The Covert Family Website

**Smarter Authentication**—How often are you prompted for your administrator password? Perhaps it’s not as often as we are, given the amount of software we install and test, but we’re willing to bet that you blithely type your password whenever prompted without the slightest thought about what will happen next. (That’s true of us most of the time too!) In Leopard, therefore, we’d like to see serious consideration given to how often authentication requests are made - with an eye to reducing the number to the point where users are more likely to pay attention to them, and to how the authentication requests are made - with thought given to making them more explicable. One possibility might be to create security levels, with a different type of authentication request for each level and with the necessary user action becoming more involved for higher security levels. So an installer that wants to install an application in the Applications folder would require relatively simple authentication, but if that installer also wanted to install a kernel extension, the action required to authenticate would be more complex (and would be required to inform the user more thoroughly about what it intends to do).

**Service Management**—We appreciate the utility of services, but frankly, the entire situation is a mess. Any application can register a service, cluttering the Services menu with an insane number of services, many of which hijack keyboard shortcuts or are impossible to figure out. We’d like to see Leopard provide a way for users to manage which services are available, control their keyboard shortcuts, and learn more about the functions that the services actually provide. This might entail developers adding metadata to their applications with service descriptions, but users should be able to add their own descriptions as well. Also, services should be made available through some other mechanism than the hierarchical Services menu within the Application menu, which is clumsy to access and which few users ever even notice; for example, imagine if you could specify a few services as favorites and access them from a full-fledged Services menu (which could be just an icon) in the menubar. (Peter Maurer’s shareware Service Scrubber[41] is a good interim step, but this is the sort of operating system-level control that should be provided by Apple.)

[41]

**Hotkey Manager**—There are numerous ways in which a keyboard shortcut can be defined in Mac OS X: hard coded within applications; customized within applications; services; automation utilities like iKey, Keyboard Maestro, and QuicKeys; launchers like LaunchBar and DragThing; and Mac OS X’s own Keyboard & Mouse preference pane. With so many possibilities, it can be nearly impossible to figure out what a given keyboard shortcut will do, and sometimes keyboard shortcuts stop working for inexplicable reasons. Leopard should rationalize this situation as much as possible by having the Keyboard & Mouse preference pane become a central clearinghouse for all registered keyboard shortcuts.

**Active Security Agent**—Every so often, there’s a huge fuss in the Mac world about some piece of software sending data back to the mother ship, secretly installing an input manager, or generally doing things that it shouldn’t. As much as we approve of software like Objective Development’s Little Snitch[42], and firewalls like DoorStop[43] from Open Door Networks, and IPNetSentryX[44] from Sustainable Softworks, we’d like Leopard to include an active security agent that would build up a profile of standard patterns of use and warn the user when something seemed to be deviating from those patterns or behaving in ways that are known to be dubious. The Mac has long had a reputation for being highly secure, but it’s safe to say that the concentrated attention of less savory elements would undoubtedly reveal vulnerabilities, and a gram of prevention is worth a kilo of cure.

[42]
[43]
[44]

**Seamless Network Usage**—It’s a little hard to pin this wish down, but it seems that using network-based resources like file servers or printers is still too fussy. The spinning pizza of death is a commonplace sight when working with network resources that may be slow or unavailable, and while some of that is undoubtedly unavoidable, it would be great to see Leopard make network usage more seamless. Perhaps that means checking network connections in the background when they’re not being used to make sure they’re available when requested, or providing error messages without waiting 2 minutes when a server connection disappears. Or perhaps it means providing some sort of status display that the user could use to determine whether or not a network resource was really available without having to try a connection that won’t work. Improving Leopard’s behavior in this area will be left as an exercise to readers at Apple.

**Better Multiple Monitor Awareness**—Most of us here at TidBITS use two monitors when we’re not on the road, meaning we maximize our workspace by attaching two monitors to a desktop computer or by adding a second monitor to a laptop. If we want to use Apple’s Dock, though, we sometimes get frustrated, since logical positions for the Dock on a single monitor don’t always map well to sensible positions for two displays. We can use Marcel Bresink’s free TinkerTool[45] to position the Dock at the top of the screen, but it would be nice to see Leopard enable the Dock to live on any edge of any display, if multiple displays were present. Another option that would make multiple monitor fans happy would be the capability to show the same menubar on both screens. That way, the menubar would always be above the current window, no matter which screen contained that window.

[45]

**Menubar Icon Management**—Most users have a lot of icons at the right side of the menubar. Of these, some are controlled by preference panes, and others by options in application preferences, plus there are some, like the Script menu icon, that seem to have no visible interface for adding and removing the icon from your menu. Some can be removed by Command-dragging the icon off the menubar; others can’t. (Those of us who never use Spotlight from the menubar wish it were in the former category.) All this is by way of suggesting that Leopard should standardize and centralize how menubar icons are added and removed; it’s fine to provide multiple approaches, but having one place to turn off all the unnecessary ones would be a boon.

**Extensible Location Manager**—Mac OS 9 had a built-in Location Manager that enabled users to switch a number of settings all at once when they moved their laptop from one location to another. In Mac OS X 10.4 Tiger, changing your location setting using the Location submenu of the Apple menu adjusts only your network settings. That’s a good start, but unlike Mac OS 9’s Location Manager, it doesn’t affect other preferences you may want to change depending on where you’re located, such as your default printer, SMTP server, time zone, sound level, and Energy Saver settings. A third-party product called Location X[46] offers most of these options, but it’s inexcusable that Mac OS X’s built-in Location support is still so far behind where it was in Mac OS 9.

[46]

And while we’re wishing, let’s go one step further: why put the effort into choosing a location when the Mac can do it for you? As soon as you connect to your AirPort wireless network at home, for example, all of your location preferences could be enabled. Or perhaps your Mac OS X firewall settings could be beefed up when you connect to a T-Mobile or other public Wi-Fi network? (Location X also has this feature, called AutoLocate.) Computers are designed to automate silly tasks, right?

**Widgets Outside Dashboard**—Dashboard makes a lot of tasks easier, but its main problem is modality: you must switch into Dashboard, perform a task, and then switch back to your regular working environment. If you take a simple tool like the Calculator, it requires more steps (and more time) to copy and paste a result from Dashboard’s calculator than from the stand-alone version in your Applications folder. How is that an advantage? So it should be possible to use any widget on its own, without having to switch into the Dashboard “layer” of Mac OS X. It’d be a great step forward in usability. You can already accomplish this with the Amnesty Widget Browser[47], but it shouldn’t require an extra purchase to make widgets usable.

[47]

**Startup Item Manager**—The days of Apple’s Mac OS 9 Extension Manager are long gone, but the need for an extension or startup item manager is not. We have system-wide startup items, account-specific login items, input managers, kernel extensions, and goodness knows what else. As such, it’s near-impossible for any mere mortal to figure out exactly what non-Apple code is loading at any given time. To help users improve performance, troubleshoot problems, and enhance security, we’d like Leopard to offer a unified interface for managing all types of third-party code that can execute without the user explicitly launching it.

**Smarter Hard Disk Usage**—With Time Machine storing multiple snapshots of your data over time, the hard disks in today’s Macs are going to fill up fast. Mac OS X needs plenty of free space to generate swap files and other invisible cache files, so we’d like to see three smart improvements to how storage is handled.

The first is dynamic repartitioning, a feature that already exists but is not accessible to average users. Apple’s Boot Camp Assistant creates a new partition on your hard disk for Windows to use, without requiring you to reformat your hard disk or jeopardizing any of your existing data. If you decide to stop using Boot Camp, the utility can remove the partition and return your drive to its original state. Disk Utility should include an interface to do the same thing with Mac partitions, and that capability should include resizing partitions if the need arises. There are already some ways to pull this off with command-line hacking, and several third-party utilities offer dynamic repartitioning (although they’re slow and awkward to use). We’d like to see Leopard make the process faster and easier. Also, since dynamic repartitioning involves having all your data concentrated in one area of the disk so as to leave a large contiguous empty space in the remainder, we’d get a defragmentation facility as a bonus.

The second improvement is a better early-warning system for when your free disk space is almost gone. By the time Mac OS X pops up a warning dialog, bad things have already started to happen: performance slows down, and you can’t burn optical discs (because there isn’t enough space to create a disk image, a problem that Roxio’s Toast[48] works around quite nicely). In worst-case situations, you could be able to run an application or system update installer but not be able to reboot the machine successfully when the installer is finished. We’d like to see Disk Utility or some other background process monitor the space-related health of the hard disk. And Apple could do worse than to build in a utility similar to the excellent Disk Inventory X[49], which reveals what’s eating your free space.

[48]
[49]

And lastly, we’d like a bit more control over the Trash. We’d like to see the Empty Trash item in the Finder menu become hierarchical so we could choose which volume’s trashed files are erased. For example, if you have a USB flash drive mounted on the Desktop, and you choose Empty Trash in Tiger, the trash on the startup volume is erased as well, which may be undesirable. Another idea would be a feature that lets you set parameters for automatically deleting files over time when the disk space was needed. It could start with, for instance, QuickTime files that have been in the Trash for more than 3 months. Presumably, Time Machine’s tracking of deleted files would enable you to go back and rescue a file that you inadvertently trashed long ago and was automatically deleted.

**Sanctioned Plug-in Architecture for Mail and Safari**—Developers have created numerous plug-ins and extensions for Mail and Safari that add valuable features or resolve interface deficiencies. The problem is, Apple doesn’t officially provide a plug-in architecture for either program. There are no documented APIs for plug-ins and no developer support, so developers trying to add features have to use trial and error - and risk causing crashes or other application misbehavior (see “Are Input Managers the Work of the Devil?”[50]). Apple does offer a framework for adding Internet Plug-Ins (for adding new content types to Safari and other applications that use WebKit), but what’s needed is a full-blown extension API along the lines of that found in Firefox and Thunderbird.

[50]

**Nicknames in Mail**—Mail’s Previous Recipients list keeps track of everyone you ever send email to, not just those you plan to correspond with again. As a result, when you use the auto-completion feature to address a message, chances are good that you’ll get the wrong one accidentally. You can prune the list manually, but it’s a pain. We’d like to have the capability to turn off Previous Recipients altogether and instead manually specify short nicknames for frequently used contacts (as in Eudora).

**Easy File-, Folder-, and Volume-Level Encryption**—FileVault stinks. Even assuming that Apple has worked out all the bugs in the initial versions, the mere concept of encrypting the user’s entire home folder is flawed, since very few users care about encrypting their photos, movies, and music, which likely account for the bulk of the data in most home folders. Plus, because FileVault relies on a sparse disk image file behind the scenes, backup strategies must explicitly ignore that file and instead look only at the contents while the disk image is mounted (otherwise, receiving a single email message would cause the entire multi-gigabyte disk image file to require backup). There’s no need for such a blunt instrument, and Leopard could easily apply the technology behind FileVault to individual files or folders, enabling us to encrypt only the data that we actually need encrypted. With some adaptation, it could also enable the encryption of an entire disk, which would be ideal for USB flash drives, iPods, and other removable storage devices that might carry sensitive data.