#apple
-
Enhance SMS-delivered code security with domain-bound codes - Discover - Apple Developer (developer.apple.com)
-
I wrote an in-depth explanation of the "Sign In with Apple" Zero-Day that was revealed by a security researcher this weekend.
The problem had nothing to do with OAuth or JWT, and you might be surprised at how simple the bug actually was.
https://aaronparecki.com/2020/05/31/30/the-real-cause-of-the-sign-in-with-apple-zero-day -
The Real Cause of the Sign In with Apple Zero-Day
The zero-day bug in Sign In with Apple actually had nothing to do with the OAuth or OpenID Connect part of the Sign In with Apple exchange, and very little to do even with JWTs. Let's take a closer look to see what actually happened.continue reading... -
My 2017 12" MacBook is starting to show its age, but I hate that there is nothing to replace it right now. There's no reason to get a MacBook Air since it's the same form factor as the 13" Pro. But it seems unlikely they're going to release a small computer again at this point.
-
welp, the rumors were true, Google did in fact buy FitBit: https://www.theverge.com/2019/11/1/20943318/google-fitbit-acquisition-fitness-tracker-announcement
I *want* to switch to an Apple watch, but I can't until it has built-in automatic sleep tracking like the FitBit does!
