It seems like every company is scrambling to stake their claim in the AI goldrush–check out the CEO of Kroger promising to bring LLMs into the dairy aisle. And front line workers are following suit–experimenting with AI so they can work faster and do more.

In the few short months since ChatGPT debuted, hundreds of AI-powered tools have come on the market. But while AI-based tools have genuinely helpful applications, they also pose profound security risks. Unfortunately, most companies still haven’t come up with policies to manage those risks. In the absence of clear guidance around responsible AI use, employees are blithely handing over sensitive data to untrustworthy tools. 

AI-based browser extensions offer the clearest illustration of this phenomenon. The Chrome store is overflowing with extensions that (claim to) harness ChatGPT to do all manner of tasks: punching up emails, designing graphics, transcribing meetings, and writing code. But these tools are prone to at least three types of risk.

1. Malware: Security researchers keep uncovering AI-based extensions that steal user data. These extensions play on users’ trust of the big tech platforms (“it can’t be dangerous if Google lets it on the Chrome store!”) and they often appear to work, by hooking up to ChatGPT et al’s APIs. 
2. Data Governance: Companies including Apple and Verizon have banned their employees from using LLMs because these products rarely offer a guarantee that a user’s inputs won’t be used as training data.
3. Prompt Injection Attacks: In this little known but potentially unsolvable attack, hidden text on a webpage directs an AI tool to perform malicious actions–such as exfiltrate data and then delete the records. 

Up until now, most companies have been caught flat-footed by AI, but these risks are too serious to ignore. 

At Kolide, we’re taking a two-part approach to governing AI use.

1. Draft AI policies as a team. We don’t want to totally ban our team from using AI, we just want to use it safely. So our first step is meeting with representatives from multiple teams to figure out what they’re getting out of AI-based tools, and how we can provide them with secure options that don’t expose critical data or infrastructure.
2. Use Kolide to block malicious tools. Kolide lets IT and security teams write Checks that detect device compliance issues, and we’ve already started creating Checks for malicious (or dubious) AI-based tools. Now if an employee accidentally downloads malware, they’ll be prevented from logging into our cloud apps until they’ve removed it.

Every company will have to craft policies based on their unique needs and concerns, but the important thing is to start now. There’s still time to seize the reins of AI, before it gallops away with your company’s data.

To learn more about how Kolide enforces device compliance for companies with Okta, click here to watch an on-demand demo.

Our thank to Kolide for sponsoring MacStories this week.

Getting OS updates installed on end user devices should be easy. After all, it’s one of the simplest yet most impactful ways that every employee can practice good security. 

On top of that, every MDM solution promises that it will automate the process and install updates with no user interaction needed.

Yet in the real world, it doesn’t play out like that. Users don’t install updates and IT admins won’t force installs via forced restart.

Let’s talk about the second problem first. Sure, you could simply schedule updates for all your users, and have them restart during non-work hours. But this inevitably leads to disruptions and lost work. This, in turn, leads to users (especially executives) who simply demand to be left out of your update policy. The bottom line is: any forced restarts without user approval will lead to data loss events, and that makes them so unpopular that they are functionally unusable.

There is another class of tools that claim to get users to install updates themselves, through “nudges.” These reminders pop up with increasing frequency until users relent or the timer runs out. This is an improvement, since it involves users in the process, but users still tend to delay updating as long as possible (which for some tools can be indefinitely).

At Kolide, OS updates are the single most common issue customers want us to solve. They come to us because we have a unique (and uniquely effective) approach to device compliance.

With Kolide, when a user’s device–be it Mac, Windows, Linux, or mobile–is out of compliance, we reach out to them with instructions on how to fix it.

The user chooses when to restart, but if they don’t fix the problem by a predetermined deadline, they’re unable to authenticate with Okta. (At present, Kolide is exclusive to Okta customers, but we plan to integrate with more SSO providers soon.)

If your fleet is littered with devices that stubbornly refuse to update, then consider these two principles:

1. You can’t have a successful patch management policy without involving users.
2. You can’t get users to install patches unless you give them both clear instructions and real consequences.

Installing OS updates is a top priority for both security and IT, and when you make it part of conditional access, you can finally get it done without massive lists of exemptions or massive piles of support tickets.

To learn more about how Kolide enforces device compliance for companies with Okta, click here to watch an on-demand demo.

Our thank to Kolide for sponsoring MacStories this week.

It’s summertime, and with high temperatures comes the need to stay hydrated. The trouble is, you’re busy and have a lot going on every day, which can make it hard to remember to grab a glass of water, let alone keep track of how much you’ve had during the course of a day.

That’s where Funn Media’s WaterMinder app comes in. It’s the easiest way to remember to stay hydrated throughout the year and keep track of the liquids you consume.

WaterMinder makes tracking hydration incredibly simple. The app features an elegant interface and myriad ways to input the water and other drinks you consume throughout the day. The app is available on all of Apple’s platforms, is highly customizable, and includes support for Shortcuts, widgets, and Apple Watch complications. With WaterMinder’s rich charts for tracking, hydration reminders, and integration with Apple Health, you’ll have your hydration on track in no time flat.

The latest update to WaterMinder was version 6.2, which added the ability to create multi-ingredient cups and a simplified mode that hides some of the app’s more advanced features to create a focused, streamlined experience. The app is always being updated with new and innovative features. In fact, the team at Funn Media is currently working on interactive widgets for iOS 17 and a visionOS version of WaterMinder for the VisionPro’s release in 2024.

Get started on the road to proper hydration with WaterMinder by visiting the app’s website today to learn more about this fantastic app.

Our thanks to WaterMinder by Funn Media for sponsoring MacStories this week.

It seems like every company is scrambling to stake their claim in the AI goldrush–check out the CEO of Kroger promising to bring LLMs into the dairy aisle. And front line workers are following suit–experimenting with AI so they can work faster and do more.

In the few short months since ChatGPT debuted, hundreds of AI-powered tools have come on the market. But while AI-based tools have genuinely helpful applications, they also pose profound security risks. Unfortunately, most companies still haven’t come up with policies to manage those risks. In the absence of clear guidance around responsible AI use, employees are blithely handing over sensitive data to untrustworthy tools. 

AI-based browser extensions offer the clearest illustration of this phenomenon. The Chrome store is overflowing with extensions that (claim to) harness ChatGPT to do all manner of tasks: punching up emails, designing graphics, transcribing meetings, and writing code. But these tools are prone to at least three types of risk.

1. Malware: Security researchers keep uncovering AI-based extensions that steal user data. These extensions play on users’ trust of the big tech platforms (“it can’t be dangerous if Google lets it on the Chrome store!”) and they often appear to work, by hooking up to ChatGPT et al’s APIs. 
2. Data Governance: Companies including Apple and Verizon have banned their employees from using LLMs because these products rarely offer a guarantee that a user’s inputs won’t be used as training data.
3. Prompt Injection Attacks: In this little known but potentially unsolvable attack, hidden text on a webpage directs an AI tool to perform malicious actions–such as exfiltrate data and then delete the records. 

Up until now, most companies have been caught flat-footed by AI, but these risks are too serious to ignore. 

At Kolide, we’re taking a two-part approach to governing AI use.

1. Draft AI policies as a team. We don’t want to totally ban our team from using AI, we just want to use it safely. So our first step is meeting with representatives from multiple teams to figure out what they’re getting out of AI-based tools, and how we can provide them with secure options that don’t expose critical data or infrastructure.
2. Use Kolide to block malicious tools. Kolide lets IT and security teams write Checks that detect device compliance issues, and we’ve already started creating Checks for malicious (or dubious) AI-based tools. Now if an employee accidentally downloads malware, they’ll be prevented from logging into our cloud apps until they’ve removed it.

Every company will have to craft policies based on their unique needs and concerns, but the important thing is to start now. There’s still time to seize the reins of AI, before it gallops away with your company’s data.

To learn more about how Kolide enforces device compliance for companies with Okta, click here to watch an on-demand demo.

Our thank to Kolide for sponsoring MacStories this week.

Sketch, explore and share endless ideas with Concepts’ infinite canvas for iPad. Used by creators for visual thinking, note taking, team communication and design, Concepts goes beyond a digital sketchbook.

Since everything you draw is a flexible vector-raster hybrid, you can move your ideas around like a visual playground to help you see the bigger picture. Organize notes, images and PDFs into visual moodboards and sketch your ideas on top. Use precision grids and guides to help you lay out designs, and apply real-world scale and measurements for professional projects.

With Concepts, you can whiteboard virtually with teams and clients using apps like Zoom. A built-in Presentation Mode helps you connect with others for live sharing and graphic discussion.

The app comes free as a basic sketching tool, with the ability to unlock 200+ libraries of brushes, objects and services via subscription or one-time purchase. To learn more about Concepts, visit their website.

MacStories readers – Enjoy a special 3 month extended free trial when you sign up for an annual subscription. Get three months of infinite creativity before you are billed.

Our thanks to Concepts for sponsoring MacStories this week.

UI Designer Weekly is a free weekly newsletter by designer Sahand Nayebaziz all about Apple user interface design.

As the number of Apple platforms multiplies, staying on top of the latest design trends and principles has never been more important and hard. Whether you’re a designer or developer, UI Designer Weekly will get you up to speed on the latest in UI design and help you stay there with its extensive, expert coverage.

Each issue of UI Designer Weekly is packed with thought-provoking articles that will inspire your design work. The ‘New Standards’ section looks at interface design through the lens of Apple’s OSes and apps. For example, the newsletter is currently in the midst of extensive WWDC coverage, breaking down the design language of visionOS, plus upcoming changes to Contacts, Messages, StandBy, and more.

The newsletter’s ‘Spotted’ section zooms out, analyzing UI design throughout the Apple ecosystem, whether it’s Apple’s marketing materials or keynote presentations like WWDC’s. No matter what corner of the Apple world UI Designer Weekly covers, each issue is packed with excellent examples and inspiration that will help you with your design work.

With each new issue of UI Designer Weekly, you’ll gain deep insight into where Apple’s designers are heading, how those trends impact your apps, and ideas about how to implement them yourself. And with WWDC just concluded, now is the perfect time to sign up and join the hundreds of subscribers receiving a new issue of UI Designer Weekly free every Friday and without ads.

Visit uidesignerweekly.curated.co to sign up for UI Designer Weekly today.

Our thanks to UI Design Weekly for sponsoring MacStories this week.

Fin is a simple and elegant way to track your finances on your iPhone, iPad, and Apple Watch. The app takes the hassle out of keeping tabs on your income and expenses with a straightforward, modern interface that supports multiple accounts, including cash tracking.

Fin privacy-focused approach to budgeting doesn’t require you to sign up for an account, so there’s no login process, and the app works offline, so it’s always available. To get started, just set up a budget, and track your income and expenses across customizable categories. Fin also supports data import and recurring transactions and offers attachments like photos and PDFs, searching with powerful filtering, customizable notifications, and weekly reports.

Fin, which has been featured multiple times on the App Store, makes sharing easy too. You can share your accounts using iCloud Sharing. Plus, the app supports the latest OS technologies like Home and Lock Screen widgets, Focus filters, Live Text, and Shortcuts and is continuously updated. Everything in Fin syncs via iCloud for easy access, and if you need to use your data elsewhere, Fin can export it too.

However, tracking your finances is just half of the equation. Fin also features beautiful charts and graphs to help you gain insights into your finances. Armed with the data, you’ll be able to meet your budget and gain control of your finances like never before.

Download Fin from the App Store and start saving money and reaching your financial goals today.

Our thanks to Fin for sponsoring MacStories this week.

MacStadium, the industry-leading Mac cloud and MacDevOps provider, now offers a pre-packaged MacDevOps solution directly from the MacStadium website, enabling immediate use of their popular macOS CI/CD automation tool. With a simplified setup process and instant access, the Orka Small Teams edition was developed as an enterprise-level solution to meet the needs of small to midsize customers. With Orka Small Teams your organization can:

• Quickly and efficiently automate key MacDevOps development workflows
• Extend your CI/CD pipeline by connecting Orka platform to the most popular DevOps tools 
• Easily orchestrate workloads using Orka platform’s RESTful API

MacDevOps teams of all sizes can now benefit from Orka’s pioneering macOS virtualization and orchestration software and MacStadium’s industry-leading Mac cloud infrastructure. Users can configure their new Orka platform environment independently with the help of MacStadium’s easy-to-follow startup guide. This affordable solution starts at $499/month and includes the key components necessary in MacDevOps automation. Watch the video to see how quick and easy it is to access Orka Small Teams.

To learn more about Orka Small Teams, please visit macstadium.com/orka-small-teams. For more information on Orka and its features, visit the MacStadium website.

iMazing is the must-have multi-tool for everyone who prefers or needs to manage iPhone or iPad devices locally from their Mac or PC.

Whether you’re an individual, family, small business, or enterprise, iMazing delivers powerful and easy-to-use solutions for working with your Apple mobile devices and their contents.

These features include:

• backup iPhone or iPad to external storage or NAS volumes, with snapshot support (like TimeMachine for iOS devices)
• browse the contents of old device backups; export any data from them
• export or print SMS, MMS, iMessage, and WhatsApp messages, including attachments and metadata (great for memories or business purposes)
• easily place a device in kiosk mode (use old iPads as photo frames or dedicated FaceTime devices)
• create blueprints and bulk configure devices locally with iMazing Configurator
• migrate your business from one MDM solution to another without losing any device data

iMazing also packs powerful media transfer capabilities, enabling you to browse and export photos and videos from your devices faster and with more options than Apple’s own Image Capture. iMazing can also export music and playlists from any Apple mobile device to your computer, so that special recording that only survives on your old iPod can be enjoyed elsewhere.

Many iMazing features are also available free of charge, including Spyware Analyzer and QuickTransfer, the faster way to transfer files from your computer to a device with just a single drag-and-drop.

iMazing provides the power and flexibility that pro users demand with the ease of use and flexible export features that all users will love. Try iMazing today for free by visiting their website and taking it for a spin.

Our thanks to iMazing for sponsoring MacStories this week.