Peter Mackey

IT, Security & Privacy Engineer, @Apple Developer, Ex-@exodus_io (2017) - Helping empower people with true financial sovereignty, one block at a time - #Bitcoin

[Peter Mackey @PeterMackey5]

How would you feel, if one day you woke up, and all the money you had earned - money you had worked hard and traded many irreplaceable hours of your life for - was worth nothing? How would you pay the rent, bills, and even get food on the table for you and your family?

[Peter Mackey @PeterMackey5]

@DylanMcD8 I’ve found rotating the device 360 degrees while keeping its display facing up, usually fixes it.

[Peter Mackey @PeterMackey5]

@AutoRujira @RujiraNetwork @ShapeShift @Thorwallet @leodexio @THORSwap @vultisig You left out @EdgeWallet.

[Peter Mackey @PeterMackey5]

@MoonMan421 So there’s no competition to maintain % share, once holding $tcy. So it’ll almost certainly trade at a premium.

[Peter Mackey @PeterMackey5]

@MoonMan421 I think it is important to highlight, that the network revenue share % is fixed and guaranteed with $tcy (total amount staked in network doesn’t effect payout %), compared to both bonding and liquidity providers, where larger bonds or more liquidity overall can reduce % share.

[Peter Mackey @PeterMackey5]

@EthosVentures @AaluxxMyth https://t.co/8hTK26rNTm

[Peter Mackey @PeterMackey5]

@sophieheloiset Apple’s Advanced Data Protection (ADP) for iCloud does actually still appear to be available in China.

For those unaware, ADP expands the data categories protected with e2e encryption, to include things like iCloud Backup, Photos & Drive.
https://t.co/eRhYl12dC2

[Peter Mackey @PeterMackey5]

@RealAlexJones https://t.co/FsqVY2X6pV

[Peter Mackey @PeterMackey5]

1. This issue is most likely due to the fact, that a lot of people use the words “racist” and “trump” together.

QuickType Suggestions (which works alongside Dictation) seems to be predicting your use of the word “trump” in conjunction with “racist”, then correcting itself.

[Peter Mackey @PeterMackey5]

@RealAlexJones https://t.co/FsqVY2X6pV

[Peter Mackey @PeterMackey5]

1. This issue is most likely due to the fact, that a lot of people use the words “racist” and “trump” together.

QuickType Suggestions (which works alongside Dictation) seems to be predicting your use of the word “trump” in conjunction with “racist”, then correcting itself.

[Peter Mackey @PeterMackey5]

2. This is pretty normal expected behaviour, and you’ll most likely find similar results with many other words.

QuickType Suggestions learns common usage patterns like this, via crowdsourcing using differential privacy techniques.

More info on that here:
https://t.co/IhIrXJxwu1

[Peter Mackey @PeterMackey5]

1. This issue is most likely due to the fact, that a lot of people use the words “racist” and “trump” together.

QuickType Suggestions (which works alongside Dictation) seems to be predicting your use of the word “trump” in conjunction with “racist”, then correcting itself.

[Alex Jones @RealAlexJones]

EXTREME BREAKING NEWS! I just caught apple carrying out a vicious, subliminal attack on president Trump.

When you voice note the word racist on APPLE text the word Trump pops up and then disappears.

Try it yourself folks, this attack is NEXT LEVEL EVIL. We are surrounded by deep state deception, only the truth will bring us victory.

[Peter Mackey @PeterMackey5]

Information from @Grok, on the subset of @X posts it’s trained on, the criteria for what posts get parsed, and how this could influence its political or social views.
https://t.co/WwHyi2843M

[Peter Mackey @PeterMackey5]

Apparently, @Tesla’s can’t even recognise trains 😬

[⚡️Dezmond Oliver⚡️ @dezmondOliver]

I love how @Tesla visualizes trains 😂

[Peter Mackey @PeterMackey5]

@BobBodily @BooneW @THORChain If rogue nodes attempted to collude to steal layer 1 assets, their staked $RUNE bonds would be slashed and used to buy back the layer 1 assets they stole.

Nodes are always required to stake at least 2x the value of the layer 1 assets they secure.

[Elon Musk @elonmusk]

The excess government spending is what causes inflation!

ALL government spending is taxation. This is a very important concept to appreciate.

It is either direct taxation, like income tax, or indirect via inflation due to increasing the money supply.

[Peter Mackey @PeterMackey5]

@Mullergatawny1 @0xSaigon @THORChain @EdgeWallet 😉👍

[Peter Mackey @PeterMackey5]

@Mullergatawny1 @0xSaigon @THORChain You can easily swap other #cryptocurrencies to it, on @THORChain itself.

@EdgeWallet makes it really simple and user friendly to do, under the “Exchange” tab.

[Peter Mackey @PeterMackey5]

@mysk_co Welcome 😉

[Peter Mackey @PeterMackey5]

Imagine developing a secure messaging app and neglecting to secure or sandbox its messages database at all.

“Any” user installed app running on the system, could easily access, copy and clone the entire @signalapp chat history and session, with no warning at all to the end user.

[Mysk 🇨🇦🇩🇪 @mysk_co]

TL;DR: Don't install @signalapp for macOS, it is not secure.

I carried out this small experiment:

- I wrote a simple Python script that copies the directory of Signal's local storage to another location (to mimic a malicious script or app)
- I ran the script in the Terminal and got a copy of my Signal data on my Mac
- I booted a fresh macOS installation in a virtual machine
- I transferred the copy of Signal's data to the VM and placed it where Signal expects it: ~/Library/Application\ Support/Signal
- I installed Signal and started it
- Signal started and restored my session with all the chat histories 😳
- I exchanged a couple messages with a contact from the VM and it worked 😳
- Then, I started Signal on the Mac
- I got three sessions running in unison: Mac, iPhone, and VM 😳

Messages were either delivered to the Mac or to the VM. The iPhone received all messages. All of the three sessions were live and valid. Signal didn't warn me of the existence of the third session [that I cloned]. Moreover, Signal on the iPhone still shows one linked device. This is particularly dangerous because any malicious script can do the same to seize a session.

Perhaps this flaw is what makes some users think that Signal has a "backdoor" as it is easy for sophisticated attackers to target a victim who's using the Mac app and see their chats. (The same may be also true for the Windows app)

#privacy #security

[Peter Mackey @PeterMackey5]

@signalapp could have at least stored the encryption key they used to encrypt the messages text chat database in the keychain.

For a messages app that prides itself on security, they should’ve utilised the strong security guarantees of both the system sandbox *and* the keychain.

[Peter Mackey @PeterMackey5]

Yeah, @signalapp could’ve easily secured their macOS desktop app’s messages and attachments database, by utilising system level sandboxing for its app data.

This would prevent other apps from accessing its file directory, unless the user explicitly grants them Full Disk Access.

[zooko🛡🦓🦓🦓 ⓩ @zooko]

Hey, I had the wonderful experience of discovering that I was wrong about something! I think! Can a security engineer who is up to date on this stuff help me confirm? ⤵️

[Peter Mackey @PeterMackey5]

Many thanks to @mysk_co, for researching, rediscovering and re-bringing this issue back to light 🙏

[Peter Mackey @PeterMackey5]

What makes it even worse, is that @signalapp knew about this glaring security vulnerability since 2018, and yet still failed to release a simple fix or patch for the issue.
https://t.co/LBluFSagXk