Data-Nuking Prompt Injection

WWDC26 Special Delivery

Drew and Dan chat about WWDC 2026: Parental controls, Siri improvements, Liquid Glass’ new volume knob, Foundation Models enhancements, MacOS Golden Gate, enhancements to Swift, SwiftUI, Xcode and more. Plus, saying goodbye (to UIDesignRequiresCompatibility and Intel Macs). Chapters * 00:00 WWDC 2026 Keynote Overview * 03:03 Liquid Glass gets a Volume Knob * 05:59 Child Protection Features and Parental Controls * 08:52 Siri Improvements and User Experience * 11:53 New Features in macOS Golden Gate * 14:51 Apple Intelligence and Foundation Models * 17:56 Swift UI and Observable Properties * 23:24 Enhancements in Swift and Swift UI * 27:11 Exploring Xcode 27 and Watch OS Development * 29:22 Understanding App Intents and Schemas * 32:23 Platform Improvements and Accessibility Challenges  * 36:18 Transitioning to New Technologies and Features Finding Drew: * Bluesky [https://bsky.app/profile/thedrewbenson.bsky.social] * X / Twitter [https://x.com/thedrewbenson?s=21] * Drew’s YouTube live stream coding channel, @DrewBensonCodes [https://www.youtube.com/@DrewBensonCodes] Finding Dan: * Bluesky [https://bsky.app/profile/danoleary.me] * Instagram [https://www.instagram.com/devdanoleary] * Dan’s Certainly Swift [https://certainlyswift.com/]blog Mentioned in this episode: * WWDC 2026 Keynote [https://www.youtube.com/watch?v=hF8swzNR1-o] * WWDC 2026 Platforms State of the Union [https://www.youtube.com/watch?v=yl2jsIoMfDU] * Donny Wals on The Difference between Macros and Property Wrappers [https://www.donnywals.com/whats-the-difference-between-macros-and-property-wrappers/] Drew and Dan in the Morning can be found on: * Apple Podcasts [https://podcasts.apple.com/us/podcast/drew-and-dan-in-the-morning/id1894918993] * Spotify [https://open.spotify.com/show/0ZQTN7VeJ8NrxhlLksWK70] * YouTube [https://www.youtube.com/@DrewAndDanMorning] * Overcast [https://overcast.fm/itunes1894918993] * Deezer [https://www.deezer.com/en/show/1002939341]

Data-Nuking Prompt Injection

Drew and Dan explore how a single line of text in a public repo can ruin your day, what happens when AI coding agents go off the rails near your data, and the thorny questions of AI safety and ethics. Google has bad news for back-button hijackers. Drew shares lessons learned and challenges from making his apps accessible, and the two get into how optimizing for the wrong metric can quietly steer AI somewhere nobody intended. Chapters * 00:00 Google Punishing Back-Button Hijackers * 02:31 Data Nuking Prompt Injection * 12:43 App Accessibility Lessons and Challenges * 20:48 AI Metrics and Unintended Consequences Finding Drew: * Bluesky [https://bsky.app/profile/thedrewbenson.bsky.social] * X / Twitter [https://x.com/thedrewbenson?s=21] * Drew’s YouTube live stream coding channel, @DrewBensonCodes [https://www.youtube.com/@DrewBensonCodes] Finding Dan: * Bluesky [https://bsky.app/profile/danoleary.me] * Instagram [https://www.instagram.com/devdanoleary] * Dan’s Certainly Swift [https://certainlyswift.com/]blog Mentioned in this episode: * Google Punishing Back-Button Hijacking [https://arstechnica.com/gadgets/2026/04/websites-that-hijack-your-back-button-must-stop-by-june-15-or-face-googles-wrath/] - Google’s policy [https://developers.google.com/search/blog/2026/04/back-button-hijacking] * Data Nuking Prompt Injection [https://arstechnica.com/security/2026/05/fed-up-with-vibe-coders-dev-sneaks-data-nuking-prompt-injection-into-their-code/] * Accessibility Nutrition Labels [https://developer.apple.com/help/app-store-connect/manage-app-accessibility/overview-of-accessibility-nutrition-labels] * Drew’s MacOS Agent Smith [https://github.com/drewster99/macos-agent-smith] agent harness * Drew’s Sight Words: First Words Match [https://apps.apple.com/us/app/sight-words-first-words-match/id6499176211] app * Drew’s FunVoice Reverse Audio Singing [https://apps.apple.com/us/app/funvoice-reverse-audio-singing/id6753986607] app * Goodhart’s Law [https://en.wikipedia.org/wiki/Goodhart%27s_law] Drew and Dan in the Morning can be found on: * Apple Podcasts [https://podcasts.apple.com/us/podcast/drew-and-dan-in-the-morning/id1894918993] * Spotify [https://open.spotify.com/show/0ZQTN7VeJ8NrxhlLksWK70] * YouTube [https://www.youtube.com/@DrewAndDanMorning] * Overcast [https://overcast.fm/itunes1894918993] * Deezer [https://www.deezer.com/en/show/1002939341]

Beyond the button: Sign in with Apple, Server-Side Up

App types and activities Apple prohibits in their App Review Guidelines, App Store ratings and reviews, best practices for keeping in touch with your customers, the use of the GitAPI MacOS app for testing endpoints, and a deep dive into Sign in with Apple, detailing the app-side integration as well as the server-side setup. Chapters * 00:00 Welcome back! * 00:43 App Store review/rating guidelines * 04:00 Triggering the review prompt: what not to do * 09:01 Tool of the week: GetAPI (and why not Postman) * 13:00 Sign In With Apple: the app part * 18:25 The missing manual: SIWA on the server * 21:40 You only get the email ONCE * 23:55 Bearer tokens, keychain, and the 2nd launch * 31:35 Dan's Gotcha * 32:21 Win-back emails and "Hide My Email" trickiness * 33:42 Thanks! Finding Drew: * Bluesky [https://bsky.app/profile/thedrewbenson.bsky.social] * X / Twitter [https://x.com/thedrewbenson?s=21] * Drew’s YouTube live stream coding channel, @DrewBensonCodes [https://www.youtube.com/@DrewBensonCodes] Finding Dan: * Bluesky [https://bsky.app/profile/danoleary.me] * Instagram [https://www.instagram.com/devdanoleary] * Dan’s Swift on the Server blog, Certainly Swift [https://certainlyswift.com/] Mentioned in this episode: * App Review Guidelines [https://developer.apple.com/app-store/review/guidelines/] * Apple Human Interface Guidelines [https://developer.apple.com/design/human-interface-guidelines/] * Requesting App Store reviews [https://developer.apple.com/documentation/storekit/requesting-app-store-reviews] (sample code) * GetAPI [https://getapi.com/?srsltid=AfmBOoqXeIjGZc9B5WrbRxavoE0GX821FLhpSZXMSshzlKRiHAT8RZf6](dead-simple HTTP client) * Fork [https://git-fork.com] (Dan's preferred Git GUI app) * Sign in with Apple using SwiftUI and Vapor [https://certainlyswift.com/siwa-swiftui-vapor/] * Sign in with Apple REST API [https://developer.apple.com/documentation/signinwithapplerestapi] * Vapor [https://vapor.codes] (Swift on the server) Drew and Dan in the Morning can be found on: * Apple Podcasts [https://podcasts.apple.com/us/podcast/drew-and-dan-in-the-morning/id1894918993] * Spotify [https://open.spotify.com/show/0ZQTN7VeJ8NrxhlLksWK70] * YouTube [https://www.youtube.com/@DrewAndDanMorning] * Overcast [https://overcast.fm/itunes1894918993]

Scandal! + UI (AI?) Accessibility

Drew and Dan talk about the shocking new China scandal, app review guidelines, animating SF symbols, and the importance of app accessibility. Drew makes a bold prediction about WWDC 2026. Chapters * 00:00 Scandal! * 02:58 App Review Guidelines update * 06:03 Dan's Dazzling Discoveries: Animating SF Symbols * 08:53 App Accessibility * 11:29 Accessibility Nutrition Labels and The Bold Prediction * 14:39 App Intents vs Accessibility Labels * 20:18 Preparing for WWDC 2026: Accessibility and Nutrition Labels * 28:07 Final Thoughts and To-Do List Finding Drew: * Bluesky [https://bsky.app/profile/thedrewbenson.bsky.social] * X / Twitter [https://x.com/thedrewbenson?s=21] * Drew’s YouTube live stream coding channel, @DrewBensonCodes [https://www.youtube.com/@DrewBensonCodes] Finding Dan: * Bluesky [https://bsky.app/profile/danoleary.me] * Instagram [https://www.instagram.com/devdanoleary] * Dan’s Swift on the Server blog, Certainly Swift [https://certainlyswift.com/] Links for things mentioned in this episode: * Drew's MacOS Accessibility Client on Github [https://github.com/drewster99/macos-accessibility-client] * WWDC 2026 [https://developer.apple.com/wwdc26/] Drew and Dan in the Morning can be found on: * Apple Podcasts [https://podcasts.apple.com/us/podcast/drew-and-dan-in-the-morning/id1894918993] * Spotify [https://open.spotify.com/show/0ZQTN7VeJ8NrxhlLksWK70] * YouTube [https://www.youtube.com/@DrewAndDanMorning] * Overcast [https://overcast.fm/itunes1894918993] Thanks for joining us!

Aspiring Finishers

Drew and Dan break down real-world software development—what’s working, what’s not, and where things are going. Topics range from app development and AI to conference takeaways (Deep Dish Swift), technical deep dives, and the occasional detour into reverse engineering and industry absurdities. Practical, opinionated, and grounded in actual experience. Chapters * 00:00 Hello! * 06:13 App Development and AI * 11:58 Deep Dish Swift Conference * 19:04 Technical Insights and Challenges * 26:10 Reverse Engineering and Humorous Presentations Finding Drew: * Bluesky [https://bsky.app/profile/thedrewbenson.bsky.social] * X / Twitter [https://x.com/thedrewbenson?s=21] Finding Dan: * Bluesky [https://bsky.app/profile/danoleary.me] * Instagram [https://www.instagram.com/devdanoleary] Links for things mentioned in this episode: * Dan’s new Swift blog, Certainly Swift [https://certainlyswift.com/] * Drew’s YouTube live stream coding channel, @DrewBensonCodes [https://www.youtube.com/@DrewBensonCodes] * 9 to 5 Mac’s story on 4-star reviews:App Store ratings ‘broken’ as your 4-star review could hurt a developer [https://9to5mac.com/2026/04/20/app-store-ratings-broken-as-your-4-star-review-could-hurt-a-developer/] * Dan’s social check-in (and Swarm replacement) app,, The Midst [https://apps.apple.com/us/app/the-midst/id6593661633] * Relay Team Finder - releasing in August  - for Aspiring Finishers * Deep Dish Swift 2026 [https://deepdishswift.com/] * Adam Tow [https://tow.com/] and his great talk on being adaptable, The Long Game: 30+ Years as an Indie Apple Developer [https://www.youtube.com/live/HzbDJL0_yLY?si=QaAGrDx-b32KcDxw&t=7706] * David Beck [https://davidbeck.co/]’s talk, Surviving in Low Connectivity [https://www.youtube.com/live/-m5h2jXPp54?si=JUFmxTyLm4SEQNxS&t=4147] * Chad Etzel [https://www.jazzyapps.com/]’s awesome talk on Reverse Engineering the macOS Genie Animation [https://www.youtube.com/live/-m5h2jXPp54?si=0B7dfyD9rsoVd4Ol&t=22189] Drew and Dan in the Morning can be found on: * Apple Podcasts [https://podcasts.apple.com/us/podcast/drew-and-dan-in-the-morning/id1894918993] * Spotify [https://open.spotify.com/show/0ZQTN7VeJ8NrxhlLksWK70] * YouTube [https://www.youtube.com/@DrewAndDanMorning] * Overcast [https://overcast.fm/itunes1894918993] Thanks for joining us!