Andrew Orr's photo

Andrew Orr

Since 2015 Andrew has been writing about Apple, privacy, security, and at one point even Android. You can find him most places online under the username @andrewornot.

Get In Touch:

‘FindTheMadness’ Safari Extension Alerts You to Fake Clicks

FindTheMadness is a new Safari extension from Jeff Johnson. It gives you an alert when a website tricks you by running JavaScript triggered by a click.

FindTheMadness detects when JavaScript on websites overrides the normal expected behavior of your mouse and keyboard […] You may be astonished to discover how often you click what you think is a link on a page, but you’re actually running JavaScript triggered by a click.

Sounds like a nice tool, and it’s free.

macOS Big Sur and the Return of Whimsical Design

Designer Michael Flarup writes about how macOS Big Sur will bring back “fun in visual design.”

With this approach Apple is legalising a visual design expressiveness that we haven’t seen from them in almost a decade. It’s like a ban has been lifted on fun. This will severely loosen the grip of minimalistic visual design and raise the bar for pixel pushers everywhere. Your glyph on a colored background is about to get some serious visual competition.

I don’t miss pre-iOS 7 skeuomorphism, but I don’t think I’ll mind some of that era’s icons coming back (just without the gloss). I also wonder if we’ll see them on iOS, or just macOS.

What Does AirPods Pro Spatial Audio Mean for Augmented Reality?

Em Lazer-Walker digs into the AirPods Pro spatial audio feature announced at WWDC 2020. What does it mean for AR?

As Apple improves their indoor location technology, [spatial audio] could also easily become a big part of making indoor wayfinding viable before they ship AR glasses, since the ARKit model of “hold your phone out in front of you while you walk through a space” is both socially and physically awkward.

I can’t wait for spatial audio to arrive. I use an app I’ve mentioned before that uses 3D audio, and I wonder if Naturespace will make use of this technology.

How Apple Disrupted Certificate Authorities With Safari

In February, Apple implemented a rule in Safari in which TLS certificates have a lifespan of 398 days. According to ZDNet, Apple made this decision on its own without going through the standard procedure with certificate authorities.

Instead of calling for a vote, Apple simply announced its decision to implement 398-day lifespans on its devices, regardless of what the CAs in the CA/B Forum thought of the issue.

What took place this year is, in no simpler words, a demonstration that browser makers control the CA/B Forum, and that they hold full control of the HTTPS ecosystem, and that CAs are merely participants with no actual power.

Here’s Why This Company Won’t Add ‘Sign In with Apple’

Today is the deadline for developers to add Sign In with Apple to their apps. One company, AnyList, doesn’t want to add it and explained why.

After considering the merits of Sign in with Apple, we have decided not to support it. We understand that this may surprise some of our customers, so we’d like to explain in detail why we made this decision.

A couple arguments make sense, but I’m not buying some others. 1) I’m not a programmer so I don’t know how hard it is to add Sign In with Apple. 2) Saying iCloud isn’t “real email” is stupid. 3) AnyList removed its Facebook login, which is still a privacy-positive move even without adding Apple login.

16 Web APIs Apple Avoided Over Privacy Concerns

ZDnet has a list of 16 Web APIs that Apple declined to add to Safari over concerns they could be used to track users.

The vast majority of these APIs are only implemented in Chromium-based browsers, and very few on Mozilla’s platform.

Apple claims that the 16 Web APIs above would allow online advertisers and data analytics firms to create scripts that fingerprint users and their devices.