Linked List: February 21, 2020

Gurman: Apple Is Considering Allowing Third-Party Default Apps and, Seemingly, an SDK for HomePod 

Mark Gurman, reporting for Bloomberg:*

The technology giant is discussing whether to let users choose third-party web browser and mail applications as their default options on Apple’s mobile devices, replacing the company’s Safari browser and Mail app, according to people familiar with the matter. Since launching the App Store in 2008, Apple hasn’t allowed users to replace pre-installed apps such as these with third-party services. That has made it difficult for some developers to compete, and has raised concerns from lawmakers probing potential antitrust violations in the technology industry.

Users have been clamoring for this ever since the App Store opened. I get why Apple has been cautious about allowing this, but at this point it’s overdue. There are third-party email clients and web browsers that are really good — Apple should celebrate that fact. And browsers will almost certainly still be required to use the system WebKit for rendering, alleviating system resource and security concerns. Chrome on iOS can’t burn through your battery like Chrome on MacOS does, because on iOS Chrome uses WebKit, not Blink.

I could also see Apple doing this for email (and maybe calendars and contacts too) but not for the web browser, simply as defense against Chrome’s growing hegemony over the web. But I think the fact that Chrome on iOS must use WebKit is defense enough against that. It’s WebKit that’s worth requiring, not Safari.

Now, Apple is working to allow third-party music services to run directly on the HomePod, said the people. Spotify and other third-party music apps can stream from an iPhone or iPad to the HomePod via Apple’s AirPlay technology. That’s a much more cumbersome experience than streaming directly from the speaker.

This is interesting news, because at a technical level it would seemingly require an SDK for HomePod. HomePod isn’t like Apple Watch where it’s tethered to an iOS device — it runs independently. It’s possible that Apple could just work privately with a handful of big names like Spotify and Pandora and bake support for those specific services into the HomePod OS, but I hope it’s something Apple announces at WWDC as an API for any audio app. (I’m thinking about podcast clients in particular.)

Also under discussion at Apple is whether to let users set competing music services as the default with Siri on iPhones and iPads, the people said. Currently, Apple Music is the default music app.

Siri does support third-party apps — you just have to specify them by name: “Hey Siri, play some Pearl Jam from Spotify”. It makes sense that this should be a setting too — if you’re a Spotify user it’s a bit ridiculous that you’re currently required to tack on “from Spotify” with every single request.

* Bloomberg, of course, is the publication that published “The Big Hack” in October 2018 — a sensational story alleging that data centers of Apple, Amazon, and dozens of other companies were compromised by China’s intelligence services. The story presented no confirmable evidence at all, was vehemently denied by all companies involved, has not been confirmed by a single other publication (despite much effort to do so), and has been largely discredited by one of Bloomberg’s own sources. By all appearances “The Big Hack” was complete bullshit. Yet Bloomberg has issued no correction or retraction, and seemingly hopes we’ll all just forget about it. I say we do not just forget about it. Bloomberg’s institutional credibility is severely damaged, and everything they publish should be treated with skepticism until they retract the story or provide evidence that it was true.

The State of Scamware on the Mac 

Last week there was a hubbub regarding a report from antivirus software vendor Malwarebytes that claimed “Mac threats increased exponentially in comparison to those against Windows PCs” in 2020. That line got a lot of headlines.

Michael Tsai:

This sounds really bad at first, like the number of Mac threats is growing in proportion to the (larger) number of Windows threats. But I guess they are just using the non-technical meaning of “exponential,” so the whole thing boils down to “more than.” […]

This sounds unnecessarily alarmist compared with the contents of the report, and I remain convinced that for most users Apple’s built-in security measures are sufficient. I’ve seen far more Mac problems caused by anti-virus software than actual viruses.

Computer viruses are called viruses because like biological viruses, they spread by themselves. What Malwarebytes is talking about are scam apps — things that trick or otherwise convince the user to install voluntarily. Dan Goodin had a piece at Ars Technica last month about the scourge of fake Adobe Flash installers — which work because unsophisticated Mac users had been truthfully told they needed to upgrade their version of Flash for a decade. It’s a real problem — but third-party antivirus software is not the answer. As usual, Tsai has a wonderful compilation of links to commentary on the matter.

Be sure to read Jason Snell’s excellent take, which convincingly makes the point that Apple has been working to protect Mac users from these sort of apps for years, exemplified by this technical note Apple published back in November, expanding their definition of “suspicious software” that MacOS defends against.

Ryan Christoffel’s Proposed Fix for iPad Multitasking 

Ryan Christoffel, writing for MacStories:

I love the functionality enabled by iPad multitasking, but the current system is unnecessarily complex. I don’t believe the iPad should revert to its origins as a one-app-at-a-time device, but I know there’s a better way forward for multitasking.

My proposal for a new multitasking system employs a UI mechanic that already exists across both iPhone and iPad. Without losing any of iPadOS 13’s current functionality, it brings the iPad closer to its iPhone roots again and makes multitasking accessible for the masses.

Context menus are the key to a better multitasking system.

Christoffel published this two weeks ago, and I’ve been thinking about it ever since — hence the delay in my linking to it. I’m working on a longer piece about this, but in short, I think two things about this idea:

  1. It’s very thoughtful and considered, and obviously comes from someone who gets the iPad Way, insofar as there is an iPad Way. And the design he proposes is better in every way — or at least almost every way — than what we have with iPadOS 13 today.
  2. It’s not good enough. Hiding everything behind contextual menus is a crutch.

If you haven’t read Christoffel’s proposal, do so. Consider it a reading assignment.

Google Has Banned Almost 600 Android Apps for Pushing ‘Disruptive’ Ads 

Craig Silverman, reporting for BuzzFeed News:

One of the biggest developers banned from the Play Store and Google’s ad networks was Cheetah Mobile, a publicly traded Chinese company that BuzzFeed News revealed in November 2018 had been engaging in ad fraud. The following December, Google removed one of the offending apps but allowed Cheetah to continue offering other apps in the Play Store. As of this morning, Cheetah’s entire suite of roughly 45 apps in the Play Store was removed, and the apps no longer offer advertising inventory for sale in Google’s ad networks.

Per Bjorke, Google’s senior product manager for ad traffic quality, told BuzzFeed News the removed apps, which had been installed more than 4.5 billion times, primarily targeted English-speaking users and were mainly from developers based in China, Hong Kong, Singapore, and India. He declined to name specific apps or developers but said many of the banned apps were utilities or games. Google published a blog post today with details about the removals.

I don’t understand why Google was so lenient with Cheetah Mobile until now. BuzzFeed News’s investigation clearly showed they were fraudsters. They hadn’t made a mistake, it wasn’t a bug or misunderstanding — they were ripping off users. Just ban them, and keep an eye out for any attempts to return under a new name. Like I’ve been advocating for Apple’s App Store, there ought to be a bunco squad that hunts down scams and rackets of all sorts and gets them out of the store.

Google has even more leeway to be aggressive on this front, because Android allows sideloading apps. The Play Store is not the only supported way to install apps on Android devices.

Sony, Facebook Pull Out of GDC 2020 Due to Coronavirus Concerns 

This follows Mobile World Congress — a 100,000-attendee conference/expo in Barcelona that should be going on right now — being completely canceled.

Chris Espinosa on Larry Tesler 

Chris Espinosa:

Larry taught me the value of taking the user’s point of view; using heuristics to work magic; to look at all the cases. Much more than inventing copy and paste, he invented it as a writing tool, not a code-editing tool, for people who didn’t understand computers.