4 ms·

iOS Elegantbouncer: When you can't get samples but still need to catch threats

39 points by transpute 1y ago

tikimcfee 1y ago
This might seem a bit silly, but this is probably the first easily accessible and open iOS backup format extraction tool I've seen in many years. Maybe I've missed the good ones, or the hidden ones. But I find it quite fun that I can backup my device and run its output through this exploit analyzer to (a) determine if I have something to worry about and (b) stop fiddling with 3rd party hackaround software for file backup viewing. Cheers to the authors and the team that put this together, helping keep a rather closed OS at least somewhat safer, and sharing the tools to do so.
- scintill76 1y ago
  If I can hijack the thread a bit for a related question -- does anyone know of an easy selfhosted non-macOS server that will periodically pull full backups from iOS devices over Wifi (with the user's authorization on-device)? I think there's a lot of FOSS ground work for doing it on Linux, but hard to find good information about how to put it all together into a reliable automated solution, and sadly I don't really have the energy right now or dozens of hours to put into it. I might even pay ~$100. I want it on Linux, but if it's under my control and reliable, maybe I could do Windows or macOS. Maybe I should just install iTunes on Windows in a VM...
  - selectodude 1y ago
    iMazing is what I use. Works on Windows so I can run it in a VM in proxmox.
- DrWhax 1y ago
  You might like https://docs.mvt.re/en/latest/ https://docs.mvt.re/en/latest/ from us at Amnesty International.
Ecco 1y ago
The background on that page is so distracting…
- colton_padden 1y ago
  Was going to say the same thing. While neat it made it nearly impossible for me to focus on the content.
  - transpute 1y ago
    Does reader mode help? No background visible on iOS Safari, even with content blockers disabled.
    - colton_padden 1y ago
      That does! Thank you.
  - cglan 1y ago
    i feel like it's really not that bad
- fkyoureadthedoc 1y ago
  > Please don't complain about tangential annoyances—e.g. article or website formats, name collisions, or back-button breakage. They're too common to be interesting.
- Proofread0592 1y ago
  On desktop you can delete the div with id="particle-bg", its what I did to read the article before checking the comments
deleted 1y ago
[deleted]

39 points by transpute 1y ago

This might seem a bit silly, but this is probably the first easily accessible and open iOS backup format extraction tool I've seen in many years. Maybe I've missed the good ones, or the hidden ones. But I find it quite fun that I can backup my device and run its output through this exploit analyzer to (a) determine if I have something to worry about and (b) stop fiddling with 3rd party hackaround software for file backup viewing. Cheers to the authors and the team that put this together, helping keep a rather closed OS at least somewhat safer, and sharing the tools to do so.

scintill76 1y ago
If I can hijack the thread a bit for a related question -- does anyone know of an easy selfhosted non-macOS server that will periodically pull full backups from iOS devices over Wifi (with the user's authorization on-device)? I think there's a lot of FOSS ground work for doing it on Linux, but hard to find good information about how to put it all together into a reliable automated solution, and sadly I don't really have the energy right now or dozens of hours to put into it. I might even pay ~$100. I want it on Linux, but if it's under my control and reliable, maybe I could do Windows or macOS. Maybe I should just install iTunes on Windows in a VM...
- selectodude 1y ago
  iMazing is what I use. Works on Windows so I can run it in a VM in proxmox.
DrWhax 1y ago
You might like https://docs.mvt.re/en/latest/ https://docs.mvt.re/en/latest/ from us at Amnesty International.

Ecco 1y ago

The background on that page is so distracting…

colton_padden 1y ago
Was going to say the same thing. While neat it made it nearly impossible for me to focus on the content.
- transpute 1y ago
  Does reader mode help? No background visible on iOS Safari, even with content blockers disabled.
  - colton_padden 1y ago
    That does! Thank you.
- cglan 1y ago
  i feel like it's really not that bad
fkyoureadthedoc 1y ago
> Please don't complain about tangential annoyances—e.g. article or website formats, name collisions, or back-button breakage. They're too common to be interesting.
Proofread0592 1y ago
On desktop you can delete the div with id="particle-bg", its what I did to read the article before checking the comments

deleted 1y ago

[deleted]