Apple defences - SIP and APFS (cont’d)
Dive deep into macOS security: why SIP isn't just "rootless," how the XNU kernel enforces Apple-signed entitlements, and the hidden architectural truth behind some config discrepancy.
The Byte Architect
macOS Security Research, Reverse Engineering, and Exploit Development
Latest posts
Apple Defences - APFS and the SSV
APFS does not just store files: it turns filesystem structure into defence. Snapshots, seals, and SSV show why root is no longer the supreme deity of modern macOS.
Memento, deinde loquere
Why I use LLMs to polish my tone. Think first, then speak.
Filesystem Wars: Why Your Choice of Storage is Actually a Security Move
Explore the evolution of filesystems: from FFS and ZFS to APFS. Discover why modern storage is no longer just about data, but a core pillar of macOS platform security and hardware hardening.
Hardening macOS part 6: The Human Surface and Metadata Risks
Beyond tools: master your security by stripping metadata, securing SSH keys, and managing your digital twin. Learn why the human factor is the ultimate attack surface.
Reverse with me - Qardio necromancy - pt 2
Frida failed, so I sniffed the air. The QardioBase2 hides raw data in a binary labyrinth but leaves the master key under the mat: plain text JSON measurements. Reverse engineering at its finest.
Reverse with me - Qardio necromancy
The Qardio app is gone, leaving the QardioBase2 scale a "zombie." Follow my journey through iOS BLE logs, GATT discovery, and broken WiFi backends to bring this hardware back to life.
Bypassing MFA with Reverse Proxies: Building a Rust-based Firefox Extension to Kill AitM Phishing
MFA is not enough. Discover Electric Eye: a Rust-powered Firefox extension that detects AitM proxies and Reverse Proxies in real-time by sniffing DOM leaks and HTTP headers. Stay paranoid.
Hardening macOS 5: Secure Email Clients, Providers, and Encryption Tools
Is email privacy a myth? From PGP and SMTP risks to why Italy’s PEC is just security landscape. A cynical guide to choosing the right providers, clients, and chat apps.
Starkiller Phishing Kit: Why MFA Fails Against Real-Time Reverse Proxies
Starkiller & AitM: Why MFA is no longer enough. Discover how real-time proxies bypass security and how to fight back with FIDO2, JA3 fingerprinting, and session binding. Don't just watch, architect.