Apple has released a fix for a zero-day vulnerability that bad actors could exploit to take full control of an iPhone, an iPad or a computer running macOS Monterey. The tech giant's security advisory is pretty light on details, but it has identified CVE-2022-3289 as a vulnerability discovered by an anonymous researcher. It says the flaw could be exploited "to execute arbitrary code with kernel privileges," which means attackers could act as the user and gain admin control of the target device. The company says it's aware that the vulnerability may have already been exploited.
In addition, Apple has also rolled out a fix for a vulnerability affecting WebKit, the engine used by Safari, Mail and many other iOS and macOS apps. According to the company, it allows attackers to arbitrarily execute code and could hence be used to, among other things, download more malware. Like the first vulnerability, Apple credits an anonymous researcher for the discovery of this flaw — it also knows that it may have already been exploited and used to compromise iOS and Mac devices.
Both flaws are present in macOS Monterey 12.5.1, and Apple has rolled out a patch for the operating system. They both affect the same set of iPhones and iPads, as well, particularly: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later and iPod touch (7th generation). Since both flaws are likely being actively exploited right now, it's probably wise for owners of all the aforementioned devices to install the patches by downloading the latest software update.
The "brown noise" is a legendary tone purportedly capable of causing people to lose control of their bowels when subjected to its gut-punching harmonic resonance. South Park did a whole thing on it. Turns out that the 5400 RPM hard drives from a number of old Windows-era laptops possess a brown note of their own: Janet Jackson's 1989 mega-hit 'Rhythm Nation.'
According to Microsoft Software Engineer, Raymond Chen, who recounted the tale in a Microsoft Developers Blogpost earlier this week, "a major computer manufacturer discovered" that playing the music video (above) would not only crash the hard drive of the laptop it was running on but also any other similar model within earshot.
The Mitre Corporation was not amused by this newfound vulnerability, issuing it an entry in the CVE database. After a thorough investigation, the device manufacturer confirmed that the song contained one of the natural resonant frequencies of the hard drives playing the song essentially rattled the devices apart. Rather than recall untold numbers of decades-old drives, the manufacturer instead opted to develop a workaround by "adding a custom filter in the audio pipeline that detected and removed the offending frequencies during audio playback," according to Chen.
Apple Podcasts has offered paid subscriptions for a while, but how are you supposed to find shows worth a monthly outlay? You now have some help. Apple has introduced charts for both the top 100 subscriber shows and top 100 subscriber channels, making it clearer which shows and providers are interesting enough for people to spend their hard-earned money.
Both new charts are available through the Podcasts app in the US, UK, Australia and Canada. You'll need at least iOS 15.6, iPadOS 15.6 or macOS 12.5. They're available through both the Browse tab and the Charts page, and are refreshed multiple times per day.
There's a clear frontrunner in the inaugural charts. As of this writing, Amazon's Wondery is dominating the show and channel rankings with podcasts like Morbid and SmartLess. Recognizable rivals like Luminary (Black Star's No Fear of Time) and Pushkin (Malcolm Gladwell's Go and See) are also present on the channel list.
There's no mystery behind the strategy. Apple is clearly hoping you'll sign up for subscriptions and support your favorite series while giving the iPhone maker a cut of the fees. Nonetheless, this might be helpful if you're looking for ad-free shows and otherwise crave paid perks.
Numerous third-party iPad styluses magnetically attach to your tablet, but they typically recharge through USB — not much help if you forget to top up before a writing session. Adonit may have addressed that flaw with its $45 Neo Pro, however. From what we've seen, it's the first unofficial pen to wirelessly charge on the side of an iPad Air, iPad mini or iPad Pro. You can pay less than half the price of a $129 Apple Pencil without giving up a major convenience.
The Neo Pro offers up to nine hours of use. It doesn't require a Bluetooth connection to get started, but setting that up will show your remaining charge in the iPad's battery life widget.
There is a reason the stylus is such a bargain. While the Neo Pro offers tilt sensitivity, palm rejection and replaceable tips, there's no pressure detection — this is more for note-takers than creatives producing detailed artwork. With that said, this might be a strong value if you need a pen for lectures and office meetings.
There's a good chance you want an external SSD you can take anywhere, whether it's extra storage for your school projects or backup for your can't-lose work files. Thankfully, you won't have to pay a lot for that extra space. Amazon is selling SanDisk's 1TB Extreme Portable SSD at a new all-time low price of $109, or less than half its official $250 sticker. There are steep discounts for 2TB (now $234) and 4TB ($460) models, too. At those prices, they may be easy choices if you want a speedy yet durable drive.
The SanDisk Extreme Portable SSD is reasonably quick with 1GB/s read and write speeds, but the rugged design is clearly its main appeal. The toughened shell can survive falls from 6.5ft and boasts IP55 dust and water resistance — while you wouldn't want to drop the SSD off a cliff or dunk it in a lake, it can handle the rough-and-tumble of everyday life. A carabiner loop makes it easy to clip the drive to your backpack or camera strap, and optional 256-bit hardware encryption keeps your data more secure.
This isn't the fastest external SSD you'll find, and you won't get perks like a Thunderbolt port (it's 'just' USB-C) or wireless connectivity. With a sale like this, though, those limitations are easier to accept. This is a good deal for any portable SSD, and the improved survivability is just a nice bonus.
I’ve been rather critical of Motorola’s recent phones. But it seems like the company may have taken that criticism to heart because with the new Edge 2022 (not to be confused with the Edge+ from earlier this year) it feels like we’re finally getting a phone with good specs for a decent price and significantly better software support.
The new, non-plus, Edge gets a big 6.6-inch OLED screen featuring a 144HZ refresh rate similar to its more expensive sibling, along with a sizable 5,000 mAh battery, 6GB or 8GB of RAM and up to 256GB of storage. As for its cameras, you also get a familiar 50MP main sensor paired with a lower-res 13 MP ultra-wide cam (which can also shoot macros) and a depth sensor to help with portrait-style shots. The phone also supports 30-watt fast charging, 15-watt wireless charging and even reverse wireless charging for sharing juice with other devices.
Sam Rutherford/Engadget
And while Motorola’s decision to go with a MediaTek Dimensity 1050 processor instead of a more typical Qualcomm chip is a bit unusual, you still get compatibility for both sub 6Ghz and mmWave 5G, including the new C-band spectrum. So while it’s not quite as premium as the Edge+, it’s not far off.
But to me, the most important upgrade is that for the Edge, Motorola is committing to at least three major Android updates and four years of regular security patches. Previously, software support (or lack thereof) was one of Motorola’s biggest weaknesses compared to other phone makers. The more expensive Edge+ from this spring is only slated to receive two years of Android updates and three years of security patches, while Moto’s less expensive G-series phones fare even worse, often only receiving only one major OS upgrade.
That said, there are a few specs that could be improved. The Edge’s IP52 rating for dust and water resistance means it’s not designed to handle more than a light splash, which is kind of weak for a mainstream mid-range phone. I also find the lack of a true third rear camera a bit disappointing. I’d like to see either a dedicated macro cam or some kind of telephoto option.
But here’s the thing, with a launch price of around $500 ($498 on T-Mobile or $499.99 unlocked), those shortcomings aren’t nearly as annoying as they would be on a more expensive handset. The Edge+ also lacks a telephoto cam but has a full retail price of $1,000 (though Moto has dropped the cost of that phone to just $750 in recent months). And while the non-plus Edge is set to get a price bump down the line, even at its full $600 listing, it still feels like you’re getting a good deal.
Sam Rutherford/Engadget
In my short time with the Edge Plus so far, there are other small things to appreciate. For a phone with a battery this big, it’s surprisingly light, weighing just under six ounces. The display also has a peak brightness of 1,300 nits, which is similar to what you get on the more expensive Galaxy S22. And while I’m still not sure how much of an impact the new RGBC color filter is having on the quality of the Edge’s selfies, with the phone featuring a 32MP sensor in front, there aren’t any concerns about resolution.
It’s still too early to say if Motorola’s increased attention to software support is here to stay. But after years of being frustrated by phones that felt like they were abandoned after a year or two, it’s nice to finally see the company respond to feedback. And between its specs and a very attractive launch price, the Edge is shaping up to be a good value when it goes on sale sometime in the “coming weeks.”
We may be only about one month away from Apple possibly announcing the next generation of its smartwatch, but those who want a new wearable now can pick up the Series 7 for less at Amazon. the online retailer has knocked down the prices of the 41mm and 45mm GPS Product Red versions of the Watch to $290 and $320, respectively. Both models are on sale, but they also both have additional coupons that will be automatically applied at checkout to bring them down to those final sale prices.
Apple has consistently made the Watch better with each iteration, and the Series 7 is no exception. It wasn't a massive departure from the Series 6 that came before it, but the company did make some important improvements. The Series 7 has a larger screen, making it easier to read text and even type out messages on its display. While its design is mostly the same as the previous version, the Series 7 is the first Apple Watch with an IP6X dust resistance rating, making it the most durable version of the Watch to date. Apple also sped up the charging time on this Watch, allowing you to get a 10-percent boost in battery life in only 10 minutes of charging.
Otherwise, Apple brought over all of the excellent features found on the Series 6 to the Series 7. The smartwatch has a built-in GPS, heart rate monitor, ECG tool and blood oxygen monitor, plus features like fall detection and Emergency SOS. Our biggest gripe with it is its lackluster sleep tracking — the Watch focuses on telling you how long you slept and not much else, which is much less data than you'll get from a competing Fitbit or Garmin device. Despite that, we still consider the Apple Watch to be the best smartwatch you can get right now. But if you want the latest and greatest from Apple, you may be better off waiting until the fall when it's very likely the company will announce the next version of the Watch.
Logitech has introduced a new audio solution specifically created for the Meta Quest 2: It's called "Chorus," and the company says it can deliver a "new level of immersive, ultra-realistic audio." Chorus features rotating speakers and an open back form factor that lets ambient sounds in. It was designed to slide onto the Quest 2's headset strap until the speakers are positioned over the user's ears. In fact, it will make the VR device look similar to the Valve Index, which comes with two near-field speakers, after installation. According to The Verge, the Chorus is compatible with both the stock strap the Quest 2 ships with and Meta's Elite strap.
The accessory maker says Chorus' big open-back audio drivers ensure users can hear both the "big moments and the smallest details." And while the add-on is not an original part of the Quest 2, it's meant to stay in place instead of being removed after every use. It connects to the headset's USB-C port and draws power from the Quest 2 itself, but since it was designed to stay plugged in, it supports USB-C passthrough. That means users can keep their headset charged or can connect other devices to it while Chorus is also plugged in. As The Verge notes, though, Chorus has little noise isolation and probably isn't the best choice for those who want privacy while watching movies or exploring new experiences in VR.
Vadim Kogan, Logitech's head of AR/VR, said "Chorus enhances the fit and comfort of Meta Quest 2, while allowing those who love long play sessions to stay immersed in their favorite games and experiences through the audio integration in a comfortable design built for the VR gamer."
Chorus will soon be available from Logitech's website and other retailers for $100.
Like Blizzard, Rockstar and Ubisoft, Sony may soon require you to download a launcher before you can play its games on PC. Digging through the Windows version of Marvel’s Spider-Man: Remastered, VGC verified code referencing a PlayStation PC launcher. The discovery follows the recent revelation that Sony likely plans to add PlayStation Network integration to its PC titles.
If Sony moves forward with the launcher, it’s unclear if the company also plans to make its games exclusive to the software. At the moment, you can buy all of Sony’s PC titles through both Steam and the Epic Games Store. Different publishers employ different strategies. For instance, Blizzard games are only available to download through the Battle.Net app. Other companies such as EA and Rockstar allow you to buy and download their games through Steam and the Epic Games Store, but you must also install their software for verification purposes. Even if Sony were to go the latter route, it’s almost certain its launcher would include a storefront. In that way, the company could avoid giving Valve and Epic a cut of some of its PC sales.
Oracle has put TikTok's algorithms and content moderation models under its microscope in an attempt to make sure Chinese officials aren't meddling with them. TikTok is in the process of moving all of the data it has on US users to Oracle cloud storage based in the country. Oracle's audit is said to have started last week, after TikTok started routing all new traffic from US users through the former's systems.
A spokesperson told Axiosthat the reviews examine how TikTok's algorithms — the app's secret sauce — bubble up content "to ensure that outcomes are in line with expectations and that the models have not been manipulated in any way." Engadget has asked Oracle for clarification on what it means by manipulation in this context. On the moderation side, Oracle will regularly look at TikTok's practices related to both automation and human content reviewers.
In 2020, the Trump administration attempted to force through a sale of TikTok to a US company. Former President Donald Trump gave tentative approval to a deal that would have seen Oracle and Walmart run the American side of the business, but that didn't transpire.
Meanwhile, TikTok has committed to being more transparent and it's trying to convince regulators and lawmakers that US user data is secure. CEO Shou Zi Chew recently wrote in a letter to nine Republican senators that TikTok was "working with Oracle on new, advanced data security controls that we hope to finalize in the near future."
The senators asked a question about engineers at TikTok's parent company ByteDance playing a part in shaping the app's algorithms. "ByteDance engineers around the world may assist in developing those algorithms, however our solution with Oracle will ensure that training of the TikTok algorithm only occurs in the Oracle Cloud Infrastructure and will also ensure appropriate third-party security vetting and validation of the algorithm," Chew wrote in his response.
In June, BuzzFeed News reported that China-based ByteDance engineers repeatedly accessed non-public US user data. Chew said those workers were only able to access such information with "robust cybersecurity controls and authorization approval protocols overseen by our US-based security team" in place.
The report led to Brendan Carr, the Federal Communication Commission's senior Republican commissioner, urging Apple and Google to remove TikTok from their app stores. Amid the scandal, TikTok's global security chief stepped down last month.
