Pinned Tweet
This week's macOS Big Sur 11.4 update includes a patch for my second macOS-related CVE 🎉
support.apple.com/en-au/HT21…
Published a writeup on CVE-2025-24169, a macOS vulnerability which allowed a malicious app to enumerate a user's saved account data in the Passwords app - contravening TCC protections.
Example PoC + full details here: joshparnham.com/2026/07/acce…
🆕 Published a writeup on CVE-2020-9977, a macOS security vulnerability which allowed macOS apps to access a user's open Safari tabs, contravening the TCC privacy protections introduced in macOS Mojave 🛡️
joshparnham.com/2023/08/acce…
And a writeup on CVE-2021-30673, which relates to malicious macOS dock tile plugins having the ability to access to a user's recent phone and FaceTime calls 📲
joshparnham.com/2023/08/acce…
Pretty wild that the company which operates Melbourne’s trains also builds one of the biggest iOS games - “Dumb Ways to Die”
Anyone else think it would be cool for @github to support emoji reacting to individual lines?
In code review I often want to express my delight with an elegant refactor or a nit getting fixed, but adding comments can clutter the PR conversation view.
Here's my v rough mockup:
Keep getting told by the hold message to “rediscover the Qantas difference”.
Is this long on hold (and counting) the difference you’re talking about @Qantas?
Josh Parnham retweeted
I gave my first #WWDC21 talk this year!! Checkout myself, Virata, and some friendly desk plants cover Create accessible experiences for watchOS 🪴⌚ developer.apple.com/videos/p…
Fascinating that Apple still allows users to submit feedback for their apps that are no longer supported
Josh Parnham retweeted
I was going to redact a PDF.
On my Mac in Preview, I hit Markup, then chose a black rectangle and this popup appeared, effectively saying "hey, you might not want to do this".
This is *exceptionally* good behavior. (I also didn't know there was a Redact tool!)
Just published a blog post about installing Apple's translation tool AppleGlot on macOS Catalina and Big Sur.
Come for the bash script and stay for the disassembly and dylib-loading fun 🥳
joshparnham.com/2020/12/inst…
📣 Important PSA if you use @github's split diff view:
@sindresorhus's Refined Github plugin has just fixed the frustrating default behaviour where selecting code selects from both sides of the diff instead of just one 🎉
Thanks @cheap_glitch! github.com/sindresorhus/refi…
macOS Big Sur fixes my first CVE! 🎉
Thanks to Apple Product Security for making the disclosure process so great 🙌 support.apple.com/en-au/HT21…
my partner stitched these lil buddies to keep me company at work ☺️ massive credit to @glenda_atom for the inspo! xitter.cf/glenda_atom/status/124…
URLS👏are👏marketing👏
"Why did you pick Accenture instead of Deloitte for your digital transformation needs?"
"Honestly? Because deloitte.com redirects to 'www2' and that didn't fill us with boundless confidence."