Vadim Smal @puzzledbit
Software Engineer | Infrastructure | Developer Tools | Build systems | iOS | Off work: coding for fun, self-hosting, LLM's London, England Joined September 2010-
Tweets469
-
Followers43
-
Following97
-
Likes116
Turned my #WWDC26 keynote notes into a sketchnote with ChatGPT ✨ #WWDC2026 #AppleIntelligence #sketchnote
🚨 Critical Vulnerability in CocoaPods Exposes Millions of iOS Apps to Supply Chain Attacks 🚨 🔒 To all Red Teamers and iOS Developers! A remote code execution (RCE) vulnerability has been found in CocoaPods that went unrecognized until now. It probably could have been used since 2015 to poison any downloaded package, and affected all those 3 million apps that still rely on CocoaPods. 🛠 Key Details: 𝐄𝐱𝐩𝐥𝐨𝐢𝐭𝐚𝐛𝐥𝐞 𝐯𝐞𝐜𝐭𝐨𝐫: Unsanitised user input would directly affect the parameters passed to the git call on the server side. The ability to execute arbitrary remote payload was possible due to server-side validation flaws. Note for assessors: Highly exploitable. 𝐏𝐨𝐭𝐞𝐧𝐭𝐢𝐚𝐥 𝐈𝐦𝐩𝐚𝐜𝐭: Succeeding would allow attackers to execute arbitrary commands on the CocoaPods server, read environment variables, and write to the CocoaPods/Specs repository. 𝐀𝐯𝐚𝐢𝐥𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐏𝐚𝐭𝐜𝐡: On April 19, 2024, all session keys were deleted in one fell swoop to mitigate the possible compromise of pods. All affected developers need to log in again to the central repo and replace their COCOAPODS_TRUNK_TOKEN for all deployments. 🔗 Additional Insights: • The weakness might have enabled attackers to affect a vast number of apps over time. No signs of abuse have been flagged. • This incident emphasizes the need to both secure our software supply chain and monitor and validate third-party dependencies on a continuous basis. 🔧 Recommendations: 𝐑𝐞𝐯𝐢𝐞𝐰 𝐃𝐞𝐩𝐞𝐧𝐝𝐞𝐧𝐜𝐢𝐞𝐬: Ensure all third-party dependencies are up-to-date and sourced from trusted repositories. 𝐈𝐦𝐩𝐥𝐞𝐦𝐞𝐧𝐭 𝐒𝐚𝐧𝐝𝐛𝐨𝐱 𝐓𝐞𝐬𝐭𝐢𝐧𝐠: Test new dependencies in a sandbox environment before deployment. 𝐒𝐭𝐫𝐞𝐧𝐠𝐭𝐡𝐞𝐧 𝐕𝐞𝐧𝐝𝐨𝐫 𝐑𝐢𝐬𝐤 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭: Conduct periodic vendor risk assessments, including a review of their software components. 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐛𝐚𝐤𝐞𝐝 𝐢𝐧𝐭𝐨 𝐃𝐞𝐯𝐒𝐞𝐜𝐎𝐩𝐬: Bake in security by automatically checking for vulnerabilities in the CI/CD pipeline, the better to catch problems early. #CyberSecurity #RedTeam #iOSDevelopment #SupplyChainAttack #CocoaPods #RemoteCodeExecution #AppSecurity #Infosec #DevSecOps #SecurityFirst #ThreatMon
@katellaevgenii Следующая стадия: "cheers mate"
Found a new CLI that simplifies sharing terminal commands and outputs: Use termshot --show-cmd --clipboard -- <cmd> to capture a clean screenshot of the command and output, and copy it to the clipboard.
@marcosgriselli @MatejkoBak Guess compilation time is slower due to Swift Macros forums.swift.org/t/compilation-…
he SWIFT_VERSION build setting now allows building with the Swift 6 language mode. (114638076)
Traits (112429531) and failure distribution” insights (122047922) in the test report.
Highlights from Xcode 16 Release Notes: developer.apple.com/documentation/…
@katellaevgenii Все проводные Low Profile клавиатуры живут меньше недели, так как большая батарея будет тяжелой и большой.
@katellaevgenii Тоже использую keychron. Неделя это даже не плохо. Кстати можно легко поменять батарею. Как альтернатива Lofree Flow Low Profile, но больше 5 дней тоже не будет.
@strzibnyj You're not alone. The Terminal is a sacred tool for many developers. I wish they made it an opt-in feature since it's actually great
I had given up on cloud gaming a year ago when Google Stadia was shut down and GeForceNow didn't have any games I was interested in. I tried GeForceNow again this week and they'd significantly expanded their library. It even seems to be performing better. My hope has been revived
Bruno Rocha @rockbruno_
9K Followers 161 Following Senior iOS Developer @Spotify | Blogging https://t.co/jSOwjn4mgm | Built @BurnoutBuddy | Kendo Mastodon: @[email protected] 🇧🇷🇸🇪
Datho @Datho376669
15 Followers 911 Following Follow me, maybe it's the beginning of our fate, we can talk
anna 🖤 @acbdev
5K Followers 3K Following 💻📱 hockey player, mad scientist & software engineer at 🍏 ex @SpotifyEng ✨ she/her ✨thoughts, UIViews, and opinions are my own ⛷️🏒🧗♀️ Yapping @SwiftLounge
Илья Латуго... @la2govski
0 Followers 2 Following
Dm @fjc5rky5vd1
0 Followers 54 Following
🅹🅴🅽🅽🅸�... @Jennifer_45123
24 Followers 2K Following Sexy girl is looking to meet new people.Follow me and you´ll receive my hot photos in Direct 😘😊💝
Federico Trimboli @FedeTrimboli
264 Followers 380 Following eng. manager @Spotify; previously @Bumble, @Skyscanner, @Despegar; 🇦🇷→🇪🇸
Elena @Elena70873500
0 Followers 6 Following
lenar lenar @lenar1enar
0 Followers 63 Following
Anbrace @CelebrainLTD
68K Followers 46K Following
Timofei @KhomTima
80 Followers 175 Following
✌️️☝️️the... @SEvilmmo
344 Followers 2K Following hi people I hope u have a great day and have a great time u can follow me if u want to I'm only 14 years old so stop with all of inappropriate thing on Twitter
Алина @AlinaOshen13
6 Followers 127 Following
сергей @malyshev_s
1 Followers 13 Following
ajmal khan @Kajmal740Ajmal
907 Followers 4K Following
Igor Vasilenko @i_vasilenko
129 Followers 97 Following
♥♔ بحرر @vZdxynnigga
0 Followers 1 Following
Egor Tolstoy @igrekde
10K Followers 374 Following Днем делаю инструменты для разработчиков, а ночью – @PodcastPodlodka и https://t.co/fXLicSUd7h. Англоязычный твиттер: @HeyTolstoy. Telegram: https://t.co/xYT1xhhnAu
German Saprykin @german_saprykin
68 Followers 96 Following
complexityclass @complexityclass
552 Followers 560 Following accountant • quantum noobie • clumsy athlete
Denis Voronov @d3n8it
16 Followers 35 Following
Ruslan Demyanenko @rus_lan
128 Followers 173 Following Project Director @mercdev - Mobile, SmartTV, MacOS, Cloud Apps
Mike Voronov @VMS11
396 Followers 1K Following Math/CS substack https://t.co/EQpUjKs3mk tg blog: https://t.co/p0oMX1YsrO
Daniil Starkov @DaniilStarkov
288 Followers 2K Following Director at LitRes (ebooks and audiobooks product developement)
Happy Coin News @happycoinnews
3K Followers 4K Following Happy Coin News (HCN) is an independent international digital media outlet established in 2016. https://t.co/b9nRe4Hzkg
Jesslyn 🇮🇩 @jtannady
15K Followers 3K Following Robots at @cortexairobot 🦾 Unapologetically Indonesian. @Wellesley alum. She/her/dia.
Eugene Katella @katellaevgenii
3K Followers 318 Following Делаю всякое разное, веду @PodlodkaPodcast, организую @podlodkacrew. Opinions are my own, как говорится
Evgenii 3000 @katleta3000
1K Followers 124 Following iOS dev since 2008 🍏 ex-Head of Mobile📱 ex-Engineering Manager 👮🏽♂️ ex-Twitter user ✍️
Patrick Balestra @BalestraPatrick
5K Followers 591 Following Staff Engineer @Spotify - Ex @appbuilders_ch & @swiftalps organizer - Opinions are my own. 🇨🇭
Spotify Engineering @SpotifyEng
48K Followers 107 Following The official account for Spotify Engineering
ThePrimeagen @ThePrimeagen
389K Followers 1K Following skill issues: 🟩⬛️⬛️⬛️⬛️⬛️(69/420) https://t.co/TYJ6aSq4O0 https://t.co/wQJlh4stsc https://t.co/wxeJWY8LmI
Bruno Rocha @rockbruno_
9K Followers 161 Following Senior iOS Developer @Spotify | Blogging https://t.co/jSOwjn4mgm | Built @BurnoutBuddy | Kendo Mastodon: @[email protected] 🇧🇷🇸🇪
Pol Piella @polpielladev
3K Followers 953 Following App maker, content creator, public speaker and soci del @FCBarcelona based in Manchester. Building @helm_app, @NowPlayingGold, QReate and Fosi.
anna 🖤 @acbdev
5K Followers 3K Following 💻📱 hockey player, mad scientist & software engineer at 🍏 ex @SpotifyEng ✨ she/her ✨thoughts, UIViews, and opinions are my own ⛷️🏒🧗♀️ Yapping @SwiftLounge
Timofei @KhomTima
80 Followers 175 Following
Bitrise @bitrise
10K Followers 4K Following Mobile CI/CD & DevOps for faster, better and more efficient app development. Endlessly scalable. 350+ integrations. 🇯🇵 @bitriseJ 🚨 @bitrisestatus
Federico Trimboli @FedeTrimboli
264 Followers 380 Following eng. manager @Spotify; previously @Bumble, @Skyscanner, @Despegar; 🇦🇷→🇪🇸
Andrey Mishanin @AndreyMishanin
321 Followers 106 Following Life is a picture, but you live in a pixel
iOS Dev Feed @iOSDevFeed
8K Followers 4 Following iOS Dev reddit feed #iOSDev #iOSProgramming #SwiftLang #Xcode #iOS
Rahul Malik @rmalik
1K Followers 775 Following Developer @meta. Previously @Pinterest, @Snapguide, @Salesforce, @Yahoo. I like to swim, bike, run... and coffee. he/him/his
Sofya @K_O_T_
19 Followers 75 Following
Paw @luckymarmot
10K Followers 2K Following We build RapidAPI for Mac (formerly Paw), the most delightful app that makes it easy to test web APIs and lets you focus on developing the apps you dream about.
Keith Smiley @SmileyKeith
8K Followers 775 Following @buildbuddy, maintainer of @bazelbuild's iOS support, creator of @MobileNativeFdn. LLVM & Swift contributor. Previously Principal Engineer @Lyft, @modular
🇫🇮 ilia kukhare... @ilyakuh
2K Followers 133 Following PM @ https://t.co/Y0G0cE3p4t ASO Marketer of the Year by ASO Conference 💙🇺🇦💛
Ivn 🖤🖤🖤 @ivMobAppSec
4K Followers 974 Following GenAI Sec, Evals, AI containment, Mobile AppSec, Android & iOS RE & Crypto(graphy). opinions = own
Dmitry @dmishe89
338 Followers 132 Following
Xandra Skylar @XandraSkylar
5K Followers 1 Following Девушка Райдена без границ, рамок и ограничений. Telegram: https://t.co/Jz8wjgnSma Номер карты для донатов 5536913967934734 на стартапы
Pavel Durov @durov
3.7M Followers 1 Following Founder, CEO at @telegram (2013), founder, ex-CEO of @vkontakte (2006), part-time troll.
Dan Robinson @danrobinson
86K Followers 1K Following coder / lawyer. research at @paradigm. automated research reply guy
Daniel Martín @dmartincy
2K Followers 331 Following I like writing software & reverse engineer it. 🛠️ Making AI smarter with documents. AI Team Lead @nutrient_eng (formerly PSPDFKit)
John Sundell @johnsundell
43K Followers 171 Following Not active here at the moment. Find me on Mastodon at https://t.co/B06atDonhg, or contact me through https://t.co/67V5Grojki.
Krzysztof Zabłocki @merowing_
21K Followers 512 Following Building @designwithcasa 🏗️ OSS used by 80k teams (Apple · Airbnb · Disney) 🎤 70+ talks | ex- @nytimes, @browsercompany 🎓 Teaching - https://t.co/r5oflfDYLH
Podlodka Podcast @PodlodkaPodcast
4K Followers 6 Following Мы переехали на новый аккаунт @PodcastPodlodka, где мы будем продолжать рассказывать о новых выпусках, рекомендовать старые и делать анонсы. Подписывайтесь!
swifting.io @swiftingio
889 Followers 79 Following
Swift Dev Feed @SwiftDevFeed
5K Followers 4 Following Swift reddit feed #SwiftLang #iOSDev #iOSProgramming #Xcode #iOS
Apptorium @apptorium
1K Followers 14 Following We make apps for Macs. SideNotes (@SideNotesApp), Workspaces, License Store, Desktop Composer, Expressions, ScreenFocus, FiveNotes, Cursor Teleporter
bsky.app/profile/orta... @orta
20K Followers 2K Following https://t.co/ry4yomoKGX. Making @PuzzmoToday. Ex @TypeScript. Ex-@ArtsyOpenSource. Paranoid with @DangerSystems. Aphantasic. He/Him.
Livejournal Daily @LivejournalD
5 Followers 2 Following
Xakep.ru @XakepRU
46K Followers 512 Following Компьютерные трюки, безопасность, программирование и администрирование сетей. Hacker is a widely acclaimed publication for IT enthusiasts
#MBLTplus @MBLTdev
357 Followers 193 Following 13-я Международная мобильная конференция для бизнеса и разработчиков.
Cocoa Controls @cocoacontrols
12K Followers 513 Following Custom UI component database for iOS and Mac OS X. Created by @aaronbrethorst.
AFNetworking @AFNetworking
6K Followers 6 Following A delightful networking library for iOS and OS X.
CocoaPods @CocoaPods
19K Followers 28 Following The dependency manager for Cocoa Projects. For support please consult the guides: https://t.co/7lloz3f5ga
iOS-Blog @iOS_blog
24K Followers 2K Following Objective-C / Swift Tutorials, Jobs, Resources, Competitions and Q&A for the iPhone Developer
iOS Dev Center @iOS_DevCenter
4K Followers 1 Following Real-time tweets about new iOS beta releases and when the iOS Dev Center is unreachable. Developed by @iNeal. @ADCSystemStatus for ADC System Status updates.Trends for United States
You might like
