Wednesday, October 21, 2026

PHP2Shell

Malwarebytes:

If you’ve encountered websites in maintenance mode today, it may be a security precaution. Reports of attacks targeting two critical PHP vulnerabilities have prompted warnings to install emergency updates and consider temporarily taking affected services offline until they can be patched.

[…]

Successful exploitation could let an attacker run malicious code on an affected server without logging in. That code would run with the permissions available to the PHP process, potentially allowing attackers to steal application data, alter website content, or establish a backdoor.

[…]

The PHP team scheduled its emergency security updates for October 21 at 10:00 am ET (14:00 UTC). It has now released fixes in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35, and urges users to update immediately. Administrators should check with their hosting provider or operating system vendor for the appropriate updated packages.

Adam Engst:

Expect to see numerous websites go down or serve “Page not found” errors as they update PHP, the programming language that underpins 70% of websites. If you run a WordPress, Drupal, or Joomla site, this affects you directly.

Nick Heer:

Word on the street is that these exploits have leaked, and that remote code can likely be executed all the way back to PHP 5. If you have access to your website’s php.ini file, it might be worth turning off multipart uploads for now.

Vincent Schmalbach:

Two changes reduce the risk until the fixed versions are out. They were checked against PHP’s source code and the PHP manual, but they are not an official PHP mitigation. When someone suggested that turning off session upload progress might be enough, PHP core developer Gina Peter Banyard replied, “The only thing I can say is that the only mitigation is patching / upgrading PHP. I sadly know too much.” Use the stopgaps to lower the risk for a few hours, and update PHP as soon as the fixed builds exist.

Add to php.ini:

session.upload_progress.enabled = Off

Add to .htaccess:

<If "req('Content-Type') =~ /multipart/i">
    Require all denied
</If>

Ofcom Concedes Defeat in 4chan Case

Guido Fawkes:

Ofcom boss Dame Melanie Dawes has admitted today that tech firms have paid just two of the eleven fines handed out under the Online Safety Act since March last year. Giving evidence to the Culture, Media and Sport Committee, she conceded nine remain unpaid, four of the offending sites have simply geo-blocked the UK, and three are still up and running with nothing changed.

Via Preston Byrne (Hacker News):

American courts have, by now, provided their preliminary view on the likelihood of Ofcom’s enforcement powers being successful in U.S. courts – the obiter dicta in 4chan v. Ofcom, the opinion in the case we filed against Ofcom in the federal District Court for the District of Columbia a little over a year ago.

[…]

Ofcom can’t enforce the Online Safety Act in America. Ofcom knows it, Ofcom has known it for a long time, and now, Ofcom has, finally, admitted it.

[…]

The GRANITE Act, a foreign censorship shield now before both the House and Senate (H.R. 10174 / S. 5478), is one proposed legal response America could adopt. The HOMEFRONT Act, H.R. 10309, is another. Either of GRANITE or HOMEFRONT would strip sovereign immunity from foreign censors and let Americans targeted by their orders drag those agencies into federal court, where they could be held accountable for their actions.

Previously:

iOS Dev Course Going Out of Business

Sean Allen (via Rebecca Sloane):

iOS dev course sales plummeted due to AI. It costs a lot of money to host my courses online and with sales at basically $0, I’ve cancelled that hosting.

This closes down the site which unfortunately removes access to the courses.

[…]

I’ve put my recent course on sale at a large discount so you can get it before it’s gone and I’ve made old courses available for free if you want to grab those too.

The school will be online until November 24th so you have a few weeks to download these videos at seanallen.teachable.com.

Apple Broke an Essential Presentation Feature of iPads

Teddy Svoronos (Hacker News):

As of iPadOS 27, if you have multiple windows open while AirPlaying (whether or not Stage Manager is on), tapping on anything other than the presenting app will snap the external display into showing your whole iPad screen. This means that my students see all my notes on who I want to call on, or poll results that should be hidden from them. They also get distracted from what we’re learning by all these jarring windows popping up and disappearing. If you’re presenting at a big conference, it’s extremely embarrassing.

[…]

As for what the behavior should be, I’m not a developer, but here’s a proposal: if you’re using an app that is in presenter mode (e.g., PowerPoint playing a presentation, or a GoodNotes document open), it should always get precedence on the external display, until that presentation gets stopped, the document is closed, or the app is quit.

Previously:

Tuesday, October 20, 2026

Selection and Focus in Golden Gate

Howard Oakley:

Now move the pointer to the right edge of the list of folder contents, just far enough to the left to avoid moving the window divider, but not so far as to fully select items from within that folder. Click there and the item will be selected, but in grey, the same as would appear if it had been fully selected but its window was no longer in focus. At this stage, the original folder will still be fully highlighted, as if nothing had been selected inside it, but you can drag that grey unfocussed selection to include other items inside the folder.

On my Mac, if I click on a file icon in the second column, the first column retains focus. The second column only gets focus if I click on a filename (or even farther to the right).

Now using the up and down arrow keys doesn’t move within the items inside that folder, but back with the fully highlighted folder. With a few of the items inside that folder in grey, so they’re selected but not in focus, press the spacebar for a QuickLook preview, and you’ll see the greyed items, not the folder that’s still fully selected to the left.

[…]

In other situations, this becomes infuriating.

In my log browser LogUI, separation of selection from focus can leave you clicking wildly without being able to select log entries.

Previously:

Update (2026-10-21): Philip Savoulidis:

I too was wondering if there was something peculiar with my Mac. Focus seems so broken in Golden Gate that I was expecting macOS reviews to mention it. In this regard, I am glad to see focus problems mentioned here.

The behaviour seems inconsistent. For example, in Finder and Mail the sidebar does not gain focus on click, but it does in Contacts and NetNewsWire (a third-party app). The Passwords app seems like the worst offender: the password list itself does not gain focus on click (e.g. click the search field then click an item and focus remains in the search field).

I spent some time investigating this, and I think it comes down to a SwiftUI bug. List and Table in SwiftUI are affected. Both use NSTableView under the hood, but they never become first responder on click.

But I don’t think NSBrowser is built on SwiftUI, so there are probably multiple issues here.

Xcode Projects for the Command Line and Coding Agents

Artem Novichkov (via Fatbobman):

Xcode also ships two command-line tools for the new format:

  • xcprojformatter came with the format in beta 2. It’s a formatter for project files, like swift-format for code: it checks that a project.xcproj file is valid and rewrites it with sorted keys and consistent layout.
  • xcodeproj arrived in beta 3. It reads and edits projects from the terminal: targets, build phases, groups, build settings, xcconfig files, and Swift packages.

Neither is on your PATH, so run them with xcrun.

Previously:

Getting a File Path From a Swift URL

Seth Willits (2024, bug):

There’s a deprecation warning in Xcode for URL.path that reads:

WARNING: path will be deprecated in a future version of macOS: Use path(percentEncoded:) instead

The problem is something like this:

Bundle.main.url(forAuxiliaryExecutable: "tool")!.path

… which returns the expected file path (ex: /Applications/MyApp.app/Contents/tool)

would be quickly rewritten as suggested to:

Bundle.main.url(forAuxiliaryExecutable: "tool")!.path(percentEncoded: false)

… which simply returns tool, because the URL returned is relative to a base URL.

[…]

I’ve always found it not-completely-obvious to newcomers how to get a standard file path string from a file URL and this only makes it more confusing.

There are at least three issues here:

  1. url.path returns an absolute path, but url.path(percentEncoded: false) returned a relative path as of his writing. I tested this on macOS 26, and now it returns an absolute path. The documentation now says, “This function will resolve against the base URL.” It seems the behavior of the method changed without it being documented when, so be careful if you’re deploying to a mix of OS versions.

  2. percentEncoded has a default value of true, whereas path did not return an encoded string. In other words, url.path() and url.path are completely different. So this is another case where Apple updated the API but flipped the default—a good way to introduce bugs.

  3. It’s not obvious how to get the full file system path out of a URL. With NSURL, url.path was natural and did the right thing. Now, the URL equivalent is deprecated.

    The natural replacement, url.path(), is wrong. So is Xcode’s recommendation of url.(percentEncoded: false).

    url.absoluteURL.path(percentEncoded: false) is correct but verbose.

    url.absoluteURL.standardizedFileURL.path(percentEncoded: false) is possibly better but even more verbose.

    FilePath(url)?.string uses a newer API but gives you an optional, even though for a file URL it should never fail.

    This seems like such basic functionality, but there’s no API that’s the obvious right choice, concise, and ergonomic.

Previously:

Monday, October 19, 2026

Carson Oliver and Apple’s Gaming Push

Giovanni Colantonio:

Seven years later, Apple Arcade hasn’t gone anywhere, and Apple itself hasn’t slowed its broader gaming efforts either. Between courting major publishers like Capcom to release their games on Mac to launching a proper gaming app, it’s clear that Apple still has its sights set on being a major player.

The latest example of that came this week as Apple launched an App Store event dubbed Indie Games Week. The week-long initiative saw Apple welcoming games like Vampire Crawlers to iOS and announcing an ambitious mobile version of No Man’s Sky. At the center of that push was Carson Oliver, the new head of App Store Worldwide following Phil Schiller’s sudden departure from the role this past August. The fact that one of his first acts in the role was spearheading an indie gaming showcase hints at where Oliver’s priorities might lie.

[…]

While Oliver sells the narrative with carefully worded precision, questions still linger around Apple’s wider gaming efforts. Continued investment in mixed reality gaming is uncertain given that Apple has reportedly cut down production of its Vision Pro headset due to underwhelming sales. And though Apple continues to court publishers and get games on iOS, we haven’t seen the full-throated support from major players like Capcom and Ubisoft in 2026 that was crucial to raising Apple’s gaming profile in 2023.

Previously:

NetNewsWire 7.2

Brent Simmons:

We’ve released NetNewsWire 7.2 for Mac with a new column view layout: choose View > Use Column Layout to switch.

I really missed this feature from the old NetNewsWire, so I was happy to see its return. Now that I’m using it, I have mixed feelings. I love the columns, how I can scan the titles without the feed names and dates getting in the way. But some titles aren’t very informative, so I miss how the iOS-style view shows a little preview of the article’s body. I wish I could see that, either appended after the title itself or in a second line below it.

We’ve also added a second long-requested feature: you can now hide unread counts or replace them with a •, so you don’t have to deal with the anxiety of an ever-increasing unread count and the feeling like you have to get caught up.

Here are the other changes.

Previously:

DropDMG 3.7.2

DropDMG 3.7.2 is a maintenance update of my app for disk images and archives.

Previously:

Friday, October 16, 2026

Xcode 27.1

Apple (xip, downloads):

Xcode 27.1 includes Swift 6.4 and SDKs for iOS 27.1, iPadOS 27, tvOS 27, watchOS 27, macOS 27, and visionOS 27. Xcode 27.1 supports on-device debugging in iOS 17 and later, tvOS 17 and later, watchOS 10 and later, and visionOS. Xcode 27.1 requires a Mac running macOS Tahoe 26.6 or later.

Christian Beer:

You can’t run macOS UI tests on Xcode cloud as soon as your app uses „restricted entitlements“[…]

Previously:

iMessage Downgrading

Glenn Fleishman:

The odds of this change in standards causing a security breach and your messages being exposed seem unlikely, at least right now. But after scrolling through conversations and seeing what’s going on, I feel Apple has omitted important signals for users when iMessage suddenly stops being used during a conversation.

[…]

The impact of that hit me while revising my book: when iMessage isn’t available, Apple tells you only inline. Despite all the information Messages displays about iMessage being encrypted, the inverse state is faint. This kind of negative knowledge, or information about something not happening, can often be as important as something that does happen. A warning about a fuel tank approaching empty is the kind of information every driver (or pilot) needs, for instance. If you think end-to-end encryption—or Apple-based encryption—is critical for you, then a pop-up message or other warning is what you would expect.

[…]

If you’d like to prevent Messages from downgrading security, you have options, although they may not be fully desirable. All of these are managed on an iPhone at Settings: Apps: Messages. You can’t control these message settings from an iPad or Mac.

This recently happened to my mother, and it was very confusing for her. For unknown reasons, while at home on Wi-Fi, she got signed out of iMessage. But it was not clear to her that this had happened or that she should try to sign back in. She was not aware that the Messages app supports multiple protocols or what the different bubble colors mean. All she noticed was that certain messages (e.g. ones sharing files) would no longer send and that she was not receiving some of the messages that people were sending to her. She saw the inline warning about encryption and interpreted it as that the sender was using a newer form of encryption that her phone didn’t support, so maybe she needed to upgrade.

I went over to take a look and quickly figured out that she was signed out of iMessage, but I couldn’t fix it. I kept getting errors that iMessage couldn’t be activated, even after rebooting the phone. Eventually, much later and again for unknown reasons, activation succeeded.

Update (2026-10-20): Boris Yurkevich:

My concern is that the Retry as Text Message toggle no longer exist. Just a couple of weeks ago my sister sent me an iMessage while I was flying. I was not reachable. Later she told me that messages turned from blue to green.

Mark Stephens (Robert X. Cringely), RIP

Mary Alyce Stephens (Hacker News, Reddit, TidBITS Talk):

Mark Stephens, known to much of the world as Robert X. Cringely, passed away on October 3, 2026. He was 73.

Mark was a gifted writer, journalist, storyteller, husband, father, brother, and friend. To millions of readers and viewers, he was Robert X. Cringely, the witty and sometimes irreverent observer of the technology world. But to those of us fortunate enough to love him, he was simply Mark-and losing him leaves an emptiness that is difficult to put into words.

[…]

Writing as Robert X. Cringely, Mark became a distinctive voice in technology journalism. He had an unusual ability to understand not only technology but also the human beings behind it-the dreamers, inventors, entrepreneurs, eccentrics, and risk-takers who were changing the world. He could take a complicated subject and make it understandable, entertaining, funny, and deeply human.

Steven Sinofsky (via John Gruber):

Bob wrote “Accidental Empires” that chronicled SV and the tech industry of the PC era, 1970s-90s. It led to the highly regarded PBS series “Triumph of the Nerds” a definitive series of interviews of the era. Through that time he authored the “gossip” column” in InfoWorld on the latest goings on at OG PC companies. Everyone read it in print religiously.

See also: I, Cringely and Wikipedia.

Previously:

Update (2026-10-20): Paul Tyma (Hacker News):

The next day Bob and I went to Sun Microsystems. He and I sat in a room with Jonathan Schwartz (CEO) and Rich Greene (C-something-else) while they defended Java and gave me nasty looks wondering who the hell I was and why the hell I was even there. They seemed plenty interested in impressing Bob though. By the way, Dotnet didn’t squish Java but I did get a Sun t-shirt.

Thursday, October 15, 2026

Passkeys Attestation Trap

The Hack (Hacker News):

Like the Trojan Horse, passkeys are legitimately elegant on the surface, but there is something troubling inside.

What’s important to know is that unlike with any other kind of login credential, you do not have ultimate control over your passkeys. With passwords, you can choose where to write them down; with authenticator apps, you can decide for yourself which ones to use (they’re pretty interchangeable); and with physical security keys you can hand them to your colleague if you really trust them. But with passkeys come a hidden dial that lets the websites you use them on gradually remove your ability to do as you please with them.

[…]

This is the feature that means you no longer get to make the calls about your passkeys. Fortunately, attested passkeys are not yet required on most websites. But the FIDO Alliance standard makes attestation a part of the passkey ecosystem, whether you want it or not. And even if the website doesn’t require attestation now, simply by using passkeys you indicate to the website that your setup supports the FIDO Alliance’s passkey standard and that you as a user are capable of using passkeys. This means that once Twitter (formally X) is satisfied that the overwhelming majority of its users would be unaffected, they can flip the switch – perhaps not all at once, perhaps just for ten thousand users at a time so as not to cause a fuss – and start rejecting non-attested passkeys.

[…]

My expectation is that the industry will start off with very few constraints on your passkeys, and gradually add more and more, not all at the same time, but staggered on different sites, and then in a few years people will forget that they were ever offered a choice in which security measures they want to enable on their passkeys (if they even knew there were different kinds of passkeys at all).

[…]

Remote attestation can allow them to verify that your device is not capable of, say, sending and receiving encrypted messages, or running a competitor’s app, or using social media without verifying your ID.

Apple’s passkey implementation currently does not support attestation, but it sounds like this is only until they can work out how to do syncing:

Attestation was designed to attest to a specific device, exclusively at the point of creation, with a specific set of security properties. It doesn’t make sense for synced credentials for a number of reasons, including syncing to devices with different security properties, changes in security properties that happen after key creation, security properties of the sync fabric, sharing the passkey, or exporting to other passkey providers. We’re working hard with W3C and FIDO to solve these problems.

Ricky Mondello:

The post is predicated on the idea that a feature of WebAuthn called “attestation”, which is only used in high-assurance and usually corporate scenarios, and usually with physical hardware security keys, will be leveraged to hurt people, somehow.

The post posits that a website like X will bait and switch users: first, you get a passkey. Then, later, scary “attested” passkeys! This simply isn’t possible to do because attestation isn’t supported on the web for mass market, consumer authentication.

Attestation for passkeys (software-based, syncable credentials) is antithetical to their mass market goals, and would freeze out independent, non-corporate-backed credential managers. It’s an explicit non-goal of the designers of passkeys, who work together in a forum anyone can join.

And trust me, websites and apps like banks repeatedly asked for attestation at the beginning of the industry’s passkey journey. The platforms, browsers, and credential management apps have held firm that the goal of passkeys is reducing phishing and not some kind of trusted computing scheme. (And I will note: over my dead body!)

I believe this is not the goal of Mondello and some of the others working on this, but so far I’ve not been convinced that they will be able to control it. It sounds like Apple is working on it, and once the technology is out there, what’s to prevent key sites from forcing it on users? It seems like all this would take is the cooperation of a few big credential managers. This would be to their benefit in the sense that it would make their products required. Smaller credential managers who resisted would be frozen out.

varx:

The fact that websites and apps have been asking for attestation just reinforces the main point of the passkeys post! Sure, browsers aren’t supporting it yet, but that’s the sort of thing that can change, and the sort of thing that has changed in the past. See the footnote on Widevine and Firefox. (“Currently not supported” is also very subject to change.)

And we already have sites and apps allowlisting passkey vendors. That’s no theoretical, slippery slope fear -- it’s a real restriction on user freedoms that’s already happening right now.

I don’t think that a couple of bad points (e.g. the TOTP thing) invalidate the main point of the post, because the post wasn’t an argument from authority. The author makes some good points that stand on their own.

Ricky Mondello:

To be clear, the websites have stopped asking for attestation. Or at least, they’ve stopped asking me. Why? Because they know there’s no use in asking — that the OS vendors, browsers, and passkey managers are unified on this front. And now they’ve seen firsthand that passkeys without attestation are awesome and a big step forward.

iinuwa:

This is antithetical to users, as the types of authenticators that can pull this off are difficult to use (security keys). Companies with IT departments who can do account recovery for the user can handle this, an average user cannot. Synced passkeys are the answer to this for consumers and therefore attestation does not belong in the consumer space. Which is why password managers are in the spec groups pushing back against this every time it comes up.

Scott Helme (Hacker News):

If a consumer website decided tomorrow that it would only accept attested passkeys, it would lock out almost all of its own users, instantly. What website is going to do that?

[…]

If you’re worried about attestation creeping into consumer logins, then that’s worth pushing back on, loudly (if it ever happens). But it hasn’t happened, the biggest providers don’t support it, and avoiding passkeys today while you wait for it won’t protect you from anything, it just leaves you open to phishing.

It seems like rejecting passkeys is the only way the average user has to push back. The main thing protecting us is that sites don’t want to lock out their users who rely on passwords and 2FA. Once most people have adopted passkeys, if Apple and Google sell us out, I don’t think it matters much what the rest of the alliance thinks. Sites would be able to require attestation with the assurance that users could easily comply. Safari would probably opt everyone into attested passkeys, as it currently opts you into passkeys in general (unless you uncheck “Allow Automatic Passkey Upgrades”).

Previously:

Attestation News

TheLastProject (Hacker News):

In the [EU age verification] README, the following is listed:

App and device verification based on Google Play Integrity API and Apple App Attestation

I would like to strongly urge to abandon this plan. Requiring a dependency on American tech giants for age verification further deepens the EU’s dependency on America and the USA’s control over the internet.

Bobby Borisov (Hacker News):

The European Union’s open-source age-verification project has drawn criticism after a maintainer confirmed that hardware-bound attestation is a mandatory architectural requirement, raising concerns about Linux, custom Android ROMs, and independently compiled applications.

[…]

The solution lets users prove they are over a certain age without revealing their name, exact birth date, or full identity document. To prevent credentials from being copied, cloned, or reused by modified clients, the project relies on keys stored in protected hardware like Android TEE, StrongBox, or Apple’s Secure Enclave.

However, critics claim that this approach endangers the system by making it dependent on a small number of approved devices, operating systems, and attestation providers.

Positiveblue (Hacker News):

Cloudflare’s new “signed agents” pitch sounds like safety but it’s a wolf in sheep’s clothing. They’ve built an allowlist for the open web and told builders to apply for permission. That’s not how the internet works. An application form is not a standard.

GrapheneOS:

Apple and Google are gradually expanding their use of hardware-based attestation. They’re convincing a growing number of services to adopt it. Google’s Play Integrity API and Apple’s App Attest API are very similar. Apple brought it to the web via Privacy Pass, which Google intends on doing too.

Google’s Play Integrity API requires hardware attestation for the strong integrity level and is gradually phasing in requiring it for the more commonly used device integrity level. Apple already has it as a requirement. Over the long term, this will increasingly lock out hardware and OS competition.

The purpose of these systems is disallowing people from using hardware and software not approved by Apple or Google. This is wrongly presented as being a security feature. Banks and government services are the main ones adopting it but Apple and Google are encouraging every service to use it.

German National EUDI Wallet Architecture Documentation (Hacker News):

When issuing the PID, the WB confirms to the PP (via OpenID4VCI Key Attestation) that the keys to which a PID is to be bound are controlled by an authentication means that meets certain security requirements with regard to resistance against attackers with a certain attack potential (see ISO/IEC 18045).

Simon B. Støvring:

It’s great that App Attest is coming to Mac with macOS 27. It means I can ship Canvases’ intelligence and sharing features with much more confidence, knowing I can protect the endpoints with App Attest.

Previously:

Wednesday, October 14, 2026

Resetting Local Network Privacy

Howard Oakley:

Of all the privacy protections in macOS, those for local networking are among the most recent and the least understood.

[…]

All non-exempted apps and other processes start without any privilege. Those that try to make a local network connection result in the user being prompted to allow or deny their access. Your decision is then recorded in that app’s new entry in the Local Network section, and you can then set that to allow or deny its future access. For that to happen, the responsible app needs an additional item in its property list to explain to you why it requires that access, something that should appear in any prompt for access.

[…]

A process with a short life that immediately fails if it can’t complete a local network operation may not trigger a user prompt, and can continue to fail repeatedly as it can’t be granted the privilege. Apple recommends changing the code so that it doesn’t exit immediately after failure, to allow the prompt to be displayed and access granted.

Howard Oakley:

Another clue came in the statement in that note that “on macOS there’s no way to reset your program’s Local Network privilege to the undetermined state”. This contrasts with pretty well every other category of privacy protection, which are handled by the dreaded TCC, Transparency Consent and Control.

This has now changed in macOS 27.2.

TN3179:

During testing, you might want to reset your program’s Local Network privilege to the undetermined state. Your options for this vary by platform.

On iOS, the easiest option is to delete your app.

Alternatively, if you don’t want to delete your app for some reason, reset the entire privacy subsystem using Settings > General > Transfer or Reset > Reset > Reset Location & Privacy.

On macOS, the list in System Settings > Privacy & Security > Local Network has add (+) and remove (-) buttons. To reset your program’s Local Network privilege, select it in the list and click the remove button.

Previously:

Tuesday, October 13, 2026

Apple Home Collection

Apple (MacRumors, Six Colors):

Apple today announced Apple Home Collection, a new lineup of smart home accessories — including indoor and outdoor cameras, thermostats, temperature sensors, and a video doorbell and door lock — designed in collaboration with LG Electronics and Schneider Electric. These new accessories are simple to set up starting with one tap with iPhone, and everything is managed through the Apple Home app — no separate app or account required. Each accessory is encrypted end-to-end in Apple Home, so only users and the people they choose can access their home data.

[…]

  • LG’s Video Doorbell offers dual cameras that capture separate views of visitors and packages — allowing users to switch between the front and bottom camera views seamlessly — along with a built-in spotlight and a chime that plays through HomeView, HomePod, and HomePod mini. The front camera captures 2.5K resolution video, and the bottom camera captures full HD resolution.
  • LG’s Floodlight Cam delivers powerful perimeter monitoring with adaptive dual floodlights that activate automatically when motion is detected, and low-light color night vision that preserves clarity in darker conditions so users can see more of what’s happening outside.

[…]

LG’s Smart Deadbolt Lock brings a new level of convenience to home access. Using Ultra Wideband technology, the lock can tell how close a user is and when they’re approaching the door. As a user with a home key on a compatible iPhone or Apple Watch walks up, the door unlocks automatically, with no tapping required.

[…]

Two new Smart Thermostats are available — one from LG Electronics and one from Schneider Electric — so users can choose the product that best fits their home’s broader energy ecosystem.

John Gruber:

The thing that makes this partnership awkward for Apple is that these products — doorbells, cameras, deadbolt locks — are products that require the utmost of trust. What products could possibly require more trust than a camera with footage of what’s going on in or at your home, or a lock that controls who can get in? I think that’s why Apple wants to get into this market with products that they can put their stamp of approval on. But LG, of all companies, was just exposed in a scandal for shipping “smart” TVs that literally listen to the ambient audio in the room — even in standby! — and invade your privacy by tracking what content appears on screen.

Previously:

HomeView

Apple (video, Hacker News, MacRumors Six Colors, MacStories, Slashdot):

Apple today introduced Apple HomeView, designed to be central to the home and personal to everyone in it. With a stunning 7-inch Liquid Retina display, HomeView brings entertainment, connection, and smart home management together in one place, from playing music and making FaceTime calls to home monitoring and hands-free automations with voice control — all designed with privacy and security at the core. HomeView recognizes users by their faces, adapting so they can access their personal content in Messages, FaceTime, Calendar, Reminders, and Find My.

[…]

Designed to fit in any space, HomeView can be placed on a tabletop as the center of the home or wall-mounted to fit in spaces like the entryway or hallway.

I guess the best part is the price. $299 (not including wall mount) is less than the base iPad and the same as the Apple TV. But I just can’t imagine what I would use this thing for. It does not seem more appealing than an iPhone or HomePod for any tasks. I wouldn’t want to dedicate any kitchen space for it, and the cord is a problem. Why would I not just use an old iPad or iPhone, which are wireless and support apps and standalone video? Maybe it would be interesting if it could do something extra, like act as a Time Capsule.

John Gruber:

HomeView does not have FaceID. I asked about this and Apple reps said that first, your home is (reasonably!) presumed to be a safe space. But in order for users to be recognized — by voice or face — they must have a “registered [non-watch] personal device” that supports Apple Intelligence and Siri AI, that device must be present on the home’s Wi-Fi network, and it must have been recently unlocked.

Hartley Charlton:

Apple said it is “working constructively with the EU in an attempt to find a path forward,” but provided no timeline for EU availability.

Previously:

Update (2026-10-14): Julian Chokkattu:

It doesn’t have an App Store. Instead, Apple has a curated selection of apps, including FaceTime, Messages, and Safari. A handful of third-party media apps like Spotify are available, and developers can bring over existing CarPlay apps. If your iPhone already has one of these CarPlay apps installed, it can automatically appear on the HomeView after setup. (There are no video streaming apps like YouTube, Netflix, or Disney+, but if those companies choose to make their apps available on the CarPlay framework, they will show up on the HomeView; for now, you’ll have to consume videos by using the Safari browser.)

Via John Voorhees:

CarPlay makes some sense as a way to push apps to the HomeView, but unless the entitlement is opened wider, it also makes no sense at all.

I suspect this is just the mechanism for audio and video apps and not a more general developer channel for making apps.

Jason Snell (MacRumors):

Beyond that, though, it seems like HomeView is at least starting life as a very limited app platform. Apple does say that if you make a Siri AI query for your personal content, it will search everything on your iPhone or iPad—and that includes apps that aren’t on the HomeView. So you should be able to query your iPhone apps, but not actually run them.

Rui Carmo:

I do think I want one, but there are a few things to settle besides price and value. For starters, having more screens in the house doesn’t seem like a winning proposition (the HomePods we’ve got work OK for alarms, reminders, etc.), and the American fascination with the kitchen island (which, by the way, needs power sockets in the middle…) doesn’t translate to European flats.

Paul Solt:

Are you going to cut a hole in your island to feature HomeView?

Mr. Macintosh:

I really like the new Apple HomeView device!

The only thing I can’t get past, (as a previous iMac G4 owner) is the screen can’t rotate vertically.

Notice the slick Apple video edit:

If someone needs to rotate HomeView, the whole base needs to rotate along with the power cord.

Mr. Macintosh:

Wait… I just noticed something else from the HomeView video🤔

When she goes to grab the HomeView, you can see her right hand reach out to grab the lower right hand corner of the screen. But then the cut shows her grab the top of the base to rotate it?

Did they not like the cut where the entire base rotates? (This would would have shown the USB-C plug rotate along with the entire unit)

Basic Apple Guy:

iOS Icon History: iPod/Music

Bob Burrough:

Folks speculating HomeView is the tail end of Tim Cook’s product “leadership,” but 1) Ternus is the CEO and can torpedo it if he thinks it’s a stinker. 2) He’s also the guy who spearheaded iPad’s “what’s a computer?” campaign and the idea that an iPad was a viable replacement.

Quinn Nelson:

The biggest issue with Apple’s Home ecosystem is the absolutely garbage Home app. Still, in 2026, there is a tab dedicated fully to buying more smart home gadgets (aka, an ad) within the iOS Home app and it can’t be removed. Yet rooms are buried up top. Pitiful.

Scott:

This is the ONE THING (“One more thing”?) I’d been hoping to get from @Apple in this announcement: they were redoubling efforts on HomeKit/Home.app to make the ecosystem actually work better… annnnnd did not get that impression. At all.

IMHO, as an HomeKit user with dozens of devices in 2 Homes, there is SO MUCH low-hanging fruit that @Apple could be working on to improve the UX, it is pathetic.

Steve Troughton-Smith:

The original HomePod didn’t come to the EU either for 5 months, and even then it was only in two countries. The original HomePod never came to Ireland at all, before it was discontinued. But if you only listened to the pundits, this is somehow now the DMA’s fault.

See also: Marques Brownlee.

Update (2026-10-16): Jesper:

It is so convoluted that people will be having trouble understanding it, and if they have trouble understanding it they’ll be having trouble trusting it. Most of what it does involves somehow sucking in the juices from the people’s devices that cohabitate with it.

[…]

That it works at all is impressive, but will people really put their integrity in its hands? Between this and the various “always-listening” features of the recent Apple Watch releases, I’m thinking Apple has gotten a bit too high on its own supply.

Steve Troughton-Smith:

Apple overhauled the external display APIs in iOS 27 for unclear reasons and replaced it with a ‘scene accessory’ API, which I believe powers the iPhone Duo’s both-screens-at-once entitlement-gated API.

Enter HomeView, with its ‘CarPlay’ API, which is clearly a stopgap solution that will please nobody.

But if we’re beaming UI from a connected iPhone, the external scene accessory API suddenly looks more promising. That way you could do ‘real’ apps without an App Store.

See also: Dithering and Accidental Tech Podcast.

Update (2026-10-19): John Gruber (Mastodon, tweet, Bluesky):

I do think the basic concept is an intriguing idea. But as an implementation of that concept, my initial impressions are threefold. First, I am unconvinced that anyone in a family would use this for anything other than playing music or podcasts, rather than just using their phones. And if that’s the case, why not just have a HomePod? Apple’s video shows family members taking turns to use the HomeView, rotating it on the kitchen island to face themselves. Why? Why does the mom check her calendar on this, rather than on her iPhone, while the dad is using it to follow a French toast recipe? There’s a real “Why do we need this?” question here and I don’t think Apple’s video answers it, at all.

Lex Friedman:

I don’t have a HomeView yet. But I’m excited to own one.

[…]

I’m confident that Apple won’t show endlessly scrolling promos on that screen.

[…]

Yes, my phone shows those things. Yes, my Apple Watch shows those things. But I like that data being glanceable and not requiring I look at a full-on distraction machine. I’m thinking the HomeView might be the Kindle hardware of tiny bits of data I want.

Mark Gurman (via John Gruber):

Apple postponed the HomeView repeatedly — first until spring 2025, then summer, then fall, and then again throughout 2026 before finally unveiling it this past week. And the hardware betrays its age. With thick bezels, an A18 processor and 8 gigabytes of memory, this is clearly a product conceived years ago. Finished units have been sitting boxed up in warehouses for the better part of a year, waiting for the software to catch up.

Adam Engst:

Apple produced a 3-minute promotional video that purports to show a “typical” family using a HomeView. The ad has drawn criticism from John Gruber and TidBITS readers, who were horrified by the behaviors portrayed, and more to the point, it doesn’t seem to show the HomeView making life any better. Certainly, nothing in that video matches how any “typical” morning has ever gone in our household.

Although we use our HomePods heavily to turn lights on and off and listen to music, it’s hard to think of much else we would choose to do on the HomeView.

[…]

As someone who cooks seriously, I’m skeptical of HomeView’s one-step-at-a-time approach.

I cook a lot and can’t imagine using HomeView for recipes. I always reformat and edit them beforehand. I print them out so I can jot notes as I’m cooking and easily see more than one at once without having to fiddle with a screen.

Apple TV 4K 2026

Apple (video, Hacker News, MacRumors, Six Colors):

Apple today announced the next generation of Apple TV 4K, delivering its most immersive home theater experience yet. The new Apple TV 4K features Siri AI, an entirely new version of Siri powered by the next generation of Apple Intelligence, transforming how users search for, discover, and enjoy their favorite movies and TV shows through a full-screen Siri AI experience. With built-in far-field microphones, Apple TV 4K also lets users talk to Siri completely hands-free.

[…]

The A19 chip in the new Apple TV 4K delivers up to 50 percent faster CPU performance and up to 2x faster GPU performance than the previous generation, for greater responsiveness, faster navigation, and smoother animations. The A19 chip also includes a new, dedicated AV1 decoder, enabling more efficient, high-quality streaming while using less bandwidth.

The new Siri Remote keeps its familiar design while adding Find My support with Precision Finding and an option to play a sound on the remote — making it far easier to locate.

The price is now $299. Apple TV doesn’t get updated very often, so if you need one I guess now is the time to buy.

But I’ve really soured on this product. The software design is worse than when I bought it. I just want a basic interface like the iTunes column browser. Instead, we get all this extra stuff so that the text I care about is secondary, truncated, and obscured. It seems designed to hide the content I want to see, and which I am in the middle of watching, while constantly promoting what Apple wants me to watch. The search has always been bad and is still bad. The main thing it’s supposed to do is play video, and lately that’s been failing, too. It either won’t play at all or it’ll play for a while, and then after a commercial break it will switch to a different episode.

I’m considering just getting a $40 Fire TV Stick to see whether things are any better over there. Maybe the privacy is worse, but I have to weigh that against the product actually working. We watch TV to relax in the evening, and instead I keep getting agitated that either it didn’t work at all or we had to go through hassles like logging in again or rebooting. I would miss the screensaver, though.

Previously:

Update (2026-10-14): Joe Rossignol:

Here are 11 changes coming with the new Apple TV[…]

Scott:

Oh, yeah, one more thing: does the $300 Apple TV have a USB C port for UVC cams, for FaceTime/vidconf apps.

If not, why not? Really fucking stupid if it doesn’t, especially at that price. The chipset and OS HAVE the capability.

It does not.

Maynard Handley:

1. There is nothing compelling here for existing owners.

2. The price is so high compared to Roku or Fire that it’s hard to justify telling friends to upgrade for the better experience.

Apple should probably, at the very least, have kept the existing 64GB box at a lower price point, and bundled in a year of Apple TV+, to work with market.

[…]

It’s about “WTF is Apple thinking? Who is this targeted at?” We have three products released today all of which look like flailing.

[…]

I’ve been on team Apple (customer and employee) since 1990. This is the first time (even including the Wired Pray cover days) that I feel genuinely worried that Apple is fumbling the future.

Joe Rosensteel:

I don’t understand the direction the team working on the Apple TV has been given. I know people are excited by it, because they’ve been waiting to buy the best one, and cycle the old ones down to lesser TVs in their homes, but this update is going to be around next year and the year after so it’s worth thinking about it from that point of view. What will you get out of this when it isn’t just “new”? A microphone array? Chip bumps?

Asleep at the jog wheel.

Update (2026-10-16): Andrew Orr:

According to Apple’s footnotes, Precision Finding requires an iPhone Duo, iPhone Air, or iPhone 17 or later, excluding the iPhone 17e. Compatible iPhones must run the latest version of iOS, and availability varies by region.

The restriction is particularly notable because the iPhone 15 lineup and most iPhone 16 models already feature Apple’s second-generation Ultra Wideband chip. Those iPhones support expanded Precision Finding with the AirTag 2, but they can’t use the new Siri Remote’s Precision Finding feature.

John Gruber:

I’m sure the graphics and CPU improvements matter for gaming, but the only mention of gaming in Apple’s own Newsroom announcement is this sentence: “With Apple Fitness+, the living room becomes a workout studio, while Apple Arcade and the App Store’s library of games turn it into a home arcade.” I wish it were otherwise, but gaming is such an afterthought on Apple TV that it only garnered the second half of a sentence that started with Fitness+, a service that has only been in the news this year because Mark Gurman says Apple laid off part of the team.

[…]

The elephant in the room, though, is price.

Adam Engst:

You can pre-order a 128 GB fourth-generation Apple TV 4K with Wi-Fi and gigabit Ethernet for $299, and it ships on 13 November 2026. In comparison, the third-generation model started at $129 for 64 GB with Wi-Fi and $149 for 128 GB with added Ethernet. In June, Apple raised those prices to $199 and $249 (see “Apple Raises Prices for Many Products,” 26 June 2026). Apple eliminated the lower-capacity option, so now we have only the higher-end model at twice its initial price.

Jason Snell:

For the people who do care, who do want something better, the options are more limited. Amazon’s Fire TV Cube is $199. Roku’s “Ultra” is $149. The Google TV streamer, my favorite of all the non-Apple products on the market, is $150.

When you could get an Apple TV starting at $199, you could spot Apple playing its usual game—not the low-price leader, but in the ballpark. At $299, though, it becomes a lot harder for me to convince my relative who is complaining about how slow and terrible their streaming interface is to spring for the Apple one and solve their problems.

[…]

I’ve seen some commentators suggest this is a good thing because it “simplifies the product line.”

I don’t follow that argument at all. Having a cheaper product is good, because not only do some people not need Ethernet or large amounts of storage on a streamer box, but lower prices broaden the market!

Update (2026-10-19): John Gruber:

Inflation adjusted, a $69 Apple TV box today would cost a little under $99. Even if we only consider the $99 price in 2015 dollars, that’s about $137 in today’s dollars. Round that up to $150 and it would still be half the price of the only Apple TV hardware Apple now sells: this week’s new 4th-gen Apple TV 4K.

The new Siri Remote, with precision Find My support (and a speaker), is compatible with all prior generations of Apple TV 4K. So if you just want the new remote you can just buy the new remote. But it costs $59, which is almost as much as an entire Apple TV (with remote, of course) did in 2015.

Glenn Fleishman:

I wondered what the entry-level, initial price of each Apple TV box at introduction was, from the March 2007 original to the Apple TV 4K (4th generation) announced October 13, 2026, adjusted for inflation. So I charted it.

Steve Troughton-Smith:

I was ready to buy three new Apple TVs at the previous price point. At the new price point, I’ve bought zero 🤷‍♂️

John Siracusa says that pause/resume has been broken for him—in Apple’s own TV.app—and that he had to force-quit it several times.

HomePod mini 2

Apple (video, MacRumors, MacStories, Six Colors):

Apple today announced HomePod mini 2, featuring Siri AI, gorgeous new colors, and enhanced audio experiences. Siri AI, coming to HomePod mini 2 in a future software update, is a profoundly more capable and conversational assistant with personal context understanding, broad world knowledge that powers tasks like richer music discovery, and the ability to tap into even more apps — bringing a whole new level of capability to HomePod mini.

[…]

With Sound Glow, the top of HomePod mini transforms into a visual canvas that glows and pulses in sync with the music, reacting in real time to bass and treble.

[…]

Sound Recognition gives HomePod mini users peace of mind by listening for a smoke or carbon monoxide alarm and, if one is detected, sending a notification immediately to the user’s iPhone, iPad, and Apple Watch.

The price has increased from $99 to $149. Our HomePod is placed high enough that the top isn’t visible, anyway. I assume it still can’t play all my purchased music.

Previously:

Update (2026-10-14): Scott:

Annnd… apparently the HomePod mini 2 cable IS still captive.

Mr. Macintosh:

The new HomePod mini 2 is “built with the environment in mind” yet still has a non-removable power cable.

Did you move furniture onto the cable, or did your cat eat through it?

Buy a new one.

Monday, October 12, 2026

Chrome Supports JPEG XL

Toni Sagrista Selles (Hacker News):

In a dramatic turn of events, the Chromium team has reversed its Obsolete tag, and has decided to support the format in Blink (the engine behind Chrome/Chromium/Edge). Given Chrome’s position in the browser market share, I predict the format will become a de factor standard for images in the near future.

[…]

I’ve been following JPEG XL since its experimental support in Blink. What started as a promising feature was quickly axed by the team in a bizarre and ridiculous manner. First, they asked the community for feedback on the format. Then, the community responded very positively. And I don’t only mean a couple of guys in their basement. Meta, Intel, Cloudinary, Adobe, ffmpeg, libvips, Krita, and many more. After that came the infamous comment[…]

[…]

To top it off, a couple of weeks ago, the PDF Association announced their intent to adopt JPEG XL as a preferred image format in their PDF specification.

Michael Larabel (Slashdot):

JPEG-XL image support is back in the very latest Google Chrome/Chromium codebase. Back in December they merged jxl-rs as a pure Rust-based JPEG-XL image decoder from the official libjxl organization. At the end of December they did more JPEG-XL plumbing with the enums and build flags for the support.

Luca Versari et al. (via Jarek Duda):

We’re excited to announce that Chrome is shipping decoding support for the JPEG XL (.jxl) image format starting from Chrome 155. JPEG XL is a next-generation image format designed to meet the needs of modern web developers and photographers. It offers 30-50% better compression than JPEG, lossless compression, built-in HDR support, lossless JPEG transcoding, and more.

In general, we recommend trying both AVIF and JPEG XL to get the best results. We expect that JPEG XL is most helpful for high-fidelity or lossless compression, especially of photographic images or in cases in which fine-grained progressive decoding is preferred.

Previously:

Instagram Charging for Links

Meta:

If you subscribe to a Meta One plan, you can add links to a set number of posts and reels each month based on your plan:

  • Meta One Advanced plan: up to 4 posts and 4 reels with links per month
  • Meta One Expert plan: up to 8 posts and 8 reels with links per month
  • Meta One Max plan: up to 12 posts and 12 reels with links per month

Via Nick Heer:

Instagram has never supported links of any kind in individual posts, so that is a new feature with two links per month permitted for free, and more enabled by this pricey subscription — starting at $50 USD per month for four posts per month containing external links. But links in Reels have been commonplace for years. Meta is now gating that, too; and there is more.

[…]

Meta seems to have two objectives here: to take a cut from businesses that use Meta’s services as a referral source more generally, and — more specifically — to capture some of the money made by influencers.

Requiring login, removing RSS, discouraging links. Things are not looking good for the open Web.

Previously:

Friday, October 9, 2026

Alexa Tablets

Hartley Charlton:

The flagship Alexa Tablet 12 Pro starts at $499.99 with 8GB of RAM and 128GB of storage, aiming to rival the iPad Pro at a significantly lower price point. It features a MediaTek Dimensity 8400 chip, a 12-inch display with an adaptive refresh rate of up to 120Hz and a 3:2 aspect ratio, a 6.5mm-thick aluminum body, Wi-Fi 6E, and quad Dolby Atmos speakers. Amazon claims that the device has up to 16 hours of video playback.

A $549.99 version adds a “Nanomatte” display, using precision-etched glass developed with Corning to reduce glare. Higher configurations offer up to 16GB of RAM. Unlike Apple’s nano-texture display option, which requires a 1TB or 2TB iPad Pro, Amazon’s matte finish is available with 128GB of storage.

[…]

The Alexa Tablet 11 starts at $329.99 with 8GB of RAM and 64GB of storage, offering an 11-inch 2.5K display with a 90Hz refresh rate. A 128GB version costs $379.99. The smaller Alexa Tablet 8 starts at $229.99 with an 8.7-inch display, 4GB of RAM, and 64GB of storage.

Ryan Whitwam:

Amazon has dropped the Fire branding in favor of Alexa, and the new Alexa Tablets are now Google-certified Android devices.

Throughout the history of Fire Tablets, Amazon downplayed its use of Android. They ran Android apps from the company’s Appstore platform, but there was no Google integration with “Fire OS.” However, Amazon shut down its app store last year. The new Alexa Tablets run full-fledged Google-y versions of Android with the Play Store and all the apps you’d expect.

M.G. Siegler:

So the question is if these new Amazon Alexa Tablets can do what the previous Android tablets never could in tailoring software for the form-factor. I remain skeptical of that but perhaps stock Android plus some good Amazon + Alexa+ (as well as Prime Video) integration will be good enough?

[…]

The screen – namely the fact that it's a matte texture – sounds interesting[…]

Previously:

macOS 27 and External Displays

Jeff Benjamin:

A drawback of using an HDR-ready third-party monitor on macOS 26 Tahoe was the inability to activate High Dynamic Range at the common 2560 x 1440 scaled resolution. Fortunately, the newest macOS release resolves this problem.

Alexander Cohen:

  • Symptom: scrolling is choppy on the Studio Display XDR at 120Hz or Adaptive (47–120Hz). At 60Hz, and on the MacBook’s own screen, scrolling is smooth.
  • What devices are affected: M5 Pro MacBook Pros have reproduced the problem; other repots suggest the Mac mini with M5 Pro chip is also affected. Apple lists M5 Pro MacBook Pro models as supporting the Studio Display XDR at 120Hz.
  • Likely cause: measurements suggest the GPU stays at a low clock speed while scrolling and misses frame deadlines.
  • Workaround: MacRumors Forums poster Tiguanito’s M5ScrollBoost, a small menu bar app that encourages the GPU to run faster while you scroll.

Previously:

Update (2026-10-14): Timuçin Kabak:

Another issue I encountered is that the True Tone also applies to some external displays and applies a tint. I created a tool for it.

OpenAI Marks AI-Generated Content

OpenAI:

Starting today, API customers globally will be able to opt in to text watermarking for select models. Text watermarking will remain off by default in the API.

Over the coming weeks, we will add an invisible watermark to eligible ChatGPT and Codex text output in the European Union.

[…]

More details about how textGrain works can be found in our technical report (opens in a new window), which will be updated with additional details in the coming weeks. We also plan to make the technology available in open source so that others can build on it.

[…]

At a target false positive rate of 1%, our detector identified watermarks in about 80% of 200-token passages, compared with about 95% of 400-token passages, for content such as psychology.

Via John Gruber (Mastodon):

OpenAI has made this available via an API so developers should be able to actually see if this adulterates text output with real-world usage.

Third, none of these companies have yet made their watermark detectors publicly accessible. I remain highly skeptical that they will work as advertised in the real world. I think this is all somewhat of a sham to claim compliance with the EU AI Act without actually providing anything that anyone can actually use in a practical way.

Previously:

OpenAI’s Dots

John Voorhees:

Earlier this week, I was at OpenAI’s annual DevDay conference where it launched Dots, a personal agent that lives inside the ChatGPT app.

[…]

Dots are persistent, cloud-based agents that use the plugins and other tools you’ve connected to ChatGPT, after you allow them to do so. Your Dot has its own virtual Linux computer to assist you with your work. And at first, your Dot, which is depicted by a colorful character you can customize, doesn’t have access to anything else. However, as you give your Dot tasks that need access to other tools, it will ask for your permission to access other tools.

[…]

But being a cloud-based agent has its downsides, too. Out of the box, your Dot can’t access your computer’s files and apps. That’s easily fixed by clicking or tapping on your Dot and granting it access to your Mac, so it can use the Mac alongside its own VM.

Previously:

Thursday, October 8, 2026

Margaret Hamilton, RIP

Janine Liberty (Hacker News, NASA, NYT, WSJ, Slashdot):

Margaret Hamilton, a profoundly influential computer scientist best known for leading the software engineering team at MIT’s Instrumentation Lab during NASA’s Apollo program, died on Sep. 30. She was 90.

A computing pioneer who authored over 130 publications, Hamilton helped to establish software engineering as a dedicated discipline.

[…]

Moments before the Eagle module was set to land on the lunar surface, the onboard computer raised the alarm. It had detected a 1202 error: The computer was overloaded due to a fault in a hardware switch, and it was possible the system would not be able to handle the complex landing procedure.

But Hamilton and her team had engineered priority-driven software, able to shut down unnecessary background tasks in order to prioritize mission-critical tasks. Houston trusted Hamilton’s software and allowed the mission to proceed, and two men walked on the moon for the first time.

Dave DeGraw:

The following is an excerpt from a textbook called Fluency With Information Technology: Skills, Concepts, & Capabilities, 7th Edition ISBN 0-13-444872-3

At the time of publishing, the Wikipedia page for Margaret Hamilton has an important quote about the origin of the term “software engineering”. I was moved by this and wanted to add it to my /quotes page, but needed to verify the source of the quote. I was bothered that the source came from an interview given for an out-of-print textbook that as far as I can tell is unavailable to legally obtain. The interview is also not published in later editions of the book.

Fortunately, I was able to find the complete interview and I am publishing that excerpt here under fair use doctrine for educational, archival, and personal informational purposes only.

The Computer History Museum has an article and a full oral history.

Previously:

Update (2026-10-14): Jennifer Ouellette:

You’ve probably heard the famous story of how Lorenz kept a continuous simulation running on his LGP-30 computer, and of that fateful 1961 day when he realized that even small differences in starting values could lead to very different outcomes—a sensitivity to initial conditions that is a hallmark of chaos theory, along with strange attractors. You might not have known that it was Hamilton who was responsible for programming the LGP-30.

Computers were still a novelty at the time, and neither Lorenz nor Hamilton had any programming knowledge; they taught themselves. Per a 2019 Quanta article, Lorenz was amused by her unusual methods: For instance, she once bypassed the “clunky debugging process” by rolling the paper tape down the hallway and editing the binary code by hand with a pencil. “I’d poke holes for ones, and I’d cover up with Scotch tape the others,” she recalled.

What a Broken Wrist Taught Me About iOS 27 Dictation and macOS Voice Control

Adam Engst:

Apple has significantly improved dictation in iOS 27 by adding a few capabilities for editing text from the Voice Control system. In other words, Apple has finally done some of the things I requested in “How iOS and macOS Dictation Can Learn from Voice Control’s Dictation” (31 August 2020). Remember, dictation is what you get when you tap the microphone button on the keyboard, while Voice Control is an all-encompassing system that you turn on in Settings > Accessibility > Voice Control. The problem with leaving Voice Control on permanently is that it’s constantly listening and thus inserting text when you don’t want that, and at times I have felt that its dictation isn’t as good.

Most notably, when you’re using iOS’s regular dictation, you can now change the case of words and phrases by saying “Capitalize phrase” or “Lowercase phrase.” Incorrect capitalization of words drives me up the wall. Equally useful is the ability to fix misheard or misspoken words by saying “Replace phrase1 with phrase2.” Most other Voice Control commands aren’t available in dictation, but you can say “Select phrase” and “Undo that.”

[…]

Unfortunately, while Apple added some of Voice Control’s capabilities to dictation in iOS 27, it didn’t extend that effort to macOS 27 Golden Gate. Put simply, when you use dictation in macOS, you don’t have access to any text-editing commands.

Previously:

Wednesday, October 7, 2026

Opening a File’s Git History in Tower

Tower 18:

But something has changed: thanks to AI coding agents like Claude Code and Codex, even the most devoted GUI fans are now spending more and more time in the terminal. You kick off a task, the agent does its thing… and then you want to actually see what happened.

That’s where Tower shines, so we felt the path from the terminal to Tower deserved a serious upgrade. With Tower 18, the Tower Command Line Tool (gittower) is no longer just a way to open a repository — it takes you to exactly the place you want to look at.

I’ve been wanting this for 15 years or so. Thanks, AI! You still can’t open a file in Tower by dragging it onto the Dock icon. Nor can you just pass it to gittower and have it figure out which repo it belongs to. But if your working directory is already within the working copy, you can now use gittower to open the file history. I’ve written a script that finds the current file in the frontmost app (BBEdit, Xcode, or Finder) and opens it in Tower.

Previously:

The Unreasonable Effectiveness of Constructive Data Modeling

Alexis King (tweet):

The type systems provided by mainstream languages have grown vastly more sophisticated, but how much value does that complexity actually provide programmers in practice? I would like to make the case that it is somewhat less than one might think. While at times convenient, invariants can be captured in the type system using a small set of simple tools applied in principled fashion, and while fancy type systems may be convenient, they have misled many programmers by obscuring what is possible to model without built-in type system support. This talk aims to provide a simple shift in perspective, plus a set of concrete design principles, to make modeling invariants in types feel accessible to the working programmer without fancy language support.

“Type system as obligation tracker” is a catchy phrase, like her previous “parse, don’t validate” (Hacker News).

See also: Matt Diephouse.

Tuesday, October 6, 2026

Reddit to Remove RSS

Jeff Johnson (June):

This new RSS rate limiting was perhaps foreshadowed by an r/modnews post a couple of weeks ago[…]

judy-funnie (September, via Jeff Johnson):

Because RSS is now a common surface for large-scale scraping and automated abuse, we'll stop supporting RSS feeds on November 13, 2026 while preserving moderation workflows that depend on it through supported alternatives.

[…]

To close this gap, in the next few months, we'll further limit access [to Old Reddit] for logged-in users to only those who have used Old Reddit in the last six months (which covers the vast majority of all Old Reddit users).

Ana Maria Constantin:

Public API access ends in March 2027, Reddit said in a separate post for developers. It will stop accepting new API requests on 31 October. From 12 January, it will start cutting off apps that have not registered.

Jeff Johnson:

Since I use RSS to follow Reddit, I intend to discontinue my Reddit use on November 13, unless Reddit backtracks on their user-hostile decision to drop RSS.

[…]

My biggest regret in leaving Reddit is that I‘ll have to shut down my product support subreddit.

[…]

The most ridiculous part of Reddit’s announcement was the suggestion that subreddit moderators replace RSS feeds with Discord notifications. What perversity, insanity to recommend a competing social network as the only practical way to use yours! I’m also skeptical of Reddit’s public excuse for dropping RSS: bot scraping. As I noted back in June, Reddit is already rate-limiting RSS feeds. If the current limits are insufficient, why not impose stricter limits?

John Brayton:

I am disappointed because I know that many Unread customers use Reddit’s RSS feeds to keep up with subreddits.

Sarah Perez:

Moderators have already expressed worry about how this shift would impact their workflow. When Reddit hinted earlier that it was preparing for the end of RSS on its site, many responded by complaining that Reddit would become unmanageable for them. Meanwhile, many users stressed that RSS was how they enjoyed accessing Reddit’s content.

Previously:

Update (2026-10-07): John Brayton:

I overlooked the fact that Feedly uses Reddit’s API to retrieve articles from subreddits. The folks at Feedly expect this functionality to continue working after Reddit removes their feeds.

iPhone 18 Pro Max AT&T Cellular Issues

Chance Miller:

Apple has confirmed an issue causing a “small number” of iPhone 18 Pro Max devices on AT&T to lose cellular service.

Apple released software and carrier updates to prevent the issue from affecting additional users, but the company tells 9to5Mac that devices that have already lost service will require a hardware replacement.

John Gruber:

It’s only a problem for AT&T customers. No such problems on Verizon or T-Mobile.

[…]

It’s only the 18 Pro Max, not the regular 18 Pro. The salient fact here is that the only iPhone 18 Pro models that use Qualcomm cellular modems, rather than Apple’s own C2 modem, are 18 Pro Max devices in the U.S..

[…]

I’d love to understand how a software update can prevent existing devices from being affected, but a software update cannot restore service to existing devices that have already been affected.

Joe Rossignol:

Apple and AT&T have yet to disclose the underlying cause of the issue.

Eric Schwarz (Mastodon):

It could be as simple as a power calculation geared towards devices with Apple’s C2 modems.

[…]

The other weird variable seems to be AT&T—out of the three US carriers, AT&T is the only one with a lot of the 3.45GHz 5G band in use[…] Most AT&T MVNOs like Cricket, U.S. Mobile, Gigs-based services, and H2O still use 5G NSA on AT&T and it seems they haven’t gotten the new carrier bundles on 18 Pro Maxes.

[…]

Because of those things, my working theory is that an 18 Pro Max on AT&T was connecting to 5G SA and when it was on that unique 3.45GHz band (maybe trying to hold on to spotty service?), it would basically cook its modem and there’s no fix other than replacement.

Previously:

Monday, October 5, 2026

Unspecified Full Disk Access Screw Tightening

Apple (Hacker News, MacRumors, Lobsters, TidBITS Talk):

Full Disk Access largely sidesteps these controls in order to allow backup apps to function properly on the Mac. Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users’ full knowledge and understanding.

[…]

Going forward, we will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action. Addressing this is critical. As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially.

Guy English:

It was pretty obvious something like this would happen after the Muse accessing Messages news.

Jeff Johnson:

What we have is just one noisy, confused journalist, Jason Aten. He granted FDA to Muse but refuses to admit it, to the public or even to himself.

I see several issues with the current Full Disk Access system:

  1. Backup apps need FDA, but so do many other types of apps. Often, they don’t need full disk access but rather they need to work around a missing or broken API. All of my apps except ToothFairy use FDA, not because I want to or because it’s easier to code, but because without it the user experience would be much worse or key features wouldn’t work at all.

  2. There is no API for apps to see whether they have FDA or to request it from the user. It’s not like, say, accessing the user’s Contacts where macOS pops up a standard dialog and the app supplies a “reason” string to specify why it wants access. Instead, each app presents its own set of instructions for how to enable it deep in System Settings. It requires the confusing maneuver of first adding the app to the list; it doesn’t automatically show up with a slider switch next to it, like with other privacy settings. This adds an obstacle for users to get up and running with an app but doesn’t really provide additional security, just obscurity.

  3. FDA is not granular. There’s no way for apps to request only the permissions they actually need. For example, SpamSieve wants to be able to access the user’s mail, but it doesn’t need or want to see their iMessages or browser history. This is bad for users because they may be exposing more information than they want to and bad for developers because some users will think your app isn’t worth the risks.

  4. There is no way for the user to see what the app actually did. If it tells me that it wants FDA to access my mail but actually it mucked around with my Time Machine backup, how would I know?

  5. Apple’s wording in System Settings is not very clear. I don’t think most users really understand what FDA is doing.

  6. The previous items combine to create opportunities for malfeasance. It’s normalized that many apps that seem like they wouldn’t need full disk access do need FDA, so this makes it easier for apps to trick the user into granting it under false pretenses. Apple requires that apps coach the user through the process, so it’s normal that users mostly see text from the app (which might not be trustworthy) rather than standard text from Apple, as with other permissions prompts.

But the problem in the Muse case was not malfeasance. Rather, it seems that Muse asked Aten to enable FDA, but he doesn’t remember doing so or didn’t understand what he was doing. It sounds like Apple wants to make this consent more clear, which is good, but other issues would remain. As with the recent keychain story, this feels like a bandaid rather than a thoughtful solution to the real problem. The issues with FDA were clear when it was introduced 8 years ago, and many Radars were filed, but it’s been virtually unchanged since.

Apple seems to think that by making a scarier warning they can convince more users not to grant FDA—or at least perhaps deflect blame from Apple to the user if they later regret it. Maybe that solves Apple’s problem, but it doesn’t really solve the user’s problem. The user is installing Muse because it’s more capable than Siri. They probably do want it to access some protected data, e.g. so it can find information in their mail or messages. So they actually do need to give it FDA. Aside from deterrence, Apple is not actually protecting the user. And the deterrence is kind of sketchy. Rather than providing a safe way for users to choose what to share with a competing product, Apple is saying the only option is to share everything, and then discouraging that. Meanwhile, there’s no switch to turn off Apple Intelligence. It’s like they expect you to stay on eWorld and not download Netscape. I actually really liked eWorld, and the broad Internet wasn’t totally safe (though neither was eWorld), but that doesn’t seem like much of a strategy.

Jeff Johnson:

Below I’ve embedded […] a screen recording of a macOS Virtual Machine showing the first run experience of the Meta Muse app.

[…]

It’s important to note that macOS has no API for an app to request or acquire Full Disk Access. The only way for an app to receive Full Disk Access is via the Full Disk Access pane of System Settings, as shown in the video. Thus, the only thing an app can do is open the System Settings pane for the user, as also shown in the video. Once the user is in System Settings, it’s up to the user to manually grant Full Disk Access.

Without Full Disk Access, Muse cannot access the user’s Messages database. If it could, that would be a macOS zero day vulnerability.

[…]

Aten oddly writes as if the “if you give it Full Disk Access” earlier in the article were counterfactual, merely hypothetical, still insisting that he did not give Full Disk Access to Muse.

John Gruber (Mastodon):

I really worry about just how much Apple is going to lock Full Disk Access down. I use it with several apps that couldn’t function properly without it, and would be severely hampered if I needed to authorize it manually every time they do something.

Ben Lovejoy:

However, what Apple absolutely must not do is to make the mistake it made with macOS Sequoia over screen recording. Sure, this is also incredibly dangerous and very strong warnings are appropriate, but what Apple did then was to force us all to confirm these permissions on a weekly basis, as well as after every restart.

Dave Nanian:

Well, this is certainly ominous news for backup programs.

Like it’s not hard enough to turn this stuff on…

Nick Heer:

Is Apple suggesting this capability could be limited in the future to backup applications alone? I do not like that.

[…]

Because of the lack of information available at present, I do not want to get too far ahead of myself, but I am concerned that it could be a significant curtailing of application permissions. It has the potential for further self-preferencing, as Apple will surely exempt Siri from the kinds of permissions requests it requires of third-party apps, even as it is updated with additional capabilities.

[…]

Call me a naïve little baby if you want, but I do not think preserving Siri’s dominance on Apple’s devices is the company’s reason for locking down Full Disk Access. But Apple’s existing restrictions are part of the reason Siri was awful for a decade. If it had the opportunity to compete with third-party replacements, I doubt it would have languished in a miserable state for as long as it did.

John Voorhees:

[Only] a handful of apps to which I’ve granted Full Disk Access are backup apps. Others include the Finder replacement Bloom, launchers like Alfred, the wonderful selection utility PopClip, Apple’s own Pixelmator Pro, Setapp, TestFlight, Supercharge, Madden NFL 27 Arcade Edition, Hazel, and many others. It’s a diverse selection of apps covering everything from Apple’s own apps to Mac utilities that are longtime favorites of MacStories readers, and even one Apple Arcade game.

[…]

On the one hand, it seems to suggest that users will simply have to jump through additional explicit hoops to grant Full Disk Access to their agents and other apps. On the other hand, claiming that Full Disk Access was designed solely for backup apps raises red flags that could signal that the company intends to restrict the kinds of apps that can use Full Disk Access. I sure hope not.

Dan Moren:

But there are plenty of legit uses for Full Disk Access. Just looking at my MacBook Air this morning, I’ve given that permission to three apps: Terminal, BBEdit, and SuperDuper. All apps that I trust with that level of power because of their long history and because in order to do what they do best (or at all), they need that access. (Interestingly, on my Mac mini, that list also includes SpamSieve, KnockKnock, and Shortcuts—though not BBEdit, for whatever reason.)

[…]

I think there is a good argument for protecting Full Disk Access further, but there’s also only so much you can do to protect a user from themselves. Ultimately, this is a cat-and-mouse game, and while I don’t want my data purloined or misused, I also don’t want my computer locked down to the point that I can’t use it for all the things I want to do.

Ben Thompson (Hacker News):

To say that I’m nervous about what Apple’s solution will entail is a massive understatement. There is one aspect in which the Mac is the perfect agent host: Apple has, for decades, invested in a combination of scriptability, automation, and accessibility APIs (these are very often the same thing) that makes it remarkably well-suited to computer use. Then there is the fact that macOS is a certified Unix system; this means that agents — which are perfectly suited to the command line — have access to the entire universe of tooling built for Unix systems. And, of course, Mac hardware is amazing.

The problem is that for my particular use case — a headless, always-on Mac Mini that I primarily access from other computers and my phone through the ChatGPT and Claude apps — macOS is incredibly hostile. The biggest issue is GUI-only permission prompts that are invisible to software running on said computer, including agents.

[…]

This system is annoying but manageable on your primary Mac; it’s a disaster on a headless Mac running agents, for two reasons. First, agents write new programs all of the time, and in my case, those programs need access to devices on my network (SMB shares, for example, trigger a TCC warning). What I need is a permission layer for agents, not the programs they create; TCC is operating at the wrong level of abstraction.

Second, the TCC subsystem exposes its prompt in a protected space that no program can see; that means that programs silently fail and the agents don’t know why; what I have to do is remember that there is probably a permissions prompt on screen, log into the Mac Mini with screen-sharing software, and click OK.

Wade Tregaskis:

Apple’d get a long way by just renaming the privilege. How many laypeople understand what a “disk” even is? Regular people just talk vaguely about how much “memory” their computer has - if they think about it at all other than when they run out of disk space - at which point, how many just think that means they have to buy a new computer? So, how about just “Full Access to All Your Data”? Call it what it basically is.

Jason Anthony Guy:

If Apple has time (or is especially motivated), it might also add more granular options to control what data apps can access. For example, instead of today’s single toggle that grants an app access to the broadly defined “data like Mail, Messages, Safari, Home, Time Machine backups, and certain administrative settings,” it might instead allow you to enable access to specific data on a per-app basis. This would allow, for example, Muse to access Mail and Safari, but not Messages or Time Machine.

Kevin Grant:

With all the levels of entitlements and crap they added, I find it ironic that SIP is “only” implemented as “open up every damned thing to everyone” without more refined levels.

John:

I was frankly surprised when I learned FDA was for a machine, across user accounts, rather than for a single user. It seems like granting root, something the *nix community has tried to reduce and lock down for decades.

I certainly don’t trust anyone’s AI with root, and creating a weak, non-admin, user for AI experiments should be a safe path.

Jimmy Callin:

While [Gruber sees] this as a “why we can’t have nice things” moment, I see it as another case of Apple using privacy to limit competition in areas it currently lag behind.

I’d prefer to decouple trust in how my personal data is handled from trust in a particular platform or software vendor. That’s what I personally value about EU’s approach: give people rights over their information, make mishandling it a legal liability, and severely punish companies that break those rules.

Apple getting unique privileges to access sensitive data simply because they own the platform, and thus there is an implicit trust in their handling of it, feels like a brittle long-term strategy. If this works without causing anti-trust issues, it only makes Apple more dominant while locking out potentially useful software.

Previously:

Update (2026-10-06): See also: TidBITS Talk and Vitor.

Howard Oakley:

Whether or not you would ever want to unleash AI agents on your Mac, Apple does need to refine Full Disk Access as a matter of urgency. But its design and engineering cannot be rushed. Merely adding to the complexity of current Privacy settings wouldn’t help users, many of whom already find privacy protection confusing and opaque.

Sherief, FYI:

it’s clear there’s consumer demand for automated access to iMessages, and instead of offering a proper API with audit trails and fine-grained controls Apple would rather force users to FDA then cry fowl when they grant FDA.

Previously:

Update (2026-10-14): Adam Engst:

63% of the more than 200 people who voted said they had granted Full Disk Access to 6 or more apps, with over half of those people saying they had given 11 or more apps that level of access. In short, Full Disk Access is essential to how many of us use our Macs.

At the same time, Full Disk Access feels a bit like a Band-Aid, partly because Apple hasn’t put enough thought into more granular permissions, forcing many apps to rely on Full Disk Access even when they don’t need all its capabilities.

[…]

Given that Apple’s statement about Full Disk Access seems to have been prompted by the release of Meta’s Muse AI agent, I would suggest Apple think more carefully about how such agents should be handled. They may legitimately need Full Disk Access, along with numerous other permissions, but beyond what would appear in an App Privacy Report, I would like to see them maintain complete logs of every permission-enabled action they take on your computer. Preferably in human-readable form.

Friday, October 2, 2026

Kindle, Kindle Paperwhite, and Kindle Colorsoft 2026

Amazon (Hacker News, Slashdot):

The all-new 6-inch Kindle is the most pocket-sized Kindle we’ve ever made. With 16GB of storage, up to 6 weeks of battery life, and 30% faster book opening than the previous release, it is lighter and features a new seamless flush-front design. This required rethinking how the display, front light, and touch layers are assembled and bonded. We’re also introducing edge-to-edge color across the entire family. The housing is made from recycled materials with a 100% recycled cobalt battery. Starting at $149.99 and available in Ube and Graphite.

[…]

The all-new Kindle Paperwhite is thinner and lighter than the previous lineup, waterproof with an adjustable warm light for comfortable reading at any hour, and up to 12 weeks of battery life on a single charge. The Paperwhite display uses an oxide-thin film transistor backplane and is the largest Kindle Paperwhite display with the highest contrast ratio—delivering deep blacks and crisp text, and images that pop off the screen, whether you’re reading in bright sunlight or under the covers at night. The Signature Edition adds aluminum rear housing, 32 GB of storage, an auto-adjusting front light, pogo pin dock charging, and double tap to turn pages—all while remaining thinner than the previous version.

Lauren Forristal:

Kevin Keith, Amazon’s vice president of devices, said the company is using “Cap” (capacitive) touch technology and haptics to create what he describes as a “dead zone.” As a reader grips the Kindle, the device detects where a finger is resting and adjusts the touch-sensitive area accordingly.

Lauren Forristal:

Amazon announced a range of new accessories on Thursday. And one of them, a $34.99 remote called the Kindle Click, caught our eye.

The Kindle Click is a compact Bluetooth remote designed to let readers turn pages without touching their Kindle.

[…]

Amazon also announced other accessories as part of the new Kindle family, including a magnetic cover with physical page-turn buttons and a charging dock stand for the Kindle Paperwhite Signature Edition and Colorsoft Signature Edition.

I still wish for the return of built-in page-turn buttons, but the new Page Turn Cover is the best news on this front in a while. Unfortunately, it adds bulk, costs $80, and doesn’t work with the base Kindle or the regular Paperwhite.

The Paperwhite Signature Edition is $249.99, and Amazon is offering me $50 off if I “Upgrade” my old Oasis by October 8. This isn’t explained very well, but it sounds like you keep the old device, and it doesn’t get bricked. There’s a separate 20% + $5 offer for a “Trade-In” where you do give up the old device. There’s a bundle with the Page Turn Cover and the Sling Bag, but there doesn’t seem to be a bundle with just the cover.

Jason Snell:

I admit that I find it somewhat shocking that even a basic e-reader costs $170 these days, but here we are.

[…]

I gotta say that I don’t love that Amazon has decided that to use page-turn buttons, you need to pay $80 and keep your Kindle in a case. But at least they’re finally offering an option. (For the record, Kobo’s Libra Colour is priced similarly to the Paperwhite Signature Edition and has buttons right on it, no case required. It’s the e-reader I use the most these days.)

Previously:

Update (2026-10-05): Tony Polanco:

It replaces standard Qi wireless charging with a pogo pin dock system[…]

I’ve been looking at various options with page-turn buttons and not really finding anything that I like compared with my dying Oasis:

I want page-turn buttons, but probably not as much as I’d prefer a smaller size. I’m leaning towards just getting the base 2026 Kindle at 140g. It has the same size screen as the Oasis but with warmer color.

I’ve perhaps made the mistake of purchasing most of my content from Amazon. But their system does work very smoothly across all my devices, and the hardware alternatives are not as compelling as I expected.

Update (2026-10-15): I ended up getting the base Kindle, and it’s been great. It’s a bit heavier than the Oasis, but the shape is easier to fit into a pocket. It’s much faster than I was used to, and I no longer have to think about battery life.

Apple Intelligence Reports

Howard Oakley:

In Golden Gate there are currently three sources of records of AI transactions. Those handled entirely on-device appear only to be recorded by Unified log entries, while interactions with Siri are provided in a detailed transcript in the new Siri app.

[…]

Although that transcript includes external references implying that an off-device model was used, no explicit information is given, and entries don’t make clear what information left the device, or whether that was handled by PCC or Apple’s secure implementation in Google Cloud.

Apple’s documentation refers users to the Apple Intelligence Report (AIR) available from Privacy & Security settings. When enabled, this will generate at the user’s request, a report covering the last 15 minutes or 7 days of AI interactions which “may include personal data such as messages and text you enter in intelligent writing tools.”

Glenn Fleishman:

Because of the peculiar nature of AI large language models (LLMs), Apple has to “talk” to Siri AI just like we talk to ChatGPT or Claude. But what does Apple say in these system prompts?

[…]

The report is formatted in JSON (JavaScript Object Notation), which is not meant to be read by humans. However, you can open it in a JSON reader, such as the free JSON Viewer, for a color-coded view that’s easier to examine, or cut and paste it into a text editor or word processor. Reports can get large, though, and JSON Viewer only handles files up to 10 MB. Try OK JSON if you hit that limit ($24.99 with a 7-day free trial). Neither app soft-wraps long lines, so I copy the prompts into BBEdit ($59.99, free mode available) for searching and viewing.

Howard Oakley:

I pointed out that the bulk of most AIRs are privateCloudComputeRequests, metadata for requests processed by PCC, whose main contents are attestation bundles. Those are provided in Protobuf format, and encoded using Base64, making them difficult to access.

However, Apple states that “you can parse, canonicalize, and verify attestation bundles from the Apple Intelligence Report using the pccvre attestation subcommands.” This article explains how you can do that without compromising the security of your Mac, using a Virtual Machine.

Howard Oakley:

Once you’re happy the AIR will be worth browsing, return to that setting and click on the Export Activity button. Be sure to save that AIR with the default .json extension.

[…]

Provided you’re running macOS Golden Gate, download the first beta of my new app AIRer from here: AIRer100

[…]

If there are records in that AIR, they will be listed by time and date, with the oldest at the top, in the left sidebar. Select one of them, and its useful contents will be displayed in the main part of AIRer’s window.

Previously:

Mac Installer Plug-Ins Bug

anonymoussingh:

We maintain a macOS product whose installer uses custom InstallerSection plugin bundles to show configuration panes during install. Starting with macOS 27 beta 6, all of our plugins stopped loading in Installer.app — the panes never appear and the install fails because our preinstall step depends on data the panes collect.

HirohikoKihara (via Ric Ford):

A third-party PKG installer that ships a custom Installer Plugin no longer displays one of its selection panes. The plugin bundle appears not to be loaded, so the pane that it provides is silently skipped and the user cannot choose the intended installation option.

FE:

This is regression for all latest updates eg. 15.8, 27.7, 28.0. This bug refuse open installer plugin for security reason in spite of the plugin and installer are correctly signed, notarized and works seamlessly in previous macOS versions. Workaround is copy installer (*.pkg) to local file system (home, desktop folder).

Previously:

Thursday, October 1, 2026

EagleFiler 1.9.22

EagleFiler 1.9.22 is a maintenance release of my Mac file/note organizer and e-mail archiving app. This version works around various bugs in macOS 27, adds capture support for the Thorium Web browser, and improves importing from Mariner Paperless.

Previously:

I Said No and Apple Said Yes

David Bushell (Mastodon, Hacker News):

I discovered that macOS 15.3 had enabled a feature that was phoning home every 15 minutes with personal data. And that I said “no” and turned it off.

[…]

And today I discovered that Apple had [in macOS 27] removed the “no” switch.

[…]

Digging through macOS 27 settings I turned off Siri (again). Of course, multiple unkillable Siri processes remain, stealing memory and writing data. For what purpose? Who knows. Note that they removed “Apple Intelligence” from this control.

[…]

All of this garbage was enabled after upgrading to macOS 27 despite me having “Apple Intelligence & Siri” turned off already. That was a rather explicit “no”, no?

Previously:

Update (2026-10-02): Coeur (via HN Reader):

Author claims the system setting “Privacy & Security > Apple Intelligence Report > Report Duration” with its 3 options [Off | 15 minutes | 7 days] sends that data to Apple with that frequency. This is wrong - this is a transparency report so that you as a user can see everything that is getting sent to Apple as a part of Apple Intelligence. Nothing additionally is getting sent to apple if you switch this away from “Off”.

To me, the main point of the post was about the missing off switch for Apple Intelligence itself. Bushell was forced into enabling a feature (and storage use) he had specifically turned off, and there is no option to block his data from being sent to Private Cloud Compute. But, yes, the first sentence I quoted from Bushell is wrong. The report feature isn’t periodically sending data to Apple; it’s reporting what was already sent. Turning it off does not add any additional privacy, except from someone snooping the report file directly on your Mac. Apple’s wording explaining the report was confusing but has improved somewhat in recent versions.

Accessing the Keychain Without the Password

Bob Gendler:

Since macOS 26.4, there’s been an issue with the keychain hiding in plain sight and that issue is it’ll take ANY password. Say what? The story behind CVE-2026–43728.

[…]

Where this is a bit more of a kicker…you can reset the keychain password without even knowing the real one.

[…]

Now did Apple fully fix it, well mostly. Something is different after macOS 26.4 (I believe it’s the new, User Authentication Daemon — userauthd). On macOS 26.3, if you ran security lock-keychain and then security unlock-keychain it HAD to be your keychain password. But now they added this note to the man page.

Unlocking the login keychain might succeed when an incorrect password is presented, if other unlock factors are available.

Previously:

Wednesday, September 30, 2026

App Store Scam: “Update My Phone”

John Gruber:

“Update My Phone & Apps: Guide” is an iOS app from developer Tair Olzhasev. By default, the only thing it does for free is give you a “Check for Updates” button that launches the system Settings app. It doesn’t even take you to the General → Software Update screen. It just takes you to the root level of Settings.

Everything else it purports to do requires a $15/week subscription. That’s $780 per year.

Jeff Johnson:

You can tell it's a scam without even downloading the app, because it has no website and hosts the privacy policy on sites.google.com, a dead giveaway.

The 3-day trial with auto-renewing subscription is also a huge red flag. By no coincidence, 3 days is the minimum subscription trial length allowed by Apple. All the scams use it.

Christian Tietze:

Being part of a team with a successful App Store app opens my eyes for how weird the app store is.

This is not the Bear Notes the Shiny Frog team is working on :)

This one seems to not be a scam—and there’s only a one-time $3.99 IAP—but it sure is confusing.

Previously:

Backporting SwiftUI APIs

Dave DeLong:

I can improve the process of removing backwards compatibility shims by using conditional compilation to remind me when they’re no longer necessary!

[…]

This does mean that the first time we change our deployment target, we’ll get a bunch of compilation errors. But given the nature of how Backport is implemented, this should be a relatively quick process to move past. (And of course, you’re welcome to use #warning instead of #error).

Shaps Benkau:

SwiftUIBackports mirrors Apple’s SwiftUI API names, shapes, behavior, documentation, and availability where practical. This keeps app code familiar today, and easy to migrate away from once your deployment target reaches the native API.

Backports are discovered through .backport, the Backport namespace, or backport-prefixed environment values.

Majid Jabrayilov:

Usually, we don’t see many new APIs in intermediate releases like 27.1, but this time is different. Apple introduced several new iPhone Duo-related APIs in the 27.1 release. This week, we will learn how to use all of these new APIs without bumping your project’s target version.

[…]

Here we introduced the toolbarVerticalBehavior function on the Backport type that handles availability checks and calls the new APIs if available or returns a plain view when it is not available.

Previously:

AI AppleCare

Joe Rossignol:

Apple recently considered laying off about 5,000 support employees [to replace them with AI], but it has put those plans on hold indefinitely, according to Bloomberg’s Mark Gurman.

[…]

Last month, we reported that customers who call the AppleCare phone number (1-800-APL-CARE) from the U.S. or Canada are now routed to an AI-powered support assistant.

Joe Rossignol:

The assistant can answer questions and troubleshoot issues with your Apple products, with it able to provide detailed step-by-step instructions. The assistant can still transfer you to a human advisor if it cannot answer a specific question, or if you ask to speak to a real person.

[…]

Apple has also been testing a new AI-powered chatbot in its Apple Support app, through a new “Ask” tab that has rolled out to a limited number of users.

I actually kind of like support chatbots in that they can be very fast for handling basic issues. As to the layoffs, it’s not clear to me whether this is Ternus reversing a Cook idea or something else.

The main problem I have (and I hear others having) with Apple’s support is that for more difficult problems you reach a ceiling where nobody can help you and it seems like nobody cares. Anything that can’t be addressed via a hardware swap is like filing a very time consuming Radar that goes into a black hole with no follow-up. Some software issues seem fixable in that they are more like server database entries than bugs. A sufficiently high level support person should be able to go in and edit the entry. But it seems like this only happens when there’s a major story in the press.

Scott:

Apple could probably lay off 5000 AppleCare workers if Apple programmers spent more time working on their operating systems and default apps for another 6 months before releasing them to the public.

Previously:

The App Store Review Process Needs Fixing

Lex Friedman (Mastodon):

Though allegedly focused on benefiting users (through better safety and compliance), App Store review in its current form mostly frustrates the people it claims to protect.

[…]

Those are all scammy apps that got through. Apple’s review capacity isn’t infinite. Every hour a reviewer spends poring over a bug-fix update to an app that’s been in the store for years is an hour not spent catching the fake LastPass app.

[…]

And the review process is fundamentally flawed anyway: It works best with developers who are trying to do the right thing. Plenty of apps pull their content, features, and behavior from servers their developers control. Feature flags, remote configuration, and web views mean an app can behave differently the day after approval than it did the day of vetting. A determined bad actor can get past App Review. An honest developer just waits in a slow, nebulous line.

[…]

At WWDC 2020, the company announced that bug fixes for apps already in the App Store would no longer be held up over guideline violations (except for legal issues); developers could address those problems in a subsequent update instead. That’s a good policy! Based on developer complaints I’ve seen, Apple hasn’t honored that agreement.

He suggests a Trusted Developer Program.

Previously:

Tuesday, September 29, 2026

Apple Loses Haptics Patent Case to Taction

Blake Brittain (PDF, patent 1, patent 2, Hacker News, 9To5Mac):

A US jury ruled that Apple owes San Diego-based Taction ​more than $5.7 billion for using its patented technology to power the haptic feedback in iPhones and Apple Watches. Apple said it would ​appeal the country’s largest such verdict to ​date.

[…]

Apple denied the allegations and ​said the patents were invalid.

neuropsychguy:

Taction Technologies has real products (used in various headphones) -- in case anyone is wondering about whether the company is only a patent troll.

[…]

What’s complicated about this case is that Apple developed the Taptic Engine before Taction filed its original patent application. Apple’s original Taptic Engine was different from what Taction later patented. However, Apple subsequently redesigned the Taptic Engine, and those later designs incorporated a combination of suspensions and ferrofluid damping that a jury (in California -- this isn’t in Texas) has now found fall within Taction’s patent claims.

Malcolm Owen:

In effect, the jury says that Taction has proven Apple has infringed, but not that Apple did so knowingly.

[…]

Apple was accused of buying and reverse-engineering two Kannon headsets that used the technology.

The $5.7 billion seems so high compared with the $634 million in the Masimo case where Apple seemed a lot more guilty.

Previously:

CFXMLParser 7-Byte Crasher

Nicolas Seriot:

// "<a>" in UTF-16 LE + a single dangling byte
const UInt8 bytes[] = {'<', 0, 'a', 0, '>', 0, 'X'};

[…]

The whole bug is a confusion between bytes left versus UTF-16 characters left. The result is repeated buffer doubling until allocation fails, and a local process crash if the exception is uncaught.

macOS 27.0.1

Juli Clover (release notes, no security, enterprise, no developer, full installer, IPSW):

Apple says macOS Golden Gate 27.0.1 fixes unspecified bugs.

See also: Mr. Macintosh and Howard Oakley.

Previously:

macOS 26.7.1 and macOS 15.8.1

macOS 26.7.1 (security, no enterprise, no developer, full installer):

This update provides bug fixes and security updates for your Mac.

macOS 15.8.1 (security, no enterprise, no developer, full installer):

This update provides bug fixes and security updates for your Mac.

Though not called out in the release notes, macOS 15.8.1 fixes the regression with RAW files.

For some reason, Apple removed the customary “is recommended for all users” from the release notes.

Previously:

iOS 27.0.1 and iPadOS 27.0.1

Juli Clover (iOS/iPadOS release notes, no security, iOS/iPadOS enterprise, no developer):

According to Apple’s release notes, iOS 27.0.1 addresses an issue that could cause Face ID not to work properly on the iPhone 18 Pro.

Some iPhone 18 Pro users have complained that authentication can fail to work for things like unlocking a locked app. In some cases, the device freezes up and then reboots. Other users have seen a “ Face ID is Not Available” message when attempting Face ID setup, and others have experienced issues with the Require Attention for Face ID setting.

Juli Clover:

Apple’s security support pages say there was a CoreGraphics out-of-bounds write issue that could be exploited with a maliciously crafted file, allowing for arbitrary code execution. […] Apple says the flaw was exploited in an “extremely sophisticated attack” on targeted individuals running older versions of iOS.

Previously:

Update (2026-10-15): ANCIL:

Absolutely shocking to me how this is always my experience with Apple’s search functionalities

Update (2026-10-21): Benjamin Mayo:

Just a matter of days after iOS 27 has been released to the public, people have already discovered a way to temporarily brick your phone with a quick series of swipes on the home screen. And it’s starting to going viral on social media as some kind of iPhone prank to do on your friends.

Luckily, it is only a software soft-lock and you can easily get out of this temporarily bricked state by force rebooting your phone.

It will apparently be fixed in iOS 27.2.

Monday, September 28, 2026

Not Muse in the App Store

Jeff Johnson:

The Muse from Meta app description says at the beginning, “Muse is your personal AI agent that gets things done, always working on what matters to you.” The Muse AI app description says at the beginning, “Muse is your professional AI agent that gets work done, always helping move important tasks forward.” Near the end, the Muse from Meta app description has the heading “SMART, BUT STILL LEARNING.” Near the end, the Muse AI app description has the heading “POWERFUL, BUT STILL LEARNING.”

In other words, Muse AI is a blatant copy of Muse from Meta, the latter of which is currently the #1 iOS App Store download in the United States. I don’t know where Muse AI ranks in the iOS App Store, but I do know that it’s currently the #20 Mac App Store download in the US.

And the real Muse app isn’t in the Mac App Store, so it has no competition.

By the way, I’d also like to draw your attention to the #11 Mac App Store download, as shown in my screenshot above: App for Instagram º. Yes, the app name includes the º character, a phenomenon I’ve written about before.

[…]

The top search result for “VLC” in the Mac App Store is Video Player for VLC, developed by muhammad faisal jabbar, not by VideoLAN. VLC for Mac is distributed outside the Mac App Store. You may notice a similarity between the icon of the official VLC app in the iOS App Store and the icon of Video Player for VLC.

Previously:

Update (2026-09-29): John Gruber:

“Muse AI” is now gone, but “App for Instagram °” and “Video Player for VLC” are both still there.

Jeff Johnson:

The Reddit commenter claims that the scams receiving public attention are “the tip of the iceberg from a limited, outsider perspective,” which is an accurate metaphor, yet the commenter and I have dramatically different interpretations of that metaphor. For the commenter, the iceberg represents the vast number of scams allegedly caught by Apple app review but not seen by the public; for me, the iceberg represents the vast number of scams not caught by Apple app review and not seen by the public either. To put the argument another way, the commenter appears to assume that the majority of scams in the App Store receive widespread public attention, in blog posts such as mine or in the news media, so the relatively small number of stories we hear is indicative of a relatively small number of scams in the App Store, whereas my own impression is that the vast majority of scams in the App Store do not receive widespread public attention. Scam hunting is not my job, merely an occasional hobby. It’s so easy for me to find scams, they practically fall into my lap whenever I look. I could spend all day every day finding and listing App Store scams, if I were sufficiently motivated (I’m not). You would think that someone working for Apple would be sufficiently motivated, by a paycheck, to spend all day every day finding and listing and most importantly removing App Store scams, but I’ve seen no evidence of it.

I think Johnson is right about the iceberg. Most of the scams that get publicity are at the top of the charts. One view is that all the scam apps that Apple misses end up being popular. What are the odds? The other is that we notice them because they’re popular and that there’s also a vast number of deceitful or dangerous apps lurking.

Dan Moren:

Speaking of App Store shortcomings, I really hate when I want to see how much an app costs and I get this impenetrable list of IAP options. It’s impossible to know without installing and opening the app what the payments options are. Be great if Apple helped make this clearer—which options are actually available? What are their various plans (monthly, weekly, etc.)?

Meta AI for Mac and Muse

Zac Hall:

The new Meta AI desktop app is version 1.0 beta at launch and weighs just 16MB once installed.

Based on initial inspection, it runs natively on Apple silicon Macs with macOS 15 or later, using an AppKit and SwiftUI shell with WebKit for richer chat content. In other words, this is not an Electron app or a repackaged iPad release.

It includes Mac-specific hooks, making the desktop experience more robust than the Meta AI mobile app.

Karissa Bell:

The Mac app brings a few new capabilities compared with Meta AI’s existing website and mobile app. For example, it enables users to share part of their screen so the assistant can “see” what they’re working on and provide more specific answers.

Juli Clover:

The app is primarily meant for businesses and content creators, and it integrates with Facebook and Instagram. It incorporates analytics tools so it can answer questions about performance, and connects with Google Workspace for document access. Google Workspace access requires a professional Facebook or Instagram account.

John Gruber:

Passes the Settings window sniff test too — it actually has a Settings window.

[…]

The Mac app is not available in the App Store. You need to download it directly from Meta’s web page, using the “Download for Mac (Beta)” link. The ChatGPT and Claude Mac apps aren’t in the Mac App Store either — they do too many things outside the App Store’s mandatory sandbox (and probably use APIs require that special entitlements in the App Store too).

Sarah Perez:

Meta’s new AI assistant app, Muse, is now available on Mac.

On the Mac, Muse can interact with your files, messages, calendar, notes, and mail, all within their native applications.

Terrence O’Brien:

Jason Aten, a contributing editor at Inc Magazine, posted on Threads screenshots of an interaction he had with Muse in which the assistant asks him some questions about a conversation he was having in Messages.

The problem is that Aten says he didn’t give Muse access to his messages. When asked how it knew about the contents of his messages, Muse replied, “I saw the notification previews, not your message history. I haven’t been reading your texts.” Aten continued to push, asking how Muse was receiving message previews, it didn’t have a good answer.

M.G. Siegler:

The number one response I’ve gotten to my thoughts on Meta’s Muse personal assistant agent is some variation of “I will never trust Meta with my data.” But the number two response is arguably more interesting (and related): “Why didn’t Google build this?”

Pieter Arntz:

Mac security researcher Patrick Wardle says it’s trivial to turn Muse into “the ultimate backdoor.”

[…]

According to Ars Technica, Wardle found that a locally running application or terminal command could alter an undocumented Muse configuration setting that controls the server used for dictation transcription. By redirecting dictation traffic to an attacker-controlled server, an attacker could capture voice prompts and obtain the authentication token for the victim’s Muse account.

John Gruber:

Four days later and Muse still holds the #1 spot in the U.S. iOS App Store.

See also: Joanna Stern.

Alexandr Wang (Watts Martin, John Gruber):

Here’s the best part: we have no idea what people will want. The world until now has been shaped by the small number of fanatics who have somehow found a way to make their wants real. But we’ve never seen humanity with every single person’s agency fully switched on. Eight billion people who just need to write their dream down in order to get started making it happen.

So we built Muse to help people build the world they want.

Damien P. Williams:

So uhhhhhh… Apparently meta’s muse “AI” is just straight up doxxing people to strangers on FB marketplace???

Via Mike Masnick:

Almost all of Meta’s PR about Muse was about how careful they had been to set it up not to do things like this, how they delayed the launch by months to carefully design it so it could be trusted. And then…

Previously:

Grok Bot

SpaceXAI (MacRumors):

Grok Bot is in beta and available today for SuperGrok, SuperGrok Plus, and SuperGrok Heavy; Cursor Pro, Pro+, and Ultra; and Cursor Teams Standard and Premium subscribers on desktop and iOS. Grok Bot comes with its own usage, separate from your Grok and Cursor plans, so anything you hand off to a Bot won’t count against your existing usage. Download the app, create your first teammate, and start handing off work.

[…]

Inside SpaceXAI, that already looks like real, multi-step coordinated jobs being handled: a sales Bot updating the CRM with call transcript notes and drafting follow-ups, an ops Bot seating new hires and processing invoices received in Gmail, and an engineering Bot reproducing a bug in the product UI, filing the ticket, and handing the fix off to a debugging Bot.

[…]

People inside SpaceXAI often run multiple Bots in parallel, with one to manage the others. A chief of staff sits on top, with a specialist for each lane: inbox management, expenses, recruiting, bug fixes, or operations. Instead of multiple agents you have to manage, Grok Bot gives you a small team that can work in parallel so you’re not the middleman.

Artificial Analysis (Hacker News):

Grok 4.6 gains 5 points over Grok 4.5 on the Intelligence Index just over one month after its release, or +23 points compared to Grok 4.3. This brings SpaceXAI back to the intelligence frontier alongside OpenAI, behind only Anthropic.

Kun Chen:

i’m 80% sure Grok Bot was originally built by the Cursor product team, and got rebranded after the acquisition

John Bai:

Believe it or not, the original Grok Bot started as an exploration of what an ambient computer assistant might look like.

I wanted to give an expressive face to a helper that could also use your computer. The character evolved, but that sense of presence stuck around.

Dare Obasanjo:

A real dilemma. People whose opinions on tech topics I take seriously are saying good things about Grok Bot.

It sounds like it nailed OpenClaw/Hermes for the masses but as a point of principle I don’t use MechaHitler. I would love an overview of what it gets right that everyone else missed.

I don’t trust xAI (or Meta) with my data, but it doesn’t seem like Siri AI can do all that much. So far, I’ve been too busy to do much with agents, even on a test Mac. But I don’t think agents are going away, so there’s a tension here that will need to be resolved eventually. My guess is that most people will throw caution to the wind in order to get results. Maybe Google will have something more trustworthy and powerful by then.

Previously:

OpenClaw 2.0

Juli Clover:

OpenClaw for iOS can be used alongside an existing gateway as a secure node for chat, voice approvals, sharing, and device-aware automation.

The iOS app replaces iPhone and iPad workarounds that involved using Telegram or WhatsApp for on-the-go access.

Hannes Rudolph (Hacker News):

This update touches every part of OpenClaw, including installation, messaging, memory, skills, models, automations, the browser and native apps, plugins, security, and a very long tail of fixes. We started by simplifying installation and rebuilding the browser app as a first-class experience, but doing that properly meant carrying the cleanup through the rest of OpenClaw until it became OpenClaw 2.0.

Previously:

Friday, September 25, 2026

FruitMenu Redux

Rosyna Keller:

FruitMenu Redux revives a utility (FruitMenu) that brings lost Mac OS Classic features to Mac OS X. Specifically, it restores the fully customizable Apple menu.

It’s no longer a haxie that works by patching the operating system. Now, it’s a regular app that hooks into other apps (e.g. to switch to a particular window) using the accessibility APIs.

The first step was to implement every FruitMenu feature that’s still possible in the current macOS security environment. That immediately ruled out features requiring patching menus (sigh, I really miss patching menus) and features that require privileges now gated behind restricted entitlements. I also added support for viewing and executing Shortcuts.

[…]

Additionally, you can set a hotkey to any item you add to FruitMenu Redux!

[…]

Because SwiftUI doesn’t support dynamic menus, I had to rewrite all the menu code to use AppKit’s NSStatusItem and NSMenu as NSMenu is now a first-class citizen on macOS and fully supports dynamic submenu building. This means that FMR doesn’t even try to build the contents of a folder under you actually attempt to show the contents of the folder. Not only is this significantly faster, but it also uses significantly less memory.

FruitMenu is now available (Mastodon):

A built-in visual editor displays your menu on the left and a library of over 30 item types on the right. You drag items from one to the other (almost like Font/DA Mover, the best UX ever created). The library includes files and folders, submenus, Running Applications (and you can enable an option to show open windows and tabs), Mounted Volumes, Recent Items, Force Quit, Sleep, Restart, Shut Down, Shortcuts, Software Update, separators, System Settings panes, and more!

Anything you put in the FruitMenu Redux Items folder in your Library also appears in Files, folders, and aliases.

$10 (with $7 intro price), not in the Mac App Store because of accessibility.

Rosyna Keller:

OMG, Core Transferable, why do I have to declare a public UTI in my info.plist for internally dragging from one list in my app to another list in my app?! It’ll never be decoded by another app!

This was the fix to a bug I reported. With the new SwiftUI drag API, you apparently have to declare private internal drag types in your plist (on Tahoe, but not on Golden Gate).

Xounds, which plays sounds in response to user interface actions, is also back. Unlike FruitMenu, this one never appealed to me—I actually prefer to have the audio muted most of the time. I do find it interesting that it supports the old sound set files from Mac OS 8. Apple dropped the APIs for playing these way back during the 64-bit transition, but Xounds knows how to extract and play the audio.

Previously:

Flickr 5.0.9

I haven’t seen it documented, but it looks like Flickr went back to shipping its rewrite of the app. It’s better than before but loses the scroll position when going from an individual photo back to the grid.

Previously:

Antennagate Q&A

Hartley Charlton:

A 47-minute video of the Q&A session from Apple’s 2010 iPhone 4 “antennagate” press conference has surfaced on YouTube, showing Steve Jobs, Tim Cook, and Bob Mansfield answering reporters’ questions.

[…]

Jobs used his prepared presentation to announce free cases for eligible customers and a 30-day return option. Apple later posted video of that presentation, but left out the Q&A, which was documented at the time through written reports and photographs.

John Gruber:

The Q&A was on the record (which is the entire point of a Q&A), and was reported widely, but I don’t think there’s ever been video of it. Here’s a report by Jeff Carlson at TidBITS, published the day the event was held, which states, “The video omits a long and interesting Q&A at the end.”

Then, yesterday, video of the Q&A hit YouTube. I don’t know what truck it fell off the back of, why it took 16 years, or how it came into the hands of “Sir Mix-A-Lot Rare Music”, but I’m sure glad it did. There are parts of this Q&A that I remembered, and parts I didn’t. Carlson was exactly right: it was long and it was interesting.

My main takeaway is still that there were two stories here, but most of the media missed one of them, and Apple was happy to focus on the other.

The first story was that holding iPhone 4 in the wrong way would reduce the signal strength. Apple pointed out that other phones had the same problem, to varying degrees, and offered cases as a solution.

The second was that, even with a case, iPhone 4 had worse reception than previous iPhones. I saw this directly myself: testing my iPhone 3GS and my father’s iPhone 4 in some areas that had poor signal, and finding that one worked reliably and the other was completely unusable. Apple examined my father’s iPhone 4 and assured us it wasn’t a lemon, so there was no choice but to return it. AnandTech did some more precise testing and published some graphs that were consistent with what we saw. I think it was the only bad iPhone Apple made.

In the Q&A, the first question was about Jobs’s health. The second was about whether Apple was going to make any changes to the antenna. Jobs responded that the iPhone 4 antenna was better in almost every way than previous designs. But Apple did end up redesigning the antenna with the iPhone 4s, and it worked just fine in my same test areas. It’s possible that the cell towers had changed in the interim, but the 4s worked well for me everywhere that it could be expected to and ended up being one of my favorites.

Nick Heer:

Sam Henri Gold decided to pick apart the changes between iOS 4.0 and iOS 4.0.1, which changed the number of bars shown in moderate-to-low reception areas[…]

Previously:

Golden Gate and the Notch

Jason Snell:

Apple has added some light menu-bar management, specifically to deal with items that overflow the notch on some MacBook models. I’m glad that it’s taken this tentative step, though I wish it were more—it’s okay, Apple, you can sherlock all those menu-bar-management utilities out there—and of course, it should’ve happened back when the notch first appeared five years ago.

Previously:

Thursday, September 24, 2026

Locked Down Passkey and Keychain Backups

I remain unhappy with Apple’s passkey backup story. There’s little documentation about this, but from what I can tell:

The above is last year’s news, but I don’t think I had written it all in one place before. The new bad news is that, as of macOS 26.4, these problems now affect regular passwords, not just passkeys. (You do have more flexibility to export passwords, though.)

Rich Trouton (Hacker News):

Historically, you could copy the login keychain file from one Mac to another and be able to open it on the destination Mac by providing the password to that keychain. As of macOS Tahoe, this does not appear to work for Macs which use Secure Enclave.

[…]

From that, it appears that unlocking the login keychain requires more than the password because the keys it unlocks are tied to the Secure Enclave of the Mac where the keychain was created. With the decryption keys stored in the source Mac’s Secure Enclave, manually copying the keychain to another Mac and then unlocking it won’t work. The password you have for the keychain may be correct, but the actual keys needed to decrypt its contents won’t be available on the destination Mac.

Jeff Johnson:

According to Apple, all Apple silicon Macs, as well as some Intel Mac models, have the secure enclave processor, so the issue affects millions of Mac users.

[…]

If anything happens to your Mac, if it’s stolen or becomes inoperable, your login keychain is also lost, unrecoverable, even if you have a copy of the login keychain file! This is a stunning development that has left me bewildered and irate. WTF was Apple thinking? To my knowledge, Apple did not even publicize the change in Tahoe.

[…]

How does Migration Assistant handle the situation on Tahoe? I don’t know. I would guess that since Migration Assistant still has access to the old Mac, it simply decrypts the old login keychain and copies the login keychain entries to the new login keychain on the new Mac, rather than transferring the keychain files directly.

[…]

I recommend that you open your login keychain with the Keychain Access app (now located in /System/Library/CoreServices/Applications) and check what’s in there, the data that you’re in danger of losing. Whether you realize or it not, many apps use the login keychain. For example, Google Chrome and other Chromium browsers store passwords in the login keychain. MailMate stores email account passwords in the login keychain. The open source RSS reader Vienna stores website passwords in the login keychain. The Zoom app also uses the login keychain. My Developer ID code signing certificate is stored in the login keychain; if I’m not mistaken, I believe that Apple’s own Xcode put it there. And of course, any items that you’ve manually added to the login keychain would be lost if the keychain file could not be unlocked.

Howard Oakley:

I have confirmed that a login.keychain-db copied from my Mac mini M4 Pro to a virtual machine (VM) running macOS Tahoe 26.6.2 cannot reveal any of its secrets to the Keychain Access app on the VM, as it refuses to accept the valid password. Not only that, but Keychain Access running in a VM cannot access the login.keychain-db keychain copied from another Tahoe VM, although neither has been anywhere near a Secure Enclave.

If you intend migrating manually between Macs, don’t waste time trying to copy across the login keychain, as it’s not likely to work, and its secrets will remain.

[…]

I performed test migrations between VMs, and demonstrated that Migration Assistant does copy the contents of the login keychain successfully to the destination Mac.

I think this only happens if you migrate over a network, with the old Mac acting as a server. I prefer to connect the old Mac using Target Disk Mode, but in that case Migration Assistant wouldn’t be running on the old Mac so the special sauce wouldn’t work. Likewise if I were trying to do the migration using a third-party cloning app.

Howard Oakley:

  • Loss of physical access to a Mac running 26.4 or later prevents access to any items stored in its login keychain.
  • Hardware failure requiring logic board replacement may have the same effect on restoring the contents of its login keychain (assuming that migration from a backup doesn’t work).
  • Restoring an Apple silicon Mac in DFU mode may be similar in effect.

What I don’t know yet is whether you can unlock and access any login keychain written by macOS 26.4 or later and migrated from a backup accessed directly from a different Mac. This would occur in one-Mac migration, when Migration Assistant uses a backup of a Mac not acting as a Migration server. This would only be possible if the backup also stored the additional secret required to access the login keychain, which seems unlikely.

[…]

Apple’s documentation for macOS Tahoe and the copying of keychains makes no mention of this change, in spite of its serious consequences and the change being made almost six months ago.

It there states “If you didn’t use Setup Assistant, the best way to copy your keychains to a new computer is to export and then import them using Keychain Access”. However, Keychain Access can only export some keychain items including certificates and keys, but not passwords. And to do that, the Mac must be able to unlock and access those items in the source keychain. Thus, Apple’s recommendations are out of date and will now fail.

rsUSA0 (via Jeff Johnson):

When upgrading to macos 27 Golden Gate, I erased my system through recovery to do a clean install. I planned to manually migrate data back to the computer from an external drive clone of Macintosh HD and a Time Machine backup. This has worked well in the past and eliminated system bloat.

When I manually migrated my login keychain, it opened, showed entries, but it wouldn’t accept my password to reveal any actual passwords. The window shakes like I’m using the wrong password. I’m 100% sure I’m using the correct password. I also tried every password I’ve ever used and I’m certain it’s not a password issue.

Perhaps even restoring to the same Mac failed because the clean install wiped the key stored in the Secure Enclave. [Update (2026-10-01): See update below.]

Jeff Johnson:

Some people who read my previous blog post misunderstood the issue, because they didn’t know that the macOS login keychain is distinct from iCloud Keychain.

[…]

In the Keychain Access app, you can see two separate default keychains, one of which is the login keychain. The other default keychain is named “iCloud” if you’ve enabled iCloud Keychain, “Local Items” if not. There’s actually a longstanding issue with this keychain analogous to the newer issue with the login keychain.

[…]

Mac users like myself who forsake iCloud Keychain face the prospect of no disaster recovery for the Local Items keychain. My habit is to manually create a new password item in the login keychain and only then supply the credentials to an app, for example, Safari AutoFill. Ironically, the login keychain change brought by macOS 26.4 sabotages my password backup procedure[…]

jen1x:

Today, I got my new Mac mini M6. When I started setting up the new machine, it asked me to update to macOS 27, so I followed the instructions.

[…]

After signing in to iCloud, it asked me to enter the passcode of one of my Apple devices. I entered the correct passcode and even tried the passcodes for all of my devices, but I keep getting the same message:

Verification Failed
There was an error verifying the passcode of your iPhone

I don’t like having to rely on iCloud.

Previously:

Update (2026-10-01): TN3137 has been updated for macOS 26.4:

Historically each file-based keychain was a standalone file. You could, for example, copy a keychain file from one Mac to another and still use it, as long as you knew the keychain password.

In macOS 26.4 and later that’s no longer the case. A keychain file might reference a protected entropy file. To unlock such a keychain you need both the keychain password and the protected entropy file.

[…]

These protected entropy files are stored in /var/db/SystemKeys. If you’re creating a backup product, make sure to back up that directory. Without it, the keychain files that you back up might be useless.

[…]

The /var/db/SystemKeys directory is not directly accessible, even when running as root, so you can’t copy a protected entropy file in the normal way. To access it, disable System Integrity Protection (SIP).

First things first: I don’t think turning off SIP every time you make a backup is a real solution. And I don’t understand what problem Apple is really trying to solve with protecting the entropy file; it seems like they don’t trust their own encryption. Lastly, it’s not explicitly stated, but I don’t think copying the entropy file helps with backing up passkeys.

That aside, I find the details both illuminating and confusing. This probably explains the rsUSA0 case above, where restoring to the same Mac didn’t work. The key wasn’t stored in the Secure Enclave but rather in the entropy file on the SSD, which had been wiped. This also suggests a simpler way for Migration Assistant to work; it could have special access to copy the entropy file without having to actually open the keychain.

It also seems to be saying that, if you turn off SIP and copy the entropy file, you can then access your keychain backup from another Mac. But I’m not sure how to square that with Apple’s keychain documentation:

Keychain items are encrypted using two different AES-256-GCM keys: a table key (metadata) and a per-row key (secret key). Keychain metadata (all attributes other than kSecValue) is encrypted with the metadata key to speed searches, and the secret value (kSecValueData) is encrypted with the secret key. The metadata key is protected by the Secure Enclave but is cached in the Application Processor to allow fast queries of the keychain. The secret key always requires a round trip through the Secure Enclave.

How can copying the entropy file work if the Secure Enclave is required? My guess is that the entropy file itself is encrypted (NSFileProtection) using the Secure Enclave. So accessing it on the original Mac does require going through the Secure Enclave. But when you make a backup, the entropy file gets decrypted. Maybe accessing the keychain on the second Mac causes file protection to be re-applied to the contents of /var/db/SystemKeys, so then it becomes protected by that Mac’s Secure Enclave.

Previously:

Update (2026-10-02): Dave Nanian (Mastodon):

This is obviously not a good user solution, because no one is going to boot to Recovery, turn off SIP, back up, boot back to Recovery, and turn SIP back on. Thinking they would do so is kind of crazy.

[…]

SuperDuper handles this situation. When you make a bootable copy, the required keys are copied without requiring any special steps.

SuperDuper itself can’t read the entropy file, but it uses Apple’s asr tool to make bootable backups, and that has special access. (Unfortunately, it can’t update the entropy file without making a fresh bootable backup, but in practice I don’t expect it to need updating.) I had not been bothering to make most of my backups bootable, since in most cases I just want to restore to an internal SSD, not actually boot from the backup. But I now think it makes sense to choose bootable backups as the default.

Howard Oakley (Rich Trouton):

I won’t expand on my feelings any further than by saying that in my 37 years as an Apple developer, I have never come across anything so shameful.

Unfortunately, it seems like the keychain stuff was just the warm-up act.

Update (2026-10-05): Howard Oakley:

[macOS 26.4] Added the protected directory at /var/db/SystemKeys to backups of Data volumes, and protects them in backups.

So Time Machine does back up the entropy file. I missed this because I didn’t see /var/db in my backups, but it turns out that they do have /private/var/db/SystemKeys and are just missing the /var symlink.

Update (2026-10-07): Jeff Johnson:

The -s option to the security show-keychain-info is not yet documented in man security, not even on the latest version of macOS Golden Gate. Moreover, the -s option does not work on macOS Sequoia and earlier. In general, the security show-keychain-info command reveals no information unless the specified keychain is unlocked, which makes it impossible to discover the salt of a keychain file that you can’t currently unlock. However, as long as you already have the entire contents of the /var/db/SystemKeys directory from the macOS volume on which a keychain file was created, the inability to determine the keychain file’s salt beforehand shouldn’t be much of a problem, because in practice there are typically only a few salt files, so you can simply copy them all to another macOS volume.

[…]

You don’t actually have to disable SIP to add files to the /var/db/SystemKeys directory, because you can do so from another boot volume. You have to boot into recovery anyway in order to disable SIP, so you could simply edit /var/db/SystemKeys from recovery rather than disabling SIP on the non-recovery volume.

The security unlock-keychain command lacks an option to specify the location of an entropy file or to provide the file data directly, so unfortunately a login keychain can’t be unlocked from the recovery volume, only from a volume where you can add files to the /var/db/SystemKeys directory.

Wednesday, September 23, 2026

Siri AI Ships (But Still Beta)

Apple:

Siri AI is a completely reimagined version of Siri that is more personal and powerful. With detailed responses and rich, natural conversations, Siri AI helps users get more done than ever before.

Built on Apple Intelligence, this new version of Siri draws on personal context understanding to help users find what they need in the moment across messages, emails, photos, and more. And with even more systemwide app actions, Siri AI can help users with tasks such as drafting an email from scratch or editing and sharing a set of photos.

[…]

Siri AI already works seamlessly with apps from Apple’s vast ecosystem of developers. Users can continue to take action in the apps they already use with Siri, like texting a friend in WhatsApp or playing a book on Audible. And soon, users will be able to ask Siri AI to draft an email in Microsoft Outlook, search for a homework assignment in Notability, or add a restaurant recommendation to Tripsy.

With onscreen awareness, Siri AI can answer questions or take actions related to the content on a user’s screen. For example, while viewing their favorite sports team’s website, a user can ask Siri to find all the upcoming home games and add them directly to their calendar. And Siri AI can also use broad world knowledge to get up-to-date information on virtually any topic.

Federico Viticci:

And these advantages sum up why I struggled to understand Siri AI at first. Is Siri AI only passable because it has an unfair advantage due to proprietary integrations that other AI models can’t use? Can it stand on its own as a good implementation of AI for most people? Does it fundamentally reinvent how we use our devices, or is it just a lot of hype for a slightly better Siri?

[…]

I find Siri AI’s underlying models to be subpar compared to the competition: for anything beyond a simple knowledge query, I can’t see Siri AI replacing ChatGPT and its superior reasoning modes combined with web search. For simpler queries – the kind that a Google AI overview could also capably answer – the balance of speed and terse formatting is optimal in Siri AI. If I’m watching a movie and want to know how old an actor is, or if I want to know the meaning of a word, Siri AI is perfect for it and I no longer need to reach for ChatGPT or my personal agent in Open Minis. As we’ll see later, I find the Siri app to be extremely barebones and representative of the state of the art for chatbot design…two years ago.

The lack of an “agent mode” for Siri AI stings, and it’s why I can’t replace my beloved Codex or Hermes Agent setups with it.

However, Siri AI eventually clicked for me for the opposite reason: it can do things in and with apps that no other third-party agent can. Yes, they are simpler actions, and, no, results aren’t always perfect; but if you love the Apple app ecosystem and prefer using excellent native apps to cross-platform web ones, Siri AI is a breath of fresh air in the AI landscape right now.

[…]

By and large, what Apple has built works, and as a user of Apple devices and the new Siri AI, you will never see any of its underlying complexity.

Ivan Mehta:

For years, I barely used Siri for anything beyond menial tasks like setting timers or alarms. That has changed with iOS 27, as I now repeatedly use Siri for complex requests and to make sense of on-screen context.

David Pogue:

Apple may be the last company to embrace AI. But wow, was it worth the wait.

The new AI Siri came out this week as part of OS 27 for iPhone, iPad, Apple Watch, and Mac, and it’s a life changer. A phone changer. It replaces most Google searches, most ChatGPT or Claude interactions, and cumulative hours of fumbling and searching and dragging and copying and finding and tapping and pasting.

[…]

Now that the final version is out, I wanted to see how often it gets things right. It is AI, after all. So I ran it through 125 tests.

Andrew Cunningham:

By default, Siri uses the Apple models described above, primarily the AFM 3 Cloud model (you can tell the local models can’t do much here because most Siri queries fail if you switch off your Internet connection). ChatGPT is still available in System Settings as an extension, with an option to make it speak using a different voice than Siri’s.

While Apple Intelligence as a whole can’t be turned off, users can opt out of the Siri AI beta at this point if they’d like. If you do this, you’ll be given the option to turn Siri off entirely or to use what Apple now dubs “Siri Classic.” In either mode, the UI for Spotlight reverts to its previous style.

The new Siri experience is so much like Copilot or the AI answers in Google Search that it barely seems worth remarking upon, which is both a comment about how “behind” its rivals Apple is in the AI race and how “caught up” Apple feels now that it has shipped something usable.

[…]

The Siri app isn’t much to look at, but I actually like that about it—I’ve lost track of the number of completely different Copilot apps Microsoft has shipped with Windows 11 and what the capabilities of those versions have been. Compared to that, it’s kind of nice to have a simple, clean, Mac-native app that just presents a chronological list of every question or conversation you’ve had with Siri.

Howard Oakley:

So far the biggest single objection to Golden Gate has been the storage space required to support this. As I’ve shown in my own figures, this could be as low as 10 GB, but is more likely to be around 30 GB. Add to that the 28 GB or so required for the system itself, and that’s a substantial burden on your Mac’s internal SSD.

Kirk McElhearn:

MacRumors ran an article this morning about this today, and what’s interesting is how different people report different storage sizes for the same devices. Why are some people, running the same operating system, seeing different storage sizes? And why isn’t the size the same on all Macs, at least those running the same processor? My M4 iMac reports 32.22 GB; not that big a difference, but still about 1.6 GB less than my laptop.

Nick Heer:

I do not think Apple should not have local models. But as it is surely the single largest system component now, consuming about the same space as an entire Sonoma installation, I think it is stingy of Apple to ship 256 GB base storage even on its lowest-priced computers.

See also: Reddit and Hacker News.

Christian:

I installed Golden Gate a week ago. Since then, I have been noticing an expected battery drain (Siri AI (useless for me), new OS, indexing) that has increased in comparison to Tahoe. This is expected, I know. The thing is that this does not stop, even after more than a week. It has gotten so much worse that the MacBook’s battery is being depleted even while sleeping to zero within hours. It is so bad that it even struggles to get beyond the point of being able to boot when connected to a charger. Eventually, it works, but it is a struggle.

Juli Clover:

According to pdfu, HomePod Software 27 includes the system behind Siri AI, called “Linwood,” along with new status lights in the Siri AI colors. […] Since HomePod Software 27 is out and Siri AI isn’t available on existing HomePods, it’s possible support will be limited to new HomePod models.

Previously:

Update (2026-09-28): David Pogue:

But there’s also a Siri app (on iPhone, iPad, Mac) whose primary function is keeping a running log of your requests. Today, I thought maybe I’d share mine, so you can see what Siri is like in practice.

I’ve deliberately picked a hectic 24-hour period from last week so that you can see the potential. The takeaway is that I’ve largely stopped opening apps. When I need something, I hold in the side button, ask my question, get the answer, and put the phone away. Often, people who witness it can’t believe what they’ve just seen.

Update (2026-10-09): John Gruber:

I feel like Siri AI has gotten worse since iOS 27.0 was officially released. It feels a bit slower and I seem to get worse answers, sometimes. I asked it for a word today, using it as an interactive thesaurus, and it simply told me it couldn’t. It never did that over the summer.

Update (2026-10-16): Pommette:

I’m excited about the new Siri AI. However I’m not feeling the love yet. I’m finding that approximately a quarter to a third of my requests on both my Mac and iPhone produce a spinning white circle as it churns through a list of searches that it’s doing internally, followed by “Sorry, something went wrong. Please try again later.” This happens for simple requests, for complex requests, and too many requests in between. When it works I feel the magic but boy, I really can’t count on it in all the ways that people are gushing about.

[…]

[If] all processing is supposed to happen on device, does anybody know why we need an internet connection for Siri AI to work for things like “tell me what’s on my calendar tomorrow” or “can you pull up the email with my theater tickets”?

Darth_Ender_Ro (Hacker News):

There’s nothing like havin an iPhone in your pocket, an AWU at your wrist, headphones on and telling Siri to call someone, calling, talking, hanging up and then asking Siri to call another person [only] to hear “You need to unlock your phone first!”.

This happens to me all the time.

John Siracusa:

Please make it stop.

OmniFocus 4.9

Ken Case:

OmniFocus 4.9 adds support for Siri AI, optional new date parsing assistance via Apple Intelligence, and a range of new and updated App Intents exposed as Shortcuts actions.

[…]

In our testing we’ve found that the new Siri AI hasn’t yet learned how to work with app capabilities that it hasn’t specifically been trained on, even for App Intents that are available in Shortcuts and Spotlight. For example, its understanding of how to work with OmniFocus is based on how it’s been trained to work with the Reminders app. Our work in OmniFocus 4.9 means that Siri now knows about “reminders” in OmniFocus (i.e. actions and Inbox items), “lists” (i.e. projects) which contain reminders, and any “groups” (i.e. folders) that lists have been organized into. Siri can assign and edit reminder due dates, flags, repeat schedules, and notes and image attachments in OmniFocus. This is another great leap forward! But as soon as you try to go beyond what Reminders can do, you find its limits: for example, it doesn’t understand the distinction between due dates, planned dates, and defer dates.

Siri also doesn’t really understand much about how our document-based apps work, because Apple hasn’t trained it on our specific apps or anything equivalent. So, Siri doesn’t know how to make an outline, or a diagram, or a Gantt chart. We expect this to improve over time—after all, we’ve worked with other language models that do understand how to make those things—but it’s important to understand Siri’s current limits.

[…]

With Siri AI, Spotlight becomes even more important as a source for personal context. You can ask Siri about content in your OmniFocus database, so Siri can summarize the actions you’ve completed this week, or tell you what items you might consider working on soon.

My favorite change in OmniFocus 4.9 seems less exiting, but I’m irrationally happy about it. Last year, as part of the Liquid Glass update, they redesigned the Perspectives Bar on iOS to automatically collapse and expand as you scroll. I found the animations distracting, it messed up my muscle memory, and it required lots of extra taps. In 4.9, there’s a new Show Perspective Bar option, which you can set to Automatically (the 4.8 behavior), Manually (stay collapsed but expand when you tap), or Always (show the expanded state all the time, nothing moves). This is, of course, what I chose.

I’m still seeing the previously mentioned glitches in the Mac app with tabbing, spontaneous tag collapsing, and the window moving itself between spaces. The iOS app sometimes still shows an out-of-date list of flagged actions.

Previously:

iPhone Handoff

Apple:

iPhone Handoff lets you use one phone number between two devices, so you can switch between them whenever you want. It makes it easy to move back and forth between devices optimized for the moment — like weekday business or weekend adventures.

[…]

After iPhone Handoff is set up, one iPhone becomes the main iPhone and the other iPhone becomes the secondary iPhone that shares the number. Your main iPhone should be the one you use most often. Some carrier services, like Call Forwarding and Caller ID, and carrier account management can only be managed on your main iPhone. Contact your carrier for more details.

To move between your main iPhone and secondary iPhone, simply unlock the device that you want to start using — your phone number will automatically become active on that device.

[…]

iPhone Handoff works with Dual SIM as long as both eSIMs are from carriers that support iPhone Handoff. Once set up, both eSIMs switch together simultaneously when you unlock your iPhone.

They say you need to have Messages in iCloud enabled.

Joe Rossignol:

In addition to needing two iPhones running iOS 27, “iPhone Handoff” will seemingly require carrier support. The forum post mentions that T-Mobile in the U.S. and Deutsche Telekom in Germany might be among the first carriers to offer the feature.

T-Mobile:

T‑Mobile is introducing the feature at $5/month.

John Gruber:

This seems like a ridiculous thing to charge for. It’s not adding a separate device to your plan, like adding a cellular iPad or even an Apple Watch. It’s just switching your active eSIM between two iPhones. You can do this for free, now, on any carrier via Settings → Cellular — but it takes a bunch of taps, confirmation on both iPhones, and a few minutes for the carrier to register the eSIM transfer. iPhone Handoff just eliminates all the annoying friction and waiting.

Chance Miller:

As reported by CNET, AT&T seemingly has no plans to support iPhone Handoff.

Previously:

Copyright © 2000–2026 Michael Tsai.