Category: Operating Systems

Articles

You can use security keys as a second factor for authenticating with Apple ID on your iPhone

iOS 16.3 Lets You Use a Physical Key for Added Security When Logging Into Your Apple Account (gizmodo.com.au)

Apple iOS 16.3 arrives with support for hardware security keys (bleepingcomputer.com)

Security Keys Are Now the Best Way to Protect Your Apple ID (lifehacker.com.au)

From the horse’s mouth

Apple

Apple advances user security with powerful new data protections (Press Release)

About Security Keys for Apple ID (Support article)

Use security keys to sign in to your Apple ID account on iPhone (Support article)

My Comments

Apple is making it feasible to use hardware security keys in iOS as an authentication factor for their Apple ID logon.

This is being desired as a “phish-proof” approach for secondary authentication or sole authentication due to a physical device not being easily coerced or fooled. As well, this “machine-to-machine” approach allows for stronger passkeys.

It is even seen as a preferred secondary authentication factor for online services used by journalists, human-rights defenders, the public service within democracies and others working with high-stakes information. This avoids such users being fooled in to releasing their online accounts to highly-targeted spear-phishing attacks.

Apple supports this on iPhones and iPads through the iOS/iPadOS 16.3 major feature update. This is also being written in to MacOS Ventura 13.2 for the Apple Mac regular computers whereupon you just use the security key as the secondary authentication factor. They primarily implement this as an alternative secondary authentication means to transcribing a six-digit number shown on your iPhone when it comes to two-factor authentication for your Apple ID.

In the context of the Apple Watch, Apple TV and HomePod devices, you use your iPhone that you set up with the security key authentication to provide the secondary authentication factor when you set these up for your Apple ID. Here, this is easier for limited-interface devices because another device is managing some of the authentication work with your Apple ID.

FIDO-compliant hardware security keys are supported with this update but they have to have an MFi Lightning plug or NFC “touch and go” interface to work with the current crop of iPhones in circulation. USB-C is also supported but you would need a USB-C to MFi Lightning adaptor for iOS devices except newer iPads that have this connector. You also may find that newer iPhones that are to come on the market soon will have the USB-C connector due to pressure from the European Union and some other jurisdictions.

There will be a requirement to set up two hardware keys with the same iOS device when you implement this feature. This is so you have a backup key in case the one you lose the one you regularly use or that one is damaged such as being laundered with your clothes.

Add to this that support does exist for app-level or Website-level verification with security keys within iOS. But it may allow Apple to build in and refine the necessary application-programming interfaces for third-party app developers who want to support this form of authentication.

What I see at least is the implementation of hardware security keys in the mobile platform context when it comes to multi-factor or password-free authentication for the user’s primary platform account. Who knows when Google will offer this feature for Android. Could this also be about leading towards the use of hardware security keys as a hardening factor for user account security?

Article

Samsung smartphones will end up with a “maintenance mode” for your data protection when you have them repaired

Samsung rolls out One UI 5 ‘Maintenance Mode’ to keep your data safe during repair (9to5google.com)

New Samsung Maintenance Mode protects your data during phone repairs (bleepingcomputer.com)

My Comments

For a long time, most of the good cars came with a “valet key” arrangement of some sort. This especially benefited sedans (saloons), coupes and similar cars that had a lockable trunk (boot), but also benefited any car that had a lockable glove box.

Here, the car would come with one key that can only open the doors and start the engine but can’t open the boot or glove box. You could still open the boot or glove box with a separate dedicated key or another key that can open everything. This was about allowing you to had over your car to a mechanic’s, a valet-operated car park or a similar facility knowing that the staff at the facility can’t steal valuables from the glove box or boot.

Samsung is introducing the “Maintenance Mode” as part of its One UI 5 / Android 13 update for their recent Android smartphones. Here, it is to achieve this same goal by locking your personal data in a separate account not available to technicians who repair or service your phone. These technicians then have access to an account specifically created for testing and repairing the phone.

.. just like cars such as this Jaguar XJ6 did to limit access to the boot (trunk) and glove box when the vehicles were repaired or at valet parking

As well, they can install utility software on your phone as part of the maintenance work but once you log in to your phone again with your normal account, this software is removed. A question that can come up here is what happens if the repair requires the installation of software updates or patches, perhaps to provide driver support for replacement hardware and this has to operate with your own normal account.

Samsung are initially offering this to selected Galaxy phones sold within the USA as part of a beta-test for One UI 5 but are wanting to roll this out across the world through 2023.

Most of us would find this of benefit as we use our smartphones as the digital equivalent of our wallets, photo albums and keyrings. The well-founded fear we have with this is technicians taking advantage of our personal data especially if they see value in it for them.

I would see the “Maintenance Mode” feature being of interest to computing-device vendors and operating-system developers as something to add as a significant feature for an operating system. Here it may be offered during a major feature update cycle for the operating system or as part of a security package.

Such a feature could give all of us peace of mind when we relinquish a smartphone, tablet or laptop computer to technicians that we don’t know for repair.

Article

You can find out the end-of-support date for that Chromebook or other Chrome OS computer

How to check a Chromebook auto-update expiration date before you buy – CNET

Resource

Auto Update Expiration date for most Chrome OS computer models (Google)

My Comments

Google has defined for your Chromebook or other Chrome OS based computer an end-of-support date where they will stop providing software updates to that computer. This date, known as the Auto Update Expiration date, is agreed by Google and the device manufacturer due to Google not being able to guarantee Chrome OS support for particular hardware setups after that date.

This is important if you are passing on a Chromebook to someone else or buying one on the secondhand market. As well, there is a common issue especially with Chrome OS devices where manufacturers, distributors and retailers get rid of excess inventory representing last-year’s models during the peak shopping seasons.

You may find that some systems, especially those that are part of a “managed” Enterprise or Education setup may have longer support lives as far as software-quality updates are concerned. But this kind of extended support may only apply while the machine is part of that setup which can be of concerned when a school or workplace sells its Chromebook fleet as part of a tech upgrade.

Google maintains an ongoing list of Chromebook, Chromebase and Chromebox models that are in circulation and are approved by them on this page. If you are dealing with a Dynabook-branded device, you will have to look for the Sharp brand because Toshiba had sold their personal computing business to Sharp under the Dynabook brand.

But if you have access to the Chromebook in question, you can check the AUE date for that particular machine.

1. Open the Settings menu by clicking on the time then click on the gear-shaped Settings icon.
2. On the left navigation panel which you may have to bring up by clicking the three-bar icon, you should see the “About Chrome OS” information. Click that option to see more details about the current version and other details of your Chrome OS setup on your Chromebook.
3. The Additional Details area in that screen, which you may have to click on, will show the AUE date for your particular Chromebook.

In November 2020, Google has realised that the Chrome OS platform is a viable third force when it comes to the regular computer. Here, one of the changes they are offering is that Google will assure longer support lives for newer Chromebooks typically in the order of 7 or 8 years. But they should also look at ways to extend this date for earlier Chromebooks that are in current usage.

Article

Your iPhone or iPad will have security and software-quality updates delivered separately from the main functionality upgrades

Apple Could Soon Split iOS Updates And Security Updates | Ubergizmo

My Comments

A trend that is increasing in relationship to software maintenance and quality assurance is to assure the ubiquitous availability of critical security, software-quality and compliance updates for a device or program. This is through delivering such updates under separate cover from major updates that primarily add features and functionality.

You may think of these critical updates as just security patches for the device or program but these can include general bugfixes, software refinements to to have the program run more efficiently or compliance modifications such as to update daylight-saving-time rules for a particular jurisdiction.

Microsoft, Google and Apple headed that way with Windows 10, Android and with MacOS respectively.  This approach benefits the software developer and the user equally because the security, software-quality or compliance patches are usually small files. The software developer can assure guaranteed delivery and installation even with older devices that aren’t able to take newer versions of the software thus hardening the device’s platform against security exploits.

Similarly the user can choose not to install a functionality update if they don’t see fit or may find that it offers a steep learning curve due to significant user-experience changes. It is more so where a user would rather run with a highly-stable version of the operating system than the latest “rushed-out” version that carries bugs.

Apple will be taking this approach with iOS soon. Previously, the iOS mobile operating system was maintained using the delivery of major versions offering major functionality. But Apple would deliver iOS bugfixes and security patches as a minor or “point” version dependent on a major version, something that was considered orthodox in the world of software maintenance and quality assurance.

But if they were to “reach” older iOS versions with a security or compliance update, they would need to offer a minor or “point” version for a prior major version as a separate software package. This is an issue that affects people who maintain older iOS devices, especially iPads or iPod Touch devices that are less likely to take newer major versions of iOS.

Through the development of iOS 14.5, Apple has looked in to the idea of “splitting” the critical updates from the main software package so that these can be delivered under separate cover. This could also allow Apple to package one of these updates to touch multiple major versions of the operating systems.

It could also be a chance for Apple to see a long service life out of iOS devices especially where older devices may not run the latest major version of iOS. This would be very applicable to iPad and iPod Touch users who see long-term use out of those devices or families who pass down older iPhones to their children. It could also be a chance for Apple to keep multiple hardened codebases for iOS going but able to support different device abilities.

It will also encourage Apple to deliver frequent software patches to iOS users especially if they can be installed without restarting the device. This is more so if Apple wants to create a tighter software-quality-assurance regime for their platforms.

But Apple also has to provide separate critical-update delivery to their tvOS operating system which drives their recent Apple TV devices and their watchOS operating system that drives their Apple Watch products. It can then be about creating a robust software quality-assurance approach across all of their products but catering to people who maintain older products.

Articles

These Chromebooks stand to benefit from WebAuthn Website authentication and improved lockscreens

Your Chromebook now doubles as a smart display – Android Authority

Chrome OS 88 offers a faster way to sign in to websites – by using your fingerprint or PIN code (chromeunboxed.com)

My Comments

The operating system that runs your Chromebook or Chromebox computer has now gained some more key capabilities. This is being seen as important as the Chromebook has gained importance for COVID-19 home-education computing needs.

One feature that is highlighted is the provision of a rich pre-login lock-screen for that platform. Windows 10 users have some sort of richness with their pre-login lock-screen where there is the opportunity for applications to show useable information on that screen.

Now Google has added this functionality by taking cues from their Assistant-powered Smart Displays by showing information like local weather or attractive visual works. You can use the Personalisation option to determine which images will appear on the lock screen, be they images from Google Photos or an art collection that is offered through that platform.

There is some interactivity beyond descending to the login screen in the form of music-player transport controls, something that would be convenient if you are using the Spotify world-wide cyber-jukebox on your Chromebook.

But once you log in to your Chromebook, you can have it provide simplified login with Websites that implement WebAuthn simple-yet-secure login. Here, you need to go to “People” then select “Security & Sign-In” to enable device-based PIN entry that is available on all Chromebooks or use of the fingerprint reader in your suitably-equipped Chromebook. Here, most of the other desktop and mobile operating systems and browsers have support for WebAuthn in some form for their current versions.

The question with Chrome OS is what kind of work will be taken to make this operating system less of an “Android tablet in a laptop housing” or an early-1950s British or European “people’s car” but something that satisfies current expectations for work, home, study and play.

Articles

Android and Windows are getting closer with Microsoft working on having Android apps run on Windows 10 in a virtual machine

Microsoft’s ‘Project Latte’ aims to bring Android apps to Windows 10 | Windows Central

Microsoft is working on an Android subsystem for Windows 10 | Bleeping Computer

My Comments

Microsoft is intending to have Windows able to run software written for the Android mobile operating system.

There was a previous attempt in the form of Project Astoria to simplify the process of porting Android apps to Windows 10. But recently the “Your Phone” subsystem offered to people who use certain Android phones the ability to run their apps in Windows. This worked around having Windows 10 working as a graphical terminal for your Android phone in order to run the Android software.

But Microsoft is using Windows Subsystem for Linux, currently used to run text-based UNIX/Linux environments on Windows,  as a basis to run Android software on your Windows computer. Firstly, Android is a Google-based fork of Linux intended for mobile-platform devices and this may make Microsoft’s job more easier.

Here the Android app will be run within an Android virtual machine on your Windows computer. This is in conjunction with WSL gaining support for X11 (X Window) and Wayland GUI subsystems for UNIX/Linux computing so that graphically-rich software for those platforms, including shells like GNOME can run on Windows 10.

There will be a requirement to make the Android app independent of Google Play Services because Google won’t release this functionality to devices other than native Android or ChromeOS devices. But this could be part of repackaging the software for the Windows platform.

This kind of compatibility will encourage Android software developers to write software that takes advantage of devices with large display surfaces like tablets and Chromebooks as well as smartphones. It will also make this software relevant to people who use Windows-based 2-in-1s like the Dell Inspiron 14 5000 or the Lenovo Yoga range.

There will be some app classes that will benefit from being made available through the Microsoft Store to run on Windows computers. Some apps like native clients for video-on-demand services will be about being able to enjoy these online video services on your laptop. The same holds true for sports scoreboard apps and mobile-platform “guilty-pleasure” games. Also there will be the idea of having Instagram, Snapchat and co running on your regular computer which will be valued by those of us who see a social media presence of importance for ourselves or our business efforts. Let’s not forget taxi and rideshare booking apps where there is the desire to use them from a regular computer perhaps to book rides for others.

Another use case is software written to make your Android phone a control surface for the smart home. It is primarily exhibited through “app-cessory” software that is written to convert your smartphone in to a control surface for various devices with the link facilitated using Wi-Fi or Bluetooth. But it can be software written to manage a smart-home platform like Amazon Alexa or Google Home and there may be the desire to have this run on a regular Windows computer.

Microsoft will need to have extra people to vet software that comes in to the Windows Store in order to keep malware out. This is because Google was overwhelmed with Android-based malware creeping in to their Play app store and they had to increase the number of people taking control over what ended up there. This danger will increase especially if it is feasible to “write once run anywhere” for both Windows and Android.

It is part of having Microsoft Windows 10 as the most flexible open-frame desktop operating system thanks to it supporting a wide range of software types: Progressive Web Apps, Win32 native Windows apps, Universal Windows Platform apps, UNIX/Linux software via Windows Subsystem for Linux and, to come, Android through Project Latte.

Having Windows, desktop Linux or ChromeOS on the desktop and Android on the mobile devices could be about building out a computing ecosystem that is totally about flexible open-frame computing.

Article

Windows 10 major updates will see an improvement to how new functionality is discovered

Windows 10 Insider build 20190 hits Dev channel with new post-update experience | Windows Central

My Comments

When Microsoft officially releases a major Windows 10 feature update, it may be daunting to know what changes have existed to your computing environment as a result of that update.

Here, you may want to know what changes took effect including any new functionality that came about. It may also be about any significant changes to Windows 10’s user experience that you may have to get used to. For some people, finding that a significant change to the user experience may be daunting and that a feature may be delivered but they don’t know how to take advantage of it. This may cause some Windows 10 computer users to delay or avoid major-update cycles all together.

As well, it is more important for people who aren’t sure of any significant changes to how their technology operates, something that can be of concern for the older generations who haven’t had much computer experience. For them, it may be about relearning a skill they already have in order to adapt it to a newly-revised user interface.

Microsoft will be answering this problem with its “Tips” app in Windows 10 from the next feature update onwards. Here it will have a “What’s New” focus that appears after the update is rolled out to highlight any new features or changes to the user experience. This will be updated with every feature update so users are aware of the newly-added functionality.

But I would like to see added to this information relating to improved peripheral and network device support especially where it is relevant to the kind of connections your computer has and devices it is connected to.

For example, it may be about whether a peripheral or network device is gaining class-driver support within Windows or whether the current class drivers that are part of Windows and relevant to the device are gaining any significant improvement. This includes any newer settings that are available to the end-user so they have it working their way.

This can allow a user to rationalise the software that is running on their computer without worrying that they will lose the functions they are dependent on because they remove vendor-supplied software for that device. Similarly, they may want to know whether the installation of a device on a newer computer is going to be a true plug-and-play experience without the need to download and install any extra software. As well, users are then sure they won’t lose device functionality if the device vendor declares end-of-support on that device.

Microsoft is at least taking some steps towards improving the update experience for major updates within Windows in order to make them discoverable and user-friendly.