Apple is testing the next macOS Golden Gate update, and developers can download the third βmacOS Golden Gateβ 27.2 beta. The third beta comes two weeks after Apple released the second beta.
Registered developers can download βmacOS Golden Gateβ 27.2 by opening up the System Settings app, clicking on General, selecting Software Update, and opting into βmacOS Golden Gateβ betas.
Apple today seeded the third beta of an upcoming iOS 27.2 update to developers for testing purposes, with the update coming two weeks after Apple released the second iOS 27.2 beta. Apple also seeded a new iPadOS 27.2 beta.
Registered developers can download the beta updates by opting in under Settings > General > Software Update and selecting the iOS 27 developer beta.
iOS 27.2 includes Apple's redesigned Health app with new Insight and Longevity tabs. It also brings Siri AI in new languages. There are several other new features, with details available in our features guide.
Apple releasing an iOS 27.2 beta ahead of an iOS 27.1 beta was a surprise because the company plans to ship the iPhone Duo with iOS 27.1, but it likely wants to keep some of the iPhone Duo features hidden for longer.
The βiPhone Duoβ will launch on October 23. Apple previously said the new βSiriβ AI languages in iOS 27.2 would be available in October, so it's likely iOS 27.2 will come shortly after the βiPhone Duoβ's release date.
Alongside new betas of iOS 27.2, iPadOS 27.2, and macOS Golden Gate 27.2, Apple has released the third betas of watchOS 27.2, tvOS 27.2, and visionOS 27.2. The betas come two weeks after Apple released the second betas.
Registered developers can download the betas through the Settings app on each device.
With iOS 27.2 and watchOS 27.2, Apple is testing the new Health app that it showed off during its September iPhone event. The updated Health app has new Insights and Longevity tabs with a readiness score that uses information from the new Apple Watch Series 12 and Ultra 4 models.
There's no word on what's being added in visionOS 27.2 and tvOS 27.2, but Apple is expected to introduce a new version of the Apple TV 4K with Siri AI support sometime before the end of the year.
Apple Cash will soon require identity verification to add money. In emails going out to customers, Apple explains that starting on November 9, Green Dot Bank will begin requiring users to verify their identity when reloading their Apple Cash cards.
Identity verification is already required when adding, sending, or receiving over $500 total, but verification for any reload is new. Apple says Green Dot Bank may make it easier to add money to an Apple Cash card by introducing support for transferring funds from a bank or merchant in the future.
Right now, reloading an Apple Cash card can only be done through the Wallet app using a connected debit or prepaid card.
Apple Cash users who have iOS 27 and who live in a state with support for digital driver's licenses can use a license stored in the Wallet app for identity verification.
Customers whose identity can't be verified will not be able to send or receive money or add money to an Apple Cash balance. Money already in an Apple Cash account can still be used for transactions or transferred to a bank account.
Apple says identity verification is required for "fraud protection and regulatory reasons."
Apple Cash is a U.S.-only feature that is available to customers 18 or older, though users under 18 can access Apple Cash through Apple Cash Family.
Apple today updated the Apple Configurator app on macOS. The new version 2.21 offers improved reliability for signing in with an Apple Account, plus bug fixes and improvements.
The app is commonly used by IT departments to install apps and profiles on iPhones and iPads for employees.
Apple has raised the prices of the Apple One Family and Apple One Premier plans in select countries in Europe, with the company notifying affected subscribers via email starting today. The updated prices take effect immediately for new subscribers, while existing subscribers will see the increase applied on their next renewal date.
Apple One Family has gone up in price in the following countries:
Belgium
Bulgaria
Czechia
Denmark
Hungary
Latvia
Malta
Portugal
Slovakia
Slovenia
Spain
Switzerland
Apple One Premier went up in price in three countries only:
Portugal
Spain
Switzerland
In Spain and Portugal, for example, both the Family and Premier plans went up by β¬2 per month. Increases in other countries and currencies are similar.
Pricing for the Apple One Individual plan has not changed at this time.
Here's what each plan includes:
Individual: 50GB of iCloud+ storage, Apple TV, Apple Music, and Apple Arcade
Family: 200GB of iCloud+ storage, Apple TV, Apple Music, and Apple Arcade
Premier: 2TB of iCloud+ storage, Apple TV, Apple Music, Apple Arcade, Apple Fitness+, and Apple News+
This is at least the third round of Apple One price increases this year, which will benefit Apple's services revenue. Apple One Family and Apple One Premier already went up in price in the U.S., Australia, Canada, the U.K., and select other countries earlier this year, while Apple One Individual went up in U.S., Brazil, Chile, and Mexico.
Apple released the iPhone 18 Pro and iPhone 18 Pro Max in September 2026, five years after the iPhone 13 Pro and iPhone 13 Pro Max. The 2021 models introduced ProMotion displays, macro photography, a 3x Telephoto camera, and substantially longer battery life than their predecessors. They remain capable phones and support iOS 27, but owners now have five generations of upgrades to consider.
The iPhone 14 Pro brought the Dynamic Island, an Always-On display, a 48-megapixel Main camera, and Emergency SOS via satellite. The iPhone 15 Pro introduced the Action button and USB-C. The iPhone 16 Pro added larger displays, the Camera Control, a 48-megapixel Ultra Wide camera, and expanded video capabilities.
The iPhone 17 Pro adopted an aluminum unibody with vapor chamber cooling and upgraded the Telephoto and front-facing cameras. This year's iPhone 18 Pro adds the A20 Pro chip, a variable-aperture Main camera, a smaller βDynamic Islandβ, and further gains in battery life and charging speed. For an iPhone 13 Pro owner, these changes accumulate across nearly every part of the phone.
In the United States, the βiPhone 18 Proβ starts at $1,199 and the Pro Max at $1,299, each with 256GB of storage. That is $200 more than the corresponding iPhone 13 Pro model's 2021 starting price, although the older phones started with 128GB. Apple no longer sells the iPhone 13 Pro, so anyone buying one now will be looking at a used or refurbished device. Here are the key differences:
Up to 50% charge in around 30 minutes using βMagSafeβ with a compatible 35W adapter or higher
Storage and Pricing
iPhone 13 Pro (2021)
βiPhone 18 Proβ (2026)
128GB, 256GB, 512GB, or 1TB
256GB, 512GB, 1TB, or 2TB
iPhone 13 Pro: Launched at $999 in the U.S. with 128GB
iPhone 18 Pro: Starts at $1,199 in the U.S. with 256GB
iPhone 13 Pro Max: Launched at $1,099 in the U.S. with 128GB
iPhone 18 Pro Max: Starts at $1,299 in the U.S. with 256GB
Now discontinued
Sold directly by Apple
Is It Worth Upgrading From an iPhone 13 Pro?
For most iPhone 13 Pro and iPhone 13 Pro Max owners ready to replace their phone, the βiPhone 18 Proβ is a very worthwhile upgrade. Five years of changes bring noticeable improvements to battery life, charging, outdoor display visibility, photography, and connectivity. The iPhone 13 Pro already has ProMotion and a capable three-camera system, but those strengths do not erase the breadth of the newer model's improvements.
Battery life may be the most immediate benefit, especially for an iPhone 13 Pro whose original battery has aged. Faster wired charging and USB-C also make the newer phone easier to live with, particularly if your other devices already use USB-C.
The camera upgrade is substantial across the whole system. All three rear cameras move from 12 to 48 megapixels, while the variable-aperture Main camera adds creative control and the Telephoto camera extends from 3x to 4x, with an additional optical-quality 8x option. The higher-resolution front camera, autofocus, and Center Stage are useful for group photos and video calls. Video creators gain considerably more through higher frame rates, improved Cinematic mode, external recording, and professional formats.
The A20 Pro and vapor chamber make the strongest performance case for demanding games, long recording sessions, and other sustained work. The βiPhone 18 Proβ also supports βApple Intelligenceβ, while the iPhone 13 Pro does not, even though both run βiOS 27β.
The main physical trade-offs are size and weight: both βiPhone 18 Proβ models are taller, thicker, and slightly heavier. Some users may find the βiPhone 18 Proβ's aluminum chassis to be more vulnerable to dents and damage, even though the front and rear glass is stronger. U.S. buyers who rely on a physical SIM must also move to eSIM.
If you need to delay a new purchase, replacing an iPhone 13 Pro's battery can extend its usefulness. For owners prepared to buy now, however, the accumulated improvements make upgrading easy to justify.
The iPad is set to gain significantly narrower borders around its display, according to the leaker known as "Instant Digital" on Weibo. The post gives no model or timeline; it could refer to the entry-level βiPadβ or to Apple's tablet lineup in general.
Refreshes of the entry-level βiPadβ, iPad mini, iPad Air, and iPad Pro are in the pipeline. The next iPad mini is already rumored to gain OLED and slimmer bezels, while the iPad Air is expected to adopt βOLEDβ in 2027.
Amazon Prime Big Deal Days is nearly live, and as usual multiple retailers have introduced their own Prime Day-like sales to compete with Amazon. In this article we're tracking a few sitewide sales from Sony, Walmart, and Best Buy with big discounts on monitors, TVs, headphones, and more.
Best Buy
Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running.
Best Buy recently kicked off a "Techtober" sale, with sitewide sales on everything from home appliances to computers, video games, and more.
One of the best items to buy during Prime Day is always a new TV, and this year the savings are steep on sets from Samsung, Insignia, LG, and more. Best Buy has as much as $1,400 off select TVs during its Techtober event, and we've rounded up a few highlights below.
Walmart's Prime Day-like event began today and is set to run through October 11. It's got a lot of the same offers at Best Buy, with solid deals on TVs, computers, and home appliances.
In terms of Apple-related discounts, Walmart has the AirPods 4 at $79.00, down from $129.99, which is just $10 away from the all-time low price. It's been months since we last tracked a deal this steep on the AirPods 4, and this is the model without ANC.
Sony
Sony is hosting a big fall sale with up to 50 percent in savings on the company's best headphones, speakers, sound bars, TVs, photography equipment, and more.
We've collected a few of the most notable products on sale in the lists below, but be sure to head to Sony's website for the full list of deals. Most devices have an option for free pickup if you live near a Best Buy location that offers local pickup.
You can get Sony's WH-1000XM5 Premium Wireless Noise Canceling Headphones for $199.99 during this event, down from $399.99. There are also a few earbuds and soundbars on sale with notable discounts, all of which have been applied automatically and do not require any coupon codes.
If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week.
Deals Newsletter
Interested in hearing more about the best deals you can find in 2026? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season!
Continuing our journey on decompilation patterns, here's another common one:
Let's say m2c outputs code like this:
loop_151:
...
if (var_s0 > var_s1) goto loop_151;
then the natural change is:
do {
...
} while (var_s0 > var_s1);
Fewer gotos are nearly always good, and this is a much more likely pattern
than the original one.
m2c often manages to convert gotos to do/while, but not always when they are
e.g. nested in some other loop; so often, you may need to apply some other
transformation before you get to this point.
Tomorrow, we'll look at another variation over this topic.
Big Apple Watch discounts have started arriving ahead of Prime Big Deal Days, including new low prices on Apple Watch Series 12 and Apple Watch Ultra 4. These deals join some Apple Watch SE 3 discounts that we began tracking over the weekend, alongside other major early Prime Big Deal Days markdowns.
Note: MacRumors is an affiliate partner with Amazon. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running.
Starting with the Apple Watch Series 12, you can get the 42mm GPS model for $349.99 and the 46mm GPS model for $399.99, both of which are $49 discounts and new all-time low prices. Both of these models have two colors available at these all-time low prices, and you'll find a few cellular options on sale as well.
For the Apple Watch Ultra 4, you can get the Natural model with the Translucent Gray Ocean Band for $699.99, down from $799.00. This is another new all-time low price for Prime Day, and as of writing it's the only color we're tracking at this price. Additionally, there are a few Milanese Loop models on sale for $99 off ahead of Prime Day.
If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week.
Deals Newsletter
Interested in hearing more about the best deals you can find in 2026? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season!
Prime Big Deal Days sales are already starting, and have now hit Apple's brand new Mac mini and Mac Studio computers. You can get up to $199 off these 2026 devices with Amazon's latest savings.
Note: MacRumors is an affiliate partner with some of these vendors. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running.
One of the best deals is on the M5 Max Mac Studio with 36GB RAM and a 512GB SSD, on sale for $2,299.99, down from $2,499.00. Regarding the Mac mini, you can get the 16GB RAM/256GB SSD Mac mini for $779.99, down from $899.00, and the 24GB RAM/512GB SSD model for $1,549.99, down from $1,699.00.
For more of the best early Prime Big Deal Days discounts, be sure to check out our main article with sales on Apple Watch, AirPods, and more. If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week.
Deals Newsletter
Interested in hearing more about the best deals you can find in 2026? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season!
For the first time since February 2023, Apple has released a firmware update for the MagSafe 3 charging cable for the MacBook Pro and MacBook Air.
Specifically, Apple last week released firmware version 3.2.0 for the USB-C to MagSafe 3 Cable. The previous firmware version for the cable was 3.1.12.
It is unclear what is included in the latest firmware, as Apple does not publish release notes for this. The update will be installed automatically over time when the cable is connected to a Mac and a power adapter. There is no way to manually apply it.
Apple does not expose the MagSafe cable's firmware version in macOS's System Information tool.
Amazon today has every AirPods Max 2 color on sale for $429.00, down from $549.00, marking one of the best early Prime Day deals yet. This is one of the lowest prices we've ever seen on the AirPods Max 2, and the sale is available in Blue, Midnight, Orange, Purple, and Starlight colors.
Note: MacRumors is an affiliate partner with Amazon. When you click a link and make a purchase, we may receive a small payment, which helps us keep the site running.
AirPods discounts have started to arrive early ahead of Prime Big Deal Days official kickoff tomorrow, and you can also get the AirPods Pro 3 for the all-time low price of $179.00 right now, down from $249.00.
We've been tracking all of the best early Prime Day discounts, also including great deals on MacBook Air, Apple Watch, and more. If you're on the hunt for more discounts, be sure to visit our Apple Deals roundup where we recap the best Apple-related bargains of the past week.
Deals Newsletter
Interested in hearing more about the best deals you can find in 2026? Sign up for our Deals Newsletter and we'll keep you updated so you don't miss the biggest deals of the season!
Apple appears to have quietly tripled the number of iCloud Mail aliases users can create, increasing the limit from three to nine. The increase was first noticed last week by a Reddit user, and picked up shortly after by a member of the MacRumors forums. MacRumors can confirm the change is live at iCloud.com.
The increased limit has not been mentioned by Apple, so it could conceivably be a test, but that seems unlikely. It's a nice perk to have, but as of this writing, Apple's iCloud User Guide still says the maximum number of aliases allowed is three.
A new open-source tool is making waves in the Mac community by helping users reclaim valuable storage space taken up by Apple's AI models. Called "RemoveMacAI," the command line tool disables Apple Intelligence on macOS 27, removes its downloaded models, and prevents them from being downloaded again.
In macOS 27, Apple removed the toggle to disable Apple Intelligence wholesale, and simply disabling individual features doesn't remove the models from your Mac's drive. As explained by the developer, RemoveMacAI gets around this by using a configuration profile to switch off Apple's own asset management service and remove the models.
It then configures the system so attempts to download the removed models are redirected to a closed local port, preventing them from immediately coming back. And it does all this without disabling System Integrity Protection (SIP) or manually deleting files from protected system locations, unlike some older tools have.
The tool can free up roughly 12GB of space depending on which models are present on your Mac. That said, some users are reporting cases of Apple Intelligence models having taken up a lot more space, which they've now reclaimed.
With the Apple models gone, you lose all Siri-related AI features, Writing Tools, Genmoji, Image Playground, ChatGPT integration, summaries, smart replies, inline predictions, Photos Clean Up, Spatial Photos, and Xcode predictive completion. Even so, plenty of users appear happy to make the sacrifice to free up space, especially on non-upgradeable Macs with 256GB of storage. The profile reportedly persists across updates. And if you're wondering, dictation still works. There's also a revert command to restore everything AI-related.
The project has attracted hundreds of GitHub stars since its release last week, and there's lots of discussion on Reddit and Hacker News about the need for such a tool. Just be aware that MacRumors isn't endorsing RemoveMacAI, and anyone using it does so at their own risk.
The developer has mentioned one caveat, and it's that some of the configuration-profile restriction keys that the tool relies on were deprecated by Apple in macOS 26.4. While they still work in macOS 27.0.1, a future version could always change that. Something to keep in mind.
Code explorer pdfu has shared a new feature tidbit for the upcoming iPhone Duo. Apple is reportedly introducing new Focus mode controls on the device's Lock Screen.
When a Focus mode is active, a new button appears above the bottom controls that lets you toggle it off and on while you remain on the Lock Screen. The active Focus also appears in the status bar above the clock when you unlock the device.
Apple has rebuilt iOS 27 to adapt in real time to the company's first foldable iPhone, reshaping the interface as the device folds, unfolds, and switches between its two displays.
New on iPhone Duo: redesigned Focus controls on the Lock Screen.
When a Focus mode is active, a button above the bottom controls lets you turn Focus off and back on until you leave the Lock Screen.
Your active Focus also appears in the status bar above the clock. https://t.co/Z0vFRLRAAR
Apple's upgraded Siri AI could remain unavailable in the European Union for several months yet, according to Bloomberg's Mark Gurman. In his latest Power On newsletter, Gurman said a delay of around five months would be the "absolute best-case scenario," with European users potentially facing an even longer wait while Apple negotiates its compliance with the bloc's digital rules.
Gurman reckons Apple is withholding the upgrade to pressure the European Commission, hoping that frustrated customers will push for changes to its approach, and he compared the situation with Apple Intelligence's delayed EU rollout. Note that Siri AI is not available in the EU on iPhone or iPad, but EU users have access to it on Mac. β
15 years ago today, Steve Jobs passed away from pancreatic cancer at the age of 56. It was the day after Apple executives introduced the iPhone 4s at a media event on the company's Infinite Loop headquarters campus.
Image Credit: Matt Yohe / CC BY 2.0
In the days following his passing, Apple began posting comments from fans on its "Remembering Steve" webpage. Apple continues to maintain the page, highlighting some of the over one million submissions from people around the world who "shared their memories, thoughts, and feelings about Steve."
The company marked the first anniversary of his passing with a photo and audio slideshow on its website, and we are expecting something similar this anniversary. Throughout his tenure as Apple CEO, Tim Cook traditionally shared words of remembrance on social media and with Apple staff on this day. In his new role as executive chairman, he is continuing that tradition.
There are people who leave a mark on the world, and then there are people who change it entirely. Steve changed the world and so many lives in the process. He certainly changed my life forever. His spirit lives on in everything he created and everyone he inspired. https://t.co/8p08BcSlTS
On iPhone 18 Pro models, Apple slimmed down the cutout where the Dynamic Island lives, allowing the latter to support up to three simultaneous Live Activities. But it turns out there's a catch.
As noted by code explorer pdfu, the third Live Activity in iOS 27 is only ever a system activity, such as Now Playing or navigation β it can't be another app. So if you own a new iPhone 18 Pro and were wondering why you hadn't seen as many Live Activities in the Dynamic Island as perhaps you were expecting, that's why.
The Domain Name System (DNS) is a fundamental piece of technology behind the modern internet. Thanks to its introduction in 1983, you're able to enter domain names like aezign.com.au instead of raw IP addresses in your browser's address bar and when sending emails. This article explains what it is, how it works, and how you can inspect your own website's DNS and ensure it is set up correctly.
DNS in a nutshell
A well-used analogy is a phonebook; when you have someone's name and need to find their phone number, you look through the phonebook. Overall, DNS does the same thing: when you enter an address like example.com, your browser will contact a DNS server (the "phonebook") to determine its IP addresses. On Linux (or MacOS) systems, you can use dig on the command line to perform a DNS lookup and see what this looks like:
$ dig example.com
; <<>> DiG 9.20.29-1-Debian <<>> example.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42782
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;example.com. IN A
;; ANSWER SECTION:
example.com. 221 IN A 104.20.23.154
example.com. 221 IN A 172.66.147.243
;; Query time: 20 msec
;; SERVER: 1.1.1.1#53(1.1.1.1) (UDP)
;; WHEN: Sun Sep 27 21:07:50 AWST 2026
;; MSG SIZE rcvd: 72
Here, you can see the DNS server being used is 1.1.1.1 (Cloudflare's DNS server), and that it found the IPs 104.20.23.154 and 172.66.147.243 associated with the domain name example.com. Your browser will then contact these IP addresses directly to load the website you are trying to open.
Configuring DNS servers
You can configure DNS servers through your operating system's network settings, and for some applications such as Firefox, with the application itself. If you don't manually set a DNS server, your computer will use the ones provided by your modem. If those are not configured, the default defined by the modem manufacturer or your ISP will be used.
The most well-used and reliable DNS servers you can use are Cloudflare's (1.1.1.1 and 1.0.0.1) and Google's (8.8.8.8 and 8.8.4.4). Having more than one DNS server means that if the first one in the list doesn't work or doesn't find the matching IPs for a domain name, it will move to the next one in the list, a backup DNS server.
DNS servers must be configured as IP addresses. If your computer tried to use a DNS server at a domain name, then where would your computer find the IP address for that domain name? It wouldn't be able to, as this is the exact gap that DNS servers fulfill.
Records
DNS is not used only to find IPs for a domain, but a whole host of other things. Collectively they are referred to as "records" (or "DNS records"). Each record is associated to a domain (e.g. example.com) or a subdomain (e.g. bar.example.com, foo.bar.example.com) Here are some of the most common and important types:
A - Map to an IPv4 address (e.g. 104.20.23.154).
This is the fundamental function of DNS: to map from a domain name to a server's IP address. Multiple A records leads to load balancing, where browsers will randomly select one of the returned IP addresses such that traffic is evenly split between them.
AAAA - Map to an IPv6 address (e.g. 2606:4700:10::6814:179a).
This serves the same purpose as A records but for IPv6. Multiple AAAA records results in the same load balancing behaviour. All modern websites should have both an A record for legacy compatibility, and an AAAA record to future-proof for the gradual shift towards IPv6 addresses.
CNAME - Alias to another domain name (e.g. example.com).
DNS servers will recursively lookup records for the aliased domain name until they reach an IP address (in an A or AAAA record).
MX - Specify a Mail Exchange server (e.g. mail.example.com).
This record tells email SMTP servers where to direct emails to. For instance, the MX record for aezign.com.au is mail.aezign.au; this directs SMTP servers like Gmail and Outlook to send emails to the mailserver running at mail.aezign.au. This also allows specifying a priority field, so that you can define multiple MX records (such as a main and a backup) and consumers will try to connect to the listed mailservers from lowest priority to highest.
TXT - Store arbitrary text data
This is most commonly used for site verification (for instance, to link your website to Google Search Console) and for email security measures like DKIM, DMARC, and SPF.
NS - Specify the nameservers for a domain (e.g. zeus.ns.cloudflare.com).
These authoritative nameservers are responsible for providing all the other record types when needed.
dig lets you query each of these. For instance, to list the MX records against aezign.com.au:
You can see that gmail.com has several mailservers configured as redundancies due to the Gmail's sheer scale. gmail-smtp-in.l.google.com has the highest priority of 5, so SMTP servers will attempt to contact that mailserver first, followed by alt1.gmail-smtp-in.l.google.com and so on.
Nameservers
Now there needs to be somewhere for DNS records against a domain name to be defined, right? This is where nameservers come in.
Nameservers are DNS servers that answer queries about the domains they are authoritative for i.e. the domains they are in charge of. For example, the authoritative nameservers for example.com are hera.ns.cloudflare.com and elliott.ns.cloudflare.com, which means Cloudflare's nameservers are the source of truth when looking up DNS records for example.com. You can check this with dig:
Nameservers are configured with your domain name's registrar. The nameserver you set dictates where your remaining DNS records will live. For example.com, this means you would configure all your records on Cloudflare's dashboard, since they are responsible for the domain's DNS records.
Recursive resolution
The DNS servers that our computers use follow a recursive resolution process behind-the-scenes to find the authoritative nameservers for a domain, followed by the records you are querying.
Finding the root nameservers
Due to the recursive nature of the resolution process, there needs to be a starting point: the root (.) nameservers. The resolver uses a fixed list of root nameservers called root hints issued by IANA (named.root), to locate and contact the root nameservers. Resolvers will have this provided to them initially, and can dynamically update it themselves by querying one of the root nameservers for the root NS records to obtain a fresh list. For instance, we can query 198.41.0.4 (a.root-servers.net) to obtain a new list of root nameservers:
$ dig @198.41.0.4 NS .
; <<>> DiG 9.20.29-1-Debian <<>> @198.41.0.4 NS .
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43677
;; flags: qr aa rd; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 27
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;. IN NS
;; ANSWER SECTION:
. 518400 IN NS l.root-servers.net.
. 518400 IN NS j.root-servers.net.
. 518400 IN NS f.root-servers.net.
. 518400 IN NS h.root-servers.net.
. 518400 IN NS d.root-servers.net.
. 518400 IN NS b.root-servers.net.
. 518400 IN NS k.root-servers.net.
. 518400 IN NS i.root-servers.net.
. 518400 IN NS m.root-servers.net.
. 518400 IN NS e.root-servers.net.
. 518400 IN NS g.root-servers.net.
. 518400 IN NS c.root-servers.net.
. 518400 IN NS a.root-servers.net.
;; ADDITIONAL SECTION:
l.root-servers.net. 518400 IN A 199.7.83.42
l.root-servers.net. 518400 IN AAAA 2001:500:9f::42
j.root-servers.net. 518400 IN A 192.58.128.30
j.root-servers.net. 518400 IN AAAA 2001:503:c27::2:30
f.root-servers.net. 518400 IN A 192.5.5.241
f.root-servers.net. 518400 IN AAAA 2001:500:2f::f
h.root-servers.net. 518400 IN A 198.97.190.53
h.root-servers.net. 518400 IN AAAA 2001:500:1::53
d.root-servers.net. 518400 IN A 199.7.91.13
d.root-servers.net. 518400 IN AAAA 2001:500:2d::d
b.root-servers.net. 518400 IN A 170.247.170.2
b.root-servers.net. 518400 IN AAAA 2801:1b8:10::b
k.root-servers.net. 518400 IN A 193.0.14.129
k.root-servers.net. 518400 IN AAAA 2001:7fd::1
i.root-servers.net. 518400 IN A 192.36.148.17
i.root-servers.net. 518400 IN AAAA 2001:7fe::53
m.root-servers.net. 518400 IN A 202.12.27.33
m.root-servers.net. 518400 IN AAAA 2001:dc3::35
e.root-servers.net. 518400 IN A 192.203.230.10
e.root-servers.net. 518400 IN AAAA 2001:500:a8::e
g.root-servers.net. 518400 IN A 192.112.36.4
g.root-servers.net. 518400 IN AAAA 2001:500:12::d0d
c.root-servers.net. 518400 IN A 192.33.4.12
c.root-servers.net. 518400 IN AAAA 2001:500:2::c
a.root-servers.net. 518400 IN A 198.41.0.4
a.root-servers.net. 518400 IN AAAA 2001:503:ba3e::2:30
;; Query time: 476 msec
;; SERVER: 198.41.0.4#53(198.41.0.4) (UDP)
;; WHEN: Mon Sep 28 00:01:08 AWST 2026
;; MSG SIZE rcvd: 811
Querying the root nameservers
For example.com, the first step is to query the root (.) nameservers to find the nameservers for the .com top-level domain (TLD). Using a.root-servers.net again:
$ dig @198.41.0.4 NS com
; <<>> DiG 9.20.29-1-Debian <<>> @198.41.0.4 NS com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22528
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 27
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;com. IN NS
;; AUTHORITY SECTION:
com. 172800 IN NS l.gtld-servers.net.
com. 172800 IN NS j.gtld-servers.net.
com. 172800 IN NS h.gtld-servers.net.
com. 172800 IN NS d.gtld-servers.net.
com. 172800 IN NS b.gtld-servers.net.
com. 172800 IN NS f.gtld-servers.net.
com. 172800 IN NS k.gtld-servers.net.
com. 172800 IN NS m.gtld-servers.net.
com. 172800 IN NS i.gtld-servers.net.
com. 172800 IN NS g.gtld-servers.net.
com. 172800 IN NS a.gtld-servers.net.
com. 172800 IN NS c.gtld-servers.net.
com. 172800 IN NS e.gtld-servers.net.
;; ADDITIONAL SECTION:
l.gtld-servers.net. 172800 IN A 192.41.162.30
l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30
j.gtld-servers.net. 172800 IN A 192.48.79.30
j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30
h.gtld-servers.net. 172800 IN A 192.54.112.30
h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30
d.gtld-servers.net. 172800 IN A 192.31.80.30
d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30
b.gtld-servers.net. 172800 IN A 192.33.14.30
b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30
f.gtld-servers.net. 172800 IN A 192.35.51.30
f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30
k.gtld-servers.net. 172800 IN A 192.52.178.30
k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30
m.gtld-servers.net. 172800 IN A 192.55.83.30
m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30
i.gtld-servers.net. 172800 IN A 192.43.172.30
i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30
g.gtld-servers.net. 172800 IN A 192.42.93.30
g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30
a.gtld-servers.net. 172800 IN A 192.5.6.30
a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30
c.gtld-servers.net. 172800 IN A 192.26.92.30
c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30
e.gtld-servers.net. 172800 IN A 192.12.94.30
e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30
;; Query time: 772 msec
;; SERVER: 198.41.0.4#53(198.41.0.4) (UDP)
;; WHEN: Mon Sep 28 00:09:25 AWST 2026
;; MSG SIZE rcvd: 828
Querying the TLD nameservers
Now the resolver has .com nameservers and their IPs. We can use one of these, such as 192.5.6.30 (a.gtld-servers.net) to find the nameservers for example.com:
$ dig @192.5.6.30 NS example.com
; <<>> DiG 9.20.29-1-Debian <<>> @192.5.6.30 NS example.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37419
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 13
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;example.com. IN NS
;; AUTHORITY SECTION:
example.com. 172800 IN NS hera.ns.cloudflare.com.
example.com. 172800 IN NS elliott.ns.cloudflare.com.
;; ADDITIONAL SECTION:
hera.ns.cloudflare.com. 172800 IN A 108.162.192.162
hera.ns.cloudflare.com. 172800 IN A 172.64.32.162
hera.ns.cloudflare.com. 172800 IN A 173.245.58.162
hera.ns.cloudflare.com. 172800 IN AAAA 2606:4700:50::adf5:3aa2
hera.ns.cloudflare.com. 172800 IN AAAA 2803:f800:50::6ca2:c0a2
hera.ns.cloudflare.com. 172800 IN AAAA 2a06:98c1:50::ac40:20a2
elliott.ns.cloudflare.com. 172800 IN A 108.162.195.228
elliott.ns.cloudflare.com. 172800 IN A 162.159.44.228
elliott.ns.cloudflare.com. 172800 IN A 172.64.35.228
elliott.ns.cloudflare.com. 172800 IN AAAA 2606:4700:58::a29f:2ce4
elliott.ns.cloudflare.com. 172800 IN AAAA 2803:f800:50::6ca2:c3e4
elliott.ns.cloudflare.com. 172800 IN AAAA 2a06:98c1:50::ac40:23e4
;; Query time: 80 msec
;; SERVER: 192.5.6.30#53(192.5.6.30) (UDP)
;; WHEN: Mon Sep 28 00:12:19 AWST 2026
;; MSG SIZE rcvd: 359
Finding the domain's nameserver
The response tells the resolver that the nameservers for example.com are hera.ns.cloudflare.com and elliott.ns.cloudflare.com. Now since these Cloudflare nameservers are also .com domains and Cloudflare is so commonly used, the .com nameserver provides optional sibling glue records as defined in RFC 9471 to prevent further roundtrips and optimize the process.
If we ignore the sibling glue records provided, the resolver would have to ask the .com nameservers for the nameservers for cloudflare.com:
$ dig @192.5.6.30 NS cloudflare.com
; <<>> DiG 9.20.29-1-Debian <<>> @192.5.6.30 NS cloudflare.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40307
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 5, ADDITIONAL: 21
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;cloudflare.com. IN NS
;; AUTHORITY SECTION:
cloudflare.com. 172800 IN NS ns3.cloudflare.com.
cloudflare.com. 172800 IN NS ns5.cloudflare.com.
cloudflare.com. 172800 IN NS ns4.cloudflare.com.
cloudflare.com. 172800 IN NS ns6.cloudflare.com.
cloudflare.com. 172800 IN NS ns7.cloudflare.com.
;; ADDITIONAL SECTION:
ns3.cloudflare.com. 172800 IN A 162.159.0.33
ns3.cloudflare.com. 172800 IN A 162.159.7.226
ns3.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:21
ns3.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:7e2
ns5.cloudflare.com. 172800 IN A 162.159.2.9
ns5.cloudflare.com. 172800 IN A 162.159.9.55
ns5.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:209
ns5.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:937
ns4.cloudflare.com. 172800 IN A 162.159.1.33
ns4.cloudflare.com. 172800 IN A 162.159.8.55
ns4.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:121
ns4.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:837
ns6.cloudflare.com. 172800 IN A 162.159.3.11
ns6.cloudflare.com. 172800 IN A 162.159.5.6
ns6.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:30b
ns6.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:506
ns7.cloudflare.com. 172800 IN A 162.159.4.8
ns7.cloudflare.com. 172800 IN A 162.159.6.6
ns7.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:408
ns7.cloudflare.com. 172800 IN AAAA 2400:cb00:2049:1::a29f:606
;; Query time: 163 msec
;; SERVER: 192.5.6.30#53(192.5.6.30) (UDP)
;; WHEN: Mon Sep 28 00:26:53 AWST 2026
;; MSG SIZE rcvd: 573
Here, the .com nameserver provides in-domain glue records for cloudflare.com's nameservers. Without these, there would be a circular dependency, since the nameserver named is a subdomain of the domain being queried for. This is because nameservers are always defined by name, which means that in order to actually contact the nameserver, your computer needs to obtain its IP address with another DNS lookup.
Next, we'd use one of these nameservers, say ns3.cloudflare.com, to obtain the IP for hera.ns.cloudflare.com:
$ dig @162.159.0.33 hera.ns.cloudflare.com
; <<>> DiG 9.20.29-1-Debian <<>> @162.159.0.33 hera.ns.cloudflare.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16801
;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;hera.ns.cloudflare.com. IN A
;; ANSWER SECTION:
hera.ns.cloudflare.com. 86353 IN A 108.162.192.162
hera.ns.cloudflare.com. 86353 IN A 173.245.58.162
hera.ns.cloudflare.com. 86353 IN A 172.64.32.162
;; Query time: 123 msec
;; SERVER: 162.159.0.33#53(162.159.0.33) (UDP)
;; WHEN: Mon Sep 28 01:11:37 AWST 2026
;; MSG SIZE rcvd: 99
Querying the domain's authoritative nameserver
Now we've reached the authoritative nameserver for example.com! The last thing to do is to fetch the A record for example.com to obtain its server's IP address:
$ dig @108.162.192.162 example.com
; <<>> DiG 9.20.29-1-Debian <<>> @108.162.192.162 example.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43082
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;example.com. IN A
;; ANSWER SECTION:
example.com. 300 IN A 104.20.23.154
example.com. 300 IN A 172.66.147.243
;; Query time: 123 msec
;; SERVER: 108.162.192.162#53(108.162.192.162) (UDP)
;; WHEN: Mon Sep 28 01:13:47 AWST 2026
;; MSG SIZE rcvd: 72
At last, we've determined that the IP addresses of the servers behind example.com are 104.20.23.154 and 172.66.147.243. This matches our earlier lookup directly against your computer's configured DNS server.
The DNS servers your computer uses employ this recursive resolution technique behind the scenes, so that your computer only needs to make one round trip, and the servers can use their much faster data center connections and caching to optimize the process and make the query as fast as possible.
Verify your DNS records
To check your website's records, the first thing you'll want to do is ensure your domain name is pointed at the correct nameserver. For instance, aezign.com.au is supposed to use Cloudflare, since that is where all the DNS records have been set up. We can verify this using dig, (or alternatively with online tools like dnschecker.org):
If this is not set correctly, the DNS records you configure will not work, as resolvers will be fetching records from somewhere else. In most cases, you can update this in your domain registrar's settings. This is especially common for new domain names, which default to the registrar's nameservers; unless you plan to use their built-in DNS management, you'll need to point them to your chosen provider.
Now we can check that the DNS records you've configured match those your DNS server returns. For aezign.com.au, these are the MX and TXT records configured on Cloudflare.
The MX record and some TXT records configured for aezign.com.au on Cloudflare's dashboard.
We can check these using dig, and using the +short option to show only the content of the records.
As we can see, this matches, which means that the nameservers for aezign.com.au are correct and the DNS records are what we intend them to be.
Note that if you've recently changed the nameserver or DNS records for your domain, it can take anywhere between 10 seconds and 24 hours for the changes to take effect and propagate across the different DNS servers worldwide. Tools like dnschecker.org can check your records on different DNS servers worldwide to see if they're reflecting your changes. The reason for this is caching: DNS servers like 1.1.1.1 will cache results so it doesn't have to do the full resolution process every time, and uses the Time-To-Live (TTL) you configure in your DNS records as a guideline for caching duration.
Since becoming Apple's CEO last month, John Ternus has made product design a "major priority," according to Bloomberg's Mark Gurman.
"Ternus already had some involvement with the design studio as Apple's head of hardware engineering, given the close coordination required between the two functions," he said, in his Power On newsletter today. "Since becoming CEO, however, he has immersed himself in the industrial design and human interface teams."
Ternus goes "hands-on" in Apple's design studio "several times a week, sometimes visiting multiple times in a single day," whereas Apple's former CEO Tim Cook typically visited the studio for "about an hour once a month, at most," according to Gurman.
Unlike Cook, who is better known as a supply chain expert, Ternus comes from an engineering background. As such, Gurman said that Ternus is largely leaving Apple's finances to financial chief Kevan Parekh and its supply chain to operations chief Sabih Khan, giving him more time to focus on engineering and design.
All in all, Apple now has a product person running the show.
Apple recently posted a job listing for an "iCup Supply Specialist" who would be responsible for ensuring that "all Apple employees have access to freshly brewed coffee in their break room."
MacRumors contributor Aaron Perris highlighted the job listing this weekend, but it turns out that Apple has been using the "iCup" name since at least 2014. The individual hired will be required to drive between locations and "sanitize, clean, restock, and manage up to 90 bean-to-cup coffee machines."
Bloomberg's Mark Gurman today said the new MacBook Pro models with OLED displays will be "significantly lighter" than the existing MacBook Pro models.
"Apple has reengineered the machine's interior, miniaturizing parts and rearranging components to make the computer much easier to carry," he said, in his Power On newsletter. Currently, the MacBook Pro weighs up to 4.7 pounds, while the MacBook Air weighs up to 3.3 pounds and the MacBook Neo weighs 2.7 pounds.
With this newly-reported detail, the new models are now rumored to have six new features:
OLED display
Touch-screen capabilities
Dynamic Island instead of a notch
M5 Pro and M5 Max chips
Thinner design
"Significantly lighter" design
Thinner and lighter go hand in hand.
Apple plans to release the MacBook Pro models with OLED displays in October or November this year, according to Gurman. In his newsletter, he reiterated that Apple is testing the laptops with macOS 27.2, which is currently in beta.
The OLED models are expected to be higher-end, higher-priced models that sit above the existing MacBook Pro models in Apple's lineup.
Last week, Bloomberg's Mark Gurman reported that Apple plans to unveil an all-new smart home hub, a new HomePod mini, and a new Apple TV 4K on Tuesday, October 13.
In his Power On newsletter today, Gurman specified that "Apple is planning to hold an event" that day.
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. This week in DistroWatch Weekly:
Review: fu11m00n 2.64
News: The Dutch government creates NixOS-based distro, GhostBSD starts work on own desktop, openSUSE discusses month of security fixes
Questions and answers: Breaking Linux to learn Linux?
Released last week: EmmabuntΓΌs DE6-1.03, Kodachi OS 10.0.3, OpenMandriva Lx 26.09 "ROME", Nitrux 7.0.0, umbrelOS 2.0.0,....
Log in
