shownotes_20180521

Opening
  Opening Music
    Music is Say Anything by Manda and the Marbles
News
  PGP and S/MIME security flaw
    Makes it possible for an attacker to possibly decrypt email sent using PGP or S/MIME
    The attack is called Efail and some of the flaws it exploits have been around for almost a decade.
    In order for the attack to work the attacker first needs to have access to the original encrypted text of the the senders email.
      That text is then embedded into unviewable parts of an email and combined it with HTML code.
      HTML, is typically a link or image with the cipher text in the URL and the URL is coming from an attacker controlled server.
      The recipients email client then receives and decrypts that hidden ciphertext and "errors" on the attacker-controlled server saving the decrypted text into the attacker servers error logs for retrieval.
    It effects Apple Mail on Mac and iOS and Mozilla Thunderbird (likely other clients?)
    If you are concerned about the attack the best thing to do is to stop suing PGP and SMIME from inside your Mail client.
      Receive and send the ciphertext, but decrypt it outside your Mail client.
    I would expect patches to come soon. Baffling that these things are not patched until they are publicly exposed.
    AppleInsider also noted this week a new malware called 'mshelper' that popped up on Apple's support forums and on Reddit.
      Can be a cause of high processor usage and fans running constantly.
      You can check for it's existence on your system using the Activity monitor.
      Seems to be a trojan, so as always be cautious about what apps you install and get them from legitimate sources
      Installs a LaunchDsemon and file inside Application Support. `pplauncher`
    A web service ironically called TeenSafe stored unencrypted account information for users and it was hacked.
      The service claimed it was "a secure, encrypted way" for Parents to track their teens cell phone activities including messages and location data.
      Oddly enough you had to disable 2-factor authentication on your teens device for the service to work.
      over 10,000 records were compromised and they included iCloud logins, device identifiers and the email addresses of parents. no user generated content was exposed in the breach (photos, messages, location data). Though with the login of course you could access some of that via iCloud.
  iPhone could get 'Fall' colors
    An analyst at Rosenblatt Securities is thinking that Apple may bring back colors, like the had with the iPhone 5c, for the rumored LCD iPhone.
    The idea would be to make that model even more distinct from the "flagship" models.
    They say the colors would be "bright" and include blue, yellow, and pink options to appeal to the "younger" consumer market.
      Considering 82 percent of teens in the US own and iPhone and 84 percent plan on their next phone being an iPhone, according to Piper Jaffery, appealing to that market is probably a good idea.
    Why are the rumors about the iPhone SE so "hazy"
      Mac Otakara says it's because Apple still designing it and there are many prototypes being considered.
      Just like we discussed last week everything from an iPhone X-esque clone to just a glass-back and wireless charging.
      I'm still in the latter camp due to the SE's price point and market position.
      The one thing the latest report seems to confirm is that the SE 2 will not be here "soon", expect it with the rest of the line up in the Fall.
  Cook acknowledges Apple's 'interest' in original content
    Cook appeared on "The David Rubenstein Show" on Bloomberg Television and discussed a number of things from tariffs to immigration, but that's boring so we're gonna focus on what he said about entertainment.
    He, for the first time publicly I think, confirmed that Apple is, "very interested in the content business" and that they will, "be playing in a way that is consistent with our (sic) brand,"
    Not quite as definitive as we are making original content with some awesome Hollywood folks, but I'll take it.
      He did conclude with, "We're not ready to give any details on it yet. But it's clearly an area of interest."
    He also shared that Apple Music now has 50 million paid subscribers and that Apple is adding about 4 million new paid subscribers a month to the service.
    One show not coming to an Apple TV service will be The Obamas
      They had been looking to find a place to create shows about and Apple and Netflix were vying for the opportunity.
      Netflix won. A multi-year deal to produce original films and series with President Obama and First Lady Michelle Obama
      Details of what the shows will be were not shared, but Netflix did say they could include both scripted and unscripted series, as well as documentaries, features, and more (so ANYTHING).
  Apple is selling Home Pods
    Despite what you might think from your non-Siri assistant loving friends
    Strategy Analytics has done their thing and analyzed the first quarter sales of HomePod and they think Apple may have sold as many as 600,000
    May not seem like a lot, but it's not a bad start and Apple is historically good about having a slow start and then quickly ramping up and dominating.
    If accurate that means in just a few months Apple has captured about 6 percent of the global smart speaker market with the speaking being available in just three countries.
    The HomePod is also in it's own league as a "smart speaker" and more of a high end speaker with "smart" features.
    There is a rumor of Apple looking at producing a "cheaper" USD $199 HomePod under the Beats brand
      More likely this is an updated Beats speaker with AirPlay 2 support (something Apple has already said is coming).
    The rumors that Siri will give you the scoop on WWDC is wrong.
      Looks like a developer forgot to remove last years witty responses to "Tell me about WWDC"
      “La la la, Siri is getting a brand new voice!”
      “I’m gonna have a shiny new home! Well, not really shiny, more meshy and matte…”
Sponsor: Small Dog Electronics
  Small Dog Electronics
    You have a lot of choice on where to buy your Apple stuff, but unfortunately fewer and fewer of those choices are with companies who know Apple.
    That's why I love having Small Dog Electronics as a sponsor, they have been around like many of us through thick and thin and THEY ARE our community.
      They started in a garage over 20 years ago and haven't stopped offering great deals and items to the Apple community.
    The best part is your buying from folks who care about this community. Real folks, not some nameless megacorp.
    A now is the perfect time to visit smalldog.com because you have graduations happening and Father's day is right around the corner.
      I know Dad wouldn't mind a second Home Pod from Small Dog
      An Apple Watch would be on any Dad or Grad wishlist and Small Dog is offering $10 off an Apple Watch Band with the purchase of an Apple Watch with AppleCare+
      You can also get a free printer when you buy a new Mac with AppleCare+ and a backup drive.
      Having a hard time deciding? They have posted new accessory bundles to the website, perfect for any Apple fan.
      And be sure to check the web site early and frequently this weekend because their famous garage sale event is happening over the memorial day weekend.
    Maccast listeners can use the coupon code: 'maccast' to get $20 off an order of $100 or more. And yes, the code will work even on the bundles I just told you about.
    Just make sure you visit smalldog.com and don't forget to use the code 'maccast'.
Feedback, commentary, opinions
  Your thoughts on MacBook Pro Keyboard
    I brought this up on the last show.
    At least one person felt I was being an Apple apologist and that the keyboard on the new MacBook Pro has serious design flaws.
      Oddly this person didn't own a new MacBook Pro.
      Just based his opinion off of reports.
    Still, many of you did write in to say that you had at least one, if not multiple (usually 2) replacements.
      That's enough for me to say there are some issues with at least some keyboards
    What all your reports seemed to prove is that the design has a weakness in that is it much more susceptible to dirt and dust.
      Several reported having small issues that were resolved by following Apple's instructions for using compressed air to clear out debris.
      Others noted that just repeatedly pressing a key can often "unstick" it? Maybe "pulverizing" the debris and dislodging it?
    I also had just as many folks say they had had no issues.
    Of the folks that did have repairs I asked if they had repeat issues and most, but not all said no.
      I have to wonder if it depends on the date of the replacement as i have been told that Apple made some internal design changes.
      That could all be hearsay though, I don't have proof.
  Spring Cleaning your Mac
    It's probably later then really spring, but lately many of you have been asking about what to do to keep your Mac running in tip top shape.
    These days I'm finding I'm having to do less and less other then running software updates, but there are a few things I like to do just to deal with cruft.
    First, I will say that if your computer seems to be running fine, then you probably don't need to do anything. You can perform these tasks and they won't hurt, but don't feel like you have to.
    So your getting beachballs and things are generally running slow.
      First try to see if you can find the reason.
      Check the typical places like Activity Monitor to see if you have background processes taking up a lot of Memory or CPU.
      Turn off and clean out any stuff that could be running in the background that you don't need.
        Menu items
        System Preferences
        Login items.
      Is it simply time for an upgrade? More RAM (if you can), move to and SSD (if you can). [iFixit.com](http://ifixit.com)
    When was your last clean install? We build up so much stuff over the years, maybe it's just time.
      I try to do it about every other macOS upgrade
      Yes, it's a PITA, but end the end often worth it.
      You MUST have two full (and confirmed) backups before doing this. Please.
      Use migration assistant to bring back Users and Settings, but leave the Apps and clean install.
    Is your hard drive full? Cleaning that out can help
      identify and "archive" old stuff
        Use externals or internals ad an HDD "toaster"
        Use NAS or RAID (redundant) storage
        USB thumb drives are still valid too.
        For "valuable" data archives consider two copies.
      Tools for finding "old" and large files
        Large file scanner built into macOS Sierra
          1) Apple Menu > About this Mac
          2) Click the "Storage" tab.
          3) Click "Manage…" and choose 'Documents' in the sidebar
            It will show you three tabs, large files, Downloads, File Browser hover over an item to see a magnifying glass icon (show in Finder) or a "X" (delete)
            Be aware that clicking delete will erase the item (after confirming)
        I like to run [Clean My Mac 3]( https://cleanmymac.com)
          Remove old system junk and cache files, Mail attachments, etc.
          You can review everything
        Another great app for finding and dealing with large files is [Daisy Disk]( https://daisydiskapp.com)
          Available in Mac App Store
        A big culprit is old iOS backups. Check in iTunes.
          iTunes > Preferences
          Click on the Devices tab
          You'll get a list of all your local iTunes backups and the dates
          You can select any old ones you no longer need and click "delete backup"
          You can also look directly in the Finder at '~/Library/Application Support/MobileSync/Backup'
            I had some in there that were not showing up in my iTunes.
          Clean My Mac will also find and clean these files.
        Consider moving large "libraries" onto an external or using "cloud" storage
          If you use the "Cloud" that cannot be your ONLY copy (you need local archive or backups).
          I keep my iTunes Library on an external drive and use Apple Music (iCloud Music Library) as my mobile access.
          Break up and archive "Photo" Library
            [PowerPhotos](https://www.fatcatsoftware.com/powerphotos/)
            Or you can do it manually. Export the photos (originals) and then hold "shift" when launching Photos to create a new Library and import into that.
            You can then archive and backup the "old" libraries.
            If you use iCloud Photo Library just remember you can only have one "system" library.
    General "house keeping"
      Again my favorite tool is [Clean My Mac 3]( https://cleanmymac.com)
        It does all the maintenance scripts, like clearing caches and rotating log files, etc. AND more.
      I will also use [Cocktail](http://www.maintain.se/cocktail/)
      There is also still [Onyx](https://www.titanium-software.fr/en/onyx.html)
  Seeing "Website Not Secure" more frequently
    Randall noticed that he started seeing these kinds os pop-ups more frequently. He also gets the "site certificate not valid"
    Still when he check the certificate seems legitimate and from an good signing authority, like "Verisign".
    Randell is doing the right thing in pausing and checking the sites certificate before proceeding.
      Don't just click the "continue anyway" option.
    Still he wonders why this is happening more frequently.
      A couple things are going on.
      Sometimes the certificate is valid, but has expired. Even the best sites can sometimes miss a renewal.
      More sites are moving to SSL because Google changed the rules. The trouble is they may not fully understand how to implement SSL (all content needs to load as HTTPS).
    There is also a change to Safari iOS 11.3 and macOS 10.13.4
      See [Apple's Support page](https://support.apple.com/en-us/HT208672) on this.
      Safari also checks if a website that asks you to enter password or credit card information is not secure because it's unencrypted
      If those forms are not SSL then you get the warning and Apple advises that you do NOT enter your logins on those pages.
      Contact the site and let them know their page is NOT secure (though they likely know).
    Randel brings up another question:
      As we see more "false" positives or more pop-dialogs, doesn't pop-up fatigue become an issue.
      YES. I firmly believe sometimes things like this actually lead to "less" security.
      Still we need to be diligent.
  Home Pod wonkiness
    Had an issue where my Home Pod suddenly started to only play parts of albums or playlists
      Took a "restart" to get it fixed.
    Can't figure out how to get "audible" reminders on the Home Pod. Maybe it's not possible?
      I thought it worked a couple times, but it might have been confused and just set a timer.
      Any ideas?
    Still loving the Home Pod, one issue is it's almost too good.
      I tried to ask my iPhone a "Hey Lady" question and the Home Pod responded from my office. Unfortunately I can't hear her from that distance.
      That is actually the biggest source of frustration because I need to lift my wrist or manually activate Siri on my iPhone if I DON"T want the Home Pod to take the request.
        Because of some of the Home Pod limits there are times when I do want that.
        I have no doubt these instances of confusion will improve over time.
Closing
  Some housekeeping
    Don't forget about [Macstock 2018](https://macstockconferenceandexpo.com)
      Checkout this [speaker list](https://macstockconferenceandexpo.com/speakers/ )
      Get the "erly bird" price on a full weekend pass with the code 'MACCAST'
    Thoughts on shutting down the forum?
    Closing down Maccast Members site. Move to [Patreon](http://patreon.com/maccast)
      Software will not run on new servers and Patreon is MUCH easier for me to manage and offers more flexibility for sharing "exclusive" content and posts.
      If you are month to month, login and cancel. Sign up on Patreon.
      6 and 12 month Members, you're fine until your membership ends. These DON'T auto renew, so just move when it expires.
      I'm trying to figure out how to get ALL the benefits to both groups (stay tuned), but we'll make sure one way or another you don't miss out.
  Podcast Marketplace
    Thanks to my sponsors
      Smile
      Gazelle
        Gazelle. The fast and simple way to sell your used gadgets! Find out what your used iPhone, iPad and other Apple products are worth at Gazelle.com.
  Supporters
    Bandwidth for the Maccast provided by CacheFly at cachefly.com
    Advertising is handled by Backbeat Media at backbeatmedia.com
  Keep emails coming. Audio comments.
    maccast@gmail.com
    281-622-4269 or 281-Mac-I-Am-9
      PLEASE LEAVE YOUR EMAIL ADDRESS
    MacCast Forum
    Follow me on Twitter
    Checkout the page on Facebook