Blog
Researchers using Anthropic's Mythos Preview bypassed Apple's Memory Integrity Enforcement in macOS M5, achieving privilege escalation through legitimate system calls. What does this mean for mobile security?
Every MEMS sensor has a tiny manufacturing defect that makes it unique. I built an iOS app to measure it — and found that two devices are as easy to tell apart as people's faces.
A static analysis of the Dopamine jailbreak using Ghidra. 6,660 strings and a handful of class names are enough to reconstruct the full 4-stage attack chain — kernel exploit, filesystem remount, sandbox escape, and persistence — without executing a single instruction.
Frida lets attackers intercept method calls and modify return values in real time. If you're building apps that handle payments, healthcare, or authentication — your threat model needs to include runtime instrumentation attacks.
Most mobile apps are structured well — clean layers, nice abstractions. That helps teams ship. It does not answer the security question. The real boundary is trusted vs untrusted, and the client should never be the final place where trust is decided.
Most mobile security advice assumes a generic adversary. Real attackers fall into distinct tiers — from nation-state mercenary spyware to opportunistic credential harvesters. Here's how to model the threat correctly.
A modern smartphone is a network of specialized processors, each with its own attack surface. Baseband, Secure Enclave, NPU, Wi-Fi/Bluetooth controller — here's the hardware attack surface most people ignore.
Short-lived secret bytes should not hang around longer than necessary. SecretMemory is a small Swift Package that makes the secure path the easy path for login forms, one-time tokens, and crypto material.
Checks inside the app are valuable signals, but not a source of absolute trust. The real question is where trust lives when the app can no longer trust itself.
Memory Integrity Enforcement on A19 hardware brings hardware memory tagging to iPhone. Use-after-free and buffer overflow bugs go from 'maybe exploitable' to 'crash on contact.'
A career pivot from iOS developer to security engineer — how building apps for 12 years turned out to be the best preparation for figuring out exactly where they break.
Stay in the loop
New posts on mobile security, jailbreaks, and iOS reverse engineering.