Posts

Pay Attention to Unsolicited Facebook Password Reset Messages

We’ve seen an uptick in attacks on Facebook accounts that generate email messages like the one below. It’s saying someone is attempting to reset your Facebook password in order to access your account. If you didn’t ask to reset your Facebook password within the past 5 minutes, do not enter the provided code! In fact, do nothing with a message like this, since you can’t easily tell if it’s a legitimate message from Facebook or a phishing attack. As long as your email account hasn’t been compromised, you have nothing to worry about, but consider any such messages as encouragement to have strong, unique passwords for your email account and any social media services. Also, we highly recommend turning on two-factor authentication for these accounts. Of course, if you get a second message saying that your password was reset, immediately secure your account.

(Featured image by iStock.com/Nicholas77)


Social Media: If you receive unexpected password reset email messages from Facebook, don’t worry—but don’t click anything! Use them as encouragement to ensure your email and social media passwords are strong, unique, and protected with two-factor authentication.

Avoid Confusion by Setting iPhone Password Autofill to Only One App

Let’s say you use 1Password (or another third-party password manager) on an iPhone or iPad. When that’s the case, it’s easy to end up in a situation where your device will present passwords from both 1Password and iCloud Keychain, possibly along with another app. That won’t break anything, but as you can see in the screenshot below, dueling password managers can be confusing, particularly if one doesn’t have up-to-date passwords. To make logging in easier, go to Settings > Passwords > Password Options and select just one app in Allow Filling From. For instance, if you’re using 1Password, turn off iCloud Passwords & Keychain and all the other apps.

(Featured image based on an original by iStock.com/Kostiantyn Filichkin)


Social Media: Do you suffer from dueling password managers on your iPhone or iPad? If you’re using a third-party password manager, turn off password autofill for iCloud Passwords & Keychain and any other apps to avoid confusion.

Apple Starts Releasing Rapid Security Responses for the iPhone, iPad, and Mac

By now, you’ve probably seen a new form of update for iOS, iPadOS, and macOS: the Rapid Security Response. Early in May, Apple released the first instances of these updates, which the company had promised for iOS 16, iPadOS 16, and macOS 13 Ventura when those operating systems were first announced. Let’s answer some of the questions we’ve been hearing.

What are Rapid Security Responses?

Rapid Security Responses are security updates that Apple wants to distribute as quickly and broadly as possible. Users often delay installing standard operating system updates because they’re huge downloads, interrupt work for a long time while installing, and occasionally cause new problems.

To address these concerns, Rapid Security Responses are much smaller, install far more quickly (sometimes without a restart), and can easily be removed if they cause problems.

What security vulnerabilities do Rapid Security Responses address?

Apple released no security notes for its first set of Rapid Security Responses, and we don’t anticipate that changing for future releases. The point of a Rapid Security Response is to block a serious vulnerability that’s likely being exploited in the wild, and Apple doesn’t describe such fixes until it has patched vulnerable operating systems, including older versions, tvOS, and watchOS, none of which can take advantage of Rapid Security Responses. If this last set of updates is any indication, Apple will identify the Rapid Security Response fixes in security notes for the next full operating system update, which will also include the same fixes.

How do I install a Rapid Security Response?

Rapid Security Responses use the same software update mechanism as Apple’s other operating system updates. You can and generally should let Rapid Security Responses install automatically. That’s the default, but check to make sure.

  • iOS/iPadOS: Go to Settings > General > Software Update > Automatic Updates, and look at “Security Responses & System Files.”
  • macOS: Go to System Settings > General > Software Update, and click the ⓘ next to Automatic Updates. Then look at “Install Security Responses and system files.”

On recent iPhones and Macs, the installation time was quick, with the device being ready to use again within 2–4 minutes, including a restart. Older devices took longer, and future Rapid Security Responses may take more or less time.

How can I revert if a Rapid Security Response causes a problem?

Apple makes this easy in both iOS/iPadOS and macOS, with the amount of time being roughly similar to how long the Rapid Security Response took to install:

  • iOS/iPadOS: Go to Settings > General > About > iOS/iPadOS Version, tap Remove Security Response, and confirm the action.
  • macOS: Go to System Settings > General > About, click the ⓘ next to the macOS version, click Remove & Restart, and confirm the action.

How can I tell if I’m running a Rapid Security Response?

With this first Rapid Security Response, iOS and iPadOS both posted a notification informing the user of the update; macOS did not.

More generally, devices updated with a Rapid Security Response will have a letter after their version number, such as 16.4.1 (a), and the letter will disappear with the next full update, such as iOS 16.5. To determine what version your devices are running:

  • iOS/iPadOS: Go to Settings > General > About, and look at the iOS/iPadOS Version line.
  • macOS: Choose About This Mac from the Apple menu, and look at the macOS line.

Given what we know now, we recommend that everyone install Rapid Security Responses as soon as they’re available. If you notice a problem afterward, you can remove it. The only caveat is that if your employer manages your device, they may prefer to delay the Rapid Security Response installation until they’re comfortable with the changes.

(Featured image by iStock.com/champpixs)


Social Media: In an effort to protect users from security vulnerabilities that are being actively exploited, Apple has introduced Rapid Security Responses, which are security updates that are quick to download, quick to install, and easily removed if necessary.

Prevent Quick Screenshots from Cluttering Your Photos Library on the iPhone and iPad

By default, when you take a screenshot (instructions for iPhone and iPad), it saves to Photos. But what if you don’t want something like a quick image of a map for a friend to clutter your Photos library? In iOS 16 and iPadOS 16, Apple has added new options. When you tap the screenshot thumbnail that appears briefly after pressing the capture buttons, you can crop and mark up your image. Or not. The key is that when you’re ready, tap Done to get an option to Copy and Delete, which is great when all you want to do is paste the screenshot into a Messages conversation or Mail message. You can also save to Photos, Files, or Notes, or just trash the screenshot if you’ve changed your mind.

(Featured image by iStock.com/simona flamigni)


Social Media: Do you take temporary screenshots on your iPhone or iPad so you can message what your screen looks like to a friend? If you don’t want these images saved in Photos, read on for a tip about how to move them to the clipboard for pasting instead.

Make Apple Watch Apps Easier to Find with List View

With the original version of the Apple Watch, Apple introduced “grid” view, which shows tiny icons for each app in a random circular pattern, making them difficult to find for most people. Happily, at some point, Apple relented and gave us the more sensible list view, which shows all the apps—with their names—sorted alphabetically. If your Apple Watch shows apps in grid view when you press the Digital Crown, fix it by opening the Watch app on your iPhone, tapping App View, and selecting List View. You can also do this on the watch itself in the Settings app.

(Featured image by Adam Engst)


Social Media: If you have trouble finding apps on your Apple Watch in the randomly arranged “grid” view, you’ll be pleased to learn how to switch to the more sensible list view, which sorts alphabetically.

New Apple Card Savings Accounts Offers 4.15% Interest

Apple is continuing its forays into the financial world with the introduction of Apple Card Savings, a new savings account from Goldman Sachs that offers 4.15% interest with no fees, no minimum deposits, and no minimum balance requirements. The Savings account is designed to hold your Daily Cash rewards from using the Apple Card, but you can transfer as much as you want into it, up to $250,000. Given the woefully low interest rates offered by many local banks, the Apple Card Savings account may be compelling. It’s easy to manage in Apple’s Wallet app, but it doesn’t integrate with other personal finance apps right now.

(Featured image by iStock.com/brookebecker)


Social Media: Apple’s latest new product is… a 4.15% savings account? That’s right, as part of its financial ventures, Apple has introduced Apple Card Savings, a high-yield savings account aimed at holding Daily Cash rewards and more.

iOS 16.4 Adds Voice Isolation Feature to Improve Cellular Calls

In iOS 15, Apple added the Voice Isolation feature to FaceTime calls to filter out noise around you while you’re talking, which is a boon if you’re making a call in a loud space or outside environment. With the recently released iOS 16.4, Apple has now brought that feature to cellular calls as well, but it’s not an option in Settings > Phone, as you might expect. Instead, during a call, open Control Center by swiping down from the top right of the screen (Face ID iPhones) or up from the bottom (Touch ID iPhones). Then tap the Mic Mode button and Voice Isolation. You won’t hear any difference, but the person on the other end should be able to hear you better. iOS remembers your setting, so switch back to Standard when you’re done—Voice Isolation may not sound as good as Standard in quiet spaces.

(Featured image by iStock.com/Jub Job)


Social Media: If you make phone calls in loud environments, you can now be heard more easily with iOS 16.4’s new Voice Isolation feature for cellular calls. The tricky part is enabling it in Control Center while talking.

Make Sure to Back Up iPhone Photos on Your Mac

If your iPhone were to be stolen or suffer an unfortunate accident, would you lose all your precious photos? Those using iCloud Photos are probably shaking their heads smugly, thinking that all those baby and vacation photos are backed up securely in iCloud. iCloud Photos does indeed store a copy of all your photos, but you shouldn’t assume that everything in it is completely protected. Although it’s extremely unlikely that Apple’s systems would fail so that you’d lose anything, the contents of your iCloud account aren’t as safe as would be ideal.

An Aside to Explain Why iCloud Isn’t Perfectly Secure

Recently, Wall Street Journal reporters Joanna Stern and Nicole Nguyen covered a troubling form of crime aimed at iPhone users in an article (paywalled) and accompanying video. Thieves hang out in bars, looking for users who tap in their passcodes instead of using Face ID or Touch ID. Once they’ve learned someone’s passcode with surreptitious shoulder surfing, they grab the iPhone and run. As soon as they’re clear, they use the passcode to change the user’s Apple ID password and enable or reset a recovery key, which prevents the user from employing Find My to locate and lock the iPhone. Worse, with the passcode, they can make purchases with Apple Pay, access all passwords in iCloud Keychain, and use other information on the iPhone to facilitate identity theft. It’s a disaster.

But it gets worse, as the reporters detail in a new Wall Street Journal article (paywalled) and video. By enabling a recovery key, the thief disables Apple’s normal account recovery process for resetting the Apple ID password. In other words, if this were to happen to you, along with all the financial losses and headaches, you would lose access to your iCloud account, possibly forever, and with it, all your photos in iCloud. With luck, Apple will block this attack soon.

For now, follow this commonsense advice to reduce the chances of being victimized:

  • Pay attention to your iPhone’s physical security in public.
  • Always use Face ID or Touch ID in public.
  • If you must enter your passcode in public, conceal it from anyone nearby.
  • Never share your passcode beyond highly trusted family members.

Backing Up Your iPhone Photos

As with so many other modern ills, good backups go a long way toward minimizing the pain of problems. They won’t prevent someone from stealing your iPhone or locking you out of your account, but if that were to happen, at least you won’t lose all your photos!

There are two possible backup scenarios. Using iCloud Photos and downloading originals to your Mac is easiest but requires that you pay Apple for more storage if you have more than a handful of photos. If you don’t use iCloud Photos, you can just back up your iPhone to your Mac or, better yet, import images into Photos on the Mac and then sync them back. It’s more work and fussier, but doesn’t cost anything.

  • iCloud Photos: When using iCloud Photos, the trick to protecting your pictures is to sync the originals with your Mac. In Photos > Settings/Preferences > iCloud, select Download Originals to this Mac. The only downside of this approach is that you need enough disk space on your Mac to hold them all; if that’s not the case, you may need to move your system Photos Library to an external hard drive.
  • iPhone-only photos: If you aren’t using iCloud Photos, the best approach is to connect your iPhone to your Mac using a USB-to-Lightning cable or Wi-Fi and then import new snapshots into Photos on your Mac manually (select the iPhone in the Photos sidebar). It’s helpful to remove the original photos from the iPhone with the Delete Items checkbox after importing so you can manage them solely on the Mac.

    Then you can sync all the photos (or just desired ones, if your iPhone is low on space) back to your iPhone using the Finder. First, select the iPhone in a Finder window’s sidebar. Then click Photos in the button bar at the top, and select “Sync photos to your device from Photos” along with “All photos and albums” and “Include videos” in the options below. Finally, click Apply or Sync.

    Technically speaking, backing up your iPhone to your Mac without syncing to Photos also backs up your photos, but the only way to get them back is to restore a backup onto an iPhone. It’s much better to have all the photos accessible in Photos too.

Either way, once the photos are on your Mac, you should back up all your data using Time Machine, an Internet service like Backblaze, or a third-party app like Carbon Copy Cloner or SuperDuper. If you’re concerned about the quality of your backups for preserving photos, contact us for advice.

(Featured image by iStock.com/metamorworks)


Social Media: With new reports of iPhone theft victims being locked out of their iCloud accounts, it’s all the more important that you copy your iPhone photos to a Mac and then back up that Mac.

Set Your Apple Watch Clock Ahead a Few Minutes to Avoid Being Late

Those who tend to cut things tight have a time-honored tradition of setting their watches ahead by a few minutes. That way, when you glance at your watch and realize that you need to leave, you actually have a few more minutes. You can do this with your Apple Watch, but only on the watch itself. Press the Digital Crown to see your apps, tap Settings, scroll down to and tap Clock, tap the button for Set Watch Face Display Time Ahead, and use the Digital Crown to choose your desired time adjustment. Note that this setting affects only the time you see on the watch face. All alarms and notifications will come in at the correct times.

(Featured image by iStock.com/Bobex-73)


Social Media: Want to give yourself a few more minutes to get to meetings on time? Use this little-known option to set the time displayed on your Apple Watch ahead by a few minutes.

How to Turn Mail’s Rich Website Previews into Plain Links

Sometimes apps can be too helpful. Apple’s Mail on the Mac likes to turn pasted URLs into graphically rich previews, and sometimes that’s OK. But other times, the preview is confusing or takes up too much space. Or you may want to send a plain link so the recipient can see its text. There are three ways to avoid rich link previews:

  • Before pasting a URL into your message, type a space or any other text. Mail converts URLs to rich previews only when they’re on a line by themselves.
  • Hover over the preview, click the down-pointing arrow that appears, and choose Convert to Plain Link from the pop-up menu.
  • In Mail > Settings > Composing, change the Message Format pop-up menu to Plain Text. Although this eliminates rich link previews, it also prevents you from including formatting and images.

(Featured image by Adam Engst)


Social Media: Annoyed by how Apple’s Mail on the Mac turns pasted URLs into rich link previews? We offer three ways to avoid them.