Validate Real Apps With App Attest
Explains Apple's App Attest for iOS app integrity, covering threat models and cryptographic validation to prevent fake-client abuse in server-backed apps.
Explains Apple's App Attest for iOS app integrity, covering threat models and cryptographic validation to prevent fake-client abuse in server-backed apps.
A security researcher details 'SiriSpy', an iOS bug that allowed apps to secretly record Siri conversations and dictation via Bluetooth accessories without microphone permissions.
An update on the iOS security testing tool Needle, including upcoming conference talks and a hands-on exploitation workshop.
An introduction to Needle, an open-source modular framework for conducting security assessments of iOS applications.
Needle is an open-source modular framework for streamlining security assessments of iOS applications, similar to drozer for Android.