<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" ><generator uri="https://jekyllrb.com/" version="4.4.1">Jekyll</generator><link href="https://downrightnifty.me/feed.xml" rel="self" type="application/atom+xml" /><link href="https://downrightnifty.me/" rel="alternate" type="text/html" /><updated>2025-06-26T21:12:27-05:00</updated><id>https://downrightnifty.me/feed.xml</id><title type="html">Matt&apos;s internet home</title><subtitle>Matt&apos;s internet home
</subtitle><author><name>Matt Kunze</name><email>contact@</email></author><entry><title type="html">Accessing region-locked iOS features, such as EU app stores</title><link href="https://downrightnifty.me/blog/2025/02/27/eu-features-outside.html" rel="alternate" type="text/html" title="Accessing region-locked iOS features, such as EU app stores" /><published>2025-02-27T00:00:00-06:00</published><updated>2025-02-27T00:00:00-06:00</updated><id>https://downrightnifty.me/blog/2025/02/27/eu-features-outside</id><author><name>Matt Kunze</name><email>contact@</email></author><summary type="html"><![CDATA[The European Union's Digital Markets Act obligates Apple to provide certain features to iOS users in the EU, such as third party app stores. I live in the US and was able to develop a relatively-straightforward method to spoof your location on iOS and access these features, as well as any other region-locked iOS features you might be interested in experimenting with, even if you aren't in the required region.]]></summary></entry><entry><title type="html">Turning Google smart speakers into wiretaps for $100k</title><link href="https://downrightnifty.me/blog/2022/12/26/hacking-google-home.html" rel="alternate" type="text/html" title="Turning Google smart speakers into wiretaps for $100k" /><published>2022-12-26T00:00:00-06:00</published><updated>2022-12-26T00:00:00-06:00</updated><id>https://downrightnifty.me/blog/2022/12/26/hacking-google-home</id><author><name>Matt Kunze</name><email>contact@</email></author><summary type="html"><![CDATA[I was recently rewarded a total of $107,500 by Google for responsibly disclosing security issues in the Google Home smart speaker that allowed an attacker within wireless proximity to install a "backdoor" account on the device, enabling them to send commands to it remotely over the Internet, access its microphone feed, and make arbitrary HTTP requests within the victim's LAN (which could potentially expose the Wi-Fi password or provide the attacker direct access to the victim's other devices). These issues have since been fixed.]]></summary></entry></feed>