https://www.theregister.com/2022/04/26/apple_ios_browser/ [user] [user] Sign in The Register(r) -- Biting the hand that feeds IT [magn] [burg] [burg] Topics Security All SecurityCyber-crimePatchesResearchCSO (X) Off-Prem All Off-PremEdge + IoTChannelPaaS + IaaSSaaS (X) On-Prem All On-PremSystemsStorageNetworksHPCPersonal Tech (X) Software All SoftwareAI + MLApplicationsDatabasesDevOpsOSesVirtualization (X) Offbeat All OffbeatDebatesColumnistsScienceGeek's GuideBOFHLegalBootnotesSite NewsAbout Us (X) Vendor Voice All Vendor VoiceAdobeAmazon Web Services (AWS) MigrationCofense EchoworxGoogle CloudGoogle Cloud's ApigeeGoogle WorkspaceNutanix Rapid7SophosVeeam (X) Resources * Whitepapers * Webinars * Newsletters Situation Publishing * The Next Platform * Devclass * Blocks and Files Get our Weekly newsletter [personalte] Personal Tech Apple's grip on iOS browser engines disallowed under latest draft EU rules Leaked Digital Markets Act language forbids limiting of Safari rivals Thomas Claburn in San Francisco Tue 26 Apr 2022 // 06:04 UTC 55 comment bubble on white --------------------------------------------------------------------- 55 comment bubble on white # reddit Twitter Facebook linkedin WhatsApp email [https://www.theregis] Copy Special report Europe's Digital Markets Act - near-finalized legislation to tame the internet's gatekeepers - contains language squarely aimed at ending Apple's iOS browser restrictions. The Register has received a copy of unpublished changes in the proposed act, and among the various adjustments to the draft agreement is the explicit recognition of "web browser engines" as a service that should be protected from anti-competitive gatekeeper-imposed limitations. Apple requires that competing mobile browsers distributed through the iOS App Store use its own WebKit rendering engine, which is the basis of its Safari browser. The result is that Chrome, Edge, and Firefox on iOS are all, more or less, Safari. [personalte] That requirement has been a sore spot for years among rivals like Google, Mozilla, and Microsoft. They could not compete on iOS through product differentiation because their mobile browsers had to rely on WebKit rather than their own competing engines. [personalte] [personalte] And Apple's browser engine requirement has vexed web developers, who have been limited to using only the web APIs implemented in WebKit for their web apps. Many believe this barrier serves to steer developers toward native iOS app development, which Apple controls. The extent to which Apple profits from the status quo has prompted regulatory scrutiny in Europe, the UK, the US, and elsewhere. Blog posts from web tech advocates like Alex Russell, Epic Games' antitrust complaint against Apple, and lobbying efforts like the formation of Open Web Advocacy have ensured that regulatory remedies being formulated to address allegations of anticompetitive behavior by Apple consider the impact of browser engine restrictions. [personalte] Now those efforts have been translated into the text of the DMA, which, alongside the Digital Services Act (DSA), defines how large technology gatekeepers will be governed in Europe. Here's one relevant passage: Certain services offered together with or in support of relevant core platform services of the gatekeeper, such as identification services, web browser engines, payment services or technical services that support the provision of payment services, such as payment systems for in-app purchases, are crucial for business users to conduct their business and allow them to optimize services. In particular, each browser is built on a web browser engine, which is responsible for key browser functionality such as speed, reliability and web compatibility. When gatekeepers operate and impose browser engines, they are in a position to determine the functionality and standards that will apply not only to their own web browsers, but also to competing web browsers and, in turn, to web software applications. Gatekeepers should therefore not use their position as undertakings providing core platform services to require their dependent business users to use any of those services provided by the gatekeeper itself as part of the provision of services or products by these business users. In short, when the DMA takes effect in 2024, it appears that Apple will be required to allow browser competition on iOS devices. "Article 5 point (e) has been expanded to capture instances where the gatekeeper requires business users to offer or interoperate with a web browser engine," wrote Damien Geradin, founding partner of competition law firm Geradin Partners, in a blog post last week. "This is most likely meant to address Apple's policy of requiring all browsers running on iOS to utilize Apple's WebKit browser engine - a policy which the UK CMA has recently found may have restricted the development of web apps, among others." Digital Markets Act nearly final language Close to the edit ... The revisions made to the Digital Markets Act text Alex Russell, partner program manager on Microsoft Edge who worked previously as Google Chrome's first web standards tech lead, has written several posts about the need for browser competition over the past year. He told The Register that if the DMA language has the effect that web advocates hope, the result will transform software - not just iOS browsers on iOS devices. "The potential for a capable web has been all but extinguished on mobile because Apple has successfully prevented it until now," said Russell. "Businesses and services will be able to avoid building 'apps' entirely when enough users have capable browsers." The long and winding road However, he notes that Apple isn't necessarily going to change its ways. "There's a long road between here and there," he said. "Apple has spent enormous amounts to lobby on this, and they aren't stupid. Everyone should expect them to continue to play games along the lines of what they tried in Denmark and South Korea." Indeed, Apple's efforts to avoid complying with demands made by the Netherlands' Authority for Consumers & Markets indicate the company may be slow to comply with the DMA's forthcoming web browser engine requirements. [personalte] "The details of what it takes to credibly port a competitive browser are intricate and highly technical, and Apple will have many chances to prevaricate and delay, as they so often have," argued Russell. "Lastly, the DMA language seems somewhat ambiguous about the shenanigans that Apple, Google, and Facebook are playing about browser choice and In-App Browsers. Mobile has broken the web in many ways, and they all need to be repaired." A web developer who goes by the name Matthew Thomas and participates in the Open Web Advocacy group, told The Register that he expects Apple will resist to the extent that it can. "Apple knows that before 2024 they will be forced to allow third party engines, which means they will have to invest deeply in Safari to make it competitive," said Thomas. "Other browsers can bring features that Safari doesn't have. That will put pressure on Apple to add those features; otherwise developers will push their users to move browsers." Thomas said hopefully the DMA rules will make web apps competitive with native apps. And if that happens, he suggests interest in native apps may decline - which coincidentally is the fear that led Microsoft to try to eliminate the Netscape browser in the late 1990s. Thomas proposed this thought experiment: "Once web apps work properly across all devices and can provide native-like functionality, how many companies will choose to rebuild their app several times (with the vastly increased development and maintenance costs) [for multiple platforms] rather than just build it once [for the web]." The Register asked Apple for comment. We did not expect a reply, nor have we received one. And yet Apple clearly recognizes that it cannot simultaneously avoid antitrust regulation by pointing to web apps as competition to native iOS apps while requiring the use of a browser engine that outsiders believe is holding back the web. Apple has been actively hiring to fill out its WebKit team and currently has 37 related job openings posted. Jen Simmons, evangelist on the web developer experience team for Safari and WebKit, has been soliciting input on WebKit bugs that need attention, calling out issues that have already been addressed, and touting recent API additions that make WebKit more capable. And Safari's release cadence has accelerated. Thomas is fine with that. He said one of Open Web Advocacy's reasons for lobbying regulators to ensure that Safari gets properly funded. "Apple would not be willing to invest in Safari without the threat of competition," he said. (r) Get our Tech Resources # Share reddit Twitter Facebook linkedin WhatsApp email [https://www.theregis] Copy 55 Comments Similar topics * Apple * Europe * iOS * Web Browser Broader topics * Continent * Operating System * Software * Steve Jobs * Steve Wozniak Narrower topics * AirTag * Apple M1 * App stores * Armenia * Austria * Azerbaijan * Belarus * Belgium * Bulgaria * Chrome * Croatia * Cyprus * Czech Republic * Denmark * Estonia * Finland * Firefox * France * Georgia * Germany * Greece * Hungary * Iceland * iCloud * iMac * Internet Explorer * iPad * iPhone * iPod * Ireland * Italy * iTunes * Kazakhstan * Latvia * Liechtenstein * Lithuania * Luxembourg * Mac * MacBook * Malta * Microsoft Edge * Monaco * Netherlands * Norway * Opera * Poland * Portugal * Romania * Russia * Safari * San Marino * Serbia * Siri * Slovakia * Slovenia * Spain * Sweden * Switzerland * Tim Cook * Turkey * Ukraine * United Kingdom * Vivaldi Corrections Send us news --------------------------------------------------------------------- [personalte] Other stories you might like * Nvidia, Intel, others pour $130m into optical chip startup Ayar Labs The current affairs reporting you've been searching for Dylan Martin Tue 26 Apr 2022 // 21:34 UTC comment bubble on black Ayar Labs believes future chips and systems will be connected by light rather than electrical signals, and that vision is receiving considerable buy-in from semiconductor giants Nvidia and Intel - as well as a few other major tech companies and more than a dozen investment firms. This buy-in is coming in the form of a $130 million funding round for Ayar Labs ,announced on Tuesday, that will help the startup commercialize its chip-to-chip optical photonics technology, which it claims is a much faster way to transmit data than electrical signaling while using much less power. The silicon photonics startup disclosed it has already shipped its first products in volume, and it expects to ship thousands of its in-package optical interconnect chips by the end of the year. Continue reading * Who is exploiting VMware right now? Probably Iran's Rocket Kitten, to name one We hope you've patched that 9.8/10 severity bug Jessica Lyons Hardcastle Tue 26 Apr 2022 // 20:52 UTC comment bubble on black A team of Iranian cyber-spies dubbed Rocket Kitten, for one, is likely behind attempts to exploit a critical remote-code execution vulnerability in VMware's identity management software, according to endpoint security firm Morphisec. Earlier this month, VMware disclosed and fixed the security flaw, tracked as CVE-2022-22954, in its Workspace ONE Access and Identity Manager software. In terms of CVSS severity, the bug was rated 9.8 out of 10. We note the virtualization giant revised its advisory on the matter on April 13 to say miscreants had exploited the vulnerability in the wild. The bug involves server-side template injection, and can be abused by anyone with network access. Exploitation essentially clears the way for intruders to deploy ransomware, steal data, and perform any other dirty deeds. Continue reading * Coca-Cola probes pro-Kremlin gang's claims of 161GB data theft Life tastes not so good right now Jessica Lyons Hardcastle Tue 26 Apr 2022 // 18:58 UTC 8 comment bubble on white Coca-Cola confirmed it's probing a possible network intrusion after the Stormous cybercrime gang claimed it stole 161GB of data from the beverage giant. "We are aware of this matter and are investigating to determine the validity of the claim," Coca-Cola communications global vice president Scott Leith told The Register on Tuesday. "We are coordinating with law enforcement." The ransomware gang, which has declared its support for the Russian government's illegal invasion of Ukraine, this week bragged it "hacked some of the company's servers and passed a large amount of data inside them without their knowledge." It's now trying to sell the stolen data for about $64,000, or nearest offer "depending on the amount of data you want," Stormous wrote on its website where it leaks pilfered information. Continue reading * d-Matrix gets $44m in quest for efficient AI server chiplets d-ream team or a d-isaster? Let's see what Microsoft's money can do Dylan Martin Tue 26 Apr 2022 // 18:09 UTC comment bubble on black Another day, another US chip startup raising tens of millions of dollars. This time, it's one you likely haven't heard of yet: d-Matrix, which has raised $44 million from Microsoft, SK Hynix, Marvell Technology, and others for a new kind of efficient AI chiplet design for datacenter servers. The Santa Clara-based startup disclosed its funding and initial roadmap last week, saying it will use an "innovative digital in-memory computing" architecture to build processors made of chiplets that offer what it claims will be faster AI inference performance than CPUs and GPUs for large transformer models. Continue reading * USA's plan to decouple its tech with China lacks a strategy - report The Schmidt hits the fan Laura Dobberstein Tue 26 Apr 2022 // 16:30 UTC 11 comment bubble on white The USA's policy of decoupling its technology industries from China lacks a strategy, a theory of success, and an understanding of how to achieve its ill-defined goals, according to a new paper by Jon Bateman from the thinktank Carnegie Endowment for International Peace (CEIP). "The United States cannot afford simply to muddle through technological decoupling, one of the most consequential global trends of the early twenty-first century," wrote Bateman, a former senior intelligence analyst, policy adviser and speechwriter at the US Department of Defense, in the document, titled "US China Technological 'Decoupling', a Strategy and Policy Framework." Bateman acknowledges there is bipartisan support for measures controlling China's access to US tech, but contends that the issue of which strategic technologies should be controlled and to what degree, are left undefined. Continue reading * When companies invest, they invest in software - report Well, it's not like there's any hardware to buy at the moment Brandon Vigliarolo Tue 26 Apr 2022 // 16:00 UTC 1 comment bubble on white Among US companies with the largest pool of investments, the biggest focus their energy around software, a report finds. Cisco, Morgan Stanley and Microsoft are the three businesses that have made the most investments in other firms, with a total of 214, 206 and 163, respectively. All three of them made investments across other industries, but the segment that saw the most from the trio was software. BrokerChooser, a website that does exactly what its name implies, originated the research, which it said can help investors determine which companies offer the biggest possible return thanks to their own investments in outside companies. Continue reading * Semiconductor sales forecast to hit $676b in 2022 Pandemic supply chain and war in Ukraine has potential to disrupt recovery, warns Gartner Paul Kunert Tue 26 Apr 2022 // 15:30 UTC comment bubble on black The value of semiconductors sold worldwide in 2022 is projected to reach $676 billion, although further revisions by Gartner are a distinct possibility, such is the increased market volatility. Forecasting chip demand during a pandemic is something of a dark art and the conflict in Ukraine hasn't made things any easier, with two major suppliers of neon used to fabricate chips based in the war-torn country. Suppliers Incas and Cryoin (based in Mariupol and Odessa respectively) are estimated to produce up to 54 percent of the world's neon and both shut up shop in early March following Russia's invasion. The inert gas is used in the lithography stage. Continue reading * Red Hat uncorks Application Foundations for cloud-native development Ready-to-implement components that make the business easier, firm claims Dan Robinson Tue 26 Apr 2022 // 15:00 UTC comment bubble on black Red Hat Application Foundations, a set of software services for organizations developing container-based applications across hybrid and multi-cloud environments, is out. Application Foundations builds on Red Hat's OpenShift, which has evolved into a platform-as-a-service (PaaS) for development and deployment based around containers and Kubernetes. This adds to the existing suite of services with the goal of providing a toolkit for integrating application and data services as part of an infrastructure modernization strategy, Red Hat said. Continue reading * DDoS attacks at an all-time-high in Q1 2022, says Kaspersky More attacks and more targeted attacks than ever before. What could have happened to cause that uptick? Richard Speed Tue 26 Apr 2022 // 14:30 UTC 1 comment bubble on white Kaspersky has released a report showing Distributed Denial of Service (DDoS) attacks hit an all-time-high in the first quarter of 2022. The attacks detected by the security outfit easily surpassed those of the previous quarter and were up 46 per cent on the same time last year. The number of targeted attacks was up by an even higher percentage - 81 per cent compared to the previous quarter. DDoS attacks, as Reg readers know, are designed to disrupt network resources of businesses and public services. They are particularly nasty when compromised systems are depended upon by the wider population. Continue reading * Google Cloud sees storm brewing over API security Strap in, we're on a tour from zero trust to chatty digital assistants Brandon Vigliarolo Tue 26 Apr 2022 // 14:00 UTC 2 comment bubble on white If you're developing software or working with anything serverless, you'll know that remote and as-a-service APIs are what make the clouds float. It's debatable whether the proliferation of cloud APIs is a good thing, and taking remote API advice from Google may strike some people as unusual given its past. Nonetheless, Google Cloud's director of product, Vikas Anand, and Google Cloud senior product manager David Feuer published a jointly-written blog post of seven trends in the cloud API world they've noted. Continue reading * MegaChips takes aim at edge AI in US with ASIC program Japanese ASIC provider rolling out AI partner program to get around in-house expertise Dan Robinson Tue 26 Apr 2022 // 13:30 UTC comment bubble on black Japanese ASIC provider MegaChips is rolling out an AI partner program pitched as allowing organizations to deliver AI capabilities without requiring in-house experts. It is also expanding into the US market to sell its full ASIC design services to American tech companies. MegaChips is a global fabless chip company that claims to work closely with its customers' design teams to deliver the tech they need in silicon. The AI Partner Program marks the entry of the business into the global edge AI chips market, estimated to be worth $9 billion in 2020, claiming there is growing demand for embedded AI solutions. For edge AI chips, think of silicon designed to power devices at the network edge, where processing of data may need an instant reaction, power may be limited, and sending all the data back to the cloud or a datacenter for processing may be costly in terms of bandwidth and add latency. Continue reading ABOUT US* * Who we are * Under the hood * Contact us * Advertise with us MORE CONTENT* * Latest News * Popular Stories * Forums * Whitepapers * Webinars SITUATION PUBLISHING* * The Next Platform * DevClass * Blocks and Files * Continuous Lifecycle London * M-cubed Situation Publishing The Register - Independent news and views for the tech community. Part of Situation Publishing SIGN UP TO OUR DAILY NEWSLETTER Subscribe Twitter Facebook LinkedIn feeds Security Scorecard no-js Biting the hand that feeds IT (c) 1998-2022 Do not sell my personal information Cookies Privacy Ts&Cs