Ma (paywalled), MacRumors reports Apple's long-rumored AR/VR headset is said to feature 14 cameras that enable lifelike avatars with accurate facial expressions. The company is also working with former design chief Jony Ive on the project. From the report: For starters, one of the headset's marquee features is said to be lifelike avatars with accurate facial expressions captured by 14 cameras: "Other challenges, such as incorporating 14 cameras on the headset, have caused headaches for hardware and algorithm engineers. The cameras include those that will track the user's face to ensure virtual avatars accurately represent their expressions and mouth movements, a marquee feature." The report adds that Apple's former design chief Jony Ive has remained involved with the headset project as an external consultant to the company: "One person familiar with the matter said Ive's consulting work for Apple since he left includes the headset, adding that he is often brought in to help his former team push through their preferences in areas such as battery, camera placement and ergonomics over those of engineers. Two people said even after Ive left Apple, some employees on the headset project were still required to make the trek from Cupertino to San Francisco, where Ive has a home, to get his approval on changes. Ive has continued to tweak the headset's design. While earlier prototypes had the battery in the headband, he prefers a design that would tether the headset to a battery the user wears, similar to Magic Leap's headset design. It couldn't be learned if this approach will make it into the final design." The initial version of Apple's headset is said to lack a focus on gaming: "Four people who have worked on the project also criticized its lack of focus on gaming, a category of software that appeals to early adopters, which was important to the success of the iPhone and has been a big priority for Meta's VR group. Those people said Rockwell's group almost never mentioned games in internal presentations about possible uses for the headset. Apple isn't developing game controllers for the device and is aiming to use hand tracking or in combination with a clothespin-like finger clip as inputs for the device, multiple people familiar with the project say." On Thursday, Bloomberg reported that Apple executives previewed the upcoming headset to the company's board last week, "indicating that development of the device has reached an advanced stage." Read more of this story at Slashdot.

Read more »

Feature request: HomePod should have a true surround mode
HomePod, Apple’s smart speaker, has some great features when it comes to pairing multiple speakers together. Thanks to AirPlay 2, users can play the same audio on different HomePods around the house or even use a stereo pair as standard Apple TV speakers. However, there’s one thing that I still miss about the HomePod, and that’s a true surround mode. more… The post appeared first on 9to5Mac.

Read more »

Twitter updates its API to give developers access to reverse chronological timeline
Twitter on Friday announced an important update to its “API v2,” which can be used to create third-party clients for Twitter. With the latest update, developers can now access the same reverse chronological timeline that is available to users via the official Twitter app. more… The post appeared first on 9to5Mac.

Read more »

In Tehran, even a pool party is drenched in deception [Apple TV+ recap] ★★
Apple TV+ spy thriller Tehran throws a sexy and tense pool party so Mossad agent Tamar can get one over on her targets: the head of the Iranian Revolutionary Guard and his tech bro son. She has to play a game of cat and mouse with a couple of rich, violent people to get close enough […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

How to Use Extra Space on an APFS Time Machine Drive
Want to use the extra space on your APFS-formatted Time Machine drive to store non-backup files? Howard Oakley explains how you can make that possible by creating an APFS volume or an APFS container.Read original article

Read more »

How to watch Harry Styles on Apple Music Live
Tonight at 9:00 p.m. ET/6:00 p.m. PT Harry Styles performs his show One Night Only in New York live on Apple Music. The concert will take place at UBS Arena in Long Island, New York. Subscribers to the service have access to watch the concert for no extra cost on the platform. more… The post appeared first on 9to5Mac.

Read more »

The Essex Serpent roils with suspicion and secrets [Apple TV+ recap] ★★★★
New Apple TV+ series The Essex Serpent is knee-deep in conspiracy and suspicion already. The English townspeople think Naomi Banks is some kind of witch, and they don’t think much better of interloper Cora Seaborne, either. This week’s episode, entitled “Falling,” goes to place unexpected and expected — and both are as exciting to arrive […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Demand for Apple’s iPhone remains high, analysts say
Demand for iPhone this quarter has remained "surprisingly resilient" despite the widespread supply chain issues, rampant U.S. inflation… The post appeared first on MacDailyNews.

Read more »

Listen to sports, news, music and more with this rad radio app
As convenient as the internet can be, if you actually want to get something out of it, a lot of the work is on you. Instead of searching, you can listen with a TuneIn Premium plan. The service’s massive radio network gives you music, news, sports and more. And it’s on sale for just $39.99 […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

The Pros and Cons of Sideloading Apps on iOS – Intego Mac Podcast Episode 240
Apple claims that they need the App Store to ensure that iOS devices are safe. The company claims that sideloading, or installing apps from other sources, is dangerous. Yet this is what we have always done on the Mac. We take a deep dive into the pros and cons of sideloading on iPhones and iPads. The post appeared first on The Mac Security Blog.

Read more »

Senators Urge FTC to Probe ID.me Over Selfie Data
Some of more tech-savvy Democrats in the U.S. Senate are asking the Federal Trade Commission (FTC) to investigate identity-proofing company ID.me for "deceptive statements" the company and its founder allegedly made over how they handle facial recognition data collected on behalf of the Internal Revenue Service, which until recently required anyone seeking a new IRS account online to provide a live video selfie to ID.me.

Read more »

When Your Smart ID Card Reader Comes With Malware
Millions of U.S. government employees and contractors have been issued a secure smart ID card that enables physical access to buildings and controlled spaces, and provides access to government computer networks and systems at the cardholder's appropriate security level. But many government employees aren't issued an approved card reader device that lets them use these cards at home or remotely, and so turn to low-cost readers they find online. What could go wrong? Here's one example.

Read more »

DEA Investigating Breach of Law Enforcement Data Portal
The U.S. Drug Enforcement Administration (DEA) says it is investigating reports that hackers gained unauthorized access to an agency portal that taps into 16 different federal law enforcement databases. KrebsOnSecurity has learned the alleged compromise is tied to a cybercrime and online harassment community that routinely impersonates police and government officials to harvest personal information on their targets.

Read more »

Requiem for the iPod – Intego Mac Podcast Episode 239
Apple has discontinued the last iPod, the iPod touch. We discuss some of the history of the iPod, and look at 17 reasons who you should use an iPod touch. We also look at the new FIDO initiative, which allows your phone to replace passwords, and we discuss AirTag false alarms. The post appeared first on The Mac Security Blog.

Read more »

Microsoft Patch Tuesday, May 2022 Edition
Microsoft today released updates to fix at least 74 separate security problems in its Windows operating systems and related software. This month's patch batch includes fixes for seven "critical" flaws, as well as a zero-day vulnerability that affects all supported versions of Windows.

Read more »

Vulnerability Summary for the Week of May 2, 2022
Original release date: May 9, 2022 | Last revised: May 11, 2022  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info N/A -- N/A   On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated 2022-05-05 7.5 CVE-2022-1388 MISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info livehelperchat -- live_helper_chat Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. Attacker can execute malicious JS on Application 🙂 2022-04-29 4.3 CVE-2022-1530 MISC CONFIRM mediawiki -- mediawiki The Nimbus skin for MediaWiki through 1.37.2 (before 6f9c8fb868345701d9544a54d9752515aace39df) allows XSS in Advertise link messages. 2022-04-29 4.3 CVE-2022-29907 MISC MISC Back to top   Low Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info There were no low vulnerabilities recorded this week. Back to top   Severity Not Yet Assigned Primary Vendor -- Product Description Published CVSS Score Source & Patch Info tecson_and_gok -- multiple_products   In multiple Tecson Tankspion and GOKs SmartBox 4 products the affected application doesn't properly restrict access to an endpoint that is responsible for saving settings, to a unauthenticated user with limited access rights. Based on the lack of adequately implemented access-control rules, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to change the application settings without authenticating at all, which violates originally laid ACL rules. 2022-05-06 not yet calculated CVE-2019-12254 CONFIRM piwigo -- piwigo   SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete. 2022-05-06 not yet calculated CVE-2020-19212 MISC piwigo -- piwigo   SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories. 2022-05-06 not yet calculated CVE-2020-19213 MISC piwigo -- piwigo   SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm. 2022-05-06 not yet calculated CVE-2020-19215 MISC piwigo -- piwigo   SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm. 2022-05-06 not yet calculated CVE-2020-19216 MISC piwigo -- piwigo   SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager. 2022-05-06 not yet calculated CVE-2020-19217 MISC totolink -- n200re_andn100re_routers   A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or HTML via SCRIPT element. 2022-05-02 not yet calculated CVE-2020-23617 MISC MISC xtend -- voice_logger   A reflected cross site scripting (XSS) vulnerability in Xtend Voice Logger 1.0 allows attackers to execute arbitrary web scripts or HTML, via the path of the error page. 2022-05-02 not yet calculated CVE-2020-23618 MISC MISC orlansoft -- erp   The Java Remote Management Interface of all versions of Orlansoft ERP was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object. 2022-05-02 not yet calculated CVE-2020-23620 MISC MISC MISC squire-technologies -- ms_management_system   The Java Remote Management Interface of all versions of SVI MS Management System was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object. 2022-05-02 not yet calculated CVE-2020-23621 MISC MISC MISC sonicwall -- global_vpn_client   SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system. 2022-05-04 not yet calculated CVE-2021-20051 CONFIRM fuchsia -- multiple_products   The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that they don’t own, allowing them to control kernel memory from userspace. We recommend upgrading to kernel version 4.1 or beyond. 2022-05-03 not yet calculated CVE-2021-22556 MISC MISC google -- idtoken   The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload comes from valid provider, not from someone else. An attacker can provide a compromised token with custom payload. The token will pass the validation on the client side. We recommend upgrading to version 1.33.3 or above 2022-05-03 not yet calculated CVE-2021-22573 MISC multiple_vendors -- multiple_products   NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition functions. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-22680 CONFIRM topthink -- framework   The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class. 2022-05-06 not yet calculated CVE-2021-23592 CONFIRM CONFIRM CONFIRM twelvemonkeys -- twelvemonkeys   The package com.twelvemonkeys.imageio:imageio-metadata before 3.7.1 are vulnerable to XML External Entity (XXE) Injection due to an insecurely initialized XML parser for reading XMP Metadata. An attacker can exploit this vulnerability if they are able to supply a file (e.g. when an online profile picture is processed) with a malicious XMP segment. If the XMP metadata of the uploaded image is parsed, then the XXE vulnerability is triggered. 2022-05-06 not yet calculated CVE-2021-23792 CONFIRM CONFIRM wordpress -- tipsacarrier_wordpress_plugin   The Tipsacarrier WordPress plugin through 1.4.4.2 does not have any authorisation check in place some functions, which could allow unauthenticated users to access Orders data which could be used to retrieve the client full address, name and phone via tracking URL 2022-05-02 not yet calculated CVE-2021-25002 MISC wordpress -- advanced_page_visit_counter_wordpress_plugin   The Advanced Page Visit Counter WordPress plugin through 5.0.8 does not sanitise and escape some input before outputting it in an admin dashboard page, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against admins viewing it 2022-05-02 not yet calculated CVE-2021-25086 MISC wordpress -- all_in_one_wp_security_&_firewall_wordpress_plugin   The All In One WP Security & Firewall WordPress plugin before 4.4.11 does not validate, sanitise and escape the redirect_to parameter before using it to redirect user, either via a Location header, or meta url attribute, when the Rename Login Page is active, which could lead to an Arbitrary Redirect as well as Cross-Site Scripting issue. Exploitation of this issue requires the Login Page URL value to be known, which should be hard to guess, reducing the risk 2022-05-02 not yet calculated CVE-2021-25102 MISC sophos -- firewall   Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA. 2022-05-05 not yet calculated CVE-2021-25267 CONFIRM sophos -- firewall   Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA. 2022-05-05 not yet calculated CVE-2021-25268 CONFIRM kubernetes -- ingress-nginx   A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the spec.rules[].http.paths[].path field of an Ingress object (in the networking.k8s.io or extensions API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster. 2022-05-06 not yet calculated CVE-2021-25745 MISC MISC kubernetes -- ingress-nginx   A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an Ingress object (in the networking.k8s.io or extensions API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster. 2022-05-06 not yet calculated CVE-2021-25746 MISC MISC splunk -- enterprise   A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability impacts Splunk Enterprise instances configured to use DUO MFA and does not impact or affect a DUO product or service. 2022-05-06 not yet calculated CVE-2021-26253 MISC micriumos -- multiple_products   Micrium OS Versions 5.10.1 and prior are vulnerable to integer wrap-around in functions Mem_DynPoolCreate, Mem_DynPoolCreateHW and Mem_PoolCreate. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as very small blocks of memory being allocated instead of very large ones. 2022-05-03 not yet calculated CVE-2021-27411 CONFIRM CONFIRM ecoscentric -- ecospro_rtos   eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc (an implementation of malloc). The unverified memory assignment can lead to arbitrary memory allocation, resulting in a heap-based buffer overflow. 2022-05-03 not yet calculated CVE-2021-27417 CONFIRM CONFIRM uclibc-ng -- uclibc-ng   uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-27419 CONFIRM CONFIRM nxp -- mcuxpresso   NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when assigning a particular block of memory from the heap via malloc. 2022-05-03 not yet calculated CVE-2021-27421 CONFIRM CONFIRM cesanta_software -- mongoose-os   Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-27425 CONFIRM CONFIRM riot -- os   RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-27427 CONFIRM CONFIRM arm -- cmsis_rtos2   ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc (local malloc equivalent) function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or injected code execution. 2022-05-03 not yet calculated CVE-2021-27431 CONFIRM arm -- mbed-ualloc   ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-27433 CONFIRM CONFIRM arm -- mbed-ualloc   ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in malloc_wrapper function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-27435 CONFIRM CONFIRM tencentos-tiny -- tencentos-tiny TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tos_mmheap_alloc incorrect calculation of effective memory allocation size. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-27439 CONFIRM hcl_software -- commerce   HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible. 2022-05-06 not yet calculated CVE-2021-27751 CONFIRM hcl_software -- bigfix_inventory   There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system blocked victim's account. 2022-05-06 not yet calculated CVE-2021-27758 CONFIRM hcl_software -- bigfix_inventory    This vulnerability arises because the application allows the user to perform some sensitive action without verifying that the request was sent intentionally. An attacker can cause a victim's browser to emit an HTTP request to an arbitrary URL in the application. 2022-05-06 not yet calculated CVE-2021-27759 CONFIRM hcl_software -- notes   An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could cause Remote Code Execution on another chat client by sending a specially formatted message through chat containing Javascript code. 2022-05-06 not yet calculated CVE-2021-27760 CONFIRM hcl_software -- weak_tls   Weak web transport security (Weak TLS): An attacker may be able to decrypt the data using attacks 2022-05-06 not yet calculated CVE-2021-27761 CONFIRM hcl_software -- bigfix_platform   Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses 2022-05-06 not yet calculated CVE-2021-27762 CONFIRM hcl_software -- hcl_software   Cookie without HTTPONLY flag set. NUMBER cookie(s) was set without Secure or HTTPOnly flags. The images show the cookie with the missing flag. (WebUI) 2022-05-06 not yet calculated CVE-2021-27764 CONFIRM hcl_software -- installshield   The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed. 2022-05-06 not yet calculated CVE-2021-27765 CONFIRM hcl_software -- bigfix_client_installer   The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed. 2022-05-06 not yet calculated CVE-2021-27766 CONFIRM hcl_software -- bigfix_console_installer   The BigFix Console installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed. 2022-05-06 not yet calculated CVE-2021-27767 CONFIRM ibm -- maximo_asset_management   IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 205680. 2022-05-03 not yet calculated CVE-2021-29854 CONFIRM XF ibm -- user_management_system_component   IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008, V21.0.2 through V21.0.2-IF009, and V21.0.1 through V21.0.1-IF007) could allow a user with physical access to the system to perform unauthorized actions or obtain sensitive information due to insufficient validation and recvocation another user logouting out. IBM X-Force ID: 206081. 2022-05-02 not yet calculated CVE-2021-29859 CONFIRM XF splunk -- enterprise_indexer   A crafted request bypasses S2S TCP Token authentication writing arbitrary events to an index in Splunk Enterprise Indexer 8.1 versions before 8.1.5 and 8.2 versions before 8.2.1. The vulnerability impacts Indexers configured to use TCPTokens. It does not impact Universal Forwarders. 2022-05-06 not yet calculated CVE-2021-31559 MISC cyclos -- cyclos_4_pro   A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remote attackers to inject arbitrary web script or HTML via the groupId parameter. 2022-05-02 not yet calculated CVE-2021-31673 MISC MISC cyclos -- cyclos_4_pro   Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacker to execute javascript code via undefine enum constant. 2022-05-02 not yet calculated CVE-2021-31674 MISC MISC secomea -- multiple_products   Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. Secomea GateManager versions prior to 9.7. 2022-05-04 not yet calculated CVE-2021-32010 MISC splunk -- enterprise   The Splunk Enterprise REST API allows enumeration of usernames via the lockout error message. The potential vulnerability impacts Splunk Enterprise instances before 8.1.7 when configured to repress verbose login errors. 2022-05-06 not yet calculated CVE-2021-33845 MISC MISC red_hat -- sox   A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information. 2022-05-02 not yet calculated CVE-2021-3643 MISC suse -- rancher   A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE Rancher allows administrators of third-party repositories to gather credentials that are sent to their servers. This issue affects: SUSE Rancher Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3. 2022-05-02 not yet calculated CVE-2021-36778 CONFIRM suse -- rancher   A Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin role to escalate to full admin. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4. 2022-05-02 not yet calculated CVE-2021-36784 CONFIRM wordpress -- mythemeshop_wp_subscribe_plugin   Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop WP Subscribe plugin

Read more »

Your Phone May Soon Replace Many of Your Passwords
Apple, Google and Microsoft announced this week they will soon support an approach to authentication that avoids passwords altogether, and instead requires users to merely unlock their smartphones to sign in to websites or online services. Experts say the changes should help defeat many types of phishing attacks and ease the overall password burden on Internet users, but caution that a true passwordless future may still be years away for most websites.

Read more »

Apple AirTags: One Year On – Intego Mac Podcast Episode 238
Apple has provided some clarification to its plan to remove old and in the way apps from the App Store. Microsoft has been working on a VPN that isn't a VPN it works a little differently from Apple's VPN that isn't a VPN. And it's been a year since Apple released AirTags... It hasn't exactly been smooth sailing, but if third-party accessories are an indication, AirTags are doing pretty well. The post appeared first on The Mac Security Blog.

Read more »

Russia to Rent Tech-Savvy Prisoners to Corporate IT?
Faced with a brain drain of smart people fleeing the country following its invasion of Ukraine, the Russian Federation is floating a new strategy to address a worsening shortage of qualified information technology experts: Forcing tech-savvy people within the nation's prison population to perform low-cost IT work for domestic companies.

Read more »

17 Reasons Why You Should Use an iPod touch in 2022
You may think the iPod touch is an out-of-date technology, but there are lots of reasons why you might want to use one. The post appeared first on The Mac Security Blog.

Read more »

This wireless carrier is offering your choice of two free Apple iPhones if you switch
Choose between a free 2022 iPhone SE or an iPhone 12 if you open a new line of service at Verizon. Value of the phone you choose is spread over a 36 month period of Unlimited service. No trade-in is required to qualify for these deals. Full details... The post first appeared on MacPrices.net.

Read more »

Details of Apple’s 2022 iPad discounts for Education customers
Apple will take $100 off 12" M1 iPad Pros, $50-$100 off 11" M1 iPad Pros, $50 off iPad Airs, $50 off 8.3" iPad minis, & $20 off 10.2" iPads for all teachers, students, and staff of any educational institution with a .edu email address as part of their Apple Education discount, including parents of students. Stock varies depending on model and configuration, but shipping is free. Check out their range of discounts available on all iPad models: The post first appeared on MacPrices.net.

Read more »

Apple has a range of M1 and Intel-powered Mac minis in stock starting at only $589, Certified Refurbished
Apple has a full line of Certified Refurbished M1-powered as well as previous-generation Intel-based Mac minis back in stock today starting at only $589, Certified Refurbished. Models with varying amounts of RAM and storage are also available: The post first appeared on MacPrices.net.

Read more »

New Set Of Accessible Tools Designed To Help Users With Disabilities Coming Soon From Apple
NEWS: 05.19.22 – Apple’s software platforms are about to get even more useful for persons who are disabled. Earlier this week — days ahead of Global Accessibility Awareness Day (and weeks in advance of Apple’s annual worldwide developers conference in June) — Apple (via a press release) gave a preview of a new set of accessible tools coming later this year to its software platforms. […] The post first appeared on MacPrices.net.

Read more »

Apple restocks 13″ M1 MacBook Pros with 16GB of RAM for up to $350 off MSRP
Apple has standard-configuration 13" M1 MacBook Pros with 8GB of RAM and 256GB or 512GB SSDs available for $200-$230 off MSRP, Certified Refurbished. If 8GB of RAM is not enough for you, Apple has restocked several custom-configurations with 16GB of RAM and various amount of storage for up to $350 off the cost of new models. Apple’s one-year warranty is included, shipping is free, and each MacBook has a new outer shell. The following models are available today: The post first appeared on MacPrices.net.

Read more »

24″ M1 iMacs with 8-Core CPU/8-Core GPU in stock and on sale for $1349, save $150
Amazon has 24" M1 iMacs (8-Core CPU/8-Core GPU/256GB SSD) on sale for $150 off MSRP for a limited time, only $1349. All colors currently qualify for the $150 discount, and their prices are the lowest available for these models from any Apple reseller. Shipping is free. Stock varies based on color (see their site for details), but some are in stock today. The post first appeared on MacPrices.net.

Read more »

M1 Mac mini with 512GB SSD on sale for $749, save $150
Amazon has the Apple M1 Mac mini with a 512GB SSD on sale for $749.99 including free shipping. Their price is $150 off Apple's MSRP, and it's the lowest price available for this configuration. Be sure to purchase from Amazon rather than a third-party seller. These are the same Mac minis sold by Apple in their retail and online stores. Delivery is expected by June 4th, depending on your location. The post first appeared on MacPrices.net.

Read more »

Apple’s 16″ M1 Pro MacBook Pro is on sale today for $2249 shipped, $250 off MSRP
Amazon has new 16" 10-Core/512GB M1 Pro MacBook Pros on sale for $250 off MSRP including free shipping, only $2249.99. Their prices are the lowest available for new M1 Pro 16" MacBook Pro from any Apple reseller. Be sure to purchase from Amazon rather than a third-party seller, and note that prices and availability may change at any moment. Neither color is in stock today, but you can still price your order at the discounted sale price... The post first appeared on MacPrices.net.

Read more »

Visible is again offering $200 back with the iPhone SE plus free Apple AirPods 3
Verizon's low-cost wireless cell service, Visible, is again offering a free $200 gift card plus a free set of Apple AirPods 3 with the purchase of a new 2022 iPhone SE & a new line of service. Gift cards are available from MasterCard or a host of retailers such as Amazon, Target, and others, and will be made available to customers after 3 months of service. Free overnight delivery is available on all new phones. The post first appeared on MacPrices.net.

Read more »

This wireless carrier is offering Apple AirPods Pro for 20% off MSRP
Verizon has Apple AirPods Pro on sale again for $199.99 on their online store. Their price is $50 (20%) off Apple's MSRP, and it's among the lowest prices currently available for AirPods Pro. Verizon service is not required for purchase. Buy online and choose free shipping or free local store pickup (if available). Sale price for online orders only, in-store price may vary. The post first appeared on MacPrices.net.

Read more »

Apple AirPods Max headphones are on sale today for $100 off MSRP
Tiger Direct has Apple AirPods Max (all colors) on sale today for $449 shipped. Their price is $100 (18%) off Apple's MSRP, and it's the lowest price currently available for AirPods Max from any of the Apple resellers we track. For the latest prices and sale, see our Apple AirPods Price Tracker, updated daily. We track prices from 23+ resellers. The post first appeared on MacPrices.net.

Read more »

Open-box 14″ M1 Pro MacBook Pros in stock today starting at only $1749
QuickShip Electronics has open-box return 14" M1 Pro MacBook Pros in stock and on sale for $250-$450 off MSRP on their eBay store today. According to QuickShip, "The item in this listing is an Open Box (packaging maybe slightly distressed). The unit powers on with factory settings restored and includes the original accessories." The following standard-configuration models are available: (1) 14" M1 Pro MacBook Pro (8-Core CPU/Space Gray): $1749 $250 off MSRP, (2) 14" M1 Pro MacBook Pro (10-Core CPU/Space Gray): $2049 $450 off MSRP, (3) 14" M1 Pro MacBook Pro (10-Core CPU/Silver): $2049 $450 off MSRP. The post first appeared on MacPrices.net.

Read more »