Got an app that hasn't kept up with the evolving requirements of the platform and expectations of the user base? Contact illumineX. We can rescue your app.

"Even the slightest change in one attribute can cause uncertainly large change in any other attribute."
— Tom Gilb, Principles of Engineering Management

Why aren’t you investing in passkeys?

Some analysts suggest that passwords (weak, stolen, cracked, or phished) are the single largest attack vector.

Passwords are shared secrets which can be stolen.

Passkeys (WebAuthn) are *not* shared secrets and aren't phishable.

No matter who you are, your information security is under attack. There's no such thing as too boring, too obscure, too small.

Contact illumineX if you want help refactoring your app for native Apple Silicon.

Automated attacks are waged against complexity rules, at scale.

This works because the rules we make are predictable and the possible variations, few (dozens to a few hundred) as compared with the vast solution space that would need to be searched for a "brute force" attack (billions and billions).

As an industry we seem to be overlooking the forest, what with all the trees in the way, who can possibly see it?

#WorkOnWhatMatters #InfoSec #ThreatIntelligence

If your website has a usename-and-password based authentication, take a look at the new conventional URI for well-known password-change.

Modern password managers use this to help users improve the security of the passwords they use at websites like yours.

Free resources to help you, below…

1/🧵

Squeaky (an EyeSpy character) floats around your Mac desktop while you work.