Author Archives: mike

Here’s How the Exposure Notification System from Apple and Google Protects Your Privacy

Apple recently released iOS 13.5, incorporating a new Exposure Notification API in response to the global COVID-19 pandemic. We’ve seen a few people have privacy concerns about this, but it looks like this is the real deal and at best, the Exposure Notification API could lower contact tracing costs, reduce the spread of COVID-19, prevent life-changing health consequences, and save lives. At worst, it won’t prove particularly effective. In neither case does it pose any threat to personal privacy.

Why have Apple and Google—two companies that normally compete tooth and nail—formed this unprecedented partnership? Contact tracing is one of the key techniques employed by public health authorities in slowing the spread of COVID-19. It involves gathering information from an infected person about those they’ve been in contact with, enabling authorities to learn who might have been the source of the infection and who they may have infected. It’s a slow, laborious, and error-prone process—do you know or even remember all the people you’ve come in contact with over the past few weeks?—but it’s helpful nonetheless.

To speed up this process and make it more accurate, Apple and Google are building exposure notification capabilities into their respective smartphone operating systems. A large percentage of the population carries a smartphone running either iOS or Android, and since these phones have the capability to detect when other phones are in their vicinity via Bluetooth, Apple and Google realized they could use technology to alert people when they had been exposed to a person who later tests positive for COVID-19.

Their solution comes in two phases. In the first phase, Apple and Google are releasing the Exposure Notification API, and that’s what just happened with iOS 13.5. This API, or application programming interface, allows apps written by public health authorities to work across both iOS and Android devices, something that’s never been possible before. The first key fact to understand is that only public health authorities will be allowed to write apps that leverage the Exposure Notification API. It cannot be incorporated into sketchy social media apps.

Unfortunately, it seems likely that many people will never learn about or download those apps. So in the second phase, Apple and Google will build the exposure notification technology directly into iOS and Android, so it can work without a public health authority app being installed.

The second key fact to understand is the entire system is opt-in. You must explicitly consent to the terms and conditions of the program before it becomes active on your phone. That’s true whether you get an app in the first phase or rely on the integration in the second phase. And, of course, if you change your mind, you can always turn it off in the app or the operating system settings.

How does it work? Apple and Google have developed an ingenious approach that ensures that those who opt-in to the technology can use it without worrying about privacy violations.

Your phone creates a Bluetooth beacon with a unique ID derived from a randomly generated diagnosis encryption key. The system generates a fresh diagnosis key every 24 hours and stores it on your phone for 14 days, deleting all older keys. Plus, the unique Bluetooth beacon ID that your phone broadcasts to other phones in your vicinity changes every 15 minutes. Similarly, your phone reads the unique IDs from nearby phones and stores them locally. This approach ensures privacy in three important ways:

  • No personal information is shared. The ID is based on a random encryption key and changes constantly, so there’s no way it could be traced back to your phone, much less to you personally.
  • No location information is stored. The only data that’s generated and transferred between the phones are these unique IDs. The system does not record or share location information, and Apple and Google have said they won’t approve any public health authority app that uses this system and also records location separately.
  • No data is uploaded unless you test positive. As long as you remain uninfected by COVID-19, no data from your phone is uploaded to the Apple- and Google-controlled servers.

What happens if you test positive for COVID-19? (Sorry!) In that case, you would need to use a public health authority app to report your test results. You’ll likely have to enter a code or other piece of information to validate the diagnosis—a requirement necessary to prevent fake reporting.

When the app confirms your diagnosis, it triggers your phone to upload up to the last 14 days of diagnosis encryption keys—remember, these are just the keys from which the IDs are derived, not the IDs themselves—to the servers. Fewer days might be uploaded depending on when the exposure could have occurred.

All the phones enrolled in the system constantly download these diagnosis keys from devices of infected people. Then they perform cryptographic operations to see if those keys match any of the locally stored Bluetooth IDs captured during the period covered by the key. If there’s a match, that means you were in proximity to an infected person, and the system generates a notification with information about the day the exposure happened, how long it lasted, and the Bluetooth signal strength (which can indicate how close you were). A public health authority app will provide detailed instructions on how to proceed; if someone doesn’t have the app yet, the smartphone operating system will explain how to get it. Additional privacy protections are built into these steps:

  • No one is forced to report a positive diagnosis. Just as you have to opt-in to the proximity ID sharing, you must explicitly choose to share your positive diagnosis. Not sharing puts others, including your loved ones, at risk, but that’s your decision to make.
  • Shared diagnosis keys cannot identify you. The information that your phone uploads in the case of a positive diagnosis is limited to—at most—14 encryption keys. Those keys, which are then shared with others’ phones, contain no personal or location information.
  • The matching process takes place only on users’ phones. Since the diagnosis keys and the derived IDs only meet on individual phones, there’s no way Apple, Google, or any government agency could match them up to establish a relationship.
  • The notification information is too general to identify individuals. In most cases, there will be no way to connect an exposure notification back to an individual. Obviously, if you were in contact with only one or two people on a relevant day, that’s less true, but in such a situation, they’re likely known to you anyway.

Finally, Apple and Google have said they’ll disable the exposure notification system on a regional basis when it is no longer needed.

We apologize if that sounds complicated. It is, and necessarily so, because Apple and Google have put a tremendous amount of thought and technical and cryptographic experience into developing this exposure notification system. They are the preeminent technology companies on the planet, and their knowledge, skills, and expertise are as good as it gets. A simpler system—and, unfortunately, we’ll probably see plenty of other apps that won’t be as well designed—would likely have loopholes or could be exploited in unanticipated ways.

You can read more about the system from Apple and Google, including a FAQ and the technical specifications.

Our take? We’ll be installing the necessary app and participating in this exposure notification system. It’s the least we can do to help keep our loved ones and others in our communities safe. In a pandemic, we all have to work to help others.

(Featured image based on an original by Dennis Kummer on Unsplash)

Approve App Authentication Requests with Your Apple Watch in Catalina

Tired of typing your admin account password whenever you try to install software or change security settings on your Mac? A new feature in macOS 10.15 Catalina removes that requirement for Apple Watch owners. In System Preferences > Security & Privacy > General, select the checkbox for “Use your Apple Watch to unlock apps and your Mac.” Then, whenever an app asks for your account credentials, you can instead just double-press the side button on your Apple Watch. Of course, if you forgot to wear it or its battery has died, you can always fall back on entering your password.

(Featured image by Adam Engst)

Got a Mac Laptop? Here’s What You Need to Know about Battery Health Management in Catalina

We all want Mac laptops that can run for days on a single charge and never need their batteries serviced. Sadly, we’re always going to be disappointed. Battery and power management technologies continually improve, but those improvements are matched by more powerful processors and smaller designs with less room for battery cells. And, because physics is a harsh mistress, current lithium-ion batteries are always going to age chemically, so they hold less of a charge over time.

In the just-released macOS 10.15.5 Catalina, Apple has introduced a new battery health management feature that promises to increase the effective lifespan of the batteries in recent Mac laptops. It does this by monitoring the battery’s temperature and charging patterns and, in all likelihood, reducing the maximum level to which it will charge the battery.

You see the problem. While battery health management can extend your battery’s overall lifespan, it will likely also reduce your everyday runtime before you need to charge. It’s too soon to know the full extent of this tradeoff, and we suspect that it may be impossible to determine, given that everyone uses their Macs differently.

It’s worth noting that this battery health management feature appears only for those running macOS 10.15.5 or later, and only then if the Mac in question is a laptop with Thunderbolt 3 ports. In essence, then, it’s available only on MacBook Pro models introduced in 2016 or later, and MacBook Air models introduced in 2018 and later. (The Thunderbolt 3 port requirement is merely a shorthand way for Apple to indicate “recent Mac laptops.”)

So, if you have a supported laptop and you’re running macOS 10.15.5, what should you do? We see three scenarios:

  • Favor lifespan: If you seldom run your laptop’s battery down to the electronic fumes because it’s easy for you to plug in whenever you need to charge, leave battery health management enabled. That will preserve the battery’s overall lifespan to the extent possible.
  • Favor runtime: For those who need to eke every last bit of power from their batteries, disable battery health management. You might have to replace the battery sooner, but you’ll get more runtime in everyday usage.
  • Switch as needed: Many people need the longest possible runtime only occasionally, such as on long flights with no under-seat power. In such situations, switch battery health management off for the flight and back on when you return to normal usage patterns.

Switching is easy, but Apple buries it deeply enough that it’s clear that the company doesn’t think most users should be disabling it regularly. Open System Preferences > Energy Saver, click the Battery Health button at the bottom, and in the dialog that appears, uncheck Battery Health Management and click OK. You’ll be prompted to make sure you know what you’re doing; click Turn Off to finish the job.

One final note. The reduced maximum capacity with battery health management enabled may have an undesirable side effect—a recommendation from the Battery Status menu’s health indicator that you need to replace your battery. To check your battery’s health, hold the Option key down and click the Battery Status icon on the menu bar. At the top of the menu, next to Condition, you’ll see either Normal or Service Recommended. (In previous versions of macOS, it could have said Replace Soon, Replace Now, or Service Battery.)

Regardless of the term, anything but Normal indicates that your battery is holding less of a charge than when it was new. If you see that message and you aren’t getting enough runtime for your needs, get the battery evaluated at an Apple-authorized service provider or Apple Store.

(Featured image by Thomas Kelley on Unsplash)

iPhone Not Charging Reliably? Clean Its Lightning Port with a Toothpick

If you’re plugging your iPhone in regularly but getting low-battery warnings when you shouldn’t, consider the possibility that something is preventing your iPhone from charging successfully while plugged in. If there’s no lightning bolt badge on the battery icon when the iPhone is plugged in, that’s a sure sign that no power is reaching the device. Another hint that failures could be happening intermittently would be a lack of charging in the Last Charge Level graph in Settings > Battery when you know the iPhone was plugged in. Luckily, the solution is often easy. Take a wooden (not metal) toothpick and gently poke around inside the iPhone’s Lightning port for pocket fuzz. You’d be amazed how much crud can end up in there. If cleaning doesn’t solve the problem and you use only a single Lightning cable to charge, try another one.

(Featured image by Adam Engst)

Do You Know Who Can Track Your Location? It’s Worth Checking Periodically

Sharing your location works well when you’re out with friends or family and want everyone to be able to see where everyone else is. It’s easy to enable in various spots in iOS 13—in Messages, in Contacts, in the Find My app, and so on. You can share your location for an hour, until the end of the day, or indefinitely, but beware of this final option. If you’re with a group for a weeklong trip, for instance, sharing indefinitely makes sense, but it’s easy to forget to turn it off, at which point those people can see where you are at all times. We recommend that you periodically audit the list of people with whom you’ve shared your location. To do so in iOS 13, open the Find My app, tap the People button in the bottom toolbar, and look through the list. For anyone you want to delete, swipe left on their name and tap the trash button.

(Featured image by Adam Engst)

What to Do If You Run Low on iCloud Storage Space

By default, Apple gives every iCloud user 5 GB of storage space. That disappears quickly, given how it’s shared between iCloud Mail, iCloud Drive, iCloud Photos, Messages, and iCloud-enabled apps.

Apple will, of course, sell you more iCloud space. $0.99 per month gets you 50 GB, $2.99 per month provides 200 GB, and for $9.99 per month, you can use a whopping 2 TB. The latter two plans can even be shared with others in your Family Sharing group.

As we’ve noted elsewhere, using iCloud Photos almost certainly requires you to pay for extra storage. But if you’re paying $2.99 per month and nudge up against the 200 GB limit, you may not be enthused about increasing your payment to $9.99 per month when you’re unlikely to need anywhere near 2 TB.

That said, you don’t want to run out of storage space. Email to your iCloud email address will be rejected, photos won’t upload from your iPhone, and app data will fail to sync. Happily, Apple alerts you when you’re running low on space, before things get bad.

It’s often easy to recover space that’s not being used in a helpful way. First, check how much space you have and how much you’re using. In macOS 10.14 Mojave, look at the graph at the bottom of System Preferences > iCloud. In 10.15 Catalina, the graph is in System Preferences > Apple ID > iCloud. In iOS, you’ll find a similar graph at Settings > Your Name > iCloud.

Then, to clear space, work through these five approaches.

1. Remove Unnecessary iCloud Device Backups

The biggest win comes from deleting iCloud device backups for devices you no longer use. It’s common for these to stick around, so if you recently upgraded from an iPhone X to an iPhone 11 Pro, the iPhone X backup is probably still consuming gigabytes.

Navigate to Settings > Your Name > iCloud > Manage Storage > Backups to see what you have. If you find backups for a previous iPhone or iPad, tap it and then tap Delete Backup.

2. Delete Unnecessary Data from iOS Apps

While you’re in the iCloud Storage screen (the leftmost screenshot above), look through the other apps at the top of the list. The Photos app will likely be using the most storage, but all you can do to minimize its space usage is delete unnecessary screenshots, duplicate photos, and accidental videos from Photos. That will likely require lots of manual effort.

However, some other apps—think about third-party camera or video apps—may be using space unnecessarily. Investigate any apps reporting a lot of usage in the iCloud Storage screen, and if possible, clear out the unnecessary data.

Finally, consider Messages. If you regularly trade photos and videos in chats, it could be another place you can save significant space. In the iCloud Storage screen, tap Messages > Top Conversations to see which conversations are the largest. Tap one to switch to Messages, tap the person’s avatar at the top of the conversation, tap the Info button, scroll down to see the photos, and tap See All Photos. Tap Select, tap photos you have no desire to keep within that Messages conversation, and then tap Delete at the bottom-right of the screen.

3. Avoid Backing Up Apps with Massive iCloud Data Stores

If one of your apps is storing a lot of data that you don’t want to delete, but that you don’t care if it were to be lost, you can prevent it from being backed up by iCloud Backup and reduce the size of your backups.

To find such apps, navigate to Settings > Your Name > iCloud > Manage Storage > Backups and tap the name of the device you’re on. That screen shows which apps consume the most space in your backup. Tap the toggle switch next to an app to stop backing it up and delete its data from your backup.

4. Scan for and Delete Large Files in iCloud Drive

It’s hard to know if you’re likely to be using lots of space in iCloud Drive—it all depends on what iCloud-savvy apps you use and if you store other files in iCloud Drive via the Mac’s Finder or the Files app in iOS.

There’s no need to guess, however, thanks to free Mac apps that help you identify especially large files and folders. Our favorites are GrandPerspective and OmniDiskSweeper. GrandPerspective uses a graphical view so you can see at a glance where your space is going, whereas OmniDiskSweeper opts for a classic text-based approach that gives you hard numbers. In GrandPerspective, choose File > Scan Folder and select iCloud Drive in the sidebar of the Open dialog. For OmniDiskSweeper, choose File > Size Folder.

Whichever app you use, it’s easy to select large files or folders and click Delete (GrandPerspective) or Trash (OmniDiskSweeper). You may have to set an option in GrandPerspective > Preferences to enable deletions if its Delete button is disabled.

5. Delete Old Email from iCloud Mail

All the email you store at iCloud counts against your free space, so it can be worth clearing out unwanted old messages (and their large attachments). To delete individual messages using Apple’s Mail, just select them and click the Trash button in the toolbar. Some messages are much bigger than others, however, and to find them, choose View > Sort By > Size. That puts the largest messages at the top.

Of course, deleting messages normally just moves them to the Trash mailbox; to reclaim the space they occupy on iCloud, choose Mailbox > Erase Deleted Items > AccountName. Once you do that, the messages are gone for good.

If you want to remove an entire mailbox and its contents, select it in the sidebar and choose Mailbox > Delete Mailbox. That deletes all of its messages immediately and can’t be undone.

When you put all these space-clearing techniques together, you’ll likely be able to clear enough cruft that you won’t have to pay Apple for more iCloud storage space. But if you’re uncomfortable deleting such data, there’s no shame in upgrading to a larger iCloud storage plan.

(Featured image by stokpic from Pixabay)

Customize What Appears in New Finder Windows with This Tip

When you’re in the Finder, choosing File > New Finder Window does, as you’d expect, open a new Finder window. But what folder appears in that window? By default, new Finder windows open to Recents, which is a built-in smart folder showing recently opened documents. If you’d prefer to see items in a fixed location on your drive, go to Finder > Preferences > General and choose any location from the New Finder Windows Show pop-up menu. We’re partial to Desktop, Documents, or Downloads, but you can choose whatever folder makes sense with your workflow.

(Featured image by Snapwire from Pexels)

Ever Wondered Which Words to Capitalize in a Title? Use Capitalize My Title!

When you’re writing a blog post or email newsletter, you’ll eventually hit the question of how to capitalize words in a title. There is no one right way, but just as with poor spelling and grammar, randomly capitalized titles can reduce reader trust in your knowledge, competence, and expertise. The trick is to pick a capitalization form and style guide to follow. There are two capitalization forms: title case (where important words are capitalized) and sentence case (which is capitalized like a normal sentence). Then there are a handful of major style guides, including the Associated Press Stylebook, The Chicago Manual of Style, and The New York Times Manual of Style and Usage. It’s never a bad idea to pick one and learn its rules, but for a quick shortcut, turn to the Capitalize My Title Web site. Click a style guide tab at the top, select a capitalization form, and paste or type your title. The site automatically applies the appropriate rules to your title. Press Return to copy it to the clipboard for pasting into your document.

(Featured image by Adam Engst)

Forrester Research and IBM Studies Show Macs Are Cheaper than PCs

It’s taken as gospel that Macs are more expensive than PCs. A quick look at the Dell Web site reveals laptops for as low as $300. Sure, we can say that the configurations aren’t comparable, that macOS is better than Windows, or that Apple’s hardware quality is superior. Still, I’ve talked to friendly local bean counters that have trouble getting past those low upfront prices.

However, unless you’re Rancho Gordo, the goal isn’t to count beans, it’s to get work done, and that’s a different scenario. Let’s look at a few ways that Macs are not just worth the money but can also be cheaper than comparable systems. We’ll start with a Forrester Research study commissioned by Apple that compared the total economic impact of Macs and PCs in large companies with employee-choice programs. In such programs, every employee gets to choose between a Mac and a PC, providing a sizable group across which to compare numbers, but the conclusions apply to large and small organizations alike.

Deeper Cost Analysis

Although the Forrester Research study found that the upfront acquisition cost of Macs was indeed $500 higher than comparable PCs, when additional factors were taken into account, Macs ended up costing about $50 less.

That’s in part because Macs have a higher residual value after 3 years, meaning that you can resell a 3-year-old Mac for more than a 3-year-old PC. Pay more up front, but get more back later on.

Macs also don’t need operating system licenses, and the Mac’s better security eliminates the need for additional licenses for security software.

Reduced IT Support Costs

It has long been thought that Macs required less support than PCs, but only in the past few years have there been organizations with enough Macs and PCs to compare. At IBM, one of the largest Apple-using companies with 290,000 Apple devices, a 2016 study found that the company was saving up to $543 per Mac compared to PCs over a 4-year lifespan. Forrester Research came up with an even higher number, showing that Macs cost $628 less over a 3-year lifespan.

What accounts for these reduced support costs? It takes less time to set up a new Mac, Macs are easier to manage, Macs users open fewer service tickets, and many fewer IT staff are needed. All that adds up to paying for fewer support resources. In another 2018 study, IBM found that it needed just 7 support engineers per 200,000 Macs, compared to 20 support engineers per 200,000 Windows machines.

Improved Employee Productivity and Engagement

Beyond reduced support costs, Mac users turn out to be more productive, more engaged, and more likely to stay with the company than PC users. Forrester Research found that over 3 years, Mac-using employees posted 48 hours more productivity (in part due to reduced downtime). That’s likely thousands of dollars more benefit to the company, per employee.

Even still, it can be hard to quantify that benefit, which is why Forrester Research compared users in sales positions. In its study, Forrester found that Mac-using employees showed a 5% increase in sales performance. That’s nothing compared to IBM, which found that its Mac-based salespeople closed deals worth 16% more than their Windows-using counterparts.

Finally, both Forrester Research and IBM discovered that Mac users were less likely to leave the company—20% less likely in Forrester’s study and 17% less likely in IBM’s research. That’s not just an indication of loyalty. There are significant costs to replacing employees who leave, so the higher the retention rate, the better it is for the bottom line.

Improved Overall Security

Few would argue with the belief that Macs are more secure than PCs. In Forrester’s research, the interviewed organizations said that the Mac has a fundamentally more secure architecture than Windows. In today’s world, criminals employ malware to steal information. Data breaches are costly, with a 2019 study by IBM Security and the Ponemon Institute pegging the average cost of a data breach at $3.9 million. The amounts vary by industry and the size of the breach, of course, but the average cost per data record was nearly $150.

Security breaches can have other costs as well. With a compromised account, attackers have often been able to pose as executives and get accounting departments to wire money to offshore accounts. Plus, when news of a data breach hits, it can result in the loss of customers. In the IBM Security study, healthcare companies suffered from a 7% customer turnover after a breach.

So yes, Macs do have higher upfront costs than PCs. But savvy managers know to look past such simplistic comparisons to the bigger picture, where equipping employees with Macs both saves far more than the difference in cost between a Mac and a PC and enables employees to produce more for the organization.

(Featured image by freestocks on Unsplash)

Audiovisual Tips for Better Videoconferencing

Whether for work or socializing, we’re all spending a lot more time in video calls these days. But—surprise!—it turns out that many of our group video calls could be more pleasant, less embarrassing, and overall better if we follow a few basic audiovisual tips.

Make Sure You Have Decent Lighting

Natural light is best, but room light is generally fine too, especially if it’s coming from the side. Overhead light isn’t quite as flattering, but whatever you do, avoid light that comes from underneath your face or you’ll look like an old-time movie villain. Also, avoid sitting in front of a window because the bright light behind you will make you look way too dark. Pull a shade or try to put your computer against the window so the light hits your face instead.

Arrange for a Decent Background

You may not have many choices for where your computer is located, and thus for what’s behind you when you’re on a video call. If you’re using Zoom or Skype, you can employ a virtual background (pick one that’s appropriate for the context, and for goodness sake, don’t use an animated background). Otherwise, make sure that what’s behind you is tidy and wouldn’t embarrass you if the people on the call were to visit in person. Or, take it up a level and put a pleasing arrangement of art or photos on the wall behind you. Even if they are too small to be seen well, they will break up a monotonous blank wall.

Wear Appropriate Clothing

Yes, it’s tempting to schlub around all day in pajamas or ratty old sweats. Resist the urge and wear the same type of clothes you’d put on if you were meeting with these people in person. That includes pants—if you get up in the middle of the call without thinking, you don’t want to advertise your taste in boxers. You don’t want your boss and colleagues to have a mental image of you as a total slob. For bonus points, avoid tops that are bright white, black, or have distracting patterns.

Think Like a Movie Director

Particularly if you need to use a phone, tablet, or laptop to participate in a video call, think about your camera angles. It’s best to have the camera at roughly the same height as your face, if possible, so if you can avoid it, don’t put your laptop in your lap or hold your phone at your waist. And if you’re using a phone, don’t walk around such that the changing background distracts everyone else.

And Like a Movie Star

It’s sometimes hard to remember that everyone can see you even though they’re not in the room, but you’ll come off as more alert, confident, and engaged if you sit up straight, get close enough to the camera so your face fills the screen, and smile. Seriously, you’re on Candid Camera, so act like it. You’ll almost always have a thumbnail that shows what you look like, so make sure you like what you see. Oh, and don’t touch your face repeatedly.

Look at the Camera, Not the Other Participants

This one is tough. The camera is usually at the top center of your screen, so if you look anywhere else, it seems like you’re avoiding eye contact. It can make you look shifty or inattentive. But it’s hard not to look at the other people or at your own video thumbnail. The best trick is to resize and position your video window so the person you’re most likely to look at is right under the camera.

Pay Attention and Don’t Multitask

Look, we get it—a lot of meetings are boring. But it’s both rude and distracting to the speakers if you are clearly doing something else or worse, leaving and coming back. Focus on the screen, and show that you’re paying attention by nodding your head, smiling, and all the other little things you’d do if the meeting were taking place in person. If you truly can’t stay engaged, turn off your audio and video so no one has to see and hear you. If you need an excuse for that, say that your Internet connection is being a little wonky, so you want to cut down on bandwidth usage.

Mute Your Mic When Not Talking

The more people on a call, the more important this tip is. All videoconferencing apps have a Mute button you can click so others in the call aren’t distracted by you coughing or sneezing, your children playing in the other room, or other extraneous noise. Just remember to unmute before you start talking. It’s hard to remember at first, but you’ll get good at it.

All this may seem like a lot to think about, but once you get your environment set up properly, you’ll be a bright spot in the video grid at your regular meetings. And then maybe you can forward this article to your family, friends, and colleagues so they can up their video game too.

(Featured image by Marcus Aurelius from Pexels)