The Curious Engineer

All blogs / Security

Watch This Space

wts.dev

A security research blog.

SecurityReverse engineering

Posts
11 from 16 Sep 2024 to 30 Jul 2026
Posting
now and then (3 in the last year)
Kind
personal blog
Feed
https://wts.dev/feed.xml

2026 2

  1. Escaping the Apple Sandbox by Spawning an Executable
  2. How I "hacked" ChatGPT Atlas... and why it wasn't patched

2025 7

  1. DirtyDict: Escaping the macOS Sandbox and wrecking havoc
  2. I Know The Name Of Your Wi-Fi Network
  3. I wrote an Objective-C bridge for Node.js. Don't use it.
  4. CVE-2025-43253: Bypassing Launch Constraints on macOS
  5. Can You Really Trust That Permission Pop-Up On macOS? (CVE-2025-31250)
  6. CVE-2025-24259: Leaking Bookmarks on macOS
  7. Leaking Passwords (and more!) on macOS

2024 2

  1. CVE-2024-54471: A Primer
  2. SQL Injection in TCC: and why it (probably) wasn't a security risk (this time)