MacRumors

A vulnerability in the Snapchat app opens the iPhone up to denial-of-service attacks that can cause the device to freeze and crash, according to cyber security researcher Jamie Sanchez [Google Translation] (via The Los Angeles Times).

A weakness in the app’s system can allow a hacker to send thousands of messages to a Snapchat user in seconds, which can cause a crash that requires a hard reset to fix. Tokens generated by the app used to verify user identity can be reused by hackers to send a flood of messages.

By reusing old tokens, hackers can send massive amounts of messages using powerful computers. This method could be used by spammers to send messages in mass quantities to numerous users, or it could be used to launch a cyber attack on specific individuals, [Sanchez] said.

Sanchez demonstrated the flaw for The Los Angeles Times, sending a reporter 1,000 messages within five seconds in a denial-of-service attack, which caused the reporter's iPhone to freeze until it restarted.

The security researcher declined to contact Snapchat with his findings as he believes the startup "has no respect for the cyber security research community" after ignoring previous app vulnerability reports.

Snapchat has faced multiple problems as its private messaging app has grown in popularity, including vulnerabilities that allowed users to bypass screenshot notifications and a recent security breach that compromised the user names and phone numbers of more than 4.6 million customers, which Snapchat was warned about ahead of time by a security group.

When asked about this particular vulnerability, Snapchat said it was unaware of the problem but interested in learning more.

Apple hasn't "given up on the Mac" like some of its competitors and has "some really cool things" coming, according to CEO Tim Cook who sat down for a wide-ranging interview with The Wall Street Journal.

Answering a question about new product categories, Cook said the company is going to focus on "only doing a few things and doing them great", but that Apple does have significant new products, in new categories, in the works.

He went on to say that he felt Apple has a long way to go in its existing categories as well, the Mac in particular.

I think Apple can grow well with great improvements and new products on its existing category of products.

[...]

And we haven't given up on the Mac. A lot of people are throwing in the towel right now on the PC. We're still spending an enormous amount on really great talent and people on the Macs of the future. And we have some really cool things coming out there. Because we believe as people walk away from the PC, it becomes clear that the Mac is what you want if you want a PC.

According to the well-sourced KGI Securities analyst Ming-Chi Kuo, Apple is planning to release an ultra-slim 12-inch Retina MacBook in the middle of 2014 and it could be one of the "really cool things" that Cook talked about.

Elsewhere in the interview Cook revealed that Apple has repurchased $14 billion in stock over the past two weeks, and that the company is open to making large acquisitions if it makes sense. He also reiterated that Apple is working on "some really great stuff" in new product categories, an assertion that Apple executives have made numerous times over the past few months.

Investor Carl Icahn, who has been agitating for an increase in Apple's stock repurchase program, tweeted today that Wall Street is "still not listening" to Cook's statements and Apple's stock price remains relatively flat.

California State Senator Mark Leno is introducing a bill that would require all cellular phones sold in the state to include antitheft technology, reports The New York Times. This measure is being introduced as a way to curb smartphone thefts, which are on the rise in major metropolitan areas like San Francisco and New York City.

"With robberies of smartphones reaching an all-time high, California cannot continue to stand by when a solution to the problem is readily available," Senator Leno said in a statement. "Today we are officially stepping in and requiring the cellphone industry to take the necessary steps to curb violent smartphone thefts and protect the safety of the very consumers they rely upon to support their businesses."

Co-sponsored by San Francisco’s district attorney George Gascón, this kill switch requirement could go into effect as soon as January 1, 2015, if passed by the state legislature and signed into law by Governor Jerry Brown.

Apple likely won't be affected by the bill as it introduced its own antitheft technology with iOS 7's Activation Lock feature. This feature locks the device to the user's iCloud account and is automatically turned on when Find My iPhone is enabled. Thieves are prevented from turning off Find My iPhone, signing out of iCloud or wiping the device without supplying the original account credentials. This feature appears to meet the antitheft requirements of Leno's bill.

Any advanced mobile communications device that is sold in California on or after January 1, 2015, shall include a technological solution that can render the essential features of the device inoperable when the device is not in the possession of the rightful owner. A technological solution may consist of software, hardware, or a combination of both software and hardware, but shall be able to withstand a hard reset. No advanced mobile communications device may be sold in California without the technological solution enabled.

Gascón and New York Attorney General Eric Schneiderman expressed interested in Activation Lock when it was introduced at WWDC 2013. After reviewing the technology, Gascón and Schneiderman were impressed with the feature, praising Apple for taking "an important first step towards ending the global epidemic of smartphone theft."

Cellular industry trade group CTIA will likely oppose the bill and its terms that require a $2500 fine for every phone sold without antitheft technology. The group has argued against kill switches and offered a nationwide database of stolen phones as an alternative. Law enforcement officials, however, claim the US-based blacklist is ineffective as many stolen phones are sold overseas.

A new report from 9to5Mac claims iOS 7.1 will indeed be released to all iOS users in March, representing the first major revision since iOS 7 was launched publicly in September of last year.

Sources note the next version of iOS 7 will continue with the visual improvements, minor tweaks and bug fixes reported in earlier beta versions seeded to developers.

While recent reports are pegging a launch sooner than later, reliable sources say that Apple is currently planning to ship iOS 7.1, the first significant update to iOS 7, in March. The iOS 7.1 update is said to not have any “secret features,” and it will basically be what we have been told to expect by the past five betas: some user-interface tweaks in the Phone app, an improved Calendar app, speed improvements, and numerous bug-fixes.

BGR originally cited a March release date for iOS 7.1 back in late December, but a follow-up report earlier this week seemed to hedge on that claim somewhat by noting that the update was expected in the "coming weeks." Slowing increments of build numbers from the developer beta versions suggest the software is nearing a public launch, but whether that date lands in late February or the early March is not clear.

Previous iOS 7.1 betas have included various improvements such as a new "Button Shapes" option in Accessibility, keyboard tweaks that indicate shift and caps locks, a new event list view within the Calendar app and refined icons for the Phone, FaceTime, and Messages app. The unreleased iOS in the Car feature has also been refined in the iOS 7.1 beta testing period, but it is unclear when the functionality will be made available to the public.

Details on features in past beta releases can be found in our previous beta posts: Beta 1, Beta 2, Beta 3, Beta 4 and Beta 5.

Last month, Apple reportedly reduced the licensing costs for accessory manufacturers who are producing official gear for the iPhone, iPad or iPod. According to Mac Otakara, this reduction applies to Lightning cables as well as other accessories that are part of Apple's MFi (Made for iPod/iPhone/iPad) Program.

Made for iPod (MFi) was launched in 2005 as a licensing and quality control program that allowed iPod accessory makers to ship their products with an Apple-approved "Made for iPod" label. At launch, Apple reportedly charged companies that wanted to participate in this program a 10% fee based on the wholesale cost of the device.

Apple expanded its MFi Program to include the iPhone and iPad as those devices were added to the company's product portfolio, with Apple's Lightning cable introduced last in 2012 falling under the program's guidelines due to the serialized authentication chip embedded in the connectors. At last year's Worldwide Developers Conference, Apple again extended the licensing to include game controllers for iOS devices.

Those game controllers have generally arrived with higher pricing than expected by consumers, with some of the blame for pricing and quality issues being placed on Apple's requirements administered through the MFi Program. One high-profile controller, the SteelSeries Stratus, did, however, see a $20 price cut in the few weeks between announcement and launch last month, and while a cut to MFi licensing fees undoubtedly would not have accounted for the entire price drop, it may have given SteelSeries a bit of flexibility to make its pricing more competitive.

Beyond licensing and technical requirements, Apple allegedly also requires manufacturers in the MFi Program to agree to the company's supplier responsibility code. This code takes steps to ensure that employees have access to safe working conditions and requires companies to submit to inspections that ensure compliance with Apple's Code of Conduct.

Apple will launch products in new categories and the company is working on "really great stuff", according to an interview with CEO Tim Cook in The Wall Street Journal this evening.

He demurred when asked about specific possible products, but said anyone "reasonable" would consider Apple's upcoming products to be in new categories.

Cook has said on prior occasions that new product categories are coming for Apple in 2014 and, with this interview, he is likely looking to encourage spooked investors that Apple is still focused on growth.

Cook said in the interview that Apple remains a "growth company" and has significant opportunities in existing products as well as new ones. In addition, Apple strives to be the number one smartphone, tablet, and computer maker in the world.

He said his statement that Apple doesn't aim to make the most phones has been misunderstood.

"I don't view that as being satisfied with being small or however you want to define it," he said. "I just want to say that the macro thing for us is making a great product and we must do that. If we can't do that, we're not going to force ourselves to hit a price point that makes us produce a product that we're not proud of because we lose who we are in that. We're not going to do that."

Apple executives have repeatedly said that they are only interested in making the best products in the world, not generating revenue for revenue's sake. Tim Cook has previously said that Apple is "focused on making great products that enrich lives" and that the company is "deeply committed to doing this and maniacally focused on it." He said last month that innovation is "deeply embedded" at the company and that Apple has "no issue" coming up with new ideas.

Elsewhere in the interview Cook revealed that Apple has repurchased $14 billion in stock over the past two weeks, and that the company is open to making large acquisitions if it makes sense.

The City of San Francisco today approved Apple's plans to build a new retail store in the city's famous Union Square, taking over the former Levi's building at the corner of Post and Stockton streets.

According to an Apple representative presenting the company's plans to the city's planning commission, the flagship store will be "more iconic" than the well-known Fifth Avenue glass cube retail store in New York City, reported ifoAppleStore's Gary Allen after attending the meeting.

Apple originally filed plans to move its existing Stockton Street store to the prime Post Street location back in May of 2013, but the company was forced to revise its initial building plans after critics objected to the removal of the historical Ruth Asawa fountain and the installation of an 80-foot wide wall along a key pedestrian and transit corridor.

Revised plans for the site were filed in August, and Apple pledged to move the fountain to a nearby location, add an eight-foot wide window, and move the glass wall of the store back by four feet.

The commission has now accepted Apple's second proposal with one small caveat -- the company will need to offer improved accessibility options for the store's upper floor. Earlier today, the San Francisco Historic Preservation Commission also approved a permit for the project, giving Apple a green light to move on with the store's construction.

Apple has repurchased $14 billion of its own stock in the two weeks following its first quarter earnings call on January 27th, according to a report in The Wall Street Journal.

The Journal spoke to Apple CEO Tim Cook who said that Apple wanted to be "aggressive" and "opportunistic" with its repurchases after Apple's share price dropped 8 percent the day after the results were reported.

With the latest purchases, Mr. Cook said Apple had bought back more than $40 billion of its shares over the past 12 months, which Mr. Cook said was a record for any company over a similar span.

"It means that we are betting on Apple. It means that we are really confident on what we are doing and what we plan to do," said Mr. Cook, speaking in a conference room at the company's corporate headquarters here. "We're not just saying that. We're showing that with our actions."

He went on to say that the company would share "updates" to its buyback program in March or April, roughly a year after it more than doubled its capital return program to $100 billion. Apple has bought back $40 billion in shares over the past 12 months.

Cook said that though Apple has not made any large acquisitions, it is open to making a big purchase if it made financial sense: "We have no problem spending ten figures for the right company, for the right fit that's in the best interest of Apple in the long-term. None. Zero."

As of its earnings call last month, Apple had $158.8 billion in cash, with $34.4 billion located in the United States. It's likely that the repurchase was done entirely with Apple's domestic cash.

GT Advanced, the company that has partnered with Apple to open a sapphire plant in Mesa Arizona, has purchased and received a total of 518 sapphire furnace and chamber systems with another 420 machines on order, according to analyst Matt Margolis (via 9to5Mac). The company has also purchased multiple "Sapphire Display Inspection Tools" from Intego.

The sheer amount of equipment purchased indicates that a massive sapphire production operation is being installed at the Arizona factory, and as rumors have hinted, the large amounts of sapphire being produced, along with the tools ordered, could hint at a future ultra-durable iPhone display.

Matt Margolis believes that with the current equipment the factory has, it could produce between 103 and 116 million displays per year, with an additional 84 to 94 million possible when taking into account the 420 furnaces on order. Apple could, in total, produce 100 to 200 million ~5-inch sapphire displays, enough for its entire line of devices. In 2013, Apple sold approximately 150 million iPhones.

In documentation, GT Advanced itself suggests the aforementioned Sapphire Inspection Tools are aimed at device displays.

Lowering manufacturing and fabrication costs of sapphire is a key driver for accelerating the adoption of its use in new market segments such as cover screens for smartphones and mobile devices. GT Advanced Technologies is working with key downstream technology providers to optimize fabrication processes and technologies to lower the cost of sapphire cover screen material.

GT is partnering with Intego GmbH to develop a series of automated sapphire inspection tools that will increase the yield of high quality sapphire material from each boule and ensure that only high quality material enters the value stream. The SIRIUS Slab automated sapphire inspection tool begins a new level of repeatability and performance throughput to the production of sapphire material intended for high volume markets such as mobile and touch screen devices.

In November, shortly after the partnership between GT Advanced and Apple was announced, it became clear that GT Advanced, with Apple's help, was aiming to drastically increase its sapphire production.

A recent patent pointed to Apple's interest in using sapphire as a display cover on future iPhones and shortly after, a report suggested Apple partner Foxconn had already began a small trial production of 100 devices with a sapphire display.

Those rumors, along with today's report, indicate that Apple is almost certainly aiming to use sapphire as a major component in an upcoming product such as the next-generation iPhone or the company's much-rumored iWatch. Currently, the company uses limited quantities of sapphire to protect the camera on recent iPhones and to cover the Touch ID fingerprint sensor on the iPhone 5s.

Sapphire, as the second hardest mineral after diamond, is incredibly durable and scratch resistant, as can be seen in the video below. An iPhone with a sapphire display would be almost impossible to scratch in day-to-day use.

A bug in the current version of iOS 7 appears to allow users to disable Find my iPhone on a device without typing in a password, which effectively hides it from being located on iCloud.com.

Deactivating Find My iPhone takes just a few simple steps and it can be easily repeated on devices running the current version of iOS (7.0.4). The exploit involves making a few simple changes to the iCloud account section of the Settings app.

This is a potentially serious bug as Find My iPhone is a useful method of locating a lost device. While this exploit does disable Find My iPhone and allow for an iOS device to be erased, it does not remove Apple's Activation Lock theft deterrent system. After being erased, the device will remain locked to the original account and continue to ask for that Apple ID and password during the setup process to resume functionality.

The bypass only works on a device that does not have Touch ID or a Passcode enabled, as the exploit requires access to the Settings menu. To avoid having Find My iPhone disabled, users should update their phones with a Passcode and install iOS 7.1 when Apple releases the software.

MacRumors has contacted Apple for comment on the exploit and we will update if we receive new information.