Elektrine
Log in Register
Paige Chat Timeline Gallery Friends Email Drive DNS Private DNS Domains VPN Kairo Nerve
Remote

Psylo: Privacy Browser & Proxy

@psylo@infosec.exchange
mastodon 4.8.0-alpha.3+glitch
  • Open on infosec.exchange

A new kind of private browser for iOS and iPadOS by @mysk@mastodon.social

Isolated tabs • Antifingerprinting & Tracking Protection • 40+ Global Proxy Servers

143 Followers
23 Following
28 Posts
Joined September 07, 2025
App Store:
https://apple.co/3G3W2o7
Website:
https://psylo.app
Developer:
https://mastodon.social/@mysk
Bluesky:
https://bsky.app/profile/psylo.app
X:
https://x.com/psylo_app
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 2mo ago
We took anti-fingerprinting techniques to the next level. Here we have to ephemeral silos, or tabs, opening the same website from the same IP. Thanks to Psylo advanced anti-fingerprinting techniques, the website cannot correlate the sessions, even when reopening the same silo.
4
5
1
1
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 4mo ago
Replying to
@mysk@mastodon.social Interesting exchange on, dare I say it, X: 🧵 @wabetainfo@mastodon.social : This is misleading. While it is true that WhatsApp's database is not encrypted on the device, it is stored in a secure container that only the app can access. If there are system-level exploits that allow another app or process to access its contents, it is up to the operating system to fix them. The claim that other Meta apps can access the WhatsApp database is incorrect. The database is in a shared container to enable WhatsApp to easily migrate data to WhatsApp Business. Other Meta apps, such as Facebook and Instagram, cannot access this container. Specifically, containerURLForSecurityApplicationGroupIdentifier:@"http://group.net.whatsapp.WhatsApp.shared" returns NULL if called from Facebook, Instagram, Messenger, Edits, and other Meta apps. Only WhatsApp Business can access that container to migrate data to WhatsApp Messenger. Similarly, WhatsApp cannot access the containers of other Meta apps, such as those of Facebook (http://group.com.facebook.Facebook) and Instagram (http://group.com.burbn.instagram) However, Edits can access Instagram's shared container. As a result, WhatsApp's data is isolated within its own app group container. Cross-app access is not possible under normal system permissions
group.net.whatsapp.whatsapp.shared
8
5
4
1
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 6mo ago

During Psylo development, we discovered that LinkedIn website initiates a WebRTC connection as soon as it opens. The reason is still unclear. As WebRTC can leak the device's real IP, it is blocked by default in Psylo. In fact, Psylo is the only #iOS browser that blocks WebRTC.

Since iOS doesn't provide an API to disable WebRTC in WebKit, the only way to block it is via overriding its JavaScript APIs.

#privacy #infosec #LinkedIn #iOS

infosec.exchange

Infosec Exchange

13
4
4
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 4mo ago
Replying to
@mysk@mastodon.social Reply from @wabetainfo@mastodon.social : WhatsApp would need to move its entire database into http://group.com.facebook.family in order for other FOA to access it, and that is not the case. If only they did, some users would notice it, especially people like you. The database remains in WhatsApp's dedicated container. WhatsApp only moves the database to the Business container if the user chooses to switch their account to a business profile. Reply from @mysk@mastodon.social : They don’t need to move the database. They could add “group. net. whatsapp. WhatsApp. shared” group container entitlement to Facebook or Instagram apps. So it’s really just a policy decision that can change at any point by checking one box in Xcode rather than there being any technical limitations
group.com.facebook.family
5
3
3
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 4mo ago
Replying to
Reply from @wabetainfo@mastodon.social : Again, if they were actually doing something like that, people like you would notice it and make it widely known, just as you did originally. Reply from @mysk@mastodon.social : Sure, and you’ll hear about it from us when they do 😬 The facts are: 1) WhatsApp, FaceBook, and Instagram have a common group container that is used to share data between them locally on device (we won’t speculate as to what is being shared) 2) Adding WhatsApp group container entitlement to other Meta app, where it stores the chat database in plaintext, would be a trivial technical change on Meta’s part. It would really go a long way if WhatsApp starts encrypting the chat database at rest as well. I think that’s all we can say right now Reply from @wabetainfo@mastodon.social : Encrypting the database certainly wouldn't be a bad thing either way 👍🏻 we will see how things evolve in the future.
5
2
3
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 2mo ago
Replying to
@ashah@mastodon.social At the moment, no. But you can tap and hold on an existing silo and duplicate it. This way you don't have to give it a name. A duplicate silo gets all the configuration of the source silo. It only has a new and clean isolated storage
1
0
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 2mo ago
Replying to
@ashah@mastodon.social Yes, you can add a silo, then in the settings pick that silo to be used whenever you enter something in the Quick Launch.
1
2
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 2mo ago
Replying to
@iaintshootinmis@digitaldarkage.cc Not yet. But we're planning an Android version.
1
0
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 4mo ago
Replying to
@menos@todon.eu @wabetainfo@mastodon.social @mysk@mastodon.social This macOS bug made it easy to exfiltrate WhatsApp chats. If it was encrypted , you'd need more tricks to decrypt the data: https://mysk.blog/2026/05/19/cve-2026-28910/
mysk.blog
3
0
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 4mo ago
Replying to
Reply from: @mysk@mastodon.social : WhatsApp, Facebook, and Instagram apps do have a shared group container called “group . com . facebook . family” even if WhatsApp is from a different Apple developer account. You can see this in this screenshot of the entitlements file for each app. So Meta can share data between all their apps through app group containers, even if they belong to different developer accounts.
2
1
3
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 9mo ago

This video shows how you can add a custom Mullvad proxy in Psylo using Obscura VPN, or Mullvad VPN. 522 proxies in 50 countries🤘
Traffic of custom proxies doesn't go through our infrastructure and it doesn't count towards your bandwidth limit. ✌️

#privacy #infosec

infosec.exchange

Infosec Exchange

3
0
1
1
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 7mo ago

Testing a prototype of a new privacy + screen time feature:

Hide silos behind NFC tags 💨🔖

Some browsers offer password protection, but that still signals that something is being hidden. With NFC tags, silos stay invisible with no indication they exist, until you tap the tag.

As a screen time tool, you could lock away distracting silos behind an NFC tag and physically place it somewhere away from your phone.

Worth exploring further?

2
0
1
1
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 9mo ago

RE: @psylo@infosec.exchange

Happy New Year Everyone! 🎆🎇🎆

We’re excited for 2026 with big plans for Psylo. The 1.2.0 update should be out shortly, with more updates in the works

We’re offering 50% off the annual sub until January 3. Use offer code PSYLO26 or use the link below:

https://apps.apple.com/redeem?ctx=offercodes&id=6741358035&code=PSYLO26

As always, offer applies to new and existing subscribers. The discount will apply to the renewal.

infosec.exchange
3
0
1
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 8mo ago

Minor update to Psylo should be coming out shortly, pending Apple’s approval.

Full release notes: 👇

- Added support for saving pages as PDF files
- Added support for saving files, videos, and audio to the Downloads folder
- Fixed an issue where custom proxy region auto-detection could select an incorrect locale
- Fixed an issue where the Settings screen could accidentally be dismissed when swiping down
- Fixed an issue with the in-app rating reminder not opening the App Store
- Updated the flag of Iran in the proxy region selector

2
2
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 6mo ago
Replying to
@jchaven "ICE collects all available candidates (local IP addresses, reflexive addresses – STUN ones and relayed addresses – TURN ones). All the collected addresses are then sent to the remote peer via SDP." This is needed to establish a peer-to-peer connection but can also be used for fingerprinting.
1
0
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 9mo ago

We needed to add a reminder to rate Psylo on App Store, since good ratings go a long way toward improving the app’s ranking

This is what we decided to go with: A simple reminder on the settings screen. Not a popup, but inline with other elements on the screen.

As a browser we felt it was important to avoid interrupting any flow of using the app. So the was no way we’d put the reminder on the main screen or during any browsing sessions.

2
0
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 8mo ago
Replying to
@unhitched Yes, macOS and Android will be supported.
1
0
1
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 8mo ago

🎊We've raised the monthly bandwidth limit to 200GB, up from 100GB.
After hitting 200GB the connection speed will be throttled, not blocked.
Enjoy using Psylo 🤘

1
0
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 9mo ago

With Psylo 1.2.0, you can add your own custom proxies. If you are a @mullvadnet@mastodon.online or @obscuravpn@mastodon.social subscriber, you can add any of Mullvad's SOCKS5 proxies to Psylo. Pick a proxy from this list:
https://mullvad.net/en/servers?type=wireguard&status=true

Just make sure your VPN is on to access the proxies 🤘

Side note: We wanted to provide an easy and intuitive way to help you import Mullvad's proxies from within Psylo but we've exhausted all methods to approach Mullvad team. Unfortunately, we got no response from them. If anyone can help with that, we'll really appreciate it.
#privacy

mullvad.net
1
0
1
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 2mo ago
Replying to
Psylo 1.3.0 focuses on speed, stronger anti-fingerprinting, and a smoother day-to-day browsing experience. Thank you to everyone whose feedback helped shape these improvements. Performance • Faster cold launch: Your silos appear faster, while session refresh happens in the background as you begin browsing. • Smoother silo grid: Scrolling through your silos is more responsive, especially if you have a large collection. • Smoother browsing: Page scrolling and showing or hiding the keyboard feel more responsive, with fewer layout jumps. • Low Power Mode optimizations: Glass effects are automatically reduced to keep Psylo feeling fast while Low Power Mode is enabled. Anti-Fingerprinting • Broader protection: Anti-fingerprinting now covers an even wider range of fingerprinting surfaces, including WebGL, AudioContext, font metrics, screen metrics, and more. • Deeper locale & timezone masking: Language and timezone protection now extends deeper into the browser stack. • Improved website compatibility: Better compatibility with websites that use bot-detection services such as Cloudflare Turnstile, reducing false "bot" detections without compromising privacy protections. Improvements • Download confirmation: Review site-initiated downloads before they begin, with progress toasts and easier sharing or opening files in the Files app. • Link previews: Long-press any link to preview its URL before opening or copying it. • Improved error pages: Failed page loads now display a clearer error screen with a retry button. • Reload from the silo list: Reload a silo directly from its context menu without opening it first. • Paste & Go: The address bar and Quick Launch now make Paste & Go easier to access through the context menu. Psylo doesn't collect any app analytics, so your feedback is the only way we know what's working and what isn't. If you're enjoying Psylo, leaving a review on the App Store is one of the best ways to support the project and help us continue building new privacy-focused features.
0
0
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 8mo ago

Psylo 1.2.2 is now available with this new storage management feature 🤘

0
0
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 8mo ago

This is what you get when you add a custom proxy from @ivpn@mastodon.social in Psylo 🔥

0
0
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 9mo ago

When you add custom proxies in Psylo, you connect directly to the proxies. Proxy credentials are stored locally in Psylo. You can add any HTTP, HTTPS, and SOCKS5 proxies. Some VPN subscriptions already include access to proxies. We tested @mullvadnet@mastodon.online and NordVPN. Which proxies are you using?

0
0
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 6mo ago
Replying to
@NobodyElse47263 No, although it is mentioned in their report that it collects local IP addresses via WebRTC. However, modern browsers use mDNS to obfuscate local WiFi IPs. The obfuscated mDNS changes per session. So it is no longer effective to be included in the fingerprint
0
0
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 2mo ago
We're putting the finishing touches on Psylo 1.3.0 🤘 This release is all about speed and a smoother day-to-day browsing experience. Full release notes will follow shortly. But there's One More Thing… We've made significant improvements to Psylo's anti-fingerprinting. It now protects an even broader range of fingerprinting surfaces, including WebGL, font metrics, and more. We've also greatly improved compatibility with websites that use bot-detection services like Cloudflare Turnstile. This was one of the earliest pieces of feedback we received, and it's been bugging us since before Psylo even launched. In our testing, Psylo 1.3.0 performs much better, all without compromising its anti-fingerprinting protections. We're planning to submit the update tomorrow, and with a bit of luck, it'll make it through App Review in the coming days.
0
0
0
0
Open post
Psylo: Privacy Browser & Proxy @psylo@infosec.exchange
· 2mo ago
Security Bulletin: WebKit's handling of passkeys can cause iCloud Private Relay to leak your device's real IP address. The same behaviour affects all iOS browsers that rely on proxy connections to hide the device's IP, including Psylo, Onion Browser, and other proxy or Tor browsers on iOS. The IP address is exposed as soon as you open a website that supports passkeys, even if you never try to sign in with one. For example, simply opening facebook[.]com in Safari is enough to expose your real IP address to Facebook. We also found two more WebKit issues: • DNS prefetching bypasses the proxy tunnel and leaks DNS queries. • WebTransport ignores the established proxy connection and exposes the device's real IP address. These behaviours affect Safari and all proxy browsers on iOS, since Apple requires all iOS browsers to use WebKit. Note that VPNs are not affected by these issues, since they tunnel the device's entire network traffic at the system level. We've updated Psylo to disable passkeys and WebTransport by default in all silos, and you can re-enable them per silo. We also disabled DNS prefetching entirely. Please update to version 1.3.1. We built a website that detects these leaks. The video below shows them in action. Link to the blog post: https://mysk.blog/2026/08/04/webkit-proxy-icloud-private-relay-ip-leak/ Use this website to check if your browser leaks your IP and DNS: https://leaks.psylo.app/ #privacy #Apple #iOS #macOS #infosec
mysk.blog
0
1
0
0
Back
313k7r1n3
Elektrine

Tor hidden service

elekhj7afj4qnrr4yd3bkzslsyo5jgfxw3orgjkhlcxifueodybyiiad.onion

I2P eepsite

j6b6cyk6gjmepjih7jjadxgxvvf3lzzujljuu2v4biemzpg3naya.b32.i2p

Platform

  • Email
  • Chat
  • Timeline
  • VPN
  • DNS

Company

  • About
  • Contact
  • FAQ
  • Lite (no JS)

Legal

  • Terms of Service
  • Privacy Policy
  • Transparency Report
  • Report Abuse
  • Warrant Canary
  • VPN Policy

Support

  • support@elektrine.com
  • Report Security Issue
Mail client setup IMAP mail.elektrine.com:993 POP3 mail.elektrine.com:995 SMTP mail.elektrine.com:465
© 2026 Elektrine. All rights reserved. Server: 05:40:21 UTC