Hackers had access to dashboards used to remotely manage and control thousands of credit card payment terminals manufactured by digital payments giant Wiseasy, a cybersecurity startup told TechCrunch. From a report: Wiseasy is a brand you might not have heard of, but it's a popular Android-based payment terminal maker used in restaurants, hotels, retail outlets and schools across the Asia-Pacific region. Through its Wisecloud cloud service, Wiseasy can remotely manage, configure and update customer terminals over the internet. But Wiseasy employee passwords used for accessing Wiseasy's cloud dashboards -- including an "admin" account -- were found on a dark web marketplace actively used by cybercriminals, according to the startup. Youssef Mohamed, chief technology officer at pen-testing and dark web monitoring startup Buguard, told TechCrunch that the passwords were stolen by malware on the employee's computers. Mohamed said two cloud dashboards were exposed, but neither were protected with basic security features, like two-factor authentication, and allowed hackers to access nearly 140,000 Wiseasy payment terminals around the world.

Mark Zuckerberg believes that Apple and his company are in a "very deep, philosophical competition" to build the metaverse, suggesting the two tech giants are ready to butt heads in selling hardware for augmented and virtual reality. The Verge reports: The Meta CEO told employees earlier this month that they were competing with Apple to determine "what direction the internet should go in," according to a recording of his comments during an internal all-hands meeting obtained by The Verge. He said that Meta would position itself as the more open, cheaper alternative to Apple, which is expected to announce its first AR headset as soon as later this year. "This is a competition of philosophies and ideas, where they believe that by doing everything themselves and tightly integrating that they build a better consumer experience," Zuckerberg said of the brooding rivalry. "And we believe that there is a lot to be done in specialization across different companies, and [that] will allow a much larger ecosystem to exist."

Since rebranding Facebook's company name to Meta, Zuckerberg has been pushing for the concept of interoperability for the metaverse, or what he sees as the next major chapter of computing after mobile phones. Meta recently helped stand up the Metaverse Open Standards Group with Microsoft, Epic Games, and others. The idea is to spur the creation of open protocols that will let people easily move through future immersive, 3D worlds with their virtual goods. Apple is absent from the group, which Zuckerberg called out as not surprising in his comments to employees. He explained how Apple's approach of building hardware and software it tightly controls had worked well with the iPhone, but that for the metaverse, "it's not really clear upfront whether an open or closed ecosystem is going to be better."

[...] If VR and AR do take off like Zuckerberg hopes, it seems he wants to position Meta as the Android to Apple's iOS. There is a parallel to draw already: Meta's Quest headset already allows the side loading of apps that are not approved by Meta's VR app store, similar to how Google's Android allows for sideloading. And even though it just increased the price of the Quest by $100, Meta's hardware is still mostly sold at a loss or breakeven. [...] Zuckerberg's remarks suggest that even as he tries to invent his way out of being under Apple's thumb on mobile, the two tech giants are going to be battling for years to come.

In an upcoming update, Chromebooks equipped with mobile data will be able to serve as a Wi-Fi hotspot for other devices, just like Android and iOS devices can today. 9to5Google reports: The work-in-progress feature has made its first appearance in ChromeOS code in the form of a new flag coming to chrome://flags. The details are quite slim at the moment, with little more than the flag description available today. That said, it's easy to imagine how a mobile hotspot would work on ChromeOS, based on how the same feature works on Android phones today.

Presumably, you would be able to choose the name and password for your Chromebook's hotspot through the Settings app in ChromeOS, where you can also toggle the hotspot on and off. If it truly follows the example of Android, there would also be an easy way to turn on your hotspot through a Quick Settings toggle.

With Apple's new CarPlay software announced in June, the company is "is diving deeper into its automotive ambitions, opening up the possibility to enter into a multibillion segment of the auto industry that's growing quickly: The ability to sell additional services and features to car owners," reports CNBC. From the report: The auto industry faces an unappealing choice: Offer CarPlay and give up potential revenue and the chance to ride a major industry shift, or spend heavily to develop their own infotainment software and cater to an potentially shrinking audience of car buyers who will purchase a new vehicle without CarPlay. [...] Industry observers believe carmakers need to embrace software services -- and look at Apple's offering with skepticism -- or risk getting left behind. "It's a really difficult time in the industry, where the car companies think they're still building cars. They're not. They're building software on wheels, and they don't know it, and they're trading it away," said Conrad Layson, senior analyst at AutoForecast Solutions.

The new version of CarPlay could be a huge emerging revenue engine for Apple. First, if a user loves the iPhone's CarPlay interface, then they're less likely to switch to an Android phone. That's a strategic priority for Apple, which generates the majority of its revenue through hardware sales. Second, while the company doesn't yet charge a fee to automakers or suppliers, it could sell services for vehicles the same way it distributes iPhone software. In June, Apple revealed that it has explored features that integrate commerce into the car's cockpit. One new feature announced this summer would allow CarPlay users to navigate to a gas pump and pay for the fuel from the dashboard of the car, according to Reuters. Apple already generates tens of billions from the App Store, and stands to boost that if it ever decides to charge for services in cars...

Nvidia has just announced that GeForce Now is picking up support for 120fps gameplay on all Android smartphones, after previously limiting the functionality to only a few select models. 9to5Google reports: GeForce Now is a cloud gaming service that allows players to stream PC games from marketplaces such as Steam and the Epic Games Store, among others, to virtually any device. It's a great way to expand the gaming experience on your PC over to a mobile phone or your TV, or just to play games that your PC isn't powerful enough to run on its own. The service is free, but you can pay to get longer sessions and better quality.

Last year, the service picked up its RTX 3080 tier, which offers the power of the still-hard-to-find graphics card, but through the cloud. While it's a pricey option, it was quickly found to be the gold standard of cloud gaming thanks to minimal input latency, higher resolution, and faster refresh rate. It's that faster refresh rate that's boosting GeForce Now for Android players this week, with 120fps expanding to all Android phones with faster refresh rates. If your phone has a 120Hz display, you can now stream games at 120fps. The official list of supported devices can be found here.

Nvidia says that the expanded support will arrive "over the coming weeks" and that the experience could vary from device to device.

An anonymous reader quotes a report from 9to5Google: With the addition of the developer-generated Data safety section this year, Google Play removed the old list of app permissions. The Play Store is now reversing this decision in response to user feedback and will have both coexist. In a short thread this morning, Android Developers (@AndroidDev) on Twitter said it "heard your feedback that you find the app permissions section in Google Play useful, and we've decided to reinstate it." It will be "back shortly," but the company did not specify if this will be done through a server-side change or whether a new version of the Play Store app is required: "The Data safety section provides users with a simplified view of how an app collects, shares, & secures user data, but we also want to make app permissions information easily viewable for users to understand an app's ability to access specific restricted data & actions too."

As Google summarizes, the Play permissions list is "based on the install-time permissions that an app declares in its manifest," and "represents an app's ability to access specific data." Data safety is focused on what an app collects and shares with third parties, similar to Apple's App Store. As of July 20, Google is directly warning "non-compliant new app submissions and app updates" that don't completely fill out the Data safety form. Developers have until August 22 to comply or they won't be able to publish new apps or updates. After that, applications might be removed from the Play Store.

After trying, and failing, to acquire the popular chat platform Discord for $10 billion, Microsoft has opted for the next-best thing: directly integrating Discord's voice-chat capabilities into Xbox consoles. Ars Technica reports: The news arrived on Wednesday on Xbox Blog, and it clarified that for the time being, Discord access would be exclusive to the optional "Xbox Insider" tier of early, beta, and preview console OS updates. That update is already going live in waves to Xbox Insiders today, and it adds a new tooltip to the system's "chat" sidebar: "Try Discord Voice on Xbox today!"

[...] Sadly, this week's rollout of Discord on Xbox is a bit limited. The biggest issue is that there is no formal Discord app or interface on Xbox. You will need to keep a smartphone handy to initiate a "handoff" of your Discord session. Get ready for an annoying first-time setup process. Should you have an updated Xbox on the Insider OS track, its new "Try Discord Voice" prompt will initiate an account-sync process, which requires using a mobile Discord app to take a photo of a QR code displayed by your Xbox. (You'll need to re-do this if you've done so before, due to it adding a new level of credential for voice chat.) With this in place, when you are about to join a voice channel on Discord, a new "try voice chat on console" prompt will appear. Tapping through this will then, ugh, create another handover to Microsoft's dedicated Xbox app on either iOS or Android. Yes, if you want this to work, you need to install the Xbox app on your mobile device (and Discord will suggest you do so, if you haven't yet). This facilitates the key technical aspect of forwarding all Discord audio to your Xbox hardware.

With all that in place, presto: You can now talk to any participants in the Discord voice channel you chose directly on your Xbox. Its menu interface supports either muting or changing the volume level of every other user in the voice chat channel you chose, which is appreciated as a quickly accessible option during frantic gameplay. A one-button toggle in the menu allows chatters to switch between Discord voice chat and a particular game's dedicated voice-chat channel. (This is useful when you're talking to friends while in the midst of random online matchmaking, then need to turn on in-game voice chat for a second to confirm a strategy to your current teammates before going back to discussing souffle recipes with buddies.) All greater Discord control, sadly, goes back to your smartphone...

Russian government hackers tried to trick Ukrainian and international volunteers into using a malicious Android app disguised as an app to launch Distributed Denial of Service (DDoS) attacks against Russian sites, according to new research published by Google on Tuesday. Motherboard reports: Since the beginning of the Russian invasion, Ukraine has resisted not only on the ground, but also online. A loose collective of technologists and hackers has organized under an umbrella quasi-hacktivist organization called the IT Army, and they have launched constant and persistent cyberattacks against Russian websites. The Russian government tried to turn this volunteer effort around to unmask Ukrainian hackers, in a smart, but ultimately failed attempt.

Google researchers wrote in the report that the app was created by the hacking group known as Turla, which several cybersecurity companies believe works for the Kremlin. [Shane Huntley, the head of the Google research team Threat Analysis Group] said that they were able to attribute this operation to Turla because they have tracked the group for a long time and have good visibility into their infrastructure and link it to this app. The hackers pretended to be a "community of free people around the world who are fighting russia's aggression" -- much like the IT Army. But the app they developed was actually malware. The hackers called it CyberAzov, in reference to the Azov Regiment or Battalion, a far-right group that has become part of Ukraine's national guard. To add more credibility to the ruse they hosted the app on a domain "spoofing" the Azov Regiment: cyberazov[.]com.

The app actually didn't DDoS anything, but was designed to map out and figure out who would want to use such an app to attack Russian websites, according to Huntely. "Now that they have an app that they control, and they see where it came from, they can actually work out what the infrastructure looks like, and work out where the people that are potentially doing these sorts of attacks are," Huntley said. Google said the fake app wasn't hosted on the Play Store, and that the number of installs "was miniscule." Still, it was a smart attempt to trick unknowing Ukrainians or people interested in working with Ukrainians to fall into the trap.

Google will start allowing the developers of non-gaming apps in the European Economic Area (EEA) to offer alternate payment systems. In a blog post, Google outlines its plans to comply with the Digital Markets Act (or DMA), a piece of legislation aimed at regulating big tech. From a report: The DMA passed through the European Parliament earlier this month, but it isn't expected to go into force until spring 2023. But Google is rolling out the changes ahead of time to make sure that its plans "serve the needs" of users.

The legislation requires "gatekeepers," or companies with a market capitalization of $75.8 billion or over, to follow a set of rules meant to promote competition among digital platforms. Failing to comply could lead to fines of up to 10 percent of a firm's global revenue or 20 percent in case of repeat offenses. Android developers who choose to use an alternate payment processor will still have to pay Google a service fee for each transaction on the first $1 million they make within one year. However, Google says it will reduce this fee by 3 percent, meaning the company will take a 12 percent or lower cut from every transaction. If developers make more than $1 million in one year, Google will charge developers a 27 percent fee on transactions (3 percent less than the standard 30 percent).

A big chunk of Fuchsia-related code has been removed from the Android Open Source Project (AOSP) this week, but Google's two operating systems are still set to have an intertwining relationship. In its place, we have a lone "TODO" message, suggesting that Google may be building up something new in its place. The developer responsible for the change primarily works on Fuchsia's "Starnix" project. 9to5Google reports: In its most public form, Google's in-house operating system, Fuchsia, powers two of the company's smart displays, the Nest Hub and Nest Hub Max. But having watched it develop over the last few years, we know that Google has much larger ambitions for the Fuchsia project. Easily the most ambitious of these is a clear intention for some Fuchsia devices to be able to run apps from other operating systems like Android and Linux. This could -- in theory! -- allow a Fuchsia-powered device to seamlessly replace a Chromebook or Android phone, keeping older apps running as normal. [...]

First shared in early 2021 as a proposal, Starnix is designed to make it possible for Fuchsia to "natively" run apps and libraries that were built for Linux or Android. To do this, Starnix would act to translate the low-level kernel instructions from what Linux expects to what Fuchsia's Zircon kernel expects. It's now been over a year since the Starnix proposal was accepted and work began. In that time, the Fuchsia team has made significant progress in making Linux programs capable of running on Fuchsia devices. In fact, a dedicated Starnix shell was briefly available for testing in builds of Fuchsia's "workstation" -- an experience designed to let developers and enthusiasts play with the operating system. Notably, this shell was not simply Linux but actually a "small Android distribution included in the system." More recently, this was replaced with the ability to access Fuchsia and Starnix's Android capabilities through the adb command, just like you would any other Android device. Looking ahead, it seems Fuchsia's Starnix team is focused on steadily making the operating system compatible with Android and its applications. [...]

"The lock screen is about to change," writes CNET — both for iOS and Android devices. Apple's iOS 16 update, which launched in public beta on Monday, will bring more customization options and new widgets to the iPhone's lock screen when it arrives this fall. You'll be able to see more information quickly and apply stylistic effects to lock screen photos similar to the iPhone's Portrait Mode photography feature.... Like the Apple Watch, the new lock screen should make it easier to see crucial pieces of information without having to dig into apps or even unlock your phone.
And for Android phones: Glance, a Google-backed subsidiary of mobile ad tech company InMobi, also reiterated its plans to bring its lock screen platform to the U.S. [though the company also says there's "no definitive timeline."] And Google is reportedly planning to incorporate more bits of information into its own lock screen widget for Pixel phones.... Glance's lock screen will appear in the form of what it calls "spaces," which are essentially curated lock screens designed to fit specific themes. A fitness-oriented lock screen, for example, would show statistics such as calories burned and exercise goals alongside a music player. A news "space" would show headlines and the weather, while a music version could surface live concerts....

The TechCrunch report about Glance's US arrival sparked concerns that advertisements would be coming to the lock screen, too. Glance's business page shows examples of advertisers that have used its platform to reach potential customers on the very first screen they see when picking up their phone. Intel, Zomato and Garnier are among the listed case studies. But Rohan Choudhary, vice president and general manager of the Glance feed, told CNET the US version would be ad-free. "We are very clear that in the US, we will not have ads on the lock screen at all," he said....

The company says it plans to monetize its service through news subscriptions and commerce links from shopping platforms that are surfaced through Glance.
Glance's motto? "Transforming lock screens into smart surfaces."

An anonymous reader quotes a report from Ars Technica: Google's developer deadline for the Play Store's new "Data Safety" section is next week (July 20), and we're starting to see what the future of Google Play privacy will look like. The actual Data Safety section started rolling out in April, but now that the developer deadline is approaching... Google is turning off the separate "app permissions" section? That doesn't sound like a great move for privacy at all.

The Play Store's new Data Safety section is Google's answer to a similar feature in iOS 14, which displays a list of developer-provided privacy considerations, like what data an app collects, how that data is stored, and who the data is shared with. At first blush, the Data Safety entries might seem pretty similar to the old list of app permissions. You get items like "location," and in some ways, it's better than a plain list of permissions since developers can explain how and why each bit of data is collected.

The difference is in how that data ends up in Google's system. The old list of app permissions was guaranteed to be factual because it was built by Google, automatically, by scanning the app. The Data Safety system, meanwhile, runs on the honor system. Here's Google's explanation to developers of how the new section works: "You alone are responsible for making complete and accurate declarations in your app's store listing on Google Play. Google Play reviews apps across all policy requirements; however, we cannot make determinations on behalf of the developers of how they handle user data. Only you possess all the information required to complete the Data safety form. When Google becomes aware of a discrepancy between your app behavior and your declaration, we may take appropriate action, including enforcement action."

Google has counter-sued Match seeking monetary damages and a judgement that would let it kick Tinder and the group's other dating apps out of the Play Store, Bloomberg has reported. Engadget reports: Earlier this year, Match sued Google alleging antitrust violations over a decision requiring all Android developers to process "digital goods and services" payments through the Play Store billing system. Following the initial lawsuit in May, Google and Match reached a temporary agreement allowing Match to remain on the Play Store and use its own payments system. Google also agreed to make a "good faith" effort to address Match's billing concerns. Match, in turn, was to make an effort to offer Google's billing system as an alternative.

However, Google parent Alphabet claims that Match Group now wants to avoid paying "nothing at all" to Google, including its 15 to 30 percent Play Store fees, according to a court filing. "Match Group never intended to comply with the contractual terms to which it agreed... it would also place Match Group in an advantaged position relative to other app developers," the document states. Match group said that Google's Play Store policies violate federal and state laws. "Google doesn't want anyone else to sue them so their counterclaims are designed as a warning shot," Match told Bloomberg in a statement. "We are confident that our suit, alongside other developers, the US Department of Justice and 37 state attorneys general making similar claims, will be resolved in our favor early next year."

As noted by a Reddit user and confirmed by Ars Technica, Microsoft's xCloud game streaming looks noticeable worse when running on Linux than Windows. From the report: With the Linux User-Agent, edges are generally less sharp and colors are a little more washed out. The difference is even more apparent if you zoom in on the Forza logo and menu text, which shows a significant reduction in clarity. Interestingly, the dip in quality seems to go away if you enable "Clarity Boost, an Edge-exclusive feature that "provid[es] the optimal look and feel while playing Xbox games from the cloud," according to Microsoft. That's great for Linux users who switched over to Microsoft Edge when it launched on Linux last November. But Linux users who stick with Firefox, Chrome, or other browsers are currently stuck with apparently reduced streaming quality.

That Linux quality dip has led some to speculate that Microsoft is trying to reserve the best xCloud streaming performance for Windows machines in an attempt to attract more users to its own operating system. But using a Macintosh User-Agent string provides streaming performance similar to that on Windows, which would seem to be a big omission if that theory were true. Microsoft also hasn't published any kind of "best on Windows"-style marketing in promoting xCloud streaming, which would seemingly be a key component of trying to attract new Windows users. (The quality difference could be a roundabout attempt to get Linux users to switch to the Edge browser, where Clarity Boost offers the best possible quality. But that still wouldn't fully explain why Windows users on other browsers, without Clarity Boost, also get better streaming quality than their Linux brethren.)

Others have suggested that the downgrade could simply be a bug caused by Microsoft's naive parsing of the User-Agent strings. That's because the User-Agent strings for Android browsers generally identify themselves as some version of Linux ("Linux; Android 11; HD1905," for example). Microsoft's xCloud code might simply see the "Linux" in that string, assume the user is running Android, then automatically throttle the streaming quality to account for the (presumably) reduced screen size of an Android phone or tablet.

A Google-backed ad company called Glance is looking to launch in the US, and it brings media content, news, and casual games to Android lock screens. Android Police reports: If you're not familiar with Glance, you can count yourself lucky. The lock screen platform is part of the pre-installed software on many, if not most, Android phones sold in India and other Asian markets, and it has also made its way to the EU on a few select brands. Glance says that since it was launched in 2019, it has become part of over 400 million sold smartphones. The service has taken it upon itself to monetize the lock screen, pushing news and ad feeds right into people's faces before they even unlock their phones. It's a subsidiary of Indian advertising behemoth InMobi, focusing on mobile-first ads.

According to a TechCrunch report, the service is looking to launch in the US within the next two months. The company is negotiating with US carriers to look into partnerships and to become part of the out-of-the-box experience of "several smartphone models by next month." In contrast to Asia, where the company is working directly with smartphone manufacturers, Glance seems to focus on carriers in the US. This makes sense, given the iron grip mobile operators have on the smartphone market.

Based on my experience with Glance on a few Vivo review units (like the Vivo X80 Pro), the lock screen feed tries hard to become part of your routine. Occasional notifications and swipe suggestions on the lock screen nudge you to interact with it. Once you give in and open the feed, it will override your lock screen wallpaper with its content, making you change back to your preferred wallpaper manually. [...] As for the US launch, there is no word on what exactly the feed is going to look like. We would expect a healthy middle ground between the Indian and the European version in the beginning as to not put off people, though it wouldn't be surprising if the company quickly turns things up given that consumer protection is weaker in the US than in the EU. One thing is certain: An entry in the US market will give Glance the opportunity to access users with more money to spend than many in Asian countries. This should allow Glance to ask advertisers for higher prices, allowing the company to grow even faster.

HTC, the once-impressive Android smartphone manufacturer, has a surprise tablet to accompany its bizarre metaverse-focused Desire 22 Pro. From a report: The new A101 is an Android tablet with a 10.1-inch display, entry-level specs, and a design that's straight out of the middle of the last decade. The device, which we spotted via AndroidPolice, appears to have been quietly announced last month -- according to the Wayback Machine -- and is aimed at the African market. It follows the A100 tablet, which was released in Russia last year to a similar non-reaction. Given that the tablet appears to be marketed solely at emerging markets, I don't want to be too snarky about its specs or design. But it's still just plain weird to see HTC -- makers of literally the first-ever Android phone and a company that Google once entrusted to build a Nexus-branded tablet (the Nexus 9) -- producing forgettable devices like this. The A101 even runs 2020's Android 11 out of the box, rather than Android 12 or the big-screen focused Android 12L.

Google has agreed to pay $90 million to settle a legal fight with app developers over the money they earned creating apps for Android smartphones and for enticing users to make in-app purchases. Reuters reports: The app developers, in a lawsuit filed in federal court in San Francisco, had accused Google of using agreements with smartphone makers, technical barriers and revenue sharing agreements to effectively close the app ecosystem and shunt most payments through its Google Play billing system with a default service fee of 30%.

As part of the proposed settlement, Google said in a blog post it would put $90 million in a fund to support app developers who made $2 million or less in annual revenue from 2016-2021. "A vast majority of U.S. developers who earned revenue through Google Play will be eligible to receive money from this fund, if they choose," Google said in the blog post. Google said it would also charge developers a 15% commission on their first million in revenue from the Google Play Store each year. It started doing this in 2021. "There were likely 48,000 app developers eligible to apply for the $90 million fund, and the minimum payout is $250," notes Reuters.

This week, BMW confirmed that some of its future models would run on a next-gen version of its in-house operating system built on top of Android Automotive. Android Polic reports: It's a big change from previous Linux-based versions, though the company says some of its cars will stay on its legacy build. So far, the automaker has yet to confirm which of its models will get Automotive support, though work on supporting it won't begin until March of 2023.

Automotive's biggest selling point for car manufacturers is its flexibility and customization options. Outside of some built-in Google apps -- Assistant, Maps, the Play Store -- don't expect to notice these BMW cars running Android immediately. Instead, the company will almost certainly rely on a skin to make the experience feel more in line with previous vehicles, as well as that Linux-based OS the company plans to keep developing.

Google today announced an update to its password manager that will finally introduce a consistent look-and-feel across the service's Chrome and Android implementations. From a report: Users will soon see a new unified user experience that will automatically group multiple passwords for the same sites or apps together, as well as a new shortcut on the Android home screen to get access to these passwords. In addition to this, Google is also now adding a new password-related feature to Chrome on iOS, which can now generate strong passwords for you (once you set Chrome as an autofill provider). Meanwhile, on Android, Google's password check can now also flag weak and re-used passwords and help you to automatically change them, while Chrome users across platforms will now see compromised password warnings.

An anonymous reader quotes a report from the Financial Times: Meta is facing a growing backlash for the charges imposed on apps created for its virtual reality headsets, as developers complain about the commercial terms set around futuristic devices that the company hopes will help create a multibillion-dollar consumer market. [...] But several developers told the Financial Times of their frustration that Meta, which is seen as having an early lead in a nascent market, has insisted on a charging model for its VR app store similar to what exists today on smartphones. This is despite Meta chief Mark Zuckerberg being strongly critical in the past of charging policies on existing mobile app stores.

"Don't confuse marketing with reality -- it's good marketing to pick on Apple. But it doesn't mean Meta won't do the exact same thing," said Seth Siegel, global head of AI and cyber security at Infosys Consulting. "There is no impetus for them to be better." The "Quest Store" for Meta's Quest 2, by far the most popular VR headset on the market, takes a 30 percent cut from digital purchases and charges 15-30 percent on subscriptions, similar to the fees charged by Apple and Android. "Undoubtedly there are services provided -- they build amazing hardware and provide store services," said Daniel Sproll, chief executive of Realities.io, an immersive realities start-up behind the VR game Puzzling Places. "But the problem is that it feels like everybody agreed on this 30 percent and that's what we're stuck with. It doesn't feel like there's any competition. The Chinese companies coming out with headsets are the same. Why would they change it?"

Meta defended its policies, pointing out that unlike iPhone owners, Quest users can install apps outside its official store through SideQuest, a third-party app store, or make use of App Lab, its less restricted, more experimental app store. "We want to foster choice and competition in the VR ecosystem," Meta said. "And it's working -- our efforts have produced a material financial return for developers: as we announced earlier this year, over $1 billion has been spent on games and apps in the Meta Quest Store." Developers welcome these alternatives but say their impact is limited. SideQuest has been downloaded just 396,000 times, versus 19 million for the Oculus app, according to Sensor Tower. App Lab, meanwhile, still takes a 30 percent cut of purchases. Developers are also frustrated with Meta's shift to a more restrictive approach to allowing apps on its VR app store.

Chris Pruett, Meta's content ecosystem director, said Meta found that lax standards resulted in too many users being frustrated by low-quality content, so the company has opted to play more of a gatekeeper role. But developers said the resulting barriers could lack transparency.

"Getting something on the Quest store is painful," said Lyron Bentovim, chief executive of the Glimpse Group, an immersive experiences group. "It's significantly worse than getting on Apple or Android stores."