#apple · Cascadity

MMMarket Movers #apple #big-tech #earnings #iphone #margins

Apple beats on iPhone sales but a softer margin forecast sends the stock lower

CNBC lines up the quarter against estimates and explains why most analysts still like the stock despite the outlook.

Apple reported fiscal fourth-quarter results on Monday, November 2: earnings of $2.10 a share against $1.99 expected by analysts polled by LSEG, and revenue of $114.48 billion against $113.39 billion expected. iPhone sales of $57.58 billion beat the $56.54 billion consensus, while iPad and other product sales fell short.

Apple forecast a gross margin of 45% to 46% for the current quarter, below the average analyst estimate of 46.3%, and the shares slid about 4% in premarket trading on Tuesday. CNBC notes the stock was up about 24% for the year and reports that analysts, including at Goldman Sachs, still see the results as a temporary blip.

Read it at the source

CNBCApple earnings beat, but margin outlook weighs on stock Independent ↗

MVMaker Views #apple #certificate-authority #certificates #emudhra #git #Hacker-News #macos #mozilla #pki #tls

Apple's command-line git, curl and python3 still trust the compromised eMudhra certificates, researchers warn

The page includes a one-line check (and a safe demo) to see if your Mac's git can be fooled; Apple's support note explains the manual fix.

Follow-up to last week's eMudhra breach, in which the private keys of eight of the Indian certificate authority's intermediate CAs were compromised. A community site run by Dennis Jackson says that as of October 28, the developer tools Apple ships with macOS, including git, curl and python3, still accept certificates from those CAs, 11 days after Apple was notified. It says macOS 27.2, released October 26, did not fix this and undid the manual workaround. Because anyone holding the keys can mint a certificate for any site, it argues that an attacker on the network path could intercept git clones and pushes or capture tokens; the page offers a test repository that impersonates GitHub.

Apple's support note says it has blocked the 12 affected certificates in Safari, Mail and apps using its networking frameworks since October 19, and the emSign ECC Root CA - G3 since October 23. It confirms that tools such as curl and git check /etc/ssl/cert.pem and can still accept these certificates until a future software update, and gives steps to remove the roots by hand.

On Hacker News, some argued the title should blame the shared certificate file rather than git, and one commenter said the threat is overblown because an attacker needs a network position first.

Read it at the source

eMudhra Intermediate CA Compromise (community site)Apple's git still trusts the compromised eMudhra certificates Independent ↗ Apple SupportAbout the compromised eMudhra intermediate CAs - Apple Support ↗ Hacker NewsDiscussion: Apple's git still trusts the compromised eMudhra certificates Independent ↗ Mozilla Bugzilla2083449 - eMudhra: Private key compromise of Intermediate Certificates ↗ Ars TechnicaDisgraced eMudhra drops out of TLS business after using cert private key of 4 - Ars Technica Independent ↗

Rabbit Holes 2

Man-in-the-middle attack

After exploring Apple's git still trusts the compromised eMudhra certificates, for the attack the warning is about, read Man-in-the-middle attack.

Defines the attack in which someone secretly relays, and can alter, the traffic between two parties who think they are talking directly.

Wikipedia · Wade · 5 min

0
Certificate authority

After exploring About the compromised eMudhra intermediate CAs - Apple Support, for why one CA's leaked keys matter to everyone, read Certificate authority.

Explains the trusted third parties that sign digital certificates vouching for who owns a public key, the system that a compromised CA undermines.

Wikipedia · Wade · 5 min

0