We're two #iOS developers and occasional #security researchers on two continents. #CyberSecurity 📝mysk.blog 🇨🇦🇩🇪 Current Project: @psylo_app

Canada - Germany
Psylo is finally available for download today. We can’t wait for you to try it. apps.apple.com/ca/app/psylo-…
🚀🤘Introducing Psylo: A New Kind of Private Browser After 9 months of development, we're super excited to finally launch Psylo, a new kind of private web browser for iOS and iPadOS. In Psylo, each tab is its own “silo” with isolated storage, cookies, and even its own IP address. Psylo introduces advanced anti-tracking and anti-fingerprinting features that go beyond what a VPN can offer, thanks to the deep integration between Psylo and our own Mysk Private Proxy Network. Psylo is backed by years of insights from our privacy research at Mysk. Psylo is available today on the App Store as a monthly or annual subscription with a free 3-day trial. Read the full announcement blog post on our blog: mysk.blog/2025/06/17/introdu…
15
7
97
98,271
I’m willing to bet eMudhra’s management have no clue what a colossal screw up this is, and their “engineers” are desperately trying to weasel their way out by convincing management it’s some silly mistake they can just brush off
BREAKING: eMudhra exits SSL/TLS certificate business, blames social media instead of incompetence for the same
23
93
2,228
33,213
We’re making good progress on Psylo 1.4, which brings full iPhone Duo support! Though there’s one little caveat about being an early iPhone Duo adopter: Since it’s a brand-new device with a unique form factor, and likely limited availability in the coming months, using one across apps and websites could be a fairly strong fingerprinting signal. We’re trying to figure out a way to mitigate this, and we’ll keep everyone posted if we come up with something.
We’ve been a little quiet lately, but we’ve been hard at work on Psylo 1.4! It brings full support for the iPhone Duo… and as a nice side effect, full multi-window and multi-tab support 😬 We’re not sure we’ll make tomorrow’s iPhone Duo launch, but if not, it’ll be ready by next week!
1
1
6
946
What a shame that ‘42’ isn’t on that list… then at least it would’ve been a little funny if it hadn’t been so mindbogglingly absurd
I don't really understand why this would happen. It seems higher-effort than standard key generation.
1
2
19
1,301
How in the world did these bozos earn enough trust to become a certificate authority? Their incident report is AI generated slop and completely avoids addressing the gigantic elephant in the room of how literally the number ‘4’ was used as a private key?
Global TLS Intermediate CA incident: We’ve updated our incident page with how it happened, who is affected (one US customer ecosystem), what’s not affected, and what we’re putting in place. We will publish the root cause once our investigation is complete. 👉emudhra.com/en/post/certific…
Community note
eMudhra minimizes the scope by claiming only "one US customer ecosystem" is affected. In reality, 8 of its CA certificates had catastrophically weak private keys (one being simply the number 4), allowing anyone to forge trusted HTTPS certificates for any website on the internet.blog.google/security/prote…
24
148
2,641
52,215
2025: Cloudflare outage made half the internet offline 2026: Google Analytics for Firebase caused thousands of iOS apps to crash Do we learn?
5
9
94
3,588
Our apps were not affected. We don't use Google Analytics or any other analytics service. Our apps don't collect any analytics
Here's Why iPhone Apps Were Crashing macrumors.com/2026/09/29/her…
3
77
5,354
Mysk 🇨🇦🇩🇪 retweeted
Pixel phones can clearly extract text from photos on-device, as Gboard shows. But Google Photos hands this task off to Google Lens, making users upload photos to Google just to copy text. This video captures how differently Google and Apple think about privacy:
So on a Pixel 9 with Android 17, there’s no way to copy text from a photo offline and without sending it to Google? All these AI features on Pixel phones and basic OCR still can’t run locally?
16
24
278
17,824
So on a Pixel 9 with Android 17, there’s no way to copy text from a photo offline and without sending it to Google? All these AI features on Pixel phones and basic OCR still can’t run locally?
21
12
246
27,218
According to Apple documents, there's no one switch to turn off Apple Intelligence. You need to turn off the features one by one. The documents indeed refer to Screen Time for blocking Siri completely. It's hidden there by design.
8
27
260
11,191
At the moment, Signal only accepts payments via Apple Pay or Google Pay, both of which require a phone number to set up.
Signal is finally cutting the cord with phone numbers. Its new Signal Login lets you create an account without handing over a phone number, a major change for a messenger built around privacy, but historically tied to one of the strongest links to your real-world identity. There’s a catch, though: a small fee, which introduces more privacy limitations to be aware of...
16
22
556
42,473
Signal staff says that they have plans for more payment methods. According to Signal, the one-time purchase is necessary to stop spammers, although X has shown that requiring a payment doesn't really deter spammers.
1
2
43
2,376
Mysk 🇨🇦🇩🇪 retweeted
I reviewed the M5 Ultra Mac Studio with 256 GB of RAM. It’s the dream Mac for local AI agents. And I’ve gone local-only with Hermes. My story, with LOTS of interactive charts: macstories.net/stories/m5-ul…
103
111
1,749
491,602
Somewhere over Turkey back in 2022 📸 Shot on iPhone 12 Pro
Post your best airplane-window photo. Aurora Boreal em 10/10/2024. SFO - JFK
1
14
2,041
cloudflared tunnel is a quick and convenient way to expose a local service to the internet with no inbound ports open. Just keep in mind: Cloudflare terminates TLS at its edge, so it can see your traffic in plaintext.
8
13
214
19,911
XML is finally dead
I don't think I ever swear on social media, but this one is worth it: holy shit! A JSON-based project format for Xcode! 🤯
2
40
2,866
Apple: You get a duplicate, you also get a duplicate, everyone gets a duplicate!
Every open Target Flag capture was just marked as a duplicate.. So deff done reporting to Apple. When you cant triage properly, make people wait 2+ months to be told their report is a duplicate, and have 0 transparency.. its just time to find a new program..
1
1
33
2,855
We got a duplicate:
7
713
Maybe this is old news but I haven’t seen it before: you can move and play around with the loupe in the Preview app on iOS 27 Maybe we should also have one in Loupe 😃
3
2
45
2,945
🚀 We’re working on a small new iOS app (…applet? 😃) It’s not a privacy app. It’s our take on a common app and web utility that are usually ad-infested hellscapes 😬 so ours of course will have zero tracking or ads
2
3
93
3,311
The app is currently in alpha, and it’s not quite ready to share on TestFlight though it’s coming together nicely Hopefully we’ll be able to share something in the coming weeks
15
719