Watch This Space

Watch This Space: A security research blog.

[Watch This Space @wtsdev]

Here it is. A remarkably-simple sandbox escape: https://t.co/43fqjaCmv4

[Watch This Space @wtsdev]

I might finally write this up.

[Watch This Space @wtsdev]

@rebane2001 I find AI article coverage quite entertaining but also very frustrating at times.

[Watch This Space @wtsdev]

@ClassicII_MrMac To be completely honest, my experience with their forums has been searching up some obscure identifier while reverse engineering and finding a forum post of someone absolutely convinced they've been hacked and posting logs as "proof" that incidentally include that identifier.

[Watch This Space @wtsdev]

I know some people may be upset at Calif reporting these bugs to Apple (especially as it pertains to the viability of jailbreaks), but I believe this is a good thing in the long run. I'm glad vulnerabilities are getting reported and fixed. The alternatives are worse.

[Calif @calif_io]

Lockdown Mode can't stop every attack, but it still offers valuable protection. We recommend turning it ON.

We continue to report vulnerabilities to Apple, and our work should help make Lockdown Mode and Apple devices even more secure.

[Watch This Space @wtsdev]

@OliviaGalluccii Congratulations! Excited for you.

[Watch This Space @wtsdev]

@blacktop__ Was... was this not already a thing? Feels like an oversight.

[Watch This Space @wtsdev]

@ryHanson Damn, I didn't even know they had the ability to do this. Pretty cool!

[Watch This Space @wtsdev]

@IceSolst I was wondering how in the world it could be Remote. Looks like I was right. I try not to take too much stock in CVSS scores. Actual PoCs are much more informative.

[Watch This Space @wtsdev]

@R4mbb1 Damn. I was investigating Help Viewer a while ago to try and see what I could come up with. Too bad I didn't find this bug.

[Watch This Space @wtsdev]

Absolutely fantastic write-up. I really like these short and simple bugs with massive impact.

[ozgun @kultekin]

*sshole is out

if you run sshd on alpine, openwrt or any musl box with password auth on: update now

official writeup: https://t.co/hQUJXVPKwE

[Watch This Space @wtsdev]

@blacktop__ Damn. Drastic measures, but I get why they're doing it.

[Watch This Space @wtsdev]

@LuftkoppTim Google folded podcasts from their own app into YouTube Music on Android and I'm still upset over that.

[Watch This Space @wtsdev]

@PinkDraconian I'd say it depends on previous activity. For my "TCC, Who?" bug, the one where I did post a public timeline, you can see I basically backed off father and father each time: https://t.co/bMcswOVDVN

[Watch This Space @wtsdev]

@bellis1000 Fascinating stuff. The fact that this was only visible in the compiled version of the code makes me concerned that even AIs could likely miss this (as I would assume most people simply run AI security checks on their source code, not their compiled binaries).

[Watch This Space @wtsdev]

It appears to be in CSAF format: https://t.co/UnSLus0bEt

Pretty neat!

[Watch This Space @wtsdev]

Apple appears to now be including their security notes in JSON format: https://t.co/z7LDYiO3vE

Got to this by clicking the "Download JSON" link in the top right corner.

[Watch This Space @wtsdev]

@XenoKovah @snggle_ It's entirely speculation form what I've seen.

[Watch This Space @wtsdev]

@twolays To be fair, people have been calling this place Xitter for longer than the satirical clone has existed.

[Watch This Space @wtsdev]

@N104AP A near-decade-old story that seems to be making the rounds again: https://t.co/4pwLG50kBy

Has nothing to do with the new AI era except that it looks like it's being shared by AI-ish accounts.

[Watch This Space @wtsdev]

@theevilbit A few notes:

1. Most of my write-ups are missing. Granted, the one that is there is on the official CVE record, so maybe that's how Claude found it. My profile info is also a bit barren.
2. Going "back" in my browser leaves the site instead of navigating to the previous section.

[Watch This Space @wtsdev]

@AvimanyuRoy3 @never_released Quite interesting. Less catastrophic, but would definitely draw more ire towards Apple.