“eskimo”

[quote='853095021, purcellweb, /thread/853095, /profile/purcellweb'] I’m targeting iOS 25 and later. [/quote] NWEthernetChannel is only available on macOS. iOS doesn’t have an API to send and receive raw Ethernet frames. Share and Enjoy—Quinn “The Eskimo!” @ Developer Technical Support @ Applelet myEmail = eskimo + 1 + @ + apple.com

[quote='911580022, Etresoft, /thread/849928?answerId=911580022#911580022, /profile/Etresoft'] I'm using the new editing tool right now and that's really nice! [/quote] Yay! [quote='911580022, Etresoft, /thread/849928?answerId=911580022#911580022, /profile/Etresoft'] But I think one important aspect is that people are posting here in this forum as a last resort. [/quote] Right. Which brings me back to that word encouraged. I don’t want us to block folks talking here on the forums about their Apple development experiences, but rather make sure that their expectations are aligned with reality. Getting this balance right is gonna be an interesting conversation with all the teams involved (-: Share and Enjoy—Quinn “The Eskimo!” @ Developer Technical Support @ Applelet myEmail = eskimo + 1 + @ + apple.com

Glad to hear that the transfer / approval / onboarding thing got sorted. I’d appreciate you starting a new thread about your com.apple.CipherML errors. The world will be a better place if whatever answers I provide on that front aren’t buried in this thread, where the focus has been about transferring the approval. Share and Enjoy—Quinn “The Eskimo!” @ Developer Technical Support @ Applelet myEmail = eskimo + 1 + @ + apple.com

[quote='911551022, Brian_Rucker, /thread/849029?answerId=911551022#911551022, /profile/Brian_Rucker'] is there a supported public mechanism or pattern for invalidating an authenticated request’s authority across logout, session switching or revocation before authorization, without assuming that a surviving process means its login-session authority remains valid? [/quote] Hmmm, I’m not sure sure I understand what you’re asking for here. Can you walk me through a concrete example of what you’re trying to check? Share and Enjoy—Quinn “The Eskimo!” @ Developer Technical Support @ Applelet myEmail = eskimo + 1 + @ + apple.com

Python can call many Apple APIs via PyObjC. However, it’s not obvious whether that’s actually a better option than writing your own tool, per the outline you suggested. Regardless, let’s assume you have access to native APIs and look at your specific issues: [quote='852828021, RFAGermany, /thread/852828, /profile/RFAGermany'] This mounted volume actually belongs to the intended disk image. [/quote] This is tricky. I’ll come back to it below. [quote='852828021, RFAGermany, /thread/852828, /profile/RFAGermany'] The volume is mounted read/write. [/quote] This is easy. The low-level statfs system call has a MNT_RDONLY flag that tells you whether this is a read-only mount. This is also exposed by higher-level APIs, most notably the volumeIsReadOnly URL property. [quote='852828021, RFAGermany, /thread/852828, /profile/RFAGermany'] File ownership is being enforced. [/quote] This is similar, in that statfs has a MNT_IGNORE_OWNERSHIP flag. I don’t think this is exposed as a URL resource value, so you’ll probably have

[quote='911687022, full_sphere, /thread/851042?answerId=911687022#911687022, /profile/full_sphere'] Could you clarify the corresponding supported contracts for VZEFIVariableStore and VZSharedDirectory? [/quote] I would expect them to have the same semantics. Share and Enjoy—Quinn “The Eskimo!” @ Developer Technical Support @ Applelet myEmail = eskimo + 1 + @ + apple.com

[quote='911383022, rain0210, /thread/852871?answerId=911383022#911383022, /profile/rain0210'] the failing invocation is launched through the command-execution tool in the ChatGPT desktop app (Codex) [/quote] Given that this issue only shows up with your third-party tooling in play, that’s something you should ask the vendor about. My experience is that third-party LLMs commonly use a custom SBPL-based sandbox, and that’s not something we support. See this thread for more about that. Share and Enjoy—Quinn “The Eskimo!” @ Developer Technical Support @ Applelet myEmail = eskimo + 1 + @ + apple.com

[quote='853023021, Szebos, /thread/853023, /profile/Szebos'] Affected device: physical iPhone 15 Pro running iOS 27.0.1. Comparison device: physical iPhone 11 running iOS 18.7.8. [/quote] Your post’s title suggested an iPhone 11 versus iPhone 15 difference, but this could just as easily be an iOS 18 versus iOS 27 difference. Indeed, the latter is more likely IMO. I recommend that you tease these apart, ideally by running your tests on a range of phones with iOS 27. If they all fail then you know that iOS 27 is the key factor. As to what’s causing this, it’s hard to say. For problems like this I generally recommend that you install the CFNetwork debug profile and then look through the system log for telltale signs of the failure. However, I wouldn’t go too far down that path until you’ve established the scope of the issue. If this is hardware specific, then the path forward is very different from the one you’d follow if it’s tied to the OS. I have lot of info about how to use the system log in Your Friend the

My understanding, based on bugs in the referenced threads, is that: MetricKit is now generally available for appexen (see this thread) But not sysexen (see this thread) Having said that, I’ve not actually tried this from an NE appexen since this support was added in iOS 17, so you should give it a whirl and see what happens. Share and Enjoy—Quinn “The Eskimo!” @ Developer Technical Support @ Applelet myEmail = eskimo + 1 + @ + apple.com

I had cause to look at this in the context of another thread, and my reading of FB11985759 is that it was resolved in iOS 17. Oh, to be clear, FB11985759 was about appexen. For sysexen, see this thread. Share and Enjoy—Quinn “The Eskimo!” @ Developer Technical Support @ Applelet myEmail = eskimo + 1 + @ + apple.com

[quote='853098021, fbratchettt, /thread/853098, /profile/fbratchettt'] I'm aware of the existing forum guidance (for example thread 110044 and thread 809339), which describes best-effort techniques. [/quote] That second thread references this reply, which I consider to be a reasonable way to detect restarts. Share and Enjoy—Quinn “The Eskimo!” @ Developer Technical Support @ Applelet myEmail = eskimo + 1 + @ + apple.com

[quote='853016021, a13s, /thread/853016, /profile/a13s'] The intended feature is to let users connect their personal iPhone or iPad via USB [/quote] There’s no supported API to do this, regardless of whether your app is sandboxed or not. [quote='853016021, a13s, /thread/853016, /profile/a13s'] could you clarify … the appropriate channel for submitting an enhancement request? [/quote] See Bug Reporting: How and Why? for my advice on that front. Please post your bug number, just for the record. Share and Enjoy—Quinn “The Eskimo!” @ Developer Technical Support @ Applelet myEmail = eskimo + 1 + @ + apple.com

Who created this keychain item? Specifically: Are you trying to read back a keychain item that you previously created? Or are you trying to read a keychain item created by some other app? Share and Enjoy—Quinn “The Eskimo!” @ Developer Technical Support @ Applelet myEmail = eskimo + 1 + @ + apple.com

[quote='852912021, hyzyla, /thread/852912, /profile/hyzyla'] 1- Does Apple plan to update /etc/ssl/cert.pem for this, and will the security notes say so? [/quote] This is about The Future™, and thus not something I can comment about here on the forums. See tip 3 in Quinn’s Top Ten DevForums Tips. [quote='852912021, hyzyla, /thread/852912, /profile/hyzyla'] 2- Until then, is setting SSL_CERT_FILE to a separate bundle the recommended workaround for the system tools? [/quote] This is the Apple Developer Forums, where our primary focus is on helping developers using Apple APIs and tools to build products for Apple platforms. My advice for that audience is that you should use the APIs we recommend in TN3151 Choosing the right networking API, namely Network framework and URLSession. I’m not really set up to give security advice for other audiences. Share and Enjoy—Quinn “The Eskimo!” @ Developer Technical Support @ Applelet myEmail = eskimo + 1 + @ + apple.com

So, lemme share some factoids that I think it’s safe to rely on: XPC is based on top of Mach messaging [1]. The audit token associated with an XPC message comes from the Mach message trailer. Which is set by the kernel when the client process sends the message. The audit token includes the pid (hence audit_token_to_pid), so calling fork (or posix_spawn) changes that. The audit token includes the pid version (audit_token_to_pidversion) and, less obviously [2], calling exec* changes that. Given all of the above, I think you can answer your own question here (-: but if you have follow-up questions feel free to reply with them here. Share and Enjoy—Quinn “The Eskimo!” @ Developer Technical Support @ Applelet myEmail = eskimo + 1 + @ + apple.com [1] Actually, there are variants of XPC that don’t use Mach messaging. However, these are not API, and if they ever do become API: I suspect they’ll be an opt in. But, regardless, the subtle details of audit tokens will be the least of your concerns (-: [