Old school Apple story, posted on Folklore.org by Andy Hertzfeld:

In 1980, a company called Franklin Computer produced a clone of the Apple II called the Franklin Ace, designed to run the same software. They copied almost every detail of the Apple II, including all of its ROM based software and all the documentation, and sold it at a lower price than Apple. We even found a place in the manual where they forgot to change “Apple” to “Ace”. Apple was infuriated, and sued Franklin. They eventually won, and forced Franklin to withdraw the Ace from the market.

Even though Apple won the case, it was pretty scary for a while, and it wasn’t clear until the end that the judge would rule in Apple’s favor.

This is where our story starts. Follow the link to see what Apple did to prevent someone from copying the Macintosh ROM. Damn clever.

Ankur Thakur, iDownloadBlog:

This tutorial shows you how to delete your Apple ID or iCloud account. But first, it’s essential to know about the consequences of such action, what will stop working, and what you must do before deleting your Apple ID to prevent your devices from becoming unusable!

Why delete your Apple ID?

• You have a second Apple ID and wish to stop using the first one.
• You migrated to non-Apple platforms like Android or Windows PC and no longer use or plan to use Apple devices.
• You have privacy concerns with Apple.

This is serious business. The consequences are severe. Measure twice, cut once, caveat emptor, etc.

But if you have a good reason, read through Ankur’s tutorial, proceed with caution.

Apple:

Epic in scope and intimate in tone, the story begins with a forbidden love and crescendos into a saga that journeys between Korea, Japan and America to tell an unforgettable story of war and peace, love and loss, triumph and reckoning.

An 8-episode series, premiering on March 25th with 3 episodes, then 1 new episode a week.

Watch the trailer, embedded below. Based on The New York Times bestselling book. Looks fantastic.

Josh Centers:

That gave me an idea: what if I put my recommendations on a website and sent people to that? That idea was the genesis of my new Apple Buying Advice site, which isn’t affiliated with TidBITS in any way.

And:

We offer expert recommendations to ensure you buy the right product at the right time. Whether it’s an iPhone, iPad, Mac, Apple Watch, or AirPods, we can help you make the right choice. These are the very same recommendations we would give to friends and family.

And:

The site is monetized through affiliate links, largely to Amazon, and I get a small commission when you make a purchase through them. But the affiliate commissions don’t influence my recommendations.

Check out the site (early days still), consider subscribing to the newsletter (email field and subscribe button on main page.)

Reuters:

Dutch police ended a hostage taking in an Apple flagship store in Amsterdam after a man armed with two guns held at least one person hostage for hours, police said on Wednesday.

This situation played out late last night.

This tweet shows the hostage and the hostage taker:

Op een foto in handen van het Het Parool is de gijzelnemer, gehuld in een camouflagepak, samen met de gijzelaar te zien. Ze zitten tegenover elkaar, de gijzelaar lijkt geboeid met zijn handen achter zijn rug. https://t.co/qB9pNCU7J9 pic.twitter.com/QJZ0A09haw

— Het Parool (@parool) February 22, 2022

The caption, translated from Dutch:

A photo in the hands of Het Parool shows the hostage taker, dressed in a camouflage suit, together with the hostage. They sit opposite each other, the hostage appearing handcuffed with his hands behind his back.

Another tweet shows the hostage taker wearing what looked like a bomb vest.

Here’s how it ended:

“We managed to end the situation by hitting the hostage taker with a car when he ran outside,” police said on Twitter, adding that the man was being treated for serious injuries.

And:

The situation ended when the hostage, reportedly a 44-year old British man, fled from the building when a police robot delivered water at the door of the store at the request of the hostage taker.

The hostage taker ran after the man and was quickly hit by the car.

The video of this ending is the first part of this I saw last night, before all the details emerged. Still putting all the pieces together.

Wordle has a flipped a switch for me. I’m enjoying short, free, non-invasive puzzlers.

Neumorphic Knot is a fun, easy-to-play challenge. Solve a level, move on to the next one.

The only nit I have is the game mechanic itself. Once you figure it out (click on a puzzle piece, then click on an adjacent piece to swap them — The shaded piece is fixed in place, unswappable) it’s smooth sailing.

Have other similar games you love? Send ’em at me, please and thank you.

Reuters:

A single activist helped turn the tide against NSO Group, one of the world’s most sophisticated spyware companies now facing a cascade of legal action and scrutiny in Washington over damaging new allegations that its software was used to hack government officials and dissidents around the world.

It all started with a software glitch on her iPhone.

And:

A mysterious fake image file within her phone, mistakenly left behind by the spyware, tipped off security researchers.

Interesting read. Were it not for that mysterious fake image, we still might not know about this.

Bowdoin College:

Bowdoin College’s groundbreaking Digital Excellence Commitment (DExC) will provide every current student and all future students with a suite of the latest Apple technology and access to a full range of course-specific software designed to advance learning, inspire innovative teaching, and create digital equity across the student body in the use of tools essential for success in the twenty-first century.

That’s an M1 MacBook Pro.

The effort started a few years ago:

In summer 2020, the College issued each student an iPad Pro Wi-Fi + Cellular (activated and funded by the College for those students who had internet connectivity needs), an Apple Pencil, and an Apple Magic Keyboard.

From the FAQ:

students will have the option to pay $1 to keep their equipment when they graduate.

Nice.

Nice origin story. Amazingly, Daring Fireball has been a going concern for 20 years now.

Filipe Espósito, 9to5Mac:

Safari remains the second most-used desktop web browser in the world as of January 2022, but two of its competitors are close to taking over second place this time around.

While Safari is used by 9.84% of desktop users, Microsoft Edge is right behind with 9.54% market share. Firefox, which had only 8.1% share in January 2021, has gained new users during the past few months and now has 9.18% of the desktop market share. Unsurprisingly, Google Chrome is still in first place with 65.38% of the share.

And:

While StatCounter or even Apple doesn’t provide details on the reason why Safari is losing users, we can easily make a few assumptions about it. Safari is the default web browser for Apple devices such as the iPhone and the Mac, which certainly contributes to it being the second most used web browser worldwide.

Last year, Apple introduced a completely redesigned version of Safari that unified the address bar with the tab bar. However, the update left some users unhappy, which made Apple revert Safari back to its old design and make the new interface optional for users. This, of course, wasn’t enough to stop many users from switching to other web browsers.

Not sure how big a deal this is. If you look at the StatCounter chart embedded in the 9to5Mac post, the lines are pretty flat. Chrome absolutely dominates, and the rest of the players, including Safari, sit way down in the mix. If I did not read the article and just looked at the chart, I’d say any movement is negligible, in the noise.

Personally, I trust Safari more than other web browsers, both with privacy and with behaving properly in the macOS ecosystem (just search for “chrome Mac battery drain” for one example). Safari is not perfect, obviously, but it works really well for me.

Rene Ritchie had the chance to interview Sumbul Desai, MD, Vice President of Health at Apple.

The entire interview is interesting, especially the way Rene lays out detailed Health tracking scenarios, pulls together background info/footage as lead-ins that allow Dr. Desai to lay out Apple’s Health efforts.

Fabian Braunlein, Positive Security (via AppleInsider):

Recently, reports about AirTags being used to track other people and their belongings were becoming much more frequent.

In one exemplary stalking case, a fashion and fitness model discovered an AirTag in her coat pocket after having received a tracking warning notification from her iPhone. Other times, AirTags were placed in expensive cars or motorbikes to track them from parking spots to their owner’s home, where they were then stolen.

Lots of press on this issue, and this response from Apple, titled An update on AirTag and unwanted tracking, wherein Apple lays out their work with safety groups and law enforcement agencies to “update AirTag safety warnings and help guard against further unwanted tracking.”

Back to Fabian’s headline linked blog post:

I might be slightly more familiar with AirTags than the average hacker (having designed and implemented a communication protocol on top of Find My for arbitrary data transmission), but even so I was quite surprised, that when reading Apple’s statement I was able to immediately devise quite obvious bypass ideas for every current and upcoming protection measure mentioned in that relatively long list.

The following section will discuss each anti-stalking feature and how it can be bypassed in theory. Thereafter I will describe how I implemented those ideas to build a stealth AirTag and successfully tracked an iPhone user (with their consent of course) for over 5 days without triggering a tracking notification.

There’s a market for stalking devices. Apple did not invent the concept. But consider:

Apple needs to incorporate non-genuine AirTags into their threat model, thus implementing security and anti-stalking features into the Find My protocol and ecosystem instead of in the AirTag itself, which can run modified firmware or not be an AirTag at all (Apple devices currently have no way to distinguish genuine AirTags from clones via Bluetooth).

Hoping the AirTag team digs into this post.

Apple:

Apple Original Films today announced that audience favorite “CODA” will be re-released in theaters for a limited theatrical run following its history-making Academy Award nominations, including a nomination for Best Picture. The film will be presented in major cities across the U.S. and London, free of charge and with open captions.

The free showings are this weekend only, starting Friday. Follow this link to find the theater nearest you.

And if you are in Los Angeles:

Audiences at a special showing in Los Angeles will have the opportunity to be part of a live Q&A with the cast and writer/director Siân Heder, which will have translators in ASL.

Since the showings are free, presumably Apple has to pay the theaters for the privilege.

Interesting that Apple chose this weekend for the showings. It’s a month until Oscar voting closes (March 22nd). But CODA is also nominated for 12 Screen Actors Guild (SAG) awards, and SAG voting closes at the end of this weekend. Two birds. One stone.

Absolutely love this Twitter thread from 9to5Mac:

What's a hidden Mac trick more people should know about?

— 9to5Mac.com (@9to5mac) February 16, 2022

So many great Mac tips and tricks. Just start scrolling. And if you have a Mac tip that’s not represented already, reply to the tweet to add it.

If you find it hard to search for content on Netflix, follow the headline link and start scrolling through the list of genre/subgenre codes (like 3269, which is the code for Independent thrillers).

Once you find a genre that interests you, click on the link (or go to https://netflix.com/browse/genre/XXX, where XXX is the genre code — In the example above, you’d go to https://netflix.com/browse/genre/3269).

Cool.

Wesley Hilliard, AppleInsider:

Your iPhone, iPad, and Mac all have a free password manager made by Apple called iCloud Keychain. Here’s how to use it, set up two-factor authentication, and never have to remember a password again.

Nice little exploration of Apple’s updated password management process. If you use Keychain Access, you definitely need to read this.

Anthony Chavez, VP, Product Management, Android Security & Privacy at Google:

Currently over 90% of the apps on Google Play are free, providing access to valuable content and services to billions of users. Digital advertising plays a key role in making this possible. But in order to ensure a healthy app ecosystem — benefiting users, developers and businesses — the industry must continue to evolve how digital advertising works to improve user privacy.

Can’t help but be reminded of the quote, “If you are not paying for it, you’re not the customer; you’re the product being sold.”

The quote is often attributed to Steve Jobs, but I believe the original lies here.

Today, we’re announcing a multi-year initiative to build the Privacy Sandbox on Android, with the goal of introducing new, more private advertising solutions. Specifically, these solutions will limit sharing of user data with third parties and operate without cross-app identifiers, including advertising ID. We’re also exploring technologies that reduce the potential for covert data collection, including safer ways for apps to integrate with advertising SDKs.

From the section titled, “Blunt approaches are proving ineffective”:

We realize that other platforms have taken a different approach to ads privacy, bluntly restricting existing technologies used by developers and advertisers. We believe that — without first providing a privacy-preserving alternative path — such approaches can be ineffective and lead to worse outcomes for user privacy and developer businesses.

Seems pretty clear that Chavez is referring to Apple here. Blunt? Yes. Ineffective? Hardly. Just ask Facebook.

Google’s “ineffective” claim comes from this study, with the title “Effectiveness of Apple’s App Tracking Transparency”. Feel free to read it, but you might first click through to the company page, where they hawk a pair of privacy products of their own: Firewall and Secure Tunnel VPN. Free and open source, but with some in-app purchases:

• One Month of Lockdown VPN — $8.99
• One Year of Lockdown VPN — $59.99
• One Month of Lockdown VPN Pro — $11.99
• One Year of Lockdown VPN Pro — $99.99

Not judging the products (I haven’t used them), but feels a little disingenuous for Google to base their “ineffective” claim on a study so closely tied to an app designed to capitalize on that claimed ineffectiveness.

While we design, build and test these new solutions, we plan to support existing ads platform features for at least two years, and we intend to provide substantial notice ahead of any future changes.

So no privacy for at least two years. Got it.

Chance Miller, 9to5Mac:

Apple today released the third betas of macOS Monterey 12.3 and iPadOS 15.4. These updates contain the long-awaited Universal Control feature, and today’s macOS Monterey 12.3 beta continues to iterate on the feature — specifically in regard to controls in System Preferences.

Follow the headline link, scroll through the images to see the latest iteration of the Universal Control settings. These controls are easier to find, more obvious.

Can’t wait until Universal Control hits the public, non-beta releases.

Antoinette Siu, The Wrap:

> TikTok can circumvent security protections on Apple and Google app stores and uses device tracking that gives TikTok’s Beijing-based parent company ByteDance full access to user data, according to the summaries of two major studies obtained by TheWrap that appear to confirm longstanding concerns raised by privacy experts, like it Edmonton, about the popular video-sharing app. > > The studies, conducted by “white hat” cybersecurity experts that hack for the public good, were completed in November 2020 and January 2021. TheWrap verified the studies and confirmed their conclusions with five independent experts. > > When asked by TheWrap, reps for TikTok — whose parent company ByteDance has had ties to the Chinese government — declined to confirm or deny the validity of the research.

Most alarming of all:

> The summaries of the studies, shared exclusively with TheWrap, suggest that TikTok is able to avoid code audits on the Apple and Google app stores. More alarmingly, the research found that TikTok is capable of changing the app’s behavior as it pleases without users’ knowledge and utilizes device tracking that essentially gives the company and third parties an all-access pass to user data. This is highly unusual and exceeds the abilities of U.S.-based apps such as Facebook, Twitter and other social media platforms.

And:

> Examining the backend, researchers also found that the app essentially acts like a web browser. It uses a JavaScript bridge, the programming language for the web, to directly pull the app from TikTok’s servers when it’s launched. This makes the security of the app hard to assess, because that can keep changing, according to Lockerman at Conquest Cyber. Theoretically, it also means TikTok can change its app behavior dynamically or test certain things on the fly without pushing an update to users.

If true, how is this possible? How does the TikTok app get through the App Store review process?

> A spokesperson for TikTok declined to address the studies directly, but told TheWrap that the company adheres to app store policies, adding that its product meets information security standards in the U.S., the U.K., Ireland, India and Singapore and recently received certification by the ioXt Alliance for meeting standards and commitments to cybersecurity and transparency. In fact, TikTok said it works with the ethical hacker community and researchers through a program called HackerOne to test its product.

So is this much ado about nothing? Or is TikTok getting away with privacy-evading practices? And, if the latter, how is this getting past App Store reviewers?

Heather Kelly, Washington Post:

Starting this week, Uber passengers can see what ratings drivers such as Clarke have left them, though they are kept anonymous for everyone’s safety. In the past, riders were able to see an average score based on all past trips, for example 4.25 stars. The new setting, buried deep in the Uber app, breaks it down so you can see totals for how many drivers assigned you 5 stars or 4 stars, all the way down to a 1-star rating. The chart only shows your last 500 trips.

When Heather says “buried deep in the Uber app”, she’s not kidding. If you want a challenge, launch the app (make sure you have the latest update) and try to find your ratings.

Even following Heather’s instructions, it was not easy to find. I laid out the steps as a list, tweeted here, might make it a bit easier to find.