g1a55er::blog

  • Is This An iCloud Advanced Data Protection Encryption Bug?

    TL;DR It does not look to me like the encryption keys used to secure iCloud data in the Advanced Data Protection regime are changed (i.e. rotated) as needed to provide the promised level of security. I base this claim on my research using Apple’s own tools, open source disclosures, and...

  • Android 14 Still Allows Modification of System Certificates

    Tim Perry recently claimed in an article that “Android 14 blocks all modification of system certificates, even as root”. This sparked significant discussion on Hacker News. Thankfully my tests show that it is still possible to adjust the system certificate store in Android 14. Update Sept. 15 2023, 6:34 AM...