Linked List: June 18, 2018

Monday, 18 June 2018

Federico Viticci on Shortcuts in iOS 12 

Federico Viticci:

While it’s still too early to comment on the long-term impact of Shortcuts, I can at least attempt to understand the potential of this new technology. In this article, I’ll try to explain the differences between Siri shortcuts and the Shortcuts app, as well as answering some common questions about how much Shortcuts borrows from the original Workflow app.

Apple has packed a lot of new features under that one word, shortcuts, in iOS 12.

South Korean Carrier to Sell ‘New’ iPhone 3GS Units 

Gordon Gottsegen, reporting for CNet:

Even though the iPhone 3GS will be sold as “brand new,” don’t expect it to work the same as a recently released iPhone. The iPhone 3GS was discontinued back in 2012, and it only runs iOS 6. As a result, many apps (and even iMessages) won’t work on the phone.

The iPhone predates Lightning cables, too, so you’ll be stuck using an old-school 30-pin connector.

Still, SK Telink is selling the iPhone 3GS for only 44,000 won, which is equivalent to $40, £30 or AU$55. So this Apple blast-from-the-past could be yours for pretty cheap — if you’re in Korea.

On the one hand, the 3GS is crazily outdated. On the other hand: $40!

Google to Fix Precise Location Data Leak in Google Home, Chromecast 

Brian Krebs:

Craig Young, a researcher with security firm Tripwire, said he discovered an authentication weakness that leaks incredibly accurate location information about users of both the smart speaker and home assistant Google Home, and Chromecast, a small electronic device that makes it simple to stream TV shows, movies and games to a digital television or monitor.

Young said the attack works by asking the Google device for a list of nearby wireless networks and then sending that list to Google’s geolocation lookup services.

“An attacker can be completely remote as long as they can get the victim to open a link while connected to the same Wi-Fi or wired network as a Google Chromecast or Home device,” Young told KrebsOnSecurity. “The only real limitation is that the link needs to remain open for about a minute before the attacker has a location. The attack content could be contained within malicious advertisements or even a tweet.”

Young is getting location data accurate to within 10 meters from his exploit. All you have to do to be exposed is open a web page and leave it open for a minute. This is the common sense fear of this whole Internet of Things movement: that these devices we’re putting on our networks aren’t secure, even the ones from big companies like Google.

(I would also argue that it’s wrong that JavaScript running on a web page is able to ping devices on your local network without any sort of prompt granting it such access.)

WhenWorks 

New iOS app and web service that makes it easy for people to book appointments with you. From their blog announcement, on what makes WhenWorks unique:

There are many competitive services in this space. What they all have in common is that they are purely web-based solutions. What makes WhenWorks unique is that it is a mobile app that integrates directly with the Calendar app on your iOS device, is far easier to configure and use, more secure, and always with you when you need it.

WhenWorks supports all of the leading calendar services (iCloud, Google Calendar, Office 365 and Outlook.com) but is particularly well-suited for those who use iCloud, due to its deep integration with the built-in Calendar on iOS.

WhenWorks was founded by John Chaffee, of BusyMac and, back in the day, Now Up-to-Date fame, and he’s put together a really good team. The pricing is outstanding too: 14-day free trial, free-to-use for up to five appointments per month after that, and just $5/month for the pro account with no limits.

It’s a really great app, and setting it up couldn’t be easier. Worth checking it out just to examine the UI and on-boarding process, and if you’re the sort of person who has a busy calendar packed with appointments, you’re nuts if you don’t try it.

How Square Made Its Own iPad Replacement 

Lauren Goode, writing for Wired:

If you know the company Square, it’s probably because you’ve paid in a store using a Square “stand”, a dock that supports a tablet, or you’ve swiped your card through Square Reader, a smartphone dongle that processes payments. These products have a soothing, decidedly Apple-y aesthetic, from the simple dongle to the all-white stand that typically houses an iPad. But since late last year, Square has been quietly selling its own custom-made tablet, the Square Register, a $999, Android-based system. And the company has taken an obsessive approach to designing the product.

There’s a local coffee house I like that recently installed these, and they’re pretty neat. The two-screen design makes sense for a two-person interaction. Also, Square’s Apple Pay support is top-notch — in my experience Square’s Apple Pay readers are more accurate and work faster than the dinguses from their competition.