Watch This Space

follow: @[email protected]

Posts

Escaping the Apple Sandbox by Spawning an Executable

How I "hacked" ChatGPT Atlas... and why it wasn't patched

DirtyDict: Escaping the macOS Sandbox and wrecking havoc

I Know The Name Of Your Wi-Fi Network

I wrote an Objective-C bridge for Node.js. Don't use it.

CVE-2025-43253: Bypassing Launch Constraints on macOS

Can You Really Trust That Permission Pop-Up On macOS? (CVE-2025-31250)

CVE-2025-24259: Leaking Bookmarks on macOS

Leaking Passwords (and more!) on macOS

CVE-2024-54471: A Primer

SQL Injection in TCC: and why it (probably) wasn't a security risk (this time)