Skip to content
Thoughtful, detailed coverage of everything Apple for 33 years
and the TidBITS Content Network for Apple professionals
Show excerpts

#1666: Air quality websites and apps, The Password Game

Heading into the Fourth of July holiday here in the US, we have two articles for you. First, Adam Engst shares The Password Game, an amusing Web puzzle that pokes fun at password requirements while giving players an excuse to pick up new research skills. Then he turns his attention to the significant air quality problems caused by smoke from wildfires in Canada. Read on to learn more about the Air Quality Index, how to find accurate readings for your area (don’t believe weather apps), and how you can adjust your behavior in response. Notable Mac app releases this week include 1Password 8.10.8, Mimestream 1.0.4, Audio Hijack 4.2.2, and URL Manager Pro 6.2.

Adam Engst 6 comments

The Password Game Is Fun, Frustrating, and Educational

If you enjoy puzzles, check out The Password Game by Neal Agarwal. It simply asks you to choose a password. How hard could that be? As good Internet users, we all know about making passwords that meet the standard requirements, such as a minimum length, having both uppercase and lowercase letters, adding at least one digit and a special character, and more.

The Password Game to start

Such passwords are for pikers. The Password Game has 35 rules that you must satisfy, one after another, as you attempt to create a password. The rules start simple, ensuring that your password is at least five characters and includes a number, an uppercase letter, and a special character.

But then the puzzles start, forcing you to add more to your password and often change what you’ve done previously. The digits in your password must add up to 25. Easy enough. A month of the year? No problem. A Roman numeral? Everyone knows one of those. But after identifying a corporate logo, suddenly you’re told that the Roman numerals in your password must multiply to 35. Then you’re required to enter a CAPTCHA, which is easy enough, but any numbers in it break the rule about the digits adding up to 25. No worries, just change your password’s digits until you’ve satisfied that rule again.

Wait, it wants today’s Wordle answer? (It’s not kidding; the answer changes every day.) That’s the beginning of the questions that require research and may force you to learn new skills. Can you figure out what the current phase of the moon is and find the matching emoji? (Hint: choose Edit > Emoji & Symbols and perform a search.) Identifying a country from a Google Street View image is significantly more challenging—you may be able to zoom in to get a clue from a sign, but if not, it’s an excuse to learn how to do a reverse image search in Google Images from a screenshot.

Eventually, you’ll hit Rule 16, which wants the “best” move on a randomly generated chess board in algebraic chess notation. It’s easy enough to figure out the necessary notation with the provided link, but what you may miss is that if you’re putting the opposing king in check, you must add a + character. I’m not sure I agree with the required move being “best” in all cases, but my chess knowledge is limited to knowing how the pieces move.

Once you get past the chess puzzle, The Password Game adds a videogame element. You have to add an egg emoji that will hatch into a chicken named Paul, and once he hatches (after some other drama), you have to feed him emoji caterpillars, which disappear at a rate of one every 20 seconds. Stressed out by having to keep pasting more caterpillars while learning how to search for a YouTube video of a specific duration, I pasted too many caterpillars in and was abruptly informed that I had overfed Paul, ending the game at Rule 24. Curses, foiled again! I would feel worse, but even the game’s creator hasn’t completed it successfully.

The Password Game
Although a few of the puzzles change, like the Wordle answer, identifying a country from a picture, and the chess board, The Password Game isn’t something you’ll play every day. But I can certainly see playing until you beat it.

And now, if you’ll excuse me, I have to see what comes after the YouTube video while keeping Paul the chicken properly fed. Once I solve it, I plan to check out the rest of Neal Agarwal’s mini-sites. Some are games; others are more social commentary, but all those I’ve looked at are amusing.

Adam Engst 31 comments

Tracking Air Quality in a Wildfire-Filled World

As I look out my office window, the scenery looks… wrong. I live far from any notable sources of pollution in a relatively rural part of upstate New York, and yet the hills just a few miles away are obscured by haze. It doesn’t just look wrong outside, it smells wrong, all thanks to smoke that’s traveled from wildfires far north of me in Canada.

Wildfire smoke haze in Ithaca, NY

This is our second go-round with wildfire smoke. The first was when it drifted down from the Quebec wildfires about 3 weeks ago. It was terrible that time, with the worst air quality index (AQI) in our area at 460 on a scale of 0 to 500. An AQI is a pollutant measurement that offers a relative risk value—no matter what the scale, being near the top is extremely bad. In this second round of wildfire smoke, the AQI numbers have hovered lower, between 150 and 200, which “only” ranks as “Unhealthy” on the EPA’s scale.

AirNow reading for Ithaca on June 7, 2023

The entire situation is making me jittery and ill at ease, and my reaction to anything unknown is to learn as much as I can and share it with others. You’ve just been nominated to help me keep my cool by letting me write this article.


I hope everyone is aware that hundreds of wildfires are burning in Canada, over half of which are considered out of control. This map from the Canadian Wildland Fire Information System gives a sense of the scale of the problem. With over 76,000 square kilometers of land burned this year—nearly 19 million acres, or about the area of Panama—it’s the worst wildfire season in recorded Canadian history, with smoke causing air quality alerts in Canada and the US, along with hazy skies as far away as western Europe. Worse still, it’s early in the typical Canadian wildfire season, and early burns don’t mean fewer later.


Canadian Wildland Fire Information System map

Canada and parts of the US have already seen significantly higher-than-normal wildfire burns in the last ten years than in previous decades. Western Canada and all the US western states have experienced some of their worst years in recent times. But 2023 shows that the northern US and most of Canada could also see regular impacts from wildfires for the indefinite future. Lessons learned this year will likely remain relevant going forward.

Wildfire smoke haze in Seattle, WA
Editor Glenn Fleishman’s front yard in Seattle, Washington, in September 2020, when the AQI crested above 400 for days.

Climate change is a driver, causing more severe storms mixed with lightning, which causes over half of North American wildfires. Warmer, drier weather exacerbates the problem, and we just experienced a dry spring here in the Northeast.

Worse, wildfires emit vast amounts of carbon and aerosols that can both exacerbate global warming. (Some high-level smoke can reflect sunlight, resulting in a temporary cooling effect like those associated with volcanic eruptions, but that doesn’t outweigh the adverse effects of carbon and aerosols.)

Determining Outdoor Air Quality

Wildfires create smoke from trees and vegetation, of course, but also from building materials and other manufactured products that catch fire. Although the precise chemicals in smoke vary, the primary health concern revolves around particulate matter, specifically particles 2.5 microns or less in width, called PM2.5. They can travel deep into the lungs and cause short-term health effects like eye, nose, throat, and lung irritation, plus coughing, sneezing, runny nose, and shortness of breath. Long-term exposure may be associated with increased rates of chronic bronchitis, reduced lung function, and lung cancer.

In the US, the Environmental Protection Agency developed the Air Quality Index to track the relative risk of five pollutants: ground-level ozone, particulate matter at two sizes (PM2.5 and PM10), carbon monoxide, sulfur dioxide, and nitrogen dioxide. The two that factor into what the EPA called the NowCast AQI are ozone and particulate matter, but when you see an AQI number, it reflects the primary pollutant at the time, which will be PM2.5 during wildfires. (This explains why you sometimes see sensors on maps with much lower readings than most others; they’re ozone sensors, not particulate sensors.)

The AQI scale in the US ranges from 0 to 500 and is broken into six bands, with information about who is at risk and how people should react to different AQI readings. Perhaps unsurprisingly, other countries have their own scales, so air quality can be difficult to compare with far-flung friends and family.

AQI chart

Here in the US, the central resource for monitoring air quality is the EPA’s AirNow website; an AirNow iPhone app taps into the same data. Along with the NowCast dial and forecast (when conditions are sufficiently stable), the main AirNow page links the Fire & Smoke Map, another map showing nearby official monitors, and a page with recent trends.


AirNow reading for Ithaca on June 30, 2023

The Fire & Smoke Map is especially helpful because it lets you see where the smoke is and how that relates to the different bands of the AQI. You can zoom and pan to see local detail and click a monitor to see its precise reading. What the map doesn’t do, unfortunately, is animate like we’re used to with weather radar.

AirNow Fire & Smoke map

The New York Times created such an animated smoke map, available only via subscription, though some links sent via Messages work, too: I can load it only when I click it from a link Tonya sent me. However, I’ve found a more helpful resource. The National Oceanic and Atmospheric Administration (NOAA) publishes a model called HRRR-Smoke (High-Resolution Rapid Refresh). Its Near Surface Smoke option forecasts how smoke might move in the US in the next 18 hours. Interestingly, it doesn’t attempt to map smoke directly but instead uses infrared to identify fires and then predicts where the smoke will end up based on sophisticated weather models. The RAP model’s Surface Smoke map expands the range to more of North America and might also be useful.

NOAA HRRR-Smoke map

There’s one final map that’s essential. A company called PurpleAir sells inexpensive Internet-connected air quality monitors (under $300) and compiles the collected data on a publicly accessible map. (It works fine on the iPhone, but the Paku app provides a dedicated map view and iPhone and Apple Watch widgets.) As you can see below, there are five sensors in the Ithaca area, and the cluster of three is within half a mile of our house. They’ve been in place for several years because neighbors have been monitoring air quality associated with the natural gas compression station down the road. (The other two appeared this week.) We were particularly grateful for the existence of those three sensors during the first wave of wildfire smoke because the closest official sensor was a government monitoring station 48 miles away. The EPA’s Fire & Smoke Map includes all the PurpleAir monitors, but the PurpleAir map makes it easier to read the numbers at a glance and get a sense of how they might be trending throughout the day.

PurpleAir map for Ithaca, NY

Evaluating the Data

I found myself checking the iPhone AirNow app so frequently that I decided to add an air quality widget to my iPhone’s Lock screen. Apple’s Weather app and CARROT Weather both provide air quality widgets, but adding them revealed discrepancies between the apps and information provided by different weather service providers. (CARROT Weather Premium users can choose among six weather service providers.) The table shows the AQI reported by different apps and services as of 1 July 2023 at 9 AM.

App/Service AQI
AirNow app and website 156
Five nearby PurpleAir monitors, averaged 140
AccuWeather website 104
AirCare app 129
Apple’s Weather app (BreezoMeter) 137
CARROT using Accuweather 161
CARROT using AerisWeather 97
CARROT using Apple Weather 97
CARROT using Foreca 161
CARROT using OpenWeather 97
CARROT using 94
IQAir app 113
WeatherBug app (BreezoMeter) 61

The discrepancies here troubled me, but I found some explanations, notably in a Medium article by UC Berkeley data scientist Josh Hug. The AirNow AQI is the most official but has two problems:

  • It may not be sufficiently local for you. The closest official monitor to me is 48 miles away.
  • AirNow’s data is averaged over time. Some sources claim it’s 24 hours, but AirNow says, “The NowCast shows you air quality for the most current hour available by using a calculation that involves multiple hours of past data. The NowCast uses longer averages during periods of stable air quality and shorter averages when air quality is changing rapidly, such as during a wildfire.”

Because of those factors, I’ve been giving more credence to my neighborhood PurpleAir AQI numbers, which are more local and are averaged (by default) over the past 10 minutes. However, it turns out that PurpleAir monitors tend to read higher than AirNow under controlled conditions, so you can enable a correction factor to bring PurpleAir numbers more in line with AirNow readings. Click the line at the top right of the PurpleAir map, and choose US EPA from the Apply Conversion menu. (Because PurpleAir monitors are installed by individuals, they may represent higher or lower levels based on microclimates, but more numbers are generally better.)

PurpleAir settings

AirCare and IQAir claim that their numbers may differ from AirNow due to more monitoring stations and shorter averaging periods (though both say AirNow averages data over 24 hours, which no longer seems to be true). AirCare also says it runs all the data through its unexplained “intelligent algorithm.”

The different weather services in CARROT likely obtain air quality data from the same sources—the Google-owned BreezoMeter for Apple’s Weather and WeatherBug, probably AirNow for AccuWeather and Foreca, and Apple Weather (which used to be Dark Sky) for the rest. I can’t explain the disagreements between Apple’s Weather app and CARROT Weather using the Apple Weather data source, or the AccuWeather website and CARROT’s AccuWeather data source. Given the variability, I can’t recommend relying on any weather app’s AQI numbers.

For now, then, I recommend:

  • Basing organizational decisions on the AirNow AQI number because it’s the most official and verifiable
  • Adjusting personal behavior based on local PurpleAir monitors
  • Checking nearby PurpleAir AQI numbers on the iPhone and Apple Watch using Paku

Determining Indoor Air Quality

What about indoor air quality? Outside air always makes its way into buildings. Many organizations have just spent years trying to increase the amount of fresh air brought in via HVAC systems to reduce the transmission of the SARS-CoV-2 virus. With wildfire smoke pollution, however, outside air becomes problematic without significant filtration—which was part of the recommendation for COVID prevention but not evenly adopted.

We have long had a room-based air purifier with a HEPA (High-Efficiency Particulate Air) filter because Tristan has asthma, and running the air purifier seemed to help his breathing. (Our house relies on in-floor and baseboard radiant heat powered by geothermal, and although we have ducted air handlers for occasional summer air conditioning, they don’t provide significant filtration.) In the fall of 2021, we bought a smaller HEPA-rated air purifier for hotel rooms when we had to make three trips to Connecticut so Tonya could have much-needed back surgery for a herniated disc. But we had no idea how well these filters really worked, especially in the large, open spaces in our house.

Wirecutter isn’t enthusiastic about indoor air quality monitors, but its article misses our desired use case in comparative particulate monitoring. We wanted to get a baseline reading and then run our HEPA air purifiers in different scenarios to see how the numbers changed. Was one air purifier sufficient for our relatively small offices if we closed the doors? How about the main open living space downstairs? Did we have to run the air purifiers on high, which is loud, or would low work well enough?

Temtop M10 air quality monitorWe purchased a Temtop M10 Air Quality Monitor for under $100. It arrived too late for the first influx of wildfire smoke, but on this second pass, we’ve used it to determine how well our HEPA air purifiers work. It turns out that the inside AQI will trend toward 100 if left alone (and would presumably equalize with the outside given enough time). Even the smaller air purifier can quickly clear the air in our offices and ensure that our bedroom air is clean enough that we don’t need to listen to it all night. Although the larger air purifier can’t handle the entire downstairs of our house on its own, even on high, when we left both air purifiers running on high overnight, the AQI was in the single digits by morning. All this data has enabled us to tweak our use of air purifiers for optimal air quality and minimal noise.

The Temtop M10 is simple. It charges using USB and runs on battery power for quite a few hours before needing another charge. It also works fine plugged in, but we’ve been moving it around the house to test different rooms. A single button toggles power and lets you cycle between readings for particulate matter, AQI, formaldehyde (HCHO), and volatile organic compounds (VOC). You can also set it to cycle automatically between the four screens. We’ve seen no reason to look at anything beyond AQI because we care only about comparative numbers. Wirecutter says its particulate matter sensor is accurate, and in our testing, it’s close to the nearby PurpleAir sensors. It lacks Wi-Fi connectivity and has no app; other Temtop models have such capabilities but cost more.

Editor Glenn Fleishman opted to buy a portable Temtop M2000 with more measurement options (other models are now available) to check air quality in different parts of the house, as his family has a ground floor and daylight basement. The highly portable nature and built-in graphing helped troubleshoot hot spots in the house and unhealthy levels of PM2.5 in the basement. As with my testing, Glenn’s family was able to test air clearing by adjusting fan speed. They also upgraded their duct-based, forced-air HVAC system with a coarser-than-HEPA MERV13-rated filter, which is designed to capture 85% of PM2.5 particles.

Changing Activity Based on Air Quality

The only reason to collect data is if you’re going to change your behavior based on the results. The big question I had early on was how runners should take air quality into account. This wasn’t theoretical—I coach weekly workouts, organize group runs, and help direct races for the Finger Lakes Runners Club. In the first bout with wildfire smoke, I ended up canceling one evening workout and a group run the next day. We were worried about another group run that weekend and a race the following week, but happily, the smoke had moved by then. Nevertheless, we needed some guiding metrics because there’s a difference between an individual choosing to run on their own and the club organizing a formal event during a period of poor air quality.

After some research, I developed the following guidance:

  • AQI under 100: Most people need not adjust their workout or racing plans if the AQI is expected to be under 100. Unusually sensitive people with heart or lung disease should take care if the AQI is trending toward 100.
  • AQI 100–150: Between 100 and 150, children and other members of sensitive groups (older adults, people with asthma) should avoid running, especially as the number climbs toward 150. Healthy adults can participate if they wish.
  • AQI above 150: We would cancel all formal club events and encourage anyone running outside on their own to consider wearing an N95 mask.

The tricky part is the prediction, but between AirNow and the HRRR-Smoke Near Surface Smoke map, it’s possible to get a sense of where the AQI numbers are heading in the next day or so. Even then, it’s guesswork. Yesterday, AirNow was predicting acceptable conditions for today, but the AQI didn’t start to drop until midday, forcing us to cancel a group run this morning.

Lending some credence to this rubric is Tonya’s experience. On the first day we had air quality issues in early June, before we quite realized what was going on, she ran home from Cornell for about an hour. The air didn’t smell of smoke, but looking back at AirNow’s recent trends, the AQI was nearing 100. Two days later, when the AQI was at its worst, she had to go out for a work dinner. While she wore an N95 mask outside and in the car, she said it didn’t seal as well as she’d thought while wearing it for COVID protection, since she could smell smoke through it. Those two exposures gave her classic smoke-inhalation symptoms for the next few days: shortness of breath, tightness in the chest, and itchy eyes. She doesn’t have asthma but is slightly susceptible to breathing issues, so we’ve been taking air quality seriously ever since.

While it can be anxiety-inducing to change behavior in the moment, it’s still relatively easy if you believe it will be only infrequently necessary. Tonya adjusted her schedule so she could work out indoors this past week; my current injury, an MCL sprain in my right knee, has given me an excuse not to stress out about exercising much. But the wildfires in Canada show no signs of abating, which indicates a high likelihood of additional smoke events throughout the summer. Worse, trends suggest that future wildfire seasons may become more common and more extreme. We’ve shown as a society that we can reduce human-generated pollution, but it will be a lot harder to decrease wildfire incidence and spread across vast swaths of remote territory.


1Password 8.10.8 Agen Schmitz No comments

1Password 8.10.8

AgileBits has released 1Password 8.10.8 with a grab bag of improvements and bug fixes for the password manager. The update enhances the LastPass importer with support for YubiKey two-factor authentication, displays progress while importing LastPass data, improves the import feature to prevent it from timing out while syncing, displays the Offline Items list in the sidebar if you’ve made changes that aren’t yet saved in your 1Password account, enables you to choose custom vault icons directly in the app, resolves an issue with multi-factor authentication in the LastPass importer, and fixes a bug that prevented 1Password from opening correctly in macOS 10.15 Catalina, macOS 11 Big Sur, and macOS 12 Monterey. ($35.88 annual subscription from AgileBitsTidBITS members setting up new accounts receive 6 months free, free update, 4.8 MB installer download, release notes, macOS 10.15+)

Mimestream 1.0.4 Agen Schmitz No comments

Mimestream 1.0.4

Mimestream has released version 1.0.4 of its Gmail-specific email app with a focus on bug fixes. The update resolves an issue where large message bodies sometimes displayed as an HTML file attachment, fixes a bug that occasionally caused searches to show unrelated results from an earlier query, addresses an inability to remove numbered or bulleted lists, puts a halt to embedded videos sometimes playing automatically, and ensures the calendar banner loads properly even when the system time format doesn’t match the current locale default. ($49.99 annual subscription, 12 MB, release notes, macOS 12+)

Audio Hijack 4.2.2 Agen Schmitz No comments

Audio Hijack 4.2.2

Rogue Amoeba has issued Audio Hijack 4.2.2, making improvements to accessibility throughout the audio-recording workflow app. It’s now easier to use VoiceOver with the Parametric EQ and Ducking blocks as well as the Session List window, and VoiceOver now better identifies the position of blocks. The release also adds improved options for Impulse Response resampling to the new FIR Filter, corrects various issues with deleting recordings, ensures Audio Unit plugins built using the JUCE framework properly respond to mouse events in their secondary windows, and fixes a regression with the Inspect and Actions buttons in the Recordings sidebar that caused them to start as inactive. ($64 new with a 20% discount for TidBITS members, free update, 36.6 MB, release notes, macOS 10.15+)

URL Manager Pro 6.2 Agen Schmitz No comments

URL Manager Pro 6.2

Alco Blom has released version 6.2 of URL Manager Pro, adding Cut/Copy/Paste/Delete options to a bookmark’s contextual menu. The independent bookmark management utility also adds support for importing PLIST bookmark files (i.e., Safari bookmark files). ($34.99 new, free update, 23.1 MB, release notes, macOS 10.13+)