Hi all, I’m not a developer, but I’m hoping someone with iOS system or network experience can help me understand some very persistent and unusual behavior on my iPhone. I’ve gathered system logs and app-level diagnostics and would really appreciate insight from anyone familiar with daemons, VPN tunnels, or MDM behavior on Apple platforms. Summary of Issues Over Time March 2025: Most apps begin logging out automatically when closed April 2025: Passwords across apps and browsers begin failing May–June 2025: Gmail password reset emails stop arriving (even though other email works) These symptoms suggest something affecting secure sessions, DNS routing, or background data handling. I began running diagnostics and found unexpected system and network behaviors: Examples: com.apple.mobile.lockdown.remote.trusted file_relay.shim.remote pcapd.shim.remote webinspector.shim.remote bluetooth.BTPacketLogger.shim.remote On a normal, non-jailbroken device, I wouldn't expect so many .shim.remote or .diagnostic services to be active. Is this expected on iOS 18.5? The binary /usr/sbin/scutil appears to be missing. This breaks commands like: scutil --dns scutil --proxy scutil --nc list On a standard iOS device, is it even possible for scutil to be removed or disabled? App Behavior and Config Locking (Cloudflare WARP Log) From the logs of the Cloudflare WARP app (not enterprise-managed): The app repeatedly forces VPN tunnels to reconnect or restart by injecting dummy URLs (force OS to restart the network extension process). It tries to load policy configuration from MDM and Teams APIs (even though no MDM appears in Settings). Many config items are marked as: locked: true, visible: true including: DNS logs Fallback DNS Trusted WiFi settings The account is labeled as: WarpAccountRole.child which may explain some restrictions — but I’ve never set this manually. This seems more advanced than what the standard WARP app does. Could a provisioning profile or side-loaded config be applying these? Key Questions for the Community Are ~50 remote diagnostic services (.shim.remote) normal on iOS 18.5 stock devices? Could a VPN app (e.g. WARP) or hidden config enforce flow-switching across interfaces like ipsec, awdl, and pdp_ip, even when not visibly active? Can a provisioning profile or managed config enable services like file_relay, pcapd, or webinspector silently — without any visible MDM profile? Has anyone seen scutil or other network tools missing on a stock iPhone? What could cause this? Does WARP in MASQUE mode normally lock DNS settings and force tunnel restarts — or could this indicate tampering? If anyone on iOS 18.5 / iPhone17,1 can share their remotectl_dumpstate output, I'd love to compare. Happy to share sanitized logs or run more tests if helpful. Thank you for any insights — especially from those familiar with internal services, VPN frameworks, or supervised profiles. get-network-info.txt remotectl_dumpstate.txt assetsd.diskwrites_resource-2025-06-25-221428.json More network info.txt linkText](https://www.example.com/)

Since a recent macOS update (around one month ago), I’ve been experiencing a random issue on my MacBook Air (2023, M2). After the device enters sleep mode and I try to wake it, sometimes the screen stays black with only the cursor visible. The issue occurs randomly — not every time — but frequently enough to impact daily use. The system becomes completely unresponsive, and the only recovery method is a forced restart (holding the power button). Steps to Reproduce: 1. Leave the MacBook idle until it enters sleep automatically. 2. Wait for 10–30+ minutes. 3. Attempt to wake it using the keyboard, trackpad, or by opening the lid. 4. Randomly, the system fails to wake properly: screen turns on, shows a black background with a movable cursor, but nothing else appears. Expected Result: The system wakes normally and restores to the previous desktop session. Actual Result: The system randomly freezes on a black screen with a visible cursor. No user interface or login prompt appears. Requires a hard restart. System Information: • Device: MacBook Air 13”, M2, 2023 • macOS Version: [Insert exact version, e.g., macOS Sonoma 14.5] • Issue Since: Around one month ago (possibly after latest macOS update) • Peripherals: [Mention any external devices if applicable] • Reproducibility: Random (approximately 30–50% of the time after longer sleep) Additional Notes: • Issue is not consistent; sometimes the system wakes as expected. • Occurs regardless of whether on battery or plugged in. • No external monitors or USB accessories are connected when this happens.

Over the past few months, I’ve been experiencing persistent, abnormal behavior on my iPhone. Here's a short timeline: March 2025: Most apps log me out every time I close them. April 2025: Stored passwords suddenly begin failing across apps and websites. May–June 2025: Password recovery emails from Gmail accounts no longer arrive — suggesting that Gmail itself may be compromised or blocked/intercepted. Given the escalation, I ran several diagnostics and extracted system-level logs. Below is a structured summary of findings that point toward potential remote access, network traffic rerouting, and possibly hidden use of Bluetooth or debugging interfaces. ##1 Source: remotectl_dumpstate.txt Notable entries: com.apple.mobile.lockdown.remote.trusted and .untrusted com.apple.mobile.file_relay.shim.remote com.apple.webinspector.shim.remote com.apple.pcapd.shim.remote com.apple.bluetooth.BTPacketLogger.shim.remote com.apple.mobile.insecure_notification_proxy.remote This volume of .shim.remote and diagnostic services appears highly irregular for a non-debug, non-jailbroken device. 2. Skywalk Network Flows and Unusual Routing Source: skywalk.txt Dozens of flowswitch entries across interfaces like: ipsec0-7, pdp_ip0-2, en0-2, awdl0 Apps such as Gmail, ChatGPT, Preferences, and com.apple.WebKit are marked as defunct, yet persist in flow tables. Two specific daemons — replicatord and siriactionsd — appear on nearly every interface, in both QUIC and TCP6 traffic. skywalkctl flow-route shows multiple external IP paths, with flows routed through ipsec7, owned by kernel_task.0 — which could indicate system-level tunneling. 3. System Anomalies and Resource Behavior Inaccessible System Network Tools Source: get-network-info.txt All scutil calls fail (/usr/sbin/scutil does not exist). This blocks access to: DNS configuration (scutil --dns) Proxy and VPN status (scutil --proxy, --nc list) Reachability checks (scutil -r www.apple.com) Key Questions for the Developer Community Are >50 remote .shim.remote services typical on iOS 18.5 (release build)? Or does this suggest tampering, an MDM configuration, or debug provisioning? Could a misconfigured VPN or MDM profile enable persistent flow-switching across multiple interfaces (e.g., ipsec, pdp, awdl) and reroute app traffic such as Gmail? Is it possible for a test or developer certificate to silently side-load a background daemon, or trigger services like pcapd or file_relay, without showing in Profiles or Settings? Has anyone else seen the scutil binary missing or inaccessible on a stock iPhone? Could this be a sign of intentional lockdown or system modification? If anyone on iOS 18.5 / iPhone17,1 can share their remotectl_dumpstate output, I'd like to compare the service count and see if this behavior is reproducible. I’d appreciate any insight from those familiar with Apple’s system daemons, skywalk internals, or network service behavior. Happy to share sanitized logs or run additional diagnostics if needed. Thanks in advance. get-network-info.txt remotectl_dumpstate.txt assetsd.diskwrites_resource-2025-06-25-221428.json

I'm building a Live Activity using ActivityKit in iOS, and I'm trying to understand how apps like Uber or Lyft manage to keep the Dynamic Island always in its expanded state, without transitioning through the compact phase. In my implementation, the Live Activity always starts in the compact state, and only expands temporarily when I interact with it. I've tried the following: Updating the ContentState frequently using activity.update(using:) I tried updating the activity every 1 second, but it didn’t make a difference. Leaving the compactLeading, compactTrailing, and minimal regions empty using EmptyView() — also didn’t change the behavior. Delaying the initial update by 1 second — no effect. What I'm trying to figure out: Is there any way to programmatically force or request the Dynamic Island to stay in the expanded state? Could this behavior be achieved through push updates, using apns-push-type: liveactivity and a high priority (apns-priority)? What I’m trying to achieve is similar to the behavior shown in the images below — the apps do not transition to the compact island, but instead displays the expanded view immediately. Example:

Hi, After installing Macos 26 Beta on my Mac Mini M1 it doesn't boot. On the front panel there is an orange blinking light. The monitor doesn't recognize it. In DFU mode my other Mac Mini (M4) recognizes it but I can't restore it from Configurator (see print). Thanks for your help.

In the software update in the settings if I open the software update, which is showing that could not update because I accidentally turned off the beta updates and it is showing error or something

I’ve recently updated to ios 18.4.1 and I have problems with the internet. Things download painfully slow, an application that used to download in 10 seconds is now downloading in 2 minutes. Videos tend to stop at some point and when i fast forward them it stops to load a little when on the previous version it would work fine. It feels like my internet aged 30 years in 10 minutes. I’ve tried on other phones (not iphones) and it works just fine. Is it from the update or is it just my internet?

After the update of the Xcode to latest version, I’m getting “No Such Module Unity Framework” as error. the complete information is below. I had to update the Xcode and the O.S as per the Apple Requirement from my older version of 14.x to latest 16.3. I had no issued running the Unity within my iOS App till the recent update. Previous Setup: Unity was successfully integrated into this iOS app and running fine before the update. As it was working till the Xcode version 14.3, i have not changed any code relevant to Unity. What I’ve Tried: a. Added UnityFramework.framework to “Link Binary with Libraries” and marked it as “Embed & Sign”. b. Verified Framework Search Paths include $(PROJECT_DIR)/UnityProject/build/Debug-iphoneos c. Cleaned build folder, deleted Derived Data d. Checked [CP] Embed Pods Frameworks step in Build Phases Stuck On: Xcode still throws "No such module 'UnityFramework'" — it’s as if the framework isn’t being built or seen from my main project. Request for Help: Has anyone encountered this issue post-Xcode 16.3 update from 14.x. I’d really appreciate any guidance, updated workflows, or even a checklist of steps for properly integrating Unity into an existing iOS app with the new Xcode build system.

Right now, Apple’s iCloud Keychain (where saved passwords are stored) relies on the same authentication methods as your iPhone in general: Face ID or device passcode. This means: • If Face ID fails, it falls back to the device passcode. • Anyone with your passcode can unlock not only your phone but also your saved passwords by allowing the phone to go into the “enter iPhone password to view passwords” on the password app. Why this matters if someone knows or coerces your device passcode, they could potentially: • Bypass Face ID • Access sensitive password data • Compromise multiple accounts and could access all passwords I have saved on the password app. So, Let’s say my girlfriend knows my phone passcode, she pretty much then has access to all other password and backup codes I have saved on the password app. For this security vulnerability I believe it would be beneficial to introduce more advanced security options for accessing the Password section on iPhone. Specifically, 1. The ability to require Face ID only, without fallback to device passcode. 2. An option to set a dedicated password just for accessing the Passwords section (separate from the phone passcode). 3. Additional optional layers of protection, such as two-factor authentication or a biometric lock, that would prevent access even if someone knows the device passcode. These features would provide an extra level of security for users who are concerned about unauthorized access if someone gains access to their phone passcode.

Dear Apple: After upgrading to version 26 of the iPhone, when broadcasting using the local name, the iPhone 15 Pro Max was truncated to iPhone 15 Pro Ma with a type of 08 (shortened), but the overall length of the broadcast did not exceed 31 bytes

I'm running into issues with iOS respecting the HTTP 410 "Gone" response type. Setup: Using the native iOS Calendar app, add a new subscription calendar. "Add Subscription Calendar" Add the URL of a ICS calendar subscription that you control, e.g. https://mywebsite.com/userfeeds/23/cal.ics Make sure to select the "Account" option and choose "On My iPhone/iPad". Set the query amount to 15 mins. Calendar events show as expected, device queries the latest updates from the server every 15 minutes. Server returns HTTP 200 with the .ics contents. Now, assume there is a need for the feed to end - maybe the user unsubscribed to mywebsite.com. There is currently no way for the mywebsite.com server / response to tell the device the feed has ended and it should stop requesting. If the user forgets to go to calendar and manually unsubscribe the device will continually ping the server every 15 minutes indefinitely. It's turning into a virtual DoS for my platform. iOS should respect the HTTP 410 "Gone" header or something similar. If the server returns a HTTP 410 response code for https://mywebsite.com/userfeeds/23/cal.ics X amount of times, the feed should be automatically removed. I've opened several tickets over the last 3 years and have not even had a status change on the tickets. Does anyone know how to resolve this or a work around?

Hi all, Im trying to upload an app to the App Store, the app is made in Unity, well I built the app there and then open the Xcode project, from there set some fields and now when I have to go to Product>> Archive I get an error always, could you please tell me what is this and how to fix? unsupported option -mno- thumb for target arm64-apple-ios 15.6 Im using Xcode 16.4 which I think is the latest version released. Thanks for any clue about this, Im really lost

When i say “forgot password” in the app store it allows me to reset with passcode but when i enter the passcode it’s different than the one i enter when i unlock the phone. what would cause this issue?

I enable to visit the googleUrl , But My Terminal Can’t Click The http://www.google.com ( Use ping http://www.google.com ) . My Popose is to downloading the homebrew , Can’t download ,so I use ping . By the way , I successfully ping http://www.bing.com

I use DeviceActivityCenter to monitor app usage. For DeviceActivityEvent, I set 30 events, and the threshold of each event increases by 2 minutes: var events: [DeviceActivityEvent.Name: DeviceActivityEvent] = [:] for index in 0..<30 { let threshold = (index == 29) ? DateComponents(hour: 1) : DateComponents(minute: (index + 1) * 2) let name = DeviceActivityEvent.Name("\(prefix)|\(index)") events[name] = DeviceActivityEvent(applications: tokens, threshold: threshold) } After reaching the last DeviceActivityEvent, I will restart directly in DeviceActivityMonitor private func restartMonitoring(activity: DeviceActivityName) { let center = DeviceActivityCenter() let currentEvents = center.events(for: activity) do { try center.startMonitoring(activity, during: schedule, events: currentEvents) } catch { print("Fail: \(error)") } } But I found that after restarting, DeviceActivityEvent will be automatically executed even if I don't use the app. My iOS version is 18.5

The latest Beta update 18.5.4 has caused connectivity problems with my car (Skoda Enyaq) whereby there is no connection via Bluetooth or the cars internal WiFi. Also contacts will not download to the care which is very frustrating.

Hello Apple Developer Community, I'd like to propose a system-wide enhancement for future versions of iOS: the integration of native utility apps — Calculator, Compass, Voice Memos, Magnifier, Measure, Weather, and Translate — into a single unified app, tentatively called Apple Assist. The vision is to provide: A modular interface where users can enable/disable tools as needed. Smarter workflows with proactive suggestions based on context (time, location, task). AI-powered interaction through voice and Apple Intelligence (Advanced Siri). Benefits: Reduces icon clutter on the Home Screen. Simplifies the user experience with a single access point. Creates opportunities for automation and accessibility. Imagine saying: “Hey Siri, record a quick note and measure the table” — and the app smartly loads those modules on demand. Would love to hear feedback from the community — and whether Apple might consider something in this direction for iOS 19 or beyond. Best regards, Jose Luiz Horta Barbosa Maurity Cruz

Hi everyone, I updated my iPhone 16 Pro to iOS 26 beta and my Apple Watch to watchOS 26 beta because I wanted to test out the new features. After a few days of testing, I found the iOS 26 beta too unstable and laggy for daily use, so I downgraded my iPhone back to iOS 18.5 stable. Now my Apple Watch is still running watchOS 26 beta. I tried resetting it to factory settings, hoping that would help, but now I can’t pair it back to my iPhone because it requires iOS 26 again — which I don’t want to reinstall and don't want to use it till it's stable. Is there any way to downgrade my Apple Watch back to a stable version or somehow pair it again with my iPhone running iOS 18.5? Thanks in advance for any help!

Hello Devs, I wanted to bring this up to display the frustration that I have obtaining the CarPlay entitlements. First and foremost they don't give you a set timeline and there is no contact number to speak to someone about this. When you call developer support they go on and say it is a different department. There is an email but all I have received is an automated response back to me. Has anyone received the navigation entitlements and if so what was the timeline of you receiving it?