WWDC 2019

Auto Added by WPeMatico

Apple is making corporate ‘BYOD’ programs less invasive to user privacy

When people bring their own devices to work or school, they don’t want IT administrators to manage the entire device. But until now, Apple only offered two ways for IT to manage its iOS devices: either device enrollments, which offered device-wide management capabilities to admins or those same device management capabilities combined with an automated setup process. At Apple’s Worldwide Developer Conference last week, the company announced plans to introduce a third method: user enrollments.

This new MDM (mobile device management) enrollment option is meant to better balance the needs of IT to protect sensitive corporate data and manage the software and settings available to users, while at the same time allowing users’ private personal data to remain separate from IT oversight.

According to Apple, when both users’ and IT’s needs are in balance, users are more likely to accept a corporate “bring your own device” (BYOD) program — something that can ultimately save the business money that doesn’t have to be invested in hardware purchases.

The new user enrollments option for MDM has three components: a managed Apple ID that sits alongside the personal ID; cryptographic separation of personal and work data; and a limited set of device-wide management capabilities for IT.

The managed Apple ID will be the user’s work identity on the device, and is created by the admin in either Apple School Manager or Apple Business Manager — depending on whether this is for a school or a business. The user signs into the managed Apple ID during the enrollment process.

From that point forward until the enrollment ends, the company’s managed apps and accounts will use the managed Apple ID’s iCloud account.

Meanwhile, the user’s personal apps and accounts will use the personal Apple ID’s iCloud account, if one is signed into the device.

Third-party apps are then either used in managed or unmanaged modes.

That means users won’t be able to change modes or run the apps in both modes at the same time. However, some of the built-in apps like Notes will be account-based, meaning the app will use the appropriate Apple ID — either the managed one or personal — depending on which account they’re operating on at the time.

To separate work data from personal, iOS will create a managed APFS volume at the time of the enrollment. The volume uses separate cryptographic keys which are destroyed along with the volume itself when the enrollment period ends. (iOS had always removed the managed data when the enrollment ends, but this is a cryptographic backstop just in case anything were to go wrong during unenrollment, the company explained.)

The managed volume will host the local data stored by any managed third-party apps along with the managed data from the Notes app. It also will house a managed keychain that stores secure items like passwords and certificates; the authentication credentials for managed accounts; and mail attachments and full email bodies.

The system volume does host a central database for mail, including some metadata and five line previews, but this is removed as well when the enrollment ends.

Users’ personal apps and their data can’t be managed by the IT admin, so they’re never at risk of having their data read or erased.

And unlike device enrollments, user enrollments don’t provide a UDID or any other persistent identifier to the admin. Instead, it creates a new identifier called the “enrollment ID.” This identifier is used in communication with the MDM server for all communications and is destroyed when enrollment ends.

Apple also noted that one of the big reasons users fear corporate BYOD programs is because they think the IT admin will erase their entire device when the enrollment ends — including their personal apps and data.

To address this concern, the MDM queries can only return the managed results.

In practice, that means IT can’t even find out what personal apps are installed on the device — something that can feel like an invasion of privacy to end users. (This feature will be offered for device enrollments, too.) And because IT doesn’t know which personal apps are installed, it also can’t restrict certain apps’ use.

User enrollments will also not support the “erase device” command — and they don’t have to, because IT will know the sensitive data and emails are gone. There’s no need for a full device wipe.

Similarly, the Exchange Server can’t send its remote wipe command — just the account-only remote wipe to remove the managed data.

Another new feature related to user enrollments is how traffic for managed accounts is guided through the corporate VPN. Using the per-app VPN feature, traffic from the Mail, Contacts and Calendars built-in apps will only go through the VPN if the domains match that of the business. For example, mail.acme.com can pass through the VPN, but not mail.aol.com. In other words, the user’s personal mail remains private.

This addresses what has been an ongoing concern about how some MDM solutions operate — routing traffic through a corporate proxy meant the business could see the employees’ personal emails, social networking accounts and other private information.

User enrollments also only enforces a six-digit non-simple passcode, as the MDM server can’t help users by clearing the past code if the user forgets it.

Some today advise users to not accept BYOD MDM policies because of the impact to personal privacy. While a business has every right to manage and wipe its own apps and data, IT has overstepped with some of its remote management capabilities — including its ability to erase entire devices, access personal data, track a phone’s location, restrict personal use of apps and more.

Apple’s MDM policies haven’t included GPS tracking, however, nor does this new option.

Apple’s new policy is a step toward a better balance of concerns, but will require that users understand the nuances of these more technical details — which they may not.

That user education will come down to the businesses that insist on these MDM policies to begin with — they will need to establish their own documentation, explainers, and establish new privacy policies with their employees that detail what sort of data they can and cannot access, as well as what sort of control they have over corporate devices.

Powered by WPeMatico

A closer look at the best new iOS, macOS and watchOS features from WWDC

As expected, there was a lot at yesterday’s big WWDC keynote. In fact, you got the sense watching the whole thing unfold that Apple had to race through a number of its new features to cram everything into the two-hour-plus event.

For many, the new Mac Pro was the star of the show, but for Apple, the clear the focus was on software. The company is keenly aware as hardware sales slow that its future is all about software, services and content. This week at the show, we got a guided look through the best new features iOS, macOS and watchOS have to offer.

No surprise, iOS 13 brings the biggest changes of the bunch. Dark Mode is the highlight so to speak. The feature has the same selling points as it does on other operating systems — namely being easier on the eyes and the battery. With a touch in settings, users can turn set it as a constant or have it switch when the sun goes down.

The feature swaps in dark wallpapers and will work with all of Apple’s native apps. Third-party supports is coming as well and will be a part of its development platforms like Swift, going forward.

Apple Maps, a major underdog at launch, continues to get some key upgrades. Most notable is Lookaround — a competitor to Google’s longstanding Street View, which brings seamlessly stitched photographs to help users better navigate around. The feature was extremely smooth in our brief demo. It’s hard to say how it will behave on cellular networks out on the street, but the preview was certainly impressive.

Imaging is a key part of every iOS upgrade, and this one’s no different. Photo editing has been much improved, with more pro-style control over aspects like white balance, contrast, sharpening and noise reduction.

There are some handy dummy proof additions as well, like the ability to adjust saturation without impacting flesh tones. iOS’s editing tools are coming to video as well, this time out, with the ability to adjust settings and even rotate orientation. The photos app also gets a new dynamic view that groups images by occasions like birthdays, giving you another opportunity to mark the unwavering march of time.

This year’s show marked a big moment for iPad as well, as the tablet’s operating system broke free from iOS. For users, that primarily means more functionality on the larger screen, including the ability to to open up multiple windows of the same app for additional multitasking. That joins various other features like improved gesture based highlighting and cut and paste that help iPadOS behave more like a PC.

Far and away the most exciting addition here, however, is actually on the mac side. macOS Catalina brings Duet/Luna style second screen functionality to the tablet, letting it serve as an external monitor. The feature can be used wirelessly (over bluetooth) or tethered.

Our demo was the latter (WWDC is a busy place for wireless signals), but operated pretty flawlessly in spite of some complicated demands. With an iPad Pro, users can draw with the Apple Pencil. There’s also a handy Touch Bar-style menu tray at that populates the bottom of the iPad display.

A couple of watchOS additions are worth mentioning, as well. The most significant is native menstrual cycle tracking. The feature, which is also coming to iOS, gives users a way to keep track of another key aspect of health.

Other additions to the wearable operating system include a native app for audiobooks and a noise app that uses the watch’s built in mics to alert wearers of loud sounds that can lead to hearing loss.

Powered by WPeMatico

Apple’s Voice Control improves accessibility OS-wide on all its devices

Apple is known for fluid, intuitive user interfaces, but none of that matters if you can’t click, tap, or drag because you don’t have a finger to do so with. For users with disabilities the company is doubling down on voice-based accessibility with the powerful new Voice Control feature on Macs and iOS (and iPadOS) devices.

Many devices already support rich dictation, and of course Apple’s phones and computers have used voice-based commands for years (I remember talking to my Quadra). But this is a big step forward that makes voice controls close to universal — and it all works offline.

The basic idea of Voice Control is that the user has both set commands and context-specific ones. Set commands are things like “Open Garage Band” or “File menu” or “Tap send.” And of course some intelligence has gone into making sure you’re actually saying the command and not writing it, like in that last sentence.

But that doesn’t work when you have an interface that pops up with lots of different buttons, fields, and labels. And even if every button or menu item could be called by name, it might be difficult or time-consuming to speak everything out loud.

To fix this Apple simply attaches a number to every UI item in the foreground, which a user can show by saying “show numbers.” Then they can simply speak the number or modify it with another command, like “tap 22.” You can see a basic workflow below, though of course without the audio cues it loses a bit:

Remember that these numbers may be more easily referenced by someone with little or no vocal ability, and could in fact be selected from using a simpler input like a dial or blow tube. Gaze tracking is good but it has its limitations, and this is a good alternative.

For something like maps, where you could click anywhere, there’s a grid system for selecting where to zoom in or click. Just like Blade Runner! Other gestures like scrolling and dragging are likewise supported.

Dictation has been around for a bit but it’s been improved as well; You can select and replace entire phrases, like “Replace ‘be right back’ with ‘on my way.’ ” Other little improvements will be noted and appreciated by those who use the tool often.

All the voice processing is done offline, which makes it both quick and robust to things like signal problems or use in foreign countries where data might be hard to come by. And the intelligence built into Siri lets it recognize names and context-specific words that may not be part of the base vocabulary. Improved dictation means selecting emoji and adding dictionary items is a breeze.

Right now Voice Control is supported by all native apps, and third party apps that use Apple’s accessibility API should be able to take advantage of it easily. And even if they don’t do it specifically, numbers and grids should still work just fine, since all the OS needs to know are the locations of the UI items. These improvements should appear in accessibility options as soon as a device is updated to iOS 13 or Catalina.

Powered by WPeMatico

Photos on iPhone is about to look completely different

When you need to find a photo on your iPhone, what do you do? There are tons of ways, but let’s be honest. You probably just go to the camera roll and scroll through at lightning speed, trusting your eyes to pick out the target shot. That may change with Apple’s new layout for Photos, which organizes shots into easy-to-browse days, months, and years.

Right now the Photos app is kind of a mess. There are so many ways your photos are organized that it feels like none is the “main” one. The “For You” tab has a best of the last (insert random duration here) and randomly selected photos from random periods; Search shows me “one year ago,” “spring,” “trips,” and “dining” — great, thanks! And even the chronologically listed “Photos” tab has such tiny images that it’s hard to pick out the ones you want. So we all just go to camera roll and scroll and scroll.

That may change with the Days, Months, Years theme Apple just announced at WWDC. Under the default photos tab in the Photos app, you’ll now see a new set of tabs — yeah, probably too many tabs — with the different durations on it.

The default mode looks a lot like camera roll. But when you hit “Days,” each day shows as a selection of highlighted images, large and mosaiced, and with live photos active. Each day is marked by a full-width shot, so you can easily slide down to the next day — more recent shots are towards the bottom.

Flip over to Months, and it compresses each calendar month of shots into a handful of events, such as events or locations the system has detected. Years does the same thing, except as the “cover” for each year’s album it shows an image from the same day or period — for example, if it’s someone’s birthday party, you’ll see shots from when you (hopefully) attended their party in years past.

Of course Photos already had a “on this day” type feature, but this makes much more sense to me. You can dive into a year and it breaks into months, and of course months break into days. It’s just a more efficient way of scrubbing through your camera roll — though I have no doubt we’ll still do that from time to time.

In a way this is a minor change to iOS, but because users interact with Photos so much, it could significantly change how you think about getting to the images you want.

Powered by WPeMatico

Apple announces iOS 13 with dark mode, updated Apple apps and privacy features

Apple shared some of the new features that you’ll get with the release of iOS 13 this fall. There are a ton of small and big feature updates, and it felt like Apple executives were rushing through the presentation because there are so many things to announce.

“iOS 13 is a huge release packed with lots of capabilities,” VP of Software Engineering Craig Federighi said. But Federighi immediately started with performance improvements.

For instance, Face ID is 30 percent faster. Downloads and updates on the App Store are a lot smaller. Updates are 60 percent smaller on average because your iPhone won’t download the full app every time you get an update. And apps should launch twice as fast.

Dark mode and low-level improvements

Many apps have already adopted dark mode. But Apple is adding system-wide dark mode for iOS 13. With a simple button in Control Center, you’ll be able to switch from a light interface to a dark interface. Native apps, such as Music, Messages and Calendar have all been updated to support dark mode.

Notifications and widgets look darker. When you open an app, Apple is using a solid black background, which should look good on an OLED screen as it won’t emit any light.

The native keyboard now supports typing by swiping from one letter to another. The share sheet has been redesigned with intelligent suggestions based on your most important contacts. In the Music app, you can now see scrolling lyrics.

Apple apps get updated

When it comes to first-party apps, Safari has options to change text sizing and settings per website. Mail gets rich text editing. Notes gets a gallery view and folders.

Reminders has been completely redesigned. There’s a new quick type bar to add a task. You can indent tasks below bigger tasks. You can also tag people — they receive a notification in iMessage.

Apple’s Meg Frost also showed the new version of Apple Maps. In addition to improved data in some parts of the U.S., there’s a feature that works just like Google Street View called Look Around. Moving from one location to another in Look Around is incredibly smooth.

There are more updates to Apple Maps, such as the ability to share your ETA with friends, collections of favorite places, the ability to share lists with friends, etc.

Apple will map the U.S. with its own data by the end of 2019, other countries will be upgraded later.

Privacy, privacy, privacy

Apple is updating location tracking in apps. You can share your location with an app just once. Third-party developers soon won’t be able to share details about your Wi-Fi network or Bluetooth signal, which should put an end to many privacy scandals.

Apple is also going to compete with “Sign in with Facebook” or “Sign in with Google” by introducing “Sign in with Apple.” This way, you can create an account without sharing personal information. You can even share a randomly generated email address that relays emails to your real email address.

HomeKit is also becoming more private. With HomeKit Secure Video, you can store up to 10 days of security camera footage in your iCloud account. Apple doesn’t have the keys, and footage doesn’t count against your storage. Logitech, Netatmo and others will support that feature.

In order to make HomeKit devices more secure, Apple is bringing HomeKit to routers so that connected devices don’t always have to talk to the internet directly.

iMessage gets more personal

iMessage still feels like an improved version of SMS. Apple is going to make it more like WhatsApp. With iOS 13, you’ll be able to add a profile picture and share it with your contacts, and you’ll get to control who can see your profile picture.

Apple is using this opportunity to improve Memoji with more customization options. And the company is going one step further by copying Bitmoji and creating stickers with your Memoji.

Photos

On the photo front, Apple is adding a new portrait lighting effect — and portrait lighting will become more customizable. The camera app is getting more pro features with buttons to control saturation, highlights, shadows, etc. All of this will be available for videos, as well. And Instagram users will love that you’ll be able to rotate videos.

When it comes to your photo library, iOS automatically hides duplicates photos to keep the best shot. There’s also a new tab to explore your photo library. Navigating your library feels more fluid with autoplaying video vignettes. There’s a new tab bar so that you can see highlights from the past years, months and days.

Siri gets smarter

Apple is adding more voice features across the board. For instance, when you receive a message and you’re wearing AirPods, you can hear the message you just received and reply.

If you want to watch a video or listen to music together, you can share audio with someone else who has an iPhone and a pair of AirPods. I don’t think it means that you’ll be able to stream music to two pairs of AirPods — you still need two iOS devices (update: nope, you can pair two pairs of AirPods with one iOS device).

On the HomePod front, you can tap your phone on your HomePod to send audio to your HomePod. The smart speaker is also getting support for live radio stations — I can’t believe it wasn’t already available. You’ll finally be able to set up multiple users for the HomePod to control your own calendar, messages, music and get personalized results.

CarPlay is also receiving an update with better Siri features. You can now control third-party apps, such as Pandora or Waze, with Siri. And the Siri animation doesn’t fill up the entire screen anymore.

On iOS 13, the Shortcuts app will be installed by default. You’ll get recommendations for shortcuts that could help you. And Siri should sound better overall with new voice-generating software.

There are plenty of other new features in iOS 13, especially on the iPad. If you want to read more about iPadOS, read our separate post.

Powered by WPeMatico

Apple’s iOS 13 will include a system-wide Dark Mode

Apple’s iOS 13 is getting a dark mode, the company announced today at its Worldwide Developers Conference in San Jose. Confirming an earlier leak, the new dark mode will be system-wide and can be turned on or off from iOS’s Settings or through a new Control Center toggle. Once enabled, Dark Mode will change the color of the Home screen dock, the background colors of iOS screens, and Apple’s built-in apps like Apple Music, Notes, Messages, Photos, Calendar, Music and more.

Other system features have also been prepped for Dark Mode like the dock and share sheet, so it’s a seamless experience.

Meanwhile, Apple iOS developers will be able to customize their own apps for Dark Mode by way of Apple’s newly announced framework, SwiftUI, also announced today.

Dark themes for apps have become fairly popular, thanks to the rise of OLED smartphones in recent years. Because a dark mode lights up fewer pixels, it can help conserve battery life on phones’ OLED screens. Dark themes may have other benefits as well, in terms of decreasing device addiction and improving sleep, some claim.

Apple is not the first to launch a system-wide dark mode, however. At Google’s developer conference in May, the company introduced Dark Theme for Android Q which will work across its mobile OS and in first-party Android apps, with developers able to code for it in their own applications.

Several third-party apps today support darker themes of their own, including Twitter, YouTube, Google, Medium, Reddit, Wikipedia, Instapaper, Pocket, IMDb, iBooks, Kindle, Google Maps, Waze and Opera Mini.

Below is the leaked image of Dark Mode for comparison:

Powered by WPeMatico

Live from WWDC 2019

Greetings from sunny San Jose. Apple’s annual World Wide Developers Conference officially kicks off this morning at the McEnery Convention Center with a big keynote. While the rest of the week is focused on developers, today’s show is all about what’s the come from the company, and after relatively low key events from Google and Microsoft, Apple’s looking to make a splash this year.

We’ve already seen a fair share of rumors and leaks — you can read about those here. The list includes system-wide dark mode for iOS 13, a focus on health and perhaps even the long awaited return of of the Mac Pro.

The show kicks off at at 10AM PT/1PM ET, so grab a snack and get comfy, because we’re going liveblogging below.

Powered by WPeMatico