johnny

iOS & MacOS Researcher @trycua

previously zeroxjf

[johnny @0xjohnny]

.@thsottiaux I've had this a couple times, but eventually it just disappears without telling me outcome.

e.g. was I routed to a different model or did the "systems" permit what I was doing. Follow up dialogue would be helpful

[johnny @0xjohnny]

🎉

[johnny @0xjohnny]

I was able to recover my original handle from back in the early iOS jailbreaking days! (0xjohnny).

Throwback to when I was 16, modifying other people’s tools just enough to achieve an outcome. Some things never change

https://t.co/THKmxgUSIS

[johnny @0xjohnny]

Looking forward to pretending I know what I'm doing with this and #usbliter8

[Air Katakana @airkatakana]

oh boy, i can’t wait to use fable 5 for

non-coding
non-biological
non-cybersecurity tasks
for up to 50% of my usage limits
for about a week

[johnny @0xjohnny]

Nice try Mythos/Glasswing but you haven't won just yet

17 Pro Max / iOS 27b2

[pwnerblu @pwnerblu]

i actually managed to do it omg

iPhone XR tether downgraded from iOS 18 to iOS 14.0 beta 4, without saved SHSH!

This video shows a tethered boot. NO ETA, and do not ask for an ETA. I am not releasing it yet.

[johnny @0xjohnny]

Reposting if someone qualified wants to join the dark side

[Mykola Grymalyuk @khronokernel]

Our team for Apple's Bug Bounty is hiring! If you love working on overly complicated vulnerability reports at scale, this is the role for you:
https://t.co/Kx47KSHvTM

[Low Level @LowLevelTweets]

Malware implies the existence of buenoware

[johnny @0xjohnny]

Just saw like 8 Mac Studio configs pop up on Apple Refurbished, then sell out literally within 2 minutes. It was several units per config, too.

[johnny @0xjohnny]

@Helthydriver Certainly, which makes sense, but it feels a bit odd they made a point to call it out. Like they’re trying to get out in front of something. Like I said, could be nothing, but they did not handle DarkSword PR well despite having advance notice

[johnny @0xjohnny]

Somewhat odd statement for Apple to give alongside a minor update, especially w/ no ITW exploit mention.

Serious tranche of WebKit bugs + kernel leak patch. Could be standard PR vigilance, but not waiting for 26.6 public kinda smells like another exploit chain floating around 🤔

[MacRumors.com @MacRumors]

Apple Released iOS 26.5.2 Security Fixes Early to Thwart AI-Assisted Hacks https://t.co/abbUyYEecl

[johnny @0xjohnny]

Based on my experience so far, Apple may have not only used Claude to fix many UX issues in iOS 27, but also Mythos-level security scans/patches to harden the system overall.

There are still bugs, obv, but more difficult to find than when I first started AI analysis/fuzzing.

[johnny @0xjohnny]

Selling a few DarkSword-vulnerable test devices I no longer need, varying condition.

16 PMs are solid, but USB data connection can be shaky; charging is fine. 12 mini is scuffed but works. Regular 12 is beat up but on 17.0, useful if repaired without updating. DM if interested.

[Alfie @alfiecg_dev]

We out here (and under SPTM) #coruna

[throwaway_account_67 @67_throwaway]

Another really solid writeup. I'd suggest anyone interested in iOS research to check out their work.

[johnny @0xjohnny]

iOS 27 kernel OOB read attempt! Latest Patreon post for Partner tier with access to most sensitive bug research
https://t.co/iiGTIINI8U

[johnny @0xjohnny]

Apple saying “we shielded our customers for as long as we could” while raising prices despite averaging ~45% gross margins and ~25% net margins over the last 5 years is ridiculous.

When input costs crush business, price hikes make sense. A $4T company gets no sympathy from me.