Live data from Hacker News

Apple's whitelist of the 250k auto-completable domains in iOS

cdn.smoot.apple.com

161–170 of 182 posts

Re: Apple's whitelist of the 250k auto-completable domains in iOS

#161
post #158

Earlier quoted context omitted.

Ok, maybe I am missing something here. The link points to a list Apple is hosting without any context. Does anyone know why this list is hosted and what it is used for? Is it even used? Edit: some 7 year old posts suggest it was used by Spotlight. I also am a little amazed it loaded and scrolls smooth on Firefox mobile...

Can't say the same for Firefox on Windows, on a powerful PC :/

That's because Firefox on desktop parses JSON.

Re: Apple's whitelist of the 250k auto-completable domains in iOS

#162

250k is off by one, actually 249999 entries: $ curl -s https://cdn.smoot.apple.com/static/autofill_tld_whitelist_url | jq '.tlds|length' 249999

Hah I appreciate your accuracy.

I got 250k by running this:

   $ curl https://cdn.smoot.apple.com/static/autofill_tld_whitelist_url | jq | wc -l
   250004
And then I naively assumed with the extra JSON brackets the total would be 250k but I wasn't thorough enough!

Re: Apple's whitelist of the 250k auto-completable domains in iOS

#163

Related list: https://cdn.smoot.apple.com/static/autofill_corrections_url

hah I see we both discovered the same lists! Did you get these from traffic interception too? I didn't find any hits for these on Google but not surprised you beat me to it of course. I'm a long time fan of your apple-hacking blog posts.

For others, here's the other ones found:

- "correction_dict_url": "https://cdn.smoot.apple.com/static/static_corrections_dict/2..."

- "crowdsourcing_blacklist_url": "https://cdn.smoot.apple.com/static/crowdsourcing_blacklist_u..."

- "crowdsourcing_whitelist_url": "https://cdn.smoot.apple.com/static/crowdsourcing_whitelist_u..."

- "spotlight_model_resources": "https://cdn.smoot.apple.com/static/spotlight_model_resources..."

- "spotlight_stopword.map": "https://cdn.smoot.apple.com/static/spotlight_suggestions_sto..."

- "spotlight_phrase_dictionary.map": "https://cdn.smoot.apple.com/static/spotlight_suggestions_phr..."

- "silhouette_topic_mapping": "https://cdn.smoot.apple.com/static/silhouette_topic_mapping/..."

- "silhouette_whitelisted_topics": "https://cdn.smoot.apple.com/static/silhouette_whitelisted_to..."

- "silhouette_config": "https://cdn.smoot.apple.com/static/silhouette_config/5/silho..."

- "dictionary_resources_url": "https://cdn.smoot.apple.com/static/dictionary_resources_url"

Also I just realized that the source of all these doesn't require auth either and you can just view it here: https://api.smoot.apple.com/bag (but requires a spoofed user-agent if you use cURL)

Re: Apple's whitelist of the 250k auto-completable domains in iOS

#164

Earlier quoted context omitted.

>No. Contrary to popular belief, browsers on iOS aren’t all Safari skins. I know some people hate Apple for both good and bad reasons, but it's pretty wild to me people think Apple does this. I mean right out the gate that would be pretty illegal, no?

It would not be illegal. In fact the iPhone launched with only Safari. Because Apple is selling the hardware device, they can decide what software they ship on it. This is not specific to phones, it’s true of all hardware. There’s no feature to load arbitrary browsers onto a PlayStation, for example.

I specifically meant letting you download, say, Google Chrome, and it's not actually Chrome but Safari. Unless I'm misunderstanding what that person described, which is totally possible.

Re: Apple's whitelist of the 250k auto-completable domains in iOS

#165
post #151

Earlier quoted context omitted.

Why should Apple avoid autocompletion of porn site domains? That’s an area rampant with scam sites, especially similar domains. Plus “everyone” looks at porn so the benefits would be widespread. If Apple wants to protect users then autocompleting porn site domains seems like the place to start , not avoid. The absence of porn domains raises the question of Apple’s intent.

> Why should Apple avoid autocompletion of porn site domains? Because if I’m sharing my screen on a business call, and I start typing something into my browsers’s address bar, I don’t want it to autocomplete something nsfw which just happened to share the same first letter.

By that logic it should also exclude the /jobs page of your competitors website. And probably also social media sites.

Re: Apple's whitelist of the 250k auto-completable domains in iOS

#166
post #48

Earlier quoted context omitted.

My website is in there but with a typo (people often make that mistake) :( The website with typo doesn't exist.

Which is the cause, and which the effect? Was apple's incorrect autocorrect causing them to go to the wrong place initially, or did they autocorrect list get built from the incorrect attempts?

I had an issue where it was actually redirecting me to an entirely different website. wbay[.]com would get redirected to ebay[.]com. There was a whole thread about it: https://news.ycombinator.com/item?id=23646158 https://news.ycombinator.com/item?id=23651334

Re: Apple's whitelist of the 250k auto-completable domains in iOS

#169

Earlier quoted context omitted.

> and that the website is still exactly the website they intended it to be. How could they realistically do that?

1: Whois every site on the list. 2: Did the owner information change since last time? 2n: No action required. Maybe select some sites randomly to have a human compare, but it's probably fine. 2y: Have a human check the site. Did it simply get purchased by another (similar) organization, or is it no longer relevant to its original purpose? 3: Do the needful.

Oh, using whois seems reasonable!

Re: Apple's whitelist of the 250k auto-completable domains in iOS

#170

"smoot" dot apple dot com?

Doubtless named for The Smoot-Hawley Tariff Act which raised or lowered taxes? Anyone? Anyone?

Raised tariffs, not taxes. It's an important difference, doubly so with regards to Smoot-Hawley because the whole point was to protect American companies (and therefore jobs) from foreign competition (of course, it did not work...).
Post reply on HN