PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hacker Spotlight: Interview with dki

hackerone.com | blog | #bug-bounty | #mobile-security | #ios | #hacker-spotlight | #interview | #hackerone
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Interview with Dawn Isabel (@dki), an iOS hacker who became her team's default security person in the early 2000s, on the puzzle-solving thrill of chaining vulnerabilities and what keeps her engaged.
Published
Collected

Related coverage

blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
research · calif.io
Learning to Jailbreak an iPhone with Claude (Part 1)
Claude helped me take apart an iOS Safari exploit, and retune it for my Mac. It even wrote its own variant.
vulnerability · calif.io
[CVE-2025-31207] Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild
# Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild Five apps, and what each of them does to stop you attaching a debugger. Huy Nguyen March 17, 2026 applereversing Contents 1....
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase
HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.
Back