LIVE: Apple Security Research, our new blog and website at security.apple.com! We launch with an update on Apple Security Bounty (security.apple.com/blog/appl…), and a deep dive into some fundamental XNU memory safety improvements with kalloc_type (security.apple.com/blog/towa…). Enjoy!

Just because a root certificate is in the built-in iOS/macOS trust store doesn't mean that it is trusted. Apple applies additional constraints via configuration updates to maintain a high-level of security. See support.apple.com/HT212865 for more detail.

New root program policy reqs announced this morning: apple.com/certificateauthori…

The Security Research Device Program (SRDP) is currently taking applications for its second cohort. This is the last week to apply for an  Apple Security Research Device 🔐📲— apply today!: developer.apple.com/programs…

my team is growing, would love to hear from you if building and breaking SoCs is your thing jobs.apple.com/en-us/details…

I’m hiring secure OS engineers in Sydney, Australia. If designing kernels, hypervisors, and runtimes to be secure and robust is your kind of thing, please get in touch! jobs.apple.com/en-au/details…

Love TLS, X509, Certificate Transparency, or ASN1? Or hate them and want to make them better? My team is looking for engineers! You can apply at the link. DMs also open. jobs.apple.com/en-us/details…

my team work on securing all the new features we ship to our customers. we're recruiting and seeking diverse candidates! check out our job posting or DM me for details! jobs.apple.com/en-us/details…

I’m hiring an engineering manager for the Secure Enclave OS to lead a strong team that sets a higher bar each year for software/hardware security. If you want to help evolve a key security component trusted by a billion users, please reach out! jobs.apple.com/en-us/details…

Hi folks! The team I manage at Apple, the Authentication Experience team, is hiring a software engineer. We use empathy-driven development to make using apps and websites that have accounts more humane and safe for everyone. Bay Area role; DMs open for Qs. jobs.apple.com/en-us/details…

Hi folks! My team is recruiting for a Security and Authentication engineer, focused on web-facing features. If you are interested, or know someone who might be, please reach out! jobs.apple.com/en-us/details…

Ininterested an internship at Apple working on WebKit or related tech? Some of the areas of opportunity: - DOM & Web APIs - Layout & Rendering - 3D Graphics - Security & Privacy - Web dev tools - Media - JS VM - HTTP stack DM if interested. RTs appreciated.

TIL in manufacturing BER stands for “Beyond Economical Repair”, which is probably a more useful expansion of ASN.1 BER than “Basic Encoding Rules”.