Topic: iOS – Ctrl blog

Safari’s Beacon API problems

2019-06-22T22:14:00Z

The Beacon API is available in all current mainstream web browsers, and was introduced in Safari in version 11.11 (iOS 11.3 and MacOS 10.13.) However, Safari have had some trouble delivering on the promises of this web API; especially on iOS.

Safari’s default media controls get blocked when CSP is applied

2018-11-21T14:37:00Z

I recently ran into an unexpected road block trying to deploy a Content-Security-Policy (CSP) on a website that relied on the native media controls provided for the HTML <audio> and <video> elements in Safari. The default browser-provided multimedia controls were good enough for my purposes and they provide a platform-native user experience to all users. To my surprise, I noticed that there were no usable playback control buttons in Safari on pages with a strict content security policy.

50+ unpatched security vulnerabilities in A5-generation iOS devices

2017-05-30T13:54:00Z

Devices running the Apple A5 chipset were all abandoned last year when Apple released iOS 10. Since then, there are 51 disclosed security vulnerabilities in iOS 9.3.5 — the last version available to devices with A5 chipset. Including a lock screen bypass vulnerability and 20 issues that are remotely exploitable through Safari (and any other web browser allowed on the device.)

Apple News app getting its own User-Agent in iOS 10

2016-07-13T14:42:00Z

Users of the Apple News service were until now indistinguishable from the ones surfing through web views of in-app browsers.

3-year old iPod 5 no longer receiving software updates from Apple

2016-07-11T12:09:00Z

About a month ago, I jotted down an idea for an article simply saying: “iPod touch, all-time favorite Apple product”. This was true until last week when Apple stopped providing software updates for a three-year-old product.