Mysk 🇨🇦🇩🇪
@mysk.bsky.social
We're two #iOS developers and occasional #security researchers on two continents. #CyberSecurity 🎬 https://youtube.com/@mysk 📝 https://mysk.blog
IP and DNS Leaks in WebKit Affecting Proxy Browsers and Apple iCloud Private Relay mysk.blog/2026/08/04/w...
IP and DNS Leaks in WebKit Affecting Proxy Browsers and Apple iCloud Private Relay
WebKit-based browsers on iOS and macOS can be configured to route all web traffic through proxy servers, which is how Tor browsers on iOS and our own Psylo work. We found three WebKit features — DNS p...
mysk.blog
Super quick BADBOOL update: I added instructions for opting out of Unite4 Heritage and OpenDataUSA (which has political donations), and to remove the now-defunct Neighbor Report. github.com/yaelwrites/B...
GitHub - yaelwrites/Big-Ass-Data-Broker-Opt-Out-List
Contribute to yaelwrites/Big-Ass-Data-Broker-Opt-Out-List development by creating an account on GitHub.
github.com
Many of you have asked for a way to support the Loupe project. We want to keep Loupe free of in-app purchases, so instead we’ve created a Buy Me a Coffee page for anyone who’d like to show their appreciation. ☕ buymeacoffee.com/mysk
Mysk
We are an independent cybersecurity and privacy research team focused on iOS and macOS.Our work explores security and privacy topics within the Apple ecosystem — including threat research, privacy inv
buymeacoffee.com
🚨 PSA: Uninstalling Google Chrome on macOS doesn't remove Chrome's background updater. It keeps running until you remove: ~/Library/Application Support/Google/GoogleUpdater ~/Library/LaunchAgents/com.google.GoogleUpdater.wake.plist Then, restart.
Mysk 🇨🇦🇩🇪 @mysk.bsky.social · 2w agoGoogle Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. Due to a macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy) youtu.be/lLJkxWR71B0
Google Chrome on macOS installs a background app called GoogleUpdater that starts automatically after a restart. Due to a macOS bug, its executable can be silently replaced with any code. No password. No warning. The user is completely unaware. Hers's a demo (clipboard spy) youtu.be/lLJkxWR71B0
🚨📋 macOS Security: Replacing a Background Executable to Spy on the Clipboard (Google Chrome Demo)
YouTube video by Mysk
youtu.be
🚨 We're disclosing a macOS security bug that Apple says is not an issue. Using a simple archive-and-restore trick, an attacker can silently replace the main executable of virtually any application downloaded from the web, no password or warning is required. mysk.blog/2026/07/23/m...
Silent Replacement of Trusted macOS App Executables
A vulnerability in macOS allows an attacker to silently replace the main executable of any application downloaded from the web without requiring elevated privileges. As a result, trusted applications ...
mysk.blog
Apparently Apple has fixed the clipboard counter in iOS 27 beta 3 thanks to Loupe. ✌️ Now the counter resets after a restart. Hey Apple, a little shoutout to the Loupe project would have been nice! Loupe is free and open source. You can download Loupe here: apps.apple.com/us/app/loupe...
For new users who need more time to explore Psylo unique privacy features, use this code to get a free monthly subscription: HAPPYFRIDAY27 Or use this link 👇️ apps.apple.com/redeem?ctx=o... The code is valid through the weekend
apps.apple.com
Privacy tip: If you hide an app on iOS, other apps cannot detect it and won't know if you have it installed. This is confirmed by Loupe and you can test it✌️
Loupe 1.0.1 is out! We added Polish, Italian, Korean, and Vietnamese localisation, along with fixes to existing localisation such as Arabic
oh how did i miss this? excited to jump into it, mysk gives us the best iOS toys.
Mysk 🇨🇦🇩🇪 @mysk.bsky.social · 2mo agoIntroducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try it👇 apps.apple.com/app/id676615...
Thanks a million for everyone who shared, downloaded, or rated Loupe. We have great plans for Loupe in the future. This huge reception is very encouraging. Privacy shall prevail. Thank you 🙏
Mysk 🇨🇦🇩🇪 @mysk.bsky.social · 2mo agoIntroducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try it👇 apps.apple.com/app/id676615...
@mysk.bsky.social a développé Loupe, une espèce d'ExodusPrivacy pour iOS. L'appli permet de détecter les informations collectées par les applis installées sur un iPhone. www.it-connect.fr/vie-privee-l...
Vie privée : l'appli open source Loupe révèle le fingerprinting sur iPhone
Loupe, l'application gratuite et open source pour iOS et iPadOS, révèle comment les apps tierces créent une empreinte numérique unique grâce aux API publiques.
it-connect.fr
Mysk has done the public a profound service by releasing this app for free. I was astonished at the accuracy of the profile it provided. Great way to get a sense of your iOS device's personal data exposure!
Mysk 🇨🇦🇩🇪 @mysk.bsky.social · 2mo agoIntroducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try it👇 apps.apple.com/app/id676615...
Happy to report that iOS 27 preserves your clipboard paste count 🙌
Very well done and scarily eye opening!
Mysk 🇨🇦🇩🇪 @mysk.bsky.social · 2mo agoIntroducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try it👇 apps.apple.com/app/id676615...
If Loupe can see it, any app can see it.
Mysk 🇨🇦🇩🇪 @mysk.bsky.social · 2mo agoIntroducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try it👇 apps.apple.com/app/id676615...
Today is about Loupe by @mysk.bsky.social and a surprising fingerprinting identifier that's used against you.
Lucas ✦@lucas.love · 2mo agoFound this cute little app by @tinrocket.bsky.social and thought I make a quick video about it. I wish we would see more playful apps like this. videos.cdn.lucas-fischer.com/videos/day-0...
Loupe is now the #1 downloaded app in the Developer Tools category of the German App Store 🎉
Even without you giving them any permissions, mobile apps can learn a whole lot about (and potentially identify) you. 👤📲
Mysk 🇨🇦🇩🇪 @mysk.bsky.social · 2mo agoIntroducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try it👇 apps.apple.com/app/id676615...
Introducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try it👇 apps.apple.com/app/id676615...
Black Friday Sale! Download Psylo and enter the code BLACKFRIDAY25 to grab your annual subscription for only $29.99, that's 50% off the regular price of $69.99! Existing customers can take advantage of this offer too. 🎊 Valid until Monday! apps.apple.com/redeem?ctx=o... #Privacy
Black Friday Sale! Download Psylo and enter the code BLACKFRIDAY25 to grab your annual subscription for only $29.99, that's 50% off the regular price of $69.99! Existing customers can take advantage of this offer too. 🎊 Valid until Monday! apps.apple.com/redeem?ctx=o... #Privacy
Oh, 1Password stores user profile pictures on their servers without authentication. Anyone who has the long URL, which also contains the account identifier, can access the picture. It's not a big deal, but a password manager should definitely be more careful. #privacy
Great news. Apple collects exhaustive analytics when you view apps in the App Store app. The detailed analytics is linked to your identity and there is no way to turn the massive data collection off. Now iPhone users can view apps anonymously in a browser www.macrumors.com/2025/11/03/a...
Apple Launches App Store for the Web
Apple launched a new App Store on the web today, allowing users to browse through and search for apps across all of its platforms. The updated...
macrumors.com
Holy smoke 🤯 This bug has led us to gain access to any app's Keychain entries on macOS. 🤯🤯🤯🤯🤯🤯 Still, no time to report it to Apple yet
Mysk 🇨🇦🇩🇪 @mysk.bsky.social · 10mo ago🏜️🎁 We accidentally found a security flaw in macOS Tahoe and earlier An attacker can trick a user into performing a simple yet common action that breaks the sandbox protection of any file (e.g iMessage database and Safari browsing data) giving any application permanent access to the target file
Is it just me, or does the Mail app on iOS 26 in the year 2025 A.D. does not have the option to set the “Reply To” field in an email?
Psylo 1.0.6 with Liquid Glass is out now!
Psylo: Privacy Browser & Proxy@psylo.app · 10mo agoPsylo 1.0.6 is out now! A little late to the Liquid Glass party, but maybe fashionably late? 😬 This update mainly brings iOS 26 support with Liquid Glass, along with a redesigned navigation bar. Below are the full release notes.
🏜️🎁 We accidentally found a security flaw in macOS Tahoe and earlier An attacker can trick a user into performing a simple yet common action that breaks the sandbox protection of any file (e.g iMessage database and Safari browsing data) giving any application permanent access to the target file
