LogicBridge Podcast

iOS Platform Security

Sandboxed is a podcast for people who actually ship iOS apps and care about how secure they are in the real world. Each episode, we take one practical security topic and walk through how it really works on iOS, what can go wrong, and what you can do about it this week.

Latest Episodes

🍎

Featured Episode • Episode 8

Sign in with Apple isn't just a UI button—it's a cryptographic handshake. Learn why trusting the client-side user ID is a critical vulnerability.

View Episode Page
🔑

Episode 7

Passkeys replace phishable passwords with cryptographic key pairs. Learn WebAuthn implementation and avoid the CDN caching trap.

View Episode Page
🔐

Episode 6

Mobile apps demand long, persistent sessions, but long-lived access tokens are a major security risk. Learn about the Dual-Token model and token rotation.

View Episode Page
📌

Episode 5

Certificate pinning prevents attackers from intercepting your traffic. But do it wrong, and you'll brick your app for every single user.

View Episode Page
🔓

Episode 4

From “mostly okay” to “critical risk”—we break down when jailbroken devices actually matter for your app and what you can do about it.

View Episode Page
🔑

Episode 3

Should you put your access token in Keychain, a file, or just UserDefaults? We compare all three, talk about real-world tradeoffs, and give you concrete actions.

View Episode Page
🔐

Episode 2

On iOS, your app’s most sensitive data is supposed to live in the Keychain and, sometimes, the Secure Enclave. But what does that actually mean in practice?

View Episode Page
🛡️

Episode 1

iOS is “secure by default”—but what does that mean for YOUR app? Explore the threat model, iOS security guarantees, and critical gaps where you’re on your own.

View Episode Page

Subscribe & Follow

Get notified when new episodes are released.

Stay in the Loop

Get iOS security insights, new episode alerts, and exclusive content delivered to your inbox.

No spam. Unsubscribe anytime.

Sandboxed – iOS Security for Builders | LogicBridge LLC