A WhatsApp in-app browser for iPhone would open any chat link without leaving the app, maximizing the time people spend in Meta's app.
(via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)
Apple’s iPhone User Guide for iOS 27 explains how to export your passwords for websites and accounts to a CSV file, which you can then import into another password manager. The option sits in the Settings app under Apps, then Safari, and Apple warns that the exported file is not encrypted. That makes the export […]
The post How to export your iPhone passwords to a CSV file in iOS 27 Safari settings appeared first on The Mac Observer.
The latest macOS 27.2 beta adds touch-friendly tab gestures to Safari, a sign Apple is readying its desktop apps for the touchscreen MacBook.
(via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)
The Golden Gate update to Liquid Glass solves a fair number of the most common criticisms through both design changes and customizable settings. It doesn’t fix everything, and the changes are primarily iterative—if your quarrel is with the overall design direction, this update won’t help you.
[…]
The net effect of all of Golden Gate’s design changes isn’t huge, and Golden Gate still looks more like Tahoe than like any previous version of macOS. Some controversial decisions remain in effect, like putting any non-squircle icons into “squircle jail” so they can think about what they’ve done.
[…]
But based on reactions I’ve seen during the betas, I expect these tweaks will be just enough to quell the loudest complaints, at least for people who were using Liquid Glass as an excuse not to upgrade.
It’s better than before but doesn’t go anywhere near far enough. Every time I do testing on a pre–Big Sur Mac (or even on Sequoia) I get sad about what we’ve lost.
The most obvious improvement in Liquid Glass from Tahoe is the change from a choice between Clear or Tinted to a replacement slider. This also features one of the new Easter Eggs, a beautifully rendered image of Clarus the Dogcow.
[…]
Quite why Apple has pushed this decision so far forward I don’t understand, though. As with the previous options, for this slider to work, Accessibility settings like Reduce transparency must be turned off, on the basis that you can’t have too much of a good thing.
Nature is healing
I do appreciate some of the fixes in macOS 27. But this work ain’t done yet. What is even happening in this inspector[…]
macos 27 system settings graphical bug
Everyone is going to pretend that Liquid Glass is fine now, “nature is healing”, and such total bullshit.
The Overton NSWindow had shifted so far that nobody even knows what’s good and bad anymore.
I skipped macOS 26 entirely out of utter contempt for the criminally bad UI. I’ve lived on macOS 27 since the first Developer Beta. It’s in great shape, the most mature x.0 in many years (unsurprisingly considering they began its development two months earlier than usual).
The widget only appears only when hovering over a certain area, and the only item in its popup menu is Show App in Finder…
Opened the new version of Mail in the just ‘upgraded’ Golden Gate and immediately went searching for a fix! Included is what the Mailboxes Sidebar looks like in my few months old iMac.
I know they did it purposefully to add more contrast to selected items, but I don’t really like the changing font to bold on Golden Gate sidebars. It changes the text size which looks awkward, particularly when it has to truncate.
Even with Apple’s OS 27 release, Liquid Glass is the software equivalent of super gluing tacky gold gewgaws all over the place.
I don’t think Apple did enough testing on Notes in Golden Gate, those group and sort options are empty?
Oh, what fresh hell of indistinguishable came this new preview app icon’s choice?
They totally fixed Liquid Glass on Golden Gate.
And, yes, liquid glass is still there. I don’t care about how many sliders they put in, every time I see that I am reminded that if they needed to add it, they blew it.
Previously:
Update (2026-09-23): Kevin C:
I had the run the betas in a VM, and thought the UI was a great improvement over Tahoe. However, it left me unprepared for the new bright edge highlights around buttons and input fields, etc. on HDR displays when actually updating my MacBook. I was glad I could fiddle around with BetterDisplay and disable XDR settings, which removed them. But I would prefer that an accessibility setting like Reduce Bright Effects considered them to be bright enough to reduce.
Update (2026-09-28): Jeff Johnson:
First, on Sequoia the background of the status bar is gray, distinguishing it and the link URL from the web page content it covers, whereas on Tahoe and Golden Gate the background of the status bar appears to be the same color as the web page.
[…]
The second difference between Sequoia and Liquid Glassy versions is that the Safari status bar appears higher on the page with Liquid Glass, presumably due to the exaggerated window corner radius. Thus, going back to the screenshots of my blog post, Liquid Glass can make the status bar text appear almost as if it were part of the web page text. Notice if that if the scroll position is just right, the status bar text fits vertically between two paragraphs, a situation that I could not reproduce on Sequoia, because the status bar text is closer to the bottom of the Safari window.
Why does my Apple Music sidebar keep doing this!? It is like the top blur-fade mask will extend to the bottom of the sidebar… I have to then quit the app every time…
Update (2026-10-05): Pierre Igot:
In macOS Golden Gate, when you enable the option to “Increase contrast”, the contrast between the button text label and the button background in standard macOS buttons actually… decreases, since the text label stays black and the background gray gets darker.
Update (2026-10-09): Nico Reese (Mastodon):
macOS does adopt some of Liquid Glass’s physical behavior this year, including subtle click animations and springy, bouncy interactions. One major piece is still missing, though: the fluid morphing between button shapes and interface elements that gives iOS much of its distinctive character.
[…]
Overall, Apple’s 2027 design updates are a mixed bag. macOS benefits enormously from the refinements to Liquid Glass and now delivers the most convincing implementation of the material across Apple’s platforms. watchOS also moves in the right direction, while iOS and iPadOS surprisingly lose much of the depth that made Liquid Glass feel truly physical. tvOS and visionOS, meanwhile, remain strangely inconsistent with the rest of Apple’s ecosystem.
Preferences aside, you can clearly see on both platforms that dark mode looks much richer. Light mode can only show the cool new lighting effects on an HDR display, because they’re on a 100% white background. They can’t get any brighter unless you have an HDR screen that can go to eleven. There’s just a hint of gray shading to suggest depth.
We had a solution to this in Aqua, starting with Mac OS X 10.5 Leopard. Toolbars and titlebars were gray, not pure white. It’s true that nothing can be higher contrast than white on black, but literally anything has more contrast than white on white.
Although Liquid Glass has been around for one year, the compatibility issues it introduced haven’t completely disappeared. Drawing on a real-world project, SLIT_STUDIO developer Megabits summarizes several common UIKit adaptation pitfalls and the solutions he used to address them.
For most of the past week, I tried living with the default mid-point on the slider. I gave up almost immediately on macOS and iPadOS. I lasted much longer on iOS, but I found the glass to have an unpleasant milky hue. Now I’m back to full tinted, mostly because it’s the only way I can stand looking at notifications.
With the previous version of “tinted”, especially in dark mode, there was a nice amount of contrast. The material looked glassy and translucent, but it was pleasantly dark. In the 27 OSs, the tinted mode looks dull, matte, and significantly lighter. The worst part: it still uses white text, leading to universally worse contrast. So now I get worse readability and effectively none of the refractive effects. That sucks!
First up, let’s talk tab bars. I think these looked awful in the original Liquid Glass redesign, and in 27.0 they look even worse. Below is an example of three tab bars from Safari in macOS.
[…]
In macOS 26’s dark mode, I had no problem with system menus even when Liquid Glass was set to clear. In macOS 27, even in the fully tinted mode, the menus have much lower contrast.
Golden Gate UI is miles better than what Tahoe brought us but at the same time, that’s not saying much because Tahoe set the bar so low…
A Apple bloqueou recentemente oito certificados vulneráveis que eram utilizados pelo Safari para determinar se uma página da web era legítima ou não — recurso que existe para proteger usuários de cópias baratas de sites feitas para golpes.
De acordo com informações do BleepingComputer, essas chaves privadas foram revogadas pela autoridade certificadora indiana eMudhra após pesquisadores descobrirem que eram tão fracas que qualquer pessoa poderia utilizá-las para forjar um certificado de uma página legítima.
Além do Safari, navegadores populares como o Mozilla Firefox e o Google Chrome também se baseavam nesses certificados para proteger usuários. Em um relatório, inclusive, a Mozilla explicou que todos os oito certificados utilizavam chaves privadas P-384 (geradas em abril de 2025), as quais tinham valores menores que 256 — o que permitia a qualquer pessoa recuperá-las testando apenas 256 possibilidades.
Descoberta primeiro por um pesquisador identificado apenas como Wayne, em 17 de outubro, a vulnerabilidade foi demonstrada no GitHub por outro pesquisador chamado Flüpke, o qual mostrou que uma chave privada para o certificado “EM OV TLS CA – G3C” da eMudhra contava com um valor de apenas 4.
Em uma resposta à Mozilla, desenvolvedora do Firefox, a eMudhra disse que identificou um erro em um script usado para gerar certificados que fazia com que um segundo conjunto de chaves mais fracas fosse gerado — as quais eram, então, selecionadas erroneamente como as chaves definitivas por terem rótulos parecidos com os das chaves corretas.
A autoridade também colocou panos quentes na situação ao afirmar que a maioria dos certificados nunca foi usada em produção e que não encontrou evidências de que o problema tenha afetado usuários finais.
Além do Safari, o Firefox e o Chrome também já revogaram esses certificados.
Ainda de acordo com o veículo, Dennis Jackson, engenheiro de criptografia da Mozilla, alertou que o utilitário embutido /usr/bin/curl do macOS poderá continuar confiando nesses certificados vulneráveis, pois o seu bundle de certificados não verifica se os certificados foram revogados.
Isso quer dizer que, caso o Mac já tenha aceitado algum desses certificados, ele continuará confiando nele até que haja uma correção — algo que só poderá ser feito em uma futura atualização de segurança.
Após causar um reboliço no setor de publicidade ao quebrar determinados serviços de entrega de anúncios com a versão 27 de seus sistemas operacionais, a Apple finalmente explicou as mudanças que realizou em um post no blog do WebKit.
A empresa afirma estar combatendo um método que ela classificou como “resolução de identidade”, em que empresas de publicidade de terceiros capturam o endereço de email dos usuários em sites quando eles fazem login ou assinam uma newsletter.
Esse endereço pode ser usado para montar um perfil e direcionar anúncios online — uma evolução do rastreamento por cookies, cujo uso por terceiros já é bloqueado pelo Safari há seis anos.
Com o lançamento recente dos novos sistemas, a Apple passou a bloquear, no nível do domínio, as solicitações de rede destinadas à infraestrutura dessas companhias — o que impede o envio do endereço de email dos usuários aos servidores delas.
De acordo com o Business Insider, essa abordagem da Maçã vem agitando o mercado porque pode dificultar bastante o trabalho de anunciantes que dependem desses identificadores para segmentar campanhas e medir resultados.
Com isso, os anunciantes terão menor capacidade de alcançar públicos específicos na web e medir a eficácia de suas campanhas. Em consequência, os anunciantes poderão migrar para plataformas como Google e Meta, que já possuem perfis detalhados de seus usuários.
Embora o Safari conte com um recurso nativo para impedir o rastreamento entre sites, ele ainda pode permitir que rastreadores de terceiros sejam carregados — embora prometa restringir a sua capacidade de efetivamente rastrear os usuários.
Quem quer um bloqueio completo desse tipo de mecanismo deve recorrer a uma alternativa de terceiros, como a Privacy Badger, uma das extensões do gênero mais populares na web atualmente e que acaba de chegar ao navegador da Maçã.
Posts relacionados
Desenvolvida pela Electronic Frontier Foundation (EFF), a extensão é completamente gratuita e promete bloquear rastreadores de anúncios para impedir que empresas monitorem e efetivamente rastreiem a atividade do usuário entre sites.
No Safari, a Privacy Badger vai além dos recursos de privacidade integrados do navegador para fornecer proteção adicional contra rastreamento online. Em seu modo de navegação padrão, o Safari limita as informações que os rastreadores podem acessar, mas ainda permite que eles carreguem. O Privacy Badger impede que os rastreadores online carreguem em primeiro lugar, impedindo-os de rastrear você usando técnicas que ignoram as proteções do Safari.
Já disponível em navegadores como Google Chrome e Firefox, a extensão funciona de maneira bem inteligente e pode aprender automaticamente a bloquear rastreadores que se escondem na web, tornando a navegação mais privada e segura.
Ele suporta, inclusive, o bloqueio de widgets que podem conter rastreadores — como posts de redes sociais incorporados, seções de comentários e players de vídeo —, substituindo-os por um placeholder com botões que permitem uma ativação manual.
A Privacy Badger está disponível exclusivamente para a versão do Safari para macOS. Nessa página, você encontra os links diretos tanto para a App Store quanto para as lojas de extensões dos outros navegadores compatíveis.
via MacRumors
Cerca de 19 anos após o lançamento do primeiro iPhone, muitos usuários atuais do aparelho da Apple têm curiosidade de saber como era usar o smartphone em seus primórdios — fora aqueles que gostariam apenas de relembrá-lo com nostalgia.
Agora você pode fazer isso (até certo ponto, é claro) diretamente de um navegador, graças a um emulador do iPhone original publicado na web pelo desenvolvedor Kelindi [@_kelindi_], que compartilhou o projeto em seu perfil no X.
WIP: decided to emulate the original iphone in the browser (also works on mobile which is pretty cool)
— Kelindi (@_kelindi_) October 13, 2026
try it out here: https://t.co/TaPtAYmAwT pic.twitter.com/1xMdAoFDiU
Disponível no endereço 2007.mobile — uma referência ao ano em que o primeiro iPhone foi lançado —, ele permite navegar pelos aplicativos e menus tais quais eles estavam dispostos no aparelho original, na época com o sistema iPhone OS.
Com elementos como a Tela Bloqueada, as animações e até o logo de carregamento inicial do iPhone, o emulador mostra algumas particularidades do sistema em seus anos iniciais, como a ausência da App Store e nomes diferentes para alguns aplicativos.
Bem bacana, né?
via OS X Daily
Apple has released Safari Technology Preview 254, its experimental browser for web developers, with live pinch-to-zoom on macOS, new CSS sizing tools and HEVC video encoding for web apps. The WebKit team published the release notes on October 8, 2026, and the build is available for macOS Golden Gate and macOS Tahoe. If you already […]
The post Safari Technology Preview 254 adds live pinch-to-zoom on Mac and calc-size() appeared first on The Mac Observer.
In Safari on macOS 27, go to the website you want to change, click the Page menu button in the Smart Search field, and choose Describe Extension. Type what you want, and Safari either points you to a matching extension in the App Store or builds one you can try before you save it. Safari […]
The post How to make a Safari extension by describing it in macOS 27 and iPadOS 27 appeared first on The Mac Observer.
The release candidate is the final version of macOS Golden Gate that developers and beta testers will get before the software sees a public launch.
Apple this week announced that macOS 27, also known as macOS Golden Gate, will be released to all users with a compatible Mac on Monday, September 14.
iOS 27, iPadOS 27, watchOS 27, tvOS 27, and visionOS 27 will be released on the same day.
I would like to note two bugs that I reported during the beta period that remain unfixed in the release candidates, and barring a last minute miraculous reprieve, will remain unfixed in the public releases on Monday. This is disappointing, because I thought the point of the betas was for Apple to fix the bugs found by beta testers. While these two bugs are not destructive—do not involve data loss or security issues, for example—they nonetheless did not exist in iOS 26 and macOS 26, so in this respect, Apple’s updates are making their software worse for users.
[…]
The AppleScript run by the test app requires Automation permission, so macOS shows a permission prompt. […] It actually doesn’t matter whether you select Allow or Don’t Allow! […] Either way, just selecting something in the automation permission prompt seems to trigger the bug, causing macOS to wrongly consider the app to be running in the background.
Unfortunately, Apple’s forthcoming tvOS 27 and HomePod OS 27 updates contain a critical bug that prevents Apple TVs and HomePods from playing AirPlay streams sent by Airfoil. If your devices update to the OS 27 versions, Airfoil will no longer be able to stream to them.
FB24067183 Changing selection in
NSTableViewby moving the mouse and holding down left button, does not work anymore[…]
Font Book has been crashing since beta 4 when resizing the Inspector or Sidebar. This was a further degradation over a related bug in Tahoe. So far it seems specific to Font Book.
Previously:
Se você ainda tem o hábito de abrir links do X (antigo Twitter) para ler um post isolado, sabe como a experiência costuma ser irritante: ou o site pede login, ou carrega um monte de coisas que você não quer ver, ou simplesmente trava. Foi pensando nisso que Zhenyi Tan, desenvolvedor do site And a Dinosaur, criou o Litterbox.
O Litterbox é uma extensão para Safari (iOS, iPadOS e macOS) que abre links do x.com em um popup, permitindo ler aquele post específico sem sair da página em que você está — e sem precisar visitar o X de fato. A ideia, nas palavras do próprio desenvolvedor, é simples: abrir, dar uma olhada e fechar em seguida.
Alguns detalhes de funcionamento que valem a pena destacar:
Loginx.com pode ser incorporado dessa maneira — perfis de usuário, por exemplo, ficam de fora.O Litterbox é gratuito na App Store, sem assinaturas, compras no app, anúncios ou rastreamento, e exige o iOS 18/macOS 15 ou superior.
via Daring Fireball
Chinese retailer AliExpress has been caught fingerprinting visitors after one of the metrics—an outdated technique that measures inaudible sounds it sends to browsers—impeded a researcher's ability to use his bluetooth headphones.
Researcher Matthew Callaghan said he stumbled on the stealthy tracking by mistake. After loading the AliExpress homepage, audio from his phone stopped playing over his multipoint headphones, which accept connections from more than one device at a time. He set the headphones to play sounds from his phone except when his PC was producing audio. Each time he loaded AliExpress, the phone audio stopped. Each time he closed the tab the site was loaded into, the phone was once again audible.
While investigating the odd behavior, Callaghan said he found two highly obfuscated scripts. Together, they rendered a graph that analyzed the WebAudio readings of each visiting browser. This graph acted as an oscillator that measured Sawtooth waves, which are common in output from digital audio.
© Getty Images
From Mail to Notes, I replaced these built-in Apple apps and tools on my Mac with third-party options — and I haven't looked back.
(via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)
Apple’s iCloud Private Relay is designed to hide users’ IP addresses from websites and even from Apple itself while browsing in Safari. But according to security researchers Talal Haj Bakry and Tommy Mysk, the feature does not always work as intended because of issues in Apple’s WebKit browser engine.
The problem centers on passkeys, the password-free authentication method that is becoming more widely used. When a user authenticates with a passkey, the request is handled outside the browser itself. Private Relay only protects traffic within Safari (as an iCloud+ feature) and does not function like a full-device VPN. As a result, the authentication request can expose the user’s real IP address to the website or service.
Because the vulnerability sits in WebKit, the engine that powers every browser on iOS, the IP leak is not limited to Safari. Privacy-focused browsers such as OnionBrowser and the researchers’ own Psylo browser can also reveal a user’s IP when passkeys are used.
Re: Responsible Disclosure
We found ourselves in a bit of a dilemma with these DNS and IP leaks in WebKit and how to handle them responsibly.
We first became aware of a DNS leak in Psylo in late June 2026 after a user reported it. During our investigation, we found two… https://t.co/5kFu0jtUsJ
— Mysk
The researchers have already notified OnionBrowser and the Tor Project of their findings and suggested fixes. Apple has told 404 Media that it is investigating the report. However, Bakry and Mysk noted that Apple’s response times for similar privacy issues can be lengthy; a previously reported problem with the Hide My Email feature that allowed real email addresses to leak behind aliases was not fully fixed for about a year after it was disclosed.
MacDailyNews Take: Until a fix arrives, users who rely on Private Relay for anonymity should be aware that logging in with passkeys on iOS may still reveal their IP address.
Please help support MacDailyNews — and enjoy subscriber-only articles, comments, chat, and more — by subscribing to our Substack: macdailynews.substack.com. Thank you!
Support MacDailyNews at no extra cost to you by using this link to shop at Amazon.
The post Apple’s iCloud Private Relay can leak your real IP address through passkey logins, researchers warn appeared first on MacDailyNews.
A newly discovered WebKit privacy leak bypasses proxy protection and iCloud Private Relay, exposing your real IP addresses and DNS data.
(via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)
