The Dirty Secret of OS Updates [Sponsor]

Getting OS updates installed on end user devices should be easy. After all, it’s one of the simplest yet most impactful ways that every employee can practice good security. 

On top of that, every MDM solution promises that it will automate the process and install updates with no user interaction needed.

Yet in the real world, it doesn’t play out like that. Users don’t install updates and IT admins won’t force installs via forced restart.

Let’s talk about the second problem first. Sure, you could simply schedule updates for all your users, and have them restart during non-work hours. But this inevitably leads to disruptions and lost work. This, in turn, leads to users (especially executives) who simply demand to be left out of your update policy. The bottom line is: any forced restarts without user approval will lead to data loss events, and that makes them so unpopular that they are functionally unusable.

There is another class of tools that claim to get users to install updates themselves, through “nudges.” These reminders pop up with increasing frequency until users relent or the timer runs out. This is an improvement, since it involves users in the process, but users still tend to delay updating as long as possible (which for some tools can be indefinitely).

At Kolide, OS updates are the single most common issue customers want us to solve. They come to us because we have a unique (and uniquely effective) approach to device compliance.

With Kolide, when a user’s device–be it Mac, Windows, Linux, or mobile–is out of compliance, we reach out to them with instructions on how to fix it.

The user chooses when to restart, but if they don’t fix the problem by a predetermined deadline, they’re unable to authenticate with Okta. (At present, Kolide is exclusive to Okta customers, but we plan to integrate with more SSO providers soon.)

If your fleet is littered with devices that stubbornly refuse to update, then consider these two principles:

  1. You can’t have a successful patch management policy without involving users.
  2. You can’t get users to install patches unless you give them both clear instructions and real consequences.

Installing OS updates is a top priority for both security and IT, and when you make it part of conditional access, you can finally get it done without massive lists of exemptions or massive piles of support tickets.

To learn more about how Kolide enforces device compliance for companies with Okta, click here to watch an on-demand demo.

Our thank to Kolide for sponsoring MacStories this week.


Crash Detection Saves Unconscious AppleInsider Writer

The Apple Watch and iPhone’s crash detection has saved a lot of lives, and you probably think of it as something for when you’re driving your car. However, as AppleInsider’s Daniel Eran Dilger discovered, it works with scooters, too. Dilger was in a serious accident while riding a scooter. Lying on the ground at night, unconscious, and bleeding, he could have bled to death.

Fortunately, Dilger’s Apple Watch contacted emergency services, who found him, thanks to the feature, and took him to a hospital:

Even though I wasn’t driving a conventional vehicle, Crash Detection determined that I had been involved in a serious accident and that I wasn’t responding. Within 20 seconds, it called emergency services with my location. Within thirty minutes I was loaded in an ambulance and on the way to the emergency room.

When I came to, I had to ask what was happening. That’s the first I found out that I was getting my eyebrow stitched up and had various scrapes across the half of my face that I had apparently used to a break my fall. I couldn’t remember anything.

It’s a scary story that highlights just how important Crash Detection can be in circumstances like Dilger’s, where he was unable to call emergency services himself.

Dilger also reminds readers to update their emergency contacts on their devices. His were out of date, so they didn’t get a call about the accident. Fortunately, Find My Friends alerted Dilger’s partner of his location so they could call the hospital to check on him.

Permalink

MacStories Unwind: A Trip to Flavortown

0:00
26:19


This week on MacStories Unwind, I take Federico on a trip to Flavortown with Guy Fieri’s Diners, Drive-Ins, and Dives, including Krazy Jim’s Blimpy Burgers, Smoque BBQ, and Del Rhea’s Chicken Basket, three of my favorite Flavortown stops.

  • Kolide – It ensures that if a device isn’t secure it can’t access your apps.  It’s Device Trust for Okta. Watch the demo today!

MacStories Unwind+

We deliver MacStories Unwind+ to Club MacStories subscribers ad-free and early with high bitrate audio every week.

To learn more about the benefits of a Club MacStories subscription, visit our Plans page.



Garage Access as a Service: The Chamberlain Group’s Anti-Consumer Approach to the Smart Home

Source: The Chamberlain Group.

Source: The Chamberlain Group.

When you install a garage door in your home, you expect to have full access to how it works – at least, that’s how it worked historically. As Jennifer Pattison Touhy explains for The Verge, that’s not at all the case with The Chamberlain Group, which has built its myQ smart garage door controller technology into many of the doors it sells and has systematically removed ways for consumers to use the tech:

The move breaks the smart home integrations of thousands of users who relied on platforms such as Homebridge and Home Assistant to do things like shut the garage door when they lock their front door or flash a light if they leave their door open for 10 minutes, or whatever other control or automation they wanted to do with the device they bought and paid for.

The move comes a year after Chamberlain discontinued its official Apple HomeKit integration and a few months after it finally killed support for Google Assistant. It’s sadly another example of how the company continues to be hostile to the interoperable smart home.

The result is that many people who purchased garage doors with myQ’s smart controller technology built in now have a less capable door. The only way to restore smart home interoperability is to buy a new door controller or one of the devices covered in The Verge’s story.

What I find most galling about this story is that The Chamberlain Group is removing these features from its doors while simultaneously expanding its partnerships with auto manufacturers and security companies. Think of it as GaaaS: Garage Access as a Service. Instead of offering consumers control directly, The Chamberlain Group ironically has set itself up as the gatekeeper of your garage. Rather than allowing consumers convenient access to their garage doors, The Chamberlain Group is steering them through paid services, which stinks.

A giant button and ads. That's it. That's the myQ app review.

A giant button and ads. That’s it. That’s the myQ app review.

I have a Chamberlain garage door at home and haven’t decided yet what to do in light of this news. The myQ app is garbage – it’s literally just a big button to open and close the door without access via a widget, the Home app, or Shortcuts. Oh, and it has ads too. I had been planning to go the Home Assistant route after The Chamberlain Group removed HomeKit access last fall, but instead, I expect I’ll buy the Meross Smart Wi-Fi Garage Door Opener that Stephen Hackett has used for a while.

Permalink

Apple Announces the Swift Student Challenge Will Begin in February 2024 and New Everyone Can Code Resources

Source: Apple.

Source: Apple.

It’s hard to believe that it has been over nine years since Apple announced the Swift programming language at WWDC. From the day it debuted, one of the pillars of Swift has been Apple’s education efforts, which have included Swift Playgrounds, materials for teachers and students, events, coding centers, and of course, the annual Swift Student Challenge at WWDC. So, with Swift’s 10th anniversary around the corner, it’s not surprising that Apple is updating its Swift Student Challenge program and releasing new resources for educators.

Today, the company announced that the next Swift Student Challenge will begin in February 2024, a break from the past WWDC schedule. The competition will name 350 winners in total, 50 of whom will be named Distinguished Winners whose projects stand out from the other submissions. Distinguished Winners will be invited to Apple’s headquarters in Cupertino in the summer to meet with Apple engineers and other winners, and all winners will receive a one-year membership to the Apple Developer Program.

The Swift Student Challenge will run for three weeks in February 2024, and students can sign up to be notified of when the competition will begin here.

Apple is also expanding its Everyone Can Code program with four new projects providing additional resources for students to learn to build apps. The projects, which provide educators with resources to guide students, include the following:

  • Design a Simple App: Students can create an app prototype in Keynote to learn the fundamentals of app design, practice rapid prototyping, and collect feedback, following the same steps as professional developers. 
  • Build with Stacks and Shapes: Students can take the first steps of building an app in Swift Playgrounds and code a self-portrait or a work of art using SwiftUI to learn the fundamentals of user interface design.
  • Build Custom Shapes: Students can bring an app interface to the next level by designing a shape, learning how to plot the coordinates, and coding their custom shape using SwiftUI and the About Me sample app within Swift Playgrounds.
  • Design an App Icon: Students can learn and apply app design principles to create a unique and memorable app icon that communicates an idea; practice rapid prototyping; collect feedback; and upload the icon to Swift Playgrounds to become part of an app.

The projects can be accessed by educators from the Apple Education Community website.

The expansion of the Swift Student Challenge and other announcements today are great to see. It’s a fantastic way to get students excited about coding, as we’ve seen first-hand based on the growing number of apps we write about at MacStories that were built by former Challenge participants. I’m looking forward to seeing what students come up with this year.


Using Shortcuts to Display the Temperature from My Outdoor Sensor in the Menu Bar

I have always enjoyed having the current temperature in the menu bar on my Mac. Even though macOS Sonoma now supports adding a Weather widget of your choice directly to the desktop, I still prefer how a menu bar item is always glanceable and visible regardless of how crowded the desktop is.

For the past few months, I have tried many weather apps to achieve this, including the great Mercury Weather. While most of them worked great, I wanted to take advantage of the fact that we now own an outdoor HomeKit sensor — the Eve Weather — and display the data coming directly from that weather station in the menu bar. I ended up with a neat little solution, using a combination of Shortcuts, SF Symbols, and a couple of useful utilities.

Read more


AppStories, Episode 358 – The Trouble with Task Management

This week on AppStories, we explore why there are so many good task managers, but none is a perfect fit with the way we work.

Sponsored by:

  • Zocdoc – Find the right doctor, right now with Zocdoc. Sign up for free.
  • Vitally – A new era for customer success productivity. Get a free pair of AirPods Pro when you book a qualified meeting.

On AppStories+, I explore screen maximalism while Federico heads the other direction into screen minimalism.

We deliver AppStories+ to subscribers with bonus content, ad-free, and at a high bitrate early every week.

To learn more about the benefits included with an AppStories+ subscription, visit our Plans page, or read the AppStories+ FAQ.

Permalink

Apple Updates Logic Pro for iPad and Mac

Source: Apple.

Source: Apple.

Today, Apple announced updates to Logic Pro for the iPad and Mac. Both platforms gain support for 32-bit float recording and Mastering Assistant, which the company says “can instantly analyze the audio and make expert refinements to the sound, adjusting elements such as the dynamics, frequency balance, timbre, and loudness.” Mastering Assistant’s processing can be manually tweaked by musicians, too.

The update to Logic Pro for Mac adds Sample Alchemy and Beat Breaker, two tools that debuted on Logic Pro for iPad when it was introduced earlier this year. Apple also added new sound packs to Logic Pro for Mac:

The Hybrid Textures sound pack includes a collection of 70 patches, as well as over 80 Apple Loops featuring Sample Alchemy, while the Vox Melodics sound pack contains a diverse collection of over 475 lyrical phrases, hooks, layered harmonies, FX, and one-shots.

On the iPad, Logic Pro now supports Split View and Stage Manager, allowing musicians to work in multiple apps at once and take advantage of drag and drop between them. The app also has a new Recorder mode for recording sounds with the iPad’s microphone and a Quick Sampler plugin to create instruments from sounds. Samples can be previewed with gestures in Logic Pro’s Browser, and new in-app Lessons are available to help users learn the app’s new features and more.

It’s great to see Apple continue to expand Logic Pro’s capabilities and bring the Mac and iPad’s feature set closer together. More than anything, though, I’d like to see iPadOS-level audio routing added to enable the iPad to handle multiple audio inputs and outputs so I could participate in a Zoom call and simultaneously record a separate microphone input.