tomayac’s Twitter Archive—№ 14,671

In unexpected (#not) news, turns out XML parsing is hard: iOS <13.5 sandbox escape/entitlement 0day: siguza.github.io/psychicpaper/. A bug write up that even non-security folks like me can follow.