MacRumors

After retaining the #3 spot on the Fortune 500 list for the past two years, in 2018 Apple has dropped one place and now sits at #4 on the list of the top U.S. corporations based on gross revenue. Apple's displacement on the list came due to Exxon Mobil rising from #4 in 2017 to #2 in 2018.

The full top five spots were Walmart at #1, Exxon Mobil at #2, Berkshire Hathaway at #3, Apple at #4, and UnitedHealth Group at #5. Other technology companies on the list include Amazon at #8, AT&T at #9, Verizon at #16, Alphabet at #22, and Microsoft at #30.

Fortune broke down Apple's spot on the list, mainly citing the "overall saturation of smartphones" as a potential reason for the company's inability to rise higher in the rankings. Fortune discussed similar problems for Apple in the company's profile last year, stating at the time that "Apple finally appeared to hit a wall" in reference to its reliance on iPhone sales.

Apple took a small step back, from No. 3 to No. 4, despite a 6% gain in annual sales, but it led the way in profits with more than $48 billion in net income. In short, the Apple juggernaut continues at tremendous scale and despite the overall saturation of smartphones, which make up the vast majority of the company’s sales and profits. In an unusual move, Apple introduced three new phones, the upgraded iPhone 8 and 8 Plus, as well as the redesigned iPhone X (pronounced “ten”), powered by facial-recognition technology. Services likes Apple Pay and Apple Music continued to rise too.

Going back eight years, Apple's previous rankings include 5th place in 2015 and 2014, 6th place in 2013, 17th place in 2012, 35th place in 2011 and 56th place in 2010. This year marks 24 years that Apple has been on the Fortune 500 list, with $229.2 billion of revenue and $48.3 billion of profits in the 2017 fiscal year. Although it lags behind the companies in revenue, Apple still beats the top three Fortune 500 companies in terms of annual profits, with Walmart at $9.9 billion, Exxon Mobil at $19.7 billion, and Berkshire Hathaway at $44.9 billion.

ZDNet reports that a server used by an app for parents to monitor their teenagers' phone activity has leaked tens of thousands of login credentials, including the Apple IDs of children.

The leaked data belonged to customers of TeenSafe, a "secure" monitoring app for iOS and Android that allows parents to view their child's text messages and location, call history, web browsing history, and installed apps.

The customer database was reportedly stored on two servers hosted by Amazon Web Services, where it remained unprotected and accessible without a password. The discovery was made by a U.K.-based security researcher specializing in public and exposed data, and the servers were only taken offline after ZDNet alerted the California-based company responsible for the TeenSafe app.

"We have taken action to close one of our servers to the public and begun alerting customers that could potentially be impacted," said a TeenSafe spokesperson told ZDNet on Sunday.

The information in the exposed database included the email addresses of parents who used TeenSafe, the Apple ID email addresses of their children, and children's device name and unique identifier. Plaintext passwords for the children's Apple ID were also among the data set, despite claims on the company's website that it uses encryption to protect customer data.

Compounding the lax security is the app's requirement that two-factor authentication is turned off for the child's Apple account so that parents can monitor the phone without consent. This means a malicious actor could potentially access a child's account using the login credentials that were stored on the exposed server.

TeenSafe counts over a million parents as customers, although the database was reportedly limited to 10,200 records gleaned from the past three months of customer usage. The company said it would continue to assess the situation and provide additional information to customers as soon as it became available.

Google recently introduced a new Google News app with an entirely updated interface and a range of new features that put it on par with Apple's own News app, including a "For You" recommendation section and "Full Coverage" headlines that present a story from multiple angles.

We went hands-on with Google News to check out the new features and to see how it compares to Apple News, the built-in news app that's available on the iPhone and the iPad.

Google News does, however, have an additional section for quickly selecting news categories like U.S., World, Business, and Technology.

Both apps feature a "For You" section based on personalized recommendations. Apple's draws in information from the categories and news sites you choose to follow, while Google presents a selection of stories that become more tailored over time based on what you choose to read and what you favorite.

In each app, you can search for different news sites, blogs, and topics and add them to your coverage lists to impact "For You." Google's For You section highlights a list of five top stories and then provides supplemental stories at the bottom of the list, while Apple organizes For You into top stories, trending stories, top videos, and then recommendations based on channels and topics.

Apple News features a "Spotlight" section that features curated news selected by Apple News Editors, which highlights interesting news topics that you might not have otherwise seen.

Google News doesn't have a similar feature, but it has its own unique offering in the form of the "Headlines" section that aggregates the top news stories at the current time. In the headlines section, major stories have a "Full Coverage" option that lets you see the same story from multiple news sites so all of the angles are covered.

Google also has a dedicated "Newsstand" tab that lets you subscribe to paid and free news sources and a range of magazines using payment information stored in your Google Play account. Apple doesn't have a similar feature right now, but such an option is said to be in the works following its acquisition of magazine subscription service Texture.

Have you checked out Google News? Do you prefer it over Apple's own news app? Let us know in the comments.

A group of App Store developers calling themselves "The Developers Union" today published an open letter to Apple asking the company to commit to allowing free trials for apps and a "more reasonable revenue cut."

The group says that it is first aiming to get Apple to implement free trials for all apps in the iOS and Mac App Stores by July 2019, with plans after that to advocate for other changes.

We believe that people who create great software should be able to make a living doing it. So we created The Developers Union to advocate for sustainability in the App Store.

Today, we are asking Apple to commit to allowing free trials for all apps in the App Stores by the tenth anniversary of the App Store this July. After that, we'll start advocating for a more reasonable revenue cut and other community-driven, developer-friendly changes.

The initiative is led by Brent Simmons (MarsEdit, Vesper, and NetNewsWire creator), Jake Schumacher (App: The Human Story documentary maker), Loren Morris (product designer), and Roger Ogden (software designer).

The Developers Union is not a "trade union" in the traditional sense of the word, but it is aiming to bring developers and supporters together to advocate for App Store changes.

In an interview with WIRED, the team behind The Developers Union said the aim is to gain a thousand members this week and 20,000 by early June, when the Worldwide Developers Conference takes place.

"It's a non-union union in a way," Morris, the product designer, said when reached by phone. "I'm not super interested in creating a traditional union; I'm more interested in bringing the voice of indies back into the spotlight and this is a step in that direction."

Free trials for apps in the Mac and iOS App Stores have been something that developers have wanted implemented for years. Right now, apps that offer subscriptions are able to provide customers with free trials before requiring payment, but for apps that do not have a subscription offering, there is no way for a free trial to be offered.

This is a major downside for apps that are on the more expensive side that people might not want to purchase without trying first, and it has been a major issue for Mac App Store developers in particular.

The Developers Union is hoping to persuade Apple to expand free trials to all apps, not just those that offer a subscription-based service. Free trials also must include an authorization for payment at the end of the trial, something developers would also like to see eliminated.

Revenue sharing, another topic the group hopes to broach with Apple, could be trickier than convincing the company to implement a free trial feature. Apple currently receives a 30 percent cut of all revenue developers earn from the App Store, and the App Store makes up a huge portion of its services business.

Apple has, however, made some tweaks to its revenue split in recent years. For subscription apps where a customer maintains a subscription for more than a year, developers are entitled to an 85/15 split, with Apple taking a 15 percent cut rather than a 30 percent cut.

The Developers Union has not yet outlined specific changes it would like to see to Apple's revenue sharing scheme as the focus right now is on recruiting new members and pushing the free trial agenda.

At the current time, just over 60 apps and 50 people and are supporting The Developers Union, but more developers are likely to join as word spreads. Both developers and non-developers can sign up on the Developers Union website to support the initiative.

Robert Xiao, a computer science student at Carnegie Mellon, recently discovered a vulnerability in LocationSmart's website that made the real-time location of millions of phones readily available to anyone with the knowhow.

For background, LocationSmart is a company that collects location data of mobile customers from major carriers, including Verizon, AT&T, Sprint, and T-Mobile in the United States, and then sells it to other companies for a range of purposes, including compliance, cybersecurity, and proximity marketing.

Up until the vulnerability was discovered, LocationSmart offered a trial webpage that allowed anyone to enter their phone number, confirm the request via SMS or a phone call, and view their approximate real-time location.

In a blog post, Xiao said the bug essentially involves requesting the location data in JSON format, instead of the default XML format:

If you make the same request with requesttype=locreq.json, you get the full location data, without receiving consent. This is the heart of the bug. Essentially, this requests the location data in JSON format, instead of the default XML format. For some reason, this also suppresses the consent (“subscription”) check.

Upon discovering the vulnerability, Xiao immediately contacted the US-CERT to coordinate disclosure, and shared details with Brian Krebs, who published a story with further details on his blog Krebs on Security.

Xiao told Krebs that he was able to obtain the approximate longitude and latitude of five different people who agreed to be tracked, coming within 100 yards and 1.5 miles of their then-current locations, all in a matter of seconds. LocationSmart plotted the coordinates on a Google Street View map.

"I stumbled upon this almost by accident, and it wasn't terribly hard to do," Xiao said. "This is something anyone could discover with minimal effort. And the gist of it is I can track most peoples’ cell phone without their consent."

Xiao said his tests showed he could reliably query LocationSmart's service to ping the cell phone tower closest to a subscriber's mobile device. Xiao said he checked the mobile number of a friend several times over a few minutes while that friend was moving. By pinging the friend's mobile network multiple times over several minutes, he was then able to plug the coordinates into Google Maps and track the friend’s directional movement.

It's not clear exactly how long LocationSmart has offered its trial service or how long it has been vulnerable. Krebs linked to an archived version of the website that suggests it dates back to at least January 2017.

When reached for comment via phone, LocationSmart's founder and CEO Mario Proietti told Krebs that the company was investigating.

"We don't give away data," Proietti said. "We make it available for legitimate and authorized purposes. It's based on legitimate and authorized use of location data that only takes place on consent. We take privacy seriously and we’ll review all facts and look into them."

A spokesperson for AT&T told Krebs that the carrier "does not permit the sharing of location information without customer consent or a demand from law enforcement," while Verizon, Sprint, and T-Mobile all pointed towards their privacy policies.

LocationSmart was already in the news prior to this relevation. The New York Times last week reported that Cory Hutcheson, a former Missouri sheriff, was charged with using a private service called Securus, which obtained data from LocationSmart, to track people's phones without court orders.

Those headlines are what prompted Xiao to poke around LocationSmart's website and ultimately discover this vulnerability. However, while the page has been taken down, it's unclear what steps will be taken next if any. At least one U.S. senator has urged the FCC to enforce stricter privacy laws on carriers.

More Coverage: A bug in cell phone tracking firm's website leaked millions of Americans' real-time locations by ZDNet's Zack Whittaker

Update: The FCC's Enforcement Bureau has confirmed it will investigate LocationSmart, according to CNET.

If you want an Apple Watch band in Lemonade, Denim Blue, or Red Raspberry, you may want to place your order sooner rather than later.

A handful of Apple Watch bands in the limited time Spring Collection are beginning to face limited to no availability through Apple's online store in select countries, nearly two months after they were first released. At least some of the bands remain available at select Apple retail stores for walk-in purchases.

Bands listed as "currently unavailable" via Apple's online store in United States:

• 38mm Classic Buckle in Electric Blue
  

• 38mm Classic Buckle in Soft Pink
  

• 42mm Classic Buckle in Soft Pink
  

• 38mm Sport Band in Lemonade
  

• 42mm Sport Band in Lemonade
  

• 38mm Sport Band in Denim Blue
  

• 42mm Sport Band in Denim Blue
  

• 42mm Sport Loop in Marine Green
  

• 42mm Nike Sport Loop in Pearl Pink
  

• 38mm Nike Sport Band in Barely Rose/Pearl Pink
  

• 42mm Nike Sport Band in Barely Rose/Pearl Pink

Apple also appears to have notified some of its authorized resellers that these and many other Apple Watch bands, plus its discontinued AirPort router lineup, are "no longer available to order" and "will be removed" from their stores shortly, according to an unverified tip received by MacRumors today.

Apple indicated that each of these bands would only be available for a limited time, and it's common for inventory of Apple Watch bands to fluctuate. It's unclear if availability will be replenished at some point.

The shortage of Spring Collection bands could foreshadow Apple's plans to unveil a new Summer Collection of bands, perhaps at WWDC in June, as it did last year with Sport Bands in Mist Blue, Pollen, and Flamingo, and a Pride Edition of the Woven Nylon band. Apple often refreshes its bands each season.

Looking ahead, former KGI Securities analyst Ming-Chi Kuo said the fourth-generation Apple Watch will feature a new design with a 15 percent larger display. It's unclear if the physical size of the Apple Watch will change, and if that will have any effect on compatibility with existing bands.

(Thanks, Glenn!)

Apple sold an estimated 600,000 HomePod speakers during the first quarter of 2018, according to new estimates shared this morning by Strategy Analytics. Apple's sales allowed it to capture just 6 percent of the global smart speaker market, coming in well behind Amazon and Google.

Amazon shipped an estimated 4 million Echo smart speakers during the quarter, for a 43.6 percent share of the market, while Google shipped an estimated 2.4 million Google Home speakers for 26.5 percent market share. Alibaba also came in ahead of Apple with 700,000 shipments, while Xiaomi trailed behind with 200,000.

Apple has a long way to go to catch up to Google and Amazon, both of whom have seen an enormous growth in shipments over the course of the past year. Amazon's shipments increased by two million compared to Q1 2017, while Google's increased by 2.1 million.

Amazon's market share has fallen year over year due to strong sales of Google speakers and new entrants to the market like Apple, Alibaba, and Xiaomi, but Amazon continues to be the number one smart speaker vendor in the world by far.

David Watkins, Director at Strategy Analytics commented that "Amazon and Google accounted for a dominant 70% share of global smart speaker shipments in Q1 2018 although their combined share has fallen from 84% in Q4 2017 and 94% in the year ago quarter. This is partly as a result of strong growth in the Chinese market for smart speakers where both Amazon and Google are currently absent. Alibaba and Xiaomi are leading the way in China and their strength in the domestic market alone is proving enough to propel them into the global top five."

In total, across all vendors, there were an estimated 9.2 million smart speaker units shipped during the first quarter of 2018. Apple is, at the current time, the fourth largest smart speaker brand worldwide with the HomePod, but its meager sales are not yet impacting major players Google and Amazon.

Both Google and Amazon have been in the smart speaker business for a longer period of time and the two companies also offer speakers at a range of price points. A Google Home speaker, for example, can be purchased for as little as $129 (or $49 for the mini version), while an Amazon Echo costs just $99.99. The Echo Dot is even more affordable at $49.

Apple's sole speaker, the HomePod, is priced at $349. Apple focused heavily on audio quality with the hopes that consumers would be willing to pay more for a device that had superior sound, but the higher price tag, a delayed feature set, and the lack of native support for music services like Spotify have likely stymied Apple's sales.

The HomePod is still new and Apple has just entered the smart speaker market, so improvements and changes to future products could drastically change its position and present some real competition for Amazon and Google. Apple is rumored to be considering a lower-priced HomePod that would perhaps sell for $150 to $200.

Apple today seeded the sixth beta of an upcoming iOS 11.4 update to developers, three days after seeding the fifth beta and more than a month after releasing iOS 11.3, a major update that introduced several new features.

Registered developers can download the new iOS 11.4 beta from Apple's Developer Center or over-the-air once the proper configuration profile has been installed from the Developer Center.

The iOS 11.4 update introduces a new ClassKit framework for educational institutions, which supports new features announced at Apple's March 27 education-focused event.

For regular users, the iOS 11.4 update adds features that were originally present in the iOS 11.3 beta but removed ahead of release.

It includes support for Messages on iCloud, designed to store your iMessages in iCloud rather than on each individual device, allowing for improved syncing capabilities. Currently, incoming iMessages are sent to all devices where you're signed in to your Apple ID, but there is no true cross-device syncing.

Messages on iCloud will allow you to download all of your iMessages on new devices, and a message deleted on one device will remove it on all devices. Older messages and attachments are also stored in iCloud rather than on-device, saving valuable storage space.

The iOS 11.4 update also includes AirPlay 2 features, with the Apple TV once again available in the Home app. With AirPlay 2, the same audio content can be played in multiple rooms on devices that support AirPlay 2. AirPlay 2 includes a feature that lets you ask Siri on one device to play content on another AirPlay 2-enabled device. So, for example, you can ask Siri on iPhone to play content on your Apple TV in another room if you're running the iOS 11.4 and tvOS 11.4 betas.

There were initially signs of support for HomePod stereo sound in the first iOS 11.4 beta, a long-promised feature, but stereo sound didn't work properly and the mention was removed in the second beta. It's not clear if it will return for the update's release.

For the iPhone 8 and iPhone 8 Plus, there's a new (PRODUCT)RED wallpaper available, which is not available on iPhone X. During beta testing, Apple implemented a USB Restricted Mode that introduces a week-long expiration date on access to the Lightning port on iOS devices for data purposes if your iPhone hasn't been unlocked, which has implications for law enforcement tools like the GrayKey box. Mentions of the feature were removed from Apple's release notes, so it's not clear if it will be included in iOS 11.4.

With six betas having been released, we are nearing the end of the beta testing period. iOS 11.4 is likely to see a public launch in the next few weeks.

Update: Apple has also seeded the sixth beta of iOS 11.4 to its public beta testing group. For developers, the update is also now available over-the-air.

AirPort base stations are beginning to sell out or disappear entirely from Apple's online and retail stores in select countries, a few weeks after Apple announced it has discontinued the lineup of routers.

The first casualty is the AirPort Extreme, now listed as "sold out" on Apple's online store in the United States, and unavailable for pickup at Apple's retail stores across the country. The base station remains available in limited quantities in select other countries, including Australia, Canada, Japan, and Singapore.

AirPort Express and AirPort Time Capsule models remain in stock on Apple's online store in the United States, and select other countries, but they will eventually sell out too as inventory continues to dwindle.

In addition, the entire AirPort lineup is no longer listed on Apple's online store in several European countries, such as France, Germany, Italy, Spain, and the United Kingdom, as spotted by MacGeneration. It's possible that some of Apple's retail stores still have inventory remaining in those countries.

Apple said that its AirPort products would only remain available while supplies last, so this was to be expected eventually.

Prior to being discontinued, Apple hadn't refreshed its lineup of AirPort base stations in five to six years. The high-end AirPort Extreme and AirPort Time Capsule were last updated at WWDC 2013, while the smaller AirPort Express was last updated in June 2012 and still uses the old 802.11n Wi-Fi standard.

The end of the road for AirPort products comes roughly a year and a half after Bloomberg's Mark Gurman reported that Apple ceased development of the base stations to "sharpen" its focus on other major products.

While the AirPort lineup has been discontinued, Apple will be providing service and parts for the current-generation base stations for up to five more years. Apple also shared a new support document offering tips on choosing a router to use with its devices, and now sells the Linksys Velop mesh system.

Related: Linksys Aims to Fill Apple's AirPort Void With Cheaper Dual-Band Velop Mesh Wi-Fi System

Update: After this article was published, Apple replenished stock of the AirPort Extreme in the United States.