Search results for

“eskimo”

36,629 results found

Post

Replies

Boosts

Views

Activity

Reply to Notarization Delay "In Progress"
You can expect that most uploads will be notarised quickly. Occasionally, some uploads are held for in-depth analysis and may take longer to complete. As you notarise your apps, the system will learn how to recognise them, and you should see fewer delays. For lots of additional info about notarisation, see Notarisation Resources. Specifically, it links to a Q&A with the notary service team that’s quite instructive. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
3w
Reply to Recording a Packet Trace
[quote='878847022, jzilske, /thread/817599?answerId=878847022#878847022, /profile/jzilske'] the HTTP Traffic Instrument does not seem to record anything [/quote] Indeed. I had just assumed that it’d work for requests generated by a web view, but I tried that here today and it doesn’t seem to be the case )-: Still, that’s more evidence that this QUIC traffic is coming from a web view, which is very likely to be HTTP/3. And you should be able to intercept that with a debugging HTTP proxy. Have you tried that already? Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
3w
Reply to spctl --type install rejects notarized .pkg on macOS 26 Tahoe (26.3)
Honestly, I’m not sure what’s going on here. None of this sounds at all familiar. I’d like to get a copy of your installer package so that I can poke at it myself. Can you share a link to a download site here? [1] If not, you can file a bug and attach it to your bug report, and then post the bug number here. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com [1] Posty your link in the clear; see tip 14 in Quinn’s Top Ten DevForums Tips.
Topic: Code Signing SubTopic: Notarization Tags:
3w
Reply to XCTest Bundle cannot access local network.
Thanks for filing FB22152886. Zenning on this over the weekend I realised that there’s a much easier solution here. This is based on two key factoids: The app under test must have the Local Network privilege. Local network privacy doesn’t apply to loopback connections. So, you can set up a network listener in your app that listens for incoming connections and, for each one, opens a connection to your accessory and proxies traffic between the two. Your UI test can then connect to 127.0.0.1 and talk to the accessory indirectly through the app. I prototyped this in my office and it seems to work. I recommend that you try it out and see how far you get. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
3w
Reply to User crash report contains ??? instead of my app's symbols and no binary image base address
[quote='878607022, Nickkk, /thread/817724?answerId=878607022#878607022, /profile/Nickkk'] I'm assuming that's what you mean by Mach-O image. [/quote] A Mach-O image is code that can be mapped into memory by the dynamic linker and then run directly, as opposed to something like a .o file that contains code that must be linked before it can be run. I talk more about this in An Apple Library Primer. A Mach-O image is often stored within a universal binary, one image per architecture. So when looking at stuff like this you have to consider the image of the architecture that was running. The other thing to considered is that the dynamic linker may only map in parts of your image. A good way to see what actually gets mapped is to run the app and then run vmmap against it. Consider this: % ls -lh Pages Creator Studio.app/Contents/MacOS/Pages -rwxr-xr-x 1 root wheel 45M 16 Jan 02:44 Pages Creator Studio.app/Contents/MacOS/Pages The Pages executable is 45 MiB. And this: % file Pages Creator Studio.app/Contents/MacOS/P
3w
Reply to Number of Network Extension Limitations of future macOS
Thanks for posting that log entry. Using that I was able to quickly locate the code that enforces this restriction. It turns out that your analysis is spot on. The content filter machinery is generally limited to 8 filters [1] and on macOS this is divided evenly between the two filter grades [quote='878777022, faisalIkwal, /thread/793289?answerId=878777022#878777022, /profile/faisalIkwal'] Is this documented somewhere? [/quote] Oh, hey, wouldya look at that, it’s actually documented on this page within the Apple Platform Deployment guide. (I really need to spend an afternoon reading that doc thoroughly.) Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com [1] This is visible as CFIL_MAX_FILTER_COUNT in the Darwin open source. WARNING As always, stuff you find in Darwin is considered an implementation detail rather than an API.
3w
Reply to com.apple.developer.web-browser.public-key-credential still leads to com.apple.AuthenticationServices.AuthorizationError Code=1004
[quote='878795022, yonaries, /thread/777992?answerId=878795022#878795022, /profile/yonaries'] Was anyone able to solve this issue? [/quote] I’m not directly involved in this, so I can’t offer any insights myself. However, I was able to check on the state of the above-mentioned bug (FB21575784). Unfortunately it hasn’t yet yielded anything actionable. The logging supplied with the bug report didn’t contain the info we were expecting, and we’re still waiting for a response to our request for more info. @ayoy , If you get a chance, please open up Feedback Assistant and check out the state of FB21575784. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic: Privacy & Security SubTopic: General Tags:
3w
Reply to Missing Entitlement com.apple.developer.wireless-insights.service-predictions in Enterprise Program Provisioning Profiles, Available in Individual Account
AFAICT this capability is not available for Enterprise distribution. I ran through the process described in Finding a Capability’s Distribution Restrictions and, for my Enterprise test team, it only shows Development and Ad Hoc under Provisioning Support. I recommend that you run through this process yourself, just to be sure. Given that, there’s nothing we can do about this here on the forums. Normally I recommend that folks escalate entitlement issues via Apple > Developer > Contact Us > Development and Technical > Entitlements. However, in this case there might be a better path. You wrote: [quote='817971021, liujitong, /thread/817971, /profile/liujitong'] After prior alignment with Apple engineers [/quote] Does that mean you’ve been discussing this issue with someone at Apple already? If so, that’s proabbly your best path forward. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
3w
Reply to Setup SearchDomains with NETransparentProxyProvider
[quote='818199021, dispacthMain, /thread/818199, /profile/dispacthMain'] whats the best way to setup few DNS search domains when using NETransparentProxyProvider. [/quote] There isn’t one. I mean, transparent proxies are kinda meant to be transparent, and monkeying with search domains is anything but (-: However, there are other options in this space. For example, if your product is deployed in a managed environment, you can instruct the site admin to include these search domains. In an unmanaged environment you might be able to apply these settings using NEDNSSettingsManager. It’s focus is on encrypted DNS settings (NEDNSOverHTTPSSettings or NEDNSOverTLSSettings). I’ve never tried it with standard DNS settings (NEDNSSettings) but I can’t see anything that would explicitly block that. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
3w
Reply to Using StoreKit from an AUv3 plugin that can be loaded in-process
[quote='818192021, timboudreau, /thread/818192, /profile/timboudreau'] If there were some sort of signed token, or similar mechanism, that could be bundled or acquired by the running plugin extension [/quote] You should feel free to file an enhancement request for that, but I want to set some expectations here [1]. Apple systems enforce security at process boundaries. If such an API existed: It’d be impossible for the OS to determine whether you’re plug-in made this call, as opposed to some other code in the host app process. Once you had such a token, it’d be impossible for you to prevent some other code in the host app process from ‘stealing’ it [2]. Keep in mind that this “other code” isn’t just the host app itself, but it also includes: Any other plug-in that the host app might load Any code ‘accidentally’ loaded by the host app or these plug-ins [3] The long-term direction here is clear: To meet platform security goals plug-ins must run in a separate process. This is strictly enforced on iOS and it’s gen
Topic: Media Technologies SubTopic: Audio Tags:
3w
Reply to How to launch a sandboxed process as a standalone application?
[quote='818202021, chenxiyuan, /thread/818202, /profile/chenxiyuan'] process B can no longer be launched directly. [/quote] Correct. [quote='818202021, chenxiyuan, /thread/818202, /profile/chenxiyuan'] This issue is particularly prominent because process B has a window and a Dock icon [/quote] If program B works when run independently, rather than as a child process, then you shouldn’t start it as a child process. Instead launch it as a separate app. There are a variety of ways you can do that, but the two most common are: If you want the program to be running all the time, enable that via Service Management framework. Otherwise, start it with NSWorkspace. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
3w
Reply to Notarization Delay "In Progress"
You can expect that most uploads will be notarised quickly. Occasionally, some uploads are held for in-depth analysis and may take longer to complete. As you notarise your apps, the system will learn how to recognise them, and you should see fewer delays. For lots of additional info about notarisation, see Notarisation Resources. Specifically, it links to a Q&A with the notary service team that’s quite instructive. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Replies
Boosts
Views
Activity
3w
Reply to DeviceActivityReportExtension sandbox blocks all output channels — how to export resolved Application.bundleIdentifier?
What _lilpit said, plus… For more on this, see here. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic: App & System Services SubTopic: General Tags:
Replies
Boosts
Views
Activity
3w
Reply to Clarification on Payment Feature for Minor Users in E-commerce Apps due to DeclaredAgeRange (Screen Time / Family Controls API)
Let’s focus this discussion on your other thread. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic: App & System Services SubTopic: General Tags:
Replies
Boosts
Views
Activity
3w
Reply to Recording a Packet Trace
[quote='878847022, jzilske, /thread/817599?answerId=878847022#878847022, /profile/jzilske'] the HTTP Traffic Instrument does not seem to record anything [/quote] Indeed. I had just assumed that it’d work for requests generated by a web view, but I tried that here today and it doesn’t seem to be the case )-: Still, that’s more evidence that this QUIC traffic is coming from a web view, which is very likely to be HTTP/3. And you should be able to intercept that with a debugging HTTP proxy. Have you tried that already? Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Replies
Boosts
Views
Activity
3w
Reply to spctl --type install rejects notarized .pkg on macOS 26 Tahoe (26.3)
Honestly, I’m not sure what’s going on here. None of this sounds at all familiar. I’d like to get a copy of your installer package so that I can poke at it myself. Can you share a link to a download site here? [1] If not, you can file a bug and attach it to your bug report, and then post the bug number here. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com [1] Posty your link in the clear; see tip 14 in Quinn’s Top Ten DevForums Tips.
Topic: Code Signing SubTopic: Notarization Tags:
Replies
Boosts
Views
Activity
3w
Reply to XCTest Bundle cannot access local network.
Thanks for filing FB22152886. Zenning on this over the weekend I realised that there’s a much easier solution here. This is based on two key factoids: The app under test must have the Local Network privilege. Local network privacy doesn’t apply to loopback connections. So, you can set up a network listener in your app that listens for incoming connections and, for each one, opens a connection to your accessory and proxies traffic between the two. Your UI test can then connect to 127.0.0.1 and talk to the accessory indirectly through the app. I prototyped this in my office and it seems to work. I recommend that you try it out and see how far you get. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Replies
Boosts
Views
Activity
3w
Reply to User crash report contains ??? instead of my app's symbols and no binary image base address
[quote='878607022, Nickkk, /thread/817724?answerId=878607022#878607022, /profile/Nickkk'] I'm assuming that's what you mean by Mach-O image. [/quote] A Mach-O image is code that can be mapped into memory by the dynamic linker and then run directly, as opposed to something like a .o file that contains code that must be linked before it can be run. I talk more about this in An Apple Library Primer. A Mach-O image is often stored within a universal binary, one image per architecture. So when looking at stuff like this you have to consider the image of the architecture that was running. The other thing to considered is that the dynamic linker may only map in parts of your image. A good way to see what actually gets mapped is to run the app and then run vmmap against it. Consider this: % ls -lh Pages Creator Studio.app/Contents/MacOS/Pages -rwxr-xr-x 1 root wheel 45M 16 Jan 02:44 Pages Creator Studio.app/Contents/MacOS/Pages The Pages executable is 45 MiB. And this: % file Pages Creator Studio.app/Contents/MacOS/P
Replies
Boosts
Views
Activity
3w
Reply to Number of Network Extension Limitations of future macOS
Thanks for posting that log entry. Using that I was able to quickly locate the code that enforces this restriction. It turns out that your analysis is spot on. The content filter machinery is generally limited to 8 filters [1] and on macOS this is divided evenly between the two filter grades [quote='878777022, faisalIkwal, /thread/793289?answerId=878777022#878777022, /profile/faisalIkwal'] Is this documented somewhere? [/quote] Oh, hey, wouldya look at that, it’s actually documented on this page within the Apple Platform Deployment guide. (I really need to spend an afternoon reading that doc thoroughly.) Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com [1] This is visible as CFIL_MAX_FILTER_COUNT in the Darwin open source. WARNING As always, stuff you find in Darwin is considered an implementation detail rather than an API.
Replies
Boosts
Views
Activity
3w
Reply to Emoji's not rendering in iOS 26.4 beta
But things are working on a real device? Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic: UI Frameworks SubTopic: General
Replies
Boosts
Views
Activity
3w
Reply to com.apple.developer.web-browser.public-key-credential still leads to com.apple.AuthenticationServices.AuthorizationError Code=1004
[quote='878795022, yonaries, /thread/777992?answerId=878795022#878795022, /profile/yonaries'] Was anyone able to solve this issue? [/quote] I’m not directly involved in this, so I can’t offer any insights myself. However, I was able to check on the state of the above-mentioned bug (FB21575784). Unfortunately it hasn’t yet yielded anything actionable. The logging supplied with the bug report didn’t contain the info we were expecting, and we’re still waiting for a response to our request for more info. @ayoy , If you get a chance, please open up Feedback Assistant and check out the state of FB21575784. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
3w
Reply to Missing Entitlement com.apple.developer.wireless-insights.service-predictions in Enterprise Program Provisioning Profiles, Available in Individual Account
AFAICT this capability is not available for Enterprise distribution. I ran through the process described in Finding a Capability’s Distribution Restrictions and, for my Enterprise test team, it only shows Development and Ad Hoc under Provisioning Support. I recommend that you run through this process yourself, just to be sure. Given that, there’s nothing we can do about this here on the forums. Normally I recommend that folks escalate entitlement issues via Apple > Developer > Contact Us > Development and Technical > Entitlements. However, in this case there might be a better path. You wrote: [quote='817971021, liujitong, /thread/817971, /profile/liujitong'] After prior alignment with Apple engineers [/quote] Does that mean you’ve been discussing this issue with someone at Apple already? If so, that’s proabbly your best path forward. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Replies
Boosts
Views
Activity
3w
Reply to Setup SearchDomains with NETransparentProxyProvider
[quote='818199021, dispacthMain, /thread/818199, /profile/dispacthMain'] whats the best way to setup few DNS search domains when using NETransparentProxyProvider. [/quote] There isn’t one. I mean, transparent proxies are kinda meant to be transparent, and monkeying with search domains is anything but (-: However, there are other options in this space. For example, if your product is deployed in a managed environment, you can instruct the site admin to include these search domains. In an unmanaged environment you might be able to apply these settings using NEDNSSettingsManager. It’s focus is on encrypted DNS settings (NEDNSOverHTTPSSettings or NEDNSOverTLSSettings). I’ve never tried it with standard DNS settings (NEDNSSettings) but I can’t see anything that would explicitly block that. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Replies
Boosts
Views
Activity
3w
Reply to Using StoreKit from an AUv3 plugin that can be loaded in-process
[quote='818192021, timboudreau, /thread/818192, /profile/timboudreau'] If there were some sort of signed token, or similar mechanism, that could be bundled or acquired by the running plugin extension [/quote] You should feel free to file an enhancement request for that, but I want to set some expectations here [1]. Apple systems enforce security at process boundaries. If such an API existed: It’d be impossible for the OS to determine whether you’re plug-in made this call, as opposed to some other code in the host app process. Once you had such a token, it’d be impossible for you to prevent some other code in the host app process from ‘stealing’ it [2]. Keep in mind that this “other code” isn’t just the host app itself, but it also includes: Any other plug-in that the host app might load Any code ‘accidentally’ loaded by the host app or these plug-ins [3] The long-term direction here is clear: To meet platform security goals plug-ins must run in a separate process. This is strictly enforced on iOS and it’s gen
Topic: Media Technologies SubTopic: Audio Tags:
Replies
Boosts
Views
Activity
3w
Reply to How to launch a sandboxed process as a standalone application?
[quote='818202021, chenxiyuan, /thread/818202, /profile/chenxiyuan'] process B can no longer be launched directly. [/quote] Correct. [quote='818202021, chenxiyuan, /thread/818202, /profile/chenxiyuan'] This issue is particularly prominent because process B has a window and a Dock icon [/quote] If program B works when run independently, rather than as a child process, then you shouldn’t start it as a child process. Instead launch it as a separate app. There are a variety of ways you can do that, but the two most common are: If you want the program to be running all the time, enable that via Service Management framework. Otherwise, start it with NSWorkspace. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Replies
Boosts
Views
Activity
3w
Reply to Access Screen Time total usage from main app when using DeviceActivityReportExtension
[quote='818174021, AmirSwiss, /thread/818174, /profile/AmirSwiss'] Is DeviceActivityReportExtension intentionally sandboxed so Screen Time data cannot be exported to the containing app? [/quote] Yes. See this thread. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic: App & System Services SubTopic: General Tags:
Replies
Boosts
Views
Activity
3w