Wojciech Reguła:

Looks like moving the user’s TCC db to /private/var/containers/Data/ProtectedSystem/[UUID]/Data/Library/Application Support/com.apple.TCC/ was not the only change in the whole privacy castle of macOS 27. (What btw was a great move as now attackers with full disk access permissions can’t modify your privacy settings)

macOS 27 quietly ships a new privacy mechanism I hadn’t seen documented anywhere: it extends the com.apple.macl protection that has always guarded sandboxed apps’ ~/Library/Containers/<bundle-id>/Data folders to a hand-picked set of non-sandboxed apps’ ~/Library/Application Support/<name> folders too. I noticed it by accident — Firefox’s profile folder was suddenly inaccessible from Terminal, while MacPass, a password manager sitting right next to it, was wide open. That asymmetry didn’t sit well with me, so I pulled the thread. It ends in a hardcoded app allowlist baked into /usr/libexec/sandboxd (thx @ciphwall for the hint), meant to be updated live via XProtect.

Previously:

• Hijacking Apps Using Archive Utility
• Privacy & Security Settings Don’t Show Intent-Based Access
• Resetting TCC
• Persistent File Access via com.apple.macl Xattr

Jeff Johnson:

Although you can hide and unhide apps in your App Store purchase list, it turns out that hiding an app in the App Store purchase list does not hide the app in the updates list! I honestly can’t figure out the benefit of hiding an app in the App Store. The list of your purchased apps—a misnomer, as the list includes free apps—is practically unusable anyway: you can neither sort nor search the list. Maddeningly, the Mac App Store sorts your purchased apps by date of first install rather than by name, so it’s difficult even to scan the list manually to find a specific app.

[…]

You can clear the Updates list in the Mac App Store by deleting some cache files on disk, but that’s at best a momentary solution. The unwanted update will return eventually, or immediately if you use the Reload Page (⌘R) command.

A more lasting solution is, counterintuitively, to install the update. The trick is that you can keep more than one copy of a Mac App Store app on disk.

I wonder how long you can keep using the old version. You won’t be able to download it again. You can save a backup, but as some point a certificate will expire or you’ll get a new Mac and need a new receipt file. In theory, the store should be able to fetch one for you, but I wouldn’t rely on that long-term.

Previously:

• Mac App Store Design in Tahoe
• Mac App Store Search Not Showing Mac Apps
• Tahoe’s Mac App Store
• Mac App Store Broken on macOS 10.14 and Earlier
• Is There Hope for the Mac App Store?

Marcin Wichary:

This instruction is a fever dream of three weird things in sequence:

• What on earth is “QuickTime”?
• I am recording with a player?
• Why can’t I choose the option [“New Screen Recording”] that describes exactly what I want to do?

[…]

It’s noticing this kind of complexity, places where an easy way was chosen, design debt accumulated, and things got simply too weird. Apple allowed three weird things to accumulate here.

It makes sense in terms of the history and how the technology works, but from a clean slate one might expect this functionality to be in the Screenshot app, Screen Sharing, iPhone Mirroring, or perhaps even Finder.

Previously:

• QuickTime Player Creates .mov Files

AP (Hacker News):

A federal judge has approved a $1.5 billion copyright settlement in which artificial intelligence company Anthropic will pay thousands of authors about $3,000 per book after using pirated copies of their works to train its Claude chatbot.

[…]

Bestselling thriller novelist Andrea Bartz first brought the suit with two other authors in 2024. It’s the first major settlement in dozens of AI copyright lawsuits that are still working their way through courts.

Dare Obasanjo:

Somewhat ironic given recent claims from Anthropic about others training their AI on its work.

Previously:

• Apple Intelligence Training
• The New York Times Sues OpenAI
• Hachette v. Internet Archive
• The Internet Archive’s National Emergency Library

Marcus Mendes:

Apple’s requests to overturn a $634 million patent verdict and secure a new trial in its long-running legal battle with Masimo were denied.

Wesley Hilliard:

There doesn’t appear to be any other path for appeal or recourse, as the judge rejected both requests for either a new judgement or trial.

[…]

In the end, Masimo didn’t succeed in getting the Apple Watch banned or fundamentally redesigned. It won an empty victory with the funds it will be paid, and the patents affecting the lawsuit will expire in 2028 and 2029 anyway.

Paul Terpstra:

Although the ruling confirms the financial penalty, it does not affect current Apple Watch users. The smartwatch’s blood oxygen monitoring feature remains available after Apple introduced a software update in January 2024 that allowed sales to continue despite earlier legal challenges.

Previously:

• Apple Sues OpenAI Over Trade Secrets
• John Ternus Replaces Tim Cook
• Danaher to Buy Masimo
• Apple Loses Blood Oxygen Patent Case
• The Return of Blood Oxygen for Apple Watch
• Apple Watch Sales Paused Over Masimo Patent
• Masimo v. Apple

Om Malik (2023):

One of the key advantages of MacWhisper, as it utilizes the Whisper technology, is its superior accuracy in transcriptions compared to other services I have used. I was an early adopter of Rev.com and eventually switched to Otter.ai, for which I paid approximately $100/year. However, I have since canceled my subscription.

[…]

After comparing the audio transcripts from MacWhisper and Otter, I found that while Otter’s formatting is superior, there is hardly any difference in the transcriptions. I started with the free model, which was sufficient for my needs, and eventually upgraded to the large models. Nowadays, I primarily use MacWhisper to transcribe my voice memos, which I then import into Lex.Page.

Bon Adamson:

Whisper, which is made by OpenAI, has the distinct advantage of allowing you to transcribe audio in almost any language you may ever need to. For the time being, Otter can only transcribe English. The benefits of better accuracy and accurate punctuation that the service already holds over Siri hold up across other languages as well. If you’re looking to transcribe non-English audio accurately, Whisper is definitely the best option available on Mac.

Dan Moren:

By taking advantage of OpenAI’s Whisper framework, Audio Hijack can now take any audio it’s recording and generate a text transcript. While this process was possible before—see Jason’s lengthy post about his workflow—it required a lot of fiddling and several different tools to accomplish; it’s certainly a lot easier to simply drop Audio Hijack’s block into your existing session. If you record multiple sources, it can even appropriately label each one—though if you record multiple people via one input, say the other end of a Zoom call, it can’t distinguish between the various participants.

Inscribe (2026, Hacker News):

Apple’s new SpeechAnalyzer is the most accurate on-device speech engine we tested. It beat every Whisper model we ship, including Whisper Small, on both the clean and the noisy half of LibriSpeech, while running roughly three times faster than Small. And the API it replaces, SFSpeechRecognizer, came last on clean speech: behind even Whisper Tiny, a 40MB model.

[…]

The new API cuts word error rate by 3.5 to 4x on the same audio: from 9.02% to 2.12% on clean speech, and from 16.25% to 4.56% on noisy speech. There is no accuracy trade-off to weigh; the new API wins everywhere we measured, and it produces punctuated, cased text where the legacy engine’s output is rougher.

[…]

All five engines ran comfortably faster than real time: between roughly 12x and 40x on the M2 Pro, meaning an hour of audio transcribes in about 1.5 to 5 minutes on-device. SpeechAnalyzer was about 3x faster than Whisper Small per second of audio while beating it on accuracy.

Yuki:

SpeechAnalyzer’s ReportingOption.fastResults reads like a knob you’d reach for when you want to trade power for latency. That framing is what cost me the afternoon.

[…]

If a recording matters — and in a notes app, a lost meeting is the worst thing that can happen to a user — then the container you write while recording has to be PCM in CAF. Not m4a, and not AAC-in-CAF either.

[…]

AVAudioEngine’s inputNode silently ignores your device selection

[…]

I wanted summarization to run on-device. Everything else in Nib’s transcription path does, the audio never leaves the machine, and it would have been a much cleaner story to tell.

But 4,096 tokens for the Foundation Models isn’t enough.

Previously:

• Apple Foundation Models in appleOS 27
• WhisperPad Rejected From the Mac App Store
• Overcast Transcripts
• Generated Transcripts in Pocket Casts
• Apple Podcasts Transcripts
• Dictation and Predictive Text in macOS Sonoma and iOS 17
• macOS vs. Dragon Dictation

Thijs Xhaflaire (via Ric Ford):

Jamf Threat Labs discovers and investigates CrashStealer, a C++ macOS infostealer that impersonates Apple's crash-reporting framework to harvest browser credentials, cryptocurrency wallets and keychain data, encrypting stolen files with AES-GCM before exfiltrating them to a remote command-and-control server.

[…]

Unlike the payload it eventually installs, the dropper is properly code signed and notarized: it is a universal (arm64 and x86_64) binary signed with the Developer ID Emil Grigorov (WWB7JA7AQV), has hardened runtime enabled, and carries a stapled notarization ticket. Notably, the disk image itself is signed as well, not just the application inside it, which is uncommon in malicious DMG delivery where the container is typically left unsigned.

[…]

That file supplies the curl command the dropper runs next. Staging the first hop on a trusted developer domain keeps the initial network activity inconspicuous.

[…]

[The script] clears extended attributes on the staged bundle with xattr -cr, makes the inner binary executable, strips the payload's existing signature and re-signs it ad-hoc (codesign --remove-signature followed by codesign -s - --force --deep --no-strict), registers it with Launch Services via lsregister -f, and finally launches it in the background with open -g -n.

Previously:

• Notarized Mac App That Downloads Malware
• Fake Mac Apps on GitHub
• Notarized Atomic Stealer (AMOS)
• More Notarized Mac Malware
• App Transport Security

Malcolm Crawford (Mastodon):

The open-plan floors make it hard to concentrate. The building is so large that getting from one meeting to the next eats real time out of the day. It’s common for people to run meetings with colleagues over Webex — colleagues on the same campus, sometimes no more than two hundred yards away.

Ironically, Apple Park replaced a campus that did far better on the same measure without ever trying to. Infinite Loop produced far more of the accidental, cross-team contact Apple Park was explicitly built to create. Working out why starts with what Infinite Loop got right by accident. It continues with what the research on office proximity says about why that kind of thing happens at all. And it ends with what Apple Park could become instead — including a version of the fix Apple already trusts enough to run for a hundred people a year.

[…]

There’s no obvious focal point for the whole site — most sections have their own sitting area and their own coffee bar, but nothing plays the role Caffè Macs and the IL1 coffee bar played together at Infinite Loop. Caffè Macs at Apple Park seats a thousand people and feels built for throughput, not conversation. Everything is organised per-segment rather than around a shared centre, which is convenient for the people in that segment and useless for the discovery-by-accident that made the old campus work.

[…]

By multiple accounts from people who were there during design and construction, the site was flagged as under-provisioned for meetings and conferences before it even opened.

Via Jason Anthony Guy:

Apple Park is a beautiful structure, but is not terribly conducive to focused or collaborative work. Even as an occasional visitor I found it overwhelming. Employees sit shoulder to shoulder, voices bounce off and bleed through glass walls, and privacy is a virtual impossibility. My friends and colleagues who worked there regularly found it difficult to be productive.

I worked in Infinite Loop (Building 3, 2nd floor) for thirteen years (right below Developer Publications, where Malcolm spent a good portion of his Apple career). I loved IL because its design made serendipitous encounters easy. Whether it was sitting outside Caffè Macs or in the IL 1 Atrium, I would inevitably bump into someone and have a conversation that furthered an in-flight project, sparked something new, or simply reinforced the social ties that bind colleagues.

It helped that at that time, Apple had perhaps 10,000 employees, most of whom were in or near IL. After iPhone came about and IL started getting locked down, much of the natural collaboration dissipated, disappearing behind badged doors and disclosures.

Ken McLeod:

IL provided a place to focus on your work[1], as well as seating spaces that are out of the flow of traffic where you can have an informal meeting[2]. At AP, every collaborative space is effectively in the middle of a hallway. That turns out to be enormously distracting, both to you and to those people trying to work in the glass bullpen right next to it.

[1] before all cubicles and offices became multi-person shared spaces

[2] before all those spaces were filled in with more offices

Helge Heß:

“The IL1 atrium really was the crossroads of the company in those days” I really don’t think that this is true literally by any means. Assuming “those days” overlap with the time I’ve been there (pre Park). The XFs in IL have been extremely scarce. IL was way too small and overloaded, I’d actually say it was very similar to Apple Park. No one really wanted to work there in those tiny offices with multiple people 🤷‍♀️

Steve Hayman:

I loved the IL1 atrium. I’d sit there and hope that someone like MMalc would wander by, and they often did. It was a real destination for field people who didn’t get to visit the mothership very often. I miss that. AP had nothing like it.

Eric Schwarz:

I think of my days in college—most dorms residence halls were not air conditioned, so at the end of August, you had to open your window (often to place a box fan) and door to create some airflow. People walking through the building would meet by chance. Newer buildings tended to be less lively and more like a hotel—all the doors closed and rarely much activity. Through renovations, most of the buildings have had air conditioning added, dropping those interactions over the years.

Previously:

• Apple and Design Details
• Apple Park’s Open Work Spaces
• Apple’s New Campus

Update (2026-07-22): Dr. Drang:

As you may know, the Lumon Industries building that Mark, Helly, Irving, and Dylan work in is a former Bell Labs facility in Holmdel, New Jersey. I first learned about the building several years ago, when I read Jon Gertner’s excellent history of The Labs, The Idea Factory. It’s a distinctive place designed by Eero Saarinen in the early 60s.

Bell Labs was known for the fruitful collaboration of its researchers, often started through chance meetings in the hallways of other Bell Labs facilities. The new Holmdel building was supposed to further that sort of teamwork, but things didn’t work out as planned.

macintog:

I worked in IL1 for over a decade. The day I saw the open-plan spaceship, I knew I would never set foot inside. There are more rewarding ways to work in a barn.

Aleem Shaun:

I’ve used Day One for more than a decade. It was an excellent journalling app. Private, minimal, easy to use, with excellent features such as geolocation, weather, ‘On this Day’, and book printing. Features that got out of the way and either worked quietly in the background or appeared only when you summoned them. That’s changed.

Now there are new subscription tiers. Previously, the tiers were Free and Premium. Simple. Premium included sync and a few other things that I can’t remember, but it was compelling enough that I’ve been a Premium subscriber from the beginning. Now, without consultation, I’m Silver (not Premium), and there’s a new, more expensive AI-driven tier, Gold. I don’t object solely on that basis. You would think I could just choose to remain on ‘Silver’ and all would be well. But no. Even with these features turned off in settings, I’m visually prompted in the app to upgrade to Gold and use the Daily Chat (with AI), which I’ve turned off and can only use if I upgrade. And yet, there it is, taunting me.

Via Eric Schwarz:

Even Apple is guilty of doing this in the Settings app and the former iWork apps.

Previously:

• $10 Off at Fandango
• Automattic Acquires Day One
• Productivity Apps and Subscription Pricing

Chance Miller:

Here are the new monthly prices for Apple Music and Apple One as of today:

Apple Music

• Individual: $11.99 (up from $10.99)
• Family: $19.99 (up from $16.99)
• Student: $6.99 (up from $5.99)

Apple One

• Individual: $19.95 (unchanged)
• Family: $27.95 (up from $25.95)
• Premier: $39.95 (up from $37.95)

The price increases for Apple Music come after Spotify announced its own round of price hikes earlier this year, which Apple poked fun at on social media. Even with today’s price hikes, though, Apple Music remains cheaper than Spotify.

Lee Peterson:

Apple Music no longer makes sense when I’m already paying for YouTube Premium. Apple Music goes up to £11.99, YouTube Premium is £12.99 and on top of a good music service you get no ads on YouTube.

Mike Rockwell:

Distilling my longtime argument down to its simplest bit, I’d ask “do you want to pay $10 a month for music for the rest of your life?”

But truly, it was never going to just be $10 per month. The price was going to go up over time. It was going to get more expensive to have access to the same music.

If you purchase your music, though, I think most people would reach a point in their life where they stop buying new music entirely or they’re only buying a few albums per year. The cost of music would go down for you over time.

That was my thinking, too, but then I found that music I’ve purchased from Apple won’t work on my HomePod. I refuse to condone that behavior, so now I have two solid reasons not to subscribe to Apple Music.

Joe Rossignol:

While the monthly and annual prices of AppleCare+ plans for Macs and iPads received a slight increase this week, AppleCare One continues to start at $19.99 per month in the U.S., making the multi-device plan even more valuable.

Previously:

• Apple Financial Statements: Products vs. Services
• Apple Hardware Price Hikes
• Apple’s Q2 2026 Results
• Apple Services in 2025
• AppleCare One
• Spotify Profitable
• AppleCare+ Only As a Subscription
• Apple Services Price Hikes

John Gruber (Mastodon, 2):

Some of [Cook’s letter] remains true, but has lost some truthiness — and truthiness matters. But some of it is no longer true, period. It’s no longer just “one small part” of Apple’s business that serves advertisers. Here in 2026, search results in the App Store not only show paid ads — frequently for casinos — but the search results are visually dominated by paid ads now that Apple has added a second ad to results. Apple News+ is a paid subscription that offers a genuinely great value for the number of paywalled publishers whose content it includes, but articles on the News app tend to include the weirdest AI-generated ads on the Internet. (How many young blond women am I supposed to believe need hearing aids?) And — at this writing, still “coming soon” — Apple is launching ads on Apple Maps. Apple Maps remains free of charge to use, so according to Tim Cook, we’re not the customer. We’re the product. Or, if you prefer, our frustration is the product.

[…]

The ratio of ads to organic results in App Store search — especially when measured in screen area — is clearly not aligned with Cook’s 2014 statement that “Our software and services are designed to make our devices better. Plain and simple.” Obviously not. App Store search today is designed primarily to generate more revenue for Apple. That’s not criminal, but it’s a change.

[…]

What gave Tim Cook’s privacy letter heft in 2014 wasn’t just the clarity of its plain language, but the fact that you didn’t have to take his word for it that the ads Apple showed you respected your privacy, because Apple didn’t show you ads in 2014. Apple today can’t say that.

[…]

John Ternus should return Apple’s privacy policy to its 2014 clarity. The trust Apple would earn from such a move would far out-value whatever revenue these ads pad to their already hefty and ever-increasing quarterly Services numbers.

I wish that were the case, but I fear this is kind of a Hotelling’s Law situation, where Apple can get most of the benefit by being just slightly better on this axis. Where else do its customers have to go?

Jeff Johnson (Mastodon):

In the second fiscal quarter of 2018, services generated $9 billion in revenue (net sales), whereas in Q2 2026, that amount had grown to $31 billion! In this blog post, I want to focus on understanding the relative financial importance of products and services for Apple.

[…]

In 2025, services were 42% of Apple gross margin. How does 26% of net sales become 42% of gross margin? The explanation is that services have a much lower cost of sales. The products gross margin was 37% of products net sales, while the services gross margin was an astonishing 75% of services net sales. In other words, Apple services are almost pure profit!

Does this 75% account for TV and movie production costs?

With persistent general inflation, consumers do not have unlimited money to spend on Apple products. At least in the near future, it’s reasonable to question how much further room is available for growth in profits from Apple products. To satisfy the demands of investors, Apple executives including CEO-elect John Ternus may be forced to rely even more than before on growth in services, which do not face as much pressure on cost of sales as hardware products.

Previously:

• Apple Services Price Hikes 2026
• Apple Hardware Price Hikes
• App Store Personalized Recommendations and Keylogging
• Apple’s Q2 2026 Results
• A Letter to John Ternus
• Ads in Apple Maps
• Blurring App Store Ads and Search Results
• Apple Services in 2025
• More App Store Ad Spots
• Apple Services Price Hikes
• Nowhere Else to Go

Jared Sorge:

I know there are options out there like Paddle, FastSpring, and Lemon Squeezy that have worked for many apps like mine over the years. But I also wanted something simple for my users. Not to mention Apple Pay was a must-have.

I believe all the services he mentions do support Apple Pay.

• RevenueCat serves as the source of truth for whether or not a customer is licensed.

• I create RevenueCat customer IDs from local iCloud identifiers (more specifically, calling userRecordID() on my CKContainer in CloudKit).

• When the user makes a purchase, they earn an entitlement that I look for in Arborist to grant them a license.

He doesn’t need to run his own server, and the purchases are automatically tied to the user’s iCloud account, so there are no e-mails or serial numbers to deal with. On the other hand, well, it’s all dependent on the Apple Account.

The app, which helps manage Git worktrees, is shipping now.

Previously:

• Locked Out of Apple Account Due to Gift Card

Bruno Brito (release notes):

In Tower 15, we introduced the “Fully Merged” badge and Automatic Branch Management to help you keep your repository tidy. With Tower 17, we’re taking the detection behind that badge to a whole new level. […] Tower now matches your local branches against merged pull requests from your hosting service, such as GitHub or GitLab.

[…]

Trust is everything when deleting branches — so we redesigned the “Fully Merged” hint view to show you exactly which checks matched.

[…]

One that is particularly noteworthy is that updating submodules is now significantly faster! Tower gathers each submodule's Git data concurrently instead of one at a time—something you will especially notice in repositories with many submodules.

I’m sad that they got rid of the yellow icon.

Previously:

• Git Tower 16

Federico Viticci (Mastodon):

The AI frontier from the two big labs (and – we have to be honest with the numbers here – probably SpaceXAI and Meta now, too) is in a completely different league at the moment. I spent my first couple of weeks with Siri AI trying to convince myself that I could replace Codex with Siri AI, and that was the wrong approach. There is a potential future in which Siri AI can become a more proactive and capable agent, but that’s not what Apple is shipping this year.

[…]

Siri AI is a dramatically better Siri for typical Siri stuff. The new Siri understands your commands and nuanced requests better because of the LLMs behind it; it can often perform multiple requests in one go (such as setting multiple timers with one command); the new expressive (and customizable!) voices sound great, and they’re terrific at reading and summarizing notifications. Apple’s first advantage compared to other chatbots is right here: only Siri can integrate with the iPhone and iPad to this extent, so even if the Foundation models aren’t as smart as the competition, Siri can do a lot more for most people on their devices because neither OpenAI nor Anthropic have OSes they can control.

[…]

The biggest issue I’ve encountered is the inconsistency of it all. Very often, the new Siri AI still replies with a generic “Uh oh, something went wrong“ error that doesn’t explain what the error was or why it happened. Sometimes, I ask a question via voice, and it errors out, but then a few seconds later, I type the same question in the app, and it’s fine.

[…]

My problem is that, right now with Apple’s own apps, both the index and Siri’s ability to perform actions are very inconsistent. The assistant hallucinates abilities it doesn’t have, and it frequently just doesn’t work.

Dan Moren:

The good news is that Siri AI is capable: impressively so, at times. In the lowest of low bars, it certainly beats the pants off the previous incarnation of Siri, but its access to your own personal data and all of the app on your phone also unlocks a host of new possibilities.

But it’s also not without the pitfalls that underlie all LLM-powered chatbots: errors in understanding, hallucinations, and so on.

[…]

The app itself is pretty barebones, letting you view those conversations in List or Grid layouts, select multiple conversations to delete them, and pin or rename any single conversation. In Settings : Siri, you can choose to either open to the overview or to a new conversation and decide whether old conversations are kept for 30 days, 1 year, or forever. It’s a little strange that one-off queries (“What’s the average height of the Norwegian World Cup team?”) are stored alongside more involved conversations (“Can you help me build a specific RSS feed for this site?”); I also ended up with a few orphan blank “New conversations” which I deleted, but it’d be nice if you could filter to find those. Conversations are fully searchable and sync between devices via iCloud.

John Voorhees:

Despite the current limitations, if you use chatbots as a replacement for Google Search, you’ll probably have a good experience with the new Siri app. That’s because even in these early betas, if you ask Siri something like, “Give me a day trip itinerary for a trip to Chicago this Saturday,” you’re likely to get good but pretty middle-of-the-road recommendations. From there, though, you can drill down with follow-up queries to get something more in line with your tastes. The results include source links you can follow, too. Given the ad-strewn mess that web search has become, using Siri for this sort of thing is a meaningfully better experience.

The one caveat on Siri’s world knowledge is that it’s roughly 2-3 weeks stale in some places.

[…]

A good example is Music. You can prompt Siri to play a song, but most of the rich metadata in the app isn’t exposed to Siri, which is a shame because it is exposed elsewhere, for example to AppleScript.

Previously:

• macOS 27 Public Beta
• iOS 27 Public Beta
• No Siri AI in EU
• Siri AI Announced

Update (2026-08-04): Benjamin Mayo:

Thanks to the top-to-bottom revamp that is Siri AI, Siri is reliably intelligent. Finally. We are still in the midst of beta season, and Apple is yet to confirm whether Siri AI will formally launch with iOS 27 in September or sometime later in the year, but the feature is up to scratch. There are bugs and glitches and edge-case quirks, but on the whole, it wipes the floor with old Siri and is competent enough to supplant my everyday usage of other chatbots too.

[…]

Siri AI can get a snapshot of what’s on screen, but it cannot control the UI for you autonomously. As such, if you ask it to do something outside of its library of available app actions, it will say it can’t do that. Often, it can quote the relevant steps for you to do it yourself, but obviously that falls short of the ideal experience. This feels a bit lacklustre to people already embracing AI agents en masse. Claude and Codex on Mac do not hit these walls; they are all too keen to move your mouse for you and run terminal commands until the job is done.

Previously:

• ChatGPT Work and ChatGPT Classic
• Claude Desktop App
• Perplexity Personal Computer
• Codex for Almost Everything

Wade Tregaskis:

In short: if you have any file in your app (or whatever it is you’re trying to get Apple to sign) that is over 4 GiB, you must use a disk image (DMG) to package it for notarytool, not a zip file.

This is because support for files larger than 4 GiB requires using the “Zip64” zip file format, which would be fine except Apple’s notary servers can’t handle them.

Previously:

• altool Update and notarytool

Update (2026-07-22): Rosyna Keller:

It’s recommended to notarized exactly what you’re going to ship to users and shipping zips is extremely risky because you never know what tool the user will use to decompress the file.

Multiple unzipping tools will strip necessary extended attributes that could cause the code signature to fail to validate. This is especially true if you put non-code files in “code places” and they have to be signed with an extended attribute.

Matt Burgess (MacRumors, ArsTechnica):

On Thursday, San Francisco city attorney David Chiu sent legal notices to Apple and Google demanding that they remove from their app stores 13 face-swapping apps, which allow users to create AI-generated nonconsensual nude images. The letters say the Silicon Valley giants should stop “aiding and abetting” the sale of explicit deepfake images and “sever” business relationships with the app developers.

[…]

Researchers have repeatedly found and reported apps in Apple’s App Store and Google’s Play Store that allow people to generate sexual images using AI—including some apps being rated as suitable for use by children. While new laws and bans aim to tackle the scourge of explicit deepfakes online, technology and social media companies consistently direct millions of people toward the harmful tech.

Both Apple and Google have developer policies that prohibit pornography, abuse, and harassment on their platforms.

Burgess gives the impression, which is my base assumption, that these 13 apps were clear about what they do, so App Review has no excuse for missing them. But I’m sure it’s keeping us all safe in other regards.

Meanwhile, in a preprint research paper published in May, researchers from Cornell University and Georgetown University identified 420 apps offering general face-swapping capabilities on Google’s and Apple’s app stores. They tested 155 to see if they could be used to create face swaps with nude images; in 70 percent of cases, it was possible, with the apps not including safety measures to prevent this.

Previously:

• Sirius Pomodoro
• Apps for YouTube℠™®•!
• Sanctioned Entities Slip Through App Store Controls

Update (2026-07-21): Danny Bradbury:

Chiu isn’t arguing that hosting an app automatically makes a platform liable for what it does. Platform operators already won that battle with Section 230 of the Communications Decency Act. That 30-year-old law says websites generally aren’t responsible for content posted by users, allowing platforms to host user-generated content without getting sued every time someone defames someone in a comment thread.

Courts have often extended those protections to cover app stores too. Apple and Google are treated as distributors of whatever a third-party developer uploads, rather than publishers.

Chiu is attempting to sidestep that argument by focusing on the companies’ payment systems, noting that Apple and Google collect a cut of every in-app purchase. According to the Tech Transparency Project (TTP), that means they profit from apps that generate revenue by creating non-consensual intimate imagery.