Apple Addresses Critical Security Loopholes Across All Devices Via Latest Firmware Updates

Apple today has rolled out a series of firmware updates for all supported devices under its ecosystem. According to the respective support pages published on the company’s website, these contain security-based fixes for the CoreGraphics and WebKit vulnerabilities that potentially allows for a “zero-click” installation of malicious software onto affected Apple products.

Malware that exploits these vulnerabilities are capable of infecting a device without requiring the victim to do anything, hence the term “zero-click”. One such example of this is the Pegasus hacking platform, a spyware tool developed by an Israeli firm known as the NSO Group.

If both of these names sound familiar, this is because they have been associated with several attacks on platforms including Apple’s iMessage, as well as Facebook’s encryption-based private messaging service WhatsApp. The Pegasus tool is alleged to be capable of committing various privacy breaching acts such as compromising user data and passwords, as well as remote activation of a device’s onboard microphone or camera.

Security researchers at Citizen Lab reports that NSO may have likely been relying on the CoreGraphics loophole – an exploit also first discovered by the research group –  to gain access and install the Pegasus spyware onto a target’s device. Apple credited Citizen Lab for the crucial discovery in the patch notes that are included together with the series of recently released firmware updates.

Meanwhile, Apple notes that this particular WebKit vulnerability addressed in the new update was discovered by an anonymous researcher. Prior to the fix, the exploit is reported to have affected devices under the company’s iOS and macOS Big Sur platforms. For the uninitiated, WebKit is the web browser engine used by various Apple first party applications such as Safari, Mail, and App Store. This isn’t the first time a vulnerability was discovered in the engine, as the company has addressed three other similar issues back in March, May and July of this year.

Apple users are highly advised to update their devices with today’s newly released firmware upgrades. These latest versions include iOS 14.8 for the 7th gen iPod touch and iPhone models from 6s onwards; iPadOS 14.8 for all iPad Pro models, iPad Air 2 onwards, iPad 5th gen onwards, and iPad mini 4 onwards; macOS Big Sur 11.6 for all supported Mac devices; and finally, watchOS 7.6.2 for Apple Watch Series 3 onwards.

Clubhouse App No Longer Invite-Only Across All Platforms

Clubhouse has announced that it is no longer invite-only across all mobile platforms. As revealed by company co-founders Paul Davison and Rohan Seth via its official blog, this major change is made effective immediately through the latest version of the app that is now available for download on both iOS and Android platforms. 

The decision to remove its invite-only approach is a long time coming, the company revealed. Ever since its launch a year ago, Clubhouse has always been intended to be accessible by anyone in order to have “meaningful conversations” with each other – bypassing limitations such as distance, especially during these trying times.

“The invite system has been an important part of our early history. But we’ve always wanted Clubhouse to be open,” the company said in its latest blog post. “Everyone in the world should have access to meaningful conversations. And the best rooms on Clubhouse are the ones where you meet people from far outside your social circle, with very different views and lived experiences, who change your perspective on the world.”

It added that the invite-only approach was necessary in order to keep things under control during its early stages, especially while the company continues to introduce newer features and improvements to its app. However, this also unintentionally gave Clubhouse a members-only, closed-doors appeal – a similar vibe given by exclusive nightclubs or even secret groups.

Further building up the public’s desire to gain access during this phase are the multitudes of endorsements by public figures and celebrities, who hold exclusive talks or hangout sessions via Clubhouse. This led to a good number of existing members taking advantage of their limited app invites by selling them on various e-commerce platforms, usually at exorbitant prices. Thankfully, this cheeky way of profit-making has become obsolete now that the app finally opened its doors to the public – a move that would definitely anger both scalpers and those who previously paid a premium in order to score an invite.

Along with the announcement, Clubhouse also unveiled its new logo (shown on top) in the same blog post. This will be used to represent the company for general usage such as marketing and so on but will not replace its app icon, it noted. Clubhouse will continue its tradition to update its icon every month, featuring a monochrome image of selected public figures to represent the platform’s community.

With its invite-only element now gone, will Clubhouse retain its appeal? Being a pioneer to the audio-only chat room craze that has spawned numerous clones by competing social media companies, it looks like the app will see no problem by removing the restriction. If anything, it might cause it to flourish even further, especially with the number of well-known names that have been relying on the platform throughout the months since its debut.

Leica To Increase Prices Across All Product Lines Starting April 2021

Leica has announced that it will be increasing the prices across all of its product line starting on 1 April 2021. According to a press release provided to website Red Dot Forum, the camera maker says that the new prices will vary by product, but will generally reflect on an average of 2% to 5% increase.

“Over the past year, the relationship between the US Dollar and Euro has suffered and we have absorbed these costs,” Leica wrote. “However, as this continues, we need to adjust our pricing in order to ensure pricing integrity across all Leica subsidiaries and to continue delivering the highest quality of products.”

According to the product price list provided by the company via Red Dot Forum, a majority of Leica lenses will be seeing an increase of US$100 to US$200 – with the exception of higher-end models such as the Summilux-M 90mm f/1.5 ASPH, which is listed to have an increase of US$700. The same can be said for the brand’s camera collection as well, with the likes of the Q and S series to see a price hike as low as US$100 and as high as US$1,000. Although Leica says the upcoming price hike will see a 5% increase at most, the list actually reveals jumps reaching up to 9% – albeit only affecting a small number of its products.

The camera maker noted that not all of its products will see a price increase next month. Recent releases such as the APO-Summicron-M 35 f/2.0 ASPH, Leica D-Lux 7 Street Kit, Q2 Daniel Craig x Greg Williams, and the APO Summicron-SL 28mm f/2.0 ASPH will be exempted from this.

The upcoming price adjustment is slated to apply across all markets simultaneously on 1 April. For a full list of products and their new prices, please refer to the Red Dot Forum link provided below. Before you ask, Leica Malaysia has confirmed with us that the price changes will be reflected on all of the brand’s products sold in the local market as well. However, it noted that the updated price list has not been made available just yet.

Microsoft Mesh Enables For Mixed Reality Collaborations Across Multiple Devices

Microsoft Mesh is a new mixed reality collaborative platform that was introduced during the company‘s recently held Ignite keynote. Unlike typical video conferencing or Virtual Reality (VR) approaches, the platform aims to allow multiple individuals on different devices to discuss and also interact with virtual or hologram objects together in a shared mixed reality space – be it for conferencing, exhibitions, teaching and so on. 

In this space, which combines both virtual and augmented reality instances, users are able to participate through Microsoft’s own HoloLens 2 headset, VR gear, computers and even mobile devices. Mesh is powered by the company’s renown Azure cloud computing platform in order to ensure a swift and seamless experience, especially for generating multiple and varying 3D resources as well as user avatars during a session in real-time.

Speaking of avatars, Mesh enables users to be represented by customisable 3D characters created from Microsoft’s AltSpaceVR social network, at least for now. It will eventually support “holoportation” avatars for Hololens 2 users, which allows them to appear as themselves during a session. Microsoft did not explain how this particular approach is achieved at this time. But judging by Hololens and Kinect lead developer Alex Kipman’s appearance during the Ignite keynote, it may involve a multi-camera setup and a green screen backdrop.

In terms of visual prowess, there’s not much to write home about for Microsoft Mesh’s current incarnation – as its capabilities are still limited to what is achievable through existing technologies. That being said, the platform still stands out in terms of remote interactivity between multiple users and its accessibility for different devices, especially if you do not own a Hololens 2 or a VR headset.

Microsoft is clearly aiming to evolve the platform further, as seen in the promotional video of Mesh – showcasing various proof-of-concept elements such as more lifelike “holoportation” avatars and integration with certain medical devices. Hopefully in due time, our future collaborative sessions will be on par with the Iron Man and Star Wars-like holograms and experience that is visualised in the video.

A preview version of Microsoft Mesh is now available through the company’s web store for those who wish to try out the platform for themselves. The same build of the platform has also been integrated in its AltSpaceVR social network for those using devices other than the Hololens 2. Microsoft added that Teams, Dynamics 365 and its other products will eventually include support for Mesh in the near future.