vulnerability – Indie Spark

Python Pillow’s Denial of Service Vulnerability

A popular image processing library has a vulnerability that can cause denial of service by a maliciously-crafted file causing the application to consume too much memory. Should you upgrade or is there another solution?

WordPress JetPack’s Vulnerability

Having social sharing functions on every page in your blog seems intuitively useful. However these could easily be exploited by malicious people to do bad things and pass the blame onto you. Learn what is the problem behind these social media buttons and what you should do as a webmaster.

The Blast Door Design Pattern: A Secure Software Architecture

Real-life blast doors keeps fire, explosion, and radiation at bay. Designing blast doors into your system can also make it more secure, more resilient, and serves as a protective barrier from attacks.

Native vs Web: Technologies Available to Native Apps but not Web Apps

Progressive web applications have access to many features previously available only to native applications. However, there are still platform capabilities available exclusively to native applications. This article summarizes what are those.

How to Define Your Own Uniform Type Identifier (UTI)

Uniform Type Identifiers (UTIs) are a standardized way for macOS and iOS applications to identify data types. UTIs are used to identify a wide range of data types, from images and audio files to text documents. UTIs are hierarchical, allowing applications to recognize and work with related data types. Developers can define their own UTIs in their applications to provide better integration with other applications in the ecosystem.

Pricing Source Code for Sale

Pricing source code for sale involves understanding your product, target audience, and market landscape. This article explores various factors to consider when pricing source code for sale and provides a comprehensive guide to assist you in the process.

How to Get Started with FMDB using Swift

My latest guest post for Waldo shows you how to use SQLite databases using Swift through Gus Muller’s FMDB library. Head to Waldo for the article: Getting Started with FMDB and Swift: A Guide.

SwiftUI vs. Storyboard: Which Is the Best?

Comparing SwiftUI with storyboards for iOS development - which one is better when.

How to Create an App ID

Check out my latest guest post at Waldo: How to Create an iOS App ID: 2 Quick and Easy Methods. You will learn: What an App ID is in Apple’s ecosystems. How to create App IDs. What is an App Store ID and how it relates to an App ID. How to find an App…

How to Configure Developer ID Signing in Xcode Bot

By default, Xcode Server signs binaries using a development certificate, not a distribution one. Unfortunately there is no built-in option to make it use a Developer ID certificate. What's the solution?

Introducing macOS Notarization Automation Book

Notarization is a fully automated process, unlike going through the App Store which involves manual human review. At least it's automated in Apple's side. However it could consume a non-negligible amount of brain bandwidth in your side. How about automating it?

How to Setup Xcode 13 Server for macOS Development

Continuous testing is paramount to ship serous software. Yet continuously running tests is a pensive productivity plight. Is it possible to automate testing? Yes you can.

What’s New with Xcode 13 Notarization

Xcode 13 brought a new notarization tool. What is it and how much better compared to the old one?

How to Parse Notarization Tool Output

“I want a REST API for notarization since it’s impossible to parse text coming from the notarization tool reliably.” What if I say that the command line API is the best method for integration with build pipelines? Read on to find out more.

How to Automate macOS Application Notarization

Notarization may take just a few clicks in Xcode, but this takes time and a security risk. You include notarization as part of your continuous delivery pipeline. Here's how.

What can be Notarized for Developer ID Distribution?

Distributing binaries for macOS outside the App Store requires registering it with Apple beforehand—notarizing it. But do you know what can be submitted for notarization?

Python Pillow’s Denial of Service Vulnerability

How to Securely Provide Apple ID Password into Notarization Build Jobs

Including passwords into the source tree is a big security breach. Similarly including passwords into build jobs would be insecure. Learn how to securely provide Apple ID credentials into notarization jobs.

How to Transfer Applications for App Store Small Business Program Members

The App Store Small Business Program offers lowered commission cost with one big caveat: no app transfer. But apps graduating from a "hobby" into a "small business" would definitely involve transferring ownership. Read how to transfer apps without engaging in the app transfer process and losing out on the program's benefits.

How to Detect Apple Silicon and Rosetta from within a Shell Script

Compiled code can conclude the instruction set through conditional compilation. But what about processor-independent scripts? Finding out the current native processor architecture and emulation status thereof would be very useful in build systems that doesn't support cross-compilations. Find out how a shell script can find out whether it is running under Apple's processor, Intel, or emulated.

Tag: vulnerability