Gregg Jaskiewicz

dear iOS developers . Please pay someone to do pen testing of your apps. Or at the least - open up the IPA file (the zipped up bundle) and have a look at what you're shipping in the bundle.
Like, for instance if there's a private key in there - perhaps rethink your life choices.

kthx

#securityresearch #iosdev #security #programming #macdev #AppleDeveloper #reverseengineering

Sending disclosures to people is the opposite level of excitement to when you discover them .
Anxiety and depression ensues .
Or is that just me ?

#securityresearch

Imagine exposing all your docker containers in live system for anyone to pull.
I just had to report that to a real business with 10+ history.

Oops

Love it when licensing verification code has 3 different implementations of simple calendar look up. But they use rand()%N to sometimes skip some of them .
I got so many pieces of advice for the person who think it’s clever (it’s not).
Use the @ when contacting me ;-)

#ifyouknowyouknow #securityresearch #licensing #software #security #business

Hmm, sent disclosure in early feb. Company still has not implemented the simplest of points , like leaving cloud debug log files in app bundle .
Wtf is wrong with some businesses

still waiting for AI to do my job better than I do folks..

treat yourself. Have a pancake ! #pancakeday

Introducing BullCrap: New programming language - just for AI. You won't understand it, so I won't publish the spec. It's just for AI , by AI. I didn't even write it. I was told to talk about it tho. Soon to be powering Android phones and Windows shitboxes near you.

#programming #introduction #apps #software

#moderndayslavery He Leaked the Secrets of a Southeast Asian Scam Compound. Then He Had To Get Out Alive.

A journalist received an encrypted email from a source claiming to be a computer engineer working inside a major crypto romance scam operation in the Golden Triangle.

A Must read .

https://apple.news/Ac2HtjYPtQh2akK5S37N2KA

You’d think Apple would be interested in handing folks decrypted IPA’s of iOS apps
. Especially free ones .

#ios #reverseengineering #cybersecurity #securityresearch #Applesecurity

Meep

Going back to learning #violins , because #guitar was too easy

@deviantollam@defcon.social how are you doing? Time has past since I asked this sincerely last time. Just wanted to check in.