Everything Apple announced: Tor-ish Safari anonymization. Cloaked iCloud addresses. Cloud CI/CD. And more
- Reference: 1623111008
- News link: https://www.theregister.co.uk/2021/06/08/apple_2021_wwdc/
- Source link:
Expectations were lower than those at last year's event, which heralded [1]a major platform architecture shift from Intel processors to Arm-compatible chips dubbed Apple Silicon. Apple pundits had anticipated an Arm-based MacBook Pro, yet no word of next-generation Apple Silicon machines surfaced.
Before a virtual audience, like last year thanks to the COVID-19 pandemic, CEO Tim Cook presided over a tag team of executives, engineers, and product managers extolling the virtues of Apple software, hardware, and services. They brought news of iOS 15, iPadOS 15, watchOS 8, macOS 12 (Monterey), [2]health app enhancements and assorted developer tooling changes.
You'll fall for iOS
When [3]iOS 15 arrives this fall, it will include: improved FaceTime audio options, in the form of spatial audio, voice isolation and wide spectrum filtering; Android and Windows support for FaceTime in Chrome or Edge browsers; and Share Play – a way to share audio, video, and your screen during FaceTime calls that will also be accessible for third-party apps via an API.
iOS 15 will also bring enhancements to Apple's Messages app, making it capable of sharing content like photos, news articles, and playlists in conjunction with other iOS apps like Photos, News, and Music.
[4]
The Notification system in iOS 15 has been redesigned so notification messages can be viewed in summary mode. There's a new feature called Focus that allows users to filter notifications and apps to minimize distractions. Users, for example, can create Focus configurations for specific contexts, like work or family time, that make only certain notifications and apps available.
[5]
[6]
Apple, long a laggard in AI, has brought text and image recognition tech to its Camera app and Spotlight search service. iOS 15 users will be able to search for text in images via a feature called Live Text and query recognized objects in pictures using Visual Look Up.
Photos meanwhile will see its auto-composition feature called Memories improved and integrated – like it or not – with Apple Music to provide a soundtrack for photo-montage presentations. And Safari is getting an interface redesign that rearranges the tab bar and lets Tab Groups be saved and shared across your iPhone, iPad, and Mac.
[7]
The most significant news about Safari, however, came during a portion of the presentation focused on developers. Safari browser extensions, after the forthcoming software releases, will function on iOS-based mobile devices – opening the door to content blocking and privacy extensions that operated previously only on macOS. These extensions will even function in Apple's Mail app.
[8]Can a 21.5-inch iMac beat the latest-and-greatest M1 model in performance? Kinda
[9]iFixit voids yet another warranty tearing down the 12.9-inch M1 iPad Pro
[10]Apple settles with student after authorized repair workers leaked her naked pics to her Facebook page
[11]Apple: We didn't take commission on 90% of App Store sales and billings
iOS 15 expands compatibility with digital keys for vehicles and hotel rooms and later this year will add support for government IDs in Apple Wallet.
"This fall, you'll just scan your driver's license or state ID in participating US states," said Jennifer Bailey, VP of internet services and Apple Pay, during the keynote. "It's that easy. Your ID information is now in Wallet, encrypted and safely stored in the Secure Element, the same hardware technology that makes Apple Pay private and secure."
The first place this will be usable, said Bailey will be at TSA checkpoints. There is another way to look at this...
Oh, hey, an Apple event! Looks like Apple Wallet is adding the ability to unlock doors and hold your government ID, realizing my dream of only having to lose a single device to lock myself out of my hotel, home, and office and put myself on a no fly list. — Pinboard (@Pinboard) [12]June 7, 2021
Privacy for some
iOS 15, iPadOS 15, macOS Monterey, and watchOS 8 also [13]boast various privacy improvements. For instance, a feature called Hide My Email allows a user to generate random @icloud.com email addresses, and have these forward to their main iCloud inbox. These random addresses can be used for account sign-ups so that if said addresses leak to spammers or are misused, your actual email address is kept a secret and safeguarded, and the spam can be filtered out.
"Built directly into Safari, iCloud settings, and Mail, Hide My Email also enables users to create and delete as many addresses as needed at any time, helping give users control of who is able to contact them," Apple added in the above link.
Then there's the Private Relay system, which encrypts and bounces your Safari connections between relays in Apple's iCloud so that your traffic appears from a public IP address that isn't your own. This should anonymize you as far as any website is concerned, until you identify yourself to that site, of course. It all sounds a bit like [14]Tor except that Apple controls all the nodes, which means in theory it could deanonymize you if it wanted through various analysis. Yet, Apple swears it can't do this and snoop on you while using Private Relay. It remains to be seen if this is a viable Tor alternative or just a fancy VPN.
[15]
The iGiant's marketing blurb reads:
When browsing with Safari, Private Relay ensures all traffic leaving a user’s device is encrypted, so no one between the user and the website they are visiting can access and read it, not even Apple or the user’s network provider. All the user’s requests are then sent through two separate internet relays. The first assigns the user an anonymous IP address that maps to their region but not their actual location. The second decrypts the web address they want to visit and forwards them to their destination.
This separation of information protects the user’s privacy because no single entity can identify both who a user is and which sites they visit.
"We are introducing a new service called Private Relay," explained Apple engineer Mike Abbott. "It lets you browse with Safari in an even more secure and private way. And the way it works is really cool.
"The traffic leaving your device is encrypted, so no one can intercept and read it. Then all the requests are sent through two separate internet relays. It's designed so that no one, including Apple, can see both who you are and what sites you're visiting, and it does all this without compromising performance."
Though we note Private Relay won’t work in Belarus, Colombia, China, Egypt, Kazakhstan, Saudi Arabia, South Africa, Turkmenistan, Uganda, nor the Philippines.
Apple says these "premium" features – Hide My Email, Private Relay, and more, such as an expanded HomeKit Secure Video support – are part of its new iCloud+ service, which does't cost anything extra though you will need to have an iPhone or iPad with an A12 chip or better, or a Mac made in 2018 or later.
The mobile operating systems will also include App Privacy Reports that document how apps utilize user-granted permissions like location and microphone access, and will specify network addresses used by apps. This will make privacy-invading SDKs in apps much more visible.
The update includes assorted app improvements, to Maps, Weather, Notes, and Translate, and to various Accessibility features.
[16]iPadOS 15 brings various features for better integrating workflows across iPhones, iPads, and Macs. The Universal Control feature, for example, lets a single keyboard-mouse set work across a Mac and iPad. And Widgets can be installed alongside apps on Home Screen pages.
And [17]watchOS 8 will add several improvements from Apple's other platforms, like integration with Messages, the Contacts app, and the Focus distraction management system.
[18]macOS 12 , dubbed Monterey, will benefit from enhancements to Messages, Notes, Safari, and FaceTime, and the introduction of SharePlay and Focus. It will also inherit the Shortcuts low-code automation system used by iOS devices.
Craig Federighi, Apple's SVP of software engineering, said that Apple has a long history of automation, including command line shell scripts, Apple Script, and Automator, and now Shortcuts.
"Shortcuts is the future of automation on Mac, and this is just the start of a multi-year transition," he said. "Automator will continue to be supported, and you can import Automator workflows into Shortcuts, beginning day one."
Devs' delight?
Developers using Apple technologies will finally get [19]a cloud build system . Xcode Cloud will provide CI/CD for programmers.
"When you commit a change to your code, Xcode cloud can automatically build the app," explained Susan Prescott, Apple's VP of Worldwide Developer Relations. "Because it's built in the cloud, your Mac is free for other tests. And for teams, everyone can see if the change introduces errors so everyone can find and fix issues faster."
"Then Xcode cloud runs your automated tests in parallel, so they complete in a fraction of the time, even as they simulate running on every kind of Apple device and platform," she explained. "And the test results are displayed in Xcode, so you can easily see what worked and fix what didn't. Finally, once the app passes all its tests, Xcode cloud can automatically distribute it to the testers on your team, and even external beta testers, with TestFlight."
Developers can also look forward to Custom Product Pages in the App Store to show off different aspects of apps, as well as revised guidelines on developer identity requirements, manipulation of ratings and reviews, and new appeals options for challenging an app rejection on grounds of bias, alongside an option to report apps suspected of safety or trust violations.
Jeff Johnson, a developer who runs app development biz Lapcat Software, said the announcements were exciting. "For me personally, a couple of things stand out," he said in an email to The Register .
"I think Safari extensions for iOS are a game changer, a fantastic improvement for both developers and users. And as a Mac developer, I'm happy to finally see TestFlight for Mac, which we've wanted for many years."
"The keynote didn't do anything to address the business concerns of third party developers, but I wasn't expecting that it would," he added. "This will all have to play out in the legal system. But as far as the technology announcements are concerned, I'm optimistic so far." ®
Get our [20]Tech Resources
[1] https://www.theregister.com/2020/06/23/apple_armed_for_x86_rebellion/
[2] https://www.apple.com/newsroom/2021/06/apple-advances-personal-health-by-introducing-secure-sharing-and-new-insights/
[3] https://www.apple.com/newsroom/2021/06/ios-15-brings-powerful-new-features-to-stay-connected-focus-explore-and-more/
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YL7rXs7mVD21Ggv4T0hXmAAAAEU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YL7rXs7mVD21Ggv4T0hXmAAAAEU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YL7rXs7mVD21Ggv4T0hXmAAAAEU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YL7rXs7mVD21Ggv4T0hXmAAAAEU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2021/06/07/21_point_5_inch_imac_vs_m1/
[9] https://www.theregister.com/2021/06/07/ifixit_ipad_pro_2021/
[10] https://www.theregister.com/2021/06/07/apple_college_student_photo_leak/
[11] https://www.theregister.com/2021/06/04/apple_vs_epic/
[12] https://twitter.com/Pinboard/status/1401954972124823557?ref_src=twsrc%5Etfw
[13] https://www.apple.com/newsroom/2021/06/apple-advances-its-privacy-leadership-with-ios-15-ipados-15-macos-monterey-and-watchos-8/
[14] https://www.theregister.com/2020/08/12/tor_exit_nodes/
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YL7rXs7mVD21Ggv4T0hXmAAAAEU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://www.apple.com/newsroom/2021/06/apple-previews-new-ipad-productivity-features-with-ipados-15/
[17] https://www.apple.com/newsroom/2021/06/watchos-8-brings-new-access-connectivity-and-mindfulness-features-to-apple-watch/
[18] https://www.apple.com/newsroom/2021/06/macos-monterey-introduces-powerful-features-to-get-more-done/
[19] https://www.apple.com/newsroom/2021/06/apple-introduces-new-developer-tools-and-technologies-to-create-even-better-
[20] https://whitepapers.theregister.com/
Not quite like Tor
Yeah, you kinda have to take Apple's word for it for now when its people say "no one, including Apple, can see both who you are and what sites you're visiting."
Presumably the Apple security guide [ [1]PDF ] will be updated with details of Private Relay for cryptographers to study and assess. That guide is usually detailed enough to determine the viability of a design.
C.
[1] https://manuals.info.apple.com/MANUALS/1000/MA1902/en_US/apple-platform-security-guide.pdf
Gotta sell new hardware
Time to send iPhone Sixes and SEs to death row along with a bunch of perfectly good computers which will not be allowed to run a stripped down but still secure version of the new OSes. No updates for the browser is death for a phone. Hello landfill, prepare a welcome my otherwise functional old iPhone SE.
Re: Gotta sell new hardware
Not only will iOS 15 run on anything that will run iOS 14, but in a change of policy iOS 14 will continue to get security updates.
I haven't looked closely at what Macs will run Monterey, but it does include the Mac Mini 2014, which rumours had said it wouldn't, and iMacs back to 2015.
Re: Gotta sell new hardware
Apple does tend to provide security updates for their operating systems even after releasing new versions. The machines they don't support will eventually become insecure, but it's not immediate. The only thing that will happen immediately on release is annoying banners informing users that new app updates are available but you can't have them because the OS update is required.
Why Apple is not Tor
"When browsing with Safari, Private Relay ensures all traffic leaving a user’s device is encrypted, so no one between the user and the website they are visiting can access and read it, not even Apple or the user’s network provider."
About that. The user's ISP is cut off this interaction, but the rest of that's likely wrong or definitely wrong. The feature supposedly integrates with Safari. Unless that's just a brand name for a disconnected feature, there's a good chance that the only traffic which goes through the system is traffic generated by Safari. That is the important stuff if you're worried about people stealing or compromising your data, but it isn't all of it. The rest of it includes plenty that can be used to fingerprint you. That can help to reassociate your traffic with your device if the attacker is sufficiently motivated.
The more important part is the suggestion that Apple can't associate your traffic. It's complete rubbish. They can do so by comparing logs of traffic usage. Such techniques are used for Tor already, and they work there too, but they're not reliable when used there. The reason: in order for it to work, the attacker must operate all the relays in use and Tor is made up of a bunch of independent relays so you have to spend a lot and hope that the random path generator has put the victim in your sights. Apple's system doesn't use independent relays. They operate every one of them. They can easily use attacks like this if for some reason they decide to. That is without considering that they could just log while forwarding your connection from relay 1 to relay 2. It's not using an open source protocol, so we can't confirm that they're not.
This is not a Tor-style privacy protection. This is an Apple VPN. It's probably fine as a VPN, and if that's all you need, it's probably safe to use. Just don't expect more from it.