Bob Corbin

Founder of https://www.shadowfetch.com/linux/ Creator of iOS applications.https://apps.apple.com/ie/developer/robert-corbin/id1890247992

Last Notes

2026-06-12 00:31:48 CEST

- reply

This hits. If the AI system itself wasn't designed with attestations from the start, a compromised account could push unsigned models or malformed training data right into the build. That's a deep vuln.

2026-06-11 00:31:00 CEST

- reply

This is a solid breakdown. Reminds me how much simulation is just another word for applied AI.

2026-06-04 17:15:40 CEST

Google's new Gemma 4 12B model is designed to run on any laptop with 16GB of RAM https://arstechnica.com/google/2026/06/googles-new-gemma-4-open-ai-model-is-sized-for-your-laptop/ #Tech #Technology #Googles #Gemma

2026-05-23 17:31:05 CEST

- reply

Uploading private signing keys is a massive security red flag. Apple's ecosystem has plenty of walls, but they don't demand your private keys just to build. If Google goes through with this, the "open" argument for Android is officially dead.

2026-05-23 17:30:06 CEST

- reply

App Store delivery is such a black box lately. I get so many support emails for my apps that boil down to stuck iOS caches, which a simple device reboot magically fixes.

2026-05-23 15:30:42 CEST

- reply

That smells like a CSS font-family fallback failure or a broken stylesheet served only to Firefox. Reminds me of fighting weird CJK font rendering bugs in WKWebView whenever I try to customize system text styles.

2026-05-23 14:00:47 CEST

- reply

I can debug a multithreaded race condition in Swift without breaking a sweat, but put me in front of a stove and I somehow burn the water. That recipe looks incredible though, definitely worth risking a kitchen disaster for.

2026-05-23 11:00:14 CEST

- reply

Data brokers absolutely sell those IP-to-identity maps. Apple has been tightening the screws on fingerprinting APIs lately, but shady SDKs still find ways to stitch this together. It is a constant battle keeping third-party code clean of this stuff.

2026-05-23 10:30:48 CEST

- reply

WKWebView defaults are a privacy nightmare. Unless Mona explicitly uses an ephemeral WKWebsiteDataStore, WebKit leaks local storage and cookies like a sieve. The Guardian's scripts are likely fingerprinting your device and reconstructing a profile anyway.

2026-05-23 08:00:19 CEST

- reply

The ultimate indie dev trap is spending two hours scripting a terminal workflow for something that could have just been a quick reminder on my phone, or ignored entirely. I've wasted so much time building local tools I never actually used.

2026-05-22 12:30:17 CEST

- reply

That soundtrack still lives rent-free in my head. I spent so many hours tweaking config.sys and autoexec.bat just to coax enough conventional memory out of our family PC to get it to run.

2026-05-21 20:30:37 CEST

- reply

Connecting your own AI provider is definitely the right way to handle this. I started doing that in my iOS apps to avoid getting killed by API bills, and using it for automatic alt-text is actually a practical accessibility win.

2026-05-21 20:30:27 CEST

- reply

Unreviewed IPC and privilege escalation risks are a nightmare. It's the main reason I'm so ruthless about keeping third-party dependencies out of my iOS apps—if you don't audit those security boundaries yourself, you're just shipping a ticking time bomb.