How to maybe stop Sierra from preferentially auto-connecting to XFINITY WiFi.

My Mac insists on connecting to my neighbors Comcast/XFINITY WiFi rather than my home wifi. The usual recommendations didn’t work. (Note, if you don’t run as admin, and want to play with WiFi settings, you need to first click the unlock icon on the Network Preference Pane before you click “Advanced”. Bad UI.)

Despite deleting XFINITY from preferred networks I could still immediately join my neighbors network. Sierra didn’t seem to honor the order of WiFi networks I’d set. I searched Keychain but couldn’t find Comcast or XFINITY left anywhere.

The new trick to look to see if you have a Profiles PreferencePane. There, if you’re like me, you’ll find a “User Profile” called XFINITY WiFi. (I dimly recall installing per XFINITY directions, but now they advise us to use an app — I think the app may allow one to prioritize a local WiFi).

My XFINITY WiFi Profile description said “Automatically connect to XFINITY WiFi hotspots”. It had an Enterprise Profile ID and I suspect MacOS is prioritizing it. So I deleted it.

And … I still connect to the XFINITY WiFI without specifying a password. It appears to need no credentials (or the Profile is still lurking around). When I toggle WiFi on/off I don’t auto-connect to XFINITY though, so maybe removing the cert deprioritized it.

I think this is more a MacOS bug that a Comcast bug.

Can't remove last "App" from the App Bar in iOS 11.2.1 iMessage.app? Turn screen to landscape mode.

On my iPhone 8 with iOS 11.2.1 I was unable to toggle off the last App (YouTube by alpha sort) in my plug-in list (what I mean). I turned phone to landscape mode and my touch was recognized. It’s not a screen touch bug because after doing this I could turn back to portrait mode and toggle it on/off at will. I suspect an array count or layout bug.

My Instagram account was hacked -- the follow-up is interesting

I signed up for Instagram before Facebook bought them. Back then it was a curiosity of low value and I used my throwaway password. That’s the password I’ve used for over 20 years for things I don’t care about, usually things that don’t even make it into my 1,867 item password database (ok, so only 488 are likely useful).  It’s an 8 character alphanumeric — not bad by the standards of 1997 but obviously insecure now. It’s also certainly been added to many dictionaries as various services have been hacked.

After Facebook acquired instagram I think I authenticated through my Facebook account. I forgot about the old password.

Today when I launched Instagram.app I was notified of a login from Rio de Janeiro. When I answered that was not me I was sent to a password change screen. Evidently, like Google, Facebook/Instagram considers a valid password only a modest marker of identity (it might help that I never use the Instagram password and, in particular, I never login with the email address associated with that account, only with a username).

So no harm there — but it means someone is testing the throwaway password together with my gmail address against a range of accounts. I checked my database and there may be a few low value accounts I should clean up. Very few though …

Overcast.app: the upload feature in premium is not very useful

I like to listen to medical and historical podcasts on my commutes. I have years of material in iTunes and limited listening time, I don’t need new subscriptions. I just need to queue up selected podcasts on my device. I prefer not to waste cellular data and I’m not interested in listening from newer to older (in fact many medical podcasts need to be sequenced the other way).

iOS Podcasts.app worked for this, back when I could choose a Playlist in iTunes and sync it. Today’s iOS 11 Podcasts.app is pretty much worthless.

So today I tried Overcast. I can select the podcasts I wanted in iTunes and drag them to the desktop. I subscribed to Overcast.app premium so I could upload them for download into Overcast (no iTunes support).

That’s when I found uploads are one … at … a …. time. Not to mention slow, but really I could live with slow. Overcast.app is even less useful than Podcasts.app

I wasted $10. I’ve canceled subscription renewal.

Simplenote for Mac search has been fixed

Two years after Simplenote.app for Mac was released with broken search it is now fixed in version 1.2. A product I rely on is not only alive, it’s even improved.

This was a significant rewrite and there is still lots of basic work to do. Tags don’t autocomplete (I think they used to in the prior release and they do on iOS). You still can’t apply tag changes to a group of notes. There’s no export of notes as text files from App. There’s no markdown support (not a priority for me but iOS version has it) and of course no support for images. 

I haven’t used it long enough to spot any sync errors — recent versions of Simplenote were very reliable.

I hope this is a sign that Simplenote has a future. Now if they would only figure out a way for me to pay for it…

Sending multiple Contacts to an iOS user from iCloud Contacts

Found this works

• Select multiple in iCloud
• Click gear bottom left to export VCF
• Email VCF to iOS device
• Click on attachment - get option to Add all members

I’m sure there are other means. Note this does seem to require a computer. I imagine works same from Mail.macos.

iTunes cannot sync voice memos ...

“iTunes cannot sync voice memos … because the Voce Memos app is not installed … You must download the Voice Memos app …”

Got this error message in iTunes today. I haven’t used voice memos.app in a long time (I use iTalk.app) and didn’t notice Voice Memos.app was no longer on my iPhone.

So why am I only getting this now … and why did a search on this phrase only find some phishing/spam page? Why does searching on Voice Memo Apple find only a bunch of third party apps? Why isn’t Voice Memos.app on my iPhone?

1. I don’t know why only now … maybe an iTunes update?
2. I don’t know why Voice Memos.app didn’t get installed when I updated to iOS 11 — might be a bug there.
3. It is on the app store, but Apple’s app search/discovery is an unholy mess. You have to search for “Voice Memos” exactly. Shame we can’t search iOS App Store from the #$#@% Mac any more

One good thing — I ran across Apple’s Music Memos.app — which I’d missed. It does sound useful.

Canon EOS Rebel SL2: switching the paired iOS (or Android?) device (WiFi, bluetooth)

Older Canons cameras had a lovely IR remote. Worked great.

Now they use a Bluetooth remote — or you can use a complex remote app on an iPhone called Canon Connect.app.

It’s awful.

If you do ever get your camera paired to your iPhone you’ll run into trouble when you switch phones. How do delete the old pairing?

I think you don’t - at least, not directly.

Go to Wireless Communication Settings. Then Bluetooth Function (not Wi-Fi).  Their you check/clear connection info and then do Pairing again. The Wi-Fi info will then get set when you use the Cannon Connect.app to connect to the Camera’s built-in hotspot.

The trick is you start with Bluetooth, the Wi-Fi settings are stored thereafter.

Facebook's disappearing Pages feed

I remember when you could get an RSS feed for a Facebook wall. Years after that when away there was an RSS feed for Page posts, but I think that’s gone now.

Up until a year ago there was some obscure way to see the Pages Feed (all Pages) in Facebook Mobile, but I think that’s gone too. 

AFAIK the only way to view a page feed on mobile is to save the URL to the Home Screen. Go to https://www.facebook.com/pages then click on tab feed then save. Safari will sync un/pw via keychain across Safari on devices.

Looks like Facebook only wants Pages to show up in the news feed, and then only for a price.

Spotlight bugs in iOS 11.2: Empty contact on search.

I think the spotlight/contact bug was introduced in 11.1. It’s not fixed in 11.2.

If I search in spotlight for a Contact name, or search on Contacts field of phone app, I get an empty (Null) Contact as a result. It has no content.

Turning Search (spotlight) off then on for Contacts restores search, but only transiently. I have 2,162 Contact Cards, I did find one that was empty and deleted it.

I’ve now removed all Contacts from my phone (iCloud) and restored them. I’ll see if that works.

Google's phishing vigilance and the risk of blog comments

I got a notice from Google yesterday. tech.kateva.org had been quarantined as a phishing vector. Visitors would be warned away. I had a short time to fix the affected page that was listed below …

But there was nothing there. Same thing with a link to a downloadable spreadsheet of issues. That was empty too.

Elsewhere in the message a page was identified. It sure looked benign, the only link was to an Apple support site. It’s a (Google) blogger site and all the widgets were default Blogger. No extra HTML. No comments.

Also, despite Google’s warning, the blog was not quarantined.

A puzzle.

Oh, I left something out. The day before a published spam comment showed up in my comment tracking feed. I get a few spam comments every day or two, but this was the first published one in a while. I went to delete it … but by the time I got to Blogger’s post management menu the comment was gone.

This is what I think happened:

• This blog was set to allow comments without approval from authenticated posters for posts less than two weeks old.
• A bot created an authenticated identity and created a phishing attack comment.
• Google spotted the comment, quarantined the site, and sent the notification email.
• Blogger spam detection identified the comment author as a spammer and deleted all comments by that identity — including the one on my site (why it was gone).
• Google rechecked my site and lifted the quarantine — but couldn’t retrieve the notification email.
• The notification email was partly empty because that it was a query — that returned Null. It had one part that was written at time of email generation and that contained the link to the once contaminated page.

I changed comments on the blog to require authorization at all times — no two week window for authenticated users. Clearly authentication is no longer a sufficient barrier. I don’t want phishing attacks on my blog, and I don’t want to get quarantined.

This reminds me what a strange fish Blogger is. It works fairly well, though there’s a longstanding problem with CR/LF handling that reminds me too much of DOS 2.1. It gets very few, but still some, updates. Google has switched their blogs off Blogger, but they haven’t used their new proprietary RSS/Blog platform to replace Blogger. Blogger is neither dead nor alive, and Google RSS is similarly quantum.

Apple's Apple ID fiasco is getting worse -- declining support for Apple Store ID that is not iCloud ID

Like many veteran geeks I have a different iCloud ID and Apple store ID. This used to be a supported configuration. In my case it was essential because of some complicated history with Apple’s .mac precursor to MobileMe and iCloud. (In an unrelated matter I have another 3-4 Apple IDs that aren’t connected to anything but, depending on the vagaries of Apple’s hacked together legacy databases, sometimes pickup Apple Store hardware purchases.)

This is what Apple’s support document says now (emphases mine) …

Sign in with your Apple ID - Apple Support

… We recommend that you use the same Apple ID for all Apple services on your device—including the iTunes & App Stores and iCloud …

… If you have multiple Apple IDs, you can’t merge them …

I went looking for this document because I think iBooks.app doesn’t work properly with an iCloud ID that’s different from the Apple Store ID that can be used to purchase iBooks. It looks like this will be a trend.

Note what Apple says here. Your Apple Store ID and iCloud ID should be the same. You also can’t merge them [1]. So you either need to abandon all your Apple Store purchases or your iCloud storage purchase.

Anyone remember when Cook promised to fix Apple’s original sin of  botched identity management system? Apparently the problem is harder than building spaceship headquarters.

Apple should bite the bullet and come up with a process to merge Apple IDs. I fear they aren’t going to bother though. I really miss class action lawsuits.

- fn -

[1] There is a possible workaround. You may be able to use your iCloud ID as an Apple Store ID and then make it a family member of the original Apple Store ID. This will run into rules about changing device Store IDs and constraints on family member size as well as issues with the total number of devices that are part of a family (10). It isn’t an official workaround and I suspect it has irreversible problems of its own.

Podcasts.app - sync Stations between iTunes and iPhone via iCloud, not via iTunes sync

Apple removed playlists from iOS 11 podcasts.app. I loved playlists. They were a beautiful user friendly query building tool.

Instead we have Stations, which are more limited. I created some in iTunes and some on my iPhone. They didn’t sync even though I transfer podcasts from iTunes to iPhone via WiFi/Lightning cable.

It turns out Stations do sync — but only via iCloud even though files may travel via local sync.

Once I enabled podcast sync in both iTunes and iOS my stations appeared in both. 

This is good, because one advantage of stations is that podcasts play consecutively. At least I think that’s why mine started playing consecutively instead of stopping after each podcast as they did earlier in iOS 11.

There are lots of weirdnesses in iTunes when it tries to combine sync via iCloud/Store with local file based sync from iTunes. It will be interesting to see if Podcasts does better at this than Movies does.

Apple is clearly heading towards the world where we have all have 2TB iCloud Drives, a 256GB local machine store for frequently used data, and special folders in iCloud for personally owned files that sync separately from Store files (ex: personal images, ringtones, podcasts, PDF, etc). There’s no resisting this one.

Update: It is a mess. Of course. Stations need a setting to only show downloaded episodes. One problem with Stations is that while they can filter out Played stations, they only know a station is Played as long as the file is around. If the file is removed and the show is in the Cloud then it is treated as unPlayed.

Progress of sorts - integrating my simplenote memory extensions with gDrive

Nine years ago I wrote What my blogs are for: memory management and the Google-Gordon geek-mind fusion. It’s hard to believe now, but in those days we did not yet fear Google. Back then, we liked Google. Google was good.

That was a long time ago. Google has since transcended mere human morality (Galactus is a much better name than Alphabet btw). Unfortunately I haven’t transcended my need for artificial extensions to my working memory. To the contrary, that need has grown. Now in addition to my old technical expertise a change in employment means I manage more organizational and political knowledge. Oh, yeah, and I’m back to being a practicing doctor. So now I need to know adult male ambulatory internal medicine. Also, I am old and my brain is crud.

So, yeah, I need those memory extensions. I still use Google’s tools, though the Custom Search Engine I rely on to integrate my blogs with my link share stream and my ancient (hidden) web pages is all but forgotten. Since 2008 though I’ve moved away from the Google dominated web back to files and file systems as a memory store. Carrying a connected computer in my pocket made 1980s style files useful again. I rely in particular on plain text Simplenote to carry around fragments of memory. For regulatory/security reasons I have one Simplenote account for work memory and one for non-work memory — with some notes shared between both using Simplenote’s (simple!) sharing mechanism.

Spotlight indexes simplenote files on my iPhone — sadly only for one account. On my Mac nvAlt syncs to my personal simplenote account — so the text files are indexed by Spotlight there too. Today, guided by a @simplenoteapp tweet I installed Simplenote Electron (which Automattic is abandoning for a future fully native Mac upgrade [1]) and tied that one to my work account. Then I used the improved text export to create a local read-only copy of that memory store — which Spotlight Mac now indexes. So the stores are in one search space at last.

The last twist is that Simplenote local text stores are in a Google Drive folder, so synchronized to gDrive with appropriately stored folders such that appropriate text stores are searchable on both devices. Sadly gDrive does not support “Available offline” at the folder level — so when I don’t have data access I also lose some memory access. (I’m hoping Google will fix this.)

The gDrive integration is important because there are limits to plain text - particularly for medical topics. I have PDFs, Word Docs, Google Sheets and other detritus of decades of notes. I can put all of that in gDrive alongside the text notes and let search figure it out. (This is what Evernote is supposed to be good for but they don’t have a clear exit strategy. It’s trivial to walk away from Simplenote. I need that exit strategy [2].)

It’s all one heck of a kludge, but so is my memory. So kind of fits.

See also:

• What my blogs are for: memory management and the Google-Gordon geek-mind fusion 7/2008
• Snippets Explained (Version 2) 2/1999
• Beyond Simplenote: I still want a graph layer (concept map) overlay for my memory augmentation notes collection 5/2016. Sigh. This would be wonderful.
• Project Memfail: Tackling my search space problem 9/2013. My work space problems got sorted out when the company died. I’m much more cautious now about creating new memory pockets.
• Thinking tools 2014 - holding steady but future unclear 5/2014. RIP App.net.
• Full text search and digital prostheses: new email, new mind 7/2008
• Strange loops: Google custom and customized search - and a memory blog 3/2008. Non-evil Google.

- fn -

[1] It has the same search bug as Simplenote/Mac!

[2] For example - if they don’t fix that damned search bug [1].

 

Selling or retiring an iPhone -- I hope you disconnected Google Authenticator and Google Prompt first.

Wipe that iPhone to give to your child or sell? I’m sure you remembered to launch Google Authenticator and remove the device from your trusted device list before you erased all …

Using a new phone to receive 2-Step Verification codes - Google Account Help

… On your old phone, open the Google Authenticator application…

Oh, you forgot about this step? You are clearly inadequate.

There’s hope though. Assuming you have a computer, there’s another option hidden away …

Add or remove trusted computers - Google Account Help

… Under “Devices you trust,” select Revoke all...

Except that’s not a bit misleading. There are more options once you sign into you Google Account and dig through the “Sign-in & security” section, select Signing in to Google, and Choose 2-step verification.

There you can remove the “Google Prompt” iPhone that manages authentication via Google App. That flips authentication to an Authenticator app (OTP authentication with RFC 6238 and 4226). The Authenticator app might be Google’s, a 3rd party, or 1Password or another password manager. I use Google’s because I started with it and I’m lazy.

You can also “change phone” on Google Authenticator. Authenticator is working for my new device though — which was restored from a 6s backup. So I didn’t do that immediately. 

Instead I removed the Google Prompt device, since that was still going to my (since erased) 6s. Then I added it back to my new iPhone 8. Google had the 8’s name so I authenticated there. 

Then, because I’m a paranoid sort, once I had Google Prompt working, I went into Authenticator on my i8 and removed my Google account then setup authenticator again from the 2-step verification page (scan barcode).

I’m sure everyone knows to do this. Otherwise why would pundits keep telling us to enable 2FA on every service we care about?

PS. I think when you authenticate within Safari for iOS Google can’t identify the host device. So my https://myaccount.google.com/device-activity list shows both “John8” (my current iPhone) and “Apple iPhone” — even though I believe they are the same thing.

PPS. I think if you want to be very careful you really should do the “Revoke all” as I suspect the old device Safari authentication can still be an issue (except I erased it, but if you’re paranoid …)

See also

• Things to do when selling or retiring an old iPhone 9/2015. Except its really worse than this …