The Bob @theboberito.bsky.social · 10/10/2026Late Friday nights updates of SC Menu and Air Drop Assistant. Since I added Sparkle for the updater framework I’ll need to pay attention to it for security reasons. 000
The Bob @theboberito.bsky.social · 28/07/2026They use diet. It comes off easily. But once as a senior in high school. My parents left for a week or so. We went to an ICP concert. Got home so late went right to sleep. Woke up late. Ran to school still kind of covered and grimy. Good times 000
The Bob @theboberito.bsky.social · 28/07/2026Patch Yo Macs! 26.6 just released. You can thank me for protecting your keychains. 021
The Bob @theboberito.bsky.social · 14/07/2026I found some fun things about DDM’s service configuration files. boberito.medium.com/service-conf...boberito.medium.comService Configuration Files — the superpower we didn’t realize we have.Here’s how to use SCFs in a way maybe Apple didn’t intend. The secrets behind it. 000
The Bob @theboberito.bsky.social · 22/06/2026And the NIST Pages site is updated to reflect it all! pages.nist.gov/macos_securi...pages.nist.govmacOS Security Compliance ProjectThe macOS Security Compliance Project delivers open source, automated security guidance for macOS, based on NIST SP 800-53 and 800-219. Developed by federal experts and recognized by Apple, it enables... 000
The Bob @theboberito.bsky.social · 22/06/2026NIST published the draft update for the 800-219r2, aligning it with mSCP 2.0 today as well. csrc.nist.gov/News/2026/dr...csrc.nist.govDraft of SP 800-219r2 Available for Public Comment | CSRCNIST requests comments on the initial public draft (ipd) of Special Publication (SP) 800-219r2 (Revision 2), Automated Secure Configuration Guidance From the macOS Security Compliance Project (mSCP). 100
The Bob @theboberito.bsky.social · 22/06/2026We also merged dev_2.0 into main, officially launching mSCP 2.0! github.com/usnistgov/ma...github.comGitHub - usnistgov/macos_security: macOS Security Compliance ProjectmacOS Security Compliance Project. Contribute to usnistgov/macos_security development by creating an account on GitHub. 200
The Bob @theboberito.bsky.social · 22/06/2026Today is the biggest day in the mSCP’s 6 year history. We released updated guidance for all the OSes. This includes 800-53, 800-171, CMMC, DISA STIG, Dutch BIO Baseline, Germany’s INDIGO, CNSSI, and Health Industry Cybersecurity Practices. This is huge upon itself. github.com/usnistgov/ma...github.comReleases · usnistgov/macos_securitymacOS Security Compliance Project. Contribute to usnistgov/macos_security development by creating an account on GitHub. 100
The Bob @theboberito.bsky.social · 10/06/2026You can view STIG files, export them as CSV, PDF, and html, view checklist files, edit checklist files, save and export as ckl, cklb, HTML, CSV, CMRS XML. If you have to deal with STIGs you might as well have an enjoyable app to do it with. apps.apple.com/us/app/unive...apps.apple.comUniversal STIG Browser App - App StoreDownload Universal STIG Browser by Bob Gendler on the App Store. See screenshots, ratings and reviews, user tips, and more apps like Universal STIG Browser. 000
The Bob @theboberito.bsky.social · 10/06/2026Universal STIG Browser is a year old! Do you remember a time Pre-USB? When you had to load a slow yucky old Java app to view stigs on macOS. Today I realized version 1.4 bringing full functionality to macOS, iOS, iPadOS, and visionOS. 100
The Bob @theboberito.bsky.social · 09/06/2026Does SCAP excite you? Cause if so there's an SP update for you! SCAP 1.4 is now out with the final release of the NIST Special Publication 800-126r4. Check them acknowledgements. csrc.nist.gov/News/2026/ni...csrc.nist.govNIST Releases Two Updated SCAP Publications | CSRCNIST announces the release of Special Publication (SP) 800-126r4 (Revision 4), Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.4, and SP 800-126Ar4, SCAP 1.... 000
The Bob @theboberito.bsky.social · 09/06/2026All my apps work on macOS 27(SC Menu, Air Drop Assistant, Universal STIG Browser). I always worry that Air Drop Assistant won’t. And I secretly hope it gets Sherlocked. 010
The Bob @theboberito.bsky.social · 06/05/2026Air Drop Assistant 1.6, now with moar logging! github.com/boberito/Air... But in all seriousness it now can write a log file of your AirDrop activity.github.comRelease Air Drop Assistant 1.6 · boberito/AirDropAssistant1.6 Release! Added AirDrop logging when the appropriate configuration profile is installed (Logs stored in ~/Library/Logs/ADA.json) Added Sparkle Framework for Update Management (Issue #9) Added D... 030
The Bob @theboberito.bsky.social · 26/04/2026There’s all sorts of ways to support someone special going through something. This is one of them. Before…after. #fuckcancer🎀 0180
The Bob @theboberito.bsky.social · 14/04/2026Universal STIG Browser 1.3 released! Get it now! * Added the ability to add multiple STIGs to a checklist file (macOS, iPadOS, visionOS) * Added ability to enlarge and shrink text apps.apple.com/us/app/unive...apps.apple.comUniversal STIG Browser App - App StoreDownload Universal STIG Browser by Bob Gendler on the App Store. See screenshots, ratings and reviews, user tips, and more apps like Universal STIG Browser. 000
The Bob @theboberito.bsky.social · 05/03/2026You like podcasts and hearing me? Then listen to this www.cisecurity.org/insights/pod...cisecurity.orgEpisode 177: Power of Community-Developed Security ContentSecurity doesn't need to happen in a silo. Listen to our podcast episode to learn about the power of community-developed security content. 010
The Bob @theboberito.bsky.social · 26/02/2026Digging into updating Universal STIG Browser. I will guarantee I can create 10x the slop AI can. Out slop me if you can! 000
The Bob @theboberito.bsky.social · 05/02/2026SC Menu 2.1. Freshly released. Get it while it’s hot! github.com/boberito/sc_...github.comRelease Smartcard Menu 2.1 · boberito/sc_menu2.1 Release! Added configuration option to configure days to show notification until certificates expire (MDM or defaults write command) Key: DaysToExpiration, Type: Integer Fixed issue with displ... 000
The Bob @theboberito.bsky.social · 25/01/2026For a group that cries socialism. They sure like to socialize and move things more towards actual communism 100
Reposted by The BobBasic Apple Guy @basicappleguy.com · 24/01/2026On this day 42 years ago, Apple introduced Macintosh. The computer for the rest of us. 17812
The Bob @theboberito.bsky.social · 24/01/2026Happy 42nd birthday to the Mac!media.tenor.coman apple computer with a party hat on topALT: an apple computer with a party hat on top 000
The Bob @theboberito.bsky.social · 22/01/2026Since Skip Tools is now free (skip.dev) I wonder if I can get Universal STIG Browser to work on Android. Hmmmmskip.devBuild truly native iPhone and Android apps with SkipIntroduction to using Skip for dual-platform app development. 000
The Bob @theboberito.bsky.social · 15/01/2026Wtf now I have another intel based machine. A System76 Linux laptop. 020
The Bob @theboberito.bsky.social · 13/12/2025The last time is now.media.tenor.coma man in a boxing ring with the word mercy on the bottom rightALT: a man in a boxing ring with the word mercy on the bottom right 000
The Bob @theboberito.bsky.social · 12/12/2025Guess who’s back….SCAP’s back, SCAP’s back, tell a friend ….. Ok it never really went away. But we’re over here pumping life back into it. SCAP 1.4 spec! OVAL 5.12.1 spec! (Now with shell command!) csrc.nist.gov/News/2025/ni...csrc.nist.govNIST Releases SP 800-126 & SP 800-126A | CSRCNIST Releases Two Updated Security Content Automation Protocol (SCAP) Publications for Comment 000
The Bob @theboberito.bsky.social · 09/12/2025If you like reading NIST special publications, I got a newly revved 800-70 for you. csrc.nist.gov/News/2025/dr...csrc.nist.govDraft SP 800-70 Rev 5 is available for comment | CSRCNIST Special Publication (SP) 800-70r5 ipd (Revision 5, initial public draft), National Checklist Program for IT Products – Guidelines for Checklist Users and Developers, is now available for public c... 021
The Bob @theboberito.bsky.social · 05/12/2025Developer Accomplishment Accomplished! Universal STIG Browser hit the broke even point and paid for the developer account! 010
The Bob @theboberito.bsky.social · 26/11/2025You like Autopkg. @lashomb.bsky.social has got the recipe for you for ADA lashomb.com/blog/air-dro...lashomb.comAutopkg recipes for Air Drop AssistantNew recipes added 000
The Bob @theboberito.bsky.social · 18/11/2025The most requested feature of Universal STIG Browser is here now, released today! You can now create checklist files, edit checklist file, view checklist files, export, save...all your favorite things. apps.apple.com/us/app/unive... 000
The Bob @theboberito.bsky.social · 14/11/2025OMG OMG OMG This built on Linux (Ubuntu with gnome) using SwiftCrossUI @stackotter.dev. It should build happily on windows once I get a fresh VM set up. Fake data at the moment. But the guts won’t be hard to port from a previous project github.com/boberito/jam... 051
The Bob @theboberito.bsky.social · 28/10/2025Seriously though I did 1.0 on Feb 24, 2024...so 18 months later with regular releases I've hit 2.0. It's been awesome to see that people use it and appreciate it. Thank you all for downloading, using, sharing, and submitting issues and feedback. Makes me feel like a real swift developer. 000
The Bob @theboberito.bsky.social · 28/10/2025SC Menu 2.0 posted! So many updates I can’t list these in the character limit. github.com/boberito/sc_...github.comRelease Smartcard Menu 2.0 · boberito/sc_menu2.0 Release! New Icon! Run scripts on smartcard insert and run scripts on smartcard removal. Added the ability for script execution to be managed by configuration profile. Notification when certif... 110
The Bob @theboberito.bsky.social · 24/10/2025Time to get some of my nonsense working on another platform, just because I can. Universal STIG Browser on Android maybe? 110
The Bob @theboberito.bsky.social · 21/10/2025I’m not sure if there’s a vulnerability there or not with leaked information. I’m not even sure how to hunt or look for that. Is a developer support ticket the best way to report this? Or the Blackhole of Apple feedback? 000
The Bob @theboberito.bsky.social · 21/10/2025Then with SIP disabled I could connect Instruments to it. Lo and behold, memory leak when viewing a certificate! I imagine it’s using the same class and not some proprietary private API thing. I also imagine it’s ancient code that hasn’t been updated in forever. 100
The Bob @theboberito.bsky.social · 21/10/2025Whenever I create an instance of an SFCertificateView and set setDisplayDetails(true) it causes a leak. I’ve talked with some people, consulted all the AI gods, tried a bunch and always happens. Since i believe Keychain Access probably uses the same thing I disabled SIP. 100
The Bob @theboberito.bsky.social · 21/10/2025Sooo I think I found a memory leak in an Apple class SFCertificateView. I use it in SC Menu to display a certificate from a smart card. I’ve been trying to be a better programmer by fixing memory leaks and understand them. github.com/boberito/sc_...github.comsc_menu/smartcard_menu/ViewCertsViewController.swift at dev_2.0 · boberito/sc_menuSimple smartcard Menu item. Contribute to boberito/sc_menu development by creating an account on GitHub. 100
The Bob @theboberito.bsky.social · 06/10/2025Big ow bar, squat single, high bar squat three sets of eight, leg extensions, single leg extensions, leg press, Glute ham raises. I’d like a kid in the candy store when I go to a real gym. Walking out of there like a baby giraffe. 000
The Bob @theboberito.bsky.social · 06/10/2025A year into Apple Intelligence, what do we know? Well your Mac knows the answers, just gotta ask the right questions. Read “IQ Check: On-Device vs PCC — Reading the Signals Hidden on Your Mac“ by Bob Gendler on Medium: boberito.medium.com/iq-check-on-...boberito.medium.comIQ Check: On-Device vs PCC — Reading the Signals Hidden on Your MacYour Mac knows and can tell you specifically on device vs off device for Apple Intelligence 012
The Bob @theboberito.bsky.social · 05/10/2025Server side swift is definitely an interesting thing to me. I wonder if I could somehow build some server to build pieces from the macOS security compliance project. Like an api if you will. 000
The Bob @theboberito.bsky.social · 05/10/2025So since there’s another week of being furloughed basically(most likely), I need an idea for a swift project to keep me occupied. I’m open for suggestions 110
