Apple has debuted version 17.4 of its iOS & iPadOS, and by doing so made them compliant with European law.
The release notes for the OS update are a masterpiece of understatement because they scarcely mention the big changes required by the European Union’s Digital Markets Act: allowing choice of browser engine and access to third-party app stores and payment services, before March 6th.
Browser choice is only mentioned in the context of a known issue that means the default browser choice screen – which now appears after installation of the OS update within the EU – “might not show up when intended and apps requiring certain managed entitlements might not install or show an error.”
Nice start, Apple.
The notes also describe a couple of glitches with “Alternative app marketplaces”.
Apple fought hard and long against third party marketplaces and payment services, claiming they would damage the experience of using iThings, and introduce risks. Cupertino also suggested browser engines other than its own WebKit might degrade security and usability.
And yet, iOS 17.4 delivers all of the above.
See, Apple? That wasn’t so hard after all.
iOS 17.4 also adds the ability to transcribe podcasts, additional emoji, and quantum-safe security for iMessage.
As promised, the update retains progressive web apps after Apple threatened to remove them as part of its efforts to keep its walled garden intact while also complying with Europe’s requirements.
iOS 17.4 also includes security updates, including one discovered by “Cristian Dinca of ‘Tudor Vianu’ National High School of Computer Science, Romania.” Students at the school are aged between 11 and 19, suggesting Dinca’s career is off to an early start as CVE-2024-23243 will forever be linked to his name.
Dinca’s discovery pertained to private data redaction for log entries in Apple’s AirDrop peer-to-peer file transfer service.
Which is kind of a big deal given that Chinese authorities detest AirDrop as it’s hard for them to surveil.
Source: The register