Author

Avatar for Guilherme Rambo

Guilherme Rambo

_inside

Guilherme Rambo is a Mac and iOS developer based in Brazil. Known for discovering Apple’s secrets and analyzing leaks, he writes about his discoveries on 9to5mac.

If you have any tips or suggestions, contact him at guilherme@9to5mac.com

Connect with Guilherme Rambo

Security vulnerability in CocoaPods dev tool could have affected millions of iOS apps

Second teen who hacked into Apple servers gets probation

The security of millions of iOS apps could have been compromised due to a security vulnerability in the popular dependency manager CocoaPods.

Software developers often rely on code written by other companies or developers in order to speed up the development of their products. To facilitate the management of code from other sources — known as dependencies — developers use a tool called a dependency manager. The same is true when developing for Apple’s platforms, and the most popular dependency manager for iOS apps by far is CocoaPods.

This past Monday, the maintainers of the project released a statement uncovering a security issue that’s been recently discovered and was present in the software since June 2015, giving attackers plenty of time to potentially exploit it.


Expand
Expanding
Close

Apple officially unveils AirTag item tracker

During its Spring Loaded event, Apple has finally unveiled the long-rumored and profusely leaked AirTag, its item tracker integrated into the Find My network. We’ve known about this product since early 2019, when 9to5Mac reported about its development. Since then, the product has made several appearances in iOS builds and even appeared briefly in a YouTube video on Apple’s Support channel.

Expand Expanding Close

Stacktrace Podcast 131: “Apple product therapy”

Stacktrace Podcast

It’s finally time for another round of Apple Event Keynote Poker, with John and Rambo placing their bets as to what Apple might announce during their “Spring Loaded” event on April 20th. Also, the power of HTTP, SwiftUI for AR, Swift’s Result Builders feature, and more.

Sponsored by ALOGIC: Get 30% off the ALOGIC Rapid USB-C Wall Charger on Amazon [Amazon UK] and enter the iPad Pro giveaway.

Sponsored by Linode: Get $100 in free credit to Develop, deploy, and scale your modern applications faster and easier.

Download MP3

Stacktrace Podcast 130: “A comedian with code”

Stacktrace Podcast

John and Rambo talk about Kara Swisher’s recent interview with Tim Cook, Apple’s upcoming App Tracking Transparency initiative and the new additions to Apple Arcade, and classic vs modern UIKit. Also, behind the scenes of this year’s April Fools’ jokes, and a somewhat unique #askStacktrace segment.

Sponsored by Linode: Get $100 in free credit to Develop, deploy, and scale your modern applications faster and easier.

Download MP3

Stacktrace Podcast 129: “Dependencies gone wild”

Stacktrace Podcast

John is excited about SwiftUI animations, Rambo updates the unofficial WWDC app, Xiaomi resurrects AirPower, and Apple announces WWDC21. Also, the latest Apple TV rumors, and what’s good to keep in mind when hosting a Hackathon.

Sponsored by Linode: Get $100 in free credit to Develop, deploy, and scale your modern applications faster and easier.

Download MP3

Stacktrace Podcast 128: “They backed themselves into a home corner”

Stacktrace Podcast

Rambo launches a new app, John has thoughts about SwiftUI’s heavy usage of Swift’s type system, and it turns out that there might be more to the HomePod mini than meets the eye.

Sponsored by Linode: Get $100 in free credit to Develop, deploy, and scale your modern applications faster and easier.

Sponsored by Pillow: Pillow is an all-in-one sleep tracking solution to help you get a better night’s sleep. Download it from the App Store today.

Download MP3

Stacktrace Podcast 127: “Apple’s spring cleaning”

Stacktrace Podcast

Optimizing the performance of SwiftUI views, mixing client work with indie development, Apple’s recent discontinuation of the original HomePod, and what it takes to provide really good feedback and bug reports when testing an app.

Sponsored by VMware Workspace ONE: A true Unified Endpoint Management platform that manages all device types on all platforms across all use cases, including macOS and iOS. Try for free.

Sponsored by Pillow: Pillow is an all-in-one sleep tracking solution to help you get a better night’s sleep. Download it from the App Store today.

Download MP3

Stacktrace Podcast 126: “Leaving iOS behind”

Stacktrace Podcast

Rambo picks up Android development, John is continuing to turn into a Mac developer, and the two discuss the recent discontinuation of the iMac Pro and how developers can improve the way they communicate with other team members.

Sponsored by Pillow: Pillow is an all-in-one sleep tracking solution to help you get a better night’s sleep. Download it from the App Store today.

Download MP3

Tired of waiting for Apple’s AirTags? This open-source project lets you create your own

The first report about Apple working on an item tracker was back in April 2019, here on 9to5Mac. Since then, we’ve seen the device appear and disappear from iOS builds and even show up in an official Apple video on YouTube. More recently, rumors started picking up again about its imminent release, given the presence of support for third-party item trackers in iOS 14.5, which will also work for Apple’s own item tracking device.

But if you’re tired of waiting for Apple to release their own item tracker, there’s an open-source project that might help you, but only if you’re into hacking. Researchers from German university TU Darmstadt reverse-engineered the protocol used by Apple devices to participate in the Find My network and released free resources for those who would like to create their own item-tracking device at home.

Expand Expanding Close

Stacktrace Podcast 124: “All of that Macness”

Stacktrace Podcast

App Clip analytics, building macOS apps using SwiftUI, Apple’s initial response to the latest App Store scams, speculation about what a potential Apple March event might include, and getting started with unit testing.

Sponsored by Pillow: Pillow is an all-in-one sleep tracking solution to help you get a better night’s sleep. Download it from the App Store today.

Download MP3

Stacktrace Podcast 122: “Raised in a hardware household”

Stacktrace Podcast

Rambo hacks a humidifier, John is excited about linting and continuous integration, and the two discuss the most recent set of exposed App Store scams and what Apple could do to improve the situation. Also, SwiftUI jobs and minimum deployment targets.

Sponsored by Funn MediaLive a healthier life with Funn Media’s collection of apps for iPhone, iPad, Mac, and Apple Watch, including Calory, WaterMinder, and more. 

Sponsored by Kandji: A modern, cloud-based platform for centrally managing and securing your Mac, iPhone, iPad, and Apple TV devices, saving IT teams countless hours of manual work with features like one-click compliance templates and 150+ pre-built automations, apps, and workflows. Request access.

Download MP3

Stacktrace Podcast 121: “Debug-driven development”

Stacktrace Podcast

John and Rambo discuss some of the key new features that are being introduced in iOS 14.5 and Xcode 12.5, as well as their preferred debugging workflows, and how to deal with tech debt and refactoring in a pragmatic and sustainable way.

Sponsored by Guardian Firewall: Advanced security and privacy control for your iPhone and iPad, powered by the team who spent years reverse-engineering iOS to help you take back control. Download the app to receive 3 days free with zero commitment or $10 off Guardian Pro at www.guardianapp.com/stacktrace.

Sponsored by Kandji: A modern, cloud-based platform for centrally managing and securing your Mac, iPhone, iPad, and Apple TV devices, saving IT teams countless hours of manual work with features like one-click compliance templates and 150+ pre-built automations, apps, and workflows. Request access.

Download MP3

Stacktrace Podcast 117: “The best not-kept secret”

Stacktrace Podcast

On the final holiday special for this year (or, last year?), John and Rambo discuss their expectations for 2021, and what products and new developer tools that they hope to see from Apple during this new year.

Sponsored by MacStadium: Get a cloud hosted M1 Mac mini from $99 or use promo code 9TO5MAC for half off the first two months of a Gen 3 or 4 (Intel) mini. Enter the Mac mini giveaway here

Download MP3

Stacktrace Podcast 116: “It wasn’t just a big, long nightmare”, the 2020 Stacktrace retrospective

Stacktrace Podcast

On this second Stacktrace holiday special, John and Rambo look back at the past year and what some of the highlights were among the hectic, strange rollercoaster ride that 2020 has been.

Sponsored by MacStadium: Get a cloud hosted M1 Mac mini from $99 or use promo code 9TO5MAC for half off the first two months of a Gen 3 or 4 (Intel) mini. Enter the Mac mini giveaway here

Download MP3

Stacktrace Podcast 115: “Not a trace of a stack”

Stacktrace Podcast

On the first ever completely non-technical episode of Stacktrace, John and Rambo answer #askstacktrace questions about everything from local holiday traditions to what their favorite airplanes are.

Sponsored by MacStadium: Get a cloud hosted M1 Mac mini from $99 or use promo code 9TO5MAC for half off the first two months of a Gen 3 or 4 (Intel) mini. Enter the Mac mini giveaway here

Download MP3