Tag Archive for: APros Archive

You are here: / APros Archive

Posts

Don’t Listen to Anyone Who Tells You to Drag a Text File into Terminal

/in /by

In macOS 15 Sequoia, Apple made it more difficult to bypass Gatekeeper to run apps that aren’t notarized. (Notarization is one of the ways Apple ensures that apps distributed outside the Mac App Store are unmodified and free from malware.) Cybercriminals have responded to this increase in security with a new social engineering attack. They provide the victim with a disk image, ostensibly to install some desired piece of software, instructing the user to drag a text file into Terminal. Doing so executes a malicious script that installs an “infostealer” designed to exfiltrate a wide variety of data from your Mac. The simple advice here is to treat any guidance to drop a file into Terminal with extreme suspicion—no legitimate software or developer will ever ask you to do that.

(Featured image based on an original by iStock.com/Farion_O)

Social Media: Thing #17 to never do: Follow instructions to drop a text file into Terminal. It’s a great way to install malware and let cybercriminals steal your passwords, financial information, and more.

Website Owners: Identifying Copyright Infringement Link Insertion Scams

/in /by

We regularly warn Internet users about online scams and phishing attacks. Most of these are relatively easy to identify and avoid once you’re aware of telltale signs. Unfortunately, we’ve encountered a newer type of scam that’s more difficult to identify, partly because it plays on fears of legal action.

Website owners are the target of this scam email, which purports to come from a lawyer. The message states that an image on your site has been used without permission. Such a claim is all too believable for many, especially those who may not have been as careful about usage permissions in the distant past as they are today. The message includes a link to the image, a link to the purportedly infringing page, and a threat to initiate legal action if certain actions aren’t taken within five business days

Unusually, the email doesn’t ask you to take down the infringing image or pay a retroactive licensing fee. Instead, it says you must credit the image’s copyright holder and include a link. Such a simple request seems like a huge win—instead of paying a licensing fee or worrying about being sued, you can twiddle a little HTML and move on with your life.

Don’t do it! This is what’s called a “link insertion scam.” It exploits the search engine optimization principle that links on reputable sites provide legitimacy to linked sites, helping them move up in the search rankings. Unfortunately, the reverse is also true; linking to a scammer from your website will cause Google and other search engines to penalize your site in the search rankings.

Unfortunately, these copyright infringement scams look legitimate at first glance, as you can see in this example. The From and Subject lines don’t seem forged or malformed, and there are no obvious grammatical errors or indications that the writer doesn’t speak fluent English. And when you click the link in the signature, you end up at what appears to be the website of a real law firm. What should you do if you receive a message like this?

First, don’t panic. Just because the message looks legitimate doesn’t mean it comes from a real lawyer. Also, don’t call your lawyer unless they’re willing to work for free. You can save stress, time, and money by evaluating the message yourself.

A few details in the message suggest that it’s not real:

  • The domain in the From line’s email address—elitejusticeadvisors.biz—sounds sketchy and doesn’t match the company name.
  • The Subject line of “DMCA Copyright Infringement Notice” sounds official, but those familiar with the DMCA will know that it can be used only for a formal notice-and-takedown process, not to make demands for attribution or payment. But most people won’t know that.
  • The message is addressed to the generic “Dear owner of,” whereas legitimate messages from a lawyer would be addressed to a specific entity.
  • The required link URL points to a telecom news site in Sri Lanka, and it’s odd that an Arizona lawyer would be working for such a client.
  • The example of the purportedly infringing image is hosted at Imgur, a consumer image-hosting site known for funny pet pictures and cringeworthy GIFs. Legal firms would always use some sort of case management site.

Those details may feel wrong, but they’re insufficient to prove it’s a scam. You’ll need to dig deeper. Here are some ways you can do that:

  • Investigate the domain: Do a Web search on the domain in question: elitejusticeadvisors.biz. Because others have written about this scam, articles identifying it as a scam will appear on the first page of the results.
  • Search for the lawyer and firm: The lawyer’s name is too generic to yield revealing results, but if you do a Web search on “Dean Parker Commonwealth Legal Services,” you’ll once again see that others have identified it as a scam.
  • Check a state bar association directory: Most state bar associations or state courts have a searchable directory of licensed legal professionals. A quick search of the State Bar of Arizona’s member directory reveals that no “Dean Parker” is licensed in Arizona.
  • See if the headshot matches a real person: If the website provides a headshot, you can copy the image (Control-click it and choose Copy Image) and paste it into the TinEye reverse image search engine. Since all the results say “generated.photos,” it’s a good bet that the image was AI-generated.
  • Search for the company’s full name and address: As with the name of the lawyer, the generic-sounding name of the law firm will probably match other companies. However, if you search for the full name and address, you’ll likely turn up articles about it being fake.
  • Visit the address virtually: With Apple Maps and Google Maps, you can verify that a business is present at a location (or not) and often view the offices using Google Street View. Both mapping tools show no law firm at the provided address. Additionally, the building does not have a fourth floor, as specified in the address.
  • Ask ChatGPT: Now that ChatGPT has access to current Web information, it’s worth pasting the complete contents of the message into a ChatGPT conversation and asking it to tell you about the message. Start generally, but then ask if it thinks the message might be a scam, and if so, to suggest ways you could verify your suspicions.

Some of the above search suggestions identify the scam only because the scammer has reused the same company name, lawyer name, physical address, and website. If you were the first to be targeted by a new scam, the state bar association search and physical address check would be the most likely to expose it.

Let us leave you with an important caveat. You shouldn’t assume that all copyright infringement messages are scams. A legitimate DMCA takedown notice will ask you to remove the content, and a real copyright infringement message—probably from a company that specializes in such matters rather than a lawyer—will likely demand payment. In both cases, take down the offending image right away. If you really were using an image without permission, some payment may be required, and if the amount feels excessive, contact a lawyer specializing in copyright infringement cases. They may be able to negotiate a lower payment or point out issues that will make the claim go away.

(Featured image based on an original by iStock.com/Olivier Le Moal)

Social Media: If you receive what looks like a copyright infringement message complaining about an image on your website, don’t panic—it might be a scam. We help you identify such scams and explain what to do if the message turns out to be real.

Use Guided Access for Securely Allowing Others to Use an App on Your iPhone or iPad

/in /by

iPhones and iPads are highly personal devices, but you might want to let someone else use a particular app on yours without letting them poke through Messages, Mail, and Photos. For example, a child could play a game, a volunteer could check in attendees, or a friend could take photos. To allow this, Apple created Guided Access, which you turn on in Settings > Accessibility—give it an easily remembered passcode and decide if you want to let the display auto-lock. Then, to turn on Guided Access, open the app you want to share and triple-click the side or top button. Options let you control buttons, the accelerometer, software keyboards, touch input, and a time limit. To end a Guided Access session, triple-click the side or top button, enter the Guided Access passcode, and tap End.

(Featured image by iStock.com/Userba011d64_201)

Social Media: If you’d like to allow a child, friend, or colleague to enjoy a specific app on your iPhone or iPad while keeping them focused and preventing access to everything else on the device, check out Apple’s Guided Access feature.

Watch Out for PayPal Invoice Phishing Scams

/in /by

We’ve seen an uptick in fake invoices from scammers using PayPal. Because they’re being sent through PayPal itself, spam filters won’t catch them, and they have few of the usual markers of phishing email (but look for sketchy names and email addresses at the top). Some are even forged to appear as if they come from Apple. Never pay a PayPal invoice that you can’t tie directly to something you’ve ordered, and don’t call the number listed—the scammer will try to convince you that the invoice is real. If you receive one of these invoices, click the “Report this invoice” link at the bottom to help protect others who might have received it, and forward the message to phishing@paypal.com. Don’t mark the invoice as spam, though, since that will train your email client to be suspicious of legitimate messages from PayPal.

(Featured image by iStock.com/Moostocker)

Social Media: Beware of PayPal invoice scams that might even appear to come from Apple. Should you receive one, report it to PayPal to help protect other people, but don’t mark the message as spam.

New Seventh-Generation iPad mini Adds A17 Pro for Apple Intelligence

/in /by

Although the first wave of Apple Intelligence features won’t upend the user experience for most people, Apple is pushing hard to ensure that all its new devices can participate. That’s largely what’s behind the recently released seventh-generation iPad mini. It’s physically unchanged other than a few new colors, but under the hood, the iPad mini sports an A17 Pro processor that makes it compatible with Apple Intelligence. Other changes from the previous generation include Apple Pencil Pro support, 128 GB of storage at the base level (up from 64 GB), 10 Gbps USB 3 (twice as fast), Wi-Fi 6E and Bluetooth 5.3 (up from Wi-Fi 6 and Bluetooth 5.0), and cellular support only via eSIM (no more physical nano SIM). The price still starts at $499, with cellular connectivity adding $150. It’s a minor update, but one that keeps the iPad mini up to date for those who prefer a more compact iPad design.

(Featured image by Apple)

Social Media: Apple has updated the iPad mini with an A17 Pro chip for Apple Intelligence, along with more storage, faster connectivity, and support for the Apple Pencil Pro. It’s still $499 and remains an excellent option for anyone wanting a smaller iPad.

Apple’s Tips App Provides Extensive User Guides and Helpful How-Tos

/in /by

Apple has included the Tips app with the iPhone and iPad since iOS 8 in 2014 and on the Mac since macOS 10.14 Mojave in 2018. Initially, it didn’t contain much useful content, and many longtime users ignored it. However, Apple has significantly increased the amount of information in Tips over time, adding device-specific tips, full device and app user guides, highlights of new features, and more. Many tips even include short demonstration videos. Tips is worth exploring or referring to the next time you have a question. Be sure to encourage anyone you know who’s new to the iPhone, iPad, or Mac to take a look—it even helps them practice key gestures!

(Featured image by Adam Engst)

Social Media: If you haven’t explored Apple’s Tips app on the iPhone, iPad, or Mac recently, check it out. Apple has added a lot more content, including device and app user guides, highlights of new features, and interactive practice guides.

A Few of Our Favorite Things: Tech Edition

/in /by

The holiday season is fast approaching, but we’re asked to recommend tech gear year-round. Here are some recommendations if you’re looking for a geeky gift for that special someone or need to supplement your tech toolkit with new or updated equipment. We don’t have personal experience with all these items, and there are undoubtedly many worthy alternatives—next time we chat, let us know about peripherals you’ve particularly liked. Where possible, we provide links to the manufacturer’s product page and to Amazon, where prices are sometimes lower.

External SSD

All Macs now use solid-state storage internally, and the pricing of external solid-state drives now makes them attractive for both additional storage and silent backups. SSDs also provide the ultimate performance for demanding workflows. The Samsung and Crucial SSDs are good general-purpose drives; look at the OWC Envoy Pro FX for high-performance tasks.

External Hard Disk Drive

For extensive backups and massive archives, you need a large external hard drive. They come in sizes up to 20 TB, and you can pay less than $20 per terabyte, although $20–$30 per terabyte is more common. It’s impossible to recommend specific models without knowing how much storage you need, but check out products from these manufacturers. Because hard drive prices fluctuate wildly, visit diskprices.com to identify current deals on new drives.

  • Seagate: Seagate offers a collection of desktop and portable drives under its own name and the LaCie brand. Apart from some of the larger LaCie drives, most are aimed at consumers.
  • Western Digital: Although some suggest that Western Digital drives are less reliable than Seagate’s, many people like the company’s wide variety of external hard drives.
  • OWC: Other World Computing sells desktop and portable drives with an emphasis on RAID storage and professional uses. OWC also offers enclosures into which you can install bare drives purchased elsewhere, which can save money if you want to upgrade the drive over time.

External Displays

You can find a wide array of displays that work with a Mac, with Apple’s Studio Display leading the pack in both features and price. It’s a 5K display that provides unparalleled sharpness at its standard pixel-doubled resolution of 2560×1440. There’s little direct competition—LG offers the main 5K display that’s cheaper. If that still exceeds your budget, check out the 27-inch 4K displays from Alogic and Asus, which connect via USB-C. Dell and BenQ also make high-quality screens that connect using Thunderbolt. Note that these third-party displays don’t include webcams and generally feature subpar speakers compared to the Apple Studio Display, so building a comparable display would require a separate webcam (or an iPhone using Continuity Camera) and speakers.

Laptop Chargers

Although all MacBooks come with a power adapter, you might want additional chargers that stay plugged in wherever you work or take up less space in your laptop bag. Plus, Apple’s chargers, though high quality, are expensive and large. Consider these alternatives, keeping in mind that fast charging requires higher wattages than standard charging (70W for the M3 MacBook Air, 96W for the 14-inch MacBook Pro, and 140W for the 16-inch MacBook Pro). Extra ports are often welcome, and the OneAdaptr chargers work in 200 countries.

USB Hubs

There are lots of reasons to want a USB hub, and your needs will push you toward one product or another. We chose three options: the Anker 555 provides many different types of ports, the Anker 10-port hub provides numerous USB Type-A ports, and the Satechi 4-port hub offers USB-C ports.

  • Anker 555 USB-C Hub (8-in-1) (Anker, Amazon)
  • Anker 60W 10-Port USB 3.0 Data Hub (Anker, Amazon)
  • Satechi 4-Port USB-C Hub (Satechi, Amazon)

Thunderbolt Docks

USB hubs are sufficient for many situations, but for more demanding setups, you’ll want a Thunderbolt dock that enables you to connect multiple external displays, hard drives, and Gigabit Ethernet, all while using high-wattage charging. The Sonnet and CalDigit docks boast the most ports in horizontal and vertical form factors, respectively, and the OWC dock trades some ports for portability.

Non-Apple Pointing Devices

Some people dislike trackpads, and others aren’t fond of Apple’s Magic Mouse. Luckily, there are plenty of alternatives. Although most Bluetooth mice will work with the Mac, additional software may be necessary to control tracking speed, extra buttons, or scroll wheels. Unusual pointing devices like the Kensington trackball and Contour RollerMouse may be appreciated by those suffering from hand or wrist pain from mousing.

Non-Apple Mac Keyboards

All Macs other than the Mac mini come with a keyboard, of course, but if you’re not a fan of the feel and minimal key travel of Apple’s keyboards, you might consider an alternative. You’ll need to decide if you want a full-size keyboard with a numeric keypad or a compact keyboard that takes up less space on your desk—there are also various sizes in between. Also, keyboards use different switches under their keycaps, so it may require experimentation to find what you like best. It’s worth buying a keyboard aimed at the Mac market to ensure it has or can be configured with the correct keys. The recommendations below should get you started; also check out other products from these manufacturers.

iPad Keyboards

Apple makes some of the best keyboards for the iPad, but they don’t work with all older models. The company makes the Magic Keyboard for the M4 iPad Pro models, the Magic Keyboard that works with the iPad Air and earlier iPad Pro models, and the Magic Keyboard Folio for the 10th-generation iPad. If you want to spend less, leave out the trackpad, or have a different case design, look into the alternatives.

Small Device External Batteries

Although Apple continuously works to improve battery life for the iPhone, iPad, Apple Watch, and AirPods, there will always be situations—travel, camping, non-stop use—where an external battery is a lifesaver. That’s especially true for older devices whose batteries don’t last as long as they used to.

MagSafe Chargers for the iPhone

Wired charging will always be faster and more efficient than wireless charging, but the convenience of MagSafe charging for the iPhone is compelling. As a bonus, MagSafe chargers can also power wireless charging cases for the AirPods Pro, and some, like the KUXIU X55, feature a puck for recharging the Apple Watch.

Let us leave you with a final piece of advice. For many of these product categories, you’ll find a dizzying array of alternatives at bargain basement prices from no-name Chinese manufacturers. While it’s impossible to make blanket assertions, we recommend sticking with reputable companies that have been serving Apple users for years. Even if their products are somewhat more expensive, they’re less likely to cut corners on manufacturing quality and safety and more likely to provide support in the event of problems.

(Featured image by iStock.com/Gatot Adriansyah)

Social Media: If you’re looking for a geeky gift for the Apple user on your holiday list or need to bolster your tech toolkit with new or updated gear, read our recommendations for a wide variety of peripherals.

Beware Fake “Sextortion” Scams

/in /by

All those data breaches are coming back to haunt us. Once our phone numbers and addresses began to be leaked, it was only a matter of time before scammers would personalize their attacks to make them seem more real. The latest “sextortion” scams purport to have compromising video of you taken from your computer’s webcam, backing it up with your phone number and a Google Street View-like image that matches your leaked address. They make a lot of claims and dire-sounding threats, but talk is cheap, and there’s nothing behind them. Do not pay the scammers!

(Featured image by iStock.com/Thapana Onphalai)

Social Media: Scams are starting to incorporate personal information stolen in data breaches, so you may get “sextortion” threats that purport to know your phone number, address, and more.

Reveal Mac Window Proxy Icons Permanently with This Setting

/in /by

We’re big fans of the Mac’s window proxy icons, those little icons that appear in window title bars next to the filename. They’re not just cosmetic—you can use them just like the Finder icon for the open document. You can drag one to Mail to attach the document to a message, to a Web browser to upload it, or to any other location you can drag a document’s icon in the Finder. You can also drag a proxy icon for a folder from the title bar of its Finder window to Open and Save dialogs to navigate to the folder. In macOS 11 Big Sur, Apple hid the proxy icon until you moused over the filename, but starting in macOS 12 Monterey, the company provided an option to show them all the time. To enable it, select System Settings > Accessibility > Display > Show window title icons.

(Featured image by Adam Engst)

Social Media: People who like using the Mac’s window proxy icons (and if you don’t know about them, you should!) can make them visible at all times with an option deep within System Settings. Here’s how to find it and what you can do with proxy icons.

Apple ID Renamed to Apple Account in Latest Operating System Releases

/in /by

In macOS 15 Sequoia, iOS 18, iPadOS 18, and watchOS 11, Apple has officially renamed Apple ID to Apple Account. The new name is a slightly more sensible term because you can sign in to an Apple Account that holds your information, whereas an Apple ID was primarily an identifier—it’s an email address—that didn’t inherently imply that it stored data. The name change is mostly a distinction without a difference, but you should be aware of it when reading support documentation or tech articles. You’ll see the new term in System Settings on the Mac and Settings on the iPhone and iPad.

(Featured image based on an original by iStock.com/Armastas)

Social Media: Apple has renamed Apple ID to Apple Account everywhere as of macOS 15 Sequoia, iOS 18, iPadOS 18, and watchOS 11. Nothing has changed functionally, but keep it in mind when reading tech articles or support documentation.

Secret Link