Sign in

Dan Underwood

@underwood.digital
256 followers 340 following 31 posts

Security Engineering @ Apple, Ex-UK Gov The intersection of technology (device and national security), and liberal arts (public policy)

PostsRepliesMedia
Dan Underwood @underwood.digital · 16/09/2026
"Across all three requirements — semantic authenticity, resilience to compromise, and privacy preservation — we believe that Apple Reference Image sets a new standard for security in the industry." security.apple.com/blog/apple...
security.apple.com
Apple Reference Image: A New Approach for Verified Photography - Apple Security Research
Introducing Apple Reference Image, a new solution for verifiable photography on iPhone. This new, opt-in camera mode lets a photographer create a securely timestamped reference image that accurately depicts what was captured by the iPhone's camera sensor. Apple Reference Image offers a trustworthy, scalable guarantee that a reference image is what it claims to be: a real photograph, captured by a real sensor in an iPhone camera, at a specific period in time.
040
Dan Underwood @underwood.digital · 14/08/2026
"Apple told TechCrunch that it has updated the user experience, making it easier for recipients to access important information on what to do next." techcrunch.com/2026/08/13/if-...
techcrunch.com
If Apple sends you a push notification alerting you to a spyware attack, take it seriously | TechCrunch
Apple now sends out push notifications to iPhone lock screens when the company identifies government spyware targeting someone's devices.
000
Dan Underwood @underwood.digital · 06/07/2026
I'm hiring for Apple's Secure Design team here in Cupertino - come join us in our mission in securing the features that Apple ships to its customers (such as Siri AI and encrypted RCS) and partner with some of the most talented people in the industry: jobs.apple.com/en-us/details/...
jobs.apple.com
Secure Design Engineer, SEAR - Jobs - Careers at Apple
Apply for a Secure Design Engineer, SEAR job at Apple. Read about the role and find out if it’s right for you.
122
Dan Underwood @underwood.digital · 11/06/2026
At the #WWDC26 Privacy & Security Group Lab we answered some great questions from developers, including how we secured features such as Siri AI, and protect users privacy with PCC. There's another chance to ask questions today on the forums at 3pm PDT: developer.apple.com/forums/ac...
110
Dan Underwood @underwood.digital · 10/06/2026
Later today at 3pm in Cupertino we have our online Privacy & Security Group Lab! Join and you'll be able to ask us your questions around all of the announcements at #WWDC26 and how you can protect your users. developer.apple.com/videos/pl...
developer.apple.com
Privacy and Security Group Lab - WWDC26 - Videos - Apple Developer
Join us online for a deep dive into WWDC26 with Apple engineers and designers to ask questions, get advice, and follow the discussion...
100
Dan Underwood @underwood.digital · 09/06/2026
Agentic tools and features introduce new categories of security risks and vulnerabilities. My team, and one of our partner teams, has put together this superb #WWDC26 session to help developers mitigate these risks - using what we learned while securing Siri AI developer.apple.com/videos/pl...
developer.apple.com
Secure your app: mitigate risks to agentic features - WWDC26 - Videos - Apple Developer
Explore how to evaluate threats from indirect prompt injection, such as data exfiltration and unintended actions. Discover system...
030
Dan Underwood @underwood.digital · 08/06/2026
"Now, we are collaborating with Google and NVIDIA to run new Apple Intelligence workloads on Google Cloud, extending our industry-leading PCC privacy commitments to third-party data centers for the first time." #WWDC26 security.apple.com/blog/expan...
security.apple.com
Expanding Private Cloud Compute - Apple Security Research
Alongside the next generation of Apple Intelligence, today we’re expanding Private Cloud Compute (PCC) beyond Apple’s data centers. When Apple introduced Private Cloud Compute in 2024, we defined a new frontier for private AI inference, extending the security and privacy of Apple devices into the cloud for those AI workloads more complex than on-device models can handle. Now, we are collaborating with Google and NVIDIA to run new Apple Intelligence workloads on Google Cloud Platform, extending our industry-leading PCC privacy commitments to third-party data centers for the first time.
042
Dan Underwood @underwood.digital · 08/06/2026
For any developers who are at #WWDC26 - come join us in the Privacy & Security Labs after SOTU!
The post author at WWDC26 in Apple Park
030
Dan Underwood @underwood.digital · 11/05/2026
Incredibly proud to have been part of this effort and collaboration to enable end-to-end encrypted messaging over RCS for users across the world in iOS 26.5. iMessage continues to offer the best security available to the most users at scale. www.apple.com/newsroom/2026/0...
apple.com
End-to-end encrypted RCS messaging begins rolling out today in beta
Apple and Google collaborate with the GSMA to roll out end-to-end encrypted RCS messaging in beta, enhancing cross-platform communication security.
070
Dan Underwood @underwood.digital · 07/04/2026
LLMs will drastically change how software vulnerabilities are discovered (and resolved) across the industry - and in many cases already are. www.anthropic.com/glasswing
anthropic.com
Project Glasswing: Securing critical software for the AI era
A new initiative to secure the world’s most critical software and give defenders a durable advantage in the coming AI-driven era of cybersecurity.
000
Dan Underwood @underwood.digital · 06/03/2026
In case you missed it - here's six(!) hours of content from my incredible friends and colleagues today on protecting your apps from memory safety vulnerabilities. It was great to meet up with developers and talk about protecting users! www.youtube.com/live/UZeSyodA...
youtube.com
Fortify your app: Essential strategies to strengthen security | Meet with Apple
Learn to bolster your app’s security and help protect user data in this online activity streaming from the Apple Developer Center Cupertino. Whether you’re hardening an existing app or starting a new project, you’ll learn directly from Apple engineers about how to reinforce your app from the ground up. Learn about the security challenges facing modern apps, and explore a comprehensive suite of tools and technologies designed to help safeguard user data. Discover how you can protect your C and C++ codebases with powerful features like Memory Integrity Enforcement, pointer authentication, and memory bounds safety. Find out how to adopt Swift for your most security-sensitive components, taking advantage of its inherent safety and modern abstractions to write secure, high-performance code. And get guidance on building a clear security roadmap for new and existing projects, from high-level strategy to hands-on implementation. Presentations: Enhance app security with Xcode Protect your app from memory safety vulnerabilities Implement performance-tuned Memory Integrity Enforcement Control flow integrity with Pointer Authentication Eliminate bounds safety vulnerabilities in C and C++ Find security bugs in Swift code with Sanitizers Write a security-sensitive component in Swift To explore additional sessions, appointments, and workshops, view the full schedule of Meet with Apple activities worldwide. https://apple.co/Meet-with-Apple More Apple Developer resources: Video sessions: https://apple.co/VideoSessions Documentation: https://apple.co/DeveloperDocs Forums: https://apple.co/DeveloperForums App: https://apple.co/DeveloperApp
010
Dan Underwood @underwood.digital · 26/02/2026
"Following rigorous security testing and extensive evaluation by the German government, iPhone and iPad become the first consumer devices approved for use with classified information in NATO restricted environments" www.apple.com/newsroom/2026/0...
apple.com
iPhone and iPad approved to handle classified NATO information
Today, Apple announced iPhone and iPad are the first and only consumer devices in compliance with information assurance requirements of NATO nations.
041
Dan Underwood @underwood.digital · 28/01/2026
My peer team at Apple is hiring! If you're interested in securing cutting edge hardware and collaborating with incredibly skilled engineering teams to deliver great products that people love using then this role may be a good fit. jobs.apple.com/en-us/details/...
jobs.apple.com
Security Reviewer, Secure Design Platform - Jobs - Careers at Apple
Apply for a Security Reviewer, Secure Design Platform job at Apple. Read about the role and find out if it’s right for you.
022
Reposted by Dan Underwood
Bob Lord @boblord.bsky.social · 24/11/2025
📢 Announcing hacklore.org 📢 It’s time to retire outdated cyber advice! More than 80 cybersecurity veterans have signed an open letter urging a shift from folklore to guidance that actually helps people avoid the most common attacks. 🔐 Blog: medium.com/@boblord/let... Site: www.hacklore.org
hacklore.org
Stop Hacklore!
610159
Dan Underwood @underwood.digital · 10/10/2025
We're updating our bounty program with the top award now set at $2 million for zero-click remote exploit chains. In addition - there are increased awards for proximate wireless attacks, WebKit, and Gatekeeper security.apple.com/blog/apple...
security.apple.com
A major evolution of Apple Security Bounty, with the industry's top awards for the most advanced research - Apple Security Research
Today we’re announcing the next major chapter for Apple Security Bounty, featuring the industry’s highest rewards — up to $2 million and a maximum payout in excess of $5 million — expanded research categories, and a flag system for researchers to objectively demonstrate vulnerabilities and obtain accelerated awards.
11310
Reposted by Dan Underwood
Avery Vine @averyvine.com · 26/09/2025
Did you know that more than half of all iPhones around the world are being used in languages other than English? My team helps make that possible, and we're hiring! Our work is very dynamic and spans the entire localization pipeline, from internal tools to all our OSes. jobs.apple.com/en-us/detail
jobs.apple.com
Localization Software Engineer - Jobs - Careers at Apple
Apply for a Localization Software Engineer job at Apple. Read about the role and find out if it’s right for you.
033
Dan Underwood @underwood.digital · 12/09/2025
"The iPhone 17 is probably now the most secure computing environment on the planet that is still connected to the internet,"
techcrunch.com
Apple's latest iPhone security feature just made life more difficult for spyware makers | TechCrunch
Apple launched a new security feature for iPhone 17 and iPhone Air designed to reduce the effect of memory corruption bugs, and in turn make spyware and zero-days more difficult to hack into iPhones.
050
Reposted by Dan Underwood
Cabel Sasser @cabel.panic.com · 10/09/2025
@rmondello.com Neven got this email from Portland Public Schools that is relevant to your interests. I'll be thinking about it for a while…
Dear PPS community, In recent weeks, we've seen a concerning rise in compromised student accounts. Attackers are gaining access to these accounts and using them to
send thousands of phishing and scam emails worldwide. Our investigation shows that many of these breaches result from students reusing passwords across multiple services. Once attackers obtain credentials from other sites, they try them against school accounts with
significant success. To better protect student accounts and reduce their value as targets, we are
making a change:
Students will no longer be able to set up Multi-Factor Authentication
(MFA) on their Google accounts. Attackers have been exploiting this feature by enabling MFA themselves to strengthen their hold on compromised accounts. By blocking this option, we
disrupt their process.
8764
Dan Underwood @underwood.digital · 09/09/2025
iPhone 17, iPhone Air, and iPhone 17 Pro all support Memory Integrity Enforcement bringing a significant advancement in memory safety - including to developers as part of the Enhanced Security feature announced earlier this year at WWDC
security.apple.com
Blog - Memory Integrity Enforcement: A complete vision for memory safety in Apple devices - Apple Security Research
Memory Integrity Enforcement (MIE) is the culmination of an unprecedented design and engineering effort spanning half a decade that combines the unique strengths of Apple silicon hardware with our advanced operating system security to provide industry-first, always-on memory safety protection across our devices — without compromising our best-in-class device performance. We believe Memory Integrity Enforcement represents the most significant upgrade to memory safety in the history of consumer operating systems.
063
Dan Underwood @underwood.digital · 10/06/2025
With iOS 26.0, we're introducing support for Wi-Fi Aware via AccessorySetupKit - this makes it easy for users to connect to and set up your accessories securely, and build peer to peer connectivity experiences with DeviceDiscoveryUI! developer.apple.com/videos/play/wwd… #wwdc25
developer.apple.com
Supercharge device connectivity with Wi-Fi Aware - WWDC25 - Videos - Apple Developer
Learn how to create peer-to-peer network connections with Wi-Fi Aware. We'll also cover how to share videos in real time, transfer large...
050
Dan Underwood @underwood.digital · 10/06/2025
We've launched support for developers to build their own security hardened extensions, distribute apps using Pointer Authentication, and access a range of other security mitigations: developer.apple.com/documentation/x… #wwdc25
developer.apple.com
Enabling enhanced security for your app | Apple Developer Documentation
Detect out-of-bounds memory access, use of freed memory, and other potential vulnerabilities.
041
Dan Underwood @underwood.digital · 09/06/2025
This is a hugely important update for CryptoKit - make sure you check out the session to learn more about what you do (and don’t) need to do as an App Developer to protect against quantum computers.
030
Reposted by Dan Underwood
Ricky Mondello @rmondello.com · 03/06/2025
New post on the Swift blog: we re-wrote the Password Monitoring service for Apple Passwords in Swift and saw huge improvements in memory use and throughput. Some of the details here still blow my mind; it's a fun read. www.swift.org/blog/swift-at-apple-m…
swift.org
Swift at Apple: migrating the Password Monitoring service from Java
Swift is heavily used in production for building cloud services at Apple, with incredible results. Last year, the Password Monitoring service was rewritten in Swift, handling multiple billions of requests per day from devices all over the world. In comparison with the previous Java service, the updated backend delivers a 40% increase in performance, along with improved scalability, security, and availability.
410021
Dan Underwood @underwood.digital · 16/05/2025
Manta rays off the coast of Hawaii!
030
Dan Underwood @underwood.digital · 24/04/2025
Picked up my Close Your Rings Day pin! (Happy 10th birthday to Apple Watch)
021
Reposted by Dan Underwood
MacRumors.com @macrumors.bsky.social · 26/03/2025
Apple's Mac Site Features Fictional 'Lumon Terminal Pro'
macrumors.com
Apple's Mac Site Features Fictional 'Lumon Terminal Pro'
Apple is going all out with promotions for the popular Severance Apple TV+ show today, and as of right now, you'll find a new "Lumon Terminal Pro" listed on Apple's Mac site. The Lumon Terminal Pro is designed to look similar to the machines that Severance employees like Mark S. and Helly R. use for macrodata refinement. The Terminal features a blue keyboard, a small display with wide bezels, and a trackball for navigation purposes. Unfortunately, you can't actually buy a Lumon Terminal Pro, though it would undoubtedly sell well to Severance fans. Apple's page links to the company's actual Macs, and to a behind the scenes editing video that Apple shared this morning. The second season of Severance wrapped up last Thursday, so the entire series is now available to stream on ‌Apple TV‌+. Apple renewed Severance for season three, and Severance director Ben Stiller has promised that it won't take another three years for us to get another season.Tag: Apple TV Plus This article, "Apple's Mac Site Features Fictional 'Lumon Terminal Pro'" first appeared on MacRumors.com Discuss this article in our forums
1326
Reposted by Dan Underwood
Philip Schiller @pschiller.bsky.social · 25/03/2025
#WWDC25 June 9, 2025 www.apple.com/newsroom/202...
apple.com
Apple’s Worldwide Developers Conference returns the week of June 9
Apple today announced it will host its annual Worldwide Developers Conference (WWDC) online from June 9 to 13, 2025.
0799
Reposted by Dan Underwood
Swift Language @swift.org · 21/02/2025
👋 from the Swift team, now on Bluesky!
32558110
Reposted by Dan Underwood
Diego @diegoabel.bsky.social · 28/01/2025
Decided to do the #promosky as I’m looking for more friends (MDNI), especially people to play games with 🙂 🎮 Zelda, Kirby, Skyrim, No Man’s Sky, Stellaris, Civilization 📺 Dragon Prince, Severance, Foundation 📖 Arc of a Scythe, Mistborn 🎨 Used to write so artists are also welcome (🚫 NFT, genAI)
2567
Dan Underwood @underwood.digital · 08/01/2025
Maybe a catastrophic natural disaster isn't the best way to advertise your features in an app for managing your smart devices LG
021
Dan Underwood @underwood.digital · 18/12/2024
CISA has launched guidance on protecting mobile devices given recent threats against telecommunications infrastructure - including the benefit of Lockdown Mode, Private Relay, and the Passwords app
cisa.gov
010
Dan Underwood @underwood.digital · 11/12/2024
Do you want to work on designing the security of the latest Apple products and features that will be used by over a billion users? Our team is hiring for engineers to help provide security leadership! jobs.apple.com/en-us/details/200582…
jobs.apple.com
Security Reviewer, Secure Design - Careers at Apple
Apply for a Security Reviewer, Secure Design job at Apple. Read about the role and find out if it’s right for you.
0117
Dan Underwood @underwood.digital · 26/11/2024
My colleagues in the Cryptographic Engineering team within SEAR are hiring in Paris! They're an incredibly talented team working on challenging real world problems - if you're interested please do consider applying jobs.apple.com/en-us/details/200578…
013
Dan Underwood @underwood.digital · 25/11/2024
Despite increasing legislation, and a low minimum bar for compliance, it’s incredible (albeit not surprising) how many device manufacturers and software vendors still struggle to provide that bare minimum to allow researchers to report security vulnerabilities
021
Reposted by Dan Underwood
Jen Simmons @jensimmons.bsky.social · 22/11/2024
Just look at that Interop 2024 score… wpt.fyi/interop-2024
Screenshot of dashboard scores — Chrome 99, Edge 98, Firefox 99, Safari 99
211112
Dan Underwood @underwood.digital · 22/11/2024
Need to improve memory safety in existing unsafe C code? My colleagues have published a patch for clang that introduces support for -f-bounds-safety! github.com/swiftlang/llvm-project/p…
055
Dan Underwood @underwood.digital · 20/11/2024
It's going to be a bumper year for "Crypto Means Cryptograpy" stickers www.bloomberg.com/news/articles/202…
010
Dan Underwood @underwood.digital · 17/11/2024
As expected, the first episode of Silo season two was superb.
030
Dan Underwood @underwood.digital · 24/10/2024
Proud of my colleagues who have driven the work on this - we just launched a huge amount of security material for PCC (Private Cloud Compute), including a new security guide, Virtual Research Environment, and source code security.apple.com/blog/pcc-securit…
052