Talal Haj Bakry and Tommy Mysk (Mastodon, Hacker News, MacRumors, Mac Power Users):

WebKit-based browsers on iOS and macOS can be configured to route all web traffic through proxy servers, which is how Tor browsers on iOS and our own Psylo work. We found three WebKit features — DNS prefetching, WebAuthn Related Origin Requests, and WebTransport — that bypass the configured proxy and send traffic directly from the device, which exposes the user’s real network. The same leaks also affect Apple’s iCloud Private Relay.

[…]

It must be noted that VPNs are not affected, since they tunnel the device’s entire network traffic at the system level.

[…]

We’ve addressed all three leaks in Psylo 1.3.1[…] Passkeys and WebTransport have legitimate uses, so both can be re-enabled at any time through per-silo toggles. This keeps Psylo leak-free out of the box, while users who need one of these features on a given site can opt in explicitly, with a clear understanding of the trade-off.

Psylo:

In an ideal world, we’d report the issues to Apple, they acknowledge the issue, and ship a fix in a timely manner. Unfortunately, our past experience with Apple tells us that reporting this issue would involve months of delays, inconsistent communication, and in some cases, denying the issue’s impact entirely.

We weren’t willing to wait months, or upwards of a year, sitting on bugs that undermine the core privacy guarantees of Psylo and iOS Tor browsers while saying or doing nothing.

[…]

Should we knowingly leave our users exposed while waiting for a system-level fix? We didn’t think that was acceptable or fair to our users. Or should we quietly ship our own mitigations without telling anyone? We didn’t think that was acceptable either. Security fixes deserve transparency, especially when they involve tradeoffs.

Psylo:

Soon after we published the blog, we sent a link to the blog and demo website to Apple in a security report to make them aware of it. Now the report is already in the status “We’re planning to address the issue you reported.” and a fix is planned for Fall 2026 🤯🤯🤯

Mysk:

It used to take months and months to reach this status. We got there in less than 24h

Running to the press always helps…

Previously:

• Hide My Email Vulnerability Exposes Real Address
• No Bounty for Mysk
• Psylo Web Browser 1.0
• iCloud Private Relay White Paper

Update (2026-08-11): Ben Lovejoy (MacRumors):

A class action lawsuit accusing Apple of false advertising, misrepresentation, and fraud has now been filed by Clarkson Law Firm – the same lawyers who previously obtained a $250M settlement over the delayed launch of Siri AI.

Apple today released new betas of iOS 26.6.1 and iPadOS 26.6.1, which are available to developers and public beta testers. The iOS and iPadOS 26.6.1 betas come two weeks after the launch of iOS 26.6, an update that added Spotlight optimizations ahead of iOS 27.


iOS 26.6.1 and iPadOS 26.6.1 can be downloaded on eligible iPhones and iPads over-the-air by going to Settings > General > Software Update.

According to Apple's release notes, iOS 26.6.1 includes security fixes for the iPhone and iPad. The updates are available in a beta capacity only right now.

Apple is wrapping up work on iOS 26 because ‌iOS 27‌ is launching in just about a month. ‌iOS 27‌ is available to developers and public beta testers ahead of its public debut.

Update: This article previously said iOS 26.6.1 and iPadOS 26.6.1 had been released, but it turns out the updates are betas.
This article, "Apple Releases iOS 26.6.1 and iPadOS 26.6.1 Betas With Security Fixes" first appeared on MacRumors.com

Discuss this article in our forums

Após quase um ano disponível oficialmente para todos os usuários, o iOS 26 recebeu seu primeiro jailbreak, graças aos desenvolvedores por trás do popular Dopamine (o qual inclui os gerenciadores de pacotes Sileo e Zebra).

O desenvolvedor Lars Fröder, mais conhecido como opa334, lançou o Dopamine 3.0, o qual adiciona suporte a várias versões mais recentes do sistema operacional dos iPhones, incluindo o iOS 26.0 e o iOS 26.0.1 — entretanto, apenas em alguns dispositivos.

Mais precisamente, o jailbreak está disponível em aparelhos com os chips A12 Bionic ou A13 Bionic. Vale lembrar que, em junho, pesquisadores encontraram um bug no controlador desses processadores, o que permitiu modificar estruturas críticas desses chips — viabilizando o desenvolvimento do jailbreak em questão.

Ademais, o Dopamine 3.0 tem suporte a todos os dispositivos que executam o iOS 16.5.1 ao iOS 17.3.1, ampliando significativamente a gama de dispositivos e versões de software compatíveis.

Eis a lista de compatibilidade completa da nova versão:

• A12, A12X, A12Z, A13: iOS 16.6–18.7.1 e iOS 26.0–26.0.1
• A14, M1: iOS 16.6–17.3.1
• A15, A16, A17, M2: iOS 16.5.1–17.3.1
• A10: iOS 15.8.7–15.8.8 e iOS 16.7–18.7.1
• A10X: iOS 15.8.7–15.8.8 e iOS 16.7–17.7.11
• A9, A9X, A11: iOS 15.8.7–16.7.16
• A8, A8X: iOS 15.8.7–15.8.8

É possível baixar e obter mais detalhes do jailbreak na sua página do GitHub.

via MacRumors

[Update: See the retraction below.]

Terry Godier:

On the web, if I build something that works within the standards, it works. Whether people use it is up to them. On iOS, there is another question entirely: whether Apple decides it should exist.

[…]

In the past couple of years I’ve built three apps that were rejected from the App Store on various grounds.

[…]

A while ago I tried to submit an iOS app for Dark Hours, my astronomy website for normal people. It was rejected on the grounds that it was astrology.

[…]

I see countless ChatGPT wrappers with nearly identical icons and eye-watering subscriptions. I see astronomy apps requesting permissions that have nothing to do with looking at the night sky. My kids download games that interrupt play every few minutes to advertise the developer’s other subscription apps, each with their own $20–50 yearly plans.

Via John Gruber (Mastodon, Hacker News):

But if you actually look at Godier’s Dark Hours, for even just a few seconds, it is instantly obvious that it pertains to the science of astronomy and has absolutely nothing — zero, zilch, nada — to do with astrology.

[…]

Godier proceeded through a series of escalations up to the App Review Board and the Review Board responded that they determined the original rejection was valid because, I shit you not, “We understand that the app includes a live tarot reading feature.” Which isn’t even about astrology. It’s straight out of Kafka.

[…]

This isn’t just contrary to the benefit of developers, like Godier. It’s obviously contrary to the benefit of Apple itself, which should not just accept an app like Dark Hours, but celebrate it as an exemplar of the platform.

Mistakes happen. But in a functioning system mistakes get corrected, and mistakes as obvious as this one get corrected almost instantly and include a quick apology for the conflation. The App Store is not a functioning system.

Previously:

• Chrome Browser Default at the Top of the Mac App Store
• Apps for YouTube℠™®•!
• Struck Rejected From the App Store

Update (2026-08-10): John Gruber:

To the best of my recollection, this is the first post I’ve retracted in the 24 years I’ve been writing Daring Fireball. I hope it’s the last. I was misled, both overtly and through omissions[…]

[…]

The truth is, the app, as originally submitted by Godier to the App Store (under the name “Asterly”, not “Dark Hours”), was entirely dedicated to astrology, not astronomy, and did in fact include a “Tarot card of the day” feature amongst other occultist horseshit.

[…]

I wrongly took Godier at his word, both in his public blog post and in private iMessage correspondence yesterday, that the rejection wasn’t just merely debatable, but completely and rather preposterously ungrounded. Whether Godier ever submitted a build of “Asterly” to the App Store that contained no occult horseshit and only the hard-science astronomy features that were present in his “Dark Hours” website that was available for the last week, I don’t know. But I have no reason to believe that he did.

[…]

In an uncomfortable exchange between Beher and Godier on Bluesky, Beher pointed out that Godier’s Dark Hours had the same bug as Beher’s that routed people to “random fields in Mexico”. Earlier today, Godier took his web app down and redirected his darkhours.io domain to Beher’s darkhours.app.

I’m really unhappy about this, both for my role in spreading a false story and because I think it will hurt the cause of reforming App Review. I know there are many crazy rejections and have experienced some first-hand. This story was believable because of that well-known history and because Godier didn’t seem like a nobody trying to get attention—he was the developer of another highly regarded app. But now people are going to point to true developer stories and accuse them of being fakes, too.

Jeff Johnson:

Terry Godier has just published a so-called “Mea Culpa” blaming Claude for cloning an open source app and denying foreknowledge.

There’s no mention of or apology for how Godier deceived Gruber and the world about the astronomy/astrology App Store submission/rejection.

The blog post essentially confirms that this person cannot be trusted.

Update (2026-08-11): Colin Cornaby:

BOTH projects were generated using Claude. So you have two people - both generating the same app from the same training data - having a public throw down over who copied who.

[…]

The “original” developer does claim to know how to code - which wasn’t clear from my research. That still doesn’t necessarily mean the original app was the source of the training data. They both may be a result of the same training data.

Nick Lockwood:

Holy shit, so the “Claude plagiarised an app” story is actually “Claude produced the same app twice when prompted to do so by two separate developers” 😅

It’s not clear to me exactly how much each developer relied on Claude or which training data was used, but I wanted to note this angle of the story.

Update (2026-08-14): Rosyna Keller:

With all this talk of an astrology app being rejected by App Store review I’m reminded there’s still a flat Earth/astrology app on the App Store that actively leaks the location of all of its users.

After 326 days, iOS 26 has received its first jailbreak, thanks to the developers behind the popular Dopamine jailbreak.

Lars Fröder, better known as opa334, today released Dopamine 3.0, which adds support for a number of newer firmware versions, including iOS 26.0 and iOS 26.0.1 on devices with A12 or A13 chips.

Another major addition in today's release is support for all devices running iOS 16.5.1 through iOS 17.3.1, significantly expanding the range of devices and software versions compatible with Dopamine.

A full breakdown of supported devices and iOS versions can be found on AppleDB, a database that tracks jailbreak compatibility.
This article, "iOS 26 Gets First Jailbreak Thanks to Dopamine" first appeared on MacRumors.com

Discuss this article in our forums

Apple's software engineers are internally testing iOS 26.6.1, according to the MacRumors visitor logs.

Apple already released macOS 26.6.1 yesterday with a fix for a security vulnerability affecting the Screen Sharing app. iOS 26.6.1 would likely include bug fixes and/or security fixes as well, should Apple move forward with releasing the update in the coming days.

For example, iOS 26.6 appears to have introduced a bug in the Shortcuts app, so hopefully that would be addressed in iOS 26.6.1.
This article, "Apple Testing iOS 26.6.1 Update for iPhones" first appeared on MacRumors.com

Discuss this article in our forums

Anurag Chawake:

Apple faces a $32.5 billion lawsuit over how its Photos app scans and stores faces. A federal judge cleared the case to proceed as a class action late last month, allowing millions of Illinois iPhone owners to join.

The case has been years in the making, and Apple has fought to shut it down at nearly every turn. Now it heads back to the court, with the company’s privacy practices on trial.

[…]

Court records have shown that the update applies to users with iCloud Photos turned on. Those accounts also need to use at least 10GB of storage and contain at least 5,000 photos and videos. Plaintiffs say all this amounts to collecting biometric data without consent, putting Apple squarely at odds with Illinois law.

Again, I find it odd that features are apparently gated based on the capacity of your iCloud account rather than the available storage.

Malcolm Owen:

The lawsuit accuses Apple of collecting biometric data without user consent in the Photos app, reports The Times. It is alleged that Photos uses facial recognition technology to scan individuals who appear in images, creating a “faceprint” for each person in the photo library.

After collecting enough samples, an algorithm is allegedly used to identify the iPhone user. That data is then stored on the iPhone within the Photos app.

I don’t see what the issue is here. My understanding is that it only uploads vectors after you’ve opted in by enabling iCloud Photos and manually assigning names. Also, the vectors don’t seem like the sort of biometric information that the law was meant to protect.

Brian Webster:

Assuming things are working properly, what should happen is that the people you have specifically named and the photos you have specifically verified sync their info via iCloud. However, the actual face detection for the rest of the photos is done on a per device basis and is not synced via iCloud, primarily for security/privacy reasons.

So, when you first set up a new device, it will pull down the names and info for the photos where you have identified a particular person, but then it still needs to go through the entire library on-device, identify the faces in each photo, and compare them to the synced information to tell which person is in which photo. So once it’s done, you should end up with mostly the same photos identified as each person, but each device still needs to do its own face detection locally.

Juli Clover:

Google Health (previously the Fitbit app) collects fitness, sleep, and wellness data from a connected wearable device. Steps, distance traveled, heart rate, sleep, and more can now be added to Apple Health. As noted on Reddit, some data such as HRV doesn't transfer over.

[…]

Syncing can be enabled after downloading the update by selecting Connections, choosing Apps and services, and then adding Apple Health.

My wife is a longtime Fitbit user. A few weeks ago, some family and friends started a friendly competition to see who could get the most steps. They’re all Fitbit users, too. Then she wanted to start comparing step counts with me, but I have an Apple Watch. I thought this would be no problem because the Health app has a sharing feature, and Fitbit and HealthKit have both been around forever. I was shocked to learn that there has never been any syncing. I don’t really understand the reason for this, as it seems like it would make the Fitbit more valuable.

It looks like the syncing part is now solved, but we still can’t automatically compare our steps. We’ve both tried inviting each other to share step counts and some other metrics multiple times over the last several weeks, and it has never worked. Either the invitation doesn’t arrive or the app just spins forever when trying to accept it.

Previously:

• Google Acquires Fitbit

Hartley Charlton (The Verge):

Apple briefly removed Telegram from the App Store on Monday night after a review found content that violated its guidelines against child sexual abuse material (CSAM), but restored the app a short while later, according to Reuters.

It seems like this was a symbolic gesture. Removing the app didn’t affect any of the customers who had already downloaded it. Probably none of them saw the image. And restoring the app doesn’t mean that it’s completely free from CSAM—probably none of the major platforms is. It just means that Telegram did the obvious thing after the violation was reported, which presumably they would have done, anyway.

Jeff Johnson:

They removed an entire app for ONE app user???

And before even contacting the developer? Telegram banning the account is what actually prevented users from potentially seeing the CSAM. Apple’s action seems like either a mistake or trying to send them a message.

I would note, by the way, that the Telegram app was apparently never removed from the Mac App Store. Which goes to show how little Apple cares about the Mac App Store.

Telegram:

I’m sure this stance will be applied equally to all other apps in the store, in the future right? @Apple

Pavel Durov (Telegram, MacRumors):

Because Telegram quickly removes illegal content from public groups using all kinds of moderation tools, the attacker had to resort to a technical trick. He inserted AI-modified illegal content by editing an old message in an active group chat. As a result the content was effectively hidden from the group’s members, preventing them from seeing/reporting it.

The attacker was a takedown extortionist: someone who demands ransom from group owners in exchange for not targeting their communities. These extortionists use automated accounts to plant illegal content in public groups and then report it directly to Apple, attempting to trigger the removal of legitimate communities whose owners refused to pay them.

[…]

Extortionists have found a way to manipulate Apple into overreacting. Apple removed Telegram from the App Store before contacting us. This creates a potential systemic risk for every mobile app that hosts user-generated content. If an app used by more than a billion people can be removed from the App Store without prior warning, any app can be.

Marcus Mendes:

During the time the app was unavailable, many speculated that the move was politically motivated, or perhaps in response to the recent discovery that Telegram has allegedly been using an obfuscated private UIKit API to animate its emoji picker.

It’s sad but kind of hilarious that both of these so disparate theories were considered possible. Durov really does have political enemies, and Apple really does seem to have it out for Telegram. But, also, using private API to animate emojis totally seems like something that Telegram would do and that Apple would overreact to.

Previously:

• Telegram Founder Arrested
• Telegram Stuck in App Review
• Apple Forces Telegram to Close Channels Run by Belarus Protestors
• Apple Hasn’t Blocked Telegram App, But Won’t Allow Updates

Update (2026-08-06): Matt Burgess (Hacker News):

Over the last nine months, Mark Zuckerberg’s Meta has run dozens of paid ads that include explicit AI-generated child sexual abuse material (CSAM) and images of minors alongside sexually suggestive statements, according to details of the ads shared with WIRED. The ads, which in some cases reached several thousand accounts, were targeted at people living in the United States, United Kingdom, and more than a dozen European countries.

This is much worse than what happened with Telegram, yet Apple didn’t overreact.

There’s also the Twitter/Grok case.

Previously:

• San Francisco Demands Removal of Nudify Apps

The iOS 27 beta has overall been a very positive experience for many beta testers, but if you have installed iOS 26 beta onto your iPhone or iPad and decided that it’s no longer for you, perhaps due to some incompatibility, critical bug, or other issue, then you can downgrade your iPhone from iOS 27 ... Read More

The post How to Downgrade from iOS 27 Beta to iOS 26 appeared first on OS X Daily.

Marcus Mendes:

Last April, Brazilian officials notified Apple and Google over an alleged lack of age controls in betting apps on their respective app stores.

9to5Mac:

Brazilian users browsing the App Store rankings in categories such as Navigation, Travel, and Weather have noticed a growing number of poorly made games appearing among the top results, many of them featuring AI-generated illustrations of animals as their app icons. Many carry an AL age rating, making them available to users of all ages, including children.

As it turns out, these are so-called jacket apps, which are just a front for hidden betting and gambling apps.

[…]

The repository also includes explicit instructions intended to prevent the apps from being flagged as suspicious during App Store review. These include giving each app uniquely named startup and remote-configuration codes, making it harder for reviewers to identify them as part of the same group.

Ironically, the App Store’s own recommendation system appears to have little trouble grouping the apps together, as the “You Might Also Like” section on several of these apps points users toward other suspicious apps more frequently than they point to genuine apps.

John Gruber (Mastodon):

Obviously the main problem is that these apps disguise themselves Trojan Horse-style, and slip through App Store review undetected. I don’t think it’s reasonable to think App Store review could catch every attempt at this sort of thing though — if the horses are disguised well-enough, some of them are going to slip through. That’s actually fine.

I agree that it’s unreasonable to expect App Review to catch all those, but then Apple should not be pretending that it can. This was all obvious from day one. The public perception of App Review is completely at odds with what it actually can and does do.

But the first example 9to5Mac cites isn’t well disguised at all. What sense does it make that “PotatoPlot Puzzle” — a game featuring a rabbit potato farmer — is a weather app? How is that not a red flag right there?

[…]

I always mention that the point of such a squad shouldn’t be to make the App Store 100 percent scammer-free — which I believe is an impossible goal that would set the team up for failure. The point should be only to make the App Store free of successful scams. Focus on the most popular apps and the most lucrative apps.

The App Store is more than 18 years old. The idea of patrolling the top charts probably occurred to Apple before it even shipped. They just don’t want to do it.

Nick Lockwood:

Apple only took 24 hours to approve my iOS app update that crashed instantly on launch. Such a blessing to have that extra level of reliability and security that only a manual review process can provide 🙏

Incidentally, the crash was due to a missing dylib - something that could easily have been detected by the automated scan process, if only that scan were designed to protect users’ and developers’ interests instead of Apple’s.

Kyle Hughes:

There is simply no other way to maintain a modern, healthy software ecosystem without making sure that apps that have been around for 7 years and 20 major versions can’t get a build looked at within 48 hours. There’s no other way. Probably needs to be longer, honestly.

I had to file an Expedited Review Request because this update is a legitimate emergency. Four hours later, App Review rejected the build because they didn’t follow the first sentence of the testing instructions (which haven’t changed in 7 years). Back to Waiting for Review! There’s no other way.

Previously:

• Chrome Browser Default at the Top of the Mac App Store
• Sparrow Wallet Lawsuit
• Sirius Pomodoro
• The App Store Scammer Strikes Back
• Brazil: App Marketplaces and External Payments
• Scam Authenticator App Steals QR Codes
• Sketchy ChatGPT App Soars Up App Store Charts
• Gambling Ads on App Store Product Pages
• Schneier on Sideloading
• The App Store Isn’t Catching the Most Egregious Scams
• Scammy KeyWatch and Trezor Apps
• Widgetsmith and The Case of the Missing App Store Bunco Squad
• Big Fish Casino
• Apps Removed in Ban of Gambling-Related Apps

Update (2026-07-30): Kyle Hughes:

We got rejected in the Expedited Review again, this time for not having an account deletion feature. Except we do, and it’s one button press away from the screen that the reviewer was on. And it has always existed. Is this how the expedited review works? Malicious incompetence?

Update (2026-07-31): Kyle Hughes:

If you were wondering how long one of the “you can ask us to approve this build and can fix this issue in the next release” App Review errors takes to resolve when you’re in the Expedited Review Queue… me too! So far, 18 hours. (Ignoring the fact that we have the feature the rejection was for.)

Kyle Hughes:

Certainly it means “within a week,” right? “Within a month,” please? “In your lifetime,” I can only hope.

Apple (Hacker News):

Apple today announced Apple Upgrade, a new product leasing program provided by Klarna for iPhone, Apple Watch, Mac, and iPad available on the Apple Store online, in the Apple Store app, and at Apple Store locations in the United States.

[…]

Apple Upgrade offers 12- and 24-month leasing options for iPhone and Apple Watch, and 24- and 36-month leasing options for Mac and iPad. Leasing prices start as low as $17.99 per month for iPhone, $11.99 for Apple Watch, $24.99 for Mac, and $11.99 for iPad.

The $17.99/month gets you a base model iPhone 17e for 24 months. This is a total of $431.76 vs. $599 for buying a new one today, but then you have to make a decision:

At the end of the lease term, customers can upgrade their device to the latest generation, purchase it with a one-time payment, or simply return it and exit the program.

I used to get a new phone every other year, but I kept my iPhone 12 mini for three years and will likely keep my 15 Pro for four years. In addition to making it easier to buy phones without the up-front payment, Apple is probably hoping this will encourage more customers to get back on the two-year cycle. Given the choice between continuing a small monthly payment and getting a new phone or making a larger payment to keep their old phone, many may opt to upgrade.

Juli Clover:

The payoff amount is the difference between what was paid during the leasing period and the retail price of the device, minus any remaining trade-in credits. Klarna is not charging a fee for the leasing program, so an iPhone that’s $1,099 can be leased and then purchased for $1,099 with no extra cost beyond taxes.

I guess this means that, for a bit of hassle, you can essentially buy the device for the list price at 0% interest.

Lease participants can opt to end a lease early and return a device, but Apple says there may be “substantial fees” for terminating a lease before the end of the term.

[…]

Customers must upgrade, end the lease, or purchase the device at the end of the lease term. If that doesn’t happen, the lease converts to a month-to-month lease for up to six months.

[…]

Damage to an iPhone, losing an iPhone, or having an iPhone stolen could incur fees.

Aisha Malik:

The rollout of the program comes as Apple has been struggling with supply chain issues related to “RAMageddon,” which refers to the industry-wide shortage of memory chips that is driving up the price of hardware. As a result, Apple recently announced price hikes for its Mac and iPad lineups, sparing the iPhone for now. The new Upgrade program seems to be Apple’s answer to making those higher prices more manageable for consumers.

Customers can manage their lease directly in the Klarna app, where they can view their billing schedule and track remaining payments.

With the launch of the new Upgrade program, Apple is discontinuing its existing in-house financing and installment programs in the U.S., which include the iPhone Upgrade Program and iPhone Payments.

John Voorhees:

For iPhones, you have to have a carrier and can’t use a prepaid plan.

[…]

For iPads, the starting prices range from $12.99/month to $24.99/month, Macs range from starting prices of $24.99/month to $48.99/month, and the Apple Watch ranges from starting prices of $11.99/month to $47.03/month. But again, these are just starting prices. You can configure a fully loaded 16-inch MacBook Pro that is just under $230/month, and it won’t include AppleCare.

As a point of comparison, under the current program that is being discontinued, I pay $69.50/month for an iPhone 17 Pro Max, but I have a 512GB model, so my lease price for the same phone would be $40.83/month, significantly lower, but keep in mind that doesn’t include AppleCare+, which would add $13.99/month or $139/year for that iPhone. On a monthly basis, that puts a new iPhone 17 Pro Max with 512GB of storage and AppleCare+ at just under $55/month. Still a superior deal, but not nearly as good as the landing page might initially lead you to believe.

[…]

If you lease accessories for your device, those don’t have to be returned. Why? Presumably because they have no value to Apple or Klarna.

Marcus Mendes:

9to5Mac can now confirm that code found in the iOS 27 beta appears to reveal a broader system for managing a financed iPhone, including the ability to restrict apps and services when payments are missed.

The code describes a system called App Managed Features, which allows an authorized financing or provider app to enroll an iPhone and perform ongoing status checks.

If the contract is no longer in good standing, Apple’s system services can place the iPhone in “Restricted Mode,” which blocks access to most apps until the payment or contract issue is resolved, while keeping a small set of apps available.

I bet there are some governments that would love to commandeer that for their own purposes.

Finally, the new framework also introduces a new type of activation lock called “Partner Finance Lock,” which is meant to prevent users from erasing, reselling, or stripping a restricted device for parts.

Previously:

• Apple Hardware Price Hikes
• Mac Upgrade Program
• AppleCare One
• Getting a New iPhone

Update (2026-07-29): Emma Roth:

Apple says it won’t limit the capabilities of devices leased through its new Upgrade program if you miss a payment. In an emailed statement to The Verge, Apple spokesperson Brian Bumbery says, “There will be no restricted mode and/or there will be no limitations put on device functionality due to missed payments or default with the Apple Upgrade program.”

So then what is the code that 9to5Mac found for?

Marcus Mendes:

One possibility is that it was developed for financing programs offered by carriers, retailers, or other partners outside Apple Upgrade, potentially including markets where device restrictions are already used to enforce installment agreements.

See also: Mac Power Users, TidBITS, MacRumors, Slashdot.

Update (2026-07-30): Ryan Christoffel:

Here’s what every eligible product costs with Apple Upgrade.

Emma Roth:

Here’s a breakdown of how much you’d pay for the devices included in the Apple Upgrade program, as well as how much more you’d pay to purchase the devices outright at the end of your lease[…]

[…]

Klarna doesn’t say what will happen if you don’t pay the outstanding balance.

[…]

During the lease, Klarna owns your device. You’re responsible for any damage, and will get charged a fee if you don’t return the device in “good condition.” That’s why Apple is encouraging customers to sign up for an AppleCare subscription that could drive up the cost of your lease even more.

[…]

Apple also notes that you’ll have to pay an early termination fee if you want to return the device before your lease ends or if you want to upgrade early.

Eyes:

If you lose the leased phone you have to pay Klarna for the phone plus early lease cancellation fees.

D. Griffin Jones:

The Apple Card Monthly Installments aren’t going away, so I’ll keep using that.

[…]

When you finance using the Apple Card Monthly Installments, you pay a fixed amount to own your device. There are no savings here — aside from the 3% cashback — the monthly payment is the purchase price divided by either 12 or 24 months.

John Gruber:

When you lease an iPhone through Apple Upgrade, you need a cellular account on one of the big three U.S. carriers: AT&T, T-Mobile, or Verizon. That kind of stinks, and I’m not quite sure I understand why.

Eyes:

The iPhone upgrade program always required it. For a time you could do Apple Card installments without a carrier if you bought it online but never in store. I assume there is carrier pressure to tie the phones to the carriers. Activating iPhones on carriers was a key metric at the Apple Store.

Previously:

• Boom Mobile Restructuring

Update (2026-08-03): John Gruber (Mastodon):

Credit-risk assessment is seemingly part of it. There’s a lot of fraud in iPhone purchases specifically and cell phone service generally. The big three carriers do a significant amount of risk assessment before letting you open a new postpaid account; that you have an active account with one of them is a signal that you’re not trying to lease an iPhone using phony credentials in order to sell it.

But the bigger reason is the complex nature of the contracts between Apple and each of the big three carriers.

Juli Clover (iOS/iPadOS release notes, security, enterprise, developer):

iOS 26.6 and iPadOS 26.6 include security fixes for the iPhone and iPad. The updates also optimize the Spotlight index in preparation for iOS 27 and iPadOS 27.

There are a lot of security fixes.

Rosyna Keller:

Yay, iOS 26.6 is out. And it fixes a privacy leak I filed in April that allowed malicious apps/Ad SDKs to track a user across apps.

Previously:

• iOS 26.5.2 and iPadOS 26.5.2

Update (2026-07-29): Kirk McElhearn:

Yesterday’s iOS update fixed the battery problem that I’ve had for the past couple of months. My iPhone 16 Pro Max would not make it a full day on a single charge.

Make a quick tweak to the settings on your iPhone, and a Bluetooth speaker will never again steal the audio from your AirPods.

(via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Joe Rossignol (PDF):

The complaint alleges that Apple violated California’s Consumers Legal Remedies Act and other laws by failing to adequately review and monitor apps distributed through the App Store, despite marketing it as “a safe and trusted place to discover and download apps.” Due to these assurances in Apple’s marketing, the complaint said the plaintiffs trusted that a Sparrow Wallet app they downloaded from the App Store on iOS was legitimate, when in reality it was a fraudulent spoof designed to steal Bitcoin from users.

Sparrow Wallet is only available on Windows, macOS, and Linux. The popular Bitcoin wallet is not available on iOS, but scammers have released fake lookalike apps in the App Store that can trick users into giving up control of their funds.

[…]

Even when victims reported fraud, the lawsuit alleges that Apple often took little to no action, and it says other fake Sparrow apps remain in the App Store.

Sparrow Wallet developer Craig Raw has publicly addressed Apple’s slow response to multiple fake versions of his app appearing in the App Store. In a January 2024 social media post, for example, he said “there is still a scam ‘Sparrow Wallet’ app on the @Apple App Store, despite myself and others having reported it weeks ago.”

Craig Raw:

My attempt to protect users from scam apps on the @AppStore has gotten my Apple Developer account flagged for termination - ironically, for “dishonest activity”.

[…]

I’m the developer of the real Sparrow Wallet, a desktop app, and I hold the registered US trademarks for the name and logo. I have publicly warned @Apple and the community about these fake apps from early 2024, but they keep appearing.

The app @Apple flagged was a placeholder that was never published. Its only purpose was to warn users that Sparrow is desktop-only and that other “Sparrow” apps aren’t mine. This approach may have been misguided, but there was nothing dishonest about it.

Joe Rossignol:

In response to our request for comment, Apple said it has taken swift action to remove any apps impersonating Sparrow Wallet[…] Apple says it takes immediate action against apps that do not comply with its guidelines.

Previously:

• Hide My Email Vulnerability Exposes Real Address
• Sirius Pomodoro
• The App Store Scammer Strikes Back
• Sanctioned Entities Slip Through App Store Controls
• Some of the Apps in the App Store
• Fake Bitcoin Wallet in the App Store
• Fraudulent Rabby Wallet App

Update (2026-07-28): Sarah Perez:

The complaint targets one of Apple’s longtime competitive arguments: that its tight control over its App Store makes its platform safer than those offered by its rivals. The company has used this claim to push back against deregulation of the app ecosystem, including third-party app stores and sideloading.

“As part of a sustained marketing campaign, Apple has positioned itself, its products and services, as offering a level of security and trustworthiness superior to any competing technology company,” the new filing states. “This includes assurances about the safety of applications distributed through its App Store. By retaining exclusive control over which apps are permitted on Apple devices, Apple has structured its platform to ensure that consumers depend entirely on its promise of safety and reliability,” it reads.

With third-party app stores, there would be an incentive to do better vetting than Apple, and with sideloading it would be clear that the app was not being downloaded from sparrowwallet.com.

Update (2026-07-29): Jeff Johnson:

What struck me about Apple’s response is that it places the burden of curating the App Store on developers and users rather than taking responsibility for it. After all, Apple reviews every version of every app before it can be published to the App Store. If Apple is curating the App Store, then why do scams have to be reported and removed? One wonders how the scams get past Apple review in the first place, and even if Apple review “is not perfect” (a gross euphemism), how the second line of defense, Apple employees patrolling the App Store for scams that the review team missed, also fails. The burden of App Store curation should not fall to me, a lone indie developer.

Apple’s response also ignores that the indie developer did report the scams, multiple times.

Previously:

• Hidden Gambling Apps in Brazilian App Store

Apple has released iOS 26.6 for iPhone, along with iPadOS 26.6 for iPad. The software updates are focused mostly on security enhancements for the devices, and there is also some included preparations for the upcoming larger iOS 27 and iPadOS 27 releases coming later in the year. Separately, Apple has also released MacOS Tahoe 26.6 ... Read More

The post iOS 26.6 Update Released for iPhone & iPad appeared first on OS X Daily.

iOS 26.6 brings no major new features, but quietly strengthens Apple Maps security and adds an alert for users who reach the blocked contacts limit.

(via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

The iOS 26.6 release date is likely next week! Here's what to expect when Apple introduces the next new iPhone software update.

(via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

Om Malik (2023):

One of the key advantages of MacWhisper, as it utilizes the Whisper technology, is its superior accuracy in transcriptions compared to other services I have used. I was an early adopter of Rev.com and eventually switched to Otter.ai, for which I paid approximately $100/year. However, I have since canceled my subscription.

[…]

After comparing the audio transcripts from MacWhisper and Otter, I found that while Otter’s formatting is superior, there is hardly any difference in the transcriptions. I started with the free model, which was sufficient for my needs, and eventually upgraded to the large models. Nowadays, I primarily use MacWhisper to transcribe my voice memos, which I then import into Lex.Page.

Bon Adamson:

Whisper, which is made by OpenAI, has the distinct advantage of allowing you to transcribe audio in almost any language you may ever need to. For the time being, Otter can only transcribe English. The benefits of better accuracy and accurate punctuation that the service already holds over Siri hold up across other languages as well. If you’re looking to transcribe non-English audio accurately, Whisper is definitely the best option available on Mac.

Dan Moren:

By taking advantage of OpenAI’s Whisper framework, Audio Hijack can now take any audio it’s recording and generate a text transcript. While this process was possible before—see Jason’s lengthy post about his workflow—it required a lot of fiddling and several different tools to accomplish; it’s certainly a lot easier to simply drop Audio Hijack’s block into your existing session. If you record multiple sources, it can even appropriately label each one—though if you record multiple people via one input, say the other end of a Zoom call, it can’t distinguish between the various participants.

Inscribe (2026, Hacker News):

Apple’s new SpeechAnalyzer is the most accurate on-device speech engine we tested. It beat every Whisper model we ship, including Whisper Small, on both the clean and the noisy half of LibriSpeech, while running roughly three times faster than Small. And the API it replaces, SFSpeechRecognizer, came last on clean speech: behind even Whisper Tiny, a 40MB model.

[…]

The new API cuts word error rate by 3.5 to 4x on the same audio: from 9.02% to 2.12% on clean speech, and from 16.25% to 4.56% on noisy speech. There is no accuracy trade-off to weigh; the new API wins everywhere we measured, and it produces punctuated, cased text where the legacy engine’s output is rougher.

[…]

All five engines ran comfortably faster than real time: between roughly 12x and 40x on the M2 Pro, meaning an hour of audio transcribes in about 1.5 to 5 minutes on-device. SpeechAnalyzer was about 3x faster than Whisper Small per second of audio while beating it on accuracy.

Yuki:

SpeechAnalyzer’s ReportingOption.fastResults reads like a knob you’d reach for when you want to trade power for latency. That framing is what cost me the afternoon.

[…]

If a recording matters — and in a notes app, a lost meeting is the worst thing that can happen to a user — then the container you write while recording has to be PCM in CAF. Not m4a, and not AAC-in-CAF either.

[…]

AVAudioEngine’s inputNode silently ignores your device selection

[…]

I wanted summarization to run on-device. Everything else in Nib’s transcription path does, the audio never leaves the machine, and it would have been a much cleaner story to tell.

But 4,096 tokens for the Foundation Models isn’t enough.

Previously:

• Apple Foundation Models in appleOS 27
• WhisperPad Rejected From the Mac App Store
• Overcast Transcripts
• Generated Transcripts in Pocket Casts
• Apple Podcasts Transcripts
• Dictation and Predictive Text in macOS Sonoma and iOS 17
• macOS vs. Dragon Dictation