Indie Apple Developer

I develop my own macOS and iOS apps with Swift and sell them. $211 in sales since February 2025. Full time ML engineer in a US startup. Discord/Telegram: @kopyl

[Indie Apple Developer @indieappledev]

@DrWhax I have a couple of questions. Would appreciate it very much if you could answer :)

1. Is there a way to convert a decrypted .ipa for macOS?
2. Where can I get the Private 16-byte account credential?
3. Why did you decide to leave all Mach-O executables encrypted on conversion?

[Indie Apple Developer @indieappledev]

@Sir_Cisco_ @forcequitOS Unfortunately governments are not forcing them to

[Indie Apple Developer @indieappledev]

@DGRS252191 @lilkev1619 @pwnlambda Some of them did, but I don't remember which ones

[Indie Apple Developer @indieappledev]

@GoldenCicada Why do you recommend updating to the latest OS if it's Chrome-affected-only bug?

[Indie Apple Developer @indieappledev]

@OwariDa Any ideas on how to verify it on iOS?

[Indie Apple Developer @indieappledev]

@DrWhax Yeah. But this does not tell anything about the attack surface

[Indie Apple Developer @indieappledev]

@v12sec What is the scope of this vulnerability?

[Indie Apple Developer @indieappledev]

@DrWhax But do you have any ideas on what exactly an attacker can perform?

[Indie Apple Developer @indieappledev]

@DrWhax yyyyep
https://t.co/DNznDOCCrC

[V12 @v12sec]

Any telegram message can now become RCE

6630b003766baed1fa86cea880d22e41dc416f63d800de3246941ede2396ad48

[Indie Apple Developer @indieappledev]

@Sir_Cisco_ @forcequitOS If an app passed the review, your App Store app is contaminated

[Indie Apple Developer @indieappledev]

@forcequitOS Additionally? Isn't this the only way? Except of course Test Flight and sideloading (things most people never use).

Also why should we worry and update our iOS, if this can be detected automatically by Apple, can't it?

[Indie Apple Developer @indieappledev]

@binance So how can one exploit it without an app?
I must install an app with the malicious code, right?
And this code is supposed to be scanned on automatic Apple review when submitting an app, right?

If so, what's the point of updating if it's expected to be enforced by Apple?

[Indie Apple Developer @indieappledev]

@EowynChen So how can one exploit it without an app?
I must install an app with the malicious code, right?
And this code is supposed to be scanned on automatic Apple review when submitting an app, right?

If so, what's the point of updating if it's expected to be enforced by Apple?

[Indie Apple Developer @indieappledev]

@lilkev1619 @pwnlambda And jailbreak communities used to release patches, so you can keep your device jailbroken and also secure

[Indie Apple Developer @indieappledev]

@pwnlambda @dev_majd Reminder: unless there is no PoC, we’re all kind of safe

[Indie Apple Developer @indieappledev]

@Dynamon911 @vctgomes What’s the point of it if the CDN files are encrypted?

[Indie Apple Developer @indieappledev]

@JMkernt @dev_majd Wow. Thank you.

[Indie Apple Developer @indieappledev]

@hieudinh_ Does it let me choose between the liquid ass and the proper design?