I0T retweeted
Android SMS of Death smsofdeath.com
I0T retweeted
🚨HOLY CRAP:
Turn this off on your phone right now.
Go to your iPhone settings - accessibility - audio & visual - LIVE LISTEN.
Turn off LIVE LISTEN.
It even says it keeps TRANSCRIPTS.
This is NUTS.
Readers added context they thought people might want to know
Live Listen is Apple’s official accessibility feature that streams sound from the iPhone mic to the user’s own AirPods or hearing aids. The Remote Control setting is optional. It does not enable third-party access or always-on listening.
support.apple.com/guide/iphone/u…
I0T retweeted
New iOS Sideload Method Coming Soon. No Jailbreak, No Computer. You can create a pairing file in the app to avoid using a computer. This is the LocalDevVpn method boys!
I0T retweeted
iOS Predator Implant Analysis
blog.reversesociety.co/blog/…
I0T retweeted
RIP 🪦
Craziest bug I have ever seen in my 10 years of being in the iOS scene.
I really wish Apple would stop being so anti consumer. Everyone who knew about this had an SRD suddenly overnight and nothing bad happened.
I0T retweeted
Apple looked at this and said it is not a security issue.
macOS creates /dev/cu.usbmodem with no TCC prompt.
any process can read and write it.
a composite USB stick types Terminal open, then ships SSH keys and cloud creds back over serial.
24 seconds. no consent sheet.
Lockdown Mode does not save you if the hub was already trusted.
Apple case OE11057041574014. declined May 20.
credit: Kevin Kessler
glyph.sh/posts/macos-cdc-acm…
#macOS #InfoSec #ExploitDev
I0T retweeted
samloader-rs 2.2.0 is out!
For this release, I tasked AI agents with reverse-engineering Samsung’s official Odin4 binary alongside bootloaders across multiple device eras to build a (hopefully) rock-solid, accurate firmware-flashing implementation.
There are also plenty of smaller goodies, fixes, and features packed into this build—check out the full changelog below.
Even bigger things are in the pipeline for this project. Stay tuned! 😁
github.com/topjohnwu/samload…
I0T retweeted
I just built PanicAnalyzer — an open-source iOS app that analyzes panic-full, IPS & crash logs to help identify hardware and system issues.
Repo: github.com/iOSVNNews/PanicAn…
I0T retweeted
Analysis of FomoPeek App Store Poisoning and iOS Kernel Exploitation #DarkSword
assisaint[.]com
slowmist.medium.com/threat-i…
I0T retweeted
To celebrate iOS 27’s release, why not release a sandbox escape?
Announcing airlift: a PoC abusing a media sync path for out-of-scope access across much of /var/mobile via macOS↔iOS pairing.
No MobileGestalt edits yet; looking into it.
github.com/0xjohnnydev/airli…
I0T retweeted
iOS 26.5 mobileactivationd list of vulns published on my github:
github.com/ncxcy/iOS-26.5-mo…
I0T retweeted
memfd is not the only fileless path on Linux.
@MatheuzSecurity puts the ELF in the kernel keyring (add_key into slab), KEYCTL_READ into anon mmap, revoke, then manual PT_LOAD and a direct jump.
no execve. no fd. no inode.
/proc/self/fd stays clean. strace shows zero process start for the payload.
matheuzsecurity.github.io/ha…
PoC: github.com/MatheuZSecurity/D…
#MalwareAnalysis #LinuxSecurity #InfoSec
I0T retweeted
50 websites that feel like the internet’s hidden toolbox 🧰
1. unpaywall.org — Free research papers
2. openlibrary.org — Borrow books online
3. doaj.org — Free academic journals
4. alternativeto.net — App alternatives
5. justwatch.com — Find where to stream
6. archive.org — Internet archives
7. gutenberg.org — 70K+ free books
8. openstax.org — Free textbooks
9. openculture.com — Free courses
10. wolframalpha.com — Solve complex problems
11. photopea.com — Photoshop alternative
12. squoosh.app — Compress images
13. remove.bg — Remove backgrounds
14. cleanup.pictures — Remove objects
15. unscreen.com — Remove video backgrounds
16. carbon.now.sh — Beautiful code images
17. ray.so — Code screenshots
18. shots.so — Product mockups
19. smartmockups.com — Create mockups
20. haveibeenpwned.com — Check data breaches
21. virustotal.com — Scan files & URLs
22. privnote.com — Self-destructing notes
23. temp-mail.org — Temporary email
24. file.io — Temporary file sharing
25. archive.ph — Save webpages
26. similarsites.com — Find similar websites
27. radio.garden — Explore global radio
28. everynoise.com — Discover music genres
29. tunefind.com — Find songs from shows
30. musicforprogramming.net — Focus music
31. mynoise.net — Custom background sounds
32. coffitivity.com — Café ambience
33. elicit.org — Research assistant
34. consensus.app — Research-backed answers
35. connectedpapers.com — Research connections
36. semanticscholar.org — Academic search
37. scispace.com — Understand research papers
38. summarize.tech — YouTube summaries
39. phind.com — AI for developers
40. regex101.com — Test regex
41. codebeautify.org — Format code
42. jsonformatter.org — Format JSON
43. explainshell.com — Understand terminal commands
44. raindrop.io — Bookmark manager
45. downdetector.com — Check outages
46. tineye.com — Reverse image search
47. fast.com — Internet speed test
48. smallpdf.com — PDF tools
49. ilovepdf.com — Merge/split PDFs
50. 10minutemail.com — Temporary email
Save this. You’ll definitely need some of these later. 🔖
Follow @ameliahazelai for more useful websites, AI tools & tech resources.
I0T retweeted
Apple didn't just break AltStore.
It accidentally exposed exactly why.
Since early September, every Apple ID sign-in has been failing with HTTP 503. The culprit wasn't your account. It was one hardcoded identifier.
Apple now rejects any authentication request that identifies itself as Xcode.
Change one client token...
`com.apple.dt.Xcode` → `com.apple.akd`
...and the request reaches Apple's authentication service again.
What this fixes:
• Apple ID sign-in works again
• AltStore installs can complete
• Refresh starts working again
• Third-party Anisette servers need the same fix
The best part?
A full real-world test already completed:
• Apple ID sign-in
• AltStore install
• App refresh
• Non-jailbroken iPhone
The long-term fix is to stop hardcoding the client identifier entirely.
If you're waiting for AltStore to work again, this is the breakthrough.
