2025
- 1-courier.push.apple.com - Apple Push Notification Service
- 1-courier.sandbox.push.apple.com - Apple Push Notification Service
- api.apple-cloudkit.com - CloudKit, Apple's backend service for developers to store and sync app data
- api.apple-cloudkit.fe2.apple-dns.net - DNS/gateway services for Apple's infrastructure
- app-site-association.cdn-apple.com - Used for Universal Links
- apple-relay.cloudflare.com
- apple.com - Core Apple websites
- bag.itunes.apple.com - iTunes/App Store purchase container
- configuration.apple.com - for fetching various system configurations, including location services
- configuration.ls.apple.com - for fetching various system configurations, including location services
- cts.cdn-apple.com - CDN for network content
- entitlements.itunes.apple.com - Checks your entitlements for apps and content
- fbs.smoot.apple.com - for crash reports, analytics, or user feedback.
- fpinit.itunes.apple.com - Initialization for iTunes/App Store services
- gateway.fe2.apple-dns.net - DNS/gateway services for Apple's infrastructure
- gdmf.apple.com - Device Management Framework
- gsa.apple.com - Apple ID (IDMS) and Game Center Services (GSAS)
- gsa.idms-apple.com.akadns.net - Apple ID (IDMS) and Game Center Services (GSAS)
- gsas.apple.com - Apple ID (IDMS) and Game Center Services (GSAS)
- gsas.idms-apple.com.akadns.net - Apple ID (IDMS) and Game Center Services (GSAS)
- gspe1-ssl.ls.apple.com - related to Location Services (LS) and certificate validation (SSL)
- gspe35-ssl.ls.apple.com - related to Location Services (LS) and certificate validation (SSL)
- iadsdk.apple.com - Apple's iAd advertising network SDK
- init-p01md.apple.com
- init.ess.apple.com - Apple's Entitlement Services
- init.itunes.apple.com - Initialization for iTunes/App Store services
- kt-prod.ess.apple.com - Apple's Entitlement Services
- lcdn-registration.apple.com - related to Software Update and (CDN) registration
- musicstatus.itunes.apple.com - For checking the status of Apple Music or iTunes Match
- ocsp2.apple.com - Online Certificate Status Protocol
- p44-buy-lb.itunes-apple.com.akadns.net - related to the iTunes Store and App Store purchase
- p44-buy.itunes.apple.com - related to the iTunes Store and App Store purchase
- pancake.apple.com - telemetry
- pd.itunes.apple.com - related to the iTunes Store and App Store purchase
- proxy.safeBrowse.apple - for Apple's Safari Fraudulent Website Warning (Safe Browse)
- sandbox.itunes-apple.com.akadns.net - used by developers for testing in-app purchases
- sandbox.itunes.apple.com - used by developers for testing in-app purchases
- sas-uw2-pcms.apple.com - related to purchase or content management systems within Apple's retail or media ecosystem.
- sas.pcms.apple.com - related to purchase or content management systems within Apple's retail or media ecosystem.
- setup.fe2.apple-dns.net - DNS/gateway services for Apple's infrastructure
- st11p01su-lcdnreg.isu.apple.com.akadns.net - related to Software Update and (CDN) registration
- suconfig.apple.com - related to Software Update and (CDN) registration
- swallow-apple-com.v.aaplimg.com - related to content delivery or image services
- swallow.apple.com - related to content delivery or image services
- testflight.apple.com - for TestFlight, Apple's platform for beta testing apps
- time.apple.com - Network Time Protocol
- token.safeBrowse.apple - for Apple's Safari Fraudulent Website Warning (Safe Browse)
- us-ne-courier-4.push-apple.com.akadns.net - Apple Push Notification Service
- us-sandbox-courier-4.push-apple.com.akadns.net - Apple Push Notification Service
- use1-wps-prod.apple.com
- weatherkit.apple.com
- wps.apple.com
- www.apple.com - Core Apple websites
- xp.apple.com - telemetry
- gateway.icloud.com
- p177-content.icloud.com
- edge-062.usatl5.icloud-content.com
- p104-content.icloud.com
- setup.icloud.com
- p150-content.icloud.com
- p176-content.icloud.com
- p101-content.icloud.com
- mask-api.icloud.com
- apple.news
- apple.tv
- podcasts.apple.com
- siri.apple.com
- caldav.icloud.com
- contacts.icloud.com
- mask.apple-dns.net
- mask-api.icloud.com
- doh.dns.apple.com.v.aaplimg.com
- doh.dns.apple.com
- apple-relay.cloudflare.com
- mask-canary.icloud.com
- mask-h2.icloud.com
- mask.icloud.com
- p120-caldav.icloud.com
The Mad Moose of Stratton Mountain
We reached the summit of Stratton Mountain to be greeted by the first moose either of us had ever seen. They’re huge BTW. Wonder Woman pursued the thing for several minutes trying to get a good photo. I was way too tired for all that, so I just rested. Side note: It was standing on this spot that Benton McKaye conceived the idea of the Appalachian Trail.

Vermont Hail Storm
On our second day in #Vermont, a sudden hailstorm caught us and all we could do was hike through it. Felt kinda badass TBH #Hiking #AppalachianTrail
The Long Trail (Vermont)
One of the oldest sections of the #AppalachianTrail is the Vermont section that overlaps that states’s long trail, which was first blazed over 120 years ago. It is one of the most beautiful sections, muddy perhaps, with more bugs than many might like, but still a memorable part of the experience. #hiking

Five Recent Finds at MacMenuBar
MacMenuBar.com is the best place on the Internet to find apps with that particular interface. Its recently added section is always worth checking out for new free, freemium and paid apps. Here are five recently added apps that are worth checking out.
Always on Top
Always on Top lets
you choose any window on your Mac to pin above all other windows. It's
got a nice menu-driven interface and is a nice addition to your
multi-tasking routine. (Free)
Signal Shifter
Signal Shifter
gives you a convenient location to control the inputs, outputs,
Bluetooth devices and volume control right from your Menu Bar.
(Free)
QuickGif
QuickGif provides a searchable Gif menu for use in any app. Drop GIFs into Slack, iMessage, Discord, and more. Save your favorites. (freemuim)

AppLockr
Applockr allows you to password protect any app on your Mac to prevent it being opened by anyone who should not access it. it's better suited for apps like Apple Notes that have an internal database rather than apps that create separately accessible documents. You should also lock Terminal and Activity Monitor to prevent unauthorized users from using those apps to force quit AppLockr itself. (one time payment)

Calendr
Calendr provides quick calendar access from your menu bar, complete with reminders. it has 1600 stars on Github, so plenty of people find it useful.

The View from Mt. Greylock
My Greylock is the tallest mountain in Massachusetts, coming in at 3491 feet. There is a restaurant at the top and a kind stranger had given us money to buy a meal there, but alas, it was closed when we arrived. No worries thoguh, we just hiked to the next town and ate there instead.

My Mac Contacted 63 Different Apple Owned Domains in One Hour - While Not is Use
During a one hour period today, my computer contacted 63 different Apple domains while i was not logged on and using it.
I have been trying to minimize to the extent possible the reach of big
tech into my life. A full 25% of the DNS queries from one of my
computers (M2 MBA with macOS 15.4) are to Apple owned domains - even
though my DNS provider (NextDNS) blocks Apple's native telemetry.
Additionally, since I do not use Apple for my mail, contacts, calendars,
podcasts or news, I already have the routes to those Apple services
blacklisted.

Interestingly, my 2019 Intel MBP with the same DNS settings has
less than 3% of it's DNS queries hitting Apple domains.

Here are the domains Apple contacted during one 60-Minute Period When I Was Not Using My Computer
One Hour - 63 Apple Domains
Apple Domains I Already Block
Hiking the Berkshires
Western Massachusetts is a pretty place. The Berkshires aren’t too daunting but they have their moments. I’d been brainwashed as a southerner to thinnk that the Northeast US was a big urban jungle. It isn’t. New England is one of the prettiest places I’ve ever been. #hiking #Appalachian. Trail

A Photo Management Workflow Without Big Tech

One of the things that make the tools of Big Tech so seductive to
use are their rich feature sets. Photo management apps from Google,
Amazon, and Apple require little more than flipping a toggle switch to
begin uploading photographs from your phone. Each company provides you a
ready-made website with the ability to create albums, share photographs,
and do basic editing. All you have to do is to give them your data, your
privacy, and I suspect your soul.
This year I opted to remove all of my personal photographs from the servers of the big tech companies and to manage them on a self-hosted server in my home. My challenge was to automate the process as much as possible for both me and my wife and to get the same benefits: iOS access, backup and sharing.
The canonical location of our photos is located on the hard drive of an always on Mac which has multiple backups including Time Machine, two different European based cloud storage companies (Koofr and kDrive)and multiple external hard drives. The iOS app of my cloud service, kDrive by Infomaniak automatically uploads all images added to the phones library to their server and those are synced to to the Mac in our home. I created an Apple shortcut that runs once a day when triggered by a Keyboard Maestro macro that copies all of the photos added in the past 24 hours from the upload location to the canonical photo location. Then Hazel moves those photos to a folder corresponding to the current year and month. During this process, images are converted from HEIC to JPG.
I use the powerful and full featured open-source photo management app, Digikam, to rename and tag my photos and to make any adjustments to the geolocation. Digikam also does editing and duplicate detection. I have Syncthing running on the Mac to two other computers. One is my server which uses Unraid. The other computer is a 16-year-old iMac with Xubuntu, a good distro for old hardware, that serves as a 24 inch digital picture frame to rotate our photo collection in a never ending loop. On my server, the synced photo library is used by the photo management application, Immich. I have Immich connected to the Internet through a secure Cloudflare tunnel. It allows us to view our photo collection on the Immich iOS app and to create shareable albums with our friends and family.
Hopefully, if you are interested in removing your photos from the clutches of big tech, this will give you some ideas on how to use some of the software I've reviewed to create your own solution. Feel free to hit me up with questions.
Crucial Track for June 10, 2025
"Baba O'Riley" by The Who
I was a farm kid in the 70s and 80s. When I hear Pete Townshend's guitar play those unmistakable chords and Roger Daltry's voice sing this song, I've felt like I could take on the world. The Who and the Kinks were the more intellectual bands of the British invasion with more and better imagery than some of the pop stuff from the lads from Liverpool and their dirty London Cousins.
*"Out here in the fields, I fight for my meals I get my back into my living I don't need to fight to prove I'm right I don't need to be forgiven
Don't cry, don't raise your eye It's only teenage wasteland"
Ice Gulch
This is Ice Gulch, located on the Appalachian Trail just north of Great Barrington, MA. It’s a mile long and a hundred feet deep. It’s on a stretch of the trail that makes for a good day hike if you are ever in the area.

State Line
That brook is the state line for Connecticut and Massachusetts on the Appalachian Trail. There was supposed to be a bridge there, but oh well. If there is one thing I leaned on that hike, it was how to be resilient.
Runner's High
Wonder Woman gliding through a mountain meadow on a warm June morning. She makes it look easy. #ultrarunning

Crucial Track for June 3, 2025
"Jackson (with June Carter Cash)" by Johnny Cash with June Carter Cash
What song would you use to describe your current relationship? Jackson by Johnny Cashand June Carter Cash - Before I met my wife, I lived a life with too much of a whole bunch of stuff that's not good for you. Most people would consider me reformed today. I love the good natured way Johnny and June sing this tune, knowing Johnny's rough life prior to their marriage.
The Glacier at Portage Lake
On a day trip to the town of Whittier, Alaska, Winder Woman and I went to see the glacier at Portage Lake. I wanted to see one before they all melt because of climate change.

South Fork of the Holston River
The Virgina Creeper Trail crosses the soth Fork of the Holston River, just north of Abindon, VA.

Taylor's Valley, VA
We’re heading back to this slice of heaven next weekend so Wonder Woman can volunteer at the Dam Yeti 50, an ultramarathon. It will be our first visit since Hurrican Helene devastated the area. #ultrarunning

Use Obsidian in a Browser from Anywhere, Without Installation

I just got into self hosting about a month ago with an old Lenovo
Thinkpad I pulled out of the recycling pile at work and a couple of big
external hard drives. Tonight I discovered that there is a Docker version of
Obsidian that works on my server. In a couple of hours, I had an
https connection to a test vault, accessible over the Internet via a URL
through a CloudFlare Zero Trust tunnel (which is a free service that
does secure routing for you). You can password protect the vault to keep
out intruders. You should also use a cryptic subdomain and not
obsidian.mydomain.com
All the people who want to use Obsidian at work but are prohibited from installing anything could surely find use in this. Additionally, folks with one of those big ass iPad Pros can now use the desktop version of Obsidian and the plugins that don't work on iOS. Any time you don't have access to your own device, you can jump on anything with a web connection to access your data.
This is probably old news to old school self hosters, but to this neophyte, it was a cool-as-hell discovery.
Whitetop Mountain, VA
One of my favorite spots in the world, Whitetop Mountain, VA. The day we first hiked hiked there, we met a group of self described “old hippies” having a picnic. They invited us to join in. Back in the late 30’s, this was the site of a music festival featuring the Carter family among others.

Anchorage View
This is what you will see from Potter Wildlife Viewing Center just outside of Anchorage. It’s a great place to go if you are into birding.
