Mysk 🇨🇦🇩🇪
@mysk.bsky.social
We're two #iOS developers and occasional #security researchers on two continents. #CyberSecurity 🎬 https://youtube.com/@mysk 📝 https://mysk.blog
Oh, 1Password stores user profile pictures on their servers without authentication. Anyone who has the long URL, which also contains the account identifier, can access the picture. It's not a big deal, but a password manager should definitely be more careful.
#privacy
#privacy
November 13, 2025 at 9:59 PM
Oh, 1Password stores user profile pictures on their servers without authentication. Anyone who has the long URL, which also contains the account identifier, can access the picture. It's not a big deal, but a password manager should definitely be more careful.
#privacy
#privacy
Great news. Apple collects exhaustive analytics when you view apps in the App Store app. The detailed analytics is linked to your identity and there is no way to turn the massive data collection off. Now iPhone users can view apps anonymously in a browser
www.macrumors.com/2025/11/03/a...
www.macrumors.com/2025/11/03/a...
Apple Launches App Store for the Web
Apple launched a new App Store on the web today, allowing users to browse through and search for apps across all of its platforms. The updated...
www.macrumors.com
November 3, 2025 at 7:12 PM
Great news. Apple collects exhaustive analytics when you view apps in the App Store app. The detailed analytics is linked to your identity and there is no way to turn the massive data collection off. Now iPhone users can view apps anonymously in a browser
www.macrumors.com/2025/11/03/a...
www.macrumors.com/2025/11/03/a...
Holy smoke 🤯 This bug has led us to gain access to any app's Keychain entries on macOS. 🤯🤯🤯🤯🤯🤯
Still, no time to report it to Apple yet
Still, no time to report it to Apple yet
🏜️🎁 We accidentally found a security flaw in macOS Tahoe and earlier
An attacker can trick a user into performing a simple yet common action that breaks the sandbox protection of any file (e.g iMessage database and Safari browsing data) giving any application permanent access to the target file
An attacker can trick a user into performing a simple yet common action that breaks the sandbox protection of any file (e.g iMessage database and Safari browsing data) giving any application permanent access to the target file
October 12, 2025 at 1:23 AM
Holy smoke 🤯 This bug has led us to gain access to any app's Keychain entries on macOS. 🤯🤯🤯🤯🤯🤯
Still, no time to report it to Apple yet
Still, no time to report it to Apple yet
Is it just me, or does the Mail app on iOS 26 in the year 2025 A.D. does not have the option to set the “Reply To” field in an email?
October 3, 2025 at 5:15 PM
Is it just me, or does the Mail app on iOS 26 in the year 2025 A.D. does not have the option to set the “Reply To” field in an email?
Psylo 1.0.6 with Liquid Glass is out now!
Psylo 1.0.6 is out now! A little late to the Liquid Glass party, but maybe fashionably late? 😬
This update mainly brings iOS 26 support with Liquid Glass, along with a redesigned navigation bar. Below are the full release notes.
This update mainly brings iOS 26 support with Liquid Glass, along with a redesigned navigation bar. Below are the full release notes.
October 1, 2025 at 12:21 AM
Psylo 1.0.6 with Liquid Glass is out now!
🏜️🎁 We accidentally found a security flaw in macOS Tahoe and earlier
An attacker can trick a user into performing a simple yet common action that breaks the sandbox protection of any file (e.g iMessage database and Safari browsing data) giving any application permanent access to the target file
An attacker can trick a user into performing a simple yet common action that breaks the sandbox protection of any file (e.g iMessage database and Safari browsing data) giving any application permanent access to the target file
September 28, 2025 at 9:07 PM
🏜️🎁 We accidentally found a security flaw in macOS Tahoe and earlier
An attacker can trick a user into performing a simple yet common action that breaks the sandbox protection of any file (e.g iMessage database and Safari browsing data) giving any application permanent access to the target file
An attacker can trick a user into performing a simple yet common action that breaks the sandbox protection of any file (e.g iMessage database and Safari browsing data) giving any application permanent access to the target file
The first hit from Wikipedia has the correct answer, but Gemini's wrong answer has to be shown first and occupy most of the screen because AI is cool
September 24, 2025 at 1:33 PM
The first hit from Wikipedia has the correct answer, but Gemini's wrong answer has to be shown first and occupy most of the screen because AI is cool
Why do all browsers in iOS 26 communicate with this Google service? Has Apple changed how safe websites are downloaded?
Psylo tunnels all connections via our proxy servers to prevent IP leaks. How are these calls made? Does Google see the real IP?
#Privacy #Apple #iOS26
Psylo tunnels all connections via our proxy servers to prevent IP leaks. How are these calls made? Does Google see the real IP?
#Privacy #Apple #iOS26
September 17, 2025 at 12:58 AM
iOS 26, about 15 hours remaining 🐌
September 15, 2025 at 7:09 PM
iOS 26, about 15 hours remaining 🐌
Reposted by Mysk 🇨🇦🇩🇪
Ready for iOS 26 with Liquid Glass? Doing our best to be ready for next week September 15
Here’s a sneak peek at our current progress 💦🔎
#iOS26 #LiquidGlass
Here’s a sneak peek at our current progress 💦🔎
#iOS26 #LiquidGlass
September 10, 2025 at 4:57 PM
Ready for iOS 26 with Liquid Glass? Doing our best to be ready for next week September 15
Here’s a sneak peek at our current progress 💦🔎
#iOS26 #LiquidGlass
Here’s a sneak peek at our current progress 💦🔎
#iOS26 #LiquidGlass
As Psylo is the only #iOS browser that opens App Store links anonymously in the web, the review link below will open in the web view. Copy the link and paste it in another browser. It should take you to the App Store to rate Psylo 🙏
Love Psylo? We really appreciate sharing your experience in a review! Your feedback helps Psylo climb the App Store search results. We intentionally don’t prompt for ratings in the app to keep it user-friendly. Leave your review here: 🙏
apps.apple.com/app/id674135...
apps.apple.com/app/id674135...
Psylo: Private Browser & Proxy
INTRODUCING PSYLO
A new kind of private browser by Mysk, renowned privacy and security researchers.
BROWSE THE WEB IN SILOS
- True Tab Isolation: Every tab is its own “silo” with separate storage...
apps.apple.com
September 10, 2025 at 1:07 PM
As Psylo is the only #iOS browser that opens App Store links anonymously in the web, the review link below will open in the web view. Copy the link and paste it in another browser. It should take you to the App Store to rate Psylo 🙏
Reposted by Mysk 🇨🇦🇩🇪
🚨Psylo is impacted by Proton VPN technical difficulties. We have disabled Proton VPN in the Mysk Private Proxy Network at the moment.
Psylo proxies can work without Proton VPN exit nodes.
status.proton.me
Psylo proxies can work without Proton VPN exit nodes.
status.proton.me
Proton Services Status
Welcome to Proton Services's home for real-time and historical data on system performance.
status.proton.me
September 10, 2025 at 7:33 AM
🚨Psylo is impacted by Proton VPN technical difficulties. We have disabled Proton VPN in the Mysk Private Proxy Network at the moment.
Psylo proxies can work without Proton VPN exit nodes.
status.proton.me
Psylo proxies can work without Proton VPN exit nodes.
status.proton.me
Reposted by Mysk 🇨🇦🇩🇪
I asked Plex a bunch of questions about its data breach of user account information, but the company wouldn't say why it hasn't force-reset its users' passwords and is instead asking users to do it. The company also hasn't explained how (and to what extent) it scrambled those passwords.
Plex urges users to change passwords after data breach | TechCrunch
Plex said that it was aware of a security incident involving the theft of Plex customer account information, including user names, email addresses, scrambled passwords, and unspecified authentication ...
techcrunch.com
September 9, 2025 at 8:40 PM
I asked Plex a bunch of questions about its data breach of user account information, but the company wouldn't say why it hasn't force-reset its users' passwords and is instead asking users to do it. The company also hasn't explained how (and to what extent) it scrambled those passwords.
Reposted by Mysk 🇨🇦🇩🇪
No thanks, I won’t get the app.
Native apps can track and fingerprint you more easily. Use the web version in a privacy-protecting browser that obfuscates common fingerprinting markers, and completely isolates it from other websites.
If only there was such a browser… 🤔
Native apps can track and fingerprint you more easily. Use the web version in a privacy-protecting browser that obfuscates common fingerprinting markers, and completely isolates it from other websites.
If only there was such a browser… 🤔
September 9, 2025 at 7:45 PM
No thanks, I won’t get the app.
Native apps can track and fingerprint you more easily. Use the web version in a privacy-protecting browser that obfuscates common fingerprinting markers, and completely isolates it from other websites.
If only there was such a browser… 🤔
Native apps can track and fingerprint you more easily. Use the web version in a privacy-protecting browser that obfuscates common fingerprinting markers, and completely isolates it from other websites.
If only there was such a browser… 🤔
Reposted by Mysk 🇨🇦🇩🇪
iPhone 17 Pro’s website doesn’t have the option to compare against iPhone 16
So they’re not catering to people who upgrade their iPhone every year 😬
So they’re not catering to people who upgrade their iPhone every year 😬
September 9, 2025 at 7:43 PM
iPhone 17 Pro’s website doesn’t have the option to compare against iPhone 16
So they’re not catering to people who upgrade their iPhone every year 😬
So they’re not catering to people who upgrade their iPhone every year 😬
Reposted by Mysk 🇨🇦🇩🇪
Psylo is the only browser or app that lets you open websites from different countries at the same time without having to switch connections.
#privacy
#privacy
September 9, 2025 at 11:46 AM
Psylo is the only browser or app that lets you open websites from different countries at the same time without having to switch connections.
#privacy
#privacy
What a productive day! I accidentally time-traveled to the year 2076, created an Excel sheet, and returned. But that's not the puzzling part. I still can't believe that an Excel file can be so backward compatible.
September 9, 2025 at 10:50 AM
What a productive day! I accidentally time-traveled to the year 2076, created an Excel sheet, and returned. But that's not the puzzling part. I still can't believe that an Excel file can be so backward compatible.
Nothing new. Facebook is begging for pics on Threads to train their AI model on.
September 9, 2025 at 9:54 AM
Nothing new. Facebook is begging for pics on Threads to train their AI model on.
Reposted by Mysk 🇨🇦🇩🇪
Psylo network doesn't have obfuscated servers, making it easy to block. To overcome this, use Psylo with a VPN that offers obfuscation, such as Proton or Mullvad. This allows you to connect to Psylo's proxy servers through the VPN, making silos work as expected.
#privacy
#privacy
September 8, 2025 at 2:14 PM
Psylo network doesn't have obfuscated servers, making it easy to block. To overcome this, use Psylo with a VPN that offers obfuscation, such as Proton or Mullvad. This allows you to connect to Psylo's proxy servers through the VPN, making silos work as expected.
#privacy
#privacy
September 8, 2025 at 1:35 PM
Psylo beats Safari's Advanced Fingerprinting Protecting that is going to launch in iOS and iPadOS 26.
Safari setup:
- iCloud Private Relay is on
- Private Browsing is on
Psylo setup:
- Ephemeral option is on
Watch Safari vs Psylo:
#privacy #cybersecurity #tracking #iOS26
Safari setup:
- iCloud Private Relay is on
- Private Browsing is on
Psylo setup:
- Ephemeral option is on
Watch Safari vs Psylo:
#privacy #cybersecurity #tracking #iOS26
September 6, 2025 at 9:18 PM
Psylo beats Safari's Advanced Fingerprinting Protecting that is going to launch in iOS and iPadOS 26.
Safari setup:
- iCloud Private Relay is on
- Private Browsing is on
Psylo setup:
- Ephemeral option is on
Watch Safari vs Psylo:
#privacy #cybersecurity #tracking #iOS26
Safari setup:
- iCloud Private Relay is on
- Private Browsing is on
Psylo setup:
- Ephemeral option is on
Watch Safari vs Psylo:
#privacy #cybersecurity #tracking #iOS26
Psylo private browser for iOS now offers free 7-day trial to all new users:
✅ FULLY anonymous
✅ ALL features unlocked
✅ NO in-app purchase required
✅ NO account required
✅ NO IDs shared with Apple
✅ NO questions asked
✅ NO logs
✅ NO app analytics
Try it now:
apps.apple.com/app/id674135...
#privacy
✅ FULLY anonymous
✅ ALL features unlocked
✅ NO in-app purchase required
✅ NO account required
✅ NO IDs shared with Apple
✅ NO questions asked
✅ NO logs
✅ NO app analytics
Try it now:
apps.apple.com/app/id674135...
#privacy
September 4, 2025 at 11:58 PM
Psylo private browser for iOS now offers free 7-day trial to all new users:
✅ FULLY anonymous
✅ ALL features unlocked
✅ NO in-app purchase required
✅ NO account required
✅ NO IDs shared with Apple
✅ NO questions asked
✅ NO logs
✅ NO app analytics
Try it now:
apps.apple.com/app/id674135...
#privacy
✅ FULLY anonymous
✅ ALL features unlocked
✅ NO in-app purchase required
✅ NO account required
✅ NO IDs shared with Apple
✅ NO questions asked
✅ NO logs
✅ NO app analytics
Try it now:
apps.apple.com/app/id674135...
#privacy