What Does Having a T2 Chip in Your Mac Mean to You?

/in , , , , , /by

If you own an iMac Pro, or a Mac mini, MacBook Air, or MacBook Pro model introduced in 2018 or later, your Mac has one of Apple’s T2 security chips inside. On the whole, having a T2 chip in your Mac is a good thing, thanks to significantly increased security and other benefits, but there are some ramifications that you may not realize.

What Is a T2 Chip?

Let’s step back briefly. In late 2016, Apple introduced the T2’s predecessor, the T1, in the first Touch Bar–equipped MacBook Pros. The T1 offered three primary capabilities:

  • Management of the Touch Bar’s Touch ID fingerprint sensor and storage of sensitive biometric information
  • Integration of the System Management Controller, which is responsible for heat and power management, battery charging, and sleeping and waking the Mac
  • Detection of non-Apple hardware

The T2 builds on the T1’s foundation, adding four more important capabilities:

  • Real-time encryption and decryption of data on built-in SSDs
  • Support for invoking Siri with “Hey Siri”
  • Image enhancement for built-in FaceTime HD cameras
  • Optional protection of the Mac’s boot process to prevent it from starting up with an external drive

All these functions become possible because the T1 and T2 are essentially separate computers inside your Mac, much like the A-series chips that power iOS devices. They have their own memory and storage, and run an operating system called bridgeOS that’s based on watchOS.

Some of these features enhance performance by offloading processing (like enhancing FaceTime HD and listening for Siri) to a separate chip. Others increase security by ensuring that they can’t be compromised by an attack, even if macOS itself has been infiltrated.

How Does a T2 Chip Increase Your Security?

There are four basic ways that the T2 chip increases security, two of which apply only to the MacBook Air and MacBook Pro models.

Secure Boot

The T2 chip ensures that all the components involved in the Mac’s boot process, including things like firmware, the macOS kernel, and kernel extensions—can be cryptographically verified by Apple as trusted. That prevents an attacker from somehow inserting malicious code at boot and taking over the Mac.

There are two gotchas, however. First, Secure Boot trusts only code that’s signed by Apple, with one exception: a specific bootloader signed by Microsoft to enable Windows 10 to work with Apple’s Boot Camp technology for running Windows on a Mac. That means you can’t boot from Linux in Boot Camp, for instance.

Second, with Secure Boot in its default settings, you can’t boot from an external drive at all. That’s great for security but can make troubleshooting internal drive problems tricky. To control these settings, Macs with T2 chips have a Startup Security Utility available in macOS Recovery (boot while holding down Command-R). You can use it to allow booting from an external drive for troubleshooting reasons and to turn down security if you need to install an older version of macOS or install macOS without an Internet connection available.

Encrypted Storage

Because the T2 contains both a crypto engine and the SSD controller, it enables on-the-fly encryption and decryption of all data stored on the internal SSD. It uses the same technology as FileVault and requires a password at startup. Macs with internal hard drives and external hard drives don’t receive the T2’s protection but can still be encrypted via FileVault.

The big win from the T2 encrypting all stored data is that there’s no way to decrypt the data without the password—as long as your password can’t be guessed, there’s no reason to worry about your data if your MacBook Pro disappears. The potential downside here is that it’s impossible to recover data from a damaged Mac without the password.

The T2 chip also controls what happens with failed password attempts. Fourteen tries are allowed without delays, and then tries 15 through 30 are permitted with increasingly long delays (1 hour between tries for the last three). After that, more attempts are possible, but after 220 total attempts through various approaches, the T2 chip will refuse to process any requests to decrypt data, rendering it unrecoverable. In short, back up your data!

Touch ID

The T2 chip manages the Touch Bar’s Touch ID fingerprint sensor that lets you log in to your MacBook Air or MacBook Pro without entering your password. Even so, the password is required after turning the Mac on or restarting, and the Mac also requires the password if you haven’t unlocked it in 48 hours, if you haven’t provided the password in the last 156 hours and used your fingerprint over the previous 4 hours, or if the fingerprint read fails five times.

Mic Drop

This isn’t exactly related to the T2 chip, but all T2-equipped MacBook Air and MacBook Pro models feature a hardware disconnect that disables the microphone whenever the lid is closed. That prevents any software from turning on the mic and eavesdropping on you. No disconnect is necessary for the FaceTime HD camera when the lid is closed because its field of view is completely obstructed in that position.

So there you have it. The T2 chip significantly increases the security of your Mac, but it comes with tradeoffs that make it harder to boot from external drives or run other operating systems.

(Featured image modified from an original by ahobbit from Pixabay)

Everything You Need to Know about Multitasking in iPadOS 13

/in , , , , , /by

With this year’s operating system updates, Apple has formally acknowledged that the iPhone and iPad have different uses and different needs. To that end, Apple has given the iPad version of iOS 13 its own name—iPadOS 13.

The big changes include a desktop-class version of Safari that works better with complex Web apps, a redesigned Home screen that sports more icons and Today View widgets, a new floating keyboard you can use for thumb-typing or with one hand, Apple Pencil improvements, and the Sidecar feature that lets you use an iPad as a Mac’s second screen or graphics tablet.

Also important are the tweaks Apple made to iPadOS’s multitasking capabilities. Particularly when you pair an iPad with a Smart Keyboard, you can now get real work done on an iPad more fluidly than ever before. The “hard” part is learning how you switch between apps, display a second app in a Slide Over panel that floats on top of another app, or make two apps share the screen in Split View. Here’s what you can do.

Switch Between Apps

Moving between apps is a key aspect of using the iPad. Apple has provided multiple ways to switch so you can pick those that best fit your style:

  • Press the Home button, and on the Home screen, tap another app’s icon.
  • Swipe down on the Home screen to show Siri app suggestions and search for any app.
  • Within an app, swipe left or right with four fingers to switch to the previous or next app.
  • Within an app, swipe up from below the bottom of the screen to reveal the Dock, and then tap an icon on it. The three rightmost icons are your most recently used apps.
  • After revealing the Dock, keep swiping up to reveal the app-switching screen, then tap an app thumbnail to switch to it. Swipe right to see less recently used apps.
  • On a physical keyboard, press Command-Tab to bring up a Mac-like app switcher. Release both keys quickly to switch to the previous app instantly, or keep Command down while you press Tab repeatedly to move sequentially among the shown apps, letting up on Command to switch. While the app switcher is shown, you can also tap an icon in it.

Display an App in Slide Over

Say you’re working on your iPad, perhaps in Safari, and you want to keep an eye on your favorite weather app (we like Dark Sky) because an upcoming storm might affect your upcoming bike ride. You don’t need to see both apps all the time, but you also don’t want to have to switch back and forth. With Slide Over, you can put Dark Sky in a panel that floats over Safari and then hide and show it.

The easiest way to put an app in a Slide Over panel is to use the Dock, so this technique works best if the app’s icon is already on the Dock. For instance, while you’re in Safari, swipe up from the bottom of the screen to display the Dock. Then touch and hold the Dark Sky app’s icon until it dims slightly. Keeping your finger down, drag the icon over Safari until it becomes a vertical lozenge.

Lift your finger, and Dark Sky appears in Slide Over. (If you get a horizontal rectangle instead of a vertical lozenge, the app won’t work in Slide Over because it needs a larger window.)

If the app you want to put in Slide Over isn’t on your Dock, you can use a two-handed procedure to get it from another location and drop it onto another app. Working on the Home screen or the Siri search screen, start dragging an app icon (it’s OK if the icons start wiggling). Then use your other hand to switch to the other app (perhaps by swiping right with four fingers or pressing Command-Tab on a physical keyboard) and drop it over the other app. Don’t worry if you have trouble at first—it takes time to become accustomed to two-handed usage.

Once an app is in Slide Over on the right side of the screen, you can swipe right on its left edge or the gray bar at the top to hide it, or swipe left on its right edge or gray bar to move it to the other side of the screen. If Slide Over is hidden, swipe left from the right edge of the screen to display it.

If you think Slide Over looks a bit like an iPhone app on your iPad screen, iPadOS 13’s big enhancement will make sense. You can now open multiple apps in Slide Over—just drag a new app over the main app as you would normally. Once you have two or more apps in Slide Over, you can cycle through them by swiping right or left on the thick black bar at the bottom, just like on a Face ID-equipped iPhone. To see what you’ve got in Slide Over, swipe up slightly on that thick black bar to display a Slide Over app switcher; tap any thumbnail to switch to it.

Open Multiple Apps in Split View

Imagine that you want to email someone a photo you took, so you want Mail and Photos showing at the same time. Displaying two apps side-by-side in Split View is nearly the same action as Slide Over. The difference is that, instead of dropping the app lozenge on top of the current app, you drag it to the far left or right of the screen, and drop it once the screen shows a 90/10 split—after you drop, the split changes to 50/50.

Drag the handle between the apps to switch to a 70/30 or 30/70 split; if you drag the handle all the way to one side of the screen, the app that’s shrinking in size disappears entirely. Both apps in Split View have a handle at the top as well, and dragging one of those down slightly converts that app into a Slide Over panel.

Bonus tip: If you’ve become comfortable with Split View, note that you can also grab an app by that handle and drop it to the left or right of another app—switch apps with your other hand—to move it to another Split View space. (You can also drag a Slide Over app’s handle down slightly to switch it to Split View.)

New in iPadOS is the capability to open multiple windows from the same app. Not all apps support this (or Split View at all), but Safari and Notes are good examples of apps that do. To do this, while in the app, bring up the Dock, tap the app’s icon, and then tap the + button in the upper-right corner of the screen.

There are more direct ways of opening multiple windows from the same app too. In Safari, tap and hold the Tabs icon (two stacked squares) and then tap Open New Window to get a second Safari window. You can also drag a tab from Safari’s Tab bar to the side of the screen to open it in Split View.

Similarly, you can drag notes from the sidebar in Notes to open them in Split View, either as a second Notes window within the same space, or as an addition to a new Split View space.

With all these possibilities, it’s easy to get confused about what’s open where. The iPadOS app switcher now displays thumbnails of the Split View spaces so you can switch among them easily.

And if you aren’t sure which space has a particular Safari window, for instance, tap and hold the Safari icon in the Dock (or anywhere else) and choose Show All Windows to see all the spaces—including Slide Over—that include Safari windows (Apple calls this App Exposé).

Take a few minutes and try putting apps in Slide Over and Split View in different ways, since some of the actions require practice before they feel natural. Finally, if combining two particular apps doesn’t seem to work, don’t fret. Apps must specifically support both Slide Over and Split View, and not all do.

(Featured image by Adam Engst)

MacOS 10.15 Catalina is coming. Should you upgrade right away?

/in , , , , , /by

Dear clients,

Apple plans to release macOS 10.15 Catalina sometime in October, and like all major operating system releases, Apple has been talking it up since it was introduced at the company’s Worldwide Developer Conference in June. It will feature new Music, TV, and Podcasts apps to replace iTunes. A new Mac Catalyst technology will make it easier for developers to make their iPad apps available for the Mac. Photos, Reminders, and Notes all get major upgrades. Screen Time has migrated over from iOS. And Sidecar lets you use an iPad as a second screen or graphics tablet with an Apple Pencil.

Sounds great, doesn’t it? It will be… eventually. We are upgrading non-essential machines right away so we can become more familiar with the ins and outs of Catalina, but here are some reasons why you may want to delay your upgrade:

32-bit apps don’t run anymore: Macs have had 64-bit processors since 2006, macOS has been gaining 64-bit support since 10.6 Snow Leopard, and Apple has been warning developers for years that old 32-bit apps would stop being supported at some point. With Catalina, that time has come. To identify which 32-bit apps—and portions of apps—won’t work in Catalina, download and run the free Go64 utility from St. Clair Software. If you rely on any of the software it calls out—pay special attention to Adobe apps—you’ll need to update (which might be expensive), find an alternative (which could be expensive and requires learning a new app), or run the app in a virtualization environment like Parallels Desktop or VMware Fusion (which adds cost and complexity).

Catalina runs in its own read-only volume: To increase security and ensure that an attacker cannot subvert macOS itself, Apple changed the disk structures under Catalina. Now, instead of having one main volume that contains both macOS and your apps and documents, Catalina runs in its own read-only volume. Some behind-the-scenes magic makes the Catalina boot volume and the main volume look like a single volume. This may cause scripts that access files stored in newly changed parts of the directory hierarchy to break. It will also likely mean that backup apps like SuperDuper and Carbon Copy Cloner will require updating to be able to backup and restore data properly. Never upgrade before your backup app is 100% compatible!

Newly installed apps must be notarized by Apple: Notarization is an automated process that Apple uses to verify that an app distributed outside the Mac App Store is free of malware. It’s not optional—in one statement, Apple said, “Mac software distributed outside the Mac App Store must be notarized by Apple in order to run on macOS Catalina.” However, the company has also said that notarization requirements don’t apply to previously distributed software. It’s likely that older apps already on your Mac when you upgrade it will continue to work fine, but if you try to install an older, unnotarized app on a Mac running Catalina, that may not work.

Apps require more permissions than before: In the last few versions of macOS, you’ve probably seen apps asking for permission to do things like access data in Contacts, Calendars, Reminders, and Photos, or be able to use the camera or microphone. In Catalina, apps will have to ask for permission to access files in your Desktop and Documents folders, iCloud Drive, and external volumes. Plus, you’ll be prompted before any app can capture keyboard activity or a screenshot or screen recording. That’s good for security, but it’s possible that older software won’t know how to ask or won’t work properly if you deny its request.

Kernel extension installs require restarts: Kernel extensions are often necessary for third-party hardware peripherals or for apps that need particularly low-level access to the operating system. Installing one requires giving it permission in System Preferences > Security & Privacy > General even now in Mojave, and in Catalina, you’ll also have to restart your Mac. Call us suspicious, but we won’t be surprised if problems ensue from these new security requirements, coupled with the read-only boot volume forcing kernel extensions to run from a new location.

Unanticipated backward-compatibility issues: Here’s the scenario. You upgrade to Catalina, which requires an update to some app you rely on, call it WhizzyWriter. Unbeknownst to you, the new version of WhizzyWriter requires a new file format for its documents, and older versions can’t read it. But since you can’t upgrade all the Macs in your office because some still require 32-bit apps, you end up in a situation where you can’t easily share WhizzyWriter documents within the office anymore. Yes, we’re paranoid, but we’ve seen this sort of thing happen before.

The Scoop on the New iPhone 11, Apple Watch Series 5, 7th-gen iPad, and Apple Services

/in , , , , , /by

At its September 10th special event, Apple unveiled a slew of new products and services, including the iPhone 11, the Apple Watch Series 5, the seventh-generation iPad, Apple Arcade, and Apple TV+.

The company also said that iOS 13 and watchOS 6 would ship on September 19th, with iPadOS 13 appearing on September 30th and macOS 10.15 Catalina due sometime in October. Don’t feel the need to update to iOS 13.0 right away, though, since Apple also said that iOS 13.1 would arrive just 11 days later, on September 30th. It will contain some features that the company had to pull from iOS 13.0. Other features will continue to roll out throughout the coming months too.

This iPhone Goes to 11

After several Roman numeral years starting with the iPhone X, Apple has reverted to digits, introducing the iPhone 11, iPhone 11 Pro, and iPhone 11 Pro Max. These are more significant updates than last year’s models, thanks largely to additional cameras, two for the iPhone 11 and three for the Pro models.

The entry-level iPhone 11 improves on its iPhone XR predecessor with separate 12-megapixel Wide and Ultra Wide cameras that let you take wider shots without resorting to panoramas. iOS 13 uses computational photography with both cameras to enable the new Night mode, which combines multiple exposures for astonishingly better low-light photos.

The new front-facing TrueDepth camera is also now 12 megapixels, has a wider field of view for selfies, and supports Smart HDR for more natural-looking photos. It also now records 4K video at up to 60 frames per second and 120 frames per second with slo-mo.

Like the iPhone XR, the iPhone 11 has a 6.1-inch Liquid Retina screen, but it boasts increased performance with Apple’s new A13 Bionic chip. That makes Face ID up to 30% faster and lets it work better at varying distances and at more angles. Although there’s no 5G cellular support yet, the iPhone 11 does offer Gigabit-class LTE and Wi-Fi 6. For those who need multiple cellular plans simultaneously, it supports Dual SIM with eSIM.

The iPhone 11 features a case made of aluminum and glass that Apple claims is the toughest glass ever used in a smartphone. It can also theoretically withstand dunking in up to 2 meters of water for up to 30 minutes—don’t test that if you can avoid it. And the iPhone 11 comes in six colors, with prices starting at $699 for 64 GB of storage.

The iPhone 11 Pro and iPhone 11 Pro Max take photos and videos to the professional level, supporting everything the iPhone 11 can do and adding a third Telephoto camera. Each of the three 12-megapixel cameras can record 4K video with extended dynamic range and cinematic video stabilization. You can switch between the cameras smoothly while filming video. The presentation even demoed a beta of the FiLMiC Pro app, which will let you record separate video streams from each camera at the same time.

For still images, the triple-camera system adds a Telephoto mode to the Wide and Ultra Wide modes in the iPhone 11, and iOS 13 utilizes all three cameras and computational photography to deliver even better results. For instance, Portrait mode can now switch between Wide and Telephoto framing to provide a wider field of view that’s great for group portraits.

Although the screen sizes remain the same as in last year’s iPhone XS (5.8 inches) and iPhone XS Max (6.5 inches), the iPhone 11 Pro and iPhone 11 Pro Max sport new Super Retina XDR OLED-based screens that have significantly higher brightness and contrast specs. Physically, the new models are just a hair—almost literally at about half a millimeter—larger in every dimension than last year’s iPhones. Battery life is much better, with the iPhone 11 Pro lasting up to 4 hours longer than the iPhone XS and the iPhone 11 Pro Max besting the iPhone XS Max by up to 5 hours.

The iPhone 11 Pro models feature a stainless steel band and textured matte glass back, and they can handle being submerged in up to 4 meters of water for up to 30 minutes. We still don’t recommend testing this. Pricing with 64 GB of storage starts at $999 for the iPhone 11 Pro and $1099 for the iPhone 11 Pro Max. They’re available in four colors: gold, space gray, silver, and the new midnight green.

All the iPhone 11 models become available for pre-order on Friday, September 13th at 5 AM Pacific, and they’ll ship to customers and stores on September 20th. If you’re not overwhelmed by the new features, or just don’t want to pay that much, the iPhone 8 and iPhone XR remain available, starting at $449 and $599.

Apple Watch Series 5 Is Always-On

With the new Apple Watch Series 5, available for pre-order now and shipping on September 20th, Apple addressed one of the most common complaints about its wrist-based iPhone accessory. Now, instead of going black whenever you lower your wrist, the Apple Watch Series 5’s screen will merely dim, brightening back up as soon as you raise your wrist or tap the screen. That way you can read it without taking any particular action or waiting for it to light up. This change involved some impressive engineering since battery life remains at 18 hours in typical usage.

Also new is a built-in compass that enables the Maps app to show which direction you’re facing to assist in getting started with navigation. It also powers a new Compass app that shows heading, incline, latitude, longitude, and current elevation, and the Workout app can report current elevation and elevation gain. You can add one of three new compass complications to some watch faces.

Finally, the Apple Watch Series 5 cellular models feature international emergency calling. If you have an accident or get into trouble while traveling, your watch can call the local emergency services via Emergency SOS or through fall detection, regardless of where you purchased the watch or even if you have a working cell plan.

The Apple Watch Series 5 is available in the traditional aluminum ($399) and stainless steel ($699) cases. For more money, Apple has introduced a new titanium case ($799) and brought back the white ceramic case ($1299). If you don’t need the ECG and fall detection features that the Series 5 retains from the Series 4, the aluminum Series 3 model remains available, starting at $199.

Seventh-Generation iPad Goes Semi-Pro

No one was expecting Apple to update its entry-level iPad, but the new seventh-generation iPad sweetens what is already the best deal in the Apple universe. Starting at just $329, the new iPad increases the screen size to 10.2 inches, up from 9.7 inches, and adds a Smart Connector that allows you to connect Apple’s Smart Keyboard to it. It’s a few millimeters larger and a few grams heavier, but nothing you’ll notice.

Otherwise, the seventh-generation iPad is similar to the sixth-generation model, with an A10 Fusion chip, 8-megapixel 1080p rear camera, and 1.2-megapixel 720p front-facing camera. It also supports the first-generation Apple Pencil for stylus input. Battery life remains the same.

It’s available for pre-order now and will ship on September 30th.

Apple Arcade and Apple TV+ Details Revealed

We focus on Apple’s computing and communications products and services, which is why we haven’t written much about the recent release of Apple Card, the company’s new credit card, which provides increased privacy protections and an excellent interface, but no export options. Similarly, we don’t expect to say much in the future about Apple Arcade, which is Apple’s new game subscription service, or Apple TV+, the company’s slate of original video content, both of which were unveiled at Apple’s event.

For completeness, though, we should note that Apple Arcade will cost $4.99 per month when Apple launches it on September 19th. You’ll get a 30-day free trial to see if a service that gives your family access to over 100 games across all your Apple devices is compelling.

Apple TV+ debuts on November 1st, and it too will cost $4.99 per month for access to all of Apple’s original content. It doesn’t include any back catalog shows and movies such as are available from Netflix, Amazon Prime, Hulu, and Disney+. A 7-day free trial will be available, but if you buy a new iPhone, iPad, iPod touch, Mac, or Apple TV, you’ll get a year for free.

Phew! So many announcements! Our take is that the seventh-generation iPad is a compelling buy for anyone who wants an iPad but doesn’t need the performance of the iPad Air and iPad Pro models. The always-on screen of the Apple Watch Series 5 is welcome if you’re in the market for a new Apple Watch, though it may not be worth upgrading if you already have a recent model. And the new iPhone 11 models look awfully nice for anyone who takes photos and videos. And, let’s face it, that’s most of us these days.

(Featured image by Apple)

Two Secret Key Combos for Forward Delete on the Magic and MacBook Keyboards

/in , , , , , /by

Traditionally, extended keyboards come with a Forward Delete key that, when you press it, deletes characters to the right of the insertion point, unlike the main Delete key, which deletes to the left of the insertion point. Forward Delete still exists on Apple’s Magic Keyboard with Numeric Keypad, but it’s missing from the Magic Keyboard and all Mac laptop keyboards. If you like using Forward Delete (and well you should!), the secret key combinations that simulate it for any Apple keyboard that lacks it are Fn-Delete and Control-D. You can often add Option to the mix to delete the word to the right of the insertion point instead of just a character.

(Featured image by Adam Engst)