Mysk 🇨🇦🇩🇪's banner

Mysk 🇨🇦🇩🇪

@mysk_co • 19,181 subscribers

We're two #iOS developers and occasional #security researchers on two continents. #CyberSecurity 📝https://t.co/69k7WAphKl 🇨🇦🇩🇪 Current Project: @psylo_app

Shorts

Starting in iOS 26, Apple apps seem to access contacts more aggressively. A new app/process called "ShortcutsActions" sticks out. It accesses contacts very frequently, even when the #iPhone is locked. #iOS built-in apps can access protected resources without user's permission.

Starting in iOS 26, Apple apps seem to access contacts more aggressively. A new app/process called "ShortcutsActions" sticks out. It accesses contacts very frequently, even when the #iPhone is locked. #iOS built-in apps can access protected resources without user's permission.

184,716 просмотров

I think this may be one of the last traces of Jobs-era Mac OS X design Favourites go poof! 💨 I miss the whimsy in UI design, in everything really

I think this may be one of the last traces of Jobs-era Mac OS X design Favourites go poof! 💨 I miss the whimsy in UI design, in everything really

124,982 просмотров

iOS 18 beta 3: RCS is active in Germany (A bit buggy when sending videos, still much better than SMS)

iOS 18 beta 3: RCS is active in Germany (A bit buggy when sending videos, still much better than SMS)

13,932 просмотров

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

😱 iOS 26.4.2 still leaks the real IP when updating VPN apps. Motivated by Mullvad's recent blog, we made a website that logs the iPhone IP every second. We started Mullvad VPN, opened the website, then let Mullvad updated in the background. See the leaks in action.. 🤯

😱 iOS 26.4.2 still leaks the real IP when updating VPN apps. Motivated by Mullvad's recent blog, we made a website that logs the iPhone IP every second. We started Mullvad VPN, opened the website, then let Mullvad updated in the background. See the leaks in action.. 🤯

Mysk 🇨🇦🇩🇪

724,727 просмотров • 1 месяц назад

🚨 iMessages in iOS 26 leaks the sender's keyboard language when sending reactions to devices with iOS 17 or older, and Android phones via RCS! 😱 #privacy #Apple #iOS26

🚨 iMessages in iOS 26 leaks the sender's keyboard language when sending reactions to devices with iOS 17 or older, and Android phones via RCS! 😱 #privacy #Apple #iOS26

Mysk 🇨🇦🇩🇪

949,552 просмотров • 8 месяцев назад

😎🔬 Proton VPN just got updated. When iOS updated the app with the kill switch on, it was a total mess: iOS blocked internet for nearly 6 minutes, then terminated the app and its VPN tunnel, exposing iPhone traffic and IP. The VPN required a manual restart 😠. Watch this demo:

😎🔬 Proton VPN just got updated. When iOS updated the app with the kill switch on, it was a total mess: iOS blocked internet for nearly 6 minutes, then terminated the app and its VPN tunnel, exposing iPhone traffic and IP. The VPN required a manual restart 😠. Watch this demo:

Mysk 🇨🇦🇩🇪

103,363 просмотров • 1 месяц назад

Signal Desktop is not secure. With every vulnerability we discover on macOS, we find Signal Desktop to be an easy target. In this video, we show how a Signal session can be stolen and restored on a remote Mac without the user being aware. Only use Signal on iPhone or Android

Signal Desktop is not secure. With every vulnerability we discover on macOS, we find Signal Desktop to be an easy target. In this video, we show how a Signal session can be stolen and restored on a remote Mac without the user being aware. Only use Signal on iPhone or Android

Mysk 🇨🇦🇩🇪

36,576 просмотров • 15 дней назад

Found another example: iTunes Store Zero Liquid Glass and untouched since the iOS 7 flattening, but still you can get the latest Taylor Swift album The best part: the app still lets you customise the bottom tab bar, a feature that existed when iOS was still called iPhone OS

Found another example: iTunes Store Zero Liquid Glass and untouched since the iOS 7 flattening, but still you can get the latest Taylor Swift album The best part: the app still lets you customise the bottom tab bar, a feature that existed when iOS was still called iPhone OS

Mysk 🇨🇦🇩🇪

80,590 просмотров • 7 месяцев назад

Since iOS 18 launched, the new Passwords app has been using unencrypted HTTP to download icons for password entries—a potential #security risk. We reported this bug to #Apple in September, and it’s finally fixed in #iOS 18.2 (CVE-2024-54492). Why does this matter? Watch 🎬 :

Since iOS 18 launched, the new Passwords app has been using unencrypted HTTP to download icons for password entries—a potential #security risk. We reported this bug to #Apple in September, and it’s finally fixed in #iOS 18.2 (CVE-2024-54492). Why does this matter? Watch 🎬 :

Mysk 🇨🇦🇩🇪

156,170 просмотров • 1 год назад

Forget about switching off "Share Analytics Data" in Pages settings. Keynote, Numbers, and Pages share it regardless of your choice. #Privacy #Apple

Forget about switching off "Share Analytics Data" in Pages settings. Keynote, Numbers, and Pages share it regardless of your choice. #Privacy #Apple

Mysk 🇨🇦🇩🇪

25,398 просмотров • 3 месяцев назад

🎬 So this scam #2FA app is using custom product pages of Apple Search Ads to trick users. It has different campaigns per search keywords. When searching for "Microsoft Authenticator", it shows screenshots highlighting "Microsoft". and when searching for "Google Authenticator", it highlights "Google". Watch the video 🤯 It's worth noting that custom product pages need to be approved by App Store Connect and Apple Search Ads. This app steals 2FA secrets and its model is very suspicious as noted below. #Privacy #Apple #iOS #cybersecuritytips

🎬 So this scam #2FA app is using custom product pages of Apple Search Ads to trick users. It has different campaigns per search keywords. When searching for "Microsoft Authenticator", it shows screenshots highlighting "Microsoft". and when searching for "Google Authenticator", it highlights "Google". Watch the video 🤯 It's worth noting that custom product pages need to be approved by App Store Connect and Apple Search Ads. This app steals 2FA secrets and its model is very suspicious as noted below. #Privacy #Apple #iOS #cybersecuritytips

Mysk 🇨🇦🇩🇪

66,693 просмотров • 2 лет назад

This is how you choose a default browser in iOS 17.4 in the EU. The prompt shows a list of browser options. Tapping on a browser option opens the browser's page on the App Store. What happens if any of these browsers is only available on an alternative marketplace?

This is how you choose a default browser in iOS 17.4 in the EU. The prompt shows a list of browser options. Tapping on a browser option opens the browser's page on the App Store. What happens if any of these browsers is only available on an alternative marketplace?

Mysk 🇨🇦🇩🇪

13,023 просмотров • 2 лет назад

Больше нет контента для загрузки