Observed arrival · 2026-11-01
David Strnadel’s Apple vulnerability investigations
An independent researcher’s portfolio of Apple security investigations, technical writeups, and machine-learning experiments.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Apple security researchers and reverse engineers
- Worth noticing
- The sandbox investigation uses a separate WidgetKit extension as an independent process control and explicitly rules out a cross-process write claim.
Field notes
The page lays out investigation steps rather than presenting only vulnerability headlines: a diff suggests a missing check, a testable hypothesis follows, and an on-device proof of concept is reported to Apple. In the sandbox case, a separate WidgetKit extension serves as a process control, and the writeup distinguishes data returned through a service from writes confined to a local cache. The homepage also links an AI research preprint and code.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
◉HumanPersonal, local, civic, or handmade
One card from the complete issue