Viewing profile — umanghere

They did recently add the iCloud@Work compartment (right before I left), and it seemed like an OK compromise and kosher policy-wise.

This is bizarre. I used to work in offensive security, doing a lot of vulnerability research and exploit development. Given the nature of the work and the fact that our products we…

I completely encourage you to write this as a blog post, you’ve articulated all of the concerns I had with Go’s package management wonderfully.

Fascinating article, and I am surprised how well peer pressure works on LLMs. Somewhat tangential though, but I find the amount of perl clutching from the AI industry about writing…

I started reverse engineering at 13 with an IDA Pro of questionable provenance - at that time, I found it quite difficult. One thing which really helped me (and I wholeheartedly re…

https://umangis.me Not a lot of content, but enough to be of some interest to a few niches.

> 4) Hacking is Cool Pardon my French, but this is the dumbest thing I have read all week. You simply cannot work on defensive techniques without understanding offensive techniques…

I don’t mean to sound argumentative, but that’s a knee jerk response. It’s possible to reverse engineer the OS code to verify that the biometrics indeed end up on the SEP’s encrypt…

In my opinion, a better submission title would be: Open Source distributions for macOS 13.5 have been released. The current title is a bit misleading, because several parts of macO…

https://archive.is/Kxdeh

It took forever to get the document off SFTC’s website, so I mirrored it behind CloudFront for everyone’s convenience. https://blog.umangis.me/static/08539708.pdf

Unfortunately it can’t be done even if you target an M1 iPad — virtualization is locked behind an entitlement that’s not publicly available on iOS.

Just allowing kexts to be loaded should not increase the attack surface or expose the author to any currently known exploits. The reason that people avoid doing it anyways is becau…

There are publicly available SecureROM dumps online, see http://securerom.fun The author(s) maintain the site out of personal interest.

__padding replied to you, but unfortunately their comment is dead because of their account being new, so I’ve reposted it as I cannot vouch yet. > __padding 45 minutes ago [dead] […

iPhones do not use the A1 chip as of quite a few years ago. Besides, the M1 and the A12+ have significant microarchitectural similarities, to the point that the DTK used the A12Z. …

While Marcan has written in a very entertaining fashion, there is perhaps one application of this vulnerability that wasn't considered. If this can be reproduced on the iPhone, it …

They (Facebook) have done this before too. I recall that they bought full-page ads in all major newspapers to promote their "Free Basics" initiative. There are also other examples,…

You can still pull the database from an iOS backup on your Mac or created from `idevicebackup2`. The file is named `1b6b187a1b60b9ae8b720c79e2c67f472bab09c0`, `275ee4a160b7a7d60825…

On macOS, these executables can be signed with a detached signature. Surprisingly, the embedded codesignature also works (but the signature is stored in an extended attribute on th…

Speaking from experience, that's not necessarily true. EU countries accept equivalent experience in lieu of academic qualifications. Assuming that you are offered a position that p…