Web Browsers

Chrome 60 rolling out, brings handy navigation shortcut to your Touch Bar

Google yesterday announced that its freshly updated Chrome desktop browser has at long last brought out official support for handy navigation shortcuts on the MacBook Pro's Touch Bar.

Supported shortcuts include Chrome's unified search/URL box, bookmarks and a new tab shortcut. Like with other Touch Bar shortcuts, they're easily customizable by choosing Customize Touch Bar from the View menu, where you can also turn off typing suggestions.

In addition, Chrome 60 for macOS includes an updated Credential Management API (allowing websites to interact with Chrome's password manager) while packing in support for the Payment Request API for auto-filling checkout forms and other developer enhancements.

On a related note, Google said yesterday it would remove Flash completely from Chrome toward the end of 2020 following Adobe's announcement to end-of-life its Flash plug-in.

If you regularly visit a site that uses Flash today and it migrates to open web standards, you shouldn’t notice much difference except that you'll no longer see prompts in Chrome to run Flash on that site. “If the site continues to use Flash, and you give the site permission to run Flash, it will work through the end of 2020,” said Google.

Chrome's silent updating mechanism ensures you're always running the most recent version of the app. To check for updates manually, choose About Google Chrome from the menu.

You can download Chrome from Google's website.

Differential Privacy sees wider adoption since Apple first embraced it

Differential Privacy technology is about a decade old, but major tech players had shied away from embracing it until Apple rolled it out across iOS, macOS, watchOS and tvOS in September of last year. Today, major Silicon Valley giants like Microsoft, Uber and Google are readily experimenting with the technology, reports The Wall Street Journal.

Uber uses it to improve services without being overexposed to user data. Microsoft uses it in a pilot project to make smart-meter data available to researchers and government agencies for analysis, while making sure “any data set cannot be tied back to our customers”. Even Google, one of the Differential Privacy's earliest adopters, uses it to a certain extent.

Apple has now expanded its use of Differential Privacy to cover its collection and analysis of web browsing and Health-related data, as first announced at the Worldwide Developers Conference in June. According to the report, the Cupertino technology giant is currently receiving millions of pieces of information on a daily basis from iPhones, iPads and Macs.

All those items are protected by Differential Privacy, which blurs the data being analyzed by adding a measurable amount of statistical noise. This allows Apple to analyze sensitive data like your Health-related information without being able to tie the data back to specific people.

Plus, data-analysis apps are unable to find usable links between large data sets protected with Differential Privacy, making it virtually impossible to de-anonymize such data.

Differential Privacy is key to Apple’s artificial intelligence efforts for it lets the firm advance Siri and other products by analyzing user data without learning too much about users.

According to some people, Differential Privacy can be a double-edged sword and many folks were quick to point out that Apple's refusal to collect huge amounts of data on users, like Google is doing, is hurting its ability to compete in the AI space.

To that extend, a company spokesman told the Wall Street Journal via email that “Apple believes that great features and privacy go hand in hand.”

So, what's this stuff about blurring the data and statistical noise?

Differential Privacy is best explained with real-world examples.

In one particular example, Differential Privacy techniques swap out the answer to one question (“Have you ever committed a violent crime?”) with a question that has a statistically known response rate (“Were you born in February?”).

“Someone trying to find links in the data would never be sure which question a particular person was asked,” the article explains. “That lets researchers analyze sensitive data such as medical records without being able to tie the data back to specific people.”

To learn more about how Differential Privacy works and why it's important and key to Apple's mission of protecting the privacy of its users, check out our previous write-up on the topic.

Keep in mind there's isn't an explicit setting that would let you turn differentially private data collection on or off on your iPhone, iPad, Mac, Apple Watch or Apple TV.

Instead, your device automatically uses Differential Privacy when you opt-in to sending diagnostics and usage data to Apple or app developers. In other words, you must specifically elect to share analytics data with Apple (or developers) before Differential Privacy is used.

According to the descriptions in the “About Diagnostics & Privacy”, “About App Analytics & Privacy” and “About iCloud Analytics & Privacy” links found in Settings → Privacy → Analytics, your personal data is either not logged at all, is subject to privacy preserving techniques such as Differential Privacy or is removed from any reports before they’re sent to Apple.

“Analysis of data is undertaken only after the data has undergone privacy preserving techniques such as Differential Privacy,” notes Apple. “Analysis of such data will allow Apple to improve intelligent features and services such as Siri and other similar or related services.”

You can review diagnostics/analytics data and other information being sent to Apple at any time by going to Settings → Privacy → Analytics and looking under Analytics Data.

How to stop Safari from caching Reading List via cellular connections

Safari has a built-in Reading List feature for saving webpages you'd like to revisit later. It's like bookmarks, but with full offline support. That is, any webpage saved in your Reading List prompt Safari to download and cache its text, images, layout and other assets on your device so that it can be read at any time, even without an Internet connection.

And with iCloud syncing, a webpage added to Reading List on one device gets individually cached across all your other devices, too. Caching webpages isn't the smartest idea if you're on a metered cellular plan, especially if you frequently use Reading List on the go.

Thankfully, iOS lets you decide whether or not Reading List items should be downloaded when your iPhone is connected to the Internet through your carrier's cellular data network.

About Safari Reading List

Reading List made its debut with the release of OS X Lion and iOS 5 in 2011.

The feature received offline support the following year in OS X Mountain Lion and iOS 6. Reading List is unavailable on a device unless Safari syncing is turned on in Settings → iCloud on iOS or in the iCloud preference pane in System Preferences on macOS.

Don't confuse Reading List with Safari's regular bookmarking feature, which simply stores a webpage URL rather than download and cache its full contents, like Reading List does.

Due to the fact that a vast majority of websites take advantage of high-resolution image assets, your offline Reading List cache can eat up a significant amount of on-device storage.

And because Safari syncs your Reading List, bookmarks and other data via iCloud, adding a webpage to Reading List on your iPad prompts your iPhone to  download it, and vice versa.

Thankfully, you can revert this behavior with a few taps, here's how.

How to stop Reading List caching via cellular

Safari on iPhone and iPad defaults to caching all Reading List items for offline access, whether you're connected to the network via Wi-Fi or through your carrier's cellular data network.

To tell Safari to cache your Reading List items for offline access only when your iPhone or cellular-enable iPad is connected to a Wi-Fi network, do the following:

1) Open Settings on your iPhone or cellular iPad.

2) Tap Safari.

3) Scroll to the bottom of the Safari settings screen, then slide the switch Use Cellular Data underneath the Reading List headline to the OFF position.

This will stop Reading List items from being downloaded through this device's cellular connection. You must do this on every iPhone and cellular iPad using the same Apple ID.

With cellular updates turned off, any webpages you add to your Reading List in the future will still show up in Safari's Reading List menu but they'll only get cached via Wi-Fi.

Deleting offline Reading List cache

To free up storage space taken up by Safari's offline Reading List cache, go to Settings → General → iCloud & Storage Usage, then tap Manage Storage under the Storage headline.

Find and tap Safari in the list of apps, swipe left over Offline Reading List, then hit Delete.

Wiping the cache clean won’t remove any items from your Reading List in iCloud.

You will still be able to open any webpage from your Reading List like you normally would, but your device will need to be connected to the Internet to display a non-cached item.

And one last tip before we sign off—knowing your Reading List is archived automatically in iCloud, you are actually able to easily restore it from an earlier version at any time.

Need help? Ask iDB!

If you like this how-to, pass it along to your support folks and leave a comment below.

Got stuck? Not sure how to do certain things on your Apple device? Let us know via help@iDownloadBlog.com and a future tutorial might provide a solution.

Submit your how-to suggestions via tips@iDownloadBlog.com.

Choose your default web browser in iOS with BrowserChanger10

Everyone has a favorite web browser they prefer to use on their computer, but when it comes to the iPhone or iPad, Apple forces all URL links to open in Safari by default.

You can change this with a new free jailbreak tweak called BrowserChanger10 by iOS developer HiDaN, which lets you choose a new default web browser for opening URL links.

Safari 10.1.1 for Mac fixes yet another instance of address bar spoofing

Safari 10.1.1, pushed out as part of today's minor macOS Sierra 10.12.5 software update, fixes yet another instance of address bar spoofing. This is good news because the browser can now protect you from phishing attacks that would typically attempt to fool you into believing you were visiting a genuine website rather than a maliciously crafted webpage.

According to the company's security document, the software fixes a flaw where visiting a malicious website may lead to address bar spoofing. “An inconsistent user interface issue was addressed with improved state management,” states Apple.

Even folks who are extremely mindful of phishing are susceptible to address bar spoofing.

The sophistication of today's phishing attacks came to light when Chinese security researcher Xudong Zheng demonstrated how easily users could be fooled into visiting a fake website that seemingly shows the correct URL in the address bar.

To protect yourself from such attacks in the future, manually type in the URL of the website you want to visit or choose your favorite website from Safari's Bookmarks menu. Of course, you should avoid clicking any suspicious links in an email message, even if they appear to originate from a contact you personally know.

The patched vulnerability was discovered in Safari for macOS, not for iOS.

Apple credits Zhiyang Zeng and Yuyang Zhou of Tencent Security Platform Department with the discovery of the vulnerability CVE-2017-2500 and Zhiyang Zeng of Tencent Security Platform Department with the discovery of the vulnerability CVE-2017-2511.

Moreover, Safari 10.1.1 fixed an issue in Safari's history menu that could lead to an application denial of service after visiting a maliciously crafted webpage. The issue was addressed through improved memory handling.

Lastly, Safari 10.1.1 also includes patches for as many as seven vulnerabilities that were discovered in the WebKit rendering engine, five of which dealing with universal cross site scripting, while fixing an issue with WebKit's Web Inspector where an app could execute unsigned code.

Safari 10.1.1 is available for OS X Yosemite 10.10.5, OS X El Capitan 10.11.6 and macOS Sierra 10.12.5. Apple also released a minor update to iTunes for Mac and Windows today.

iTunes 12.6.1 contains unspecified app and performance improvements and a fix for a WebKit exploit on Windows 7 and later which could result in arbitrary code execution after processing maliciously crafted web content.