ryan dowd's 🍎 security blog