Snapchat introduces new ‘Shared Stories’ so users can create collaborative memories
Snapchat this week introduced a new feature called “Shared Stories.” The feature is an evolution of “Custom Stories,” which already let users create a story and then invite friends to collaborate on following posts. However, with Shared Stories, even more people will be able to collaborate on that story. more… The post appeared first on 9to5Mac.

Read more »

Wonder Twin Powers
Telling an app to `activate` via AppleScript only brings the app’s frontmost window forward in MacOS 12.

Read more »

'Why Won't Corsair and Dell Just Let Apple's Touch Bar Die Already?'
An anonymous reader shares an excerpt from an opinion piece, written by Macworld's Michael Simon: Apple killed its Touch Bar on the 14-inch and 16-inch MacBook Pro last year, but PC makers seem determined to prove the company wrong. First Dell introduced the XPS 13 Plus which sports a "new capacitive touch experience that allows you to switch between media and function keys easily." The laptop is available for purchase but back-ordered for weeks, and there haven't been any reviews so we don't know for sure how it will be received, but Dell's touch bar concept seems even less useful than Apple's: the buttons are static, they merely float above the actual keyboard, and they don't appear to add any functionality. Then Dell added a touch bar to the trackpad on the Latitude 9330. [...] Now there's a new PC touch bar, this time on the Voyager a1600, Corsair's first-ever gaming laptop. Corsair hasn't named or even officially announced the new feature -- it only appeared as a sneak peek -- but the company told The Verge that the strip features "10 easy-access customizable S-key shortcut buttons." [...] Corsair's Touch Bar doesn't replace the row of function keys but it is in an odd location -- on the hinge below the display. Even in pictures, it looks incredibly uncomfortable to reach. According to renders, you can still access the Touch Bar when the laptop is closed, which seems like an accident waiting to happen (not to mention a battery drain). But the biggest question I have is: why? No one shed a tear for the Touch Bar when it was killed. While it has its merits, it was never a proper pro-level feature and the implementation didn't evolve past the original idea. It was too skinny, lacked tactile feedback, required constant scrolling, and didn't actually save time. It looked nice, but even Apple didn't seem to know what to do with it. The MacBook Pro Touch Bar was one of Apple's most polarizing features and it never really caught on with developers. Maybe a niche use like gaming or video conferencing will have better results, but ultimately the Touch Bar, Apple's or otherwise, is a failed concept that should stay in the past. Read more of this story at Slashdot.

Read more »

Apple fails bid to shut down refiled Cydia antitrust lawsuit
A U.S. judge will allow third-party app store Cydia to present its antitrust case against Apple, after dismissing Apple's claim that the matter is not outside the statute of limitations.In January 2022, U.S. district judge Yvonne Gonzalez Rogers granted Apple's motion to dismiss a case brought against it by a jailbreak-focused App Store. Read more...

Read more »

Shining Girls edges toward answers to unspeakable questions [Apple TV+ recap] ★★★
Shining Girls enters its endgame this week in a thrilling episode that’s heavy on plot and light on psychological depth. Just as Kirby (played by Elisabeth Moss) thinks she finally understands the next step in serial killer Harper’s game plan, reporter Dan runs off to chase leads. And her bewildered husband Marcus betrays them both […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Meta says it won’t collect user data ‘in new ways’ – but what’s that supposed to mean?
Mark Zuckerberg’s company Meta, which is formally known as Facebook, has rewritten its Terms of Service and, as a result, has also updated Meta’s Privacy Policy. Now the company proudly says that it won’t collect user data “in new ways” – but what’s that supposed to mean? more… The post appeared first on 9to5Mac.

Read more »

Atlanta Apple Store employees drop bid for union vote, citing ‘intimidation’
As the fight to unionize within Apple Stores was heating up, one group is dropping its bid. Atlanta Apple Store employees are withdrawing their request for a union election, according to Bloomberg. more… The post appeared first on 9to5Mac.

Read more »

Senators ask Apple, Google to stop collecting data that could identify abortion seekers
After a leaked opinion draft indicated that the Supreme Court plans to overturn Roe V. Wade, U.S. lawmakers have asked Apple and Google to help safeguard data that could be used against those seeking abortions.On Friday, senators sent a letter to both Apple CEO Tim Cook and Google CEO Sundar Pichai. The letter, seen by CNET expressed concern that certain data collected, including health, biometrics, online activity, and location, could be used to identify someone looking to have an abortion.There is cause for legitimate concern. Many apps harvest information from users and sell it to data brokers, who in turn have sold it it to additional parties. Read more...

Read more »

Evidence of iPad floating app windows shows up in Apple WebKit
There’s a new reason to think iPadOS 16 might include support for resizable floating app windows. A developer found evidence that this hoped-for feature is being added to Apple’s browser engine for iPad and iPhone. If true, confirmation isn’t far away. Apple is expected to unveil iPadOS 16 at its Worldwide Developers Conference in early […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Apple workers in Atlanta drop union vote request, citing intimidation tactics
A labor group organizing Apple retail staff at an Atlanta location has withdrawn their request for an election, alleging that Apple has carried out illegal union-busting tactics.Apple Cumberland MallThe Communications Workers of America, which has been organizing staff at the Cumberland Mall Apple Store, says it withdrew its request because "Apple's repeated violations of the National Labor Relations Act have made a free and fair election impossible," Bloomberg reported Friday. Read more...

Read more »

Five Senators ask Apple to stop app data collection that could identify women seeking abortions
Five senators are urging Apple and Google to prohibit apps from gathering data that could target those seeking abortions. According to CNET, the group of senators are worried the data could end up in the hands of authorities. more… The post appeared first on 9to5Mac.

Read more »

Verizon Downplays Hacked and Ransomed Database Despite Potential Security Risks
Recently a Verizon employee database was compromised with the hacker holding it for a $250,000 ransom. Verizon states it doesn’t believe the content contains “any sensitive information”, and has ceased communications with the the hacker. However, the list of details does include employee email addresses, phone numbers and more that may present a risk for future attacks. Verizon Employee Database Hacked In a report by Motherboard via The Verge, an anonymous hacker obtained access to a database containing Verizon employee information. This includes full names, company ID numbers, email addresses and phone numbers. While it unclear how current the information is, Motherboard called multiple people affected by the hack and confirmed that four of the individuals do work for Verizon. Motherboard stated, “Around a dozen other numbers returned voicemails that included the names in the database, suggesting that those are also accurate”. The anonymous hacker informed Motherboard that they “obtained the data by convincing a Verizon employee to give them remote access to their corporate computer”. The hacker also described the employees as "idiots". Through this deceit, the hacker gained access to Verizon’s internal systems and obtained the employee database. Additionally, after obtaining the database, the hacker informed Verizon they wanted $250,000 to not leak the information. In a response to Motherboard, Verizon stated, "A fraudster recently contacted us threatening to release readily available employee directory information in exchange for payment from Verizon. We do not believe the fraudster has any sensitive information and we do not plan to engage with the individual further," the spokesperson told Motherboard in an email. "As always, we take the security of Verizon data very seriously and we have strong measures in place to protect our people and systems." Motherboard notes that while Verizon may not deem the information sensitive, the information given out could potentially stir trouble. Employee’s phone numbers, email addresses and company ID numbers could find a use impersonating employees in an attempt to social engineering and SIM swap attacks. The release of this information could in turn create more situations such as the one presented. Again, the hacker obtained this data through social engineering.

Read more »

Rule the skies this summer with these two drones, on sale for more than half off
Just a few years ago, you’d be lucky to find a decent drone for less than a thousand dollars. Now you can get one that’s smaller, more nimble, has better cameras, and costs significantly less. With the Alpha Z Pro 4K + Flying Fox 4K drones bundle, you can get two high-quality, dual-camera drones for […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Is Apple prepping a new family of AirPort Wi-Fi routers?
A new rumor popped up on Thursday that claimed that Apple is working on a new range of AirPort routers and an iCloud Time… The post appeared first on MacDailyNews.

Read more »

‘Star Wars’ Celebration Weekend Brings Wealth of New Information For Fanatics
Star Wars fans your celebration weekend is here. Get your lightsabers and popcorn ready, as a wealth of Stars Wars content is soon to arrive. During the Lucasfilm Studio Showcase panel occurring at the Star Wars Celebration in Anaheim, California, the company released a slew of new Star Wars information. The event is taking place May 26 through May 29. 'Andor' News Kicks Off 'Star Wars' Celebration First up, the official Star Wars website has announced that Andor, the upcoming Disney+ series will begin streaming Aug. 31, 2022. Additionally, a trailer for the series made its official debut. Viewers can witness the titular hero in action while also getting a first glimpse at the empire. Fans may also get to see the birth of the rebellion. Created by Tony Gilroy, Andor stars Diego Luna reprising the role of rebel spy Cassian Andor from Rogue One: A Star War Story. In this latest release, the 12-episode story begins five years prior to the events of the film. Along with Luna, Genevieve O’Reilly makes a retune as Mon Mothma (Rogue One). Additionally, Stellan Skasgård (Pirates of the Caribbean: At World’s End), Denise Gough (Angels in America) and Kyle Soller (The Titan) will make an appearance. https://youtu.be/j5UX1Adanis It is worth noting that Andor is already in development for its second season. Reports indicate that the second season will directly lead to the events of Rogue One. Additional 'Star Wars' News Additionally, the streaming platform also confirmed that the much-anticipated Star Wars series Ahsoka is set to premiere sometime in 2023. Along with this, the company also announced a new kid-centric series titled Star Wars: Skeleton Crew. This series will be set during The Mandalorian’s timeline and will star Jude Law. Speaking of The Mandalorian, the third season is set to premiere February 2023. The third season features the return of the bounty hunter to Mandalore with Grogu, as well as Katee Sackhoff reprising her Season Two role as Bo-Katan Kryze. Of course, that’s not all for this fantastic Star War weekend. The latest spinoff, Obi-Wan Kenobi will see an earlier release on the West Coast. A tweet from the official Star Wars account has provided the news. Ewan McGregor reprises his role as the titular character. The show is set a decade after 2005’s Star Wars: Episode III — Revenge of the Sith. Obi-Wan Kenobi begins with Obi-Wan’s life in exile on Tatooine. Additionally, Hayden Christensen is also back as Anakin Skywalker. Fans of Star Wars have quite a bit to look forward to, no doubt. As updates for the new shows continue to arrive, there will be plenty to see in the world of Star Wars.

Read more »

Apple Watch SE vs 7: Differences between the affordable and flagship wearables
The two most recent Apple Watches in the current lineup share a lot of features in common but there are at least eight differences that account for the more expensive Apple Watch Series 7 price. Whether you’re looking for yourself or someone else, read on for Apple Watch SE vs 7 to help you figure out which one to pick. more… The post appeared first on 9to5Mac.

Read more »

Shootings in Buffalo and Uvalde Bring Back Arguments Concerning End-to-End Encryption
The role of social networks and end-to-end encryption has come to a discussion in the wake of the deadly mass shootings in Buffalo, New York, and Uvalde, Texas. The discussion is rekindling arguments concerning end-to-end encryption of private messages. Politicians gave their input after it was found that both Buffalo and Uvalde alleged killers used social media apps to discuss their plans with various online groups. Uvalde, Buffalo and Encryption In a report from The Washington Post, it notes that the alleged Buffalo shooter posted his plans on Discord. The alleged shooter began posting months before the attack. The alleged gunman, Payton Gendron, sent an invitation to an online chatroom through the instant message platform Discord. Concerning the invite, it was accepted by 15 users who were then able to access months of Gendron’s lengthy writings and racist diatribes. Furthermore, users who clicked through to the discord channel could also view an online video stream. This stream was footage of the Buffalo attack. The attack also saw a broadcast through Twitch. However, Gendron’s posts were made available only half an hour before the shooting began. In a response from Discord, the company explains that the suspect did keep their personal diary on a private Discord server. It was visible only to him. During the 30 minutes prior to the attack, Gendron shared his journal via invitations to a number of other private servers and direct messages (DMs). The diary was only available through these invitations and messages, not to the Discord community as a whole. Lawmakers Look to Social Media Over Buffalo and Uvalde Discord wants to make it clear that the suspect was active on its website. However, no reference to his plans went outside of his private server. Additionally, a report from The Post indicates that the Uvalde school district uses an AI system to scan social media for this type of content. However, the AI is unable to scan private messages. The Post stated: But these tools are ill-equipped to address the surging popularity of live video streaming and private or disappearing messaging that are increasingly used by young adults and teens. Those messages are then closed off to outsiders, who might be able to spot the warning signs that a troubled individual might be about to inflict harm on themselves and others. Attorney General Speak Up In the wake of this tragic news, two state attorney general have launched investigations. Both are looking into the role of social media in the Buffalo attack. Both announcements seem to condemn social networks for failing to moderate content which the companies had access to. New York Attorney General Letitia James stated: It has been reported that the shooter posted online for months about his hatred for specific groups, promoted white supremacist theories, and even discussed potential plans to terrorize an elementary school, church, and other locations he believed would have a considerable community of Black people to attack. Those postings included detailed information about plans to carry out an attack in a predominantly Black neighborhood in Buffalo and his visits to the site of the shooting in the weeks prior. Additionally, New Jersey’s acting Attorney General stated, The suspect in the May 14 attack reportedly used the social media platforms to plan and publicize the mass shooting, which authorities are calling a racially-motivated hate crime. The investigation will examine if lax content moderation and policy enforcement on the part of Discord and Twitch allow the platforms to serve as hubs for extremist and violent networking and community building, and as entry points for children to come into contact with extremist ideologies. Though neither is currently launching a direct attack on end-to-end encryption, the implication is clear. Complaints against social media being unable to monitor threats made in private messages have been a topic of debate for awhile. Adding to the Argument During highly emotional events, it is inevitable that the event will be a means to call for backdoors to encrypted devices and end-to-end encrypted messaging. While these calls have good intentions, they lack an understanding of technology. Many have debunked several of the claims typical to this argument. Let's break it down. The first issue is that privacy is a right in the digital world just as much as the physical world. As a nation, we could monitor every road and school hallway with CCTV cameras. We could implement fingerprint scanning and we could hold prints and DNA in a global database. However, we don’t do these things because of the value of freedom and privacy. We naturally take some risks and pay a price for not being constantly under surveillance. Second, adding a backdoor to end-to-end encrypted messages means that it is no longer end-to-end encryption. The system either needs to be secure, or it cannot be secure. This problem can add further complications. If you make the system even slightly open, this creates the possibility of others entering as well. Creating a backdoor for end-to-end encryption may allow nefarious individuals entrance into private messages. Why Encryption Matters Lastly, adding a back door to end-to-end encryption won’t stop bad people. There are endless ways to transfer messages in a hidden manner. Steganography, for example, is capable of hiding messages inside ordinary photos. While it is typically trivial to do so, this is but one way to send a message in disguise. It is important not to confuse private messages with public posts. At the same time, many individuals have grown radicalized through exposure to online hate speech and other extremist content. It is not unreasonable nor a violation of the First Amendment to expect social networks to reduce this threat. It is a complicated and heart breaking situation. However, pointing fingers at tech that ultimately helps more than hinders is not a solution. The attacks at Buffalo and Uvalde are beyond tragic, a bit more understanding would show that encryption and social media are not entirely to blame.

Read more »

Samsung's Memorial Day Sale knocks up to $1,550 off Galaxy smartphones, 2022 TVs, home appliances
Samsung has launched its Memorial Day 2022 Sale, with steep discounts on Galaxy devices, 2022 4K and 8K televisions and smart home appliances.Samsung Memorial Day deals are going on now on S22 phones, refrigerators and televisionsThe Memorial Day sale held by Samsung delivers up to $1,000 in trade-in credit, plus $100 instant Samsung credit with the Galaxy S22 Ultra. Read more...

Read more »

Why you’re waiting 10 weeks for new MacBook Pro or Mac Studio
Wait times for some MacBooks and desktops Macs stretch into August. Apple manufacturer Quanta Computer simply can’t assemble enough units to meet demand, as its workers revolt at lengthy COVID-19 lockdowns. The delays caused by the lockdowns, enforced by the Chinese government in an attempt to control the spread of COVID-19, are not just irritating to […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Key U.S. inflation measure rises to near 40-year high
The U.S. Federal Reserve's preferred gauge to track inflation climbed 4.9% in April from the previous year, close to the highest level… The post appeared first on MacDailyNews.

Read more »

US Senate Bill Would Ban App Stores From Hosting Apps That Accept China’s Digital Yuan
Fearing spying from China, U.S. senators hope to bar apps that accept Beijing’s digital yuan. The senators introduced the bill Thursday, which might affect both Apple’s App Store and the Google Play store, among others. Digital Yuan Could Allow Spying on Customers Republican Senators Tom Cotton, Marco Rubio and Mike Braun sponsored the bill. Cotton’s office, speaking to Reuters, claims China’s digital yuan could allow the Communist nation to spy on Americans. They fear the digital currency may give Beijing the ability to spy on Americans. Supposedly, digital yuan provides "real-time visibility into all transactions on the network." This could, they say, pose privacy and security concerns for Americans using the digital currency. At least one security-based think tank agrees. D.C.-based Center for a New American Security reported in January 2021 that the digital yuan would aid Chinese surveillance. Transactions using the currency include “precise data about users and their financial activity.” Senate Bill Aims to Block China's Digital Currency Usage in US The newly-introduced bill hopes to restrict just how much consumers might utilize digital yuan for payments in the U.S. It prevents companies from hosting apps "that supports or enables transactions in e-CNY." WeChat, a Chinese messaging and payment application, recently announced it would begin supporting the currency. Payments app Alipay, owned by Jack Ma’s Ant Group, also accepts the currency. WeChat and Alipay are both available for download on the App Store. Under former President Donald Trump, WeChat once faced a ban in U.S. app stores, but those times have passed. China’s embassy in D.C. denounced the legislation. It described the bill as the U.S. “wantonly bullying foreign companies by abusing state power on the untenable ground of national security." Stopping potential national security threats related to China is one of the few topics Republicans and Democrats actually agree on. This could help the bill pass through a deeply divided Congress. Then again, midterm elections are coming up. That naturally makes it difficult to say which way the tides might turn on this bill. Apple did not respond to a request for comment.

Read more »

Why Apple needs to copy Google’s new ‘USB-C cable alert’ feature
Google is rolling out an update to Chrome OS this week that comes with a very nifty new feature. As reported by our colleagues over at 9to5Google, Chrome OS 102 includes a new “USB-C cable alert” feature, and it’s a feature that Apple should absolutely replicate across the board for its products… more… The post appeared first on 9to5Mac.

Read more »

Apple TV+ is looking for more hit dramas like ‘The Morning Show’
One Hollywood agent says streamers don't see comedies as driving lots of subscriptions. Accordingly, Apple TV+ wants more dramatic fare… The post appeared first on MacDailyNews.

Read more »

9to5Mac Happy Hour 383: Apple AR headset tidbits, new Pride Band, WWDC approaches
The Information posts a lengthy feature on the development of the Apple mixed reality headset, which could be publicly announced soon as Bloomberg reports Apple has recently demoed the device to its board of directors. Benjamin and Zac also wish for an iCloud-aware Time Machine backup solution, discuss the new Pride Band and watch face, and look at the latest announcements regarding Apple’s in-person WWDC event. Sponsored by Lumin Skin: Level up your skincare game with Lumin Skin today! Go to LuminSkin.com/HappyHour to get your free trial of Lumin’s products. Sponsored by New Relic: That next 9:00 p.m. call is just waiting to happen, get New Relic before it does! You can get access to the whole New Relic platform and 100GB of data free, forever – no credit card required. Sign up at NewRelic.com/happyhour. Sponsored by Kolide: Got Slack? Got Macs? Get Kolide: Device security that fixes challenging problems by messaging your users on Slack. Try Kolide Today! Sponsored by Pillow: Pillow is an all-in-one sleep tracking solution to help you get a better night’s sleep. Download it from the App Store today. more… The post appeared first on 9to5Mac.

Read more »

Everybody’s playing dirty this week on Now and Then [Apple TV+ recap] ★★★★½
Apple TV+’s Now and Then, a Miami-based murder mystery, starts to play dirty this week. New roommates Marcos, Isabel and Sofia are primed to turn on each other. Political couple Ana and Pedro have a huge, expensive mess on their hands. Mother and son Daniela and Hugo might have more secrets than anyone. And Detective Neruda […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

If the US government is good at anything, it's failing at technology
U.S. lawmakers are not just technologically illiterate — they're tech-incompetent. In a world as reliant on tech hardware, software, and services as ours, that's dangerous.US Capitol building at nightMembers of Congress from both sides of the aisle, and governments overseas have repeatedly shown their lack of knowledge about essential tech topics. That hampers their ability to enact real change and undoubtedly leads them to draft ineffective and sometimes meaningless legislation. Read more...

Read more »

Best iPad apps for writers in 2022
There are countless superb word processors, text editors, and writing utilities for the iPad — and a lot of garbage, too. Here are your best options whether you're a novelist or a screenwriter.There are still people who think that iPads are only good for consuming content like watching films, reading books and playing games. Clearly, none of these people have tried to write on a Kindle.For writers, the iPad does offer every bit of this content consumption, and it offers it extremely well. But every iPad, iPad mini, iPad Air, and iPad Pro is also a writing studio that is about as light and convenient as you could imagine, and at least as powerful as you could hope. Read more...

Read more »

Apple’s A16 Chip to Stick With 5nm, M2 Will Jump to 3nm
According to alleged leaks from Apple’s supply chain, the A16 chip for the iPhone 14 Pro models may stick with the same manufacturing process as the A15. The new M2 chip, on the other hand, will reportedly skip the 4-nanometer process and use a 3-nanometer fabrication. Even more interesting, Apple may have one more M1 chip variant in the works. Manufacturing the iPhone 14’s A16 Chip According to a thread on Twitter, a “fairly reliable source” has leaked TSMC’s upcoming production plans to ShrimpApplePro. TSMC manufactures all of Apple’s System-on-a-Chip (SoC) families. Currently, TSMC manufactures the A14, A15 and M1 chips using a 5-nanometer fabrication process. According to the leak, that’s staying the same for Apple’s A16 chip, rumored to be flagged for use in the iPhone 14 Pro models. The base iPhone 14 variants will supposedly still include A15 chips with performance improvements. While many thought TSMC would use its newer 4-nanometer process for the A16, that may not be the case. If true, the A16 chip may be less of a substantial upgrade than we’d thought. Instead, according to both ShrimpApplePro and noted analyst Ming-Chi Kuo, performance improvements will come from the phone’s memory. Both suggest the iPhone 14 will feature LPDDR 5 memory. That type of memory is up to one and a half times faster than the LPDDR 4 memory chips currently in use. It’s also as much as 30% more power-efficient. Apple Silicon M2 Chips Skip a Process Generation On the other hand, the M2 chip will reportedly use TSMC’s 3-nanometer process. Its manufacturing model will skip the 4-nanometer process altogether. Supposedly, the M2 will represent Apple’s first custom ARMv9 processor. Meanwhile, the leaker indicated Apple is working on one final variation of its M1 SoC family. Rather than using the A14 cores, it will adopt the same cores found in the A15 Bionic chip. It’s unclear what computer might use this new M1 variant. It could be the hinted-at Mac Pro, or perhaps the 2022 MacBook Air. Kuo predicted the next MacBook Air will retain the M1 chip rather than featuring the new M2 SoC. WWDC is less than two weeks away, so we may get a glimpse of the new M1 variant soon. It’s unlikely that Apple will reveal anything about the A16 chip until the iPhone 14 announcement in fall 2022. This could all just be unfounded speculation, though, given ShrimpApplePro said “take this one with a big grain of MSG.”

Read more »

What’s in store for Apple Watch SE 2?
Apple in September 2020 announced Apple Watch SE, packing the essential features of Apple Watch into a modern design customers love… The post appeared first on MacDailyNews.

Read more »

Best Buy’s Memorial Day Sale offers massive discounts on iPad Air, Apple Watch and MacBook Air
Best Buy’s Memorial Day sale is live, and you can save hundreds of dollars on the Apple Watch Series 7, iPad Air 4 and M1 MacBook Air. The retailer is selling the iPad Air 4 with a whopping $150 discount, MacBook Air with a $100 discount, and up to $70 off on select Apple Watch […] (via Cult of Mac - Tech and culture through an Apple lens)

Read more »

Ellie’s Data Auction – Intego Mac Podcast Episode 241
Apple's recent iPhone privacy ad features an auction of Ellie's data. We look at the ad and discuss the points Apple makes, and explains how they matter, and when they aren't enough. We also talk about Apple's home repair program, new app subscription rules, and an Instagram account hack. The post appeared first on The Mac Security Blog.

Read more »

The Pros and Cons of Sideloading Apps on iOS – Intego Mac Podcast Episode 240
Apple claims that they need the App Store to ensure that iOS devices are safe. The company claims that sideloading, or installing apps from other sources, is dangerous. Yet this is what we have always done on the Mac. We take a deep dive into the pros and cons of sideloading on iPhones and iPads. The post appeared first on The Mac Security Blog.

Read more »

Senators Urge FTC to Probe ID.me Over Selfie Data
Some of more tech-savvy Democrats in the U.S. Senate are asking the Federal Trade Commission (FTC) to investigate identity-proofing company ID.me for "deceptive statements" the company and its founder allegedly made over how they handle facial recognition data collected on behalf of the Internal Revenue Service, which until recently required anyone seeking a new IRS account online to provide a live video selfie to ID.me.

Read more »

When Your Smart ID Card Reader Comes With Malware
Millions of U.S. government employees and contractors have been issued a secure smart ID card that enables physical access to buildings and controlled spaces, and provides access to government computer networks and systems at the cardholder's appropriate security level. But many government employees aren't issued an approved card reader device that lets them use these cards at home or remotely, and so turn to low-cost readers they find online. What could go wrong? Here's one example.

Read more »

DEA Investigating Breach of Law Enforcement Data Portal
The U.S. Drug Enforcement Administration (DEA) says it is investigating reports that hackers gained unauthorized access to an agency portal that taps into 16 different federal law enforcement databases. KrebsOnSecurity has learned the alleged compromise is tied to a cybercrime and online harassment community that routinely impersonates police and government officials to harvest personal information on their targets.

Read more »

Requiem for the iPod – Intego Mac Podcast Episode 239
Apple has discontinued the last iPod, the iPod touch. We discuss some of the history of the iPod, and look at 17 reasons who you should use an iPod touch. We also look at the new FIDO initiative, which allows your phone to replace passwords, and we discuss AirTag false alarms. The post appeared first on The Mac Security Blog.

Read more »

Microsoft Patch Tuesday, May 2022 Edition
Microsoft today released updates to fix at least 74 separate security problems in its Windows operating systems and related software. This month's patch batch includes fixes for seven "critical" flaws, as well as a zero-day vulnerability that affects all supported versions of Windows.

Read more »

Vulnerability Summary for the Week of May 2, 2022
Original release date: May 9, 2022 | Last revised: May 11, 2022  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info N/A -- N/A   On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated 2022-05-05 7.5 CVE-2022-1388 MISC Back to top   Medium Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info livehelperchat -- live_helper_chat Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. Attacker can execute malicious JS on Application 🙂 2022-04-29 4.3 CVE-2022-1530 MISC CONFIRM mediawiki -- mediawiki The Nimbus skin for MediaWiki through 1.37.2 (before 6f9c8fb868345701d9544a54d9752515aace39df) allows XSS in Advertise link messages. 2022-04-29 4.3 CVE-2022-29907 MISC MISC Back to top   Low Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info There were no low vulnerabilities recorded this week. Back to top   Severity Not Yet Assigned Primary Vendor -- Product Description Published CVSS Score Source & Patch Info tecson_and_gok -- multiple_products   In multiple Tecson Tankspion and GOKs SmartBox 4 products the affected application doesn't properly restrict access to an endpoint that is responsible for saving settings, to a unauthenticated user with limited access rights. Based on the lack of adequately implemented access-control rules, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to change the application settings without authenticating at all, which violates originally laid ACL rules. 2022-05-06 not yet calculated CVE-2019-12254 CONFIRM piwigo -- piwigo   SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete. 2022-05-06 not yet calculated CVE-2020-19212 MISC piwigo -- piwigo   SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories. 2022-05-06 not yet calculated CVE-2020-19213 MISC piwigo -- piwigo   SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm. 2022-05-06 not yet calculated CVE-2020-19215 MISC piwigo -- piwigo   SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm. 2022-05-06 not yet calculated CVE-2020-19216 MISC piwigo -- piwigo   SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager. 2022-05-06 not yet calculated CVE-2020-19217 MISC totolink -- n200re_andn100re_routers   A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or HTML via SCRIPT element. 2022-05-02 not yet calculated CVE-2020-23617 MISC MISC xtend -- voice_logger   A reflected cross site scripting (XSS) vulnerability in Xtend Voice Logger 1.0 allows attackers to execute arbitrary web scripts or HTML, via the path of the error page. 2022-05-02 not yet calculated CVE-2020-23618 MISC MISC orlansoft -- erp   The Java Remote Management Interface of all versions of Orlansoft ERP was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object. 2022-05-02 not yet calculated CVE-2020-23620 MISC MISC MISC squire-technologies -- ms_management_system   The Java Remote Management Interface of all versions of SVI MS Management System was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object. 2022-05-02 not yet calculated CVE-2020-23621 MISC MISC MISC sonicwall -- global_vpn_client   SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system. 2022-05-04 not yet calculated CVE-2021-20051 CONFIRM fuchsia -- multiple_products   The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that they don’t own, allowing them to control kernel memory from userspace. We recommend upgrading to kernel version 4.1 or beyond. 2022-05-03 not yet calculated CVE-2021-22556 MISC MISC google -- idtoken   The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload comes from valid provider, not from someone else. An attacker can provide a compromised token with custom payload. The token will pass the validation on the client side. We recommend upgrading to version 1.33.3 or above 2022-05-03 not yet calculated CVE-2021-22573 MISC multiple_vendors -- multiple_products   NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition functions. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-22680 CONFIRM topthink -- framework   The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class. 2022-05-06 not yet calculated CVE-2021-23592 CONFIRM CONFIRM CONFIRM twelvemonkeys -- twelvemonkeys   The package com.twelvemonkeys.imageio:imageio-metadata before 3.7.1 are vulnerable to XML External Entity (XXE) Injection due to an insecurely initialized XML parser for reading XMP Metadata. An attacker can exploit this vulnerability if they are able to supply a file (e.g. when an online profile picture is processed) with a malicious XMP segment. If the XMP metadata of the uploaded image is parsed, then the XXE vulnerability is triggered. 2022-05-06 not yet calculated CVE-2021-23792 CONFIRM CONFIRM wordpress -- tipsacarrier_wordpress_plugin   The Tipsacarrier WordPress plugin through 1.4.4.2 does not have any authorisation check in place some functions, which could allow unauthenticated users to access Orders data which could be used to retrieve the client full address, name and phone via tracking URL 2022-05-02 not yet calculated CVE-2021-25002 MISC wordpress -- advanced_page_visit_counter_wordpress_plugin   The Advanced Page Visit Counter WordPress plugin through 5.0.8 does not sanitise and escape some input before outputting it in an admin dashboard page, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against admins viewing it 2022-05-02 not yet calculated CVE-2021-25086 MISC wordpress -- all_in_one_wp_security_&_firewall_wordpress_plugin   The All In One WP Security & Firewall WordPress plugin before 4.4.11 does not validate, sanitise and escape the redirect_to parameter before using it to redirect user, either via a Location header, or meta url attribute, when the Rename Login Page is active, which could lead to an Arbitrary Redirect as well as Cross-Site Scripting issue. Exploitation of this issue requires the Login Page URL value to be known, which should be hard to guess, reducing the risk 2022-05-02 not yet calculated CVE-2021-25102 MISC sophos -- firewall   Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA. 2022-05-05 not yet calculated CVE-2021-25267 CONFIRM sophos -- firewall   Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA. 2022-05-05 not yet calculated CVE-2021-25268 CONFIRM kubernetes -- ingress-nginx   A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the spec.rules[].http.paths[].path field of an Ingress object (in the networking.k8s.io or extensions API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster. 2022-05-06 not yet calculated CVE-2021-25745 MISC MISC kubernetes -- ingress-nginx   A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an Ingress object (in the networking.k8s.io or extensions API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster. 2022-05-06 not yet calculated CVE-2021-25746 MISC MISC splunk -- enterprise   A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability impacts Splunk Enterprise instances configured to use DUO MFA and does not impact or affect a DUO product or service. 2022-05-06 not yet calculated CVE-2021-26253 MISC micriumos -- multiple_products   Micrium OS Versions 5.10.1 and prior are vulnerable to integer wrap-around in functions Mem_DynPoolCreate, Mem_DynPoolCreateHW and Mem_PoolCreate. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as very small blocks of memory being allocated instead of very large ones. 2022-05-03 not yet calculated CVE-2021-27411 CONFIRM CONFIRM ecoscentric -- ecospro_rtos   eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc (an implementation of malloc). The unverified memory assignment can lead to arbitrary memory allocation, resulting in a heap-based buffer overflow. 2022-05-03 not yet calculated CVE-2021-27417 CONFIRM CONFIRM uclibc-ng -- uclibc-ng   uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-27419 CONFIRM CONFIRM nxp -- mcuxpresso   NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when assigning a particular block of memory from the heap via malloc. 2022-05-03 not yet calculated CVE-2021-27421 CONFIRM CONFIRM cesanta_software -- mongoose-os   Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-27425 CONFIRM CONFIRM riot -- os   RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-27427 CONFIRM CONFIRM arm -- cmsis_rtos2   ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc (local malloc equivalent) function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or injected code execution. 2022-05-03 not yet calculated CVE-2021-27431 CONFIRM arm -- mbed-ualloc   ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-27433 CONFIRM CONFIRM arm -- mbed-ualloc   ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in malloc_wrapper function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-27435 CONFIRM CONFIRM tencentos-tiny -- tencentos-tiny TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tos_mmheap_alloc incorrect calculation of effective memory allocation size. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. 2022-05-03 not yet calculated CVE-2021-27439 CONFIRM hcl_software -- commerce   HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible. 2022-05-06 not yet calculated CVE-2021-27751 CONFIRM hcl_software -- bigfix_inventory   There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to login and system blocked victim's account. 2022-05-06 not yet calculated CVE-2021-27758 CONFIRM hcl_software -- bigfix_inventory    This vulnerability arises because the application allows the user to perform some sensitive action without verifying that the request was sent intentionally. An attacker can cause a victim's browser to emit an HTTP request to an arbitrary URL in the application. 2022-05-06 not yet calculated CVE-2021-27759 CONFIRM hcl_software -- notes   An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could cause Remote Code Execution on another chat client by sending a specially formatted message through chat containing Javascript code. 2022-05-06 not yet calculated CVE-2021-27760 CONFIRM hcl_software -- weak_tls   Weak web transport security (Weak TLS): An attacker may be able to decrypt the data using attacks 2022-05-06 not yet calculated CVE-2021-27761 CONFIRM hcl_software -- bigfix_platform   Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses 2022-05-06 not yet calculated CVE-2021-27762 CONFIRM hcl_software -- hcl_software   Cookie without HTTPONLY flag set. NUMBER cookie(s) was set without Secure or HTTPOnly flags. The images show the cookie with the missing flag. (WebUI) 2022-05-06 not yet calculated CVE-2021-27764 CONFIRM hcl_software -- installshield   The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed. 2022-05-06 not yet calculated CVE-2021-27765 CONFIRM hcl_software -- bigfix_client_installer   The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed. 2022-05-06 not yet calculated CVE-2021-27766 CONFIRM hcl_software -- bigfix_console_installer   The BigFix Console installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the underlying vulnerability fixed. 2022-05-06 not yet calculated CVE-2021-27767 CONFIRM ibm -- maximo_asset_management   IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 205680. 2022-05-03 not yet calculated CVE-2021-29854 CONFIRM XF ibm -- user_management_system_component   IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008, V21.0.2 through V21.0.2-IF009, and V21.0.1 through V21.0.1-IF007) could allow a user with physical access to the system to perform unauthorized actions or obtain sensitive information due to insufficient validation and recvocation another user logouting out. IBM X-Force ID: 206081. 2022-05-02 not yet calculated CVE-2021-29859 CONFIRM XF splunk -- enterprise_indexer   A crafted request bypasses S2S TCP Token authentication writing arbitrary events to an index in Splunk Enterprise Indexer 8.1 versions before 8.1.5 and 8.2 versions before 8.2.1. The vulnerability impacts Indexers configured to use TCPTokens. It does not impact Universal Forwarders. 2022-05-06 not yet calculated CVE-2021-31559 MISC cyclos -- cyclos_4_pro   A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remote attackers to inject arbitrary web script or HTML via the groupId parameter. 2022-05-02 not yet calculated CVE-2021-31673 MISC MISC cyclos -- cyclos_4_pro   Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacker to execute javascript code via undefine enum constant. 2022-05-02 not yet calculated CVE-2021-31674 MISC MISC secomea -- multiple_products   Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. Secomea GateManager versions prior to 9.7. 2022-05-04 not yet calculated CVE-2021-32010 MISC splunk -- enterprise   The Splunk Enterprise REST API allows enumeration of usernames via the lockout error message. The potential vulnerability impacts Splunk Enterprise instances before 8.1.7 when configured to repress verbose login errors. 2022-05-06 not yet calculated CVE-2021-33845 MISC MISC red_hat -- sox   A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information. 2022-05-02 not yet calculated CVE-2021-3643 MISC suse -- rancher   A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE Rancher allows administrators of third-party repositories to gather credentials that are sent to their servers. This issue affects: SUSE Rancher Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3. 2022-05-02 not yet calculated CVE-2021-36778 CONFIRM suse -- rancher   A Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin role to escalate to full admin. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4. 2022-05-02 not yet calculated CVE-2021-36784 CONFIRM wordpress -- mythemeshop_wp_subscribe_plugin   Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop WP Subscribe plugin

Read more »

Your Phone May Soon Replace Many of Your Passwords
Apple, Google and Microsoft announced this week they will soon support an approach to authentication that avoids passwords altogether, and instead requires users to merely unlock their smartphones to sign in to websites or online services. Experts say the changes should help defeat many types of phishing attacks and ease the overall password burden on Internet users, but caution that a true passwordless future may still be years away for most websites.

Read more »

Apple AirTags: One Year On – Intego Mac Podcast Episode 238
Apple has provided some clarification to its plan to remove old and in the way apps from the App Store. Microsoft has been working on a VPN that isn't a VPN it works a little differently from Apple's VPN that isn't a VPN. And it's been a year since Apple released AirTags... It hasn't exactly been smooth sailing, but if third-party accessories are an indication, AirTags are doing pretty well. The post appeared first on The Mac Security Blog.

Read more »

Russia to Rent Tech-Savvy Prisoners to Corporate IT?
Faced with a brain drain of smart people fleeing the country following its invasion of Ukraine, the Russian Federation is floating a new strategy to address a worsening shortage of qualified information technology experts: Forcing tech-savvy people within the nation's prison population to perform low-cost IT work for domestic companies.

Read more »

Memorial Day Apple iPad Sale: $30 off 9th-generation iPad, $75 off 11″ iPad Pro
Apple reseller Expercom is offering a $30 discount on all 9th-generation 10.2" iPads and a $75 discount on all 11" M1 iPad Pros through June 6th as part of their Memorial Day Sale. Prices start at $299 for iPads and $724 for iPad Pros. Note that not all configurations are in stock today, but they are still available for order at the sale price. Shipping is free. The post first appeared on MacPrices.net.

Read more »

Memorial Day Apple iPad Sale: $30 off 9th-generation iPad, $75 off 11″ iPad Pro
Apple reseller Expercom is offering a $30 discount on all 9th-generation 10.2" iPads and a $75 discount on all 11" M1 iPad Pros through June 6th as part of their Memorial Day Sale. Prices start at $299 for iPads and $724 for iPad Pros. Note that not all configurations are in stock today, but they are still available for order at the sale price. Shipping is free. The post first appeared on MacPrices.net.

Read more »

Memorial Day Weekend Savings: MagSafe accessories for up to $20 off MSRP
Amazon has Apple MagSafe Chargers and Apple's MagSafe Battery on sale for up to $20 off MSRP as part of their Memorial Day Weekend Sale sale. Shipping is free. Amazon's sale prices are among the lowest prices anywhere for MagSafe gear... The post first appeared on MacPrices.net.

Read more »

Best Memorial Day Weekend MacBook Deal: Get this Apple Refurbished 13″ M1-powered MacBook Pro for only $879
Other World Computing has Apple refurbished, factory-sealed, current-generation 13" Space Gray M1 MacBook Pros on sale for $420-$500 off Apple's MSRP, starting at only $879. Their prices are the lowest available for a current-generation 13" M1-powered MacBook Pro anywhere. Apple's standard one-year warranty applies, and OWC offers a 14-day free return policy. The post first appeared on MacPrices.net.

Read more »

Memorial Day Weekend iPhone Sale: $250 off iPhone 13 and 12 models at Xfinity Mobile
As part of their Memorial Day Weekend sale, Xfinity Mobile is offering any new Apple iPhone 13, or the 64GB iPhone 12, for $250 off MSRP for customers switching to Xfinity Mobile and opening a new line of service. Price for the phone, including the discount, is spread monthly over a 24 month term. Offer is valid through April 26, 2022. Their deal reduces the price of a 128GB iPhone 13, for example, from $34.58 per month to $24.17 over 24 months. As a comparison, Apple's annual subscription fee for this model is $33.29 per month for 36 months. Offer ends on June 27th... The post first appeared on MacPrices.net.

Read more »

Memorial Day Weekend iPhone Sale: Free $300 gift card with select iPhones at Visible
Memorial Day Weekend iPhone sales are now live at Verizon's low-cost wireless cell service, Visible. They will include a free $300 gift card with the purchase of a new 2022 iPhone 13 Pro Max, 13 Pro, or SE along with a new line of service. Gift cards are available from MasterCard or a host of retailers such as Amazon, Target, and others, and will be made available to customers after 3 months of service. Free overnight delivery is available on all new phones. Monthly payment plans are available. Visible uses Verizon's 5G nationwide network and offers plans with unlimited data for $40 per month. For the latest prices and deals, see our iPhone Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

In stock today: 13″ M1 MacBook Air for $899, $100 off Apple’s MSRP, free 1-2 day shipping
B&H has Apple's base 13" M1 MacBook Air (Space Gray) in stock and on sale today for $100 off MSRP, only $899. Free 1-2 day shipping is available to most addresses in the US... The post first appeared on MacPrices.net.

Read more »

In stock today: Open-box 16″ MacBook Pro with 10-Core Apple M1 Pro CPU for $500 off MSRP, only $1999
Having trouble finding a 16" M1 Pro MacBook Pro to buy? QuickShip Electronics has open-box return 16" M1 Pro MacBook Pros in stock and on sale for $500 off MSRP on their eBay store right now, each with free express delivery. According to QuickShip, "The item in this listing is an Open Box (packaging maybe slightly distressed). The unit powers on with factory settings restored and includes the original accessories." The following standard-configuration model is available: (1) 16" M1 Pro MacBook Pro (10-Core CPU/512GB SSD/Space Gray): $1999 $500 off MSRP. Note that limited quantities are available, and they may sell out at any time. For the latest prices and sales, see our 16" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

16″ MacBook Pro with Apple M1 Pro CPU in stock today with $50 AppleCare discount
Stock of Apple's 16" MacBook Pro can be hard to find at resellers today. However, Apple reseller Expercom is reporting stock of the Silver 16" MacBook Pro with a 10-Core M1 Pro CPU and 512GB SSD today for $2499 shipped. Expercom is offering a $50 discount on the purchase of an AppleCare+ Plan alongside any new 2021 16" MacBook Pro, reducing the price of an AppleCare+ Plan to $349, down from $399. For the latest prices and sales, see our 16" MacBook Pro Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »

Amazon has select 13″ M1 MacBook Airs on sale for $100 off Apple’s MSRP, only $899
Amazon has select Apple 13" M1 MacBook Airs on sale for $100 off MSRP today, only $899. Amazon does not have stock of these MacBooks, but they are available for order at the discounted price. The following colors were discounted at the time of this post... The post first appeared on MacPrices.net.

Read more »

Deal Alert! 14″ 10-Core M1 Pro MacBook Pros are in stock today for $2249, save $250
Amazon has 14" MacBook Pros with a 10-Core M1 Pro CPUs on sale today for $2249.99 shipped. That's $250 off Apple's MSRP. Amazon's prices are the lowest currently available for 10-Core 14" MacBook Pros among Apple's resellers. Be sure to make your purchase from Amazon rather than a third-party seller, and note that stock and availability can change rapidly. At the time of this post, Silver models with in stock, while Space Gray models were on backorder (although still available at the discounted sale price). The post first appeared on MacPrices.net.

Read more »

24″ M1 iMacs with 8-Core CPU/8-Core GPU/512GB SSD in stock and on sale for $1499, save $200
Amazon has 24" M1 iMacs (8-Core CPU/8-Core GPU/512GB SSD) on sale for $1499.99 for a limited time, $200 off Apple's MSRP. All colors are discounted, and their prices are the lowest available for these models from any Apple reseller. Shipping is free. Check Amazon's site for the latest stock status of your chosen color. For the latest prices and sales, see our iMac Price Tracker, updated daily. The post first appeared on MacPrices.net.

Read more »