Neal retweeted
In April, @samwcyo and I discovered a way to bypass airport security via SQL injection in a database of crewmembers. Unfortunately, DHS ghosted us after we disclosed the issue, and the TSA attempted to cover up what we found.
Here is our writeup:
ian.sh/tsa
Neal retweeted
Security researchers found flaws in Saflok hotel keycard locks, used on 3 million doors in 13,000 properties worldwide, that can be used to open them in seconds. The lockmaker Dormakaba has been working on a fix but told them only 36% of locks are updated. wired.com/story/saflok-hotel…
How does one use iCloud for only passkeys along with @1Password? Can’t disable iCloud passwords to only use passkeys and can’t disable passkeys on 1Password makes both experiences terrible. Anyone found a good solution?
Neal retweeted
The iPhone Dev Team domain iphwn.org expired a few months ago, and two weeks ago was acquired by someone for $1,260 USD at an auction.
The domain now hosts a broken wiki archive, seems to be grabbed from archive.org. Whois indicates the owner is in Illinois.
Who owns this?
Neal retweeted
Woohoo! WhatsApp has released key transparency! engineering.fb.com/2023/04/1…
“By a truly unbelievable coincidence, I was recently out for a walk when I saw a small package fall off a truck ahead of me.” 🤔
Our latest blog post explores vulnerabilities and possible Apple copyright violations in Cellebrite's software:
"Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer from an app's perspective"
signal.org/blog/cellebrite-v…
Neal retweeted
A reminder that if you install the developer beta, and it's a buggy mess, you can downgrade at ipsw.me ;)
Twitter has made it so hard to use Tweetbot these days without streaming and delayed notifications and all
Neal retweeted
The placeholder for the software update is up 👍 mesu.apple.com/assets/iOS14D… #GettingReal