Teddy Svoronos warns that iPadOS 27 breaks a crucial presentation workflow: using an iPad to annotate handouts and project them via AirPlay while running other apps (PowerPoint on a Mac, private speaker notes, poll results) now risks exposing everything to the audience. In the author’s teaching setup, being able to tap between apps without changing what the external display shows is essential; iPadOS 27 instead snaps the external screen to mirror the whole iPad whenever any app other than the presenting app is tapped, revealing notes and polls and causing distracting window flashes.
The behavior varies by app but is uniformly disruptive: GoodNotes can recover presenter view after tapping back, Keynote exits the presentation, and PowerPoint requires restarting the slideshow. Apple’s apparent rationale was to simplify which app “controls” the external display, but making the most-recently-tapped app take precedence is far worse. The recommended fix is straightforward: apps in presenter mode should retain exclusive control of the external display until the presentation is stopped or the document closed. A feedback report (FB23615646) has been filed and users who present or teach with iPads are advised to avoid upgrading to iPadOS 27 until this is resolved.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A PHP vulnerability currently has no working exploit, despite many fake PoCs circulating online. LLMs have falsely been portrayed as able to develop exploits, but practical testing shows no effective attack exists yet. (eliastaylor.com)
The Trump administration denaturalized two individuals who obtained U.S. citizenship by hiding their criminal activities. The move aims to revoke citizenship from those who gained it through fraudulent means. (justice.gov)
Meta's new enterprise terms state that if its AI makes a mistake, the customer is legally responsible. The terms also expand liability to content from partners and give Meta rights to scrape and use user content. (cio.com)
A vulnerability in HTTP/3 implementations allows remote clients to cause servers to allocate excessive memory by exploiting QPACK header compression. Seven of ten tested implementations are vulnerable, with some already patched to prevent resource exhaustion. (foxio.io)
Oracle has issued a security alert for CVE-2026-91403, affecting multiple Java and GraalVM products. Patches are available for supported versions, and Oracle recommends upgrading to ensure security. (oracle.com)
Help desks are increasingly targeted by social engineering attacks to reset MFA accounts. Effective verification methods for remote staff and contractors are being explored to prevent breaches. (news.ycombinator.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.