Xpc on Matt Parkerhttps://mattparker.com/tags/xpc/Recent content in Xpc on Matt ParkerHugo -- 0.155.1enThu, 01 Oct 2026 00:00:00 +0000Giving Scripts a Capability Instead of a Secret: Testing Apple's ManagedApp Frameworkhttps://mattparker.com/posts/managedapp-secrets-broker/Thu, 01 Oct 2026 00:00:00 +0000https://mattparker.com/posts/managedapp-secrets-broker/A proof of concept for delivering an API credential through Declarative Device Management and letting a signed broker use it, so MDM scripts can trigger an authenticated request without ever holding the secret. Includes the signing, install-behavior, and asset-hosting problems that cost me most of two days.