9to5Google:

Last year, Google announced that all Android 7+ devices can be used as two-factor authentication when signing into Gmail, Drive, and other first-party services. Most modern iPhones can now be used as a built-in phone security key for Google apps.

And:

A built-in phone security key differs from the Google Prompt, though both essentially share the same UI. The latter push-based approach is found in the Google Search app and Gmail, while today’s announcement is more akin to a physical USB-C/Lightning key in terms of being resistant to phishing attempts and verifying who you are. Your phone security key needs to be physically near (within Bluetooth range) the device that wants to log-in. The login prompt is not just being sent over an internet connection.

Feels like a step in the right direction, a tool to help stop SIM-swapping. Ultimately, I’d love all my log-in services to offer a setting that limited logins to Face ID only, with Face ID required to change that setting as well.

The op-ed is a long, logical walkthrough of the claims by Attorney General Barr and the counterclaim on the values of both privacy and encryption.

But at its heart:

Apple is no doubt looking out for its commercial interests, and privacy is one of its selling points. But its encryption and security protections also have significant social and public benefits. Encryption has become more important as individuals store and transmit more personal information on their phones — including bank accounts and health records — amid increasing cyber-espionage.

Criminals communicate over encrypted platforms, but encryption protects all users including business executives, journalists, politicians, and dissenters in non-democratic societies. Any special key that Apple created for the U.S. government to unlock iPhones would also be exploitable by bad actors.

If American tech companies offer backdoors for U.S. law enforcement, criminals would surely switch to foreign providers. This would make it harder to obtain data stored on cloud servers. Apple says it has responded to more than 127,000 requests from U.S. law enforcement agencies over the past seven years. We doubt Huawei would be as cooperative.

A worthy read.

FastCompany:

When I looked into the user interface of Mojo Vision’s augmented reality contact lenses, I didn’t see anything at first except the real world in front of me. Only when I peeked over toward the periphery did a small yellow weather icon appear. When I examined it more closely, I could see the local temperature, the current weather, and some forecast information. I looked over to the 9 o’clock position and saw a traffic icon that gave way to a frontal graphic showing potential driving routes on a simple map. At 12 o’clock, I found my calendar and to-do information. At the bottom of my view was a simple music controller.

This is a mock-up, not a shipping product, but still, an audacious concept.

In the coming decade, it’s likely that our computing devices will become more personal and reside closer to—or even inside—our bodies. Our eyes are the logical next stop on the journey. Tech giants such as Apple and Facebook are just now trying to build AR glasses that are svelte enough to wear for extended periods. But Mojo is skipping over the glasses idea entirely, opting for the much more daunting goal of fitting the necessary microcomponents into contact lenses.

I do believe the future will see more and more augmentation, tech that brings the human body across the chasm, towards robots that are themselves trying to become more human. Will we meet in the middle? Become one giant AI, discarding flesh and bone entirely?

Fascinating read. And worth noting that one of the principals in this project is Steve Sinclair, formerly of Apple.

Bloomberg:

Apple Inc. has engaged a specialist in drone and aviation law as a Washington lobbyist, suggesting the company is pushing further into the growing field.

The Cupertino, California-based tech giant retained Lisa Ellman, a parter at Hogan Lovells, to conduct the lobbying. Ellman leads the law firm’s Unmanned Aircraft Systems practice. She also co-founded the Commercial Drone Alliance and is working to expand the commercial drone industry, according to her biography online.

And:

The company used drones a few years ago to help it collect mapping data. In December, it met with regulators about a proposed law that would require drones to sport virtual license plates. The company also sells several drones from DJI through the Apple website and Apple retail stores.

And:

Apple has a team exploring satellites, a type of unmanned aircraft, and Ellman could assist in regulatory efforts that would need to be conducted to launch such an effort. Apple rivals, including Amazon.com Inc. and Alphabet Inc., have developed drones in recent years.

Drones are certainly a massive business, especially on the military side. Does this connect to Apple’s reported autonomous vehicle efforts? Does this simply fall under miscellaneous?

Variety:

Following an extensive review period, Apple will release one of its first-ever original films, “The Banker,” in theaters this March.

“We wanted to take the time to understand the situation at hand — and after reviewing the information available to us, including documentation of the filmmakers’ research, we’ve decided to make this important and enlightening film available to viewers,” a spokesperson for the tech company’s content arm Apple TV Plus told Variety.

The film was delayed from a planned January release after family members of one of the men represented in the film came forth with accusations of abuse at the hands of one of the film’s executive producers, who was also a family member.

This is great news. I’m really looking forward to this movie.

Bloomberg:

I am reminded of an article I wrote four years ago cautioning America’s leaders against making technology and security policy decisions for short-term gains without considering the second- and third-order implications down the road.

Unfortunately, the encryption debate has changed little since then. Law-enforcement agencies advocate for “extraordinary access” to encrypted data to aid investigations – claiming that Americans should accept the security risks inherent in providing this backdoor to protected communications. Meanwhile, technology companies defend the use of end-to-end and device encryption as a key protection against cyberthreats. Then, as now, encryption’s advocates have the stronger argument.

This is a piece from late last year but it has resurfaced in light of recent events. It’s also by a man I like, admire, and greatly respect (even if I disagree with him on occasion) and a man who knows more about the topic than any of us ever will – General Michael Hayden, former director of both the National Security Agency and the Central Intelligence Agency.

Nick Heer, on the FBI asking Apple for a backdoor version of iOS:

At no point — then or now — has Cook or anyone at Apple publicly confirmed how such a backdoor may be installed, or if it’s even possible. Presumably, it would use the iOS update mechanism, but how could permission be granted if the passcode to the iPhone isn’t known?

Nick then takes a Mac with a clean Catalina install, and an iPhone that has never been connected to that Mac, creating a simulation of a stolen, locked iPhone. He then installs an iOS update on that iPhone, all done without entering a passcode.

That said:

To be clear, my iPhone still prompted for its passcode when the update had finished its installation process. This did not magically unlock my iPhone. It also doesn’t prove that passcode preferences could be changed without first entering the existing valid passcode.

But it did prove the existence of one channel where an iPhone could be forced to update to a compromised version of iOS. One that would be catastrophic in its implications for iPhones today, into the future, and for encrypted data in its entirety. It is possible; it is terrible.

Does Nick’s experiment show a weakness in the process? Could a compromised iOS update be added which disables the passcode?

Certainly interesting. Taking this with a grain of salt, at least until someone follows this all the way through and unlocks an iPhone using this approach. Which I hope never happens.

Headline says it all. Gonna post an MKBHD video in a bit that asks the question, why all the clones and AirPods wannabes?

Follow the money. Amazing business.

Hollywood Reporter:

The Apple streamer has picked up the documentary about the legendary hip-hop group directed by Spike Jonze and featuring Grammy Award-winning bandmembers Mike Diamond and Adam Horovitz talking about their music career and 40-year friendship.

And:

A special cut of the feature documentary will open exclusively in select Imax theaters for a limited run from April 3, before the film debuts globally on Apple TV+ on April 24.

Looking forward to this one. Hoping there’s a good amount of focus on Def Jam and Rick Rubin. From the Beastie Boys Wikipedia page:

Following the success of “Cooky Puss”, the Beastie Boys began to incorporate rap into their sets. They hired a DJ for their live shows, New York University student Rick Rubin, who began producing records soon thereafter. He formed Def Jam Recordings with fellow NYU student Russell Simmons, and approached the band about producing them for his new label.

As important a subject as the Beasties are, I think Rick Rubin is an even more important figure in the tree of musical history. Would love to see Apple produce a Rick Rubin doc as a follow-on.

Engadget:

As promised, Microsoft is officially releasing its Chromium-based Edge browser today, which is powered by the same engine that’s behind Google Chrome. Windows and Mac users can download and install the update manually, and automatic updates will start rolling out for Windows users next week.

I’ve been using the new Edge browser since last April, and while I’m also disappointed to see Microsoft cede more control of the web to Google, I can’t deny that it’s a far better experience than before. The revamped browser is fast and easy to use; I rarely run into compatibility issues with websites (since everyone tends to build for Chrome); and I found its privacy settings to be a big step forward for average consumers.

I’m going to try using it for the next week and see if I like it. How about you?

The Verge:

Twitter users have been asking for the option to edit tweets ever since the service launched in 2006, but the company has always prevaricated, saying it’s looking into the problem, or considering it deeply, or a hundred other ways of saying “please stop bothering us about this, please.”

Now, Twitter CEO Jack Dorsey has given perhaps the most definitive answer on the question to date. During a video Q&A with Wired, Dorsey was asked if there’ll be an edit button for Twitter in 2020. He replies, with a faint smile: “The answer is no.”

Good. Now stop asking about it. It’s a spectacularly bad idea for exactly the reasons mentioned in the story. If you need edits, use a full-featured Twitter client like Twitterrific or Tweetbot which allow you to “delete and edit” a tweet.

Macworld:

Tech companies are still investing huge amounts of time and energy in smart-home products, as the recent Consumer Electronics Show displayed. A year ago, Apple hired a new head of home products—but it hasn’t yet resulted in a lot of visible changes to Apple’s strategy.

The biggest move so far is Apple’s joining forces with its competitors to form an alliance to encourage smart-home interoperability. That’s a good start, and I’m hopeful that Apple can begin to push HomeKit forward in 2020.

No, Apple doesn’t need to build a security camera, or smart lock, or video doorbell, or thermostat. Those ancillary products are exactly the sort of thing that third-party hardware companies are great at. What Apple provides is intelligence at the very center of the experience—and that means the home and the home network.

I and others been saying this for years. It should have been the natural extension of Jobs’ vision for the home he put forward long ago at a Macworld Expo keynote. I think it’s a huge blind spot the company is bizarrely ignoring. Something as “simple” as the Apple TV combined with a HomePod that works as a TV soundbar has been talked about and lusted over. Why won’t/hasn’t Apple developed this idea further? I agree with Snell when he says, “The elimination of AirPort wasn’t a mistake. The real mistake was not replacing it with a next-generation product that could be the hub of a home network.”

Before you dive into Sam Henri Gold’s fantastic Unofficial Apple Archive (it’s a rabbit hole), take a minute to read Michael Steeber’s 9to5Mac introductory post.

Been watching this archive take shape over the years, have posted to it a few times as it’s evolved, glad to see the front door open.

Not useful for me, personally, but definitely interesting. More Terminal “defaults” magic.

Inflammatory headline aside, this New York Times piece is chock full of interesting quotes:

Executives at Apple have been surprised by the case’s quick escalation, said people familiar with the company who were not authorized to speak publicly. And there is frustration and skepticism among some on the Apple team working on the issue that the Justice Department hasn’t spent enough time trying to get into the iPhones with third-party tools, said one person with knowledge of the matter.

And:

The stakes are high for Mr. Cook, who has built an unusual alliance with President Trump that has helped Apple largely avoid damaging tariffs in the trade war with China. That relationship will now be tested as Mr. Cook confronts Mr. Barr, one of the president’s closest allies.

And:

At the heart of the tussle is a debate between Apple and the government over whether security or privacy trumps the other. Apple has said it chooses not to build a “backdoor” way for governments to get into iPhones and to bypass encryption because that would create a slippery slope that could damage people’s privacy.

And:

Bruce Sewell, Apple’s former general counsel who helped lead the company’s response in the San Bernardino case, said in an interview last year that Mr. Cook had staked his reputation on the stance. Had Apple’s board not agreed with the position, Mr. Cook was prepared to resign, Mr. Sewell said.

And:

Mr. Cook has made privacy one of Apple’s core values. That has set Apple apart from tech giants like Facebook and Google, which have faced scrutiny for vacuuming up people’s data to sell ads.

“It’s brilliant marketing,” Scott Galloway, a New York University marketing professor who has written a book on the tech giants, said of Apple. “They’re so concerned with your privacy that they’re willing to wave the finger at the F.B.I.”

And:

A Justice Department spokeswoman said in an email: “Apple designed these phones and implemented their encryption. It’s a simple, ‘front-door’ request: Will Apple help us get into the shooter’s phones or not?”

This is a giant issue. I don’t think there’s any way for a master encryption key to be created that won’t eventually get leaked or stolen.

If such a key was created, is there a case so important that would make putting that key in the hands of the world at large worth the risk? To me, that’s the heart of the dilemma.

Dave Bautista played Drax, arguably the most delightful character in Guardians of the Galaxy.

My favorite line:

Nothing goes over my head. My reflexes are too fast. I would catch it.

Great writing, but great acting brought it home.

LifeHacker:

We know—you’re too tech-savvy to be fooled by an online scam. But even the smartest among us can fall victim to internet trickery, and we’ve all got those friends and relatives who could use a little extra help with digital security.

The basic rule for surviving internet scams is simple: If it sounds too good to be true, it probably is. A little common sense goes a long way to realizing that you aren’t going to suddenly win the Spanish National Lottery when you didn’t even know you had a ticket.

Here’s our definitive guide to helping you (and your loved ones) stay safe online.

I’m sure no Loop readers would fall for any of these but this is a great article to pass along to those you know who may not be as technically literate.

I find text cursor placement in iOS 13 a vast improvement over the same in iOS 12. The team clearly recognized the problem of your finger blocking your target, giving you the ability to easily grab and drag the text cursor from place to place, making the “drag cursor” both large and a bit raised so your finger doesn’t get in your way.

As Benjamin Mayo points out in the video below, text selection is a different beast. I find this true, especially when you try to select text or place the cursor in the Safari address bar.

Watch, judge for yourself.

Input:

Earlier today Attorney General William Barr called on Apple to unlock the alleged phone of the Pensacola shooter — a man who murdered three people and injured eight others on a Naval base in Florida in December. Apple has responded by essentially saying: “no.”

I disagree with this characterization. Read Apple’s response. It’s more nuanced. If I had to capture it simply, I’d quote this paragraph:

We have always maintained there is no such thing as a backdoor just for the good guys. Backdoors can also be exploited by those who threaten our national security and the data security of our customers. Today, law enforcement has access to more data than ever before in history, so Americans do not have to choose between weakening encryption and solving investigations. We feel strongly encryption is vital to protecting our country and our users’ data.

Follow the headline link, read Apple’s response for yourself.

One of the first anomalies I came across in my life of Mac was that you could never quit the Finder. Everything else (mostly) responded to Command-Q, but the Finder was backstopped.

But I digress.

One of the apps that I almost never quit is Safari. If I quit, it’s usually because something went wrong and I need a fresh start. But that rarely ever happens. Safari has gotten better and better over the years at isolating problems, meaning I can usually solve any issues by closing a problematic tab.

Like Caps-lock, the Safari Command-Q is ripe for replacement. John Gruber:

I don’t accidentally quit Safari often, but it does happen. And it’s mildly annoying every time. The last time it happened, I resolved to fix it myself. That’s where my AppleScript comes in.

AppleScript is free, this is worth a look, especially if you’ve never used AppleScript before.

As John footnotes, there is another, simpler solution:

If the only thing you want to do is disable ⌘Q in Safari (or any other shortcut, in any other app, for that matter), the easiest thing to do is use the Keyboards panel in System Prefs (then go to Shortcuts: App Shortcuts) to either set Safari’s shortcut for File → Quit to nothing at all, or to something you won’t hit accidentally, like, say, Control-Option-Shift-Command-Q. Almost no work at all, no third-party software required.

I like the experiment. If you do take it on, be sure to read Gruber’s article in full.

Via MacRumors, RTINGS.com published updates to their AirPods Pro analysis, in response to firmware update 2C54.

Follow the headline link and search for the word Update. There are a number of them, all dated 1/10/2020.

The most significant negative:

After updating to Firmware 2C54, we retested the headphones and our results showed a fairly significant drop in isolation performance, primarily in the bass-range. This means that with ANC turned on, these headphones won’t do nearly as good a job blocking out the low engine rumbles of planes or buses as they did before this update.

From the MacRumors post:

Apple pulled the 2C54 firmware only days after its release, so it is presumably working on the issues described. You can tell what firmware version you have by going to Settings -> General -> About -> AirPods Pro.

UPDATE: A Loop reader offered this comment:

In my opinion, the difference is huge! I initially thought my AirPods were not working well. Many times a day I would me moving them in my ears to see if I could get a better fit. Grabbed my dad’s AirPod Pros, and the noise cancellation was amazing.

Today with the news, I checked my AirPods, and saw I had the bad update. Checked my dad’s AirPods, his still running the old firmware. Re-did my Ear Tip Fit Test using my AirPods and it now says that it’s not a perfect fit. When I bought it, it said it was.

Anecdotal, but from a source who knows this space. I hope Apple fixes this.