I am developing a daemon-based product that needs a cryptographic, non-spoofable proof of machine identity so a remote management server can grant permissions based on the physical machine. I was thinking to create a signing key in the Secure Enclave and use a certificate signed by that key as the machine identity. The problem is that the Secure Enclave key I can create is only accessible from user context, while my product runs as a system daemon and must not rely on user processes or launchAgents. Could you please advise on the recommended Apple-supported approaches for this use case ? Specifically, Is there a supported way for a system daemon to generate and use an unremovable Secure Enclave key during phases like the pre-logon, that doesn't have non user context (only the my application which created this key/certificate will have permission to use/delete it) If Secure Enclave access from a daemon is not supported, what Apple-recommended alternatives exist for providing a hardware-backed
Search results for
apple pencil battery life
146,588 results found
Selecting any option will automatically load the page
Post
Replies
Boosts
Views
Activity
First up, let me correct a common misconception: The Secure Enclave doesn’t store keys [1]. Rather, it wraps the key in such a way that only it can unwrap it and use it. It’s then up to you as to where you want to store the wrapped key. A common choice is the keychain, but you could just as easily write the wrapped key to a file. As to whether you can access the SE from a daemon, my understanding is that this isn’t supported, although I’m working to confirm that in a different context. But before we start down the SE path, I want to clarify this: [quote='804612021, chapo213, /thread/804612, /profile/chapo213'] non-spoofable proof of machine identity so a remote management server [/quote] What do you mean by “non-spoofable”? Specifically, who are you trying to protect against? Bad actors on the network? Bad actors on that specific Mac? Or users on the Mac? This is important because, in my experience, trying to protect yourself from the user is a mug’s game [2], while trying to protect yourself from bad actors
Topic:
Privacy & Security
SubTopic:
General
Tags:
It looks like one of my colleagues answered this in the new thread you created. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic:
App & System Services
SubTopic:
Networking
Tags:
When will Apple mobile phones support some of the optional features of Bluetooth 5... specifically Extended Advertising and LE Coded PHY? There are many applications that benefit from having this capability in the mobile phone.
It looks like one of my colleagues answered this in the new thread you created. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic:
App & System Services
SubTopic:
Core OS
Tags:
The AVB AVnu MILAN Convention has a groweing Population. Many big companies (Cisco, Meyer Sound, d&b Audio, l‘acoustics, Presonus, digico etc.) implements the AVB AVnu Milan Standards. Is there a plan on the Apple side to also implement AVnu Milan on top of the AVB Protocol? The advantage for Apple Sound would be a great Integration in the professionell Audio market and a more stable intergration on top of the AVB protocol. The atdecc work, but Not that stable.
Topic:
Media Technologies
SubTopic:
Audio
I’ve moved your thread over to Media Technologies > Audio, because this is more of an audio thing that a networking thing. It’s possible that someone with relevant audio expertise might chime in. However, you’re unlikely to get an answer to this: [quote='804668021, Cssoundlab8, /thread/804668, /profile/Cssoundlab8'] Is there a plan on the Apple side to also implement AVnu Milan on top of the AVB Protocol? [/quote] See tip 3 in Quinn’s Top Ten DevForums Tips. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic:
Media Technologies
SubTopic:
Audio
The last time I helped someone with this trap, it was caused by a concurrency bug in their code. See this thread. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic:
Programming Languages
SubTopic:
Swift
Tags:
If you manually join the access point, using Settings > Wi-Fi, do you see the same 10% failure rate? Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic:
App & System Services
SubTopic:
Networking
Tags:
If your goal is to make ReminderRow unchecked sendable, the syntax to use is: enum ReminderRow : Hashable, @unchecked Sendable { … } Having said that, I don’t think this makes a lot of sense for a simple enum. I put ReminderRow into a simple test program and it seems to be sendable by default. What problem are you trying to solve by adding @unchecked? Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic:
Programming Languages
SubTopic:
Swift
Tags:
The most common cause of problems like this is a deployment target mismatch. That is, your library’s deployment target must be less than or equal to the deployment target of the app using the library. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic:
Programming Languages
SubTopic:
Swift
Tags:
[quote='803239021, mikhailfrommarki, /thread/803239, /profile/mikhailfrommarki'] Is there a technical possibility to change the text in the add VPN configuration dialog? [/quote] No. That warning is presented by the system and there’s no way to, for example, supply a privacy usage string for the system to include. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic:
App & System Services
SubTopic:
Networking
Tags:
What sort of device is this? Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic:
Code Signing
SubTopic:
Certificates, Identifiers & Profiles
A Mac app? macOS doesn’t have an API for accessing the user’s SMS messages. You might be able to make some progress by using AppleScript to script the Messages app, but that’s quite limited. On iOS there is TelephonyMessagingKit, but it comes with its own limitations. Rather than summarise them here, I recommend that you read the Default carrier messaging apps section of the docs. If the above isn’t sufficient, feel free to file an enhancement request outlining your specific requirements. Please post your bug number, just for the record. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic:
App & System Services
SubTopic:
General
Tags:
Hello all, I'm developing a Mac app and need to read the content of incoming SMS, I am able to implement in android just the user has to consent and it does not read her contacts messages, so I am wondering if apple can allow this.