CipherKeeper

infosec, politics, whatever is on my mind

[CipherKeeper @CipherKeeper]

@GrapheneOS I’ve always respected that the y’all take the time to combat narratives by confident people who probably haven’t even checked the FAQ/features page or learned about the project. This media attention must be hell for y’all right now. Hopefully it settles down soon.

[Blacktop @blacktop__]

"Apple detected a message from a sender who may be trying harm your iPhone or compromise your privacy. The most important step you can take to protect yourself and others from similar attacks is to share the message with Apple." 26.6beta5

https://t.co/5XkxJPYgkY

[Mateusz Krzywicki @krzywix]

Vulnerability found with GPT 5.4-cyber with generic prompt. OpenAI models are very capable in VR and x-dev. iVerify (@IsMyPhoneHacked) partnered with (@OpenAI) to make mobile experiences safer for all users.

If we get any bounty for this vuln we will donate to spyware victims.

[Csaba Fitzl @theevilbit]

🍎🌁 Big changes to user TCC.db in macOS Golden Gate! It seems that it finally got the protection it deserves.

It was moved to:
/private/var/containers/Data/ProtectedSystem/[UUID]/Data/Library/Application Support/com.apple.TCC/

You can't access it even with FDA, and likely need "com\.apple.private.security.protected-system-container" entitlement to write to it.

[Devon Maloney @plailect]

> "For the 27 releases, we've started writing parts of the core operating system kernel in Swift."

Swift for the Kernel was an awesome project to work on this year! I'm very happy to have been able to make these first steps towards a truly memory-safe kernel possible :)

[Blacktop @blacktop__]

Seems like contacts one of the newly hardened things in iOS 27 LockDownMode

[CipherKeeper @CipherKeeper]

@mysk_co After this, I’m scared to know what a non-sandboxed app on MacOS could do… I try to use the browser rather than downloading apps whenever possible. This was a good reminder to keep doing that.

[CipherKeeper @CipherKeeper]

@mysk_co Many of these are inexcusable, but the exact timestamp of volume creation is actually insane. So many additional unique factors (Lockdown Mode, having set to 24hr time when living in US, downloaded siri voices, exact combination of apps, etc). This is great work.

[Mysk 🇨🇦🇩🇪 @mysk_co]

Introducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more

Loupe is free, private, and open source. Give it a try 👇

[CipherKeeper @CipherKeeper]

@blacktop__ @moxie You got farther than me

[CipherKeeper @CipherKeeper]

@theo Google’s Flow (https://t.co/5moht5HptY) literally made me question if the devs even use the end product. Very painful experience

[CipherKeeper @CipherKeeper]

@SenatePPG @ringwiss Calling on the Congress expert! I haven’t seen be bills “passed” before they’ve even been received. Does this happen often?

[CipherKeeper @CipherKeeper]

@MattZeitlin This one? https://t.co/pKoJblT3vS

[Matthew Zeitlin @MattZeitlin]

I think Spanberger has to win by 9 to 12 or so for Dems to feel good, but but but it is possible there’s still weakness with African American voters dragging them down in VA, while at the same time Dems put up Assad numbers in every Midwestern special or off cycle race

[Christoffer Bjelke @chribjel]

People think of this as a joke, but this is totally viable. Mullvad does this

[Kostya Serebryany @kayseesee]

Turns out Apple's M5 also has memory tagging.
Excellent!
Well, I guess I need to get one of those, in addition to a new iPhone...
https://t.co/W8CBSsdpyZ

[Dohyun Lee @l33d0hyun]

OMG.. whatsapp 0c in pwn2own

[Florian Brand @xeophon]

when an open model starts outputting tables left and right

[Stefan Esser @i0n1c]

Apple seems to love leaking upcoming features early. A partial #TXM decompilation shows #MTE support.

[prinz @deredleritt3r]

Sebastian Bubeck talked about "new training techniques" whereby o3 generated synthetic data to train GPT-5 in a way "raw web data just never could". The point was to generate not a large volume of data cheaply, but rather useful training data.

"This interaction between models foreshadows a recursive self-improvement loop."
https://t.co/0b0S8FaKKY

[prinz @deredleritt3r]

Hundreds of millions of people are about to jump from 4o straight to a reasoning model better than o3.

This is a pretty big deal.