Federico Viticci

10917 posts on MacStories since April 2009

Federico is the founder and Editor-in-Chief of MacStories, where he writes about Apple with a focus on apps, developers, iPad, and iOS productivity. He founded MacStories in April 2009 and has been writing about Apple since. Federico is also the co-host of AppStories, a weekly podcast exploring the world of apps, Unwind, a fun exploration of media and more, and NPC: Next Portable Console, a show about portable gaming and the handheld revolution.

Apple’s Updated Security Guide for iOS 11.1 and iOS 11.2→

Apple’s iOS Security guide is one of the most fascinating technical documents I’ve read in recent years. While the topics are intricate, they’re presented clearly in readable English. Earlier this week, the document was updated with new information on the latest additions to the iOS ecosystem – including Face ID, Apple Pay Cash, and Password AutoFill. There are some interesting details I didn’t know in each section.

On Face ID:

Facial matching is performed within the Secure Enclave using neural networks trained specifically for that purpose. We developed the facial matching neural networks using over a billion images, including IR and depth images collected in studies conducted with the participants’ informed consent. Apple worked with participants from around the world to include a representative group of people accounting for gender, age, ethnicity, and other factors. The studies were augmented as needed to provide a high degree of accuracy for a diverse range of users. Face ID is designed to work with hats, scarves, glasses, contact lenses, and many sunglasses. Furthermore, it’s designed to work indoors, outdoors, and even in total darkness. An additional neural network that’s trained to spot and resist spoofing defends against attempts to unlock your iPhone X with photos or masks.

On Apple Pay Cash, which details the new ‘Apple Payments Inc.’ subsidiary:

When you set up Apple Pay Cash, the same information as when you add a credit or debit card may be shared with our partner bank Green Dot Bank and with Apple Payments Inc., a wholly owned subsidiary created to protect your privacy by storing and processing information separately from the rest of Apple and in a way that the rest of Apple doesn’t know. This information is only used for troubleshooting, fraud prevention, and regulatory purposes.

[…]

Apple Payments Inc. will store and may use your transaction data for troubleshooting, fraud prevention, and regulatory purposes once a transaction is completed. The rest of Apple doesn’t know who you sent money to, received money from, or where you made a purchase with your Apple Pay Cash card.

To read more, get the full PDF here and check out the document revision history for January 2018.

Permalink

Apple and the Alexa Ecosystem

I recently read two interesting takes on the ever-growing Alexa ecosystem as it relates to Apple that made me think about the future of Siri and HomeKit. Here’s M.G. Siegler on Amazon’s plan to put Alexa everywhere:

The Echo Dot was the number one selling device across all of Amazon during the holiday shopping season. (The Fire TV stick with the Alexa-enabled remote was the second-most popular product.) Again, no absolute sales numbers beyond “tens of millions of Alexa-enabled devices” — more than we usually get, by the way — but no matter: tens of millions is impressive enough.

I’ve been thinking about this recently not just in the context of putting Echoes in hotels, but also relative to Apple. As we’re all well aware, Apple had to delay their foray into the space, the HomePod, into 2018. But not only did they miss the all-important holiday shopping season, I’m increasingly thinking that they may have missed the boat.

Believe me, I know how dangerous this line of thinking is with regard to Apple. Apple is almost never the first-mover in a market. Instead, they prefer to sit back and let markets mature enough to then swoop in with their effort, which more often than not is the best effort (this is both subjective in terms of my own taste, and often objective in terms of sales). But again, I increasingly don’t believe that this will be the case with their smart speaker.

Amazon has entered the speaker and home automation market with Alexa-enabled devices in two ways: first with their own Echo products, then with a growing roster of third-party manufacturers that are baking Alexa into their devices and almost treating Amazon’s assistant as a “standard” feature like WiFi or Bluetooth. There’s a fascinating parallel between Amazon Web Services – a suite of components embedded in the majority of modern websites and web apps – and Alexa Voice Service – a suite of voice APIs now embedded in hundreds of automation devices, general-purpose accessories and appliances, and web services.

Here’s Ben Bajarin on what Alexa’s presence at CES tells us about the ecosystem surrounding Apple:

While many Apple defenders want to dismiss the momentum we are observing with the Amazon ecosystem on display here at CES, while Amazon is similarly not present just like Apple, I believe it is a mistake to do so.

It is easy to say that because Apple was never present at CES that the show didn’t mean something to them or their ecosystem. It is easy, and correct to say that CES was not, or never was, a measure of the health of Apple’s products. It is, however, incorrect and dangerous to miss that CES had been, for some time, a barometer for the health of Apple’s ecosystem.

As I mentioned, our ability to measure any platforms ecosystem from what we observe at CES, is the main reason so many are paying attention to what is happening with Amazon’s Alexa platform. Google Assistant is certainly more present than it was last year, however, when you look at how third parties are talking about-and marketing-their support of these assistants they are putting significantly more effort into talking about Alexa than Google Assistant. Which is a telling signal. Again, to reiterate this point, third parties used to market, and spend energy talking about their integration with iOS or support of iPhone/iPad with the same rigor they are now talking about Amazon’s Alexa. This can not be ignored.

You could argue that most Apple-compatible gadgets and accessories announced at CES used to appear in tech blogs only to be forgotten a few months later because they were fads, vaporware, or ultimately not essential to the growth of the iOS ecosystem, and that the same will happen with Alexa-enabled devices we’ve seen this year. The difference, I think, is that this new generation of home automation products is an ecosystem in itself with higher value than, say, the iPad keyboards or stylii we used to see at CES. Alexa hasn’t “won”, but it has momentum among third-party companies making products that are or will soon be in our homes, sharing the same space of our TVs, routers, consoles, and mobile devices.

Read more


Making the App Icon Grid

In the latest installment of my annual Must-Have iOS Apps roundup, I included an image with a grid of icons from all the apps listed in the collection. I received a few questions about how I created the image – whether it was the result of patient manual work or an automation – and...


Member Requests

Question: From an email message received in Spark (or Gmail), I’d like to send an attachment to DEVONthink, copy the link of the item added in DEVONthink, make a note in Bear, copy the link of this Bear note and finally create a project in Things with the DEVONthink and Bear links in its descriptions....


The Effects of Safari’s Intelligent Tracking Prevention→

Alex Hern, reporting for The Guardian on the results of Safari’s new Intelligent Tracking Prevention (ITP), launched last year with iOS 11 and macOS High Sierra (via John Gruber):

Internet advertising firms are losing hundreds of millions of dollars following the introduction of a new privacy feature from Apple that prevents users from being tracked around the web.

Advertising technology firm Criteo, one of the largest in the industry, says that the Intelligent Tracking Prevention (ITP) feature for Safari, which holds 15% of the global browser market, is likely to cut its 2018 revenue by more than a fifth compared to projections made before ITP was announced.

Here’s how Apple officially describes ITP in Safari 11’s documentation:

Added Intelligent Tracking Prevention, which updates the default cookie and website data policy to isolate and remove cookies and website data for sites with the ability to track users across-site.

This isn’t the first time ad companies have complained about Apple’s protection of user privacy in Safari and stance against invasive cross-site tracking. In September, six trade groups claimed Apple was “sabotaging” the industry with a “unilateral and heavy-handed approach”, to which Apple responded:

“Ad tracking technology has become so pervasive that it is possible for ad tracking companies to recreate the majority of a person’s web browsing history,” according to an Apple spokesperson. “This information is collected without permission and is used for ad re-targeting, which is how ads follow people around the Internet.”

“Unilateral” is exactly right: Apple should only care for the interests of users buying their devices, not those of third-party ad companies creepily tracking them around the web.

Cross-site tracking and ad targeting has gotten so out of hand over the past couple of years, it’s become a regular comment from friends who don’t follow tech news – “Why am I seeing an ad for something I was checking out two days ago on another site?” is a question I hear frequently despite the existence of third-party ad blockers and Apple’s own ITP in Safari. Personally, I think the more Apple can advance ITP, the better it is for the privacy of all iOS users.

Permalink

Sharing Links from Twitter for iOS Appends Garbage to the URL→

Last night on Twitter, I noted that the company’s iOS app now appends a query parameter based on an app’s bundle identifier when you share a tweet’s link via the system share sheet.

As some have noted, this appears to be a recent change in Twitter for iOS, which is less than ideal as the resulting link contains a long string of URL-encoded garbage. More than ugly URLs, however, what bothered me was Twitter’s implicit tracking of which apps users invoke to share links with – something that even applies to core iOS features such as Apple’s own Messages extension.

I wondered whether Apple should consider this a violation of App Store guidelines, but it appears that Twitter isn’t breaking any rules by appending app-based query parameters to their shareable URLs. Benjamin Mayo looked into this feature and explained how Twitter is leveraging public iOS APIs to read bundle identifiers from the share sheet – he even posted a proof-of-concept code snippet to show how it’d work in practice.

He writes:

In reality, this is very easily achieved. As part of the activity provider API, the system asks for content to share for each sharing extension the user has installed. The Apple framework openly passes the activity type to the app. Twitter simply takes the base URL it wants to share and appends the ‘garbage’ before returning.

And:

The important thing to note here is that the mechanism is innocuous and uses valid APIs provided by Apple. Twitter is not exploiting private APIs to achieve this. A cursory look at the app review guidelines suggests to me there are no grounds for Apple to scold Twitter (or any other app) for doing it.

My personal stance is that this is annoying but does not violate user privacy. Importantly, Twitter cannot append arbitrary information to its URLs system-wide; it is confined to cases where users share something from inside the Twitter app itself. I don’t really see a justification for Apple to amend the guidelines to disallow it. I just take it as another reason not to use the official Twitter app.

In conclusion, if links to tweets you copied from the Twitter app suddenly look longer and messier than before, this is why. Personally, while Twitter may be taking advantage of a publicly available API, I still think the implementation is, at the very least, in poor taste – especially because it’s coming from the same company that used to scan users’ devices to list installed apps and deliver “tailored content” based on them. Even though I won’t stop using the Twitter app because of this, I wish Twitter would revert to standard, clean URLs when sharing tweets from the app. I also hope Apple is taking a closer look at this.

Permalink

Connected, Episode 175: The Devil on my Shoulder→

2018 is here, and so is Stephen’s new computer and our predictions for the next year. Also, CES is a thing.

In the first episode of Connected for 2018, we share our annual predictions and discuss some of the overarching themes from CES. You can listen here.

Sponsored by:

  • Linode: High performance SSD Linux servers for all of your infrastructure needs. Get a $20 credit with promo code ‘connected2018’
  • Squarespace: Make your next move. Enter offer code WORLD at checkout to get 10% off your first purchase.
  • MissionU: An education for the 21st century
Permalink

Our Ideal Email Client

AppStories+ Deeper into the world of apps

AppStories Episode 37 - Our Ideal Email Client

0:00
42:17

↓

AppStories+ Deeper into the world of apps

Federico and John discuss the features that their ideal iOS and Mac email clients would have and what they are using now.

Read more


Matt Wilkinson Joins Beats 1’s Primetime Lineup→

Serenity Caldwell, reporting for iMore on a major change to Beats 1’s primetime lineup:

Apple’s Beats 1 radio service (part of Apple Music) is shaking up its weekday primetime programming starting January 8, bringing a new DJ to its daily lineup and moving around its primetime shows.

Matt Wilkinson, who formerly hosted Beats 1’s weekly Saturday alternative music show, will now join Zane Lowe, Julie Adenuga, and Ebro Darden as a weekdaily presence on the network — he’ll be broadcasting live from London from 6AM-8AM ET Monday through Friday, and will have Mike D of the Beastie Boys on to celebrate his new show on January 15.

Wilkinson’s deep music knowledge (he’s the former NME New Music Editor) is a solid addition to Beats 1’s regular programming.

Here’s Caldwell again on the significance the announcement:

This is the first time since Beats 1’s launch in 2015 that the primetime lineup has changed significantly: Adding another London voice at the 6-8AM ET slot will nix many of the replays and countdown shows formerly occupying that space; in addition, Julie Adenuga is moving from 3PM ET to 9AM ET, with Ebro Darden bumping up to the 3PM ET slot from the 6-8PM ET evening beat. Beats Creative Director Zane Lowe will continue to hold his flagship 12PM ET slot.

I haven’t listened to Beats 1 much over the past year, but I’m going to check out Wilkinson’s new show (to get an idea of Wilkinson’s style, you can listen to his last show of 2017 – Episode 128 – here.)

Permalink