If you use a Mac and an iPad to get things done, the fact that Apple hasn’t yet introduced Universal Control (now promised for spring), might put you off installing the latest Apple updates — iOS 15.2, iPadOS 15.2 and macOS 12.1.
But there are very good reasons to do so.
The update that fixed the internet
Last week news arrived of a nasty vulnerability in Apache’s Log4j software library that could easily be used to steal data and credentials from web services and install software onto servers running Log4j.
What made this hack so serious is that it is ubiquitous and used across millions of services and applications online, including AWS, Steam, and iCloud.
Apple now appears to have secured iCloud against the attack, Eclecticlight claims.
Apparently, the vulnerability could be exploited on iCloud online on Dec. 9 and 10, but was fixed by Dec. 11. It’s a server-side flaw and you’ll find it is in the process of being fixed across millions of sites and services across the next few weeks.
The latest updates also patch a variety of other vulnerabilities, including:
A bug that lets Macs running Monterey be tracked by the Bluetooth MAC address.
A flaw across iPhones, iPads, Macs, and WatchOS that enabled a maliciously crafted audio or image file to execute arbitrary code.
A maliciously crafted audio file running on all Apple platforms that could lead to disclosure of user information.
These and other nasties are all repaired now. It is also worth noting that the software update follows Apple’s recent decision to take NSO Group to court.
That privacy thing
Enabled in Settings>Privacy>toggle App Privacy Report to on, this shows you what apps are using what resources on your device, including your microphone and camera. It also shows you network activity, which may enable you to spot apps sending data when you don’t want them to do so.
This empowers every iPhone user with insight into what their apps are doing. It also means those apps that continue to abuse customer trust by attempting to evade your privacy settings become a little more obvious. It seems likely that many users will be surprised at what they find out, which I hope means those apps that fail to live up to the spirit of App privacy on iOS devices will be quickly discovered and their apps deleted or replaced with more privacy-respecting services.
It’s a start.
Next year, I hope to see Apple begin to assertively reject developers who do not keep to the spirit of app privacy from the App Store.
For enterprise users, this visibility into app behavior may make the difference between some popular collaboration and communication services being approved for use on company hardware, or not. Enterprises may also want to use the Hide My Email tool, which is available in this release for iCloud+ subscribers.
The update also includes the first part of Apple’s deeply controversial CSAM protection tools. These do appear to have been made a little less open to abuse, and what’s offered here includes the slightly less contentious settings parents can use to enable warnings for children when they receive or send photos that contain nudity. Siri, Spotlight, and Safari Search also offer enhanced safety warnings.
The holidays are for sharing
For Apple, the big deal in the latest software release is SharePlay, which is now supported on the Mac. It lets you watch TV shows, music, movies, and other content with others from within a FaceTime call. Though this sharing largesse doesn’t extend to every service, it does work with TV+ content. That means it could provide a sense of connection to families who once again cannot be together in this second plague holiday season.
If you run a business, you can also use SharePlay to collaborate on documents in supporting apps, which at present means Keynote and Pages, though developers are introducing support for this.
Perhaps less holiday-focused, the release also introduces Apple’s promised Digital Legacy tools. This is a much-needed solution that lets you ensure your emails, photos, and other personal data are available to those who need it in the event you pass away.
Sadly, the one thing you can’t bequeath for no good reason whatsoever is your digital music or movies collections, unless you’ve ripped them from disk or stolen them online. Copyright holder seem to want to usher in a year Zero on content, given that you can’t pass your iTunes collection on to your heirs.
Good for business? Maybe. But bad for music and movie fans who want to pass along their love of the interesting and obscure to the next generation.
Original Source: computerworld.com