A writeup of CVE-2025-24169, a vulnerability in the macOS Apple Passwords browser extension host which could expose saved account data to a malicious actor.

Accessing sensitive Passwords app account data on macOS (CVE-2025-24169)

A writeup of a cross-site scripting vulnerability in a confidential Apple forum that allowed arbitrary JavaScript execution as a signed-in user.

Disclosing XSS vulnerability in Apple forum

A writeup of CVE-2021-30673, a macOS vulnerability that exposed sensitive iCloud call and FaceTime data via a Dock tile plugin.

Accessing sensitive call data on macOS (CVE-2021-30673)

A writeup of CVE-2020-9977, a macOS vulnerability that allowed access to a user's sensitive iCloud Safari browsing data via XPC.

Accessing sensitive Safari browsing data on macOS (CVE-2020-9977)

A writeup of a vulnerability in Height's macOS desktop app that could let a malicious actor distribute malware signed with Height's genuine certificate.

Disclosing vulnerability in Height's desktop app

How to get Apple's AppleGlot translation tool running on modern macOS.

Installing AppleGlot on macOS Catalina and Big Sur

TodayFlights is a Notification Center widget for tracking flights.

TodayFlights – Notification Center Flight Tracking

Aristocrat is a macOS menu bar utility for quickly OCR-ing selected areas of the screen including QR and other barcodes.

Aristocrat – Simple OCR

CloudyTabs is a macOS menu bar app that brings iCloud Tabs to the OS X menu bar.

CloudyTabs

Dictionary++ is a dedicate open source iOS app to use the built-in system dictionary.

Dictionary++ - An Open Source Dictionary App For iOS

A ZSH plugin that adds autocompletion and handy aliases for the Nanoc static site generator.

Nanoc + ZSH = Awesomeness

A wishlist of features and refinements I'd like to see in OS X 10.9

Blog