π New Blog Post: Thoughts on Responsible Disclosure We recently disclosed issues in WebKit that affected Psylo and iCloud Private Relay. This has sparked some debate, so we want to explain our reasoning and share some thoughts on responsible disclosure mysk.blog/2026/08/25/r...
Mysk π¨π¦π©πͺ
Mysk π¨π¦π©πͺ
@mysk.bsky.social
We're two #iOS developers and occasional #security researchers on two continents. #CyberSecurity π¬ https://youtube.com/@mysk π https://mysk.blog
436 followers106 following252 posts
IP and DNS Leaks in WebKit Affecting Proxy Browsers and Apple iCloud Private Relay mysk.blog/2026/08/04/w...
Many of you have asked for a way to support the Loupe project. We want to keep Loupe free of in-app purchases, so instead weβve created a Buy Me a Coffee page for anyone whoβd like to show their appreciation. β buymeacoffee.com/mysk
π¨ PSA: Uninstalling Google Chrome on macOS doesn't remove Chrome's background updater. It keeps running until you remove: ~/Library/Application Support/Google/GoogleUpdater ~/Library/LaunchAgents/com.google.GoogleUpdater.wake.plist Then, restart.
Google Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. Due to a macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy) youtu.be/lLJkxWR71B0
Google Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. Due to a macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy) youtu.be/lLJkxWR71B0
π¨ We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web, no password or warning is required. mysk.blog/2026/07/23/m...
Apparently Apple has fixed the clipboard counter in iOS 27 beta 3 thanks to Loupe. βοΈ Now the counter resets after a restart. Hey Apple, a little shoutout to the Loupe project would have been nice! Loupe is free and open source. You can download Loupe here: apps.apple.com/us/app/loupe...
For new users who need more time to explore Psylo unique privacy features, use this code to get a free monthly subscription: HAPPYFRIDAY27 Or use this link ποΈ apps.apple.com/redeem?ctx=o... The code is valid through the weekend
Mysk π¨π¦π©πͺ reposted
oh how did i miss this? excited to jump into it, mysk gives us the best iOS toys.
Introducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try itπ apps.apple.com/app/id676615...
Introducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try itπ apps.apple.com/app/id676615...
Thanks a million for everyone who shared, downloaded, or rated Loupe. We have great plans for Loupe in the future. This huge reception is very encouraging. Privacy shall prevail. Thank you π
Introducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try itπ apps.apple.com/app/id676615...
Mysk π¨π¦π©πͺ reposted
Mysk has done the public a profound service by releasing this app for free. I was astonished at the accuracy of the profile it provided. Great way to get a sense of your iOS device's personal data exposure!
Introducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try itπ apps.apple.com/app/id676615...
Mysk π¨π¦π©πͺ reposted
Very well done and scarily eye opening!
Introducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try itπ apps.apple.com/app/id676615...
If Loupe can see it, any app can see it.
Introducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try itπ apps.apple.com/app/id676615...
Mysk π¨π¦π©πͺ reposted
Replying to @lucas.love
Today is about Loupe by @mysk.bsky.social and a surprising fingerprinting identifier that's used against you.
Found this cute little app by @tinrocket.bsky.social and thought I make a quick video about it. I wish we would see more playful apps like this. videos.cdn.lucas-fischer.com/videos/day-0...
Mysk π¨π¦π©πͺ reposted
Even without you giving them any permissions, mobile apps can learn a whole lot about (and potentially identify) you. π€π²
Introducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try itπ apps.apple.com/app/id676615...
Black Friday Sale! Download Psylo and enter the code BLACKFRIDAY25 to grab your annual subscription for only $29.99, that's 50% off the regular price of $69.99! Existing customers can take advantage of this offer too. π Valid until Monday! apps.apple.com/redeem?ctx=o... #Privacy
Black Friday Sale! Download Psylo and enter the code BLACKFRIDAY25 to grab your annual subscription for only $29.99, that's 50% off the regular price of $69.99! Existing customers can take advantage of this offer too. π Valid until Monday! apps.apple.com/redeem?ctx=o... #Privacy
This is a test account we created to test the new feature that 1Password just announced about unlocking the app with the Mac password, as it relates to our recent work. Here's the link that was shown in the screenshot: a.1passwordusercontent.com/VL4OMT3IFZDB...
Great news. Apple collects exhaustive analytics when you view apps in the App Store app. The detailed analytics is linked to your identity and there is no way to turn the massive data collection off. Now iPhone users can view apps anonymously in a browser www.macrumors.com/2025/11/03/a...
Holy smoke π€― This bug has led us to gain access to any app's Keychain entries on macOS. π€―π€―π€―π€―π€―π€― Still, no time to report it to Apple yet
ποΈπ We accidentally found a security flaw in macOS Tahoe and earlier An attacker can trick a user into performing a simple yet common action that breaks the sandbox protection of any file (e.g iMessage database and Safari browsing data) giving any application permanent access to the target file
ποΈπ We accidentally found a security flaw in macOS Tahoe and earlier An attacker can trick a user into performing a simple yet common action that breaks the sandbox protection of any file (e.g iMessage database and Safari browsing data) giving any application permanent access to the target file
Apple started to proxy requests to Google's safe browsing service in iOS 14.5. This was done to prevent leaking IP addresses to Google. Is it a bug? Or Apple stopped hiding our IPs from Google in iOS 26? thehackernews.com/2021/02/appl...
In the official announcement "on-device AI model" was only used in the workout section. Yikes! www.apple.com/newsroom/202...
Mysk π¨π¦π©πͺ reposted
As Psylo is the only #iOS browser that opens App Store links anonymously in the web, the review link below will open in the web view. Copy the link and paste it in another browser. It should take you to the App Store to rate Psylo π
Love Psylo? We really appreciate sharing your experience in a review! Your feedback helps Psylo climb the App Store search results. We intentionally donβt prompt for ratings in the app to keep it user-friendly. Leave your review here: π apps.apple.com/app/id674135...
Mysk π¨π¦π©πͺ reposted
π¨Psylo is impacted by Proton VPN technical difficulties. We have disabled Proton VPN in the Mysk Private Proxy Network at the moment. Psylo proxies can work without Proton VPN exit nodes. status.proton.me
Mysk π¨π¦π©πͺ reposted
I asked Plex a bunch of questions about its data breach of user account information, but the company wouldn't say why it hasn't force-reset its users' passwords and is instead asking users to do it. The company also hasn't explained how (and to what extent) it scrambled those passwords.