Post #1558894

2026-04-21 13:09 UTC

Announcement: we are working on a new #privacy app for iOS that raises awareness about which device signals and data a native app can see once installed on the iPhone even without requesting any permission. The app is going to be free and open-source. #Apple #iOS #infosec

Replies (5)

@mysk@mastodon.social 2026-04-21 22:13

For example, there's an API that returns a global counter which increments every time you copy something to the clipboard in any app. In this early prototype, the count is 1349. All installed apps can silently read this value and potentially abuse it for fingerprinting.

Open ##2723139
@nemo@mas.to 2026-04-21 13:37

@mysk@mastodon.social Great :) what will be the name of the app? 🤔

Open ##2723143
@Atom0@mamot.fr 2026-04-21 14:56

@mysk@mastodon.social thank you for this I know for example that the device accelerometer is accessible. That means that the app can log this data and know if I’m on a desk, standing up, using my phone in movement, etc I don’t know why Apple didn’t make a portal for this yet In fact only an orientation api is required…

Open ##2723148
@knirirr@mamot.fr 2026-04-23 05:38

@mysk@mastodon.social is number associated with the phone's SIM accessible to any app?

Open ##2723152
@robin@kipp.social 2026-04-24 18:44

@mysk@mastodon.social Please also call out the fact that apps can query which accessibility features are enabled on an iOS device, such as VoiceOver. Not only can this be used for fingerprinting, but it can also be used to make good guesses on which physical disabilities / impairments a user might have.

Open ##2723162