Tootfinder

Interesting #privacy issues found in iOS Safari - Could be used for easy tracking:
https://www.mysk.blog/2024/04/28/safari-tracking/

Source: Apple is testing an AI-enabled Safari browser with a Web Eraser feature for better content blocking, AI-powered text summarization, a new UI, and more (Marko Zivkovic/AppleInsider)
https://appleinsider.com/articles/24/0

Source: Apple is testing new Safari features including more advanced content blocking and an AI-powered Intelligent Search tool, expected to debut in 2024 (Marko Zivkovic/AppleInsider)
https://appleinsider.com/articles/24/0

Neues URI-Schema wegen EU-Regulierung: Website-Verfolgung in Apples Safari
Apple hat zur Implementierung alternativer App Stores im EU-Markt eine Funktion integriert, die Privates verraten kann. Das fanden Sicherheitsforscher heraus.

Safari Flaw Can Expose iPhone Users in the EU to Tracking
https://www.mysk.blog/2024/04/28/safari-tracking/

Vimlike: Promising Safari Extension With Vim Keys: #Safari

Apropos of the CyberTruck crash image, I hope one of the features Apple adds in the next iOS is AI image/text detection. They already detect text and subjects so should be a prime candidate to do on-device.
Would be great to have that in apps and in Safari.
(The CyberTruck crash image is still fucking funny.)

US v. Google: Google paid Apple $20B in 2022 to be the default search engine in Safari; in 2020, Google's payments constituted 17.5% of Apple's operating income (Leah Nylen/Bloomberg)
https://www.bloomberg.com/news/articles/20

Microsoft: Neues Teams für Web nun auch für Firefox, Safari – und unter Linux
Das neue Teams für Web von Microsoft ist nicht mehr nur für Edge und Chrome verfügbar, sondern auch für Firefox und Safari. Zudem läuft es unter Linux.

2021 retro-link! https://furbo.org/2021/08/25/jsc-my-new-best-friend/ - jsc: JavaScript on the macOS command line.

It works fine on Safari, but doesn’t work on popups like this one on apps like PS App and GameTrack. 🤦‍♂️ #Passkey #PasskeyNightmare #PasskeysSaga

Safari Flaw Can Expose iPhone Users in the EU to Tracking
https://www.mysk.blog/2024/04/28/safari-tracking/

Hey Safari/macOS users…
When I have a PDF embedded in a page via iframe (eg: https://adrianroselli.com/2024/03/csunatc-wcagmire.html) and the mouse cursor moves into the bottom center of the container, I get four clickable controls (zoom out, zoom in, ink bottle…

Do I have 4 different browser running at the same time? Why yes I do. Firefox as a personal main, Safari for work, Edge for study (Azure certs), and I'm testing out Arc. I also bring up Vivaldi from time to time.
Thank goodness I bought my MBA M1 with 16GB RAM!

Performance improvements in Safari.
1% here, 0.3% there and six months later you have a 30% boost on a mature codebase.
https://webkit.org/blog/15249/optimizing-webkit-safari-for-speedometer-3-0/

Perhaps I should message Putt Putt Noodle to tell them that their new menu PDF doesn't render correctly in Safari 😅

I know that macOS / Safari displayed the `alt` text for broken images through Safari 17.0 (visually clipping as necessary).
Testing in macOS 14.4.1 / Safari 17.4.1, however, shows me that `alt` text is no longer displayed.
Has anyone else noticed this regression?
#Safari #accessibility

Today I learned that Safari can’t understand compound extensions in the accept attribute of file inputs.
So, for example…
<input
type="file"
accept=".kitten.databases.tar.gz"
>
… fails. So you have to do:
<input
type="file"
accept=".gz"
>
(Which, of course, opens the person up to more chances of selecting the wrong file.)
🤷‍♂️

Dear users of Apple devices,
Soon, due to restrictions imposed by iOS, you will only be able to use my web apps without push notifications and without the convenience of adding shortcuts to your home screen.
Complaints about the limited functionality of web apps on iOS can be submitted at https://www.apple.com/feedback…

Apples Standard-Apps – gut genug für alles? | Mac & i-Podcast
Fast 50 Apple-Apps liefert iOS mit. Wir besprechen populäre Exemplare von Notizen über Karten bis Safari, auch "Sherlocking" und Regulierung sind Thema.
…

"Save complete Web page".
Firefox: Garbled.
Chrome: Garbled.
Safari: Perfect.
We have a winner.

Webkitの縦書きは2009年から始まっていたし、多くの電子書籍もWebkitベースのエンジンで始まってる。
今回の「縦書き対応」は、フォームの対応です。
https://www.publickey1.jp/blog/24/safari_174webkit.html

Apple will make it easier for EU users to switch to Android and delete Safari https://www.engadget.com/apple-will-make-it-easier-for-eu-users-to-switch-to-android-and-delete-safari-113041250.html

Don't miss today's Metacurity for the most critical infosec developments you should know, including
--FCC fines telco giants $200 million for sharing customers' location data without Consent
--UnitedHealth breach began with Citrix flaw exploit,
--Telegram yanks and then restores Ukraine security agency access,
--TikTok ban could extend CapCut video editor,
--Canadian lawmakers in an uproar over Chinese hacker targeting,
--Google blocked 2.28 million Android apps last year,
--Apple leaves EU Safari users exposed to web tracking,
--much more
https://www.metacurity.com/p/fcc-fines-telco-giants-200-million-sharing-customers-location-data-without-consent

@… Seems like you might be interested in this?
https://typo.social/@letterror/112169065606969860

Fast MRI Reconstruction Using Deep Learning-based Compressed Sensing: A Systematic Review
Mojtaba Safari, Zach Eidex, Chih-Wei Chang, Richard L. J. Qiu, Xiaofeng Yang
https://arxiv.org/abs/2405.00241

Clear the history, cache, and cookies from Safari on your iPhone, iPad, or iPod touch
https://support.apple.com/en-us/105082

"The DMA requires that all browsers have equality, meaning that Apple can’t favor Safari and WebKit over third-party browser engines. Therefore, because it can’t offer Home Screen web apps support for third-party browsers, it also can’t offer support via Safari." — https://9to5mac.com/2024/…

#apple and #adversarial #compliance

Don't miss today's Metacurity for the most critical infosec developments you should know, including
--FCC fines telco giants $200 million for sharing customers' location data without Consent
--UnitedHealth breach began with Citrix flaw exploit,
--Telegram yanks and then restores Ukraine security agency access,
--TikTok ban could extend CapCut video editor,
--Canadian lawmakers in an uproar over Chinese hacker targeting,
--Google blocked 2.28 million Android apps last year,
--Apple leaves EU Safari users exposed to web tracking,
--much more
https://www.metacurity.com/p/fcc-fines-telco-giants-200-million-sharing-customers-location-data-without-consent

Safari wurde 60 Prozent schneller: Was hinter Apples Speedometer-Tests steckt
Das WebKit-Team frohlockt: Safari sei zwischen den Versionen 17.0 und 17.4 insgesamt 60 Prozent schneller geworden. Doch ein genauer Blick auf die Zahlen lohnt.

バージョン判定、これになるよ
> Mozilla / 5.0 (X11; Linux x86_64) AppleWebKit / 537.36 (KHTML, like Gecko) Chrome / 51.0.2704.103 Safari / 537.36

Dear users of Apple devices,
Soon, due to restrictions imposed by iOS, you will only be able to use my web apps without push notifications and without the convenience of adding shortcuts to your home screen.
Complaints about the limited functionality of web apps on iOS can be submitted at https://www.apple.com/feedback…

My reading of this is that for this (truly horrible) attack to get you, you'd need to run an app in which it's embedded for an extended period of time on your computer. So the bad guys could hack me if I downloaded an app from a sketchy source (unlikely) or they managed to hack any one of Adobe or Mozilla or Microsoft Office or Chrome or Safari or Apple Music or Emacs or YouTube or or or … (less unlikely).

Remember back when the @… macOS Safari extension used to work? I have to restart Safari several times a day just to log into a website. Is this just me?

is iCloud having big time issues?
I cannot connect and Safari won't QUIT!

Before I redesign this interface I’m working on, is there still no performant way to keep `bottom: 0` elements above the virtual keyboard in iOS Safari?
Chrome supports the VirtualKeyboard API and the `interactive-widget` meta viewport value, but the only solution I’ve found for Safari feels, as @… put it a couple years ago, “impractical and lacking.”

"Save complete Web page".
Firefox: Garbled.
Chrome: Garbled.
Safari: Perfect.
We have a winner.

WLAN im ICE: Safari zeigt die LoginPage auf der steht, mein Browser Safari würde nicht unterstützt, ich solle bitte z.b. Safari nehmen.
(Egal, es geht alles.)

TIL `scrollbar-gutter: stable;`
It reserves space on the screen for the scrollbar so the page doesn't jump on scrollbar appearing / disappearing. I've started using the Transitions API and this CSS property is really clutch with Transitions.
Waiting on Safari to ship support though.
(75% support) https://<…

@… Safari ok, Chrome (not logged in) has the error (attached below), Firefox (logged in) has the error. Both FF and Chrome work fine in incognito mode.
I disabled all my Chrome extensions and it still exhibits the error—localStorage has a typescript value in there but sessionStorage, cookies, service workers are all empty.
Let me know if I can h…

The problem is that "allowing home screen #webapps with Safari but not third-party browser engines might cause #Apple to violate the rules."
"The #DigitalMarketsAct targets

I have conflicting feelings; I'd like to know yours, delightful community of misfits, weirdos, and worse.
Here we go:
Vertical Tabs ??? (in a browser: #Firefox, #Opera #Safari

Clear the history, cache, and cookies from Safari on your iPhone, iPad, or iPod touch
https://support.apple.com/en-us/105082

This is beautiful!
https://tapbots.social/@mark/112281528244929685

#Parody #NYTimesPitchbot
Via New York Times Pitchbot @DougJBalloon
·
3h
Wouldn’t It Be Nice?
Beach boy Jared Kushner’s plan to turn Gaza into a surf safari sounds far-fetched. But God only knows what will happen if the Sloop Don T sets sail again in 2025. …

#apple and #adversarial #compliance

Holy Fuck – Safari
[from «LP», 2007]
#FediRadio

@… Working ok for me on macOS Safari 17.4 (19618.1.15.11.12) using iCloud Private Relay (currently going through Cloudflare according to reported IP address.)

Same on iOS 17.5 (21F5048f) Safari with iCPR going through Fastly.

🍎 #Apple has released iOS 17.4. The version of iOS that can destroy people’s lives in the #EU! 😅

The Great Serengeti Land Grab - The Atlantic
https://www.theatlantic.com/magazine/archive/2024/05/maasai-tribe-tanzania-forced-land-evictions-serengeti/677835/

Y’know. I really LIKE Safari.
But here’s the thing: I LOVE having alternatives. There was a point where I was running like 7 different browsers and my fave was “OmniWeb”.
I want there to be good alternatives this constant Tech Decay (“enshittification”) of all the browsers out there. JFC. Just make a browser that works and protects people’s privacy. That seems like it would give you plenty to do already.

Using this CSS with broken image ref:
```
::before {
content: url(foo) / "Panda";
}
```
Safari / macOS / iPadOS does not show the alt.
Until you turn on VO. Or turn it off. But it goes away if you refresh.
More accurately, it resizes the placeholder; if your alt is small enough to fit *then* it shows.
Attached video shows it in action.
So. What the deal is?
Test page:

@… yesterday I noticed a supper annoying bug.
1. iPad app, start composing new post
2. Bring safari or smth else to a split screen
3. Compose view is gone forever, draft not saved, lost work.

My reading of this is that for this (truly horrible) attack to get you, you'd need to run an app in which it's embedded for an extended period of time on your computer. So the bad guys could hack me if I downloaded an app from a sketchy source (unlikely) or they managed to hack any one of Adobe or Mozilla or Microsoft Office or Chrome or Safari or Apple Music or Emacs or YouTube or or or … (less unlikely).

Remember back when the @… macOS Safari extension used to work? I have to restart Safari several times a day just to log into a website. Is this just me?

Skattestaten (og NAV) får skryt for web-greiene sine. Jeg tror det sier noe om det generelle nivået.
Når jeg bruker Safari og Ÿnsker å så skattegreiene så får jeg fŸlgende feilmelding:

Google doubling down on being assholes
https://researchbuzz.masto.host/@researchbuzz/112299873624857965

As a gentleman of a certain age it's probably time I knew this
From: @…
https://flipboard.social/@sidewalksafari/…

🚨 GREAT ANSWER ALERT 🚨
The snippet here is perfect 🤌🏻 Want to know the answer on mobile safari? Load it up and go!
https://stackoverflow.com/a/72124984/6212

Ab zum Arc-Browser: Leitender Safari-Designer verlässt Apple
Der zunehmend populäre unabhängige Browser-Hersteller hinter Arc bekommt prominenten Personalzugang: Ein zentraler Apple-Entwickler kommt an Bord.

Kudos to #retrospring for being the first website I’ve seen supporting notifications on Mobile Safari!

@… Safari ok, Chrome (not logged in) has the error (attached below), Firefox (logged in) has the error. Both FF and Chrome work fine in incognito mode.
I disabled all my Chrome extensions and it still exhibits the error—localStorage has a typescript value in there but sessionStorage, cookies, service workers are all empty.
Let me know if I can h…

Ah, the joys of modern computing...
my iMac is making noises that sound like notifications from some social network ... and it may be *somewhere* in the 178 tabs I currently have open in Firefox... or maybe it's in the dozen tabs I have open in Safari... or the 20-ish in Chrome...
... or maybe it's in the 22 apps that I have open in MacOS. 🤔
Thankfully it's not (yet) too annoying...

@… Hi Jen, is there a page that list which versions of Safari are still supported vs the ones that are end of life? I'm running 16.6.1

Using this CSS with broken image ref:
```
::before {
content: url(foo) / "Panda";
}
```
Safari / macOS / iPadOS does not show the alt.
Until you turn on VO. Or turn it off. But it goes away if you refresh.
More accurately, it resizes the placeholder; if your alt is small enough to fit *then* it shows.
Attached video shows it in action.
So. What the deal is?
Test page:

Huh, is Chromium broken (works in Safari and Firefox, shows gibberish on Chromium-based browsers)?
(from the comment section at the end of https://tratt.net/laurie/blog/2008/how_can_c_programs_be_so_reliable.html)

Vanaf donderdag werkt veel tech anders. Hoe EU-regels Chrome, WhatsApp en iOS veranderen (Tweakers).
https://tweakers.net/reviews/11892/hoe-eu-regels-chrome-whatsapp-en-ios-veranderen.html

@scope is now live in both Chrome and Safari! This is huge for #CSS. The remaining days of BEM are numbered!
https://keithjgrant.com/posts/2023/04/scoped-css-is-back/

honestly i might just ditch css transitions altogether and do the tweening myself, like a proper game engine (still keeping css transforms though). more control, less frustration. i've wasted too much time on this (it works fine on safari & chrome, acts weird on firefox)

Blogger stats for my blog This time Fireforx rules, thanks #fosdem2024

Can someone explain to me what’s wrong here and how to fix it? Because my Safari is not complaining 🤔
#ssl #https #ohdearApp

Ali Farka Touré  “Cherie” Feat. Oumou Sangaré
https://amf.didiermary.fr/ali-farka-toure-cherie-oumou-sangare/
From the posthumous album Voyageur, a collection of previously unheard songs from throughout his illustrious career, “Cherie,” the second …

Apple plans to let EU-based iPhone users uninstall Safari by 2024 end and is working on a more "user-friendly" way to let them switch to Android by fall 2025 (Jon Porter/The Verge)
https://www.theverge.com/2024/3/7/24093355

@… Safari is officially the new IE now. RIP PWA 😭.

One of the (first world) issues with the being an Icelandophile is following a ton of Icelanders and sometimes seeing links to Icelandic news stories which I’d like to read.
I’d have to copy the URL, open Safari, go to google translate, tap the website button, paste, tap go. A royal pain.
But I finally automated all that with Shortcuts.
Now I just hit the share button, choose the shortcut, and a webview opens with the Google translate page right there.
Small automa…

VR-Video und 3D auf der Vision Pro: WebXR mau, Spezial-App gut
Apples Safari-Browser unter visionOS unterstützt zwar WebXR, tut dies aber nur recht experimentell. Eine Bezahl-App schafft Abhilfe.
https://www.

🔊 #NowPlaying on fip
Tito Puente:
🎵 Safari
#TitoPuente
https://open.spotify.com/track/5Pxp3yzPyK5uYvhBKmQTP8

Chrome maybe finally pulled off focusable scrolling regions:
https://developer.chrome.com/blog/keyboard-focusable-scrollers
Granted, its example for what devs had to do, and still have to do for Safari, creates a WCAG violation, but that’s kind of on…

disgusting
(tbqh I don't know if it's the EU's fault by forcing default browser engine choice or Apple having a hissy-fit; but I think it should at least be a possible user choice to continue to be able to use full-screen web apps with Safari when saved to the home screen)
https://www.

Öha - mehr als 500 offene Tabs auf einmal geht nicht bei Safari?

Quantum Fluctuations Suppress the Critical Fields in BaCo$_2$(AsO$_4$)$_2$
Shiva Safari, William Bateman-Hemphill, Asimpunya Mitra, F\'elix Desrochers, Emily Z. Zhang, Lubuna Shafeek, Austin Ferrenti, Tyrel M. McQueen, Arkady Shekhter, Zolt\'an K\"oll\"o, Yong Baek Kim, B. J. Ramshaw, K. A. Modic
https://arxiv.…

@scope is now live in both Chrome and Safari! This is huge for #CSS. The remaining days of BEM are numbered!
https://keithjgrant.com/posts/2023/04/scoped-css-is-back/

Installing 17.4 RC. Will this be the end of #PasskeysSaga? I hope they have fixed Safari. 🤞
#Apple #iOS #Passkey

Dear #Google
I will NEVER EVER switch to Chrome as my browser . Stop harassing me when I open gmail in Safari.
In other words FICK OFF!

EU-Auswahldialog auf iPhones: Browser Brave freut sich über Download-Zuwachs
Der von der EU vorgeschriebene Auswahldialog in iOS 17.4 zeigt laut dem Browser-Hersteller Wirkung. Nutzer würden sich für Safari-Alternativen interessieren.

@… @… This is Sonoma 14.4 (23E214) with Safari 17.4 (19618.1.15.11.12)

@… there are many problems that can happen in the wild. I sometimes encounter some issues that let's say I see a developer didn't test their JS on Safari and it simply fails because also didn't do defensive JS and call to some missing Web API threw making entire form unusable.

A product-limit estimator of the conditional survival function when cure status is partially known
Wende C. Safari, Ignacio L\'opez-de-Ullibarri, M. Amalia J\'acome
https://arxiv.org/abs/2402.07022

Phishing scammers now helpfully include the steps you need to take to click on their risky link in their texts. I’m sure ‘tuanosali1981@mailbox.org’ has my best interests in mind and is definitely from “the US Postal team.” I definitely shouldn’t question where they got my phone number from and why USPS wouldn’t just return a package to its sender. #scam

Nicht nur im Browser: YouTube-Client für visionOS kommt jetzt doch
Nachdem Google zunächst kein Interesse an einer YouTube-Variante für visionOS zeigte, soll sie nun doch kommen. Zuvor will man die Safari-Variante anpassen.

YouTube says a "Vision Pro app is on our roadmap" but doesn't offer a timeframe; YouTube videos in 360 and VR playback modes are not viewable in visionOS Safari (Nilay Patel/The Verge)
https://www.theverge.com/2024/2/5/24062425/youtube-…

The version of the Apple Vision Pro that supports other browser engines than Safari and third party app stores is called Apple Eurovision Pro

“Hanging punctuation in CSS ”
https://adactio.com/journal/21027
I wanted to avoid an additional selector to undo the style, but Safari 17.3 Does not exclude any in the `:not()`:
```
html :not(pre, input, select, textarea) {
hanging-punctuation: first last;
}

@… @… Excuse the chipping in but Phanpy on macOS Chrome does render the half-star correctly. Even weirder, if you use Safari's web inspector on the element (under Phanpy), it also shows…

Phishing scammers now helpfully include the steps you need to take to click on their risky link in their texts. I’m sure ‘tuanosali1981@mailbox.org’ has my best interests in mind and is definitely from “the US Postal team.” I definitely shouldn’t question where they got my phone number from and why USPS wouldn’t just return a package to its sender. #scam

@… Yeah, auth/realm should probably match the other locations.
I can definitely see my cookie from my site in the Safari devtools under Storage/Cookies. No idea why it wouldn’t show up other than maybe there’s a filter applied? Although it disappears if I hit the refresh icon, weirdly, but comes back if …

@… Had the same problem with Hugo’s livereload websocket. Solved it by creating a cookie after the first successful login and using that as an alternate authentication method. Not ideal at all but the only way I could find to avoid this with Safari.
This is my nginx configuration.

map $cook…