Josh Long (the JoshMeister)

@thejoshmeister.com

233 Followers 136 Following

Cybersecurity evangelist; security researcher, writer, and award-winning public speaker. Focused on Apple, Mac, macOS, infosec, malware, and privacy. https://www.theJoshMeister.com

Mr. Incredible happy-or-horrified meme format. In the top half, Mr. Incredible smiles confidently next to a list of four Coruna-exploited vulnerabilities that Apple patched this week in iOS 15.8.7, most of which Apple either patched this week in iOS 16.7.15 or in earlier versions of iOS 16. In the bottom half, a face resembling Mr. Incredible is half hidden in shadow as he evidently has come to a horrible realization about the number of vulnerabilities that remain unpatched, including three that Apple has said were exploited in the wild since the release of iOS 26, and more than 170 others are listed and overflowing onto his face. Note: Even more vulnerabilities than those listed are likely to affect iOS 15 and 16. The list in this meme only includes vulnerabilities Apple has patched in iOS 26.x. It's important to recognize that this list doesn't include vulnerabilities patched in iOS 17 or 18 that never got released for iOS 15 or 16.
the JoshMeister doing his best Home Alone impression
How it started: Design genius Jony Ive sits across from Steve Jobs (Apple co-founder and CEO) in a well-lit cafe; Jobs has a paper cup of tea in front of him, and both men are smiling and enjoying each other’s presence. … How it’s going: Jony Ive sits across from Sam Altman (OpenAI co-founder and CEO) in a bar; their conversation appears business-like and formal, and neither man looks very happy.
Following is an excerpt from Josh Long’s first cybersecurity article. “On many social networks, it's a common practice to use shortened redirect URLs rather than linking directly to the (often much longer) original URL of a page. This is especially common when character limits are imposed, such as Twitter's 140 character maximum. “From a security standpoint, blindly clicking on redirect URLs is probably not the best idea, especially if you don't know (or don't implicitly trust) the person who shared it. In fact, even a trusted user's account could theoretically be hijacked, as happened earlier today when an XSS attack was launched against Twitter. “Thankfully, many URL shortening services offer ways of previewing the full URL before visiting it. Instructions for some of these sites follow (roughly in order of popularity). … this information is given for information purposes only, based on what I was able to find out by researching and testing each service.”