mastodon
4.6.0-nightly.2026-03-19
We're two #iOS developers and occasional #security researchers on two continents. #CyberSecurity 🇨🇦🇩🇪
We're two # iOS developers and occasional # security researchers on two continents. # CyberSecurity 🇨🇦🇩🇪
#Instagram to shut down its end-to-end encrypted chat so it can do more of this:
Instagram servers download any link sent in DM even if it's 2.6 GB
We're two # iOS developers and occasional # security researchers on two continents. # CyberSecurity 🇨🇦🇩🇪
We're two # iOS developers and occasional # security researchers on two continents. # CyberSecurity 🇨🇦🇩🇪
Our work that led both iOS and Android to protect access to the clipboard highlighted the private information added to photos your phone takes. We have created this web tool that helps you view and strip this information. All done locally in the browser.
#privacy #infosec #security #iOS #Android
We're two # iOS developers and occasional # security researchers on two continents. # CyberSecurity 🇨🇦🇩🇪
Trying something a little different for
@psylo@infosec.exchange :
Hide silos behind NFC tags
Been spending waaay too much time in Psylo (we use it for all our social media accounts). Locking certain silos behind an NFC tag and physically putting it away would be a godsend for ADHD 😬
We're two # iOS developers and occasional # security researchers on two continents. # CyberSecurity 🇨🇦🇩🇪
We needed to create a website for
@psylo@infosec.exchange and wanted to see if AI agents are any good at web design
Answer is: not bad at all. It wont win any design awards but it came up with something very very decent. Check it out:
We're two # iOS developers and occasional # security researchers on two continents. # CyberSecurity 🇨🇦🇩🇪
This can be interpreted in such a broad manner that even HTTPS could be considered a hostile act of “end-to-end” encryption 🇬🇧
NoToDigitalID:
BREAKING: Under British and UK Legislation anyone using or developing end-to-end encryption is now a “hostile actor”
We're two # iOS developers and occasional # security researchers on two continents. # CyberSecurity 🇨🇦🇩🇪
We're two # iOS developers and occasional # security researchers on two continents. # CyberSecurity 🇨🇦🇩🇪
Yep, it’s fixed in 26.4!
Bottom is 26.3 (25D125) and top is 26.4 Beta 1 (25E5207k)
We're two # iOS developers and occasional # security researchers on two continents. # CyberSecurity 🇨🇦🇩🇪
The Messages app accessed my contacts next month 🤪. That's what the privacy report says.
We're two # iOS developers and occasional # security researchers on two continents. # CyberSecurity 🇨🇦🇩🇪
Can’t believe a year has passed since we seeded the first Psylo beta to testers
It really has come a long way, and it’s insane to think we didn’t set out to actually build a browser 😅
You can read more about how @psylo@infosec.exchange came to be on our blog:
We're two # iOS developers and occasional # security researchers on two continents. # CyberSecurity 🇨🇦🇩🇪
@lapcatsoftware@mastodon.social I don't want to say that the Lockdown Mode is useless, but every security bug we discovered and reported to Apple also affected the Lockdown Mode.
We're two # iOS developers and occasional # security researchers on two continents. # CyberSecurity 🇨🇦🇩🇪
The Privacy Labels for the new apps in the Creator Studio bundle indicate they collect significantly more data than their one-time purchase versions. For instance, look at Final Cut Pro:
We're two # iOS developers and occasional # security researchers on two continents. # CyberSecurity 🇨🇦🇩🇪
🤯 Instagram is testing new iOS push notifications that include a profile photo. Each time the notification is shown on your screen, it triggers a GET request to fetch that image, letting Meta track every on-screen impression.
The app still misuses push notifications to send detailed device analytics about the device (uptime, battery, volume, locale, timezone, memory, CPU, etc.)
