The below is an off-site archive of all tweets posted by @mjtsai ever

November 2019

Posts updated today:

Hardened XPC Services
mjtsai.com/blog/2019/11/0…

Apple Notes and iCloud… twitter.com/i/web/status/1…

via Tweetbot for Mac

@NSExceptional That’s discussed in the enhancement proposal. I think using standard names makes sense.

via Tweetbot for Mac in reply to NSExceptional

Posts updated today:

iOS 13.2 Killing Background Apps More
mjtsai.com/blog/2019/10/3…

RunningBoard in Catalina… twitter.com/i/web/status/1…

via Tweetbot for Mac

Firefox Making DNS-over-HTTPS the Default: mjtsai.com/blog/2019/11/0…

via IFTTT

Limits to Apple’s Butterfly Keyboard Repair Program: mjtsai.com/blog/2019/11/0…

via IFTTT

Posts updated today:

Hardened XPC Services Don’t Prompt
mjtsai.com/blog/2019/11/0…

“Real” Photoshop for iPad… twitter.com/i/web/status/1…

via Tweetbot for Mac

They Might Never Tell You It’s Broken: mjtsai.com/blog/2019/11/0…

via IFTTT

@lapcatsoftware @rosyna The contacts service isn’t getting compromised. GitFinder has separate services for Git, Ke… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to lapcatsoftware

@lapcatsoftware @rosyna My point is that requiring the app entitlement makes the app less secure than if access wer… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to lapcatsoftware

@rosyna Yes, my point is I don’t see why the TCC ones are treated differently than network and file access.

via Tweetbot for Mac in reply to rosyna

@rosyna What I mean is that if the user has allowed app B to control app A and allowed app C to control app B, then… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to rosyna

@rosyna I still conclude from this that: 1. This sort of transitive declaration is completely at odds with privileg… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to rosyna

@rosyna I’m assuming this doesn’t protect against the AppleScript thing.

via Tweetbot for Mac in reply to rosyna

@rosyna “Never asked for”? Are you thinking of a model where an app embeds a service written by someone else and th… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to rosyna

@rosyna I mean that the same logic would apply to other entitlements, like network stuff. I’ve isolated network acc… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to rosyna

@rosyna I thought XPC was supposed to help here. Without the entitlement, GitFinder can only do contacts operations… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to rosyna

@rosyna But, going with this logic for the moment, why wouldn’t this also apply to other entitlements?

via Tweetbot for Mac in reply to rosyna

@rosyna Whereas if GitFinder has the entitlement and gets compromised, we have the same problem…

via Tweetbot for Mac in reply to rosyna

@rosyna 3. I thought apps weren’t supposed to be able to invoke other apps’ XPC services.

via Tweetbot for Mac in reply to mjtsai

@rosyna This doesn't make sense to me. 1. Isn’t the com.apple.security.personal-information.addressbook entitl… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to rosyna

Siri Stores Encrypted E-mails in Plain Text: mjtsai.com/blog/2019/11/0…

via IFTTT

Archive Team’s Yahoo Groups Rescue Effort: mjtsai.com/blog/2019/11/0…

via IFTTT

Don’t Interrupt the Installation: mjtsai.com/blog/2019/11/0…

via IFTTT

Hardened XPC Services Don’t Prompt: mjtsai.com/blog/2019/11/0…

via IFTTT

Catalina No Longer Caches Shared Photos Locally: mjtsai.com/blog/2019/11/0…

via IFTTT

Posts updated today:

Perfectly Cropped
mjtsai.com/blog/2019/10/2…

WebView and UIWebView Deprecated in Favor of WKWe… twitter.com/i/web/status/1…

via Tweetbot for Mac

@adamengst @betalogue @Apple It seems like we still don’t have an answer for why the installers care about the curr… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to adamengst

@rosyna Yeah, I can see the availability of the base type. Just wondering whether the APIs they’d need are some of… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to rosyna

@rosyna Thanks. Do you know whether those were available in 2014?

via Tweetbot for Mac in reply to rosyna

Dell UltraSharp 27 4K PremierColor Monitor: mjtsai.com/blog/2019/11/0…

via IFTTT

Posts updated today:

Xcode 11.2 and XIBs With UITextView
mjtsai.com/blog/2019/11/0…

iOS 13.2… twitter.com/i/web/status/1…

via Tweetbot for Mac

Posts updated today:

Electron Apps Rejected From the Mac App Store
mjtsai.com/blog/2019/11/0…

Twitter’s Ban on Poli… twitter.com/i/web/status/1…

via Tweetbot for Mac

@tylerhall I’ve seen a couple people report massive photo deletions, but I don’t know the details.

via Tweetbot for Mac in reply to tylerhall

@anatomisation You’re right; I don’t think the Mozilla post actually says that.

via Tweetbot for Mac in reply to anatomisation

@anatomisation I’m quoting the assertion from Mozilla. I haven’t had a chance to dig in myself. Based on the articl… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to anatomisation

@anatomisation Yeah, I took it to refer to that family of APIs.

via Tweetbot for Mac in reply to anatomisation

@anatomisation The original post and my link mention CALayerHost, which as far as I can tell is undocumented.

via Tweetbot for Mac in reply to anatomisation

Electron Apps Rejected From the Mac App Store: mjtsai.com/blog/2019/11/0…

via IFTTT

Apple TV, Apple TV, Apple TV, and Apple TV+: mjtsai.com/blog/2019/11/0…

via IFTTT

@lorentey Awesome. And that’s a great tip that I wish I’d known at the time.

via Tweetbot for Mac in reply to lorentey

@lorentey But I think I should be safe starting out with Dictionary now. Setting through multiple levels does the right thing, right?

via Tweetbot for Mac in reply to mjtsai

@lorentey Agreed. I guess the question is whether it’s possible to paint yourself into a corner before you understa… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to lorentey

@lorentey Yep, I linked that in the post. It’s great. I guess what I’m saying is that there are layers of magic tha… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to lorentey

@lorentey Yeah, my understanding is that actually returning the struct like in `d[k] = doSomething(d[k])` *will* cr… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to lorentey

@lorentey I actually still find the rule a bit confusing because in my head the Set struct is being copied when it’… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to lorentey

@lorentey I guess you’re saying that the “simple rule” is *also* part of the contract, and so it’s outside of the a… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to lorentey

@lorentey I see CoW as part of the value types abstraction because clients want to assume it’s not doing a full cop… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to lorentey

Efficiently Mutating Nested Swift Data Structures: mjtsai.com/blog/2019/11/0…

via IFTTT

Posts updated today:

iOS 13.2 Killing Background Apps More
mjtsai.com/blog/2019/10/3…

Tylenol Moment for Apple’s La… twitter.com/i/web/status/1…

via Tweetbot for Mac

Xcode 11.2 and XIBs With UITextView: mjtsai.com/blog/2019/11/0…

via IFTTT

@agilethumbs Are the US numbers different? Here, I see tons of Fitbits and Apple Watches and pretty much nothing else.

via Tweetbot for Mac in reply to agilethumbs

Posts updated today:

Beware Apple Security Certificates
mjtsai.com/blog/2019/10/1…

HKmap Live Removed From the App… twitter.com/i/web/status/1…

via Tweetbot for Mac

@UINT_MIN Thanks for all you’ve done, and good luck.

via Tweetbot for Mac in reply to UINT_MIN

Tylenol Moment for Apple’s Laptop Keyboards: mjtsai.com/blog/2019/11/0…

via IFTTT

Safari Safe Browsing, China, and Privacy: mjtsai.com/blog/2019/11/0…

via IFTTT

@Ramshandilya It told me I didn’t have enough space to expand the .xip when I had 100 GB free. Had to restart the Mac.

via Tweetbot for Mac in reply to Ramshandilya

@mpweiher @depth42 If I understand correctly: (1) one should make protocols “class” by default, to avoid this overh… twitter.com/i/web/status/1…

via Tweetbot for Mac in reply to mpweiher