What’s new in privacy

RSS for tag

Discuss the WWDC22 Session What’s new in privacy

Posts under wwdc2022-10096 tag

13 Posts

Post

Replies

Boosts

Views

Activity

Using the UIPasteControl
Hello 👋🏽 I am a new iOS developer and I am having a hard time understanding the behavior of the new UIPasteControl to avoid showing the system prompt. Does anyone has any example code I could look at to understand the behavior. Idk how to set the target of the button to the general pasteboard. also I am using objective-c . thanks cristian
5
0
4.2k
Apr ’25
user-assigned-device-name entitlement possible with automatically managed signing?
Is there a way to get the new com.apple.developer.device-information.user-assigned-device-name entitlement to work with automatically managed signing, or is it required to change to manual signing to use this entitlement? Someone else had the same problem as me in this reply on another post: https://developer.apple.com/forums/thread/708275?answerId=730156022#730156022 but it was suggested they start a new thread but I don't think they started such a thread so I am. I was hoping, perhaps naively, that after getting approval for the entitlement and adding it to our entitlements file that it would "just work" but i'm getting the error: Provisioning profile "iOS Team Provisioning Profile: [redacted bundle id]" doesn't include the com.apple.developer.device-information.user-assigned-device-name entitlement. Really hoping to avoid having to manually manage signing or at least know for sure that it is unavoidable before I move to it.
7
0
5.4k
Jan ’24
NSUpdateSecurityPolicy AllowProcesses where and how to add Items
Hi, in the video wwdc2022-10096 at about 05:45 it is explained how to allow other software to update your software by adding team-idetifiers an signing-identifiers to an Info.plist. I would need a few more details. Which Info.plist file do I have to change? I use pkgbuild to build the packages and productbuild to combine them. pkgbuild --analyse --root generates an .plist-file for every single package. Do I have to add the Information there? productbuild --sythesize generates an xml-file discribing the whole thing. This would refer better to the installer as a whole, but it is not an info.plist. How and where exactly to add the information? I tried to use plutil, but it doesn't like array-names to start with numbers as team-identifiers often do. Also it crashes quite often. The .plist-files generated by pkgbuild either contain an empty array or several unnamed items. [ ] Do I even need to add something threre? The other one contains several Items: [   0 => {     "BundleIsRelocatable" => 0     "BundleIsVersionChecked" => 1     "BundleOverwriteAction" => "upgrade"     "NSUpdateSecurityPolicy" => {       "AllowProcesses" => {         "123ABC" => [           0 => "com.example.pal.about"         ]       }     }     "RootRelativeBundlePath" => "Library/PreferencePanes/XXX.prefPane"   }   1 => {     "BundleIsRelocatable" => 0     "BundleIsVersionChecked" => 1     "BundleOverwriteAction" => "upgrade"     "NSUpdateSecurityPolicy" => {       "AllowProcesses" => {         "123ABC" => [           0 => "com.example.pal.about"         ]       }     }     "RootRelativeBundlePath" => "Library/Frameworks/XXX.framework"   }   2 => {     "BundleHasStrictIdentifier" => 1     "BundleIsRelocatable" => 0     "BundleIsVersionChecked" => 1     "BundleOverwriteAction" => "upgrade"     "NSUpdateSecurityPolicy" => {       "AllowProcesses" => {         "123ABC" => [           0 => "com.example.pal.about"         ]       }     }     "RootRelativeBundlePath" => "Applications/XXX.app"   } ] Should it look like this? A more detailed example would be great. Thanks!
2
0
2.3k
May ’23
Unable to request User-Assigned Device Name Entitlement
I'm working on a project that will also support a "My Devices" web portal. For making this work, we need the name that a user did assign to the device. In the documentation there is a link to apply for the com.apple.developer.device-information.user-assigned-device-name entitlement but the link is going nowhere for me. How to request the com.apple.developer.device-information.user-assigned-device-name entitlement from here? Apple Documentation: https://developer.apple.com/documentation/bundleresources/entitlements/com_apple_developer_device-information_user-assigned-device-name Link to request the entitlement: https://developer.apple.com/contact/request/user-assigned-device-name/ WWDC 2022 session where this entitlement is described: https://developer.apple.com/videos/play/wwdc2022/10096
1
0
858
May ’23
App showing unidentified developer under General - Login Items Added - Allow in the Background
In macOS 13 Ventura, as soon as mac apps gets installed from packages, it shows two alerts (Login Items Added) one as "Unknown Developer" and other as with proper developer name. On click of alerts, it opens System Preferences and navigates to General -> Login Items. It lists our apps under "Allow in the Background", one with "unidentified developer" and other with proper developer name. We followed all steps required with all apps. So why one app showing as "unidentified developer" and other with proper developer name? Also app with correct developer name, missing with its app icon.
4
1
6.6k
Feb ’23
'User Assigned Device Name' in XCode Capabilities list
I got approval for User Assigned Device Name but now am stuck how to import this capability in XCode? I successfully updated my AppId in membership portal to reflect this permission, but I can't find anything in XCode to import this. I opened Editor -> Add Capability but there is no option to add User Assigned Device Name in the list! User Assigned Device Name
17
1
6.9k
Dec ’22
What is the paste allow permission bug in iOS 16?
I know that prompt when programmatically paste from clipboard in iOS 16. Detail, when read the value from UIPasteboard. https://9to5mac.com/2022/09/20/ios-16-copy-paste-alert/ Above bug is to paste from system popup(or dialog?) showed when touch textfield? or programmatically read values from UIPasteboard? And, a number of articles said this bug is fixed. But, in my case, it's not fixed in iOS 16.1 beta 2.
2
0
5.1k
Dec ’22
iOS16: What key we need to use for pasteboard permission in info.plist
After checking privacy in iOS 16 features to look for. I noticed that the application needs to ask the user's permission for accessing the clipboard. Please check the following image . I tried figuring out what permission key we need to use, to request permission but so far I have not found any details. I checked video and transcript and other developer documentation. Like privacy key list . But couldn't find any documentation related to this.
3
1
8.1k
Sep ’22
How to make an uninstaller on macOS 13 Ventura?
Our audio driver uninstaller does not work properly on macOS 13 Ventura Beta. The uninstaller is for removing our Audio Server Plug-in as well as its associated app that resides in /Library/Application Support/ folder. The Audio Server Plug-in can be removed without any problems, but the associated app cannot be removed if it is notarized. Our uninstaller uses SMJobSubmit function to execute a shell script with administrator privileges. I found the following error in the system log: kernel: (Sandbox) System Policy: rm(676) deny(1) file-write-unlink /Library/Application Support/MyDriver/MyApp.app I guess that the app cannot be removed because Gatekeeper protects notarized apps on Ventura. How can our uninstaller remove our notarized app? Thank you.
2
0
1.2k
Jul ’22
DeviceDiscoveryExtension basics, can't get sample project to work
I'm trying to understand what exactly is made possible by Media Device Discovery Extensions, what responsibility the containing app has, and what exactly is made available to other apps or the system, if anything. I haven't been able to find any meaningful high level documentation, and WWDC 2022 session 10096 only mentions these new extensions in passing. The most comprehensive body of information I found is the example project: https://developer.apple.com/documentation/devicediscoveryextension/discovering_a_third-party_media-streaming_device?changes=latest_beta&language=objc However, I don't think it's working the way it should out of the box: I've got the Client target app built and running on an iPad Pro running iPadOS 16 Beta 2 I've got the MacServer target running on a Mac Mini with macOS 13 Ventura Beta 2 I've got the Server target running on an iPhone with iOS 15.5. (Non-beta) If I tap the AirPlay icon on the Client's video player, I can see the two servers, but selecting one just causes a spinner to show up next to its name. This keeps going for a while, eventually the spinner goes away again, but the device selection tick stays next to 'iPad'. The text "Select route" also doesn't change, which I think it's supposed to, judging by the code. I've tried a variety of combinations of settings on the servers - bluetooth only, bonjour only, different protocols, etc., but I'm always getting the same behaviour. Has anyone had any success in getting the example to work, and how? Is there any high level documentation available that I've missed? Can someone explain what exactly we can build with this in more detail than "implementations of custom A/V streaming protocols?" The WWDC session video talks about 3rd party SDKs, so do these extensions have to be embedded in every app that would be streaming the video, implying that it's not useful for mirroring?
4
0
1.9k
Jun ’22
Clarify "visible to user" requirement for user-assigned-device-name entitlement
We're using the device name as an identifier for device pairing with an accessory. Therefore we think we're fulfilling the prerequisites: need it for “multi-device features” device-name is visible to the user but we're not sure about the latter. Can you clarify if the requirement "visible to the user" means visible on the device accessing the UIDevice.name or any device involved in the multi-device feature? Seems like we can't just try and find out by trial and error yet: https://developer.apple.com/forums/thread/708275
0
0
979
Jun ’22
Using the UIPasteControl
Hello 👋🏽 I am a new iOS developer and I am having a hard time understanding the behavior of the new UIPasteControl to avoid showing the system prompt. Does anyone has any example code I could look at to understand the behavior. Idk how to set the target of the button to the general pasteboard. also I am using objective-c . thanks cristian
Replies
5
Boosts
0
Views
4.2k
Activity
Apr ’25
user-assigned-device-name entitlement possible with automatically managed signing?
Is there a way to get the new com.apple.developer.device-information.user-assigned-device-name entitlement to work with automatically managed signing, or is it required to change to manual signing to use this entitlement? Someone else had the same problem as me in this reply on another post: https://developer.apple.com/forums/thread/708275?answerId=730156022#730156022 but it was suggested they start a new thread but I don't think they started such a thread so I am. I was hoping, perhaps naively, that after getting approval for the entitlement and adding it to our entitlements file that it would "just work" but i'm getting the error: Provisioning profile "iOS Team Provisioning Profile: [redacted bundle id]" doesn't include the com.apple.developer.device-information.user-assigned-device-name entitlement. Really hoping to avoid having to manually manage signing or at least know for sure that it is unavoidable before I move to it.
Replies
7
Boosts
0
Views
5.4k
Activity
Jan ’24
Getting the ...user-assigned-device-name entitlement?
In iOS 16, UIDevice.name has changed to only return the model of the device, not the user specified name. There is an entitlement, com.apple.developer.device-information.user-assigned-device-name that can be requested to keep the old behaviour, but I can't find any info on how to request that entitlement. Anyone able to help?
Replies
28
Boosts
6
Views
19k
Activity
Dec ’23
NSUpdateSecurityPolicy AllowProcesses where and how to add Items
Hi, in the video wwdc2022-10096 at about 05:45 it is explained how to allow other software to update your software by adding team-idetifiers an signing-identifiers to an Info.plist. I would need a few more details. Which Info.plist file do I have to change? I use pkgbuild to build the packages and productbuild to combine them. pkgbuild --analyse --root generates an .plist-file for every single package. Do I have to add the Information there? productbuild --sythesize generates an xml-file discribing the whole thing. This would refer better to the installer as a whole, but it is not an info.plist. How and where exactly to add the information? I tried to use plutil, but it doesn't like array-names to start with numbers as team-identifiers often do. Also it crashes quite often. The .plist-files generated by pkgbuild either contain an empty array or several unnamed items. [ ] Do I even need to add something threre? The other one contains several Items: [   0 => {     "BundleIsRelocatable" => 0     "BundleIsVersionChecked" => 1     "BundleOverwriteAction" => "upgrade"     "NSUpdateSecurityPolicy" => {       "AllowProcesses" => {         "123ABC" => [           0 => "com.example.pal.about"         ]       }     }     "RootRelativeBundlePath" => "Library/PreferencePanes/XXX.prefPane"   }   1 => {     "BundleIsRelocatable" => 0     "BundleIsVersionChecked" => 1     "BundleOverwriteAction" => "upgrade"     "NSUpdateSecurityPolicy" => {       "AllowProcesses" => {         "123ABC" => [           0 => "com.example.pal.about"         ]       }     }     "RootRelativeBundlePath" => "Library/Frameworks/XXX.framework"   }   2 => {     "BundleHasStrictIdentifier" => 1     "BundleIsRelocatable" => 0     "BundleIsVersionChecked" => 1     "BundleOverwriteAction" => "upgrade"     "NSUpdateSecurityPolicy" => {       "AllowProcesses" => {         "123ABC" => [           0 => "com.example.pal.about"         ]       }     }     "RootRelativeBundlePath" => "Applications/XXX.app"   } ] Should it look like this? A more detailed example would be great. Thanks!
Replies
2
Boosts
0
Views
2.3k
Activity
May ’23
Unable to request User-Assigned Device Name Entitlement
I'm working on a project that will also support a "My Devices" web portal. For making this work, we need the name that a user did assign to the device. In the documentation there is a link to apply for the com.apple.developer.device-information.user-assigned-device-name entitlement but the link is going nowhere for me. How to request the com.apple.developer.device-information.user-assigned-device-name entitlement from here? Apple Documentation: https://developer.apple.com/documentation/bundleresources/entitlements/com_apple_developer_device-information_user-assigned-device-name Link to request the entitlement: https://developer.apple.com/contact/request/user-assigned-device-name/ WWDC 2022 session where this entitlement is described: https://developer.apple.com/videos/play/wwdc2022/10096
Replies
1
Boosts
0
Views
858
Activity
May ’23
App showing unidentified developer under General - Login Items Added - Allow in the Background
In macOS 13 Ventura, as soon as mac apps gets installed from packages, it shows two alerts (Login Items Added) one as "Unknown Developer" and other as with proper developer name. On click of alerts, it opens System Preferences and navigates to General -> Login Items. It lists our apps under "Allow in the Background", one with "unidentified developer" and other with proper developer name. We followed all steps required with all apps. So why one app showing as "unidentified developer" and other with proper developer name? Also app with correct developer name, missing with its app icon.
Replies
4
Boosts
1
Views
6.6k
Activity
Feb ’23
'User Assigned Device Name' in XCode Capabilities list
I got approval for User Assigned Device Name but now am stuck how to import this capability in XCode? I successfully updated my AppId in membership portal to reflect this permission, but I can't find anything in XCode to import this. I opened Editor -> Add Capability but there is no option to add User Assigned Device Name in the list! User Assigned Device Name
Replies
17
Boosts
1
Views
6.9k
Activity
Dec ’22
What is the paste allow permission bug in iOS 16?
I know that prompt when programmatically paste from clipboard in iOS 16. Detail, when read the value from UIPasteboard. https://9to5mac.com/2022/09/20/ios-16-copy-paste-alert/ Above bug is to paste from system popup(or dialog?) showed when touch textfield? or programmatically read values from UIPasteboard? And, a number of articles said this bug is fixed. But, in my case, it's not fixed in iOS 16.1 beta 2.
Replies
2
Boosts
0
Views
5.1k
Activity
Dec ’22
iOS16: What key we need to use for pasteboard permission in info.plist
After checking privacy in iOS 16 features to look for. I noticed that the application needs to ask the user's permission for accessing the clipboard. Please check the following image . I tried figuring out what permission key we need to use, to request permission but so far I have not found any details. I checked video and transcript and other developer documentation. Like privacy key list . But couldn't find any documentation related to this.
Replies
3
Boosts
1
Views
8.1k
Activity
Sep ’22
Is there a MDM rule to forbidden agent user to disable login item in enterprise?
Hi, According to https://developer.apple.com/videos/play/wwdc2022/10096/, agent user can disable login item on Ventura. In enterprise environment, IT admin may want some processes are always running in launch daemon. Is there a MDM rule to forbidden agent user to disable special login item? Thank you!
Replies
1
Boosts
2
Views
1.3k
Activity
Aug ’22
How to make an uninstaller on macOS 13 Ventura?
Our audio driver uninstaller does not work properly on macOS 13 Ventura Beta. The uninstaller is for removing our Audio Server Plug-in as well as its associated app that resides in /Library/Application Support/ folder. The Audio Server Plug-in can be removed without any problems, but the associated app cannot be removed if it is notarized. Our uninstaller uses SMJobSubmit function to execute a shell script with administrator privileges. I found the following error in the system log: kernel: (Sandbox) System Policy: rm(676) deny(1) file-write-unlink /Library/Application Support/MyDriver/MyApp.app I guess that the app cannot be removed because Gatekeeper protects notarized apps on Ventura. How can our uninstaller remove our notarized app? Thank you.
Replies
2
Boosts
0
Views
1.2k
Activity
Jul ’22
DeviceDiscoveryExtension basics, can't get sample project to work
I'm trying to understand what exactly is made possible by Media Device Discovery Extensions, what responsibility the containing app has, and what exactly is made available to other apps or the system, if anything. I haven't been able to find any meaningful high level documentation, and WWDC 2022 session 10096 only mentions these new extensions in passing. The most comprehensive body of information I found is the example project: https://developer.apple.com/documentation/devicediscoveryextension/discovering_a_third-party_media-streaming_device?changes=latest_beta&language=objc However, I don't think it's working the way it should out of the box: I've got the Client target app built and running on an iPad Pro running iPadOS 16 Beta 2 I've got the MacServer target running on a Mac Mini with macOS 13 Ventura Beta 2 I've got the Server target running on an iPhone with iOS 15.5. (Non-beta) If I tap the AirPlay icon on the Client's video player, I can see the two servers, but selecting one just causes a spinner to show up next to its name. This keeps going for a while, eventually the spinner goes away again, but the device selection tick stays next to 'iPad'. The text "Select route" also doesn't change, which I think it's supposed to, judging by the code. I've tried a variety of combinations of settings on the servers - bluetooth only, bonjour only, different protocols, etc., but I'm always getting the same behaviour. Has anyone had any success in getting the example to work, and how? Is there any high level documentation available that I've missed? Can someone explain what exactly we can build with this in more detail than "implementations of custom A/V streaming protocols?" The WWDC session video talks about 3rd party SDKs, so do these extensions have to be embedded in every app that would be streaming the video, implying that it's not useful for mirroring?
Replies
4
Boosts
0
Views
1.9k
Activity
Jun ’22
Clarify "visible to user" requirement for user-assigned-device-name entitlement
We're using the device name as an identifier for device pairing with an accessory. Therefore we think we're fulfilling the prerequisites: need it for “multi-device features” device-name is visible to the user but we're not sure about the latter. Can you clarify if the requirement "visible to the user" means visible on the device accessing the UIDevice.name or any device involved in the multi-device feature? Seems like we can't just try and find out by trial and error yet: https://developer.apple.com/forums/thread/708275
Replies
0
Boosts
0
Views
979
Activity
Jun ’22