Submitted by matt_eaton
on Mon, 08/19/2019 - 11:29 AM
A Bluetooth vulnerability was released this week for devices using up to version 5.1 of the Bluetooth specification allowing an attacker to influence the key length of the encryption key needed to setup a secure connection between to devices. According to the Bluetooth SIG (Special Interest Group), an attacker can attempt to perform this attack if two vulnerable devices are wit
Submitted by matt_eaton
on Sun, 08/11/2019 - 02:01 AM
If you have ever gathered connection metrics using URLSessionTaskTransactionMetrics then you may have noticed that this year Apple has now exposed a few TLS properties to the public API. The first is negotiatedTLSCipherSuite and the next negotiatedTLSCipherSuite. The reason this is interesting is that these values seem to have been around since iOS 7, but now are being released in the Security framework in the new iOS 13 beta. These properties will be very useful for connection diagnostics
Submitted by matt_eaton
on Sun, 07/14/2019 - 12:53 PM
Following up with my WWDC 2019 Wishlist article, it looks like my wishlist item, "full release of Marzipan" did come to fruition with the release of Project Catalyst now on macOS 10.15 Catalina. With this release, developers can now port their existing iPad applications to also run on macOS. Pretty amazing right, but what does this mean for iPad developers and macOS developers that work currently in their own isol
Submitted by matt_eaton
on Tue, 07/09/2019 - 06:09 PM
Today after reviewing the public disclosure from Jonathan Letischuh on Medium about the Zoom webcam exploit I decided to take a look at my local copy of macOS 10.15 and detail my tests for anyone wanting to test this on their machine or prevent this from happening to them too. This exploit is covered in full detail at
Submitted by matt_eaton
on Sat, 06/08/2019 - 01:20 PM
Now the Google I/O’ 19 is officially in the books I wanted to do a short overview on some of the interesting Android Encryption updates announced at this years event.
Submitted by matt_eaton
on Fri, 05/31/2019 - 10:28 AM
With WWDC 2019 less than a week away, I wanted to put together a very brief article on my wish-list items for this year's WWDC. A lot of my day-to-day interests revolve around networking and info-security, so if you notice a theme in my wish-list that is why. Also, one thing I wanted to mention is that usually Swift make's it on this wish-list, but the exciting thing is Swift is now developed so much in the open that we have a good idea of what is coming and what has been release in Swift 5