Watch This Space: A security research blog.

The Interwebs
Joined August 2024
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Replying to @XenoKovah @snggle_
It's entirely speculation form what I've seen.
18
Replying to @twolays
To be fair, people have been calling this place Xitter for longer than the satirical clone has existed.
4
135
Replying to @N104AP
A near-decade-old story that seems to be making the rounds again: forbes.com/sites/leemathews/… Has nothing to do with the new AI era except that it looks like it's being shared by AI-ish accounts.
1
38
Replying to @theevilbit
A few notes: 1. Most of my write-ups are missing. Granted, the one that is there is on the official CVE record, so maybe that's how Claude found it. My profile info is also a bit barren. 2. Going "back" in my browser leaves the site instead of navigating to the previous section.
1
2
219
Quite interesting. Less catastrophic, but would definitely draw more ire towards Apple.
1
1
67
Replying to @never_released
This would be fucking catastrophic, in my opinion. Way too far. I think Apple needs to provide a granular alternative to FDA, not simply make it harder to approve.
1
3
233
Replying to @theo
I'm of two minds on this. I absolutely understand the security reasons why Apple does what they do, and I find it commendable. Unfortunately, they're also fighting an uphill battle against dev environments with less local attack mitigations.
3
147
Replying to @patrickwardle
Damn, pretty cool!
1
167
Replying to @blacktop__
Pretty cool! Did extraction get faster too?
214
Replying to @S1r1u5_
Damn. Excited to see it!
1
807
Replying to @blacktop__
Damn. It was good while it lasted.
21
5,705
Replying to @blacktop__
Fascinating stuff, especially given process execution is already so locked down on iOS.
1
6
1,820
Replying to @wtsdev @birch_js
That being said, AppleScript is built on top of the Apple events API, and I think JXA is too. And I don't that API's "exit" command returns success state. Not to mention that it's app-to-app directly. It's likely infeasible for an app to report itself as successfully quit. /end
66
Replying to @birch_js
So, I know a lot about AppleScript internals. It targets an app by name and resolve that name to a specific instance, entirely outside of user control, so I don't think it supports multi-instance well at all. Not sure about JXA, but event-listening might be a language feature. /1
1
1
77
Replying to @birch_js
Read the OSA section of that Wikipedia article. Both AppleScript and JXA use the Open Scripting Architecture. Same interface. Not a direct binding, to my understanding. I don't think there's anything that JXA can do that AppleScript can't (save for specific language features).
1
26
Replying to @birch_js
Isn't JXA just AppeScript, but with JavaScript instead (i.e. they both use the same communication protocol / commands)?
1
90
Replying to @yo_yo_yo_jbo
Yeah, I agree it is different. I believe that credit should be given to the appropriate party here.
40
Replying to @yo_yo_yo_jbo
Maybe it's just me, but I genuinely don't see this as some major revelation. Maybe it's because I saw all the early chatter about privacy concerns of businesses pasting their closed-source code into ChatGPT. And/or maybe I'm just aware that electronic privacy is vanishingly rare.
1
139