Wednesday, January 14, 2026

Bulk Setting “Catch Up Automatically” in OmniFocus

It turns out that one of my favorite new features in OmniFocus 4.7 is the Catch Up Automatically option for repeating actions:

With this setting turned off, completing an item will create the next occurrence following the schedule you have set, even when the next occurrence is in the past.

With this setting turned on, completing an item will create the next occurrence following the schedule you have set, skipping any occurrences in the past.

I have lots of repeating actions (e.g. for grocery shopping) that I want to do once every week or two. After I complete an action, I want it to disappear temporarily, but then I want it to reappear the next day for planning purposes. Setting the Defer Date to tomorrow and the repeat interval to just one day will make the action reappear as desired, but then when I complete it a week later I’ll have to tap it six times, because a new action will be created for each intervening day.

With Catch Up Automatically, only one new action will be created, and it will again be deferred until the next day. This exactly what I want. I can control which actions are available by bumping the Defer Date by one or two days, or a week, complete an action with a single tap, and have it come back the next day. (I suspect there may also be a way to solve this problem using the new Planned Date feature and a custom perspective that filters based on that, but I like the Defer Date because it works consistently across views.)

The problem with Catch Up Automatically is that it’s awkward to set. There’s no menu command. You have to open the inspector, open a popover, and click a checkbox. This does not work with a multiple selection (unless, I guess, the repetition parameters are identical) so it has to be repeated for each action. What I wanted was a way to set Catch Up Automatically in bulk, with just a keyboard shortcut. Naturally, I thought of writing an AppleScript and invoking it with FastScripts. Here’s the script I ended up with.

There’s a bunch of boilerplate in order to iterate over the selected actions. The meat of the script is just setting the catch up automatically property to true. Unfortunately, there’s a bug where this change doesn’t get saved. Fortunately, an Omni support person showed me that it does get saved if you set it using the JavaScript API (a.k.a. Omni Automation). I should probably start writing all my scripts in JavaScript, anyway, because then they’d work on iOS, too. But it’s cool that on the Mac you can mix and match, calling JavaScript from within an AppleScript, as shown in this script.

In some ways, e.g. iterating over the selection, the JavaScript API is much more compact, but AppleScript is nicer in that you can just mutate a property of the repetition rule. With JavaScript, you have to create a new rule and pass in all the properties as unlabeled parameters.

Previously:

India May Want iOS’s Source Code

Tim Hardwick (Hacker News):

Apple and other smartphone manufacturers are resisting an Indian government proposal that would require them to hand over source code for security review, reports Reuters.

[…]

Apple, Google, Samsung, Xiaomi, and industry group MAIT have all reportedly objected, citing a lack of global precedent and concerns about revealing proprietary details.

[…]

The country’s IT ministry also said it “refutes the statement” that it is considering seeking source code from smartphone makers, despite the requirement appearing in the government documents reviewed by Reuters.

Simon Sharwood:

India has had similar fights with big tech companies in the past, and nearly always backed down.

Last December India’s Department of Telecommunications demanded that smartphone makers pre-install government apps on all handsets. Civil rights groups and tech industry lobbies both opposed the measure, leading India’s government to first water down the proposal and then abandon it in less than a week.

In 2022, India introduced a directive requiring organizations operating locally to disclose any cybersecurity incidents within six hours of detection, and framed it so cloud operators would have to report on activities conducted by their tenants. Vendors and tech lobby groups pushed back, India’s government eased the requirement, and has scarcely mentioned it since the 2023 revelation that compliance with the law was very low.

Previously:

Tuesday, January 13, 2026

Apple Creator Studio

Apple (Hacker News, ArsTechnica, MacRumors, 9To5Mac, MacStories, Reddit, Mac Power Users):

Apple today unveiled Apple Creator Studio, a groundbreaking collection of powerful creative apps designed to put studio-grade power into the hands of everyone, building on the essential role Mac, iPad, and iPhone play in the lives of millions of creators around the world. The apps included with Apple Creator Studio for video editing, music making, creative imaging, and visual productivity give modern creators the features and capabilities they need to experience the joy of editing and tailoring their content while realizing their artistic vision. Exciting new intelligent features and premium content build on familiar experiences of Final Cut Pro, Logic Pro, Pixelmator Pro, Keynote, Pages, Numbers, and later Freeform to make Apple Creator Studio an exciting subscription suite to empower creators of all disciplines while protecting their privacy.

Apple Creator Studio will be available on the App Store beginning Wednesday, January 28, for $12.99 per month or $129 per year, with a one-month free trial, and includes access to Final Cut Pro, Logic Pro, and Pixelmator Pro on Mac and iPad; Motion, Compressor, and MainStage on Mac; and intelligent features and premium content for Keynote, Pages, Numbers, and later Freeform for iPhone, iPad, and Mac. College students and educators can subscribe for $2.99 per month or $29.99 per year. Alternatively, users can also choose to purchase the Mac versions of Final Cut Pro, Pixelmator Pro, Logic Pro, Motion, Compressor, and MainStage individually as a one-time purchase on the Mac App Store.

[…]

For the first time, Pixelmator Pro is coming to iPad, bringing an all-new touch-optimized workspace, full Apple Pencil support, the ability to work between iPad and Mac, and all of the powerful editing tools users have come to appreciate on Mac.

[…]

In addition to Image Playground, advanced image creation and editing tools let users create high-quality images from text, or transform existing images, using generative models from OpenAI.

It does not seem to include Photomator. I don’t really use any of these apps—preferring Microsoft Office and Acorn—and nothing announced here sounds like it would change that.

Dan Moren:

As for the productivity apps, the Apple Creator Studio adds a Content Hub for what Apple describes as “curated, high-quality photos, graphics, and illustrations.” There are also new premium templates and themes for Keynote, Pages, and Numbers and integration with image-generation tools from OpenAI. Apple is also, in an unusual move, including beta features as part of the bundle: the company mentions one that can create a draft of a Keynote presentation from a text outline and one called “Magic Fill” for Numbers with lets you “generate formulas and fill in tables based on pattern recognition.” Freeform’s premium features aren’t yet ready to roll out but will come later this year.

Joe Rossignol:

This means that if you bought Final Cut Pro or Pixelmator Pro via one-time purchase, which will still be an option going forward, you will no longer have access to all new features. However, Apple promises the apps will continue to receive updates.

Kirk McElhearn:

Apple is becoming Adobe. There are two types of apps in this suite: pro media apps and office apps. Pages, Numbers, and Keynote are not used by the same people as Logic and Final Cut. There should be a separate iWork subscription.

Christina Warren:

On the one hand, I fully understand why Apple is finally going Adobe and doing a subscription for the creative apps. On the other hand, I don’t know if I can see this as having enough value for me to want to pay $130 a year when I use these apps almost entirely on the Mac.

John Gruber (Mastodon):

My hope is that the UI shown today for Final Cut Pro, Logic Pro, Motion, and MainStage is a flat-out rejection of Liquid Glass for “serious” apps. My fear is that it’s only a result of their continued support for MacOS 15 Sequoia. (But I think they need to continue supporting MacOS 15 Sequoia because so many pro users are rejecting MacOS 26 Tahoe.)

Rui Carmo:

But… how viable is it, really? I have my doubts, especially given that I recently tried Final Cut Pro and found it lacking in several areas compared to freemium competitors like DaVinci Resolve. And I have been using Logic Pro for years. It’s a solid DAW, but it faces stiff competition from Ableton Live and an increasing number of free or low-cost alternatives. But that’s my personal experience; I wonder how this will play out for the broader market, where there’s stuff like Affinity Suite, which has recently surfaced after the Canva acquisition as a free alternative Pixelmator Pro (with paid add-ons).

BasicAppleGuy:

Icon History

Marc Edwards:

The Logic Pro app icon, before and after being part of Apple Creator Studio.

Mr. Macintosh:

Look at how they massacred my boy...😭

Michael Flarup:

We lost something here

Benjamin Mayo:

the ultimate icon downgrade

Previously:

Update (2026-01-14): Joe Rossignol:

Alongside the news that Pixelmator Pro is coming to the iPad, Apple has confirmed that the more basic Pixelmator app for the iPhone and iPad will no longer be updated.

Matt Birchler:

I’m just calling this out because I think it speaks to the massive influence the AI industry has had over the past three years. A couple years ago, many of us thought that Apple would never use the word “AI” to describe what they were doing. It would be “machine learning” or stuff like “Apple Intelligence”, but they’re just calling it AI now like everyone else.

[…]

These new icons remind me of when Google normalized all their icons to the point that they all look the same…no soul…no joy…just the same icon with a few shuffled pixels.

Vidit Bhargava:

Today’s app icons look as if they came out of an assembly line. All looking the same, designed for maximum scale, and devoid of any identity or soul.

Héliographe:

If you put the Apple icons in reverse it looks like the portfolio of someone getting really really good at icon design.

See also: Apple Design and BasicAppleGuy.

Steve Troughton-Smith:

Final Cut Studio used to cost $1,300 at one point, and now it’s available to students for $2.99 a month. That’s a huge win in my books.

Gmail Ending Support for Gmailify and POP Fetching

Google (via Adam Engst):

Starting in January 2026, Gmail will no longer provide support for the following features:

  • Gmailify: This feature allows you to get special features like spam protection or inbox organisation applied to your third-party email account. Learn more about Gmailify.
  • Check mail from other accounts: Fetching emails from third-party accounts into your Gmail account, with POP, will no longer be supported.

Previously:

Apple Services in 2025

Eddy Cue (MacRumors):

2025 was a record-breaking year for Apple services, marked by remarkable growth, global expansion, and continuous innovation. From Apple TV, Apple Music, and Apple News, to daily essentials like Apple Pay and iCloud, we delivered enriching experiences to users worldwide. Reflecting on 2025, we remained committed to enhancing our users’ daily lives, with incredible engagement during the holiday season.

[…]

As we look ahead, we’ll continue to bring innovation and intelligent enhancements to Apple services, always guided by our commitment to privacy and a phenomenal customer experience.

I’m not sure any Apple service has a phenomenal customer experience these days. Looking at the ones he mentioned, I was thinking maybe Find My. But then I remembered how it pretty much no longer works at all on my Apple Watch SE that’s limited to OS 10. And how the Mac version doesn’t let you open more than one window.

Apple Pay does “just work” except that it often doesn’t work at gas pumps, and it’s a major pain to upgrade your watch or phone, with each card taking multiple steps (and often a phone call). Apple Cash remains less convenient than Venmo, requiring more steps to transfer funds and without e-mails for reliable notifications and record keeping. You can request a PDF statement via e-mail, but it doesn’t include the names of the people, nor any descriptions of what the transactions were for.

See also: John Gruber:

Previously:

UK Child Protections and Messaging Backdoor

Tim Hardwick:

Apple and Google will soon be “encouraged” to build nudity-detection algorithms into their software by default, as part of the UK government’s strategy to tackle violence against women and girls, reports the Financial Times.

Jon Brodkin:

If the UK gets its way, operating systems like iOS and Android would “prevent any nudity being displayed on screen unless the user has verified they are an adult through methods such as biometric checks or official ID. Child sex offenders would be required to keep such blockers enabled.” The Home Office “has initially focused on mobile devices,” but the push could be expanded to desktops, the FT said. Government officials point out that Microsoft can already scan for “inappropriate content” in Microsoft Teams, the report said.

[…]

The push for device-level blocking comes after the UK implemented the Online Safety Act, a law requiring porn platforms and social media firms to verify users’ ages before letting them view adult content. The law can’t fully prevent minors from viewing porn, as many people use VPN services to get around the UK age checks. Government officials may view device-level detection of nudity as a solution to that problem, but such systems would raise concerns about user rights and the accuracy of the nudity detection.

Dare Obasanjo:

Maybe this explains why Apple is hesitant to add age verification at the OS level if it opens the door to requests like these.

Paige Collings:

In his initial announcement, Starmer stated: “You will not be able to work in the United Kingdom if you do not have digital ID. It’s as simple as that.” Since then, the government has been forced to clarify those remarks: digital ID will be mandatory to prove the right to work, and will only take effect after the scheme’s proposed introduction in 2028, rather than retrospectively.

The government has also confirmed that digital ID will not be required for pensioners, students, and those not seeking employment, and will also not be mandatory for accessing medical services, such as visiting hospitals. But as civil society organizations are warning, it’s possible that the required use of digital ID will not end here. Once this data is collected and stored, it provides a multitude of opportunities for government agencies to expand the scenarios where they demand that you prove your identity before entering physical and digital spaces or accessing goods and services.

[…]

Digital ID systems expand the number of entities that may access personal information and consequently use it to track and surveil. The UK government has nodded to this threat. Starmer stated that the technology would “absolutely have very strong encryption” and wouldn’t be used as a surveillance tool. Moreover, junior Cabinet Office Minister Josh Simons told Parliament that “data associated with the digital ID system will be held and kept safe in secure cloud environments hosted in the United Kingdom” and that “the government will work closely with expert stakeholders to make the programme effective, secure and inclusive.”

But if digital ID is needed to verify people’s identities multiple times per day or week, ensuring end-to-encryption is the bare minimum the government should require. Unlike sharing a National Insurance Number, a digital ID will show an array of personal information that would otherwise not be available or exchanged.

Cam Wakefield (Hacker News):

Under the Online Safety Act, Ofcom has been handed something called Section 121, which sounds like a tax loophole but is actually a legal crowbar for prying open encrypted messages.

It allows the regulator to compel any online service that lets people talk to each other, Facebook Messenger, Signal, iMessage, etc to install “accredited technology” to scan for terrorism or child abuse material.

The way this works is by scanning all your messages. Not just the suspicious ones. Not just the flagged ones. Every single message. On your device. Before they’re encrypted.

[…]

“We have set a date of April 2026,” [Lord Hanson] said, presumably while polishing his best ‘nothing to see here’ smile, “and we expect to act extremely speedily once we have had the report back.”

Cindy Harper (Hacker News):

The government’s new Online Safety Act 2023 (Priority Offenses) (Amendment) Regulations 2025, which came into force on January 8, 2026, designates “cyberflashing” and “encouraging or assisting serious self-harm” as priority offenses, categories that trigger the strictest compliance duties under the OSA.

This marks a decisive move toward preemptive censorship. Services that allow user interaction, including messaging apps, forums, and search engines, must now monitor communications at scale to ensure that prohibited content is automatically filtered or suppressed before users can even encounter it.

Previously:

Monday, January 12, 2026

Apple Picks Gemini

Google (CNBC, MacRumors, AppleInsider, Hacker News):

Apple and Google have entered into a multi-year collaboration under which the next generation of Apple Foundation Models will be based on Google’s Gemini models and cloud technology. These models will help power future Apple Intelligence features, including a more personalized Siri coming this year.

After careful evaluation, Apple determined that Google’s Al technology provides the most capable foundation for Apple Foundation Models and is excited about the innovative new experiences it will unlock for Apple users. Apple Intelligence will continue to run on Apple devices and Private Cloud Compute, while maintaining Apple’s industry-leading privacy standards.

Jeff Johnson:

How much did Apple have to pay to get Google to say, “Apple’s industry-leading privacy standards”?

Dan Moren:

Gurman has also previously reported that those delayed Apple Intelligence features are likely to make their debut in iOS 26.4 this spring.

It’s unclear exactly where in the timeframe we are. Given that 26.3 is already in beta, and 26.4 is expected in a few months, it’s possible that work has long since started on this, even if it’s only being officially announced now. Even with the leg-up provided by Google’s models, it seems unlikely the company could simply roll in that tech for a feature due out in short order.

M.G. Siegler:

Sort of weird that they would announce such a big deal this way rather than official releases/interviews/etc, then again, the talk has been – at least on Apple’s side – to downplay the partnership. We get it, it’s sort of embarrassing to have to outsource your work in such a key aspect of technology, let alone one you believed you were at the forefront of not that long ago, at least with regard to Siri.

Kyle Hughes:

The Google deal is now necessary because of past mistakes but it is far from ideal—Apple needed this all in-house for years. It will be very difficult to compete with Google on integrated, optimized software products, and they will be paying Google for the opportunity to compete with them at all. Knowledge work is going to look fundamentally different once Google does Claude Code for Google Workspaces.

Previously:

Update (2026-01-13): John Gruber:

This phrasing, in both Apple’s statement to Cramer and the joint Apple/Google statement released by Google, is, I think subtly telling about how significant this news is: “Google’s AI technology provides the most capable foundation for Apple Foundation Models”. There’s a slight redundancy with foundation appearing twice in the span of four words. Imagine if WebKit had been named “Safari Rendering Engine” — there would be times when one might need to write “the rendering engine is Safari Rendering Engine”, because that’s what it is, and that’s the name. But in this case, it’s a bit incongruous. A foundation is a foundation; it doesn’t have a foundation. So this brief bit of phrasing reveals the obvious, awkward truth that Apple Foundation Models didn’t actually have a foundation.

I wonder whether the behavior of existing code that relies on the foundation models will change significantly.

The Struggle of Resizing Windows on Tahoe

Norbert Heger (Mastodon, Hacker News):

Since upgrading to macOS Tahoe, I’ve noticed that quite often my attempts to resize a window are failing.

This never happened to me before in almost 40 years of using computers. So why all of a sudden?

It turns out that my initial click in the window corner instinctively happens in an area where the window doesn’t respond to it. The window expects this click to happen in an area of 19 × 19 pixels, located near the window corner.

[…]

But due to the huge corner radius in Tahoe, most of it – about 75% – now lies outside the window[…]

Jason Snell:

That’s right, folks, the solution to resizing the corner of a window in Tahoe is to click outside the edge of the window. I can’t even.

Jason Anthony Guy:

The accompanying gif of him grabbing a plate captures the experience perfectly.

Rui Carmo:

The annotated images (green “expected” area, blue dot, and the “accepted target area” sitting in empty space) make the point better than any amount of hand-waving, and we need more of this to make it obvious that Apple needs to reverse course on the whole thing.

Gui Rambo:

Yes! All the time. The opposite also occurs: trying to click something behind a window and accidentally resizing the front most window instead.

Tony Arnold:

I’ve noticed that resizing windows on macOS Tahoe seems to fail 2-3 times each time I perform the action. How did Apple break so many interactions in a single release?

Garrett Murray (Mastodon):

I have struggled with this every single day since Tahoe was released. I fail on nearly every first attempt at resizing a window.

[…]

Imagine taking one of the most core, we-take-this-for-granted features of a windowing system and throwing it away. And why? Oh, because iPhones have rounded corners and therefore so should all windows on every Apple platform.

Joachim Kurz:

Things like this make me want to switch to Linux and build my own Desktop environment and window manager.

Like, gather all the macOS devs who still understand how desktop UX is supposed to work, take an Apple HIG from the 90s or and let’s build ourselves a new home.

And when we are done with that (shouldn’t take longer than a couple decades, right?), we fork the open source component from Android and do the same for mobile UX.

Mario Guzmán:

ugh this is one of the things that drives me most insane in #macOSTahoe. Basic desktop-isms are just so broken. I fear that more and more folks who don’t understand the history of the desktop are running the show at Apple. I hope I am wrong but then what explains this mess?

John Gruber (Mastodon):

One can argue with the logic behind these changes, 15 years ago. I’ll repeat that I think it was a grave error to make scrollbars invisible by default. I would argue that while the visible grippy-strip isn’t necessary, it’s nice to have. (As noted above, its presence showed you whether a window could be resized.) But there was, clearly, logic behind the decisions Apple made in 2011. They were carefully considered. The new logic was that you no longer look for a grippy-strip to click on to resize a window. You simply click inside the edge of a window. And of course Apple added a small affordance to the hit target for those edges, such that if you clicked just outside the window, that would count as “close enough” to assume you intended to click on the edge. Most users surely never noticed that. A lot of nice little touches in UI design go unnoticed because they’re nice little touches.

Until MacOS 26, most of the hit target for initiate the resizing of a window was inside the window. Because, of course, right? Even though MacOS (well, Mac OS X) stopped rendering a visible resize grippy-strip 15 years ago, the user could simply imagine that there was still a grippy area inside the lower right corner of every resizable window. It would make no sense whatsoever for the click target to resize a window to be outside the window. Why would anyone expect that? It would work against what our own eyes, and years of experience, are telling us. You pick up a thing to move it or stretch it by grabbing the thing. Not by grabbing next to the thing.

diskzero:

I worked on Finder/TimeMachine/Spotlight/iOS at Apple from 2000-2007. I worked closely with Bas Ording, Stephen Lemay, Marcel van Os, Imran Chaudry, Don Lindsey and Greg Christie. I have no experience with any of the designers who arrived in the post-Steve era. During my time, Jony Ive didn’t figure prominently in the UI design, although echoes of his industrial design appeared in various ways in the graphic design of the widgets. Kevin Tiene and Scott Forstall had more influence for better or worse, extreme skeumorphism for example.

[…]

Here is my snapshot of Stephen from the time. He presented the UI ideas for the intial tabbed window interface in Safari. He had multiple design ideas and Steve dismissed them quickly and harshly. Me recollection was that Steve said something like No, next, worse, next, even worse, next, no. Why don’t you come back next week with something better. Stephen didn’t push back, say much, just went ok and that was that. I think Greg was the team manager at the time and pushed Steve for more input and maybe got some. This was my general observation of how Stephen was over 20 years ago.

I am skeptical and doubtful about Stephen’s ability to make a change unless he is facilitated greatly by someone else or has somehow changed drastically. The fact that he has been on the team while the general opinion of Apple UX quality has degraded to the current point of the Tahoe disaster is telling. Several team members paid dearly in emotional abuse under Steve and decided to leave rather than deal with the environment post Steve’s death. Stephen is a SJ-era original and should have been able to push hard against what many of us perceive as very poor decisons. He either agreed with those decisions, or did not, and choose to go with the flow and enjoy the benefits of working at Apple.

Previously:

Update (2026-01-13): John Gruber:

If you turn on always-visible scrollbars (which you should) and scroll to the bottom, they look like this[…]

Mac Screenshot Utilities

Adam Engst:

Here are the unique features that keep me using multiple apps for my screenshots.

[…]

Most of the time, I dismiss floating shot windows immediately, but they can be useful for referring to a screenshot—such as the contents of a menu that I can’t keep open—while writing. Floating shots are also handy for making simple edits and annotations without opening the file in Preview. The feature I value most, though, is one that ScreenFloat developer Matthias Gansrigler added last year—the option to export an image with an added border.

[…]

CleanShot X is a thoroughly capable screenshot utility with editing and annotation features, but it also offers a feature I haven’t seen elsewhere: the ability to combine screenshots.

[…]

I still occasionally press Command-Shift-5 and use the built-in macOS screenshot utility to create a screenshot of a window with an open menu. In these screenshots, I don’t want shadows around the window, but I do want them around the menu, which otherwise looks weird. This requires a multi-step process that involves capturing two separate screenshots and compositing them in Preview[…]

Previously:

Update (2026-01-13): Jack Brewster:

Shout out for Shottr, which I switched to from CleanShotX a few years ago.

Cloudflare Defies Italy’s Piracy Shield

Jon Brodkin:

Italy fined Cloudflare 14.2 million euros for refusing to block access to pirate sites on its 1.1.1.1 DNS service, the country’s communications regulatory agency, AGCOM, announced yesterday. Cloudflare said it will fight the penalty and threatened to remove all of its servers from Italian cities.

AGCOM issued the fine under Italy’s controversial Piracy Shield law, saying that Cloudflare was required to disable DNS resolution of domain names and routing of traffic to IP addresses reported by copyright holders. The law provides for fines up to 2 percent of a company’s annual turnover, and the agency said it applied a fine equal to 1 percent.

The fine relates to a blocking order issued to Cloudflare in February 2025. Cloudflare argued that installing a filter applying to the roughly 200 billion daily requests to its DNS system would significantly increase latency and negatively affect DNS resolution for sites that aren’t subject to the dispute over piracy.

Matthew Prince (Hacker News):

Yesterday a quasi-judicial body in Italy fined @Cloudflare $17 million for failing to go along with their scheme to censor the Internet. The scheme, which even the EU has called concerning, required us within a mere 30 minutes of notification to fully censor from the Internet any sites a shadowy cabal of European media elites deemed against their interests. No judicial oversight. No due process. No appeal. No transparency. It required us to not just remove customers, but also censor our 1.1.1.1 DNS resolver meaning it risked blacking out any site on the Internet. And it required us not just to censor the content in Italy but globally. In other words, Italy insists a shadowy, European media cabal should be able to dictate what is and is not allowed online.

[…]

In addition, we are considering the following actions: 1) discontinuing the millions of dollars in pro bono cyber security services we are providing the upcoming Milano-Cortina Olympics; 2) discontinuing Cloudflare’s Free cyber security services for any Italy-based users; 3) removing all servers from Italian cities; and 4) terminating all plans to build an Italian Cloudflare office or make any investments in the country.

Ernesto Van der Sar (Slashdot):

Launched in 2024, Italy’s elaborate ‘Piracy Shield’ blocking scheme was billed as the future of anti-piracy efforts.

To effectively tackle live sports piracy, its broad blocking powers aim to block piracy-related domain names and IP addresses within 30 minutes.

While many pirate sources have indeed been blocked, the Piracy Shield is not without controversy. There have been multiple reports of overblocking, where the anti-piracy system blocked access to legitimate sites and services.

Previously:

Friday, January 9, 2026

Slow iOS 26 Adoption

Hartley Charlton (Slashdot):

Usage data published by StatCounter (via Cult of Mac) for January 2026 indicates that only around 15 to 16% of active iPhones worldwide are running any version of iOS 26 . The breakdown shows iOS 26.1 accounting for approximately 10.6% of devices, iOS 26.2 for about 4.6%, and the original iOS 26.0 release at roughly 1.1%. In contrast, more than 60% of iPhones tracked by StatCounter remain on iOS 18, with iOS 18.7 and iOS 18.6 alone representing a majority of active devices.

Historical comparisons highlight how atypical this adoption curve appears. StatCounter data from January 2025 shows that roughly 63% of iPhones were running some version of iOS 18 about four months after its release. In January 2024, iOS 17 had reached approximately 54% adoption over a similar timeframe, while iOS 16 surpassed 60% adoption by January 2023.

[…]

In the first week of January last year, 89.3% of MacRumors visitors used a version of iOS 18. This year, during the same time period, only 25.7% of MacRumors readers are running a version of iOS 26 . In the absence of official numbers from Apple, the true adoption rate remains unknown, but the data suggests a level of hesitation toward iOS 26 that has not been seen in recent years.

I want to believe this is because people are choosing to avoid Liquid Glass, but the difference in curves is so stark that I assume it must be due to a measurement problem or a change in how strongly iOS’s Software Update is pushing new versions.

Dave Polaschek:

This, even given that Apple has made the 18.7.3 installer [and its security fixes] unavailable for anyone not an Apple Developer and in the beta program.

Previously:

Update (2026-01-12): Jeff Johnson (Mastodon):

The MacRumors stats appeared to provide some independent support for the StatCounter data. I made the mistake of starting to believe the story based on this, without checking the facts myself. In my defense, I’m not a news media outlet, so that’s not my job, and moreover I didn’t publish an article about iOS 26 adoption, until now.

The only site that got it right, eventually, is Pixel Envy by Nick Heer, who pointed out that the Safari browser User-Agent was partially frozen on iOS 26, as discussed in a September WebKit blog post[…]

[…]

Although Apple forces all web browsers on iOS to use WebKit, the User-Agent OS version is frozen only with Safari, not with other browsers, so third-party browsers still accurately report the iOS version.

[…]

By the way, I’m a bit puzzled by Apple’s partial freezing of the Safari User-Agent on iOS, because Safari is always inseparable from the OS, so it’s possible to derive the iOS version from the Safari version, which continues to be incremented in the User-Agent.

Brent Simmons:

I was curious about iOS 26 adoption for NetNewsWire. I looked at the 30-day-active-users numbers, separated by iOS version.

Current adoption is 84% for iOS 26.

René Fouquet:

I’m slowly getting to the point where I realize that it’s close to impossible to have an app that works reliably both on iOS 18 and 26. Something is always broken. You fix one thing, it breaks something else. Apple’s solution is obviously to support 26 only, but I’m not doing them this favor.

Update (2026-01-14): Nick Heer:

Even though third-party browsers are available on iOS, most users browse the web through Safari. And that means StatCounter is almost certainly counting the vast majority of people on iOS 26 as iOS 18.7 users. I retrieved those user agent strings using StatCounter’s detection utility, which is how it says you can validate the accuracy of its statistics. And it seems they are not. (I asked StatCounter to confirm this but have not heard back.)

The actual rate of iOS 26 adoption is difficult to know right now. Web traffic to generalist websites, like the type collected by StatCounter, seems to me like it would be a good proxy had its measurement capabilities kept up with changes to iOS. Other sources, like TelemetryDeck, indicate a far higher market share — 55% as I am writing this — but its own stats reported nearly 78% adoption of iOS 18 at this time last year, far higher than StatCounter’s 63%. TelemetryDeck’s numbers are based on aggregate data from its in-app analytics product, so they should be more accurate, but that also depends on which apps integrate TelemetryDeck and who uses them. What we can see, though, is the difference between last year and this year at the same time, around 23 percentage points. For comparison, in January 2024, TelemetryDeck reported around 74% had updated to iOS 17 — iOS 26 is 19 points less.

If its reporting for this year is similarly representative, it likely indicates a 20-point slide in iOS 26 adoption. Not nearly as terrible as the misleading StatCounter dashboard suggests, but still a huge slide compared to prior years. Apple will likely update its own figures in the coming weeks for a further point of comparison.

Jeff Johnson:

I don’t think 15% is remarkably high for third-party browsers on iOS 26. Heer pointed me toward the Cloudflare statistics for market share by OS, which put Safari at 78%, leaving 22% for other browsers, led by Chrome. If 68% of those users have updated to iOS 26, that would amount to a 15% market share for third-party browsers on iOS 26.

Search vs. Primary Action in the iOS 26 Tab Bar

Ryan Ashcraft:

Up until iOS 26, tab bars were fixed on the bottom of the screen and spanned the full horizontal space. Now, tab bars are capsule-shaped and inset from the screen edges.

[…]

Search tabs are separated visually from the rest of the tab bar and have a circular shape. When switching to the search tab, there’s a morph animation from the circle to the search field, which is now on the bottom of the screen. The new placement is convenient for reachability, a major selling point of the new design system.

[…]

Since the search tab looks like a button, developers and designers are treating it like one. Specifically, they’re using it (or emulating it) for their app’s primary action: the single most important action in an app, like composing a message or adding a new entry.

[…]

Apps have solved this in two ways for over a decade: embedding buttons in the tab bar (like Instagram’s 2011 camera button) or floating them above it (formalized by Google in Material Design 2014). Apple has never officially supported either. The Apple Human Interface Guidelines says tabs are for navigation, not actions. Yet these patterns are near-universal in successful iOS apps.

Previously:

Choosing a Driving Route in CarPlay

Dr. Drang:

That the default route’s Go button is gray while the alternates are green is a stupidity addressed by Sage Olson and Joe Rosensteel, so I won’t bother.

What I will address is that whichever route you choose, you have to tap its Go button. Even though the full description of each route looks like a button, the only part that’s tappable is the part that looks like a button inside another button.

Is this just as stupid as having a dull color as the default and a bright color as the alternate? Yes. And Apple has known that descriptions should be click/tap targets since the very beginning of the Mac. Here, courtesy of Infinite Mac, is MacWrite 1.0 running on a simulation of an original Macintosh.

Previously:

David Rosen, RIP

Keith Stuart (tweet, Hacker News, Reddit, Wikipedia):

The co-founder of Sega, who remained a director of the company until 1996, was instrumental in the birth and rise of the video game business in Japan, and in the 1980s and 90s oversaw the establishment of Sega of America and the huge success of the Mega Drive console.

[…]

For the next 15 years, Sega innovated in the arcade sector, switching from importing games to designing its own, and moving on from jukeboxes and pinball tables to electromechanical arcade games such as the submarine shooting sim Periscope and, in 1972, Killer Shark, a shark hunting game which would briefly feature in Jaws. Sega also began to set up its own arcades allowing the company close control over every facet of its business.

[…]

While Nintendo was all about family entertainment, the titles doing well on the Master System were teen-focused brawlers, such as Golden Axe and Shinobi. When it came to release the new Sega Mega Drive console in Japan in 1988, Rosen insisted on changing its name to Genesis for the US launch, emphasising a new beginning and a more mature outlook.

[…]

Spurred on by Rosen’s vision, Katz marketed the Genesis as a games console for teenagers, not children, using TV ads which combined video game visuals with flashing images and rock music and the immortal phrase: Genesis does what Nintendon’t.

Previously:

Thursday, January 8, 2026

Anker Soundcore Sleep A30 Special Earbuds

Juli Clover:

The $200 Soundcore Sleep A30 Special earbuds feature a triple noise reduction system that blends Active Noise Cancellation, passive isolation, and adaptive snore masking to cut down on sleep interruptions. Anker is partnering with Calm to make Calm Sleep Stories available through the Soundcore app.

I’m a big fan of the previous A20 model (Amazon). They’re comfortable (even for side sleepers), they effectively mask noise so I can sleep, they can be easily controlled with taps (no need to go into the app), and the battery lasts a long time because the sounds can be stored on-device rather than streamed via Bluetooth. The A30 (Amazon) adds support for “AI Brainwaves,” which I remain skeptical of, but it should be a good improvement due to the ANC alone.

Previously:

Update (2026-01-09): My thanks to the commenters for pointing out that the A30 was already shipping months before CES. What’s new is the A30 Special:

Soundcore is refreshing its Sleep A30 earbuds with a new “Special” edition that addresses two of the original model’s key weaknesses: battery life and price.

The Sleep A30 Special maintains the active noise cancelation that set the original apart from the A20, but extends battery life significantly while dropping to $199.99—$30 less than the original’s launch price. According to Soundcore representatives at CES 2026, this updated model will eventually phase out the first-generation Sleep A30.

Bose Opens SoundTouch API

Stevie Bonifield (via Hacker News):

In a surprisingly user-friendly move, Bose has announced it will be open-sourcing the API documentation for its SoundTouch smart speakers, which were slated to lose official support on February 18th, as reported by Ars Technica. Bose has also moved that date back to May 6th, 2026.

When cloud support ends, an update to the SoundTouch app will add local controls to retain as much functionality as possible without cloud services.

[…]

Usually when products lose support for cloud services, they end up bricked, and occasionally users step in themselves to fix things. For instance, when Pebble originally shut down in 2016, users kept their watches functional by creating the Rebble Alliance, a community-run replacement for the watches’ cloud services, firmware, and app store.

Previously:

Wednesday, January 7, 2026

Duolingo Dynamic Island Ads

Juli Clover:

Language learning app Duolingo has apparently been using the iPhone’s Live Activity feature to display ads on the Lock Screen and the Dynamic Island, which violates Apple’s design guidelines.

According to multiple reports on Reddit, the Duolingo app has been displaying an ad for a “Super offer,” which is Duolingo’s paid subscription option.

Just like with notifications, another guideline that Apple doesn’t enforce. You have to fill out a privacy manifest to justify reading your own preferences file or displaying a timestamp to a user, but there are no such restrictions on Live Activities or notifications, nor even an API to tag them with a type so that users could choose to filter out ads and promotions.

Previously:

Update (2026-01-08): Nick Heer:

I saw this, too.

[…]

But the HIG is not the App Store Guidelines, and there is nothing in there expressly prohibiting this behaviour, as far as I can see.

Logitech Certificate Expiration Breaks App

Tim Hardwick (Slashdot, Hacker News):

Logitech users on macOS found themselves locked out of their mouse customizations yesterday after the company let a security certificate expire, breaking both its Logi Options+ and G HUB configuration apps.

Logitech devices like its MX Master series mice and MX Keys keyboards stopped working properly as a result of the oversight, with users unable to access their custom scrolling setup, button mappings, and gestures. It wasn't long before the Logitech subreddit was awash with frustrated reports as people discovered their configured peripherals had suddenly reverted to default settings.

Jeff Johnson:

This article is technically inaccurate, sigh.

All Developer ID code signing certificates expire eventually, and macOS does NOT prevent software with an expired certificate from running, otherwise all of your older apps would be dead now.

Logitech was doing some ADDITIONAL validation of their own design, and that's where the problem occurred.

Logitech:

Because the certificate also affected the in‑app updater, you will need to manually download and install the updated version of the app. Please do not uninstall the app and follow the steps below.

[…]

The certificate that expired is used to secure inter-process communications and the expiration resulted in the software not being able to start successfully.

Previously:

Update (2026-01-08): Jeff Johnson (Mastodon):

The news reporting on this incident included misinformation about how macOS Developer ID code signing works.

[…]

These stories place the blame on macOS for refusing to run apps with expired Developer ID code signing certificates, but this is false! Apple documents the behavior on its certificates support page:

If your certificate expires, users can still download, install, and run versions of your Mac applications that were signed with this certificate. However, you’ll need a new certificate to sign updates and new applications.

[…]

In other words, there’s nothing to worry about until the year 2035 at the earliest, though admittedly it’s a bit troubling that these apps have a ticking time bomb, so to speak. On the other hand, Developer ID provisioning profiles are optional, used only for a few features such as iCloud support, so many or even most Developer ID signed Mac apps have no provisioning profile, and thus no expiration.

Connor Jones:

A Logitech spokesperson replying to angry Redditors said the company was sorry for the issue and resulting disruption.

They wrote: “We dropped the ball here. This is an inexcusable mistake. We’re extremely sorry for the inconvenience caused.”

1Password Browser Extension Code Injection

Claudio Wunder (Hacker News):

Any Engineer at @1Password here? Your Chrome Extension seems to recently started breaking HTML from certain pages. For example, the Node.js website code snippets break when 1Password Extension is enabled.

Evan You:

1Password browser extension is injecting Prism.js globally on every page, which then applies its syntax highlighting logic on all <code> blocks matching [lang=*] regardless of whether it’s meant to be compatible, thus breaking original highlighting.

As I’ve said, I dislike this whole architecture where you need a browser extension that can read and write to the page in order to enter your password. I would hope that as little code as possible is injected and that it’s all been vetted by 1Password, not just pulled down as a dependency.

1Password:

We’re aware of an issue in recent versions of the 1Password browser extension that can interfere with syntax highlighting on some pages.

The team is actively working on a fix. We don’t have a timeline to share yet, but keeping the extension up to date will ensure you receive it once it’s available.

Robert Menke:

Sorry this bug slipped through our release process. I just raised this issue again in our internal Slack. We are working on getting a fix out.

[…]

The fix has already been merged into our main branch. We’ll be putting out a release with just this fix. I’m hoping to have it submitted to the browser extension stores today [December 30].

It’s unclear to me whether this is fixed. The latest Mac version still seems to be 8.11.22 from December 9. When I go to the page for the browser extension and click “what’s new” it takes me here, which is a release from December 30 that talks about passkeys and then says only:

We’ve made general improvements and fixed various bugs for a better 1Password experience.

I don’t see anything on the announcements page or Twitter.

Christina Warren:

I’m glad @1Password is taking this seriously now. But this issue was reported on their community forum and to their engineers weeks ago in beta and was not prioritized as a fix until it went viral here. Every company is guilty of this kind of triage, but this is a process failure as much as it is a testing one.

sheng:

really hoping to read a postmortem on this one

Previously:

Update (2026-01-08): Paulo Andrade:

One more reason for dumb extensions. Secrets extension doesn’t do anything to the page before it’s summoned. And even after that, it doesn’t change the DOM in any way (asides from filling input fields).

VS:

Apple does make autofill API available… it’s entirely 1P’s choice to not use it.

Paulo Andrade:

I’d say the API is the preferred way. It works fine, and also works on other native apps.

Tuesday, January 6, 2026

Clicks Communicator and Clicks Power Keyboard

John Gruber (MacRumors):

The first is an entire BlackBerry-style phone: Clicks Communicator. It runs Android but ships with a custom launcher that emphasizes messaging and notifications; it has a hardware mute switch and a side button with a color-coded alert light they call the Signal LED.

[…]

The second is the Clicks Power Keyboard. It’s a MagSafe-compatible battery back with a keyboard that slides out, underneath your phone. (Reminiscent of the Palm Pre?) It’s a Bluetooth keyboard, and you can pair it with up to three devices. Examples they cite include pairing with an iPad, Apple TV, and, intriguingly, a Vision Pro. (I’d rather type with my thumbs on a device like this than peck at the virtual keyboard in VisionOS, I think.) This strikes me as a much better idea for a hardware phone keyboard accessory than a case.

The Power Keyboard looks great. An easily detached battery pack with a keyboard is way more appealing than a case that makes your phone huge. Unfortunately, my phone is just not a good fit for most of the work I do (code and e-mails/HTML that pull together links and content from multiple places). The software and small screen can’t be overcome by a keyboard, though I guess it does make the useable screen a bit larger. But if I did more pure writing I would definitely try one of these.

Maybe I will, anyway. There are a bunch of longer blog posts that I think I could make more progress on during deadtime when I only have access to my phone. Part of what’s stopping me is that I find typing on the screen unpleasant. But the other part is that there’s no MarsEdit for iOS, so I’d need to move certain drafts to another app ahead of time and then bring them back.

Previously:

Update (2026-01-07): Roberto Mateu:

I returned my new iPhone 17 Clicks keyboard case and preordered the Power keyboard on the same day. The new keyboard basically addresses all my issues about the case: portability, flexibility being the main ones. However, another big one I haven’t seen mentioned, is my hope that the new keyboard allows for a better weight distribution by making the bottom heavier.

iOS 26.2: Alternative Browser Engines in Japan

Apple (Hacker News):

In iOS 26.2 and later, browser engines other than WebKit can be used in two types of apps for users in Japan: Dedicated browser apps that provide a full web browser experience, and apps from browser engine stewards that provide in-app browsing experiences using an embedded browser engine.

[…]

To help keep users safe online, Apple will only authorize developers to implement alternative browser engines after meeting specific criteria and who commit to a number of ongoing privacy and security requirements, including timely security updates to address emerging threats and vulnerabilities.

Previously:

Microsoft Rust and Copilot

Paul Thurrott (Slashdot):

“My goal is to eliminate every line of C and C++ from Microsoft by 2030,” Microsoft Distinguished Engineer Galen Hunt writes in a post on LinkedIn. “Our strategy is to combine AI and Algorithms to rewrite Microsoft’s largest codebases. Our North Star is ‘1 engineer, 1 month, 1 million lines of code.’ To accomplish this previously unimaginable task, we’ve built a powerful code processing infrastructure. Our algorithmic infrastructure creates a scalable graph over source code at scale. Our AI processing infrastructure then enables us to apply AI agents, guided by algorithms, to make code modifications at scale. The core of this infrastructure is already operating at scale on problems such as code understanding.”

Mayank Parmar (Hacker News):

Microsoft told Windows Latest that the company does not plan to rewrite Windows 11 using AI in Rust, which is a programming language that is more secure than C and C++.

[…]

I also screenshotted the LinkedIn post before it was edited out by the top-level Microsoft engineer[…]

[…]

Honestly, most people would not have taken this seriously if it did not come from a top-level Microsoft engineer. When someone with that kind of title and long history at the company talks about eliminating C and C++ and using AI to rewrite large codebases, it sounds less like a random idea and more like something Microsoft is at least exploring.

Miguel de Icaza:

It bothers me that the clarification was not “sorry I misled you”, but “you folks are dumb by parsing my words the way I wrote them”

Meanwhile, here’s the actual www.office.com site matter-of-factly rebranding Office as Copilot (via Hacker News):

The Microsoft 365 Copilot app (formerly Office) lets you create, share, and collaborate all in one place with your favorite apps now including Copilot.

Previously:

Update (2026-01-08): Jesper:

Ignoring hype and corporate arrogance, having been conversant in .NET for a significant portion of my life, my thoughts go to Midori. Midori was a legendary ground-up implementation of an operating system, object capability model and asynchronous programming in pure managed, memory-safe code that went as far as to power production code. It directly birthed the concepts behind async and await, which has now spread to pretty much every language in the decade since its introduction, as well as brought the concept of contiguous memory-safe slices, christened Span<T> to C# and .NET, where it now infiltrates all levels of the stack and brings down memory allocations and by extension garbage collection.

I don’t know what Mr Hunt is up to, but it does have the ring of a similar project.

[…]

My hope is that this project, alongside the current effort to only allow new codebases in Rust in the Windows kernel, helps push on the state of the art by trying to do what research projects do best - which is to start with an oft-absurd idea and then take it, over time, with purpose and still with connection to what the real world wants to accomplish, to a logical conclusion.

Monday, January 5, 2026

NetNewsWire Moves to Discourse

Brent Simmons:

We’re dropping the Slack group as the NetNewsWire forum and switching to Discourse — here’s the new forum.

Slack’s been pretty great for us, but it does have some limitations: conversations are automatically deleted and they’re not findable on the web in the first place.

It’s a shame that the Slack archives were deleted, but I think this will increase the longevity and accessibility of the information going forward.

Previously:

Python Numbers Every Programmer Should Know

Michael Kennedy (via Hacker News):

For example, how fast or slow is it to add an item to a list in Python? What about opening a file? Is that less than a millisecond? Is there something that makes that slower than you might have guessed? If you have a performance sensitive algorithm, which data structure should you use? How much memory does a floating point number use? What about a single character or the empty string? How fast is FastAPI compared to Django?

I wanted to take a moment and write down performance numbers specifically focused on Python developers. Below you will find an extensive table of such values.

Previously:

Latency Numbers Every Programmer Should Know

Jonas Bonér (based on work by Peter Norvig and Jeff Dean from 2012):

L1 cache reference                           0.5 ns
Branch mispredict                            5   ns
L2 cache reference                           7   ns                      14x L1 cache
Mutex lock/unlock                           25   ns
Main memory reference                      100   ns                      20x L2 cache, 200x L1 cache
Compress 1K bytes with Zippy             3,000   ns        3 us
Send 1K bytes over 1 Gbps network       10,000   ns       10 us
Read 4K randomly from SSD*             150,000   ns      150 us          ~1GB/sec SSD
Read 1 MB sequentially from memory     250,000   ns      250 us
Round trip within same datacenter      500,000   ns      500 us
Read 1 MB sequentially from SSD*     1,000,000   ns    1,000 us    1 ms  ~1GB/sec SSD, 4X memory
Disk seek                           10,000,000   ns   10,000 us   10 ms  20x datacenter roundtrip
Read 1 MB sequentially from disk    20,000,000   ns   20,000 us   20 ms  80x memory, 20X SSD
Send packet CA->Netherlands->CA    150,000,000   ns  150,000 us  150 ms

Colin Scott has a page that helps visualize how these types of numbers have changed over time (Hacker News).

Jon Snader:

Mohammad Zeya Ahmad has an informative post [archive] that answers that question. He has a list of how much time various common operations take. That’s interesting but what make his list stand out is that he draws conclusions from his results.

For example, SSDs are about 30 times faster than HDDs so if you have a high performance disk-based task, it makes sense to use SSDs. Of course, there are reasons to prefer HDDs but if performance is your controlling metric, SSDs are probably your best choice.

For each group of comparable metrics, Ahmad offers an actionable suggestion. Those groups range from CPU versus Cache and Memory speeds to network transfer times.

Previously:

Clearing iOS App Data

Ryan Jones:

Can anyone explain why there’s no “Clear Documents & Data” button?

Reinstalling the app just to clear it is dumb.

I can see why Apple doesn’t want to make it easier for users to accidentally delete data that they meant to keep. But I would like to at least see a standard system button for clearing an app’s caches. It’s backwards that to clear the cache you have to Delete App, which also removes its data, then reinstall it and somehow restore. You might think that Offload App would delete the app as well as the purgeable data, leaving only that which can’t be recreated automatically, but as far as I’m aware it leaves the caches in place.

Previously:

Update (2026-01-06): Craig Grannell:

I have a 130MB health app that’s so far ballooned to 1.5GB due to downloading everything each day. It keeps growing. Natch, there is no way to delete old data. (Nor can you get at the data to get the audio files – which is 99% of it – out of the thing.)

Thursday, January 1, 2026

The Year in LLMs: 2025

Simon Willison (tweet, Hacker News):

This is the third in my annual series reviewing everything that happened in the LLM space over the past 12 months. For previous years see Stuff we figured out about AI in 2023 and Things we learned about LLMs in 2024.

[…]

Every notable AI lab released at least one reasoning model in 2025. Some labs released hybrids that could be run in reasoning or non-reasoning modes. Many API models now include dials for increasing or decreasing the amount of reasoning applied to a given prompt.

[…]

It turned out that the real unlock of reasoning was in driving tools. Reasoning models with access to tools can plan out multi-step tasks, execute on them and continue to reason about the results such that they can update their plans to better achieve the desired goal.

[…]

Reasoning models are also exceptional at producing and debugging code. The reasoning trick means they can start with an error and step through many different layers of the codebase to find the root cause. I’ve found even the gnarliest of bugs can be diagnosed by a good reasoner with the ability to read and execute code against even large and complex codebases.

Previously:

Ruby 4

naruse (Hacker News):

Ruby Box is a new (experimental) feature to provide separation about definitions. Ruby Box is enabled when an environment variable RUBY_BOX=1 is specified. The class is Ruby::Box.

Definitions loaded in a box are isolated in the box. Ruby Box can isolate/separate monkey patches, changes of global/class variables, class/module definitions, and loaded native/ruby libraries from other boxes.

[…]

ZJIT is a new just-in-time (JIT) compiler, which is developed as the next generation of YJIT. You need Rust 1.85.0 or newer to build Ruby with ZJIT support, and ZJIT is enabled when --zjit is specified.

We’re building a new compiler for Ruby because we want to both raise the performance ceiling (bigger compilation unit size and SSA IR) and encourage more outside contribution (by becoming a more traditional method compiler). See our blog post for more details.

[…]

Ractor, Ruby’s parallel execution mechanism, has received several improvements. A new class, Ractor::Port, was introduced to address issues related to message sending and receiving (see our blog post).

Wednesday, December 31, 2025

Apple LLM Generating SwiftUI

Marcus Mendes (PDF):

In the paper UICoder: Finetuning Large Language Models to Generate User Interface Code through Automated Feedback, the researchers explain that while LLMs have gotten better at multiple writing tasks, including creative writing and coding, they still struggle to “reliably generate syntactically-correct, well-designed code for UIs.” They also have a good idea why:

Even in curated or manually authored finetuning datasets, examples of UI code are extremely rare, in some cases making up less than one percent of the overall examples in code datasets.

To tackle this, they started with StarChat-Beta, an open-source LLM specialized in coding. They gave it a list of UI descriptions, and instructed it to generate a massive synthetic dataset of SwiftUI programs from those descriptions.

The paper was published last year, but I didn’t see people talking about it until August. In the interim, Apple started using third-party AI providers in Xcode.

Der Teilweise:

18-25% of the output does not even compile. (The model they started with: 97% of the results FAILED to compile. Even the BEST model fails to produce compilable code in 12% of the cases.)

This lines up with GitHub’s report that typed languages are more reliable for generative AI.

Matt Gallagher:

To be blunt: after testing them out, I have not used LLMs for programming for the rest of the year. Attempting to use an LLM in that way was simply too frustrating. I don’t enjoy cleaning up flawed approaches and changing every single line. I do regularly ask ChatGPT how to use specific APIs, but I’m really just using it as a better documentation search or asking for sample code that is missing from Apple’s documentation. I’m not directly using any of the code ChatGPT writes in any of my apps.

In the meantime, I have watched plenty of presentations about letting Claude Code, and other tools, completely build an “app” but the successful presentations have usually focussed on JavaScript web apps or Python wrappers around small command-line tools. The two times this year that I’ve watched developers try the same with Swift apps have led to non-working solutions and excuses claiming it does sometimes work if left to run for another 20 minutes.

Previously:

Update (2026-01-05): Tas:

My brother is working on an IPTV app in SwiftUI and has a similar experience. Claude Code improved the quality of outputs significantly especially if you download the docs and do spec-driven development. But the chance of one-shotting tasks is still lower than with Typescript for example.

Greg Brockman:

rust is a perfect language for agents, given that if it compiles it’s ~correct

Jonathan Blow:

I understand the motivation, he wants the borrow checker to help make up for the lack of consistent reasoning in LLMs. But the fact he thinks this is a potential solution is nutballs and makes me think he does not understand the problem really.

Update (2026-01-08): Matt Gallagher:

My blog article last week has had some of the most negative feedback of anything I’ve ever published. So many people emailing me to call me out for insulting AI. I’m not sure you need to defend AI, I hear it’s doing fine.

But also, I gave all the major models 7/10 or better and said they’re much better than last year. That’s not a hit piece, calm down.

Update (2026-01-14): Drew Crawford:

Some of us report almost unbelievable engineering feats using AI. Others say they can’t automate even a simple programming task.

[…]

A very reasonable hypothesis is that some confounding factor explains all the contradictions. Maybe some people have good results, and other people have bad results. Often this is hand-waved as a “skill issue.”

I think that’s broadly true. Practice matters.

[…]

What’s actually happening is quieter, messier, and harder to talk about than a hype cycle. The gains are real, unevenly distributed, and tightly coupled to skills we don’t yet have names for, let alone tutorials. The people getting the most value are often the least able—or least willing—to explain how they do it, because explanation is risky, unrewarded, and professionally counterproductive.

Top Programming Languages of 2025

GitHub (tweet):

This surge in activity coincides with a structural milestone: for the first time, TypeScript overtook both Python and JavaScript in August 2025 to become the most used language on GitHub, reflecting how developers are reshaping their toolkits. This marks the most significant language shift in more than a decade.

[…]

Generative AI is now standard in development. More than 1.1 million public repositories now use an LLM SDK with 693,867 of these projects created in just the past 12 months alone (+178% YoY, Aug ’25 vs. Aug ’24). Developers also merged a record 518.7M pull requests (+29% YoY). Moreover, AI adoption starts quickly: 80% of new developers on GitHub use Copilot in their first week.

[…]

TypeScript is now the most used language on GitHub. […] Its rise illustrates how developers are shifting toward typed languages that make agent-assisted coding more reliable in production. It doesn’t hurt that nearly every major frontend framework now scaffolds with TypeScript by default. Even still, Python remains dominant for AI and data science workloads, while the JavaScript/TypeScript ecosystem still accounts for more overall activity than Python alone.

Java is #4 and C# is #5.

Previously:

Tuesday, December 30, 2025

“Reasonably Necessary” External Purchase Fee

Juli Clover:

Apple should be able to collect a reasonable commission on purchases made using external links included in iOS apps, the U.S. Court of Appeals ruled today (via Reuters). The U.S. Court of Appeals partially reversed sanctions imposed on Apple after Apple was found to have willfully violated an injunction in the ongoing Epic Games vs. Apple legal battle.

[…]

Apple is not going to be able to start charging a commission immediately, though. The case has been sent back to the district court so that a reasonable fee can be determined.

[…]

Apple can restrict developers from making external links more prominent than in-app purchase options. Specifically, Apple can restrict a developer from putting buttons, links, or other calls to action in more prominent fonts, larger sizes, larger quantities, and more prominent places than buttons for in-app purchases. Apple has to allow developers to place buttons in “at least” the same fonts, sizes, and places as Apple’s own.

Kyle Orland (Hacker News, Slashdot):

The ruling, signed by a panel of three appellate court judges, affirmed that Apple’s initial attempts to charge a 27 percent fee to iOS developers using outside payment options “had a prohibitive effect, in violation of the injunction.” Similarly, Apple’s restrictions on how those outside links had to be designed were overly broad; the appeals court suggests that Apple can only ensure that internal and external payment options are presented in a similar fashion.

The appeals court also agreed that Apple acted in “bad faith” by refusing to comply with the injunction, rejecting viable, compliant alternatives in internal discussions. And the appeals court was also not convinced by Apple’s process-focused arguments, saying the district court properly evaluated materials Apple argued were protected by attorney-client privilege.

While the district court barred Apple from charging any fees for payments made outside of its App Store, the appeals court now suggests that Apple should still be able to charge a “reasonable fee” based on its “actual costs to ensure user security and privacy.” It will be up to Apple and the district court to determine what that kind of “reasonable fee” should look like going forward.

Jay Peters (MacRumors):

“If you want to have an app go through review with custom linkouts, maybe there’s several hundred dollars of fees associated with that every time you submit an app, which is perfectly reasonable because there are real people at Apple doing those things and Apple pays them, and we should be contributing to that,” Sweeney says. But he says that the ruling, “completely shuts down, I think, for all time, Apple’s theory that they should be able to charge arbitrary junk fees for access.”

With these two areas that Apple would be allowed to charge for, Sweeney says that “I can’t imagine any justification for a percentage of developer revenue being assessed here.”

[…]

The ruling wasn’t the only big news for Epic and Fortnite on mobile today: the game also returned to Google Play in the US after similarly being booted by Google when Epic added the in-app payments system to Fortnite. Epic and Google announced last month that they have agreed to settle their lawsuit, and while the two sides are still seeking court approval for their settlement, it resolves their disputes worldwide.

Jeff Johnson:

The court ruling is confusing.

It says Apple can charge “necessary” costs for use of its IP but seems to interpret IP extremely narrowly to apply only to external links?

I’m not even sure what that IP is supposed to be.

Previously:

screensizes.app

Screen Sizes is a Web app that shows the display resolution for each iPhone model, and it also has details about the sizes of the home indicator, notch, widgets, etc.

Via Nick Heer:

Something I need to do at my day job on a semi-regular basis is compositing a screenshot on a photo of someone holding or using an iPhone or an iPad. One of my pet peeves is when there is little attempt at realism — like when a screenshot is pasted over a notch, or the screen corners have an obviously incorrect radius. This is not out of protection for the integrity of Apple’s hardware design, per se; it just looks careless. I constantly refer to Screen Sizes to avoid these mistakes.

Previously:

Monday, December 29, 2025

Liquid Glass Disbelief

Howard Oakley (Hacker News):

If someone had told me 12 months ago what was going to happen this past year, I wouldn’t have believed them. Skipping swiftly past all the political, economic and social turmoil, I come to the interface changes brought in macOS Tahoe with Liquid Glass. After three months of strong feedback during beta-testing, I was disappointed when Tahoe was released on 15 September to see how little had been addressed. When 26.1 followed on 3 November it had only regressed, and 26.2 has done nothing. Here I summarise my opinions on where Tahoe’s overhaul has gone wrong.

[…]

In real life, whiteouts are dangerous because they’re so disorienting. There’s no horizon, no features in the landscape, and no clues to navigation. We see and work best in visual environments that are rich in colour and tonal contrasts. Tahoe has continued a trend for Light Mode to be bleached-out white, and Dark Mode to be a moonless night. Seeing where controls, views and contents start and end is difficult, and leaves them suspended in the whiteout.

[…]

I’m sure that, in the right place and time, transparency effects of Liquid Glass can be visually pleasing. Not only is this the wrong time and place, but those with visual impairment can no longer remove or even reduce these effects, as the Reduce Transparency control in Accessibility settings no longer reduces transparency in any useful way. That was one of the regressions in 26.1 that hasn’t been addressed in 26.2.

jjice:

I don’t mind how Liquid Glass looks at all. It’s just insane how buggy the system has become. Even Messages will bug out, like deleting my first word if I type too fast after opening a conversation or auto scrolling and not letting me scroll down until I exit and re-enter.

Unacceptable for the premium you pay for Apple software. Unacceptable for any software one is paying for. I hope they get their shit together and start fixing before they continue adding new stuff. 26.2 doesn’t inspire me that they’re on that trajectory.

Previously:

Update (2025-12-30): Craig Grannell:

Sad to see that last pic of an older macOS and see how far things have fallen. (And Howard didn’t even mention the absurd “hovering” buttons.)

Nick Heer:

Oakley reviews several lingering problems with Liquid Glass in MacOS, but the above remains the most — and I use this word intentionally — glaring issue I have with it. It is a problem that becomes entirely clear as you scroll to the bottom of Oakley’s post and find a screenshot from — I think — Mac OS X Mavericks with evident precision and contrast.

Aaron Trickey:

What pushed me over the edge in deciding to chase at least some of it was installing the first beta of macOS Tahoe. It was clear that non-updated apps would immediately stand out, from the radius of the window corners to the look of standard controls, and I wanted to make sure my apps looked well-maintained. I decided on a major (dot-zero) release number to give me a bit more license to update the UI than normal, and dug in.

[…]

This, unfortunately, turned into a surprising time sink. There was a lot of churn, with each macOS beta changing at least something about how glass effects looked or behaved. Different control types applied glass effects inconsistently (and still do, in the released versions). When presented over a white background, glass layers become hard to spot without additional tweaking. This resulted in many hours of experimenting and iterating, far more than the size of these controls would imply. I’m pleased with the final result, but expect to keep revising it over time.

One thing Apple pushed for, which I did not adopt, was to extend blurred document content up under the toolbar. I tried, over many hours, repeating with each new beta, but it never worked out.

Update (2026-01-08): John Gruber (Mastodon):

It’s just remarkable how much better-looking MacOS was 10 years ago, compared to MacOS 26 Tahoe at its best. And it’s equally remarkable just how bad MacOS 26 Tahoe looks in many typical, non-contrived situations, where entire menus or the title of a window are rendered completely illegible.

Gus Mueller:

For me, the first and worst sin of macOS Tahoe is that window backgrounds are 100% white in Light Aqua. Dark Aqua is 8.9% white, which is OK. Black still shows up against it.

Sequoia was and 90.6% and 14.7%, so you could draw white on a window background and see it.

Ken Gruberman:

As the Norwegians say, Liquid Glass is “not so bad” on iPhones and iPads, but on the Apple Watch and the Mac, it’s an abomination.

Steve Troughton-Smith:

I understand sentiment of this article, but must note that the specifics of much of what’s mentioned here are the choice of third-party devs. You can’t just flip a switch and turn on Liquid Glass, especially in a traditional Mac app. Tying into what I said earlier this year: traditional Mac apps are not native to this design language — you need to redesign the apps too. That’s why adopting Liquid Glass is such an ordeal, and why many (including Apple) haven’t shipped

I don’t think it works well in the apps have have been redesigned, either.

Mario Guzmán:

This could be a case study on how design at Apple has gotten worse. Take iTunes/Music for Mac:

  1. From Catalina on, full-height sidebars started eating into valuable toolbar real estate.
  2. In Tahoe, not only to stupid big corner radii eats more into you usable area, they now allow the inspector sidebars to cut even more into toolbar space.
  3. The volume & scrub controls are now an extra click away.

MailMate License Model: One Year Later

Benny Kjær Nielsen:

I’ve previously described the transition to the new pricing model as a huge gamble because I would no longer be selling license keys for $50. This was the majority of the revenue generated. So far, this gamble has paid off since I’ve had an increase in revenue when comparing 2025 to 2024. It does not correspond to what one (where I live) would expect from a full time job, but it does mean that I’m going to continue full time development in 2026. I believe that is good news for MailMate users and I’m really thankful for all of the, new and old, MailMate development patrons/subscribers.

Some users might have noticed that I haven’t uploaded any test releases of MailMate for quite a while (more than 2 months). This is not because I’ve not been working on MailMate. It’s because I’ve been working on some broad changes to very old core parts of MailMate, in particular, related to parsing/editing of emails and memory management.

Previously:

Friday, December 26, 2025

watchOS 26 Removed Offline Workout Voice Alerts

matthewfromteneriffe (Reddit):

Since updating to WatchOS 26 I no longer receive any alerts (i.e. pace, heart rate zone and splits) - only beeps, no voice alerts. I do not use headphones/iphone while running.

Xiruzero:

What I realized is that the alerts don’t work if the watch is offline, but will work if the watch is connected with the Internet. My watch is Wi-Fi only and I don’t take my phone on my runs, so it’s always offline during workouts.

The issue happens even if the watch disconnects mid workout. It’ll start playing alerts and stop as soon as the watch loses connection.

matthewfromteneriffe:

After a number of calls with a support person (and engineering via that support person), they confirmed verbally that to get voice feedback when not connected to an iPhone/internet, you need to download the voice files to the watch (I think I did this prior to updating to OS26 but had not done this in OS26 as I was not aware this was needed) AND your watch needs to be connected to headphones to play the voice alerts (although the voice alerts play from the watch when the phone is connected). The support person confirmed that this change is by design - naturally I voiced my irrigation and lack of clear communication by Apple that they had made this decision for me.

I did not test this as I do not use headphones when exercising so I am having my watch downgraded to the previous OS.

[…]

If I hadn’t become so ‘addicted’ to tap to pay (and other tap functions) on the watch, I’d be switching to a Garmin.

trail-runner:

In case this helps others experiencing this issue, I’ve spent numerous hours with Apple support on this and finally received an official response from their engineering team:

Workout Voice Feedback was removed on Watch OS 26 for GPS models of Apple Watch. This feature is still available on cellular models of Apple Watch as it now requires a network connection for the feature to operate. This feature applies to normal voice feedback during workouts. It is now expected that if the iPhone and GPS models of the Apple Watch are not within range of each other during the workout, that the voice feedback function will not work.

alexskunz:

I’m experiencing the same thing, and I am completely dismayed by this change. Getting Voice Feedback without having to haul the phone around was the whole reason to get an Apple Watch as my fitness tracker (listening to music via AirPods was just an added benefit).

I have tried everything that is mentioned in this whole lengthy thread (downloading the speech files via Accessibility setting, adjusting the notifications to “all” instead of “Urgent”, Siri settings, etc.) without any improvement.

The Watch with OS26 doesn’t speak when it isn’t connected to an iPhone. The interesting thing is that the iPhone does NOT need to have a network connection — I had mine in my pocket, in airplane mode, and the Watch still gave me Voice Feedback. This is in line with the observations from MajorLeagueSoccer that their Watch with “cellular” doesn’t actually have a cellular connection, but does provide Voice Feedback as well.

This seems to contradict what the engineering team said. I don’t understand whether there’s an artificial restriction or a bug.

Previously:

Update (2025-12-30): Bob O’Shaughnessy:

I’ve been infuriated by this since the release of WatchOS 26. Running without phone has been my main workout For a few years now.

Hopefully this gets the issue some traction with people at Apple who can fix it. The calls to support and the huge Apple Support Community thread haven’t helped.

Texas Age Verification Suspended

Juli Clover (Hacker News, Slashdot):

The Texas App Store Accountability Act (SB2420) requires Apple and other app marketplaces to confirm user age when a person creates an Apple Account. Apple Accounts for users under 18 would need to join a Family Sharing group, with new controls available for parents and restrictions for minors.

In a preliminary injunction that delays the implementation of the act, Judge Robert Pitman said that it violates the First Amendment and is “more likely than not unconstitutional.”

Sarah Perez:

The Texas attorney general’s office noted in a court filing that it plans to appeal the decision, a report from Reuters noted.

Apple:

In light of this ruling, Apple will pause previously announced implementation plans and monitor the ongoing legal process.

[…]

These tools can also be used to help developers with their obligations under laws coming into effect in Utah and Louisiana in 2026. The Declared Age Range API remains available worldwide for users on iOS 26, iPadOS 26, and macOS 26, or later.

Previously:

SSDs Not Safe Long-Term for Archives

Monica J. White (via Mac Power Users):

SSDs rely on stored electrical charge in NAND flash cells to represent data. When an SSD is powered and in regular use, it can correct many small errors with ECC, remap weak blocks, and generally keep data reliable. Leave your SSD in a drawer, though, and it can’t do any of that.

Industry sources talk about this at length. Western Digital notes that data retention diminishes as PE cycles increase. Most SSDs run checks in the background to verify which blocks are experiencing higher bit error rates, but when the SSD is powered off, that process can’t take place.

YouTuber HTWingNut runs a (very small-scale) yearly experiment that shows what can happen to SSDs when they’re used as cold storage. The latest results after two years showed that out of four cheap TLC SSDs tested, drives that were previously heavily used (way past their recommended TBW rating) showed signs of corruption after being unpowered for two years.

[…]

If you need to park data on an SSD, check on it periodically. Power it up, run a full read/verify pass, and compare checksums for your irreplaceable files.

This is easy to do if the files are stored in EagleFiler. I periodically check all my archives, though they’re stored on spinning hard drives due to the still much higher costs and lower capacities of SSDs.

Previously:

Lawsuit Over Restricting Apple Products in Amazon Marketplace

Hartley Charlton:

Apple and Amazon are facing a new UK opt-out class action seeking more than £900 million ($1.2 billion) over claims that the companies struck an unlawful deal that pushed independent Apple and Beats sellers off Amazon and kept prices higher for consumers.

The claim centers on an agreement from October 2018, from which point it is alleged that Amazon restricted third-party sellers from offering Apple products on Amazon’s marketplace, while Apple gave Amazon better wholesale terms for Apple products sold directly by Amazon as a retailer.

Previously:

Wednesday, December 24, 2025

How to Recognize a Genuine Mac Password Request

Howard Oakley:

One of the primary aims of most malware is to trick you into giving it your password. Armed with that, there’s little to stop it gathering up your secrets and sending them off to your attacker’s servers. One of your key defences against that is to know when a password request is genuine, and when it’s bogus. By far the best way to authenticate now is using Touch ID, but many Macs don’t support it, either because they can’t, or because their keyboard doesn’t, and there are still occasions when a genuine request may not offer it. This article looks at the anatomy of a range of genuine password requests. Note that these dialogs aren’t generated by the app, but come from the macOS security system, hence their consistency.

It’s kind of scary that there isn’t really anything about the standard Mac password dialogs that malware couldn’t duplicate. I don’t know why Apple hasn’t figured out a way to modify the rest of the screen in a way that only they could do. But, in practice, the fake dialogs seem to be very sloppily designed, so it’s good to review Oakley’s catalog.

I use a USB keyboard that doesn’t support Touch ID 99% of the time. Even when using my MacBook Pro’s internal keyboard, I tend not to use Touch ID because it rarely works. (It doesn’t work well on my iPad Air, either, though it was very reliable back before iPhones switched to Face ID.)

Update (2025-12-26): Kyle Howells:

I’ve though for the last decade that Apple should have a second light next to the camera light* which lights up during a real macOS auth request.

As it is Apple’s flood of permission requests is security theatre which makes users less secure by training them to expect frequent random prompts for their macOS password and to just accept it without thinking and enter their password.

(*a different color, maybe the other side of the camera, or above the keyboard instead).

Adam Demasi:

I kinda don’t trust Apple to not make it even more confusing. Personally I think there’s a lot that can be learned from UAC’s seeming simplicity, while it has a bunch of anti-forgery features built in. (Don’t need to replicate all the unfixed security flaws surrounding it though lol) OS X actually used to show more info in the admin elevation prompt, like the process name and the intended outcome (run command as root, start privileged helper, custom 3rd-party tasks), not sure why this was removed around the Lion era.

One thing for sure though, making system auth prompts look just like all other alerts is a mistake. Apple keeps doing this for some reason (see also fake Apple ID prompts, before they redesigned this UI around the Face ID double-click)

More App Store Ad Spots

Apple:

When a user searches on the App Store, your ad can appear at the top of their search results. And starting in 2026, we’ll be introducing more ads to increase opportunity in search results.

[…]

Your ad will run in either the existing position — at the top of search results — or further down in search results. If you have a search results campaign running, your ad will be automatically eligible for all available positions, but you can’t select or bid for a particular one.

James Thomson:

Me: I really hate the advert when you search on the App Store, I wish Apple would change that.

Apple: Wish granted!

John Gruber (Mastodon):

I have a bad feeling about this.

Marco Arment:

App Store search is ineffective and primitive, and doesn’t reliably show high-quality, relevant results for queries.

How can it be improved?

More advanced search algorithms, like the last two decades? Nope!

AI-assisted relevance and ranking, like this decade? Nope!

When all you have is an insatiable desire for more “services revenue”, you can only see one solution…

Greg Pierce:

Why should Apple just take 30% of the lifetime value of your customers in perpetuity when they can charge you 90% of that just to acquire them!

Jeff Johnson:

Do additional ad positions in App Store search mean that if someone searches for your app by name, Apple can bury your app even lower than its current (hopefully) #2 position in the results?

Previously:

Google Sues SerpApi

Halimah DeLaine Prado (Reddit):

We filed a suit today against the scraping company SerpApi for circumventing security measures protecting others’ copyrighted content that appears in Google search results. We did this to ask a court to stop SerpApi’s bots and their malicious scraping, which violates the choices of websites and rightsholders about who should have access to their content. This lawsuit follows legal action that other websites have taken against SerpApi and similar scraping companies, and is part of our long track record of affirmative litigation to fight scammers and bad actors on the web.

Google follows industry-standard crawling protocols, and honors websites’ directives over crawling of their content. Stealthy scrapers like SerpApi override those directives and give sites no choice at all. SerpApi uses shady back doors — like cloaking themselves, bombarding websites with massive networks of bots and giving their crawlers fake and constantly changing names — circumventing our security measures to take websites’ content wholesale.

Barry Schwartz:

Google claims SerpApi uses hundreds of millions of fake search requests to mimic human behavior. This allows them to bypass CAPTCHAs and other automated defenses that Google uses to prevent bots from overwhelming its systems.

SerpApi sells a “Google Search API” to third parties. Google argues this is deceptive because Google does not offer a public search API for this type of data. SerpApi is essentially selling a back door to Google’s proprietary search engine.

Google argues that its security systems (like SearchGuard) are “technological measures” that control access to copyrighted work. By bypassing them, SerpApi is allegedly violating Section 1201 of the DMCA. Google claims SerpApi is violating Google’s Terms of Service, which strictly prohibit automated scraping and the use of proxies to hide one’s identity. Google alleges that SerpApi is profiting from Google’s massive investment in organizing the world’s information without contributing to the ecosystem or respecting the rules.

“Google estimates that SerpApi sends hundreds of millions of artificial search requests each day to Google. Over the last two years, that volume has increased by as much as 25,000%,” Google said.

Danny Goodwin:

What SerpApi has said previously. SerpApi argued that “public search data should be accessible,” framing its work as protected by the First Amendment and warning that lawsuits like Reddit’s threaten the “free and open web.”

Nick Heer:

Recent actions taken by U.S. courts, for example, have found Google illegally maintained its search monopoly. In issuing proposed remedies earlier this year, the judge noted the rapidly shifting world of search thanks to the growth of generative artificial intelligence products. “OpenAI” is mentioned (PDF) thirty times as an example of a potential disruptor. However, the judge does not mention OpenAI’s live search data is at least partially powered by SerpApi.

Previously:

TikTok Spin Off Deal

Clare Duffy (Reddit):

TikTok has signed the deal backed by President Donald Trump to spin off its US assets to create a new entity with a group of mostly American investors, CEO Shou Chew told employees in a memo Thursday.

Although the transaction is not yet complete, the move brings TikTok one step closer to securing its long-term future in the United States. It comes after a law passed last year required that the US version of the app be spun off from its parent company, ByteDance, or be banned in the United States.

[…]

Under the agreement, the US TikTok app will be controlled by a new joint venture, 50% of which will be owned by a consortium of investors comprised of tech company Oracle, private equity firm Silver Lake and Emirati-backed investment firm MGX. Just over 30% of the joint venture will be held by “affiliates of certain existing investors in ByteDance” and 19.9% will be retained by ByteDance, according to Chew’s memo.

John Gruber (Mastodon):

The craziest aspect of this whole saga is that TikTok has been operating illegally since Trump took office.

Nick Heer:

Oracle is among the companies illegally supporting TikTok for the past year, along with Apple and Google. Instead of facing stiff legal penalties, Oracle will get to own a 15% piece of TikTok.

Karl Bode (Hacker News):

The deal purportedly involves “retraining the content recommendation algorithm on U.S. user data to ensure the content feed is free from outside manipulation,” but given you can’t trust any of the companies involved, the Trump administration, or what’s left of U.S. regulators, that means absolutely nothing. Oracle will be “overseeing data protection,” but that means nothing as well given Oracle is run by an authoritarian-enabling billionaire with a long history of his own privacy abuses.

Also, this seems to ignore that three years ago, during the Biden administration, it was already announced that Oracle was overseeing TikTok’s algorithms and data protection. It’s kinda weird that everyone seems to have forgotten that. This is all, more or less, what was already agreed to years ago.

Nick Heer:

There is a kind of implied for now which should be tacked onto the end of its impact on Canadians. This U.S.-specific version lays the groundwork for a political wedge issue in Canada and elsewhere: should people use the version of the app run by a company headquartered in Beijing and mostly owned by a mix of American, Chinese, and Emirati investors, or should they use the app run by a company based in the U.S and mostly owned by a mix of American, Chinese, and Emirati investors? Or, to frame it in more politically expedient terms, should people be allowed to use the “Chinese” app or should they be pushed into the “American” app? Under that framing, I would not be surprised to see the U.S. version become the dominant client for TikTok worldwide.

Previously:

Tuesday, December 23, 2025

iOS 26.3: Proximity Pairing in EU

Juli Clover (Hacker News, Reddit):

The Digital Markets Act requires Apple to provide third-party accessories with the same capabilities and access to device features that Apple’s own products get. In iOS 26.3, EU wearable device makers can now test proximity pairing and improved notifications.

Here are the new capabilities that Apple is adding:

  • Proximity pairing - Devices like earbuds will be able to pair with an iOS device in an AirPods-like way by bringing the accessory close to an iPhone or iPad to initiate a simple, one-tap pairing process. Pairing third-party devices will no longer require multiple steps.
  • Notifications - Third-party accessories like smart watches will be able to receive notifications from the iPhone. Users will be able to view and react to incoming notifications, which is functionality normally limited to the Apple Watch.

I’m looking forward to Apple’s blog post about how easier Bluetooth pairing will put users at risk. The notification forwarding was previously announced, but I didn’t realize it also included support for reactions.

Steve Dent:

However, there’s no indication that it will allow seamless switching between devices as you can do with Apple’s [AirPods], for instance.

Previously:

Update (2025-12-26): Steven Aquino:

I could be wrong, but it sounds like Apple’s using its AccessorySetupKit API for this.

[…]

In the end, this week’s news should make disabled people living in the European Union really happy because product pairing is about to become a way more accessible experience.

These benefits aren’t exclusive to Apple. Google’s “Fast Pair” does it on Android too.

Brazil: App Marketplaces and External Payments

Joe Rossignol (Slashdot):

Due to regulatory action, Apple has agreed to allow alternative app stores, third-party payment systems for in-app purchases, and in-app links to external offers on iOS in Brazil, according to legal news website MLex and Brazilian blog Tecnoblog.

Previously:

Update (2025-12-26): Hartley Charlton (Slashdot):

CADE specified that Apple may still display warnings or informational messages to users, but those messages must be neutral, objective, and limited in scope, and must not introduce extra steps or barriers that make alternative options harder to use.

According to Brazilian technology site Tecnoblog, which said it obtained the details directly from CADE, purchases made through the App Store will remain subject to a 10% or 25% commission under standard terms. Developers who use Apple's payment system would also pay a 5% transaction fee.

If an app directs users to pay outside the app using only static text, with no clickable link or button, Apple will not charge a fee. If the app includes a clickable button or link that sends users to an external website for payment, Apple will charge a 15% fee. Third-party app stores will be subject to a 5% Core Technology Commission.

Marcus Mendes:

In 2022, Latin American e-commerce giant MercadoLibre filed a complaint with Brazil’s competition watchdog, the Conselho Administrativo de Defesa Econômica (CADE), challenging Apple’s iOS App Store rules, including restrictions on app distribution and the mandatory use of Apple’s in-app payment system.

Since then, the legal back-and-forth closely followed the script seen in other countries where Apple has faced similar antitrust scrutiny. Both Apple and MercadoLibre scored legal wins, which were immediately challenged by the opposing side.

[…]

In a statement provided to 9to5Mac, Apple said:

In order to comply with regulatory demands from CADE, Apple is making changes that will impact iOS apps in Brazil. While these changes will open new privacy and security risks to users, we have worked to maintain protections against some threats, including keeping in place important safeguards for younger users. These safeguards will not eliminate every risk, but they will help ensure that iOS remains the best, most secure mobile platform available in Brazil and we will continue to advocate on behalf of users and developers.

iOS-Android Data Transfer at Setup

Juli Clover:

Apple and Google are teaming up to make it easier for users to switch between iPhone and Android smartphones, according to 9to5Google. There is a new Android Canary build available today that simplifies data transfer between two smartphones, and Apple is going to implement the functionality in an upcoming iOS 26 beta.

[…]

The collaboration will apparently add “more functionality” and support for transferring data types that are not available to transfer with the current tools.

This is good, but I don’t love that it seems to be a private arrangement between Apple and Google. We should all be able to get a dump of our own data.

Juli Clover:

The simplified smartphone switching Apple and Google are adopting is an example of how the Digital Markets Act (DMA) benefits users and developers, the European Commission said today. Apple and Google are making it easier for users to switch between iPhone and Android smartphones, adding an option to transfer data from another smartphone during the device setup process.

Apple and Google are implementing this functionality because the DMA requires services to offer effective data portability to avoid data lock-in to an operating system.

[…]

The DMA is also the reason why Apple and Google designed a simplified eSIM transfer solution earlier this year.

Previously:

Notarized Mac App That Downloads Malware

Thijs Xhaflaire:

Jamf Threat Labs observed a signed and notarized stealer that did not follow the typical execution chains we have seen in the past. The sample in question looked highly similar to past variants of the increasingly active MacSync Stealer malware but was revamped in its design.

Unlike earlier MacSync Stealer variants that primarily rely on drag-to-terminal or ClickFix-style techniques, this sample adopts a more deceptive, hands-off approach. Delivered as a code-signed and notarized Swift application within a disk image named zk-call-messenger-installer-3.9.2-lts.dmg , distributed via https://zkcall.net/download, it removes the need for any direct terminal interaction. Instead, the dropper retrieves an encoded script from a remote server and executes it via a Swift-built helper executable.

Bill Toulas (Reddit):

The stealer emerged in April 2025 as Mac.C by a threat actor named ‘Mentalpositive’. It gained traction by July, joining the less crowded but still profitable space of macOS stealers alongside AMOS and Odyssey.

A previous analysis of Mac.C by MacPaw Moonlock indicates that it can steal iCloud keychain credentials, passwords stored on web browsers, system metadata, cryptocurrency wallet data, and files from the filesystem.

Jeff Johnson (Mastodon):

I hate to say I told you so but…who am I kidding, I love to say I told you so. In 2019 I wrote a prescient blog post, The true and false security benefits of Mac app notarization, in which I foretold such an attack, suggesting that notarization is security theater.

[…]

Many of the Mac malware “protections” that Apple has added over the years are merely punishments for Mac users and honest Mac developers, making their computing life more miserable while leaving gaping holes for malware to sneak through. (See my own Apple Security Credits, as a Mac developer, not a professional security researcher, and those are just issues that Apple fixed, not all of the issues I discovered.) Earlier this month 9to5Mac also reported, Apple security bounties slashed as Mac malware grows, a tacit admission by Apple of this hopeless situation.

Céline Didone:

it was always about creating fear around the well established practice of installing apps from outside the App Store.

Previously:

Update (2025-12-30): Jeff Johnson (Mastodon, Rosyna Keller):

My assumption all along was that notarization is intended to stop malware authors from distributing their own maliciously crafted apps, and in this respect I still think notarization is security theater. However, perhaps my assumption was wrong. What if the purpose of notarization is more narrowly focused, to prevent supply chain attacks like XcodeGhost? The requirement of uploading the built app to Apple for a malware scan is not very good at stopping a determined attacker with full control over app creation, submission, and distribution who is intentionally trying to sneak malware past Apple. On the other hand, the notarization requirement can stop an unwitting developer who is unintentionally distributing known malware in their app only as a carrier, a dupe, already a victim themselves.

The timeline of notarization seems a bit off, three years between 2015 and 2018 for Apple to engineer a mitigation for the massive, damaging XcodeGhost supply chain attack. I don’t see a sense of urgency there; it would be practically lackadaisical. Nonetheless, the motivation and implementation would make sense in light of XcodeGhost.

Is this blog post a mea culpa by me? Maybe! I now acknowledge there may be some security benefit to notarization. Whether the benefit outweighs the many downsides is another question, though. In any case, it would have been nice if Apple had made some kind of public, official statement like, “Hey, we’re introducing notarization because of XcodeGhost,” and then the whole thing would have made sense to everyone from the beginning. Instead, Apple chose its habitual path of greatest resistance, security by obscurity.

Previously:

Monday, December 22, 2025

Italy Fines Apple Over App Tracking Transparency

Joe Rossignol (Hacker News, ArsTechnica):

Italy’s Competition Authority (AGCM) has imposed a €98.6 million ($116 million) fine on Apple over its App Tracking Transparency feature.

[…]

In a press release and executive summary today, the AGCM said the App Tracking Transparency rules are “disproportionate,” and “harmful” to app developers and advertisers. Ultimately, it found that Apple abused its dominant position in the EU market.

Previously:

The /.nofollow and /.resolve Magic Directories

John Daniel (via John Siracusa, Reddit):

As of 26.1, when you encode a security-scoped bookmark to “file:///”, what you decode will be a bookmark to “file:///.nofollow/”. So the decode method now succeeds, but the value is wrong. I actually preferred the behaviour of the original bug.

Kevin Elliott:

The “.nofollow” syntax is a new part of the core system that allows components to construct paths that the lower level system guarantees will not be resolved or followed. This makes it simpler to protect against TOC/TOU attacks by allowing one component of the system to resolve a particular path, then pass that path to another component while guaranteeing that the second component won’t inadvertently cause a second resolve.

Unfortunately, the bug here is that parts of Foundation aren’t handling this correctly when the path references root.

I expect this will be resolved in the next system update [26.2]; however, it’s not clear to me whether that will mean that resolution will return “/” again or that the new “file:///.nofollow/” construct will start working.

However, even if we revert to “/”, you should be aware that “.nofollow” and “.resolve” paths are not inherently invalid and you should expect to see more of them in the future.

I don’t remember seeing this in the documentation or at WWDC.

Kevin Elliott:

The standard way of preventing this attack is by passing one of the “no follow” flags to open, but in a complex system that can be extremely difficult to guarantee and validate.

The new “.nofollow” construct effectively “attaches” the no follow flag to the path itself, forcing that flag on all open calls regardless of the actual flag passed in.

Kevin Elliott:

I’m not sure what the current state of things is, but the expectation is that most/all syscalls that interact with paths will “preserve” these “.<flag>” prefixes. I’ll also note that the behavior of realpath will change based on “.nofollow”.

[…]

In the context of framework code, I think the best option is to treat any “.nofollow” path you receive as “inherently” canonical and simply use it directly.

Kevin Elliott:

My general advice here is to treat any URL you receive from the system as a “magic” object. In practice, I generally convert it to a bookmark, then resolve the bookmark again, and use that new URL*, discarding the original (“magic”) URL. *This ensures that the rest of my app is ALWAYS working with “a URL that came from a bookmark”, instead of a “split” flow.

Previously:

Belated Liquid Glass on iPhone First Impressions

Jeff Johnson (Mastodon):

This morning I reluctantly updated my iPhone SE (3rd generation) from iOS 18.7.2 to iOS 26.2. I had been hoping for Santa Cook to bring me iOS 18.7.3 for Christmas. Apparently, though, we’ve all been naughty. Or maybe Cook himself is not nice. I was aware that it was (previously) possible to install iOS 18.7.3 by enabling beta software updates, but nowadays that requires enabling iCloud, which I refuse to do on my iPhone. According to MacRumors and my followers on social media, Apple has within the past 24 hours stopped providing 18.7.3 on the beta track. Moreover, Apple is providing restore image to developers for only a few iPhone models: XR, XS, and XS Max. Thus, it appears that iOS 18 is effectively discontinued on most devices, and iOS 18.7.2 suffers from actively exploited security vulnerabilities.

More on that here. I also somewhat involuntarily just updated to iOS 26.2, because I got a new Apple Watch and it refuses to pair with an iPhone running iOS 18.

What struck me on iPhone was something I hadn’t noticed as much on Mac and iPad: the animations.

[…]

There are quite a few visual glitches remaining, three months after the public release of the new operating system. If iOS 26.0 was half-baked, iOS 26.2 is at most two-thirds-baked.

Needless to say, I enabled Reduce Transparency in Display & Text Size Accessibility Settings as soon as I updated to iOS 26. I had already enabled Show Borders and On/Off Labels in iOS 18 or earlier.

[…]

By the way, don’t get me started on the Liquid Crass replacement of close buttons with checkboxes. (On iOS 18, the checkbox in the video was a Done button.) This change is insane! And I’ve already had a customer confused by the checkbox, thinking that they had to “approve” something in the window.

I’d seen the betas, too, and already knew I didn’t like Liquid Glass. What struck me in everyday use is how many glitches remain and that the accessibility settings don’t work very well. There are glass borders that start out with square corners and then become rounded. As with previous recent versions, various things just don’t look good with Reduce Transparency enabled—ugly colors, edges that are harder to see in a sea of white—like I’m being penalized for using it. I ended up turning it off because sometimes the keyboard doesn’t show the labels of the keys. I find the Liquid Glass animations annoying, too, but many of them remain even after enabling Reduce Motion. Prefer Cross-Fade Transitions helps but looks odd, in my opinion, and causes temporarily glitches with curved outlines being left behind. I guess it’s easier to not consider the “bloody ROI” if you don’t commit the resources to actually finishing the job.

Previously:

Update (2025-12-23): Craig Grannell:

“like I’m being penalized for using it”

That’s how I’ve long felt about Apple’s approach to the visual design of a lot of accessibility features. It feels petulant. “Well, if you don’t want our gorgeous design, you can make do with THIS.” And there are so many vestibular triggers left in these systems, it may actually be dangerous for some people to update. Yet Apple is effectively forcing them too anyway.

Update (2025-12-26): Arnaud:

I personally love the animations but hard agree on the half baked stuff.

The Mail app is the worst, especially in the headers where the unsubscribe prompt and “could not load over vpn” message live. It’s something you’d expect from android circa 2010.

Proton Moving Out of Switzerland

Chiara Castro (Hacker News, Reddit):

Proton has confirmed the company has begun moving out of Switzerland due to “legal uncertainty” over the newly proposed surveillance law.

[…]

The firm behind one of the best VPN and encrypted email services has been very critical of the Swiss government’s proposed amendment of its surveillance law since the beginning, already sharing plans to quit Switzerland back in May.

[…]

Proton launched its ChatGPT competitor, Lumo, in July 2025, to give its users an alternative to Big Tech solutions that truly protect their privacy.

In a blog post about the launch, Proton’s Head of Anti-Abuse and Account Security, Eamonn Maguire, explains that the company has decided to invest outside Switzerland for fear of the looming legal changes.

Previously:

Friday, December 19, 2025

Tahoe Display Flicker

Juli Clover:

Mac users with the Studio Display have been complaining about intermittent flickering since the update launched in September. There are also complaints from users who have other kinds of displays, so it might be a bug that is affecting more than one type of external monitor.

We have experienced this issue with a MacBook Pro running macOS Tahoe connected to a Studio Display, and the macOS Tahoe 26.1 and macOS Tahoe 26.2 updates haven't improved the situation at all. In fact, the flickering seems to be getting worse in recent days.

Dan Moren:

I’m glad this is finally gaining some attention because I have been seeing this since the earliest betas of Tahoe back in June (I complained about it again more recently). And that’s been on multiple Macs, including my Mac mini attached to a Studio Display, my old M1 MacBook Air, and my current M4 MacBook Air.

Oliver Haslam:

It’s thought that this dithering causes a flickering effect which, in some cases, can even cause headaches. Thankfully, a third-party utility called Stillcolor can override the display controller’s behavior.

Disabling dithering via Stillcolor is reported to have fixed the issue for some. Unfortunately, others say it hasn’t worked for them, so your mileage may vary.

Previously:

Update (2025-12-22): eric:

wow I thought I was losing my mind of my m4 Mac mini was going south. I don’t see it in my work MBP without Tahoe.. didn’t think it was the OS but I guess it is! It’s not bad and infrequent but unnerving either way.

Update (2026-01-09): Max Seelemann:

Today my Studio Display started to flicker.

Passwords.app and Magic Links

John Gruber:

There are many sites — and the trend seems to be accelerating — that do not use passwords (or passkeys) for signing in. Instead, they only support signing in via expiring “magic links” sent by email (or, sometimes, via text messages). To sign in with such a site, you enter your email address, hit a button, and the site emails you a fresh link that you need to follow to sign in. I despise this design pattern, because it’s inherently slower than signing in using an email/password combination that was saved to my passwords app and autofilled by my web browser.

[…]

To make matters worse, when you create a new account using a “magic link”, nothing gets saved to Apple Passwords. I don’t have many email addresses in active use, but I do have several. Sometimes I don’t remember which one I used for my account on a certain site.

[…]

One workaround I’ve used for a few sites with which I keep running into this situation (Status, I’m looking in your direction) is to manually create an entry in Apple Passwords for the site with the email address I used to subscribe, and a made-up single-character password. Apple Passwords won’t let you save an entry without something in the password field, and a single-character password is a visual clue to my future self why I did this.

I have also run into this friction where the Passwords app insists I not leave the field blank but there’s nothing that really makes sense to put there.

I’d always assumed that sites used magic links because people don’t remember their passwords, and it’s easier to click a link than to go through the password reset process each time. But Gruber notes that magic links are also an effective way to combat account sharing.

Previously:

You actually can create password entries without passwords because there’s a bug in the app where the (command)+S keyboard shortcut works even when the UI button to save is disabled

Hudlum 1.0

Peter Maurer:

The volume indicator, on the other hand, is most important to me when there’s currently no sound playing, e.g., because I want to confirm my system is muted (or at least not in “yell loud enough to wake everyone in the house” mode) before I start playing a video. And I’d rather do that without having to squint at a tiny slider on a fuzzy-glassy background in an inconvenient spot way outside of my center of attention. A tiny slider on a fuzzy-glassy background in an inconvenient spot way outside of my center of attention, I might add, that doesn’t always update properly when I hit the mute/unmute key.

[…]

Enter Hudlum, the nostalgic retro HUD-style system volume indicator for dinosaurs[…] As silly as it may seem, this helped me make peace with macOS 26.

Previously:

Backblaze No Longer Backs Up Dropbox

Rob Halliday:

It appeared that Backblaze was now just not backing up Dropbox AT ALL, and was discarding (without warning) existing backups of Dropbox folders.

I contacted Backlbaze tech support. Janet their ‘AI Agent’ who is “well-trained to answer your questions” (!!), responded an hour or so later saying that Backblaze now basically do not back up Dropbox as of a recent update to the Mac Backup software.

[…]

Working back through the Backblaze release notes, this change happened in 9.2.2.878. The release notes page does not include release dates for software versions, so there is no way of telling when this change happened.

[…]

If I hadn’t discovered this by accident today, I might not have found out until too late. I suspect this is why I haven’t managed to find more outcry about it on the web today - I suspect this applies to a lot of people, who know this has been working fine and haven’t yet noticed that it’s now broken. Yes, it’s in the release notes, but a change like this should, I feel, be displayed VERY PROMINENTLY as part of an update, or an update causing a change this dramatic should not be forced on users automatically.

I’ve had concerns about Backblaze for a long time, but this is a new low.

Previously:

Update (2025-12-22): It seems like Backblaze now also excludes iCloud Drive and OneDrive but not Dropbox via Maestral. This seems to not be due to Dropbox using the File Provider Extension framework, and it’s not overridable at the user level, so I guess there’s some sort of built-in exclusion. CrashPlan also no longer backs up Dropbox. Arq can still back up all this stuff.

Thursday, December 18, 2025

Japan: App Marketplaces, External Payments, New Fee Structure

Apple:

Apple today announced changes impacting iOS apps in Japan to comply with the Mobile Software Competition Act (MSCA). These updates create new options for developers to distribute apps on alternative app marketplaces and to process app payments for digital goods and services outside of Apple In-App Purchase.

[…]

The MSCA’s requirements for alternative app marketplaces and app payments open new avenues for malware, fraud and scams, and privacy and security risks.

They just couldn’t help themselves.

For their iOS apps distributed on the App Store in Japan, developers will be able to include an alternative payment processing method in their app and/or link users to a website to complete a transaction.

These alternative payment options will always be presented alongside Apple In-App Purchase, so that users in Japan are clear on when they are transacting through Apple.

Juli Clover:

Apple has established a new fee structure in Japan, and fees are based on distribution and payment method. Apple says that fees will be the same or lower for 100% of developers in Japan.

Participants in the Small Business Program, Video Partner Program, and Mini Apps Partner Program will pay the reduced rate below. Subscriptions in apps maintained after the first year are also subjected to the lower fee. The Small Business Program includes developers that earn less than 1 million USD annually. Developers that earn more than that have to pay Apple's full commission rates.

  • App Store w/ In-App Purchase - Varies from 15% to 26%. 21% base fee, 5% payment processing fee. Base fee is 10% for program participants, and 5% fee remains the same.
  • App Store w/ Alt Purchase - Varies from 10% to 21%. 21% base fee, no payment processing fee. 10% for program participants.
  • App Store w/ Web Link - Varies from 10% to 15%. 15% Store Services Fee, 10% for program participants.
  • Alternative Marketplace - 5% Core Technology Commission.

Juli Clover:

iPhone and iPad users in Japan can download the alternative app marketplace from the AltStore website, and then use the AltStore to download apps without having to go through Apple’s App Store. Prospective AltStore users need to be physically located in Japan, and have a Japanese App Store account. Devices also need to be running iOS/iPadOS 26.2 or later.

Previously:

Update (2025-12-19): Malte Kirchner (via ednl):

On paper, many things look the same between Japan and the EU. But tone matters. The law passed in Japan in June 2024 relies more on dialogue than confrontation, is heard from Apple Park. The Japanese are concerned with data protection, security, and child protection for users. In Europe, they argue in Cupertino, the interests of a few large competitors are primarily being satisfied. This leads to a worse user experience and compromises in security, Apple is convinced.

What makes Apple conciliatory in Japan is likely the numerous exceptions and the bargaining chips that the company has there. Concerns about cybersecurity or child protection can override certain rules. For example, there are alternative app stores in Japan, but no complete sideloading. The requirements for interoperability also turn the European principle on its head: in Japan, this is available on request, while in Europe they want it "by design" – i.e., when new functions are launched. The European model is based on the fear that requests could be indefinitely postponed. Therefore, they want interoperability immediately. The Americans, on the other hand, see this as an obstacle to innovation and an expropriation of intellectual property, but also as a major security risk.

[…]

At least on the day of introduction, the Japanese conditions seem enviable from a European perspective. No threat of legal action, constructive discussions, and the regulator gets its functions, while new features are to be brought to Japan without delay – European customers undoubtedly wish for this too. However, it remains to be seen whether the situation in Japan will truly remain so harmonious and whether the law will prove to be a tame paper tiger if the regulated parties are too satisfied with it.

Update (2025-12-22): John Gruber (Mastodon):

Developers are allowed to offer lower prices in alternative payment methods. That strikes me as a decent, but not ideal balance. I think it’s fair for Apple to mandate that its own IAP be offered alongside any form of alternative payment within an app. But, as I’ve long advocated, links to the web — leaving the app for the system’s default browser — should be permitted without having to offer IAP too. But overall, where Japan landed is reasonable.

[…]

An Apple spokesperson confirmed that, in contrast with the DMA, the guidelines that accompany the MSCA provide more clarity on things like privacy, security, safety, and youth protection. (E.g. apps distributed outside the App Store in Japan still require age ratings. There’s no such requirement in the EU.)

[…]

It’s hard to find anything aside from small nits to complain about in the MSCA. It arguably gives Japanese users a better, more robust iOS experience than what Apple offers to the rest of the world.

Batch Delete in SwiftData

Fatbobman:

SwiftData provides a batch deletion API that is more modern and type-safe than its Core Data counterpart.

[…]

Note: Unlike the standard single-object deletion modelContext.delete(_ model: T), batch deletion is only applied to the database after save() is executed.

Coming from Core Data, this is really strange. With Core Data, NSBatchUpdateRequest and the other batch operations are completely separate from saving the context. This makes sense because they operate directly on the database rather than on the in-memory objects that are owned by the context.

I’m trying to wrap my head around what SwiftData is even doing that batch deletions happen on save. Is it queuing up a bunch of SQL to be executed along with the save? Why would anyone want this?

Going by what the documentation literally says, with it taking place after the save, it sounds like it even reorders operations. If I do a batch delete, then insert some objects, then save, will it delete the new objects (if they match the predicate) even though I intended the insert to happen after clearing out the old objects? Or does executing the batch delete eagerly fetch the IDs of the objects to be deleted and then it deletes them by ID later (when the predicate might no longer match)?

Either way, it seems confusing in the event that there are multiple batch deletes in sequence. The first one might affect which objects match the predicate of the second one.

Although Swift 6 and iOS 26 have brought many improvements, as of now, SwiftData natively supports only batch deletion. It does not yet provide native APIs for Batch Update or Batch Insert.

Previously:

Extended Attributes Flags in Tahoe

Howard Oakley:

When first introduced in Mac OS X, no provision was made for xattrs to have type-specific preservation, and that was added later using flags suffixed to the xattr’s name. For example, the com.apple.lastuseddate xattr found commonly on edited files is shown with a full name of com.apple.lastuseddate#PS to assign the two flags P and S to it, and the most recent xattr com.apple.fileprovider.pinned, used to mark files in iCloud Drive that have been pinned, has the two flags P and X assigned to it for a the full name of com.apple.fileprovider.pinned#PX.

[…]

It’s further complicated by a set of system tables for some standard xattr types that don’t have flags suffixed, but are treated as if they do.

[…]

When using standard commands such as cp, macOS will automatically apply these rules when deciding whether to preserve xattrs. However, using a command for a different intent, such as cp for backing up, won’t normally invoke the behaviour you might want.

Code using standard macOS file operations should follow the behaviour expected for its intent, and shouldn’t require any special handling of xattrs. Lower-level operations are likely to differ, though, and may require implementation of equivalent behaviours.

The xattr_intent_with_flags() function will tell you, given an intent and a set of flags, whether you should preserve the xattr.

Previously:

Wednesday, December 17, 2025

UserDefaults.register(defaults:) Footgun

Jeff Johnson (Mastodon):

“Every instance of UserDefaults shares the contents of the argument and registration domains.” In other words, the result of calling registerDefaults on the object returned by [NSUserDefaults initWithSuiteName:] is the same as calling registerDefaults on the object returned by [NSUserDefaults standardUserDefaults]! Yet the documentation for registerDefaults does not mention this fact.

How did this become a Link Unshortener bug? In the NSApplicationDelegate method applicationWillFinishLaunching, I call [NSUserDefaults initWithSuiteName:] and registerDefaults to register the default values of Link Unshortener settings. Then I check whether the app container settings need to be migrated. If migration is necessary, then I call [NSUserDefaults setObject: forKey:] on the group defaults, using [NSUserDefaults objectForKey:] from the app defaults. If the default key has never been set in the app defaults, then [NSUserDefaults objectForKey:] should return nil. Or so I thought! But at that point registerDefaults has already been called on the group defaults object, and the app defaults object shares the registration domain with the group defaults object, so [NSUserDefaults objectForKey:] returns a non-nil value, which gets saved in the group defaults.

Previously:

Music.app Shuffling

Adam Engst:

However, getting that playlist working this year proved intensely frustrating. Even though it contains over 300 songs, only a handful played when we asked Siri to shuffle the playlist on the HomePod. It made no sense—I could cause any song in the playlist to play on the HomePod from my iPhone, and the Music app had no problem continuing from one song to another as long as shuffle wasn’t turned on.

[…]

But wait! Isn’t there some other checkbox that might be related? I opened the Info window for one of the tracks that wouldn’t play and clicked through all the tabs. There it was in the Options tab: “Skip when shuffling.” I selected all the songs in the playlist, pressed Command-I to open an Info window that would apply to everything selected, and turned off “Skip when shuffling.” Voilà! My playlist started working correctly again.

[…]

But this raises a question. If you prefer to listen to holiday music only at the end of the year, how do you prevent it from playing at other times? I can imagine a range of approaches, including exclusionary playlists and separate music libraries, but they would require me to change how I interact with Apple Music for the rest of the year. Other techniques suffer from allowing holiday songs to be mixed in with other music.

I’ve been seeing some strange behavior recently when I tell the Music app to shuffle a particular artist. I would expect this to produce a random-seeming mix of all the songs I have by that artist. But often it actually plays one of the following:

Update (2025-12-18): Wayne Dixon:

I’ve been seeing an issue with shuffling myself. I’ll listen to a bunch of shuffled songs, switch to some other audio for a while and when I listen again, it will replay songs I’ve already heard.

Now, I don’t know if it’s strictly something that’s related to moving from my iPhone, to a HomePod, and then back again. It will continue what I was listening to on the HomePod, but after switching to other audio and then back again, it seems to jump back in the playlist.

iOS 26.3: Notification Forwarding in EU

Juli Clover:

iOS 26.3 adds a new “Notification Forwarding” setting that allows incoming notifications on an iPhone to be forwarded to a third-party device.

The setting is located in the Notification section of the Settings app under a new “Notification Forwarding” option. Apple says that notifications can only be forwarded to a single device at a time, so if Notification Forwarding is enabled with a third-party wearable, the Apple Watch won’t able to receive and display notifications.

Users can choose to have a device receive notifications only from selected apps rather than all apps, and notifications will include the name of the app and all content contained in the notification. This is a feature that is only available to those living in Europe.

It’s amazing how much iOS functionality now differs by region.

Previously:

Update (2025-12-18): Alex Barrientos:

This isn’t generous feature-giving—it’s regulatory compliance dressed up as user choice.

Nate:

It’s amazing too how spiteful Apple is. By nerfing Apple Watch they ensure this feature will never actually be useful. Even if it was limited to a single device at a time AND Apple Watch, then someone would build a “notification router” app that fanned out to all the other devices you care about.

Copyright © 2000–2026 Michael Tsai.