Apple updates US App Store guidelines allowing developers to link to third-party payments

Apple is relaxing a key App Store rule that has long been a source of frustration to developers. The iPhone maker will allow U.S. developers to link to outside websites for in-app purchases, according to the company’s updated developer guidelines.

The change comes shortly after the United States Supreme Court rejected an appeal to reconsider a lower court ruling requiring Apple to allow developers to direct customers to alternative payment methods. The change only applies to iOS and iPadOS apps in the U.S. app stores and developers are still required to pay a commission for in-app purchases not made via the App Store.

It seems that Apple will continue to maintain tight control over payments, even under the new rules. According to a support page, developers will need approval from Apple before they can take advantage of the new rule, and app makers will only be permitted to notify users about alternative payment methods in specific ways. For example, the company’s guidelines to developers stipulate that links can only be shown in an app one time, and only in “a single, dedicated location.” App makers are also prohibited from using in-app pop-ups or mentioning outside payments in their App Store listing.

The company is also officially requiring developers to pay it a commission for purchases made outside of its App Store. The commission is set at 12 percent for developers who are part of its small business program, and 27 percent for larger developers. But, as 9to5Mac points out, the company may have some trouble enforcing those terms. 

In court documents, the company argued that it would be “exceedingly difficult and, in many cases, impossible” to collect the fees. In its messaging to developers, however, the company says that they are required to submit monthly reports, even if they haven’t processed any transactions, and that the company has the right to audit their records.

Still, the change is a significant concession for Apple, which has long been criticized for developers for App Store rules sometimes viewed as draconian and arbitrary. The company’s rule barring developers from communicating with users about alternative (and often cheaper) payment methods was a central aspect of the Epic v. Apple trial in 2021. The company had previously loosened some of these rules following the trial and a subsequent class-action lawsuit from developers. Apple also allows dating apps in the Netherlands to offer alternative payment options.

Some high profile developers who have previously run up against Apple’s App Store policies were sharply critical of the company’s latest changes. Epic CEO Tim Sweeney called it a “bad-faith ‘compliance’ plan” in a post on X. He called the 27 percent fee “anticompetitive” and said that “Apple will front-run competing payment processors with their own ‘scare screen’ to disadvantage them.” He added that Epic would pursue a legal challenge to its changes in District Court.

 David Heinemeier Hansson, cofounder of the Hey email app, which publicly battled with Apple over its payment policies, also slammed the changes. “Apple is going to poison the one victory Epic secured in their lawsuit so bad nobody would ever think to use it,” he wrote on X.

Apple didn’t immediately respond to a request for comment.

This article originally appeared on Engadget at https://www.engadget.com/apple-updates-us-app-store-guidelines-allowing-developers-to-link-to-third-party-payments-235836357.html?src=rss

Instagram’s founders are shutting down Artifact, their year-old news app

Artifact, the buzzy news app from Instagram co-founders Kevin Systrom and Mike Krieger, is shutting down less than a year after its launch. In a note on Medium, Systrom said the app’s “core news reading” features would be online through the end of February, but that it would remove commenting and posting abilities immediately.

Besides its famous founding team, the app was known for AI-centric features as well as Reddit-like commenting and posting abilities. The app had won praise from journalists who appreciated reporter-friendly features like dedicated author pages and had been featured prominently in Apple and Google’s app stores.

But after a year of work, it seems Systrom and Krieger encountered many of the same struggles as founders of buzzy news apps before them. “We have built something that a core group of users love, but we have concluded that the market opportunity isn’t big enough to warrant continued investment in this way,” Systrom wrote.

While he didn’t say what he might do next, Systrom’s note hinted that he may at some point take on a new AI-focused project. “I am personally excited to continue building new things, though only time will tell what that might be,” he wrote. “We live in an exciting time where artificial intelligence is changing just about everything we touch, and the opportunities for new ideas seem limitless.”

In the meantime, Artifact fans have a few more weeks to keep checking headlines before the app goes offline for good.

This article originally appeared on Engadget at https://www.engadget.com/instagrams-founders-are-shutting-down-artifact-their-year-old-news-app-233431390.html?src=rss

Senators want to know why the SEC’s X account wasn’t secured with MFA

Another lawmaker is pushing the Securities and Exchange Commission for more information about its security practices following the hack of its verified account on X. In a new letter to the agency’s Inspector general, Senator Ron Wyden, called for an investigation into “the SEC’s apparent failure to follow cybersecurity best practices.”

The letter, which was first reported by Axios, comes days after the SEC’s official X account was taken over in order to post a tweet claiming that spot bitcoin ETFs had been approved by the regulator. The rogue post temporarily juiced the price of bitcoin and forced SEC chair Gary Gensler to chime in from his X account that the approval had not, in fact, happened. (The SEC did approve 11 spot bitcoin ETFs a day later, with Gensler saying in a statement that “bitcoin is primarily a speculative, volatile asset that’s also used for illicit activity.”)

The incident has raised a number of questions about the SEC’s security practices after officials at X said the financial regulator had not been using multi-factor authentication to secure its account. In the letter, Wyden, who chairs the Senate’s finance committee, said it would be "inexcusable" for the agency to not use additional layers of security to lock down its social media accounts.

“Given the obvious potential for market manipulation, if X’s statement is correct, the SEC’s social media accounts should have been secured using industry best practices,” Wyden wrote. “Not only should the agency have enabled MFA, but it should have secured its accounts with phishing-resistant hardware tokens, commonly known as security keys, which are the gold standard for account cybersecurity. The SEC’s failure to follow cybersecurity best practices is inexcusable, particularly given the agency’s new requirements for cybersecurity disclosure”

Wyden isn’t the only lawmaker who has pushed the SEC for more details about the hack. Senators J. D. Vance and Thom Tillis sent a letter of their own, addressed to Gensler, immediately following the incident. They asked for a briefing about the agency’s security policies and investigation into the hack by January 23.

The SEC didn’t immediately respond to a request for comment. The agency said in an earlier statement that it was working with the FBI and the Inspector General to investigate the matter.

This article originally appeared on Engadget at https://www.engadget.com/senators-want-to-know-why-the-secs-x-account-wasnt-secured-with-mfa-203614701.html?src=rss

SEC approves bitcoin ETFs (for real this time)

The Securities and Exchange Commission has approved the applications of 11 spot bitcoin ETFs in a highly anticipated decision that will make it much easier for people to dabble in cryptocurrency investing without directly buying and holding bitcoin. The approval comes one day after a hacker temporarily took over the SEC’s X account and posted a rogue tweet saying that bitcoin ETFs had been approved by the regulator.

The approval is a significant milestone for crypto investors, who for years have tried to win SEC approval for the investment funds that hold bitcoin. With the approval, 11 such funds will be listed on public stock exchanges.

United States financial regulators have long been wary of bitcoin and other cryptocurrencies and in a statement, SEC Chair Gary Gensler wasn’t exactly effusive about the merits of bitcoin. “Bitcoin is primarily a speculative, volatile asset that’s also used for illicit activity including ransomware, money laundering, sanction evasion, and terrorist financing,” he wrote.

“While we approved the listing and trading of certain spot bitcoin ETP shares today, we did not approve or endorse bitcoin. Investors should remain cautious about the myriad risks associated with bitcoin and products whose value is tied to crypto.”

Gensler may have more reasons than usual to be circumspect. On Tuesday, one day before the SEC’s decision on bitcoin ETFs was due, the SEC’s official X account was hacked. The attackers posted a rogue tweet claiming the funds had been approved, causing a temporary spike in the price of bitcoin. The SEC has said it’s working with the FBI and Inspector General to investigate the matter.

This article originally appeared on Engadget at https://www.engadget.com/sec-approves-bitcoin-etfs-for-real-this-time-224125584.html?src=rss

TikTok pulled a hashtag-tracking feature researchers used to study the platform

TikTok recently pulled a tool that allowed researchers and others to study the popularity of hashtags on its app. The change, first reported by The New York Times, came shortly after researchers published a report using data from the tool that criticized the company.

As The New York Times points out, the tool was one of the few publicly-accessible methods of tracking details about the popularity of specific hashtags. TikTok, like other social media companies, has made it difficult for outsiders to track how content spreads in its app.

The tool in question is a feature called Creative Center, which provides data about the popularity of hashtags to would-be advertisers and others. Researchers at Rutgers’ Network Contagion Institute had used Creative Center’s search function to track hashtags deemed “sensitive” to Chinese government interests. The researchers compared the prevalence of the hashtags between TikTok and Instagram and concluded that many "sensitive" topics were "dramatically underrepresented on TikTok" compared with Instagram.

Soon after the report was published, the researchers said the search feature in Creative Center disappeared without an explanation. “Search capacity for Hashtags has itself now been removed from the user interface entirely, which NCRI discovered to have occurred on Christmas day, days after this report’s initial release,” they wrote in an addendum to the report. They added that TikTok had also disabled direct access to a number of “sensitive” topics they had previously tracked, including hashtags related to US politics and other geopolitical issues.

In a statement to The New York Times, TikTok confirmed the change. “Unfortunately, some individuals and organizations have misused the Center’s search function to draw inaccurate conclusions, so we are changing some of the features to ensure it is used for its intended purpose,” a company spokesperson said.

The dust-up is the latest example of mounting tensions between social media companies and researchers trying to study thorny topics like misinformation. Meta has also found itself at odds with researchers, and reportedly plans to deprecate CrowdTangle, a tool widely used by researchers and journalists to study how content spreads on Facebook. X has also greatly restricted researchers’ access to data since Elon Musk took control of the company, making its once open APIs prohibitively expensive to most groups.

In TikTok’s case, the company may be particularly sensitive to what it considers improper use of its tools. The company has for years denied that it aligns its content policies with the interests of the Chinese government as numerous government officials have called for the app to be banned. More recently, the company faced increased scrutiny over its handling of content related to the Israel-Hamas war — criticism that was also fueled by what the company said was an inaccurate portrayal of hashtag data.

That said, the company has made some concessions to researchers. TikTok began offering an official Research API to some academic institutions last year, and reportedly plans to make the tools available to some civil society groups that have questioned the company’s content moderation practices.

But for researchers, the move to abruptly cut off a tool will likely fuel more questions about just how willing the company is to work with them. “This lack of transparency is of deep concern to researchers,” the NCRI researchers wrote.

This article originally appeared on Engadget at https://www.engadget.com/tiktok-pulled-a-hashtag-tracking-feature-researchers-used-to-study-the-platform-015454077.html?src=rss

The SEC’s X account was apparently ‘compromised’ to falsely claim bitcoin ETFs were approved

The official X account belonging to the Securities and Exchange Commission was briefly “compromised,” the regulator said, after an apparently rogue post on X temporarily juiced bitcoin prices. 

On Tuesday, the SEC’s official X account tweeted that bitcoin ETFs had been approved “for listing on all registered national securities exchanges.” The tweet included an official-looking graphic featuring a quote from SEC Chair Gary Gensler. However, Gensler himself quickly clarified from his X account that the post from @SECGov was the result of a "compromised” account.

“The @SECGov twitter account was compromised, and an unauthorized tweet was posted,” Gensler wrote. “The SEC has not approved the listing and trading of spot bitcoin exchange-traded products.”

The SEC's rogue tweet, which has since been deleted.
Screenshot via X

The confusion comes as the SEC is, in fact, considering whether to approve spot bitcoin ETFs, investment funds that hold the cryptocurrency. The regulator is expected to make a decision Wednesday in a process that has been closely watched by crypto investors.

Naturally, the now-deleted tweet from the SEC’s official (and gray check-verified) account on X prompted a momentary surge in bitcoin prices, followed by a steep decline. The post and subsequent clarification from Gensler “wiped out over $50 million of leveraged derivatives trading positions within an hour,” according to and analysis from CoinDesk.

In an update Wednesday, an SEC spokesperson said the rogue tweet had not been "drafted or created by the SEC." The spokesperson added that "the first public indication" of a change would not come via the agency's X account. "Consistent with existing practice, any Commission action on exchange rule filings would be posted on the relevant section of the SEC’s website at https://www.sec.gov/ and then in the Federal Register."

The SEC hasn't shared details about how its X account was “compromised.” In a statement, an SEC spokesperson told Engadget that it was investigating the matter, and working with the FBI and Inspector General. "The SEC has determined that there was unauthorized access to and activity on the @SECGov x.com account by an unknown party for a brief period of time shortly after 4 pm ET," the spokesperson said. "That unauthorized access has been terminated. The SEC will work with law enforcement and our partners across government to investigate the matter and determine appropriate next steps relating to both the unauthorized access and any related misconduct."

X didn’t immediately respond to a request for comment, but the company shared the results of its "preliminary investigation" Tuesday evening. 

"We can confirm that the account @SECGov was compromised and we have completed a preliminary investigation," X write in a post from its safety account. "Based on our investigation, the compromise was not due to any breach of X’s systems, but rather due to an unidentified individual obtaining control over a phone number associated with the @SECGov account through a third party. We can also confirm that the account did not have two-factor authentication enabled at the time the account was compromised."

X's comments also raise a number of new questions about the takeover. As Bloomberg points out, government-run social media accounts are supposed to use multi-factor authentication as an extra layer of security. If the regulator, which is currently investigating X over its security practices, had lax security settings itself, it would be a significant embarrassment to the agency. 

But though X suggested its systems were not compromised, the company could still face scrutiny over whether it's doing enough to protect high-profile accounts. It's also not the first time high-profile government accounts have been hijacked on the platform. In 2020, hackers took over the accounts belonging to Barack Obama, Joe Biden, Musk, Bill Gates and a number of others in a coordinated crypto scam. A Florida teen and two others were later charged and the company, then known as Twitter, said the hacks were the result of a social engineering scheme. 

Update January 9 2024, 6:50PM ET: This story has been updated with a statement from an SEC spokesperson about their investigation.

Update January 9 2024, 11:18PM ET: This story was updated to include comments from X about the SEC's account.

Update January 10 2024, 3:38PM ET: This story has been updated with additional comments from the SEC.

This article originally appeared on Engadget at https://www.engadget.com/the-secs-x-account-was-apparently-compromised-to-falsely-claim-bitcoin-etfs-were-approved-230034839.html?src=rss

SAG-AFTRA strikes deal for AI voice acting licensing in video games at CES 2024

SAG-AFTRA, the union representing thousands of performers, has struck a deal with an AI voice acting platform aimed at making it easier for actors to license their voice for use in video games. Under the deal, which was announced during a press event at CES 2024 in Las Vegas, SAG-AFTRA members will be able to work with Replica Studios to license their voice to game studios.

Duncan Crabtree-Ireland, the union's top negotiator, said that the agreement “paves the way for professional voiceover artists to safely explore new employment opportunities for their digital voice replicas.” The agreement comes as Hollywood is still grappling with the use of AI. Last year, SAG-AFTRA reached a deal with Hollywood studios that included AI protections following a months-long strike. As a result, studios are now required to pay actors (and obtain their consent) before using an AI-generated version of their likeness.

SAG-AFTRA’s latest agreement with Replica Studios seems to follow a similar framework. According to Crabtree, the agreements cover the creation of so-called “digital voice replicas” and how they can be used by game studios and other companies. The deal has provisions for minimum rates, safe storage and transparency requirements, as well as “limitations on the amount of time that a performance replica can be employed without further payment and consent.”

Notably, the agreement does not cover whether actors’ replicas can be used to train large language models (LLMs), though Replica Studios CEO Shreyas Nivas said the company was interested in pursuing such an arrangement. “We have been talking to so many of the large AAA studios about this use case,” Nivas said. He added that LLMs are “out-of-scope of this agreement” but “they will hopefully [be] things that we will continue to work on and partner on.”

Even so, some well-known voice actors were immediately skeptical of the news, as the BBC reports. In a press release, SAG-AFTRA said the agreement had been approved by "affected members of the union’s voiceover performer community." But on X, voice actors said they had not been given advance notice. "How has this agreement passed without notice or vote," wrote Veronica Taylor, who voiced Ash in Pokémon. "Encouraging/allowing AI replacement is a slippery slope downward." Roger Clark, who voiced Arthur Morgan in Red Dead Redemption 2, also suggested he was not notified about the deal. "If I can pay for permission to have an AI rendering of an ‘A-list’ voice actor’s performance for a fraction of their rate I have next to no incentive to employ 90% of the lesser known ‘working’ actors that make up the majority of the industry," Clark wrote.

SAG-AFTRA’s deal with Replica only covers a sliver of the game industry. Separately, the union is also negotiating with several of the major game studios after authorizing a strike last fall. “I certainly hope that the video game companies will take this as an inspiration to help us move forward in that negotiation,” Crabtree said.

Update January 10 2024, 12:45PM ET: This story was updated to include reactions from voice-over actors. 

We're reporting live from CES 2024 in Las Vegas from January 6-12. Keep up with all the latest news from the show here.

This article originally appeared on Engadget at https://www.engadget.com/sag-aftra-strikes-deal-for-ai-voice-acting-in-video-games-at-ces-2024-191533846.html?src=rss

Sony’s new spatial headset will power whatever ‘the industrial metaverse’ is

We didn’t have to wait long to get more details about Sony's new mixed reality headset. Just after Sony teased the “spatial content creation” device onstage at CES 2024, we got a fresh look, and a few more details about the headset during Siemens’ keynote in Las Vegas.

The two companies are teaming up on the device as part of a broader vision to enable an “industrial metaverse” where mixed reality plays a central role in businesses’ manufacturing and design processes. It’s still not clear what the device is actually called — Siemens’ press release refers to it only as “Sony’s new spatial content creation system,” — but the company shared that the headset will be available beginning “later in 2024.”

We also got a new look at the headset itself which, according to Siemens, is equipped with “4K OLED microdisplays.” And, as we noted during Sony’s keynote, the device will be enabled with some unusual-looking controllers. It appears there’s one worn on the finger and another, larger controller that looks more like a typical VR controller.

The two companies also showed off a number of potential use cases for the tech. For example, Red Bull Racing’s engineering and design teams will use the headset to visualize the cockpit of a Formula One car (the Red Bull rep onstage said it was still “early days for us at the moment” regarding the tech).

Siemens is pitching the headset as a tool to enable what the company has dubbed the “industrial metaverse,” which CEO Dr. Roland Busch defined as “an immersive space where people and AI can collaborate in real time to solve real world problems.”

The keynote seemed to confirm that the headset is intended to be used in industrial and professional settings rather than consumer ones. As expected, this is not an Apple Vision Pro competitor. But it could still open up some interesting new possibilities for mixed reality that may be more appealing than VR workstations.

We're reporting live from CES 2024 in Las Vegas from January 6-12. Keep up with all the latest news from the show here.

This article originally appeared on Engadget at https://www.engadget.com/sonys-new-spatial-headset-will-power-whatever-the-industrial-metaverse-is-040838964.html?src=rss

Substack removes five pro-Nazi newsletters but says its rules aren’t changing

Newsletter platform Substack has removed "some" pro-Nazi publications from its platform following weeks of pressure over its content moderation rules.The takedowns include five newsletters flagged to the company by Platformer, which was first to report the news.

The move comes amid growing pressure on the newsletter company after it repeatedly declined to remove publications promoting white nationalist and pro-Nazi views. In November, The Atlantic reported that it found “scores of white-supremacist, neo-Confederate, and explicitly Nazi newsletters on Substack,” some of which were monetized by their authors.

Substack, which has landed in hot water over its refusal to ban Nazis in the past, responded to the article and ensuing controversy by doubling down on its stance. “I just want to make it clear that we don’t like Nazis either—we wish no-one held those views,” Substack cofounder Hamish McKenzie wrote in December. “But some people do hold those and other extreme views. Given that, we don't think that censorship (including through demonetizing publications) makes the problem go away—in fact, it makes it worse.”

In the latest, and somewhat confusing twist, Substack now says it has removed “some publications” but hasn’t changed its underlying rules. In a statement to Platformer, Substack’s founders said that an investigation “found that five out of the six publications you reported do indeed violate our existing content guidelines, which prohibit incitements to violence based on protected classes.” The founders said they were working on new moderation tools “so Substack users can set and refine the terms of their own experience on the platform.”

A Substack spokesperson also confirmed to Engadget that the company had removed “some” newsletters, though it wasn’t clear if the company had removed any others besides the ones reported by Platformer. "Substack regularly reviews reports of all potential content violations," the spokesperson said. “Substack did not change its policies."

Meanwhile, some prominent newsletter writers have already left the platform in protest and have reported cancellations among their paid subscribers. And it's unclear whether the company's latest act of moderation will be enough to reassure its critics. As Casey Newton, who runs Platformer noted, “this issue has raised concerns that go beyond the small group of publications that violate the company’s existing policy guidelines.”

This article originally appeared on Engadget at https://www.engadget.com/substack-removes-five-pro-nazi-newsletters-but-says-its-rules-arent-changing-005815459.html?src=rss

Opting into ‘link history’ on Facebook and Instagram means agreeing to (more) ad targeting

If you’re active on Facebook or Instagram, you might have noticed prompts about a setting called “link history.” The feature allows users to keep track of all of the links they visit via Facebook and Instagram’s in-app browsers.

According to Meta, the feature allows users to ensure they “never lose” a link. “Easily get back to recent links you’ve visited with your Facebook browsing activity now saved in one place,” an in-app notification about the feature says.

But, as Gizmodo points out, the feature also gives Meta a convenient way to improve its targeted advertising, which has taken a hit following Apple’s crackdown on app tracking. “Keep in mind that when link history is on, we may use link history information from Facebook’s Mobile Browser to improve your ads across Meta technologies,” the company notes in a support article.

Instagram has a similar feature, which keeps tabs on links users visit via the app’s browser. Though it seems many users are just now discovering the settings, a Meta spokesperson confirmed the features began rolling out last summer.

Though link history is not enabled by default, it’s the kind of setting many people may opt into without giving much thought, especially because the company markets it as a way to avoid “losing” links. That’s sparked concern among some privacy advocates who worry Meta is using increasingly sneaky ways to gather data about users’ online activity.

The good news, however, is that it’s easy to double check if you have link history enabled, and opt-out if you do.

On Facebook, users will need to open a link from within the app and tap on menu to open the settings from the in-app browser. Then, look for the “link history” toggle. If it’s on, you’ll need to turn it off, and then confirm via the pop-up that you want it disabled.

How to disable the
Screenshots via Facebook

The process on Instagram is pretty much the same: Head to the in-app browser’s settings, look for “link history” and confirm your choice.

Of note, though both apps will immediately delete your link history from their respective apps, Meta says it can take up to 90 days “to complete the deletion process.” This means your previous browsing activity could still play a role in your targeted ads for several weeks after you’ve disabled link tracking.

Of course, the company still has numerous other ways of tracking your online activity, so opting out of link history alone won’t be enough to fully take back control of your data. Privacy conscious ad-haters who live in the European Union, however, do have another option, though it may be even less appealing. Meta recently began offering the ability for EU users to opt out of Facebook and Instagram ads entirely, in exchange for a rather hefty monthly fee.

This article originally appeared on Engadget at https://www.engadget.com/opting-into-link-history-on-facebook-and-instagram-means-agreeing-to-more-ad-targeting-003746719.html?src=rss