Hacker News Reader

fh9302on Beeper vs. Apple battle intensifies: Lawmakers demand DOJ investigation

This is not correct. The Beeper client directly connects to Apple's servers while bypassing authorization checks through serial number spoofing. They did not build their own infrastructure based on reverse engineering iMessage.

fh9302on Beeper vs. Apple battle intensifies: Lawmakers demand DOJ investigation

Reverse engineering is not a problem, accessing servers in an unauthorized way and then charging money for it is a problem.

fh9302on Beeper vs. Apple battle intensifies: Lawmakers demand DOJ investigation

So Beeper is charging money to let users access Apple's servers in an unauthorized way by spoofing a serial number, and then they complain to regulators when Apple locks them out?

fh9302on Intel launches Core Ultra processors

During the M2 series Apple had a node disadvantage compared to AMD and Apple was still ahead.

Being the first to buy 3nm doesn't prove what was initially claimed.

fh9302on Apple partly halts Beeper's iMessage app again, suggesting a long fight ahead

RCS can't be swapped out, Google hasn't opened the API so you are forced to use Google or Samsung messages app.

fh9302on Intel launches Core Ultra processors

Meteor Lake is behind in both performance and efficiency compared to the M3 family.

https://www.notebookcheck.net/Intel-Meteor-Lake-Analysis-Cor...

fh9302on Tim Sweeney on why Epic did better against Google than Apple in court

Google chose a jury trial.

fh9302on Epic vs. Google: Google Loses

You can send encrypted notifications without any entitlement. I assume you are talking about sending notifications without displaying the notification to the user.

fh9302on Beeper Mini is back

The EU has already decided the iMessage is not a gatekeeper.

fh9302on Google Drive misplaces months' worth of customer data

According to NCMEC Apple does not do any proactive scanning of photos.

> Last year, while Meta’s Facebook and Instagram submitted a combined 26 million reports, Google 2 million, and TikTok nearly 300,000, Apple submitted 234. The year before that: 160.

> Apple isn’t a social media company, so this is hardly a direct comparison. That said, WhatsApp, which is end-to-end encrypted, scans unencrypted content such as profile and group photos for CSAM. It provided over 1 million cybertips to NCMEC in 2022; Microsoft sent in 110,000; Dropbox, nearly 46,000; and Synchronoss, the cloud storage provider for Verizon, over 30,000.

https://archive.is/AyuCq

fh9302on What has changed in CPU cores in M3 chips?

This test for example shows the longest battery life they have ever measured: https://www.pcmag.com/reviews/apple-macbook-pro-14-inch-2023...

> In our video rundown test, the 14-inch Pro lasted even longer, crossing the 30-hour threshold, becoming the longest-lasting laptop we've ever tested.

In this video they compare the M2 Pro and M3 Pro and the M3 Pro has more battery remaining at the end of the video: https://youtu.be/aQvsZQ3QBiU

Same for this video where they compare M1 Max, M2 Max and M3 Max: https://youtu.be/BWeuhxnWDl0

fh9302on What has changed in CPU cores in M3 chips?

From the independent battery tests I've seen the battery life should be noticeably better. Did you take a look at Activity Monitor to see if something is using high CPU?

fh9302on M3 Macs: there's more to performance than counting cores

They are basically equal while the Intel CPU uses significantly more power.

https://browser.geekbench.com/processors/intel-core-i9-13900... https://browser.geekbench.com/v6/cpu/3364975

fh9302on Apple unveils the new MacBook Pro featuring the M3 family of chips

What you didn't mention is that the Snapdragon X Elite has 12 high performance cores, making it a M2 Max competitor and not an M2 competitor, at least on the CPU side. The GPU is disappointing with no ray tracing support.

fh9302on Qualcomm Snapdragon X Elite Performance Preview: A First Look at What's to Come

The Snapdragon X Elite CPU is closer to the M2 Pro / Max, while the GPU is closer to the regular M2. This makes comparisons a bit difficult without knowing price and resulting battery life.

fh9302on "Advanced Tracking and Fingerprinting Protection" Leaks DNS Queries to Apple

Orion uses https://webkit.org/tracking-prevention/ and they have their own custom ad and tracking blocker.

They do not set a custom DNS server like the linked issue says.

fh9302on "Advanced Tracking and Fingerprinting Protection" Leaks DNS Queries to Apple

While Orion also has anti-tracking technology, they do not have this specific feature where a custom DNS server is used to block tracking.

fh9302on Killing Windows 10 in 2025 could turn PCs into eWaste

They just released an update for the iPhone 6s – a 9 year old phone. They are better than most others in the smartphone industry.

fh9302on Samsung disables customer phones remotely, holds data hostage [video]

Apple has made it clear that they won't move forward with client side scanning after feedback from researchers and customers. Instead, they added optional E2EE for iCloud. It's not perfect yet but significantly better than most other cloud providers.

fh9302on Cortex X2: ARM aims high

> Buying up all state of the art production capacities so competition is one node behind.

M2 is a 5nm (N5P) chip, AMD laptops already use 4nm.

fh9302on iLeakage: Browser-Based Timerless Speculative Execution Attacks on Apple Devices

Safari has protection against cross-site navigation enabled by default. The issue here is cross-site window open.

fh9302on iLeakage: Browser-Based Timerless Speculative Execution Attacks on Apple Devices

The merge request you linked is for cross-site navigation, which is a different feature flag than the cross-site window open recommended by this paper.

fh9302on iLeakage: Browser-Based Timerless Speculative Execution Attacks on Apple Devices

I think users here, including myself, got confused because there is a feature flag that has a similar name.

"Swap Processes on Cross-Site Navigation" is enabled by default, but this paper recommends "Swap Processes on Cross-Site Window Open".

fh9302on iLeakage: Browser-Based Timerless Speculative Execution Attacks on Apple Devices

Also enabled by default for me on macOS 14.1.

Edit: It appears I confused it with a similarly named flag. It doesn't appear to be enabled on macOS yet by default.

fh9302on iLeakage: Browser-Based Timerless Speculative Execution Attacks on Apple Devices

Does this mean you would have to visit a malicious website, that malicious website would open a different website with window.open(), and from this they can read data through this side channel attack?

fh9302on iLeakage: Browser-Based Timerless Speculative Execution Attacks on Apple Devices

They added this FAQ point a couple minutes ago, that's why the existing comments didn't see it.

fh9302on iLeakage: Browser-Based Timerless Speculative Execution Attacks on Apple Devices

Thank you. Do you know if lockdown mode / disabling JIT would mitigate the issue?

fh9302on iLeakage: Browser-Based Timerless Speculative Execution Attacks on Apple Devices

It's unclear if they even reported this issue to Apple.

fh9302on iLeakage: Browser-Based Timerless Speculative Execution Attacks on Apple Devices

The paper mentions JIT multiple times, lockdown mode disables JIT. I hope someone else can confirm it but it appears it would be mitigated in this case.