The deck: https://media.defcon.org/DEF%20CON%2031/DEF%20CON%2031%20presentations/Austin%20Emmitt%20-%20Apple%27s%20Predicament%20NSPredicate%20Exploitation%20on

The deck: https://media.defcon.org/DEF%20CON%2031/DEF%20CON%2031%20presentations/Austin%20Emmitt%20-%20Apple%27s%20Predicament%20NSPredicate%20Exploitation%20on%20macOS%20and%20iOS.pdf https://media.defcon.org/DEF%20CON%2031/DEF%20CON%2031%20pre... Quite reminiscent of the exploits the JVM suffered with reflection and deserialization. Fascinating how many iterations it took Apple to mitigate huge gaping holes. I imagine they were trying to do least invasive thing possible each time while they worked behind the scenes to fundamentally secure the primitive.