The "Spring Updates" (macOS 14.4, iOS 17.4, and all the others) were released this week, as well as new MacBook Airs. The visionOS 1.1 update introduces management through the MDM protocol for the new spatial computing system.
These Spring Updates are a few weeks ahead of Apple's usual schedule. iOS 17.4 was published to meet this week's deadline imposed by the European Digital Markets Act (DMA). And that drama continued this week as well, so hold on, this issue is huge...
Sponsor
iMazing Profile Editor 1.8: easier and better than ever
The ultimate tool for creating and editing Apple configuration profiles is now even simplifying the task of selecting the right options.
iMazing Profile Editor version 1.8 includes an all new helpful information popover, for both configuration domains and properties. It features enhanced descriptions, detailed availability, community notes, and more...
All of these additions are accessible without having to exit the app. Discover and download iMazing Profile Editor today, for free!
šø Focus
About alternative app marketplaces in the European Union
If you leave the European Union, you can continue to open and use apps that you previously installed from alternative app marketplaces. Alternative app marketplaces can continue updating those apps for up to 30 days after you leave the European Union, and you can continue using alternative app marketplaces to manage previously installed apps. However, you must be in the European Union to install alternative app marketplaces and new apps from alternative app marketplaces.
I understand that Apple wants to restrict these massive new changes to EU countries. However, this restriction when traveling with a EU device, a EU Apple ID, as a EU citizen outside of the EU is absurd. Apple claims their main concern is security. But blocking app updates when I am traveling abroad for longer stretches is certainly not beneficial there.
Apple seems terrified that people outside of the EU might find ways to gain access to alternative app marketplaces.
Back when Apple introduced the iTunes Music Store, Apple understood they had to provide a great user experience and a fair deal to the publishers to make this work. On the end user side they were competing with the popular piracy tools. Apple also had to make the store conditions attractive to the music publishers, because without content, there is no store.
The iTunes Music Store wasn't the only attempt to solve the digital market. Both the users and the publishers had options. The iPod was certainly a factor, but the approach worked. When Apple introduced the App Store a few years later, it was based on the same successful model.
Today however, Apple seems to have forgotten that lesson. App Store user experience has been eroding. Paid ads have taken over the top slot in searches. Legit developers are frequently harassed for trivial matters, while scams and blatant rip-off apps often sneak past review. The 30% cut that was a good deal 15 years ago, now seems greedy. Developers have to pay even more for ad placement.
Rather than working on providing a great experience for the users and developers, Apple is treating the App Store as their feudal fiefdom and defending its profits tooth and nail with draconian measures. macOS users, developers and admins have been asking for new features and improvements in the App Store for years.
Apple has never provided update pricing for App Store apps but pushed developers to use in-App purchase and subscriptions instead. This started several years ago, but to this day, there is no way to deploy and manage App Store subscriptions or in-App purchases with an MDM.
We can agree that the DMA is not perfect and Epic is a deplorable paragon for change. Nevertheless, Apple is eagerly slipping into the role of the villain and tarnishing their image. I hope that at some point, the saner minds inside Apple will prevail and they will return to their roots: provide a great experience that users and developers willingly choose over the competition.
How to handle the Digital Markets Act with Apple Device Management
Jamf Pro, Jamf School, and Jamf Now allow you to manage and block these changes with a combination of new and updated commands and restrictions
iOS 17.4 won't remove Home Screen web apps in the EU after all
Apple is now walking back that decision and says it will ācontinue to offer the existing Home Screen web apps capability in the EU.ā
Facing reality, whether it's about Apple or the EU, is a core requirement for good management
But thatās just not the reality of the situation and to understand whatās going on ā to be able to make sound management decisions and form executive strategy ā you need to understand what the EU is. More specifically, you need to understand the European Single Market. It is trivially obvious that the management at Apple, Google, and Microsoft have not done this work. Apple especially seems to be in denial about the nature of the EU.
š° News and Opinion
Apple unveils the new 13- and 15-inch MacBook Air with the powerful M3 chip
Mostly unsurprising, but solid upgrade. There is one nice morsel in the press release:
Support for up to two external displays: MacBook Air with M3 now supports up to two external displays when the laptop lid is closed ā perfect for business users
It's not perfect multi-display support but an improvement over the previous models. Interestingly macOS 14.4 will unlock this feature for the "plain M3" MacBook Pro, as well. (There are some hints, this might have already been possible on M2 Macs.)
The MacBook Air 13" M1 has been discontinued after more than three years. This is end of the iconic wedge design. The 13ā M2 MacBook Air moves into its price slot at US$999 (US$899 for education)
A Special Announcement, and a Special Thanks
On the occasion of Sabrina Coyās departure from the Mac Admins Foundation Board of Directors, the Board offers its heartfelt appreciation for her outstanding service to the Mac Admins community in the founding and guidance of both the Mac Admins Slack and the Mac Admins Foundation.
Apply now for the first 2024 Community and Conference Grant
The Community and Conference Grant intends to broaden the experience of deserving individuals with the intent to foster their development as a new generation of technical professionals.
You can apply for sponsored admission and travel expense for MacAD.UK in Brighton.
āļø Apple Updates
macOS
- macOS Sonoma 14.4 (23E214): What's new, Developer Release Notes, Security, Enterprise
- macOS Ventura 13.6.5 (22G621): What's new, Enterprise, Security
- macOS Monterey 12.7.4 (21H1123): What's new, Enterprise, Security
iOS and iPadOS
- iOS 17.4: About, Enterprise
- iPadOS 17.4: About, Enterprise
- iOS and iPadOS 17.4: Security
- iOS and iPadOS 16.7.6: iOS, iPadOS, Security
- iOS and iPadOS 15.8.2: iOS, iPadOS, Security
Other Platforms
- watchOS 10.4: About, Developer Release Notes, Security
- tvOS 17.3: About, Developer Release Notes, Security
- visionOS 1.1: About, Developer Release Notes, Security
- HomePod Software 17.4: About
- Swift 5.10
Applications and Tools
- Xcode 15.3: Mac App Store, Developer Downloads, Developer Release Notes
- Safari 17.4: WebKit Features, Developer Release Notes, Security
- Apple Business Manager release notes
- Apple School Manager release notes
- Windows Migration Assistant 3.0.0.0 (Sonoma)
Deployment Guides
- Apple Platform Deployment: Welcome, What's new, Document revision history
- Big update with content for managing and deploying vision OS
- Apple School Manager: Welcome, Document revision history
- Apple Business Manager: Welcome, Document revision history
- Apple Business Essentials: Welcome, Document revision history
- Apple Platform Certifications: Welcome, Document revision history
What has changed in macOS Sonoma 14.4?
Sonoma version 14.4 is the most substantial update of this cycle so far, and includes extensive new bundles and changes throughout the System/Library folder, which has grown in size by around 150 items since 14.3.1.
macOS Sonoma 14.4 Update (23E214) What's New?
This update is also known as the āSpring Release Updateā. It includes the most changes we will see for Sonoma before macOS 15 is announced in June.
Changes to launchctl kickstart in macOS 14.4
If you use any scripts or automations that utilize launchctl kickstart you will want to test them carefully and change the scope to prevent them from running on macOS 14.4 or later.
macOS 14.4 and the Addigy MDM Watchdog
A new change in macOS has removed support for commands that are used to restart various system services in the OS. This will cause scripts that utilize these commands to fail on macOS devices that upgrade to macOS 14.4, including the Addigy MDM Watchdog.
Full transcripts arrive on Apple podcasts
the release of iOS 17.4 Appleās Podcasts app now supports podcast transcripts. This is a pretty big breakthrough in terms of access to podcast content and accessibility of podcast to audiences who might not be able to listen.
iOS 17.4 Emoji Changelog
Apple has released its latest emoji update, introducing 118 new emojis including a phoenix, a lime, several gender-neutral family designs, and various direction-specific people emojis.
š Security and Privacy
How AMOS macOS Stealer Avoids Hash-Based Detection
Once installed, Atomic Stealer can exfiltrate an extensive amount of data, including keychain passwords, user documents, system info, cookies, browser data, credit card information, cryptocurrency wallets, and more.
Malicious meeting invite fix targets Mac users
Cybercriminals are targeting Mac users interested in cryptocurrency opportunities with fake calendar invites. During the attacks the criminals will send a link supposedly to add a meeting to the targetās calendar. In reality the link runs a script to install Mac malware on the targetās machine.
How to tell genuine password requests from fakes
One fundamental defence we all have against malware is our ability to distinguish between genuine and fake requests for a password.
šØ Support and Tutorials
How to Initiate a sysdiagnose on your Apple Devices
This guide will illustrate how to Initiate a sysdiagnose.
Updated with process for visionOS
Deploying Adobe Creative Cloud: Choosing the Right Path
Deploying Adobeās Creative Cloud apps, on the other hand, can be anything but straightforward. The suite includes an extraordinary number of individual apps, which are updated frequently and for which consistent versioning can be critical to collaboration. This is why Adobe suggests five distinct workflows for deploying those apps.
Copied file is 0 bytes!
They had a user who grabbed some files from their Xsan volume, dragged them to their Macās Desktop and ended up with 0 byte files!
AutoPkg recipe override inputs and updated trust info
When you make a recipe override in AutoPkg, your override will have actual overrides and also parent trust info
Building an IT Engineering Team
Things that work, that donāt work. That scale and donāt scale. These experiences are oftentimes also big teaching moments for you and your professional growth.
Disabling login window clock display on macOS Sonoma
For folks who donāt want the clock display, itās possible to turn it off via System Settings.
Cisco Secure Client + Umbrella: Part 1
For every convenience (running the 5.x installer cleans up/deletes the old app) there are a handful of perplexing challenges. Let's start by taking a look at what you need to install the new app to begin with.
How to Deploy Printers with Jamf Pro
Jamf will remove Jamf Admin in an upcoming release of Jamf Pro. Since one of the workflow that Jamf Admin provides is printer creation, an altenative way of printer creation is provided in this guide.
š¤ Scripting and Automation
Scripting the upload of packages to Jamf Pro with a Cloud Distribution Point located on an Amazon Web Services S3 Bucket
If you maintain a Jamf Pro server that has a Cloud Distribution Point located on an Amazon Web Services S3 Bucket, you typically either use the Jamf Pro admin user interface to upload packages, or the Jamf Admin app. This post is concerned with how to upload a package using a script, using Jamfās Classic API and the AWS command line interface tools (aws-cli).
ā»ļø Updates and Releases
š§ Listen
Vision Pro and device management support
Matt Vlasach from Jamf about Apple's decision to support the device management protocol within just a few days of launching Vision Pro.
Assume The Magic Pose
We get into the future of Vision Pro and whether or not we will be getting one of our own.
Arek Dreyer: Back By Popular Demand
When polled, one of the most requested guests was one weāve had on before, Arek Dreyer. So rather than tell Arek, what we wanted to talk about, we thought weād hit him up for what he wanted to talk about!
Post-Quantum iMessage with Douglas Stebila
Douglas Stebila joined us to talk about his security analysis of the new PQ3 protocol update and not indulge our wild Apple speculations
šJust for Fun
MacPad: How I Created the Hybrid Mac-iPad Laptop and Tablet That Apple Won't Make
It all started because I wanted a better keyboard for my Vision Pro. I had no idea that, in looking for one, Iād accidentally create the hybrid Apple computer of my dreams.
This wonderfully crazy, and also admirably persistent and creative.