Viewing profile — willstrafach

“Facebook Research” was the Onavo codebase, under a different name, signed by Facebook’s Enterprise certificate.

iOS devices must be activated to use them. This is indeed stored in a database. AppleCare and third-party repair centers can query activation information using GSX. You are correct…

This may help: https://chrome.google.com/webstore/detail/icloud-passwords/p...

> That said, doesn’t iOS notify you when an app wants to use location services? Did all of these users just opt into that? That seems crazy, if so. Not so crazy. Local news, weathe…

They have some pretty bad past practices: https://www.zdnet.com/article/accuweather-caught-sending-geo... And they have continued, off-and-on, to use other location-collecting SDKs…

I think the pitch here is “Semi-managed WireGuard peer provisioning and NAT punching as a service” usable by anyone who may not otherwise have a clue how WireGuard works (eg. frien…

How would that work? Connections are mainly peer-to-peer with Tailscale. An attack (I suppose pushing new key pairs to specific peers and pointing them through a malicious endpoint…

This may make sense if they were replying via e-mail to the issue.

Different poster here but just curious: Are you a Deutsche Telekom user, by chance?

The face:b00c part is in the Interface ID, so this did not even need a large block (Though I am sure they have one).

In current versions? What permission is this?

.icu, .club, and a few other gTLDs can often be found for sale at $1-2/year, so they are used by entities in need of low cost disposable domains.

That is incorrect, Corellium does not ship Apple code.

If it had a T2, that will store the Apple ID.

1. You’re allowed to use IDFA. But users will now have to allow access, as a permission dialog will pop up first. 2. The IDFA is just a simple static UUID. It cannot do a very good…

Pager messages collected on September 11, 2001. They are also a type of communication which is transmitted without encryption.

The list can be found here: https://support.apple.com/en-us/HT210770

This one is well worth a try: https://www.amazon.com/Remote-Control-Alternative-Replacemen...

Do you have a source on Apple “killing IDFA”? My understanding is that they are going to simply show a consent dialog before allowing an app to access the IDFA, similar to what the…

This exists, though not exactly as you describe: https://en.wikipedia.org/wiki/ASmallWorld

> There is nothing stopping someone for using this technique to publish an app in the AppStore officially. It has not happened though. Only app which has been in the App Store and …

They would be caught if this was submitted to the App Store. This applies to self-signed apps by those with a developer certificate.

Not replace, rather, you boot Linux over USB. That is why they describe the ephemeral device use case.

Source code: https://github.com/corellium/projectsandcastle/ The backstory is also incredibly interesting: https://projectsandcastle.org/history