Post

Replies

Boosts

Views

Activity

Reply to What is the best way to retrieve data from a server
There is no one "best" way. Lots of details here not in evidence, too. Transfers using https via TCP 443 are the most compatible means for transferring files around, and is the means least likely to encounter a firewall, as Quinn sagely suggests. This allows you to access and download a data file on whatever web server you are using. sftp is absolutely possible too, but that usage can encounter outbound network firewalls and policy-related blocks on TCP 22 traffic (or on other ports, or on all but specific ports). Also, any client-side private key or password usage is necessarily and absolutely always assumed to be compromised. Embedded sftp credentials are not secret. Whatever you decide to use for the data transfer, there are various ways to transfer files and blobs of data around, and (outside of a web browser and related tech) one of the more ubiquitous choices for the transfer is curl and libcurl. curl can transfer data using most common protocols. You might also want to provide a pointer for locating your file or data blob too, whether that is via a HTTP redirect, or some data returned from your website, or via a DNS translation (such as a DNS SRV service record or such) or some other indirect means, so that you don't end up stuck between needing to move the file for whatever reason (storage, load, uptime, new hosting provider or CDN, whatever) and having to push out an app update to allow that. This pointer also for avoiding support calls from those that haven't updated the app. You may also want to embed file format version information somewhere too, so that an old app can react appropriately and display an appropriate diagnostic message upon meeting a new file version. Version skew is a thing. Think about how you can implement your app and file upgrades.
Aug ’25
Reply to Fix everything on ios beta 26
As this development beta is intended for third-party app developers, it can or will have issues. The development beta is intended to allow you to start testing the apps that you yourself are developing. It’s intended for use on dedicated test devices. Not for use on devices you need to work, or with apps you need to work. You may or will need to wipe and re-install without restoration of a backup, wiping and directly loading the next version of a beta, or reverting to a released version by restoring the original backup created prior to loading the beta, depending on what has happened. Issues arising can potentially involve third-party app problems, third-party apps that may refuse to function, iOS problems, device-local data corruptions, and issues or corruptions with iCloud data associated with the Apple Account in use. As an app developer, you can report iOS bugs and feedback here: https://developer.apple.com/bug-reporting/ If you’re not an app developer, revert to iOS 18.5 and to your backup created prior to installing the beta. If you have no backup, then you’re left to reset your device and reinstall iOS 18.5, or wait for the released iOS 26 version later this year and try a reset and restore of your data there.
Jun ’25
Reply to Quic Protocol
This question is about managing iCloud+ Private Relay, which is built on QUIC and ODoH. Some background on iCloud+ Private Relay: https://www.apple.com/privacy/docs/iCloud_Private_Relay_Overview_Dec2021.PDF https://developer.apple.com/icloud/prepare-your-network-for-icloud-private-relay/ For this case, see the section Allow for network traffic audits in that second link. PS: More generally, this is a question about iCloud+ Private Relay, and questions such as this are probably best asked over in the Apple Support Communities, as this really isn‘t a question related to app development. Probably best over in the iPhone/iPad/Mac in Business & Education Communities, most likely.
Topic: Safari & Web SubTopic: General
Jun ’25
Reply to 4.3.0 Design: Spam
See section 4.3 of the App Review Guidelines here: https://developer.apple.com/app-store/review/guidelines/#spam Whether Apple believes you’re submitting a too-similar app with minimal changes, or maybe the app category is too overrun? Or shorter, whether this is case 4.3(a) or case 4.3(b)?
Jun ’25
Reply to Why My Terminal Can’t Ping WWW.GOOGLE.COM
Given connectivity issues getting to google.com and to brew.sh, your local network or ISP link seems rather recalcitrant. Using the usual and expected ping syntax fails? ping www.google.com ping 1.1.1.1 Note: ping doesn’t use URL syntax, if you're trying to use that syntax here. That first command pings Google, and the second Cloudflare. That ping failure would usually mean your local network routing or DNS is misconfigured or malfunctioning, you’ve an add-on VPN installed and that’s malfunctioning, or you’re encountering a firewall or network filter somewhere locally or in the network path. Or your local Wi-Fi or wired or ISP connections are unstable. What Apple suggests for troubleshooting: https://support.apple.com/en-us/101588 IP network troubleshooting discussions are probably best over in the Apple community forums too, in the community for macOS Sequoia or whichever other version is in use. https://discussions.apple.com/community/macos/sequoia
Apr ’25
Reply to sendto() system call - Nondeterministic "No route to host" due to local network restrictions
While this seemingly is a bug somewhere in the macOS network stack, UDP apps absolutely need to be coded to expect packets to vanish with no errors reported to the sending app. TCP connections will report an error here, but that certainty of feedback is not the case with UDP. And I'd expect EHOSTUNREACH only after some packet tried the path. Put differently, I'd re-code the app to implement its own recovery logic. Don't get the expected feedback? Resend, or give up, as app appropriate. Or apps using UDP multicast usually assume the next multicast will catch up any clients that missed the earlier multicast packet.
Mar ’25
Reply to Captive Portal / Captive Network Assistant
This is seemingly enterprise networking, and — outside of NEHotspotHelper —  not particularly development-related. Links related to this topic, depending on where you're headed here: https://developer.apple.com/news/?id=q78sq5rv https://tools.ietf.org/html/draft-ietf-capport-rfc7710bis https://tools.ietf.org/html/draft-ietf-capport-api https://support.apple.com/en-us/HT204497 https://developer.apple.com/documentation/NetworkExtension/NEHotspotHelper https://www.securew2.com/blog/apple-captive-network-assistant-understanding-captive-portals-on-ios-devices https://community.cisco.com/t5/security-knowledge-base/dual-ssid-byod-with-apple-captive-network-assistant-cna-browser/ta-p/3642663 There are other discussions here in the developer forms, as well.
Jan ’25
Reply to In-house app distribution question
Apple Business Manager (ABM) or whatever Mobile Device Management (MDM) you’re using would be typical. Here are your app store distribution options: https://developer.apple.com/help/app-store-connect/manage-your-apps-availability/set-distribution-methods An MDM integrated with macOS such as ABM can manage the distribution of apps, as well. Here are some discussions of all of this, including using ABM to distribute custom apps: https://support.apple.com/guide/deployment/welcome/web https://support.apple.com/guide/deployment/distribute-custom-apps-dep0113f6e18/web With macOS, notarization and direct distribution is also feasible. But distribution and installation via ABM/MDM would be typical.
Jan ’25
Reply to Does your app provide end-to-end encryption?
If you use end-to-end encryption in any form, you will want to select “yes” there. This includes using HTTPS, TLS, and even that clever custom digitally-encrypted smoke signals scheme. HTTPS is fundamentally end-to-end encryption. Your encryption usage may well be exempt from needing documentation, as is the case with many apps, and particularly those using built-in Apple encryption support. You may well have to document that encrypted smoke signal implementation for export, though. If you are even remotely unclear or unsure about this, check with organization’s export-control legal contacts. Or get some. Some related reading: https://developer.apple.com/documentation/security/complying-with-encryption-export-regulations https://developer.apple.com/help/app-store-connect/manage-app-information/detemine-and-upload-export-compliance-documentation https://developer.apple.com/help/app-store-connect/reference/export-compliance-documentation-for-encryption https://stackoverflow.com/questions/58792758/how-to-determine-if-my-app-contains-encryption
Jan ’25
Reply to Completely new to programming, looking for resources.
Maybe Coursera, or other similar programs, or classes at a reputable local school. Caution: there are lots of shady schools. Here is an introductory (Scratch) class: https://pll.harvard.edu/course/cs50s-introduction-programming-scratch Then Harvard’s CS50 Python intro: https://cs50.harvard.edu/python/2022/ Further along, then maybe the Stanford Swift class: https://cs193p.sites.stanford.edu/ Apple presents Swift as an introductory language, and Apple and third-parties have lots of materials available to learn its capabilities. But you need to know some terms and concepts and a few algorithms. To find previous discussions about learning to develop apps around here, use this DuckDuckGo or Google search: site:discussions.apple.com learn Harvard Stanford python swift Getting going is probably an investment of two to four years of concerted study and class time, too. And then the learning just never ends.
Topic: Business & Education SubTopic: General Tags:
Nov ’24
Reply to Why do I need to whitelist Apple IP addresses on server
1: accessing other websites and other network services can be leveraged by an adversary for command and control or for data exfiltration during a breach. (And some of the other apps and tools that can be involved with those other ports and services can themselves be vulnerable to exploits and a potential means of ingress.) 2: You’ll need to discuss that with Vercel support. Depending on the current hosting details, you may be headed for a dedicated host, which is prob preferable here anyway.
Nov ’24