More from Christian Selig
Hard to believe, but it’s been over 9 months since the current crop of iPhones came out, and I elected to grab the (apparently not super popular) iPhone Air, a new model of iPhone introduced for the first time. Rumor season for the new iPhones is in full swing, so it seemed like a good time to jot down my thoughts on the current model. Immediately, it’s really something to behold when you pick it up for the first time, it feels weirdly thin, pretty much everyone I’ve showed it to has been like “whoa”. You sacrifice a fair bit to get to that, from cameras to battery life, but I’ve always been a sucker for something novel, so when something as huge as the iPhone had a quirky new model I was really stoked to check it out. Heck, part of my frame of mind was that this device is going to have some serious limitations, which will probably also apply to the rumored upcoming folding iPhone which I also really want to check out, so it’ll almost be a warmup round to get me in the right headspace for a folding iPhone. I think that makes sense? Either way, over the last 9 months it’s been my primary phone day in and day out, and I wanted to jot down my thoughts on what it’s like to live with as someone who normally goes with the Pro phones, because there’s been some surprises. The design Picking up an iPhone Air for the first time is almost weird. Phones have had such a consistent slab design for so long that making it so, so dramatically thinner almost confuses your brain a little bit, like it’s an illusion or something. Forget putting a case on it, live with the danger. My favorite example was handing my phone to an employee at a local store to show her a product I was looking for, I could see kind of a confused look when I handed it to her followed by a “your phone is so thin”, almost like she thought there was something wrong with it. But, here’s my hot take. After the better part of a year it no longer feels thin, it just feels normal. Sure, when I pick up an older iPhone I’m lke “whoa this is so thick it feels like a relic”, but the Air doesn’t really feel noteworthy to me anymore. It’s like if you live in a cinnamon factory, I assume day one you’d be like “this is the best smelling place ever” but after a few months you’d go nose blind to it. My cat wouldn't even give the Air a chance, clearly a Pro phone fanboy That gives me pause, because it kinda makes me wonder that if any reasonably thin phone just feels normal after awhile, is it worth a bunch of compromises just to get it even thinner, when even that thinness feels normal eventually? I kinda feel like I thought about the thinness of my Pro iPhone the same amount after 9 months as I do now with the Air (which is to say, not really at all) but had a less compromised phone to show for it. And it’s weird, because with the old wedge-style MacBook Airs this feeling never went away for me, I loved those machines and every time I picked it up I kinda marveled, but that sensation kinda just went away with the iPhone Air, perhaps since I’m picking it up so much more than a laptop? The screen I’ve always been a normal-sized phone guy. The Plus/Max phones just feel unwieldy, but I do admit whenever I hold one I’m like “dang… maybe…”. The iPhone Air is the perfect solution to this, its screen size sits right in the middle of the normal Pro and Pro Max sized phones, and is one of my favorite parts of the phone. It’s large without feeling unwieldy (so awesome for games and videos), typing is a joy on the increased size, and it really makes me wish this size was the normal “small” Pro phone. Apple could then make the Pro Max phone 8" diagonal or something, I wanna test how far these Pro Max people will go. As a bonus my iPhone Pro can’t fit one of those tiny Xteink readers on the back, but my Air can perfectly! The cameras Camera quality feels as good as ever, it’s apparently not as good a main sensor as the Pro iPhones but I can’t really tell. It still has that distinctly over-processed look plaguing modern smartphones, but using an app like Project Indigo or Halide really helps here as they have modes that heavily reduce this distinct “phone” look. The real issue is that there’s only one sensor. I didn’t think I’d mind that much but unfortunately it turns out I do. On one hand, the iPhone’s main sensor has worse minimum focus distance than some Android phones, which means if you’re trying to take a photo of a document or something it often ends up blurry, you have to pull back a little bit then crop in after the fact. Since the sensor is 48 MP there’s tons of room to crop in (and even a built in faux 2x lens option) but it’s just kind of an annoyance versus either having an improved minimum focus distance or auto-macro mode using the ultrawide lens like on other iPhones. The ultrawide lens is not one I used a ton on previous iPhones, so outside of macro mode I don’t really miss it. I’m surprised though that I really miss the telephoto lens. There’s so many options where I want to see something that’s further away, like something when watching sports, or even a cool bird, and cropping in on the main sensor is such a far cry from a 5x telephoto lens. I’m in the minority here but I really wish Apple went back to having the secondary lens on iPhones be telephoto instead of ultrawide, and it makes me sad that going to the future folding iPhone will likely mean I still don’t get a telephoto lens back. Aside: camera plateaus have got out of control. This one rocks so badly if you try to interact with it while it’s lying down. I so prefer the Pixel style phones that have a consistent thickness across the full width of their camera plateau, because even though there’s a substantial plateau it doesn’t rock like a table with one short leg. The speaker (yes, singular) For the uninitiated, the iPhone Air has a single speaker up near the earpiece at the top of the phone. Pretty much every other modern iPhone (as far as I can remember) has one at the bottom as well, which means when watching video or something the audio doesn’t sound like it’s coming from one side of the phone. I was tempted to make an analogy to watching a video with only one AirPod in, but it’s not quite that bad, you do sorta get used to it, but it being subpar never fully goes away. What’s arguably worse though is with only one speaker the max volume is substantially lower, if you’re in an even remotely noisy environment (say, washing dishes) and you’re a little bit away from your iPhone good luck hearing things. Battery life Battery life confuses me. Coming from an iPhone 15 Pro which from everything I can tell was not revered for having the best battery life, I was pleasantly surprised with the iPhone Air’s battery life, it easily got me through a day where it sometimes felt the 15 Pro wouldn’t. This felt like an impossible feat given the thinness of the device, but improvements in electronics efficiency is remarkable. As time went on though, I started to be less impressed. Entering the spring season I started to notice getting the 20% battery notification a lot more often, and now in the summer it’s only gotten worse where it’s virtually every day. According to battery stats I’m still at 96% health. Is this an iOS regression that’s causing more battery usage? Am I just going out and on cellular more now that it’s gotten warmer? I honestly have no idea, but either way I wouldn’t call this phone a battery champion. I really long for a day where battery life is an afterthought in phones, some of the Silicon Carbide battery stuff seems really interesting here, so fingers crossed there’s some cool battery tech in the folding iPhone. Overall thoughts Ultimately, I love this phone, but I don’t think I’d recommend it to most people. Honestly, I’m not even sure I’d get it again over a Pro iPhone when it really comes down to it. If a fascinatingly cool design matters to you above all else, you should go for it. That sounds superficial, but I don’t think it is. Lots of people appreciate wearing a beautifully crafted mechanical watch over a $10 digital watch that is empirically more accurate and less fussy, there’s something just delightful about impressively crafted objects. I feel like we’re gonna be looking back at this phone even in 5 years remarking at its form factor versus 2031 phones, and there’s really something to say for a phone design being that bold. But it really does go back to that original MacBook Air that Steve Jobs pulled out of the manilla envelope. Absolutely amazing piece of engineering, as if something from the future came back proudly to show us what’s to come, but also something with enough compromises that your average person probably shouldn’t brave these waters. (Does anyone remember CoolBook?)
The Apple Watch is one of the most fascinating pieces of modern technology for me. A gorgeous screen, an abundance of sensors, and a bonkers amount of computational power in a tiny little package that fits on your wrist. It reminds me of the Vision Pro in that a good amount of the time I put it on I can’t help but smile at how far technology has came. But it’s also weirdly something I’ve never used a great deal. Every few generations I buy a new one and try it out for a few weeks, but I inevitably run into a few speed bumps: I just fundamentally don’t love notifications being an even more prevalent part of my life than they already are I’m not a fan of having another device to charge daily or near daily While I love wearing a cool mechanical watch from time to time, I’m not a fan of having something substantial on my wrist most days. I can’t help but notice it all the time (forget sleeping in it). Personality quirk I suppose So ultimately I end up just putting it on for sports (go volleyball!) and leaving it on the charger the rest of the time, hoping one day for a device that’ll be a better fit. There’s a new wearable in town A few weeks ago a bunch of YouTube videos popped up showcasing a new wearable device: the Fitbit Air. I initially brushed it off assuming it would be mostly for Android users (as Google now owns Fitbit) and there wouldn’t be much possible for iOS integration. Talking to some people though, I learned there’s an iOS app that actually integrates things pretty well (its feature subset is a lot smaller than something like a smartwatch that would require a lot deeper OS integration). So now I’m listening. On paper, it provides a bunch of handy sensors, a week of advertised battery life, all in a package that is really low profile on the wrist. Okay, you have my interest. That was enough for me to head over to Best Buy on launch day to pick one up. (They were almost completely sold out, so there’s clearly some interest for this thing.) The hardware It’s a bit bigger than it looks like in pictures, but it’s absolutely tiny compared to any smartwatch. It’s just small and sleek enough that I barely notice it’s there, sometimes I even catch myself wondering if I accidentally took it off, which is a great sign. First wearable I’ve been able to sleep in without a worry. The actual “unit” is just a little rock sized device that slips into one of a few different bands. I have the default “obsidian” colorway and really like it visually; it has a nice style while also not being loud whatsoever, but there’s a variety of bands (and presumably more cool ones to come from the community) you can choose from. I’ve played a few sweaty sports in it, and done a bunch of yardwork, and the band holds up better than I thought it would for fitness activities, it really seems like the default band is one you can get away with using for a variety of activities. Battery The claim is a week of battery life. Charging that infrequently sounds really awesome (imagine if phones could do that!) so I was really hoping that would be the reality. And indeed, it seems to be! From my estimates I’m losing around 10% per day, so a week should be pretty easy to hit. It also charges up quite quickly. I don’t really love the idea of wearing it into the shower, so that’s a great time for me to take it off to charge, and in a 15 minute shower it charged from 44% to 85%, so taking it off for a quick charge while showering seems like a great way to keep it always topped off. The only missing of the charging story is a decent charging stand. By default the device connects with a little magnetic Apple Watch style charger, but I kinda want a way to just plunk it down on my nightstand into something and was kinda surprised Google doesn’t immediately have an accessory for that. To remedy this I made a quick little 3D printable stand that came out quite nice if I do say so myself! Download link if you want to grab it. The Google Health app The Google Health app itself is probably the most disappointing part of the equation, and a real head scratcher overall. It’s not like, offensively bad, it’s just very mediocre and I’m not sure why they didn’t delay the launch a month or something just to work on the app a bit longer. There’s two main issues. The first is that it’s just really buggy. Sometimes tapping things does nothing, my sleep score almost always states “unable to record” until I sign in and out, at which point it’s magically available. The other is the design. I’m not the biggest fan of Google’s software design but even this is just so boringly bland, half the time it feels like an old HTML website where the CSS didn’t load. It is so aggressively bland that it’s almost depressing. Things pop in and out like janky web views when loading. Sections just seem to bleed into each other with no solid information hierarchy (especially the AI assistant stuff). Things are aligned inconsistently. Then again, I have similar complaints about the Gmail iOS app so maybe this is just Google’s design language as a whole? The other part is just bizarre design functionality decisions, like when selecting a workout there’s a ton of activities listed from biking to swimming to golf to tennis, if you’re looking for a specific sport, you’ll never find it, you just have to select “Sport” (aren’t tennis and golf sports??), and then after the workout is finished you can classify it as basketball, volleyball, soccer, etc. Why not just be like the Apple Watch where you can select, I dunno, the sport? Heck if you go to the “Fitness” tab or the app (where I would think you’d easily be able to start a workout) the top 25% of the screen is a “Start your health journey” call to action that upon tapping the “Set your goal” button opens an AI chat (what?) that has been spinning for 15 seconds now with “Preparing an answer” (an answer to what??). Then there’s another 40% of the screen dominated by a library of what seem to be guided video exercises rather than again, a simple list of activities to choose from. Why? This screen should be dominated by my fitness stats and the option to start a workout. There is a teeny bar to start different workouts, with workout options such as “Workout” or “Walk”. This makes a lot of sense to me, as I often go to the shoe store and ask for “shoe”. I’m just complaining at this point, but as it stands now my “Weekly Cardio” progress bar is 22% full, but has “Calibrating, 3 days left” in it and “+0” overlaid on the bar. How do I have any progress if the value is 0? Is the 0 something else? Why show me data if it’s not calibrated? Okay one more complaint. My resting heart rate looks to be around 58 bpm but under “Daily Readiness” my resting heart rate is rated as “poor”. Why? If I tap on that it says “RHR typically ranges from 60-100 … active people often have lower RHR”. Why is 58-64 poor then? It’s a bewildering app that on one hand does the job and lets you get to and see the things you want once you get used to it, but it feels like the most hodgepodged, design by committee app I’ve used in awhile. Like six different teams at Google got to do design passes on the app and kept shoehorning in things they wanted versus someone having an actual cohesive vision of what this app should be. It genuinely feels like it would be worth starting over completely from scratch. This is a minimal bracelet that is super easy to use (it just sits on your wrist), it needs a corresponding elegant, non-bloated, simple app. The experience of using it All that said, it’s pretty awesome to use. How do you reconcile that with complaining about software for a few hundred words? Because you don’t have to interact with the software that much, it mostly just works ambiently/automatically, and you open the app if you want to view the stats it collected. I wish that last part was better, but you learn to live with the jank. One of my biggest issue with the Apple Watch is the whole thing around starting and stopping a workout. Call me a dummy but I’d often forget to either start or stop a workout. The watch kinda seems to try to help with this, where 15 minutes after a volleyball match on the drive home when I can’t safely interact with my watch it’ll be like “Hey I think you’re done want me to stop? Yes/No” which is not ideal. On the flip side I’ve never even had to start or stop a workout with the Fitbit Air, it just knows I was working out and nails the start and stop time, at best I have to relabel the workout to the actual sport it was, but apparently this gets better as you train it with time. And where it’s so much less obtrusive than an Apple Watch it’s so easy to get stats on everything throughout the day and night as I just leave it on 24/7. As for the accuracy of the stats, all seems great for me there. Sleep data seems to reflect how I feel and has a really in-depth breakdown, and fitness activity seems to track pretty nicely with what I’ve come to expect from the Apple Watch. The only weird thing I’ve noticed (and maybe it’s the case with the Apple Watch too, haven’t tested) but you can really easily/accidentally cheat the pedometer steps by just shaking your wrist (I remember doing this with cheap little pedometers in middle school) which seems weird? If you talk a lot with your hands you might have inflated step counts. Elephant in the room: Google Being an ads company, Google doesn’t have the best reputation with data privacy, so I can see why some are squeamish about using such a device. Me? I’m not too worried about Google having access to my step count, heart rate, sleep stats, etc. as they don’t massively feel like super personal stats, and the little bit of unease that gives me is outweighed by the utility of this device, but I totally get how someone else might feel differently. Wishes from Google Beyond fixing the app (please), functionality-wise the Fitbit Air seems pretty much perfect to me so there’s not a lot I find myself asking for. One thing I really would love though is wrist notifications around phone calls. One of my favorite uses for the Apple Watch is when I’m expecting a phone call on a given day, I find even with the ringer on I’ll just miss calls from my iPhone by not hearing the ring or not feeling the vibration, but the Apple Watch vibrating on my wrist always gets through to me. The Fitbit Air has a similar vibration mechanism (used only for alarms I think right now) and if it could pair to your phone like a car can for reporting phone calls (and maybe even texts, but I’d personally turn that part off), that’d be super handy. Do I recommend it? I do! At $99 USD it’s a pretty handy device if you care at all about health stats. It’s not perfect (especially in the app department) but it’s honestly exceeded the expectations I had for it, so for the price and for how unobtrusive it is day to day I’m really enjoying it. At the same time, Apple has a much better (downright impressive) reputation around data privacy, and in my eyes a lot better ability to design nice software, so I’d love to see them design a competing bracelet as an additional offering to the Apple Watch ecosystem. I’m not sure what more in terms of OS integration they’d be able to do that would move the needle that much, but I’d just love to see Apple’s spin on such a device and I’d feel a bit better about the data privacy angle.
After 7 years with a Tesla Model 3, we picked up a gen 2 Rivian R1S in April of 2025. We still have the Model 3 as a second vehicle, but it’s been really cool experiencing a new electric vehicle from a very passionate new company. 2026 is a really exciting time for Rivian, as in the first half of this year they’re launching their R2 vehicle - a smaller, less expensive SUV offering that should have a lot more mass-market appeal. With a bunch of jourrnalists getting previews of the vehicle today, I thought I’d share what I’m really hoping for in this new vehicle having experienced their existing vehicle for almost a year, and a Tesla for the better part of a decade. None of these are in any particular order. Better audio We sprung for the “Premium Audio” package in our R1S and… it’s not premium at all. Whatever system just came with our Model 3 sounds demonstrably better, from where it feels like the sound is coming from (much more expansive) to the bass, the R1S just feels a lot weaker. Honestly for the base audio system it would be probably decent, but for a “Premium Audio” system it just falls short. They have been making it better and better with softwware updates of all things over the course of our vehicle’s life, where it’s noticeable better now than it was at the beginning, a recent update in December basically sounds like they figured out how to turn on the subwoofer in the trunk a little bit, but it’s still just not that much. With the Tesla sometimes I’d park and finish out a song before leaving the car because it just sounded so good, have never had that happen in the Rivian so I hope they bring some of that experience to the R2 even through another “Premium Audio” package for those who care. No dual motor EPA shenanigans So our R1S is dual motor, meaning it has a motor for the front wheels and a separate motor for the back wheels, meaning you get AWD. Rivian allows you to get more range by only using the front motor, turning it into effectively a front wheel drive vehicle and as only one motor is active you get a bit better range (about 10%). Sounds great, right? Choose between more efficient front-wheel drive on trips, but just use AWD around town by default. Well, the devil is in the details. In order to be able to market this slightly improved range, the EPA requires Rivian to automatically revert back to this front wheel drive/higher efficiency mode after a few hours. Kinda like gas vehicles and how they turn off the engine at traffic lights, and if you disable that it just keeps turning itself back on. So even if it’s the winter and you’re like, “Dang, roads are a little dicey, I want to be in AWD”, if you park the car for awhile and forget to set it to AWD, it just reverts to front wheel drive. It’s like if your iPhone kept reverting to “Low Battery Mode” every 2 hours even after you keep toggling it off so Apple could advertise that model having 10% better battery life. Note: the vehicle isn’t hard-locked to front wheel drive in this mode, if it slips it alerts you that it’s switching over to AWD (I don’t want to wait for it to slip), and if you floor it on the highway for instance it’ll engage the rear motors for extra grunt, but because it has to link up the rear motors to an already moving system, you can sometimes get a kinda weird clunk feeling as the rear motor connects itself at speed which isn’t very satisfying. It almost feels like a wheel slip in the rain. This is maddening, and is only the case on their dual motor vehicles. For tri and quad motor vehicles, they just don’t market them as having that extra 10% range, so all the modes are actually sticky! If you say “front wheel drive mode” (they call it “Conserve”) it stays there indefinitely, if you say “AWD mode”, it stays there indefinitely. Is this dumb? Yes. Do I blame the EPA? Yes. Do I also blame Rivian? Also yes, they’re making this trade off to be able to market extra range. If Rivian does this same stuff for the R2 dual motor just so they can advertise a few extra miles, I really hope they have a $10 option you can configure when you order called “Give me less marketed range with no actual range decrease but have the vehicle actually do what I tell it to”, but maybe with a catchier title. Spare compact tire Our Tesla lacks a spare tire of any sort, instead electing to include a repair method and roadside assistance. A few years back a nasty pothole absolutely destroyed the sidewall of one of our tires on a drive home, and where it was sidewall damage it simply wasn’t repairable, so we had to call Tesla roadside assistance. Unfortuantely Tesla roadside assistance was absolutely useless, taking ages to respond and then ultimately not having any providers in the area, so we just ditched the car and got a ride home with a friend and dealt with it the next day. After that I was like “I do not want another vehicle without a spare tire on board”. With our R1S on the other hand, we had another unlucky event where we popped a tire (also the sidewall if you’d believe it, I have some great luck) and sure enough, since we elected to get a compact spare tire it was super easy to deal with, just grab the included jack, throw the compact spare on, then the next day we just slowly drove over to a shop for a new tire. Completely uneventful. I was worried with the smaller body that you wouldn’t be able to in the R2, but Jerry Rig Everything showed room for a compact spare in the sub trunk, nice! Digital rear view mirror I don’t see this in any of the videos so it seems unlikely but I’m holding out hope it’s an option. Picture this: you approach your vehicle, since it sees it’s your phone it knows who you are, so it positions your seat, steering wheel, mirrors, Apple Music/Spotify account, and temperature preferences. You didn’t have to do a thing, the vehicle is just smart! Except… your spouse is 7 inches shorter than you so when you look in the rear view mirror you’re staring at the back seat. Is having to adjust your rear view mirror a big deal? No, but having the vehicle do everything else for you almost draws more attention to the final thing it’s missing that you still have to adjust every single time. This is a solved problem in inexpensive vehicles, just have a “digital rear view mirror” that requires no adjusting as it just shows a camera feed of the rear of the vehicle where the mirror is. Digital rear view mirror in a RAV4 by u/MildSpaghettiSauce Rivian’s cameras are legitimately so good, that at night it’s easier to use them for side blind spot monitoring when you change lanes than the actual side mirrors, because they let in enough light that you can actually make out details through the pseudo “Night Mode” camera vision that you can’t with the mirrors alone, it’s wild. I want that for the rear view mirror too! Do you still prefer an analog mirror? That’s totally cool, all the vehicles that offer this let you just toggle back to a good ol’ reflective mirror. No harm no foul. V2H story Not a lot of people realize one of the most powerful part of EVs: they’re mobile powerstations that can (theoretically) power your entire home. Take a Tesla Model 3 for instance, it has a 75 kWh battery. Tesla also sells Powerwalls to help you back up your home, each Powerwall is around $6,000 and has 13.5 kWh of battery capacity. Yes, that means your Model 3 is the equivalent of more than 5 Powerwalls, or $33,000 in equivalent batteries. That’s nuts! Ever have a power outage? With the average home in Canada using about 30 kWh per day, that could power your house through potentially multiple days and genuinely save lives. My Rivian R1S is a lot better than my Tesla here in that it actually has normal, 120V AC outlets, but they can only output a measly 1.5 kW, so even powering a hungry kettle could result in the breaker tripping. Much better than the max 120W my Tesla can do through a 12V cigarette outlet (good god how is that the best they can do), but it’s still not enough output to power a house effectively. It’s kinda like being in a drought with a massive water tower, but water only comes out in drips. Better than nothing, but we need output speed too. The R1 can output much more by pulling DC energy directly from the battery through CCS protocols like the ISO 15118 standard, and sure enough despite Rivian not talnking about it, folks with these systems have been able to connect the R1S directly to their house with the appropriate cable and send up to 24 kW to power their entire home, crazy stuff, hope Rivian talks about this more in the future as clearly the vehicle supports it even if they are quiet about it. I’m kinda curious what the R2’s story is here. The CEO of Rivian said in an interview (~1:20:20) that the R1 and R2 both have bidirectional EV charging in the realm of 20 kW (which again we’re finally seeing folks be able to take advantage of in the R1 recently), but unlike being limited to 1.5 kW of AC output in the R1, the CEO says the R2 will be able to do “10 or 11 kW”. That’s massive versus the 1.5 kW the R1 can do, but I’m not sure that made it to production in the end? Doug Demuro showed a Rivian graphic with a V2L adapter (at 26:22) but it’s only listed as 2.4 kW. Still a lot better than 1.5, but a far cry fro the 10 or 11 kW that RJ Scaringe said earlier. Either way, talk more about this Rivian! This is one of the coolest parts about EVs! Better suspension The R1S has a fancy air suspension, so picture a bagpipe over each corner of the vehicle that lets it inflate or deflate to change the height of the vehicle and theoretically make for a cushier ride. I say theoretically because honestly I find the gen 2 R1S kinda rough suspension wise. Like, hitting the same potholes around where I live in the Tesla Model 3 (with a much simpler coil suspension, no bagpipes) versus the Rivian R1S I honestly find the Tesla makes me wince less. I thought it might have been the massive 22" wheels that came on the Rivian and the correspondingly small sidewall on the tire, but we switched to a 20" wheel for the winter with a much larger sidewall and it’s better but still not great. Would love to see Rivian tune this so that the R2 is a super smooth ride, I’ve heard the newer Tesla Model Ys are incredible here and also just have a coil suspension like the R2 will have. Faster charging Brands love to brag about maximum charge speeds, our Tesla for instance got a software update to enable 250 kW charging, which is super fast. To put that in perspective, most new homes in North America have 200 amp service going into their home, 250 kW is the equivalent of upgrading to 1,000 amp service, and then pouring every drop of that power into your car. But, while that top speed is impressive, it holds that for like, minutes maybe before crashing down to much slower charging speeds. Our R1S is no different here, with good peak speeds but it doesn’t exactly hold them super well, there’s been tons of reports that the cooling method for the batteries in the R1S is just underwhelming, where the Rivian R1 models have a two battery packs stacked on top of each other with a single liquid cooling plate in the middle (so only the top or the bottom of the battery is touching the cooling surface), and that single plate often seems a little underpowered for cooling such a massive pack quickly. Kinda like thermal throttling in laptops! We typically see around 45 minutes for the battery to charge 10-80% at fast chargers. The R2 on the other hand appears to be moving to a smarter cooling method where the cooling liquid flows almost through a ribbon, weaving along the sides of each cell in the battery pack, meaning a lot more cooling surface area. And indeed, this seems to have paid off, with a Rivian employee saying they’re now under 30 minutes for 10-80% on the R2. Class-leading? No, Hyundai is under 20 minutes, but a fair bit better. And for folks without EV experience, honestly, this is mostly a non-issue. 99.5% of your charging is done at home where speeds don’t matter (it just charges overnight like your phone), it’s only if you’re going on a bit of a roadtrip where this comes into play. Better USB-C Okay this isn’t a big deal, but the R1S has a ton of USB-C ports everywhere, like there must be close to a dozen, which is awesome, but if you try to charge a power bank or a laptop or something over USB-C it’s just… not very fast. I haven’t actually measured but I’m assuming they’re only doing 12V (at most) instead of at least 20V which most chargers are at nowadays, which I really hope they improve. My MacBook charges so slow. Better phone charger This is the one part of the Rivian that I’m like “how did this even make it out of the factory”. And if you’d believe it the phone charger in my vehicle is the second revision, so this is their attempt at fixing it somehow. Basically they have a flat little area near the arm rests where you can place one or two phones to have them wirelessly charge. Sounds fine, right? I haven’t measured it, but from experience I believe the charging “sweet spot” is approximately 4 atoms wide. If the car is in motion at all, it moves from those four atoms and tries super hard to charge it but ultimately cannot, ultimately just making the phone get super hot and lose a bunch of battery life. One time we went camping and I was like “Okay, the vehicle is not moving, surely I can just set it here while I sleep and it’ll charge”. Nope, somehow even stationary the phone did not charge beyond 20% overnight and was super hot in the morning. What. They have managed to make a phone charger that is worse than not having one at all. I can’t even place my phone in the arm rest while I drive because it just cooks it, at least if nothing was there it could just be a storage location. No, mine is not broken, this is a common complaint from just about every Rivian owner, and they need to make this better for the R2. Just hot glue a MagSafe puck in there at minimum. Better Phone as a Key (PAAK) Rivian and Tesla do the (honestly very cool thing) where it uses your phone to detect your proximity to the car and lock/unlock it and recognize who the driver is to set preferences. It’s great, no having to carry around bulky car keys (don’t worry, there is a backup little credit card style key you carry in your pocket in case your phone dies or disappears). Rivian even recently updated theirs to use the first-party “Apple CarKey” functionality so you get bonuses like being able to unlock it for a few hours even after your phone’s battery died, and it uses “Ultra Wide Band” (UWB) so it can position your phone in relation to the car down to the centimeter. Tesla doesn’t do this and has their own proprietary thing that I think is based on Bluetooth but might use a bit of UWB on newer models (not on my car). But… Tesla’s is still much better. There’s two aspects of nailing good “phone as a key” support: firstly, unlocking the car as you approach (duh), and secondly, knowing who approached the car so you can set their preferences (seat, steering wheel, mirror positions, temperature preferences, music streaming account, etc.) Unlocking: B+ for Rivian here, sometimes even with the recent update I have to stand by the door for a few seconds and be like “Um, hello” before it sees me there and unlocks. Same phone, walk over to my Tesla, always unlocks instantly even though the Rivian should have a massive advantage with UWB. Identifying driver: D for Rivian here. Again, with UWB and centimeter-level positioning over the driver in relation to the vehicle Rivian should be able to know exactly who is approaching the driver door when my girlfriend and I (who both have Rivian keys) approach the vehicle, but 95% of the time when my girlfriend is with me (despite her always preferring to be passenger) it always sets her as the driver. Even weirder, sometimes she’ll yell out the window if I’m putting something in the frunk “Oh it actually recognized you this time!” with me set as the profile, but then when I sit down in the seat it reverts to her. What. Rivian needs to do better here for the R2. The pain is especially compounded by the fact that if you leave in a bit of a rush and somehow don’t realize the driver profile is wrong, Rivian won’t let you change your driver settings unless you slow down to under 3 mph, so you better get ready to pull over and stop the car if you need to adjust something. With Tesla you can always just swap profile and have your steering wheel, seat, mirrors, etc. move to where they should be, and that feels a lot safer than having to muck around with changing things via a touch screen or sit their tweaking controls on the side of the car seat. Smoother software Somehow despite my Model 3 being a 2018 model and probably running a Raspberry Pi compared to the hardware Rivian runs, moving around the OS in the Tesla still feels faster. With the Rivian there’s still lag just bouncing around screens with stuff sometimes taking a second or two to show up. I don’t get it. I really hope this improves on the R2, and thankfully it looks like it does, Doug DeMuro bounces around the R2’s UI here and it’s much faster than my gen 2 R1S with everything loading virtually instantly. Yay. CarPlay I’ve never had a vehicle with CarPlay, we rented a vehcile with it and it was kinda neat but Teslas and Rivians already have like every piece of software I’d want when interfacing with a vehcile (good, traffic-based maps and popular music streaming services), so with the exception of Overcast I don’t personally care about CarPlay at all. That being said, I know a ton of people do so I kinda hope Rivian looks into it even just as a little windowed experience because I think it would make a lot more people interested. Alexa is so bad About a month ago at their Autonomy Day Rivian previewed (among many other cool things) their new “Rivian Assistant”. This is sorely needed, their current system uses Alexa and. it. is. so. bad. With our Tesla, you can say “Navigate to Blah” and it will just automatically plot it and you’re off to the races. Best case with Rivian you’re like, “Alexa, navigate to Bob’s Cool Donuts in Dartmouth”, and Alexa is like “Would you like to navigate to Bob’s Cool Donuts, Dartmouth, Nova Scotia”, “Yes” where it repeats literally the only possible match back to you requiring confirmation every time instead of just… taking you there. A more typical case is “Alexa, navigate to Bob’s Donuts in Dartmouth”, “Would you like directions to Bob’s Donuts in Toledo, Ohio”. No Alexa, I want the one that’s a five minute drive, not the one a three day drive away. “Oh, okay, try being more specific next time” Better heat pump They do a decent job isolating the sound from the outside if you’re in the vehicle, but if it’s cold outside and you heat up your Rivian R1S, you can hear that sucker from a full block away in this super high pitched whine. I’ve understandably had multiple people ask “Is it okay?”. Better time placement The UX for knowing the current time in the cabin is not great. There is no clock on the main driver instrument display, and it’s in the furthest place possible on the middle display, so it’s not exactly easy to check. There’s tons of space on the driver display so I either wish they shoved it ther, or if you put in directions, I wish it showed you the current time there. Right now it just says “ETA 2:58 PM” which if you’ve been driving for 45 minutes and kinda have lost track of time is not particularly helpful, that could be in 5 minutes or in 25 minutes for all I know. It looks a bit better on the R2 (seen in MKBHD’s video) where they’re placing it on the middle display a lot closer to the driver, but I still wish they just put it on the driver display. Better second row release The R1S and many other modern vehicles have really stupid and downright dangerous second row releases, where the main door handles are electric, so it there’s an electrical issue and you need to get out of the vehicle, you obviously need a manual release. On my Tesla, there’s a (shocker) pull handle that is obvious and you can just pull to get out of the vehicle. Easy peasy (don’t worry Tesla has since changed to an inexplicably stupider, hidden design like Rivian) The R1 is incredibly stupid and you literally have to pop off trim in the rear door to get access to a cable you can yank. Yeah, good luck remembering that in dire circumstances, so I threw one of those window breakers in the back cubby. The R2 is better here, Jerry Rig Everything shows a little button patch you can pop off much easier to get to the cable, but still, just put the manual release that the front doors have, this is a basic safety feature and should not be complicated. Smaller This we know will be the case, with the Rivian R2 being about 2 feet shorter than the R1S. The R1S is a properly large vehicle, which makes it very capable, but I dunno, I do find myself wishing it was a little smaller quite often, so I honestly think if the R2 is compelling enough I might be trading in my R1. I’m so excited I genuinely think Rivian is doing such cool things, and the company behind it seems to have a real passion for building cool products instead of just sitting on Twitter all day, so I’m super excited to see what this mass-market vehicle does for them and I’m hoping for the best. Looks like they’re launching in spring (I guessed summer!) with more pricing and configuration details March 12th.
I didn't know what to put as a header so here are some iClouds (interesting clouds) in Maine I’ve had a lot of fun working with CKSyncEngine over the last month or so. I truly think it’s one of the best APIs Apple has built, and they’ve managed to take a very complex topic (cloud syncing) and make it very digestible and easy to integrate, without having to get into the weeds of CKOperation and whatnot like you had to in previous years. That being said, there’s a fair bit of work you still have to do (through no fault of Apple, it’s just that a lot of cloud sync work is application-specific), such as how to handle conflicts, how to integrate the CKRecords into your flow, responding to errors, etc. More interesting for a blog post, perhaps, I also had a fair few questions going into it (having very little CloudKit knowledge prior to this), and I thought I’d document those questions and the corresponding answers, as well as general insights I found to potentially save a future CKSyncEngine user some time, as I really couldn’t find easy answers to these anywhere (nor did modern LLMs have any idea). Apple sample project When in doubt, it’s always nice to see how Apple does things in their nicely published CKSyncEngine sample project: https://github.com/apple/sample-cloudkit-sync-engine Other awesome resources are Jordan Morgan’s blog post at Superwall, as well as the awesome work by Pointfree on their SQLiteData library which is open source and integrates CKSyncEngine as the syncing layer. These are great resources to understand how to implement CKSyncEngine which this article won’t be going over. I want to go over questions and edge cases you may encounter. Conflict resolution If you’ve used NSUbiquitousKeyValueStore (my only prior exposure to iCloud), CKSyncEngine is thankfully a lot smarter with conflict resolution (and by “conflict resolution” I mean “what happens when two devices try to save the same piece of data to the cloud”). With NSUbiquitousKeyValueStore if you had super valuable, years old data stored at key “blah” and you downloaded the app onto a new device and somehow set new data to the key “blah” (for instance, existing data hadn’t been downloaded yet) you would completely blow away the existing “blah” data, potentially jeopardizing years of data. Not great, which made me wary of storing much of value there without a ton of checks. CKSyncEngine is a lot smarter, where you’re dealing with CKRecords directly (more on that below) and thus can save metadata from them, so if you try to overwrite “blah” and your metadata is not up to date, CKSyncEngine will return a failure with the newest version of that data asking you what you want to do (overwrite your local data with the newer cloud version? tag your version with the newer cloud metadata and re-upload it so it works?), rather than blindly overwriting it. This makes it virtually impossible for a new device to come onto the scene and write “bad data” up, messing up existing data. (And serverRecordChanged is the error in failedRecordSaves you hook into!) It does beg the question though, “What do you do when there’s a conflict” and that’s what I alluded to earlier with Apple not being able to do everything for you, and you need to make some decisions here. For me, it depends on the data. For the vast majority of the data, always having the “server version win” is perfectly fine for my use case, so I overwrite the local version with the cloud version. But there’s some situations where I want to be a little choosier, for instance for integer that can never decrease in value (a good example would be how many times you’ve died in a video game), I have a system where it just chooses the higher value between the cloud version and the local version, and chooses that. You could write a long blog post just on this though, the important part is to choose the right system for your application. An app that creates a lot of singular data but rarely ever modifies it will need a dramatically different system than one that has a large, single body of data that is frequently being edited on multiple devices concurrently. And remember that CKSyncEngine being effectively a database means you can store a lot more information than the paltry 1,024 keys/1MB total limit that NSUbiquitousKeyValueStore allows, so you can create a much more robust system that’s appropriate to your app, but not necessarily any more complicated! Deletion conflict resolution Note that deletions just fire without any conflict resolution at the CKSyncEngine level; if you say to delete something with recordID "blah", CKSyncEngine will trust you know what you’re doing and just delete it (and not compare metadata or anything as it doesn’t even ask for it). CKRecord handling One of the only awkward parts of CKSyncEngine is that it operates through CKRecords, which are quite old a construct (much more Objective-C than Swift) you have to decide how to incorporate that into your existing data store. They’re basically a big old string dictionary of data with some metadata. For me, I mostly use GRDB (SQLite), and you have a nice, easy, hybrid solution where you have your local records with an extra column called something like cloudKitInfo, which is just the CKRecord distilled down into its pure informational metadata. This strips out all the CKRecord of large image and text data, and you’re basically just getting the bare essentials: the metadata fields like its record change tag for conflict resolution when you upload it If you don’t save these metadata fields you’re going to have a Very Bad Time™ when you go to upload, as your items being uploaded will have no matching metadata, so CloudKit will think you don’t have the most up to date version of that record and give you a conflict error every time. So my process generally looks like: When you get a new CKRecord from iCloud to sync with your local store, you extract all the data you care about from the dictionary fields (e.g.: item.postTitle = ckRecord["postTitle"]) into your local Swift object, and then extract the CloudKit specific metadata. extension CKRecord { func systemFieldsData() -> Data { let archiver = NSKeyedArchiver(requiringSecureCoding: true) encodeSystemFields(with: archiver) archiver.finishEncoding() return archiver.encodedData } } item.cloudKitInfo = ckRecord.systemFieldsData saveToSQLite(item) Then, when you go to upload an item after you changed it, you create a CKRecord by initializing it with your existing cloudKitInfo, then set the fields. let unarchiver = try NSKeyedUnarchiver(forReadingFrom: cloudKitSystemFields) unarchiver.requiresSecureCoding = true let restoredRecord = CKRecord(coder: unarchiver) restoredRecord["postTitle"] = myNewPostTitle This has the nice effect of letting you do basically everything in Swift, and just tacking on the necessary parts of the CKRecord to make the system work properly, without duplicating the entire CKRecord with all of the heavy data fields it may contain. Backward/forward compatibility One big worry I had was what if in version 1.0 of my app I have a structure like the following: struct IceCream { let name: String let lastEatenOn: Date } And then in version 1.1 of the app I add a new field: struct IceCream { let name: String let lastEatenOn: Date let tastiness: Float // New! } If a user has two devices, one that is updated to version 1.1 and another on 1.0, if I save a new IceCream on version 1.1 of the app with both a name of "chocolate" and a tastiness of 0.95, and sync that back to the device on version 1.0, where they eat the ice cream, then sync that back up, crucially that version of the app doesn’t know about the tastiness variable! So it might effectively sync back up IceCream(name: "chocolate", lastEatenOn: .now), and then when version 1.1 gets that, the tastiness is effectively lost data! Noooooo! How do we handle this? I dreamt up some complex solutions, but it turns out it’s incredibly easy thanks to the way CKRecord works. CKSyncEngine never documents this anywhere directly, but it obviously uses CloudKit under the hood, and CloudKit has dinstinct saving policies under CKModifyRecordsOperation.RecordSavePolicy documented here. And no matter what policy you choose (we don’t get a choice with CKSyncEngine) all of them detail the same behavior: CloudKit only saves the fields on CKRecords that you explicitly set. In other words, on version 1.0, when we create our CKRecord that represents our local data, it would look something like this: let ckRecord = // create CKRecord instance ckRecord["name"] = "chocolate" ckRecord["lastEatenOn"] = Date.now Note that we didn’t set tastiness at all, so when it goes up to iCloud, the tastiness field won’t be touched at all as it’s not present, it will just remain what it was. The only way the tastiness field would get reset is it we explicitly set it to nil. So when version 1.1 pulls down this change that version 1.0 made, the CKRecord it pulls down will still have the tastiness field intact. It’s essentially a factor that old versions of the app can only touch what fields they know exist, so no harm no foul. The only catch is you can’t go in the other direction: don’t delete tastiness in verson 1.2 of the app if earlier versions expect it to always exist. Give it some innocent default value. Enums are bad Enums are a finite set of values, so unless you’re positive that it will never change, don’t use enums in values meant to be cloud-synced. Why? Say you have this enum in version 1.0 of your app: enum IceCreamFlavor { case chocolate case strawberry } And in version 1.1 you add a new flavor: enum IceCreamFlavor { case chocolate case strawberry case vanilla // New! } What happens when version 1.0 has to decode IceCreamFlavor.vanilla? It will have no idea what that case is, and fail to decode, which you could just treat as a nil value, but if you then try to sync that nil value up, you risk overwriting the existing, good value with nil data (unlike the “Backward/forward compatibility case” above where it was a value stored in a different field, this is all operating under the same field/key). Bad. Instead, just store it as a string, and you could try to initialize an enum of known values with the string’s raw value if you desire. One instance of CKSyncEngine You can only have one instance of CKSyncEngine per CKContainer otherwise they start tripping over each other with it not being clear which instance receives the sync events. Just try to keep everything under one CKSyncEngine instance, which isn’t too hard, but can feel a bit limiting if you were wanting to have different parts of your app handled completely independently. You could have multiple CKContainers in your app (and a CKSyncEngine instance for each), but that feels messy and from what I understand not really how Apple intended containers to be used. Should you not call CKSyncEngine methods if the user isn’t signed into iCloud? Apple’s sample project still does! It seems harmless. From my testing, they get enqueued, but are never actioned upon (they never fail unlike normal CKRecordOperations, they just sit waiting forever), and then the queue is wiped when the user signs in. What happens if they sign out/sign in while your app is quit? No worries, you get the appropriate accountChange event on the next app launch. What is the difference between the account change notifications? You can either get signedIn, signedOut, or switchAccount. signedIn happens when they had no account and signed into one. signedOut happens when they had an existing account and signed out. switchAccounts is a “coalescing” one (you won’t get signedIn/signedOut and switchAccounts), where if your app is running/backgrounded you will get signedOut then signedIn if the user changes accounts, and you won’t get a switchAccounts notification. You only get switchAccounts if your app was quit and you relaunch the app at which point you’ll get the switchAccounts notification (but neither of the other two). How does state serialization work? Every time anything happens with CKSyncEngine you’re given a stateUpdate event, which you’re expected to persist to disk. This encodes the entirety of your CKSyncEngine’s state into a serialized value, so when the app launches the next time it can start off right where it was. It’s essentially a super charged git commit tag/checkpoint, so iOS knows where your CKSyncEngine exists in time (does it need to pull down any new changes?) and maintains any pending changes/deletions that might have not completed. If your app crashes part way through applying a change, your app simply will not have been issued the new “save checkpoint” notification, so the next time your app relaunches it will simply be restored to the last CKSyncEngine state you saved and retry. It also initializes synchronously, so if you had any pending items in your serialized state and you initialize CKSyncEngine, you can view your pending items immediately. Also note that if you initialize CKSyncEngine without any state serialization, you always get an “account change: signedIn” notification even if the user didn’t explicitly just sign into their iCloud account. CKSyncEngine re-initialization Per Apple’s sample project, re-initialize your CKSyncEngine (and delete any old state serialization) when either the user signs out, or switches accounts, but not when they transition from signed out to signed in, presumably because in the latter case there’s nothing really to invalidate in the CKSyncEngine when there is in the other two states. How does error handling work? Apple’s sample project indicates that there are a number of transient errors that CKSyncEngine handles automatically for you, like rate limiting issues, no internet connection, iCloud being down, etc. Nice! .networkFailure, .networkUnavailable, .zoneBusy, .serviceUnavailable, .notAuthenticated, .operationCancelled, .requestRateLimited In most of these cases it means the item just gets immediately added back to the pending items queue and CloudKit will pause the queue for a certain amount of time before retrying. Other ones, you do need to handle yourself, even if they seem like they should be automatic. A good example is quotaExceeded which you get if the user ran out of iCloud storage and you tried to save something. In this case Apple pauses the queue until the user frees up space or buys more (or after several minutes, specified by retryAfterSeconds) but does not add your item back, which seems weird to me, so just add it back. But you also can’t just add it back, as that would put it at the end of the queue, so you have to insert it back at the beginning of the queue so it’s the next item that will be retried (since it just failed). Only, there’s no API for this, so grab all the items in the queue, then empty the queue, then re-add all items back to the queue with your failed item at the front. For other failures, like quotaExceeded, they’re immediately removed from pending items once they fail, so if you want them to be retried you have to add them back manually. (Remember, the pending queue survives app restarts as it’s serialized to disk through state serialization, see above.) Embedding record types into record IDs A small point worth noting is that weirdly CKSyncEngine does not provide the actual recordType (only the string ID) when requesting the fully built CKRecords (which we need in order to tell which SQLite table the ID belongs to), so we can prepend the table to the beginning of the ID string, for instance IceCream:9arsnt89rna9stda5" so we can discern it at runtime. Let things be automatic You can manually pull/push to CKSyncEngine with fetchChanges() and sendChanges() but be careful. You can’t call these inside the CKSyncEngineDelegate methods per CKSyncEngineDelegate documentation: CKSyncEngine delivers events serially, which means the delegate doesn’t receive the next event until it finishes handling the current one. To maintain this ordering, don’t call sync engine methods from your delegate that may cause the engine to generate additional events. For example, don’t invoke fetchChanges(_:) or sendChanges(_:) from within handleEvent(_:syncEngine:). You can get stuck in weird, infinite loops. In practice I’ve found CKSyncEngine is really great at queuing up changes almost instantly without you having to babysit it and manually pull/fetch, just let it do its own thing and you should get great performance and not run into infinite loop bugs by trying to do things yourself. (Also note that the quote is kinda confusing, but it refers to those fetch and send changes methods specifically, adding new items to the queue within the delegate is fine and something Apple does in their sample project.) Zone deletion reasons When a “zone was deleted” event occurs, ensure you inspect the reason, of which there are 3: deleted means we (the programmer) did it programmatically, commonly done as it’s the easiest/quickest way to delete all the records in a zone purged means the user went through the iOS Settings app and wiped iCloud data for our app, which per Apple’s recommendation means we should delete all local data as well (otherwise it would just sync back up after they explicitly asked for it to be wiped, likely because they were running low on storage), and in the purged case we also delete our local system state serialization change token as it’s no longer valid (this is a full reset). encryptedDataReset means the user had to reset their encrypted data during account recovery and per Apple’s recommendation we treat this as something the user likely did not want to have to do, so reset/delete our system state serialization token and reupload all their data to minimize data loss. Responding to account status changes CloudKit also has a NotificationCenter API for monitoring account changes (Notification.Name.CKAccountChanged) but you don’t really need this at all if you’re using CKSyncEngine, everything comes through the accountChange event that the NotificationCenter API would otherwise provide (just distilled down to signedIn, signedOut, or switchAccounts where the NotificationCenter API is a bit more granular). You can use both, but I haven’t found a need. Note that you should react appropriately to the kind of account change that occurred. For instance, following Apple’s sample project recommendation, if you receive a notification that they signedOut, that could mean they signed out of their iCloud account to give their sibling an old iPhone to play around with, and they may have private data they don’t want their sibling to have access to, so we should take this as a queue to delete local data (if they want the data back, when they sign back into iCloud it will be re-downloaded). Also note you can get the status of the user’s iCloud account at any point using try await CKContainer.default().accountStatus(). Batch sizes CKRecords can be a max size of 1 MB, but also note that uploaded batches are limited to 1 MB in size, so if you enqueue 10 items to be uploaded, each 1 MB, iCloud will upload them in sequential, 1 MB batches (I sort of expected a single, 10 MB upload that included all the records). So that’s uploads, but conversely on the download size, iCloud is happy to download batches much larger than 1 MB in size! I’ve comfortably seen 100 MB+, which can happen when syncing an initial, large library. Conclusion If I think of any more notes I’ll add them, but hopefully a bunch of these things (that I had to find out through trial and error) save some other folks time when implementing CKSyncEngine!
Okay, I have to be doing something astronomically stupid, right? This should be working? I’m playing around with an App Clip and want to just run it on the device as a test, but no matter how I set things up nothing ever works. If you see what I’m doing wrong let me know and I’ll update this, and hopefully we can save someone else in the future a few hours of banging their head! Xcode App Clips require some setup in App Store Connect, so Apple provides a way when you’re just testing things to side step all that: App Clip Local Experiences I create a new sample project called IceCreamStore, which has the bundle ID com.christianselig.IceCreamStore. I then go to File > New > Target… > App Clip. I choose the Product Name “IceCreamClip”, and it automatically gets the bundle ID com.christianselig.IceCreamStore.Clip. I run both the main target and the app clip target on my iOS 18.6 phone and everything shows up perfectly, so let’s go onto actually configuring the Local Experience. Local Experience setup I go to Settings.app > Developer > App Clips Testing > Local Experiences > Register Local Experience, and then input the following details: URL Prefix: https://boop.com/beep/ Bundle ID: com.christianselig.IceCreamStore.Clip (note thne Apple guide above says to use the Clip’s bundle ID, but I have tried both) Title: Test1 Subtitle: Test2 Action: Open Upon saving, I then send myself a link to https://boop.com/beep/123 in iMessage, and upon tapping on it… nothing, it just tries to open that URL in Safari rather than in an App Clip (as it presumably should?). Same thing if I paste the URL into Safari’s address bar directly. Help What’s the deal here, what am I doing wrong? Is my App Store Connect account conspiring against me? I’ve tried on multiple iPhones on both iOS 18 and 26, and the incredible Matt Heaney (wrangler of App Clips) even kindly spent a bunch of time also pulling his hair out over this. We even tried to see if my devices were somehow banned from using App Clips, but nope, production apps using App Clips work fine! If you figure this out you would be my favorite person. 😛
More in technology
Well, well, well, well, well, well, well, well, well, well, well, well, well, well, well. We're back. Sorry. We've been watching the onslaught of vulnerabilities flood the internet. Every man, dog, and their grandmas (apparently?) are now using LLMs to find and reproduce vulnerabilities - it’
You want less of them. That’s the reason. You may find that it’s too hard to stop people from doing the thing, literally blood, sweat, and tears trying to prosecute people, but that’s a different thing.
Solitaire Alone Together I made a new game. It's called Solitaire Alone Together. It's Windows 98 solitaire, but you can play with everyone else on the internet. Read the full post on my blog! Here's a raw link, if you need it: https://eieio.games/blog/solitaire-alone-together
This post is a living diary of all the times I messed up something with my website in a funny way. I value those who have the confidence to own their mistakes and share the learning with others, and so this is me doing just that! That Time I Accidentally Made a Tarpit That Time I Accidentally Made Really Large Headers That Time I Accidentally Made a Tarpit Back to Top A "tarpit" is an unofficial term used in computing to describe an intentionally slow response to a request. In these modern times many people are using tarpits as a way to combat the relentless theft of data by AI companies, although there's little to no evidence of that actually being in any way effective. I don't use tarpits, at least not intentionally, but there was that one time when I accidentally created a tarpit and trapped all visitors in it. As I've shared previously, I refuse connections from IP addresses that are blocked or belong to a blocked subnet, and I enforce this firewall during the TCP handshake. The logic here is straightforward: there's no reason to waste resources doing a TLS handshake, accepting an HTTP request, and then rejecting the connection if I already know I'm going to reject it at the earliest step. At the time, the code worked like this: the HTTP server would repeatedly call the Accept() function below expecting a new connection. I've added some comments to help explain the logic. func (l *firewallListener) Accept() (net.Conn, error) { // Accept the connection from the TCP listener. This blocks until there is a connection to accept or the listner was closed. conn, err := l.l.AcceptTCP() if err != nil { return conn, err } // Separate the IP address out from the remote address (which includes the port) ip := utils.SocketStringToIPAddress(conn.RemoteAddr().String()) if ip == nil { return nil, nil } // Check if it's blocked, if so close the connection and return a refuseError if IsBlocked(ip, true) { conn.Close() return nil, &refuseError{} } // Otherwise return the connection on to the HTTP server return conn, nil } If the incoming connection was from a blocked IP then I'd return a refuseError. I need to use a specific error interface because the HTTP server will halt if it encounters a non-temporary error from the call to Accept(), so I need to return an error that satisfies the definition of a temporary error. I defined refuseError like this: type refuseError struct{} func (e *refuseError) Error() string { return "." } func (e *refuseError) Timeout() bool { return true } func (e *refuseError) Temporary() bool { return true } func (e *refuseError) Is(err error) bool { return err == context.DeadlineExceeded } This did accomplish the goal of rejecting connections before the TLS handshake for blocked addresses, but it had one really unintended and difficult to track down side-effect. Accepting connections is done serially, after which servers typically then process that request on a dedicated thread (or in Go's case a goroutine). This means that any delays during the accept loop will block all incoming connection. What I had missed while reviewing the code for Go's HTTP server is that when it receives a temporary error from Accept() is that while it doesn't abort, it does sleep for up to a maximum of 1 second. This sleep blocks the entire server for all incoming connections. You can see a trimmed copy of the code that does this below, with some marks I've added which I will explain. // src/net/http/server.go // Copyright 2009 The Go Authors. All rights reserved. // Use of this source code is governed by a BSD-style // license that can be found in the LICENSE file. for { // (1) rw, err := l.Accept() if err != nil { if s.shuttingDown() { return ErrServerClosed } // (2) if ne, ok := err.(net.Error); ok && ne.Temporary() { if tempDelay == 0 { tempDelay = 5 * time.Millisecond } else { tempDelay *= 2 } if max := 1 * time.Second; tempDelay > max { tempDelay = max } s.logf("http: Accept error: %v; retrying in %v", err, tempDelay) // (3) time.Sleep(tempDelay) continue } return err } connCtx := ctx if cc := s.ConnContext; cc != nil { connCtx = cc(connCtx, rw) if connCtx == nil { panic("ConnContext returned nil") } } tempDelay = 0 c := s.newConn(rw) c.setState(c.rwc, StateNew, runHooks) // before Serve can return // (4) go c.serve(connCtx) } At mark 1 the server calls the Accept() function, this is the exact function that I defined above where I might return a temporary error. At mark 2 it checks if an error was returned, and if so if that error is temporary. If there was a temporary error, at mark 3 it sleeps for an increasing amount of time up-to 1 second, otherwise, at mark 4 it processes the connection on a dedicated goroutine, which allows the server to accept the next connection. I'm not entirely sure why the Go developers added this sleep delay and the change when it was introduced doesn't provide any meaningful insight. Regardless, it caused significant latency connecting to my website when a flood of rejected requests was coming in. It just goes to show how important it is to write meaningful commit messages, because you never know when somebody might come back years later wondering "why was this done?". I sure home I don't come to eat those words later. Coincidentally, you can actually see this happening if you look carefully at one of the metric graphs I shared in my first post about my server's security model: Securing My Web Infrastructure. This is the graph I shared in that blog post and while I didn't know it at the time, the fact that these request spikes all cap-out at around 60 requests per minute was not a coincidence. These requests were not being made with a limit in mind, attackers rarely ever care about things like that, instead it the accidental tarpit I had created. The downside to this was that while the malicious requests were being rate-limited, all requests were being rate-limited, up to a point of taking so long they timed out. The Fix Fixing the issue was relatively straightforward enough. Instead of returning a temporary error to the HTTP server during the accept loop, just don't return anything at all and wait for the next valid connection. func (l *firewallListener) Accept() (net.Conn, error) { for { conn, err := l.l.AcceptTCP() if err != nil { return conn, err } ip := utils.SocketStringToIPAddress(conn.RemoteAddr().String()) if ip == nil { return nil, nil } if IsBlocked(ip, true) { conn.SetLinger(0) conn.Close() continue } return conn, nil } } Now, when the HTTP server calls Accept(), the only time it returns is with a connection from an IP that isn't blocked, or if there genuinely is an error. No more sleep delays, no more excessive timeouts. That Time I Accidentally Made Really Large Headers Back to Top For about 10 years now all major browsers have support for a security feature known as a Content Security Policy or CSP. A CSP is an HTTP header provided by the server that instructs the browser on where it can load assets from, this could be scripts, images, stylesheets, fonts, etc. The objective of using a CSP is to prevent against injected HTML that tries to load assets, such as a malicious Javascript file, from a remote source. With so much user-provided content being available online, it's very possible for this to happen without an attacker compromising the entire web server. CSP protects against that by saying "scripts can only be loaded from these domains". That's a really simplified way of looking at it, anyways. My web server supports injecting the CSP header automatically, but before I go on I need to explain a little bit about the structure of my web server. When an incoming HTTP request is accepted (having passed all firewall checks and assertions), we look at the destination host for the request. This can either be the value of the Host header or as specified during the TLS handshake. We then look at a map of hosts to apps. Apps are just an interface that accept a few methods: type App interface { Cleanup() ReloadConfig() ServeHTTP(rw http.ResponseWriter, r *http.Request) Setup(dataDir string) error Shutdown() } One of the apps is the Proxy app, which is a reverse proxy - it accepts the incoming HTTP request and then proxies it on to another host. This is a very common design, especially with increasingly complex TLS setups. Because each app is unique to a host, and different hosts have different requirements for CSP rules, the proxy app includes a CSP preset that we use to build the header value, or skip it entirely. When the proxy app was going to copy an HTTP request to the downstream host, it would build the CSP header, however there was a slight bug... func (a *App) ServeHTTP(rw http.ResponseWriter, inRequest *ht2.Request) { // --snip -- if a.CSP != nil { a.CSP.ConnectSrc += " " + inRequest.Origin } CopyHttpRequest(inRequest, outRequest, rw, CopyHttpRequestOptions{ Origin: inRequest.Origin, Csp: a.CSP, Cors: a.CORS, AddHeaders: !a.SkipHeaders, UseHTTP3: a.UseHTTP3, InsecureTLS: a.InsecureTLS, }) } I'm really unsure as to what I was doing with the line to append to the ConnectSrc, but the impact is that I'm appending to a variable that lives on the App, rather than a variable that is per-request. This meant that every time there was a request to the app, any request at all, the origin would be appended to the header value. This went on for quite a long time unnoticed and unresolved, largely because I am constantly tweaking and tinkering with my web server, after all, it's how I made having a website fun again. Each time I restarted the server process, the header value would be reset, but only for it to continue to grow and grow. Eventually, after a period of being busy with other matters, the server process stayed running for long enough that the header value grew too large and HTTP clients began to reject it. There is no defined maximum for an HTTP header value, however most HTTP clients use 100KiB, which is perfectly reasonable, and this header value would continue to grow well beyond that. Diagnosing this issue turned out to be difficult as tools like Curl would fail with errors relating to entities being too large, but stopped short of saying what specifically. I eventually used openssl s_client to send an HTTP request by hand and observed my terminal window being filled with a domain name repeated thousands of times. Looking at the commit history, it was really unclear why I added the culprit lines of code. The commit message just says "Improved CSP support". It just goes to show how important it is to write - hey look it's those words I'm now having to eat! The Fix The fix was to just delete those three lines of code. Yup, it really was that simple, and fixing this bug actually made a larger positive impact than I had expected, as it was immediately clear when I fixed the bug by looking at outbound network bytes: So much traffic was being wasted on excessive header sizes. You might look at these mistakes I've made and think "wow, Ian, these are some obvious mistakes, I never would have made them!" to which I say "good for you!" with the utmost sarcasm and disdain. I enjoy making and refining software, and making anything means making mistakes along the way. Each time I make mistakes such as the ones above, I improve my skills of investigation, diagnosing, and repair. Skills that, judging by my peers in the industry, seemingly everyone is quickly willing to throw away because a robot does it "better" than you. Header Image: "Car accident on the Ffestiniog to Bala road. Nobody was hurt" by Geoff Charles, CC BY-SA 4.0, via Wikimedia Commons.
Back in 2021, I wired up data from Buienalarm and Buienradar through Node-RED and a big pile of Jinja2 templates to get a rain forecast graph on my Apple Watch: eight Unicode block characters showing the next two hours in 15-minute chunks, glanceable without unlocking the phone. It worked, and I used it every day […] The post Buienwatch, a custom Home Assistant integration for Buienradar and Buienalarm graphs on your Apple Watch appeared first on Style over Substance.