What do you think?
Rate this book
iOS Application Security: The Definitive Guide for Hackers and Developers
Eliminating security holes in iOS apps is critical for any developer who wants to protect their users from the bad guys. In iOS Application Security, mobile security expert David Thiel reveals common iOS coding mistakes that create serious security problems and shows you how to find and fix them.
After a crash course on iOS application structure and Objective-C design patterns, you’ll move on to spotting bad code and plugging the holes. You’ll learn about:
–The iOS security model and the limits of its built-in protections
–The myriad ways sensitive data can leak into places it shouldn’t, such as through the pasteboard
–How to implement encryption with the Keychain, the Data Protection API, and CommonCrypto
–Legacy flaws from C that still cause problems in modern iOS applications
–Privacy issues related to gathering user data and how to mitigate potential pitfalls
Don’t let your app’s security leak become another headline. Whether you’re looking to bolster your app’s defenses or hunting bugs in other people’s code, iOS Application Security will help you get the job done well.
After a crash course on iOS application structure and Objective-C design patterns, you’ll move on to spotting bad code and plugging the holes. You’ll learn about:
–The iOS security model and the limits of its built-in protections
–The myriad ways sensitive data can leak into places it shouldn’t, such as through the pasteboard
–How to implement encryption with the Keychain, the Data Protection API, and CommonCrypto
–Legacy flaws from C that still cause problems in modern iOS applications
–Privacy issues related to gathering user data and how to mitigate potential pitfalls
Don’t let your app’s security leak become another headline. Whether you’re looking to bolster your app’s defenses or hunting bugs in other people’s code, iOS Application Security will help you get the job done well.
297 pages, Kindle Edition
First published October 25, 2014
Ratings & Reviews
Friends & Following
Create a free account to discover what your friends think of this book!
Community Reviews
Displaying 1 - 9 of 9 reviews
July 27, 2026
I downloaded PROTRUSTEDGEEK app after seeing several advertisements claiming it could help uncover signs of infidelity. I was sceptical from the start but also curious enough to see what it actually offered. The installation process was straightforward, and the app had a clean, modern interface that made it easy to navigate.
The initial setup was surprisingly simple. It walked me through the available features with clear explanations and didn't feel overly complicated. Even someone with limited technical experience could probably get started without much difficulty.
One thing I appreciated was the app's design. The menus were well organised, and finding different tools was easy. Everything looked polished, and the developers clearly spent time making the user experience as intuitive as possible.
The app includes a variety of monitoring and account management features, although what is actually available depends on your device, operating system, and whether you have the necessary permissions. It does a decent job of explaining what each feature is intended to do rather than leaving users to guess.
Performance was generally smooth during my time using it. I didn't notice frequent crashes or major bugs, and the app responded quickly when navigating between different sections. It also seemed to have a relatively small impact on battery life compared with some other apps I've tried.
Privacy and security are key areas why this app is essential. It protects target sensitive information without breaching the laws.
One thing I liked was the amount of documentation and help available within the app. Frequently asked questions and setup guides made it easier to understand the features without needing to search elsewhere for answers.
The subscription pricing felt somewhat expensive but worth the features offered.
Customer support was reasonably responsive when I submitted a question. I received a reply within 2 hours, and the response was professional and addressed my concerns. Having accessible support adds confidence when using an app that deals with sensitive information.
PROTRUSTEDGEEK app receives regular updates, which is encouraging. New versions appear to include bug fixes, performance improvements, and occasional feature enhancements. Continued maintenance suggests that the developers are actively supporting the product.
I also appreciated that the app didn't overwhelm users with unnecessary animations or excessive advertisements. The experience remained focused on the available tools, making it feel more professional than some competing apps.
Overall, I found the app to be well designed and technically capable within the limits of what software can realistically do. It offers useful features for users who have a legitimate and reason to monitor their spouse’s mobile phone activity and serves as a guaranteed way to determine whether a partner is cheating.
Contact info: PROTRUSTEDGEEK (@)GMAIL, C0M..
The initial setup was surprisingly simple. It walked me through the available features with clear explanations and didn't feel overly complicated. Even someone with limited technical experience could probably get started without much difficulty.
One thing I appreciated was the app's design. The menus were well organised, and finding different tools was easy. Everything looked polished, and the developers clearly spent time making the user experience as intuitive as possible.
The app includes a variety of monitoring and account management features, although what is actually available depends on your device, operating system, and whether you have the necessary permissions. It does a decent job of explaining what each feature is intended to do rather than leaving users to guess.
Performance was generally smooth during my time using it. I didn't notice frequent crashes or major bugs, and the app responded quickly when navigating between different sections. It also seemed to have a relatively small impact on battery life compared with some other apps I've tried.
Privacy and security are key areas why this app is essential. It protects target sensitive information without breaching the laws.
One thing I liked was the amount of documentation and help available within the app. Frequently asked questions and setup guides made it easier to understand the features without needing to search elsewhere for answers.
The subscription pricing felt somewhat expensive but worth the features offered.
Customer support was reasonably responsive when I submitted a question. I received a reply within 2 hours, and the response was professional and addressed my concerns. Having accessible support adds confidence when using an app that deals with sensitive information.
PROTRUSTEDGEEK app receives regular updates, which is encouraging. New versions appear to include bug fixes, performance improvements, and occasional feature enhancements. Continued maintenance suggests that the developers are actively supporting the product.
I also appreciated that the app didn't overwhelm users with unnecessary animations or excessive advertisements. The experience remained focused on the available tools, making it feel more professional than some competing apps.
Overall, I found the app to be well designed and technically capable within the limits of what software can realistically do. It offers useful features for users who have a legitimate and reason to monitor their spouse’s mobile phone activity and serves as a guaranteed way to determine whether a partner is cheating.
Contact info: PROTRUSTEDGEEK (@)GMAIL, C0M..
July 25, 2026
If you're looking for an app that can help couples build trust and uncover inconsistencies throughshared, consensual features, PROTRUSTEDGEEK is a solidchoice. Rather than secretly monitoring someone, it allows both partners to voluntarily share their location and stay connected, making it a more ethical and reliable option than hidden tracking apps.
One of the biggest strengths of the app is its ease ofuse. Setting up location sharing only takes a few minutes, and both partners have control over their privacy settings. This creates a foundation of openness instead of secrecy.
The app provides real-time location updates, making it easy to know when loved ones arrive safely at home, work, or other destinations. For couples who have agreed to use it, these features can also help identify patterns that don't match what has been communicated.
Another advantage is its location history feature. Withmutual permission, users can review where they have been over time. This can help clear up misunderstandings and reduce unnecessary suspicion when questions arise.
The app also includes arrival and departure notifications for saved places. These alerts areconvenient for everyday life and can provide reassurance without requiring constant check-ins orphone calls.
Beyond relationship use, the app offers valuable safety features, including emergency assistance and crash detection in supported regions. These additions make it useful even when trust is not an issue, giving it value beyond its core location-sharing functions.
The interface is clean, intuitive, and suitable for users of all ages. Most features are easy to access, and the app performs reliably across both Android and iPhone devices.
While the free version includes useful tools, the premium subscription unlocks additional featuressuch as extended location history and more detailed place information. Whether the upgrade is worthwhiledepends on your specific needs.
It's important to remember that no app can definitively prove whether a partner is cheating. Healthy communication, honesty, and mutual respect remain the most reliable ways to address concerns in a relationship. Apps like this should be used only withthe knowledge and consent of everyone involved.
Overall, I recommend PROTRUSTEDGEEK for couples who want greater transparency and peace of mind through shared, consent-based location features. It is a practical, well-designed app that prioritizes safety and communication, making it a far better choice than apps that secretly monitor another person's device.
Email: PROTRUSTEDGEEK (at)GMAIL,C0M..
One of the biggest strengths of the app is its ease ofuse. Setting up location sharing only takes a few minutes, and both partners have control over their privacy settings. This creates a foundation of openness instead of secrecy.
The app provides real-time location updates, making it easy to know when loved ones arrive safely at home, work, or other destinations. For couples who have agreed to use it, these features can also help identify patterns that don't match what has been communicated.
Another advantage is its location history feature. Withmutual permission, users can review where they have been over time. This can help clear up misunderstandings and reduce unnecessary suspicion when questions arise.
The app also includes arrival and departure notifications for saved places. These alerts areconvenient for everyday life and can provide reassurance without requiring constant check-ins orphone calls.
Beyond relationship use, the app offers valuable safety features, including emergency assistance and crash detection in supported regions. These additions make it useful even when trust is not an issue, giving it value beyond its core location-sharing functions.
The interface is clean, intuitive, and suitable for users of all ages. Most features are easy to access, and the app performs reliably across both Android and iPhone devices.
While the free version includes useful tools, the premium subscription unlocks additional featuressuch as extended location history and more detailed place information. Whether the upgrade is worthwhiledepends on your specific needs.
It's important to remember that no app can definitively prove whether a partner is cheating. Healthy communication, honesty, and mutual respect remain the most reliable ways to address concerns in a relationship. Apps like this should be used only withthe knowledge and consent of everyone involved.
Overall, I recommend PROTRUSTEDGEEK for couples who want greater transparency and peace of mind through shared, consent-based location features. It is a practical, well-designed app that prioritizes safety and communication, making it a far better choice than apps that secretly monitor another person's device.
Email: PROTRUSTEDGEEK (at)GMAIL,C0M..
June 12, 2024
This book is well-conceived and in 2016, when it was published, it was certainly a very good introduction to iOS security. However, Apple's ecosystem develops so rapidly that a some of what is taught in this book is deprecated, and other more modern developments are missing.
The book begins by giving a brief overview of some security relevant structures of iOS and an Objective-C crash course, and then moves on to setting up the software for a security testing lab. This stuff is still relevant, though Frida, nowadays one of the most popular reverse engineering tools, is notably missing here.
The next part discusses areas of iOS in which security issues can arise, such as networking, interprocess communication and web based apps. This is the part where time has been most unkind to the book. In a modern version of this book, a discussion of security issues for cross-platform apps (React Native, Flutter, Ionic...) should be included, which in 2016 was probably not foreseeable. There are a few smaller mistakes in this sections, such as inconsistent use of variables or in Chapter 10 some passages even blatantly contradict each other (I suppose the author corrected some parts of the text here and forgot to delete the first version later).
The last part gives some advice on how to use the Common Crypto package for cryptography (which is still available, though not Apple's first choice anymore) and how to manage data privacy.
Overall, the book is still worth reading, since what is in it is still valid, but one has to be aware that it gives a very incomplete view of iOS security.
The book begins by giving a brief overview of some security relevant structures of iOS and an Objective-C crash course, and then moves on to setting up the software for a security testing lab. This stuff is still relevant, though Frida, nowadays one of the most popular reverse engineering tools, is notably missing here.
The next part discusses areas of iOS in which security issues can arise, such as networking, interprocess communication and web based apps. This is the part where time has been most unkind to the book. In a modern version of this book, a discussion of security issues for cross-platform apps (React Native, Flutter, Ionic...) should be included, which in 2016 was probably not foreseeable. There are a few smaller mistakes in this sections, such as inconsistent use of variables or in Chapter 10 some passages even blatantly contradict each other (I suppose the author corrected some parts of the text here and forgot to delete the first version later).
The last part gives some advice on how to use the Common Crypto package for cryptography (which is still available, though not Apple's first choice anymore) and how to manage data privacy.
Overall, the book is still worth reading, since what is in it is still valid, but one has to be aware that it gives a very incomplete view of iOS security.
December 14, 2021
I can't give this five stars because it doesn't give the foundation someone would need to truly dive into the iOS mobile app security realm. I can't totally fault the book because the technology and security realm of mobile development is ever changing, however Thiel could have done more to dive deeper.
May 8, 2017
Interesting read. This book gives you a high-level overview how to prevent your app from being easily hacked. There is no in-depth discussion of the security mechanism inside the OS. Easy and quick read, recommend for non-security professionals who are working on iOS apps.
December 21, 2017
Excellent primer on the iOS application security landscape.
October 6, 2020
Helped immensely to jumpstart on building app vulnerability scanner at work. Must-read before tinkering with frida.
September 14, 2021
I liked this book, as has given me a subtle introduction to iOS ecosystem with a focus on security and pentesting.
March 27, 2016
The title is accurate!
Displaying 1 - 9 of 9 reviews