Friday, July 20, 2012, 04:52 am PT (07:52 am ET)
Inside OS X 10.8 Mountain Lion GM: using iCloud as the smart, automated way to store documents
Files aren't stuck with a specific app
When users first hear of iCloud's new per-app security model, one of the first reactions is a fear that their documents are now stuck inside that one app, and can't be shared. This isn't actually an issue however. If you want to move a screenshot from Preview to Photoshop, for example, you can still save the graphic file explicitly to the Desktop or any other location from within Preview. You can also search for the file in the Finder and "Open With" whatever app you'd like.
This is because Apple has given users the implied permission to do anything they want to do with their files. When you move a file out of iCloud, or tell the Finder to open an iCloud-saved document with another app, the system immediately grants you permission to do this on the fly, just as if a user copies a file they want to share from their secure home directory to a file server accessible by other users.
For example, if you Spotlight search for a TextEdit document you've saved to iCloud, the document appears in the Finder and can be opened in another application, such as Pages, even though that app doesn't currently even support iCloud yet. The system handles the duplication and local saving of that file, and Pages can begin working on it just as if iCloud never existed. The original document remains in iCloud, tied to TextEdit. Pages (or any other app) can work on its copy, and save it to the file system just as always. It doesn't get the benefits of iCloud, but it also doesn't suffer from any new artificial limitations imposed by iCloud security.
On the other hand, rogue apps that try to go around the user's back and maliciously access, edit or destroy a user's iCloud documents will simply find those documents are off limits to them. Mountain Lion sandboxes apps from accessing iCloud files belonging to another application unless the user has specifically indicated that they want to provide access. This creates an important new security barrier that significantly hampers the potential for spyware, viruses and other malware to do bad things to your data, all without creating any real new hoops or hassles for users to navigate.
The only way a piece of malware can access iCloud documents is if it can orchestrate a "social attack" that convinces users to manually copy each of their app's iCloud files into a non-secure area, a much more difficult task than simply getting itself installed within the local file system and then wrecking havoc on all the files located there. iCloud's new per-app security is as big of a leap ahead as user permissions were for OS X a decade ago.
Get ready for the future of documents
Greatly increased security isn't the only benefit of iCloud of course; once your app's documents are in the cloud, you can access them from any other Mac and from your mobile iOS devices. You don't have to think about how to move documents around, and don't have to manage different versions (that's done by the system, which can roll back changes thanks to the Versions feature (below), no need for saving separate copies of each of your files, each with different names or stored in different folders).
Apple didn't just think up iCloud and its security model in the last year; it's been in the works for a long time. And during that time, the company has rolled out a series of foundational technologies that enable it to work, from Spotlight indexing (so you can find cloud-based files as quickly as local ones) to AutoSave and Versions (so you don't have to manually manage each incremental change of a document at specific intervals, each being saved as its own file) to Time Machine's graphical backup and restore user interface. And of course, iCloud's unique interface and security characteristics also borrow from iOS.
These all contribute to automating the file system so users don't have to deal with it directly. iOS devices have always had a local file system; it's just not visible and exposed to the user. In the future of OS X, file level operations (and security) will increasingly be handled by the system itself so you don't have to set up and manage complex hierarchies of files that are at risk of being lost when a hard drive mechanism fails or when a specific bit of hardware is lost or compromised by malware.
iCloud doesn't solve every problem. Unlike DropBox, you can't currently share your iCloud files with other users directly, or manage on a folder level what files are being synced where. It isn't a solution for storing huge files such as gigabytes of video, something that other cloud storage solutions do address. It also isn't a way to put files on the web for sharing (as iDisk once did).
Apple may adapt iCloud's feature set to handle new tasks like these in the future, but for now, iCloud offers users a much simpler way to work with their documents, increased security, increased mobility between devices, and lays the foundation for secure cross platform file access, something that will be pioneered by Apple's own iWork apps once Mountain Lion ships.
Get ready for the future of data, too
In addition to greater security and simplicity in handling documents, recall that iCloud also offers app developers a way to securely store bits of data, as Safari, Reminders and Notes already do in Mountain Lion. This is also an important new leap in bridging the divide between different computers tied and between the desktop and mobile devices.
Developers can now offer to store users' data, from a checklist of items like Reminders to a bit of state like the open tabs in Safari, and make them available via iCloud to a mobile app. Developers can already build their own mechanisms for moving data around between Macs, or between their OS X and iOS apps, but iCloud provides a secure, central and simple way to offload this task onto Apple's servers.
And because both iOS and OS X users are now prompted to set up a free iCloud account when they begin using their system, developers can be reasonably assured that the majority of users already have an iCloud account (unlike MobileMe, which was only used by a few million paying users).
The upside to using iCloud for sharing data between systems and between Apple's desktop and mobile platforms is enhanced simplicity for developers, enhanced reliability for users (as each developer isn't tasked with working the bugs out of their own home-rolled data sharing system), and again, vastly increased security from malware intrusions like spyware and viruses. Once iCloud becomes the primary way to store such data and private documents, even successful viruses will find they have nothing of value to snoop and little they can maliciously destroy, even if they can manage to get themselves installed.
The downside to iCloud
What's not to like about iCloud? Apple's integration and security work on iCloud does intrench its position as the most successful mobile device provider. That means users will have a new impediment to trying alternatives, such as a Google branded tablet or a Microsoft branded phone. You can still buy competing devices, but Apple's iCloud will make the alternatives less attractive for the same reason the App Store makes it less attractive to peruse options that can't run iOS apps.
On the desktop, while Apple supplied an iDisk client for Windows users under .Mac and MobileMe, there's not really any way to make iCloud's documents broadly available to Windows users (without defeating its entire security model). That means iOS users who save their mobile documents to iCloud will have to go out of their way to manually email or otherwise export those documents to a Windows PC or tablet.
In addition the the proprietary "Walled Garden" nature of iCloud that ties it to Apple's own desktop and mobile platforms, users also can't shop around for iCloud storage; Apple's servers are the only option. There's no way for Google or Microsoft or Dropbox to set up a server that iCloud users can use instead. That means if you become dependent upon the service, your only option is to pay Apple for extra storage after you exhaust your initial free allocation.
Of course, you can still use cloud storage offerings from vendors such as Google, Microsoft and Dropbox just as you can use other companies' email, calendar and contacts accounts. They just won't work in the same integrated way that iCloud does. And of course, other vendors offer their own proprietary, integrated services and features that aren't available to Apple.
Additionally, while Apple can claim that iCloud is the only significant cloud-based service that hasn't suffered a major security debacle resulting in the loss of user's data (unlike Google, Microsoft, Palm, Nokia, and seemingly everyone else), that's really only the case because Apple changed the name of MobileMe, which launched as an embarrassing fiasco and never managed to pick itself up off the ground. Apple has a lot to prove in the area of being competent in providing reliable, scalable network services.
Under MobileMe, downtime was largely just a brief annoyance (in part because nobody was taking it seriously). With iCloud, Apple has raised the stakes dramatically, because iCloud incorporates a variety of services, including Documents in the Cloud, which are critical to have available at all times. So far, Apple seems to have put sufficient resources into iCloud to shed the perception that it just isn't very good at tasks beyond its core competency of building software platforms and the hardware devices that run them. It still has some ways to go however.
As a whole, iCloud offers a compelling solution to the complexity and security issues of the conventional security system, bridges the gap between desktops and mobiles, and opens up the potential for all kinds of new cloud sharing features in third party apps. And it does so without erecting any artificial anticompetitive barriers to alternative cloud services. For both users and developers, iCloud represents a great leap forward. For Apple's direct competitors, it represents a significant competitive challenge, as long as Apple can prove itself competent at hosting the cloud services it has rapidly billowed out over the last year.
On Topic: Mac OS X
- Apple updates pro-level video suite with fixes for Final Cut Pro X, Compressor and Motion
- Mailbox for Mac hits public beta, adds synced drafts and 'snooze to desktop' feature
- Rumor: Undisclosed security breach cause of Apple's new Gatekeeper app signing policy
- Apple releases OS X Yosemite Developer Preview 6, Xcode 6 beta 6
- Apple releases Safari 6.1.6 and Safari 7.0.6 with security improvements