Apple's App Store Free Lunch: Who's Paying for the Ecosystem?

2025-06-05

Apple's App Store boasts of generating trillions in billings and sales for developers, yet a significant majority pay zero commission. However, a small minority, particularly indie developers, are burdened with hefty in-app purchase (IAP) fees, sparking controversy. The author argues Apple leverages IAP to force a select few to subsidize the entire ecosystem, including 'free' apps generating billions through ads or other means—a blatant 'free lunch' scenario. The article questions the fairness and rationale behind this practice, suggesting Apple's profitability stems from hardware sales, not developer commissions, and ultimately accusing Apple of exploiting a small subset of developers.

Read more
Development Commissions

macOS Malware Scans Slowing App Launches

2025-05-01

Developer Jeff Johnson discovered that macOS's syspolicyd process performs malware scans on applications, causing slow launches for apps like Xcode, FileMerge, and Google Chrome. These scans consume significant CPU resources, leading to noticeable delays even for small apps. Johnson suspects syspolicyd scans not only the app itself but also its linked libraries. He resolved the issue by disabling System Integrity Protection (SIP), but this also disables some system services. The article explores the root cause and expresses frustration with this seemingly unnecessary security measure, preferring background scans to foreground interruptions.

Read more

Slow Mac App Launches: Malware Scan or Hash Cache Miss?

2025-05-01

Blogger Jeff Johnson discovered last year that slow Mac app launches are due to malware scanning by the syspolicyd process. However, blogger Howard Oakley disagrees. Johnson uses spindumps to refute Oakley, showing the malware scan occurs during dlopen when loading dynamic libraries. Oakley claims the slow launches are due to SHA-256 hash cache misses for files in the Frameworks folder. Johnson argues Oakley's theory lacks evidence and ignores the fact that universal binaries contain two architectures, making Oakley's hash calculation time estimates inaccurate. The core of this debate lies in different interpretations of system logs and process snapshots, and differing understandings of caching mechanisms.

Read more
Development Mac apps

Xcode's Constant Phone Home: A Privacy and Performance Nightmare

2025-03-01

Developer Jeff Johnson discovered that Xcode frequently connects to Apple servers during project builds, causing slowdowns. Using Little Snitch, he identified `developerservices2.apple.com` as the culprit; disabling connections to this domain dramatically improved build times. Further investigation revealed that Xcode also connects to other Apple servers, such as `devimages-cdn.apple.com` and `appstoreconnect.apple.com`, upon launch and project opening. These connections appear unnecessary and may involve the collection of developer data. Johnson argues that this behavior compromises developer privacy and recommends disabling unnecessary network connections.

Read more
Development

Xcode's Constant Phone Home: Privacy Concerns and Build Speed Bottlenecks

2025-02-25

Developer Jeff Johnson discovered that Xcode frequently connects to Apple servers during project builds, leading to slow build times, especially during the "Gather provisioning inputs" phase. By disabling connections to developerservices2.apple.com using Little Snitch, he resolved the build speed issue. He also found that Xcode connects to other Apple servers, such as devimages-cdn.apple.com and appstoreconnect.apple.com, upon launch and project opening, seemingly unnecessarily and potentially transmitting developer information to Apple. Jeff argues that Xcode acts as a developer analytics collection mechanism, compromising developer privacy.

Read more
Development Build Speed

Apple's Latest Update Sneaky-Reenables Apple Intelligence

2025-02-11

A recent update to macOS 15.3.1 and iOS 18.3.1 has re-enabled Apple Intelligence for some users, even if they previously disabled it. The behavior seems linked to whether the Setup Assistant and welcome screen appear after the update. Developer Jeff Johnson reports this inconsistency across his devices, sparking user frustration. This automatic re-enabling is viewed as a user-hostile move, reminiscent of Apple's past practice of automatically re-enabling Bluetooth in every OS update—a practice eventually fixed, only to be seemingly replaced by this new issue.

Read more
Tech

Little Snitch's Secret Weapon: Precisely Controlling Safari's Search Helper

2025-01-24

While configuring Little Snitch on a new Mac, the author discovered Safari's search helper process silently connecting to Google's ssl.gstatic.com. Changing the search engine or blocking the connection worked, but the latter interfered with Gmail authentication. The solution? A clever Little Snitch rule using the 'via' function, blocking only the search helper's connection while allowing Safari itself, showcasing a powerful, little-known feature. This highlights a subtle but significant aspect of browser-search engine background communication.

Read more
Development

Apple Photos' 'Enhanced Visual Search' Raises Privacy Concerns in iOS 18 and macOS 15

2024-12-28

Apple's iOS 18 and macOS 15 updates include a default-enabled 'Enhanced Visual Search' feature in the Photos app. While Apple claims to use homomorphic encryption and differential privacy to protect user data sent to its servers for processing, this has sparked privacy concerns. The author argues that Apple's decision to enable this feature by default without explicit user consent disregards user privacy expectations, especially given the history of security vulnerabilities in Apple software. The author strongly recommends disabling the feature, as the potential risks significantly outweigh any perceived benefits.

Read more