Took a few months of research, iteration, and follow-ups to get this right, but it’s worth it to raise the security baseline for Flutter apps.

This update addresses a key security gap on jailbroken iOS devices. By leveraging the Secure Enclave, encryption keys are now hardware-protected and can’t be extracted in plaintext, even on compromised devices.

It’s official: my Secure Enclave support PR is now merged into #flutter_secure_storage 🚀

This update addresses a key security gap on jailbroken iOS devices.

The PR: github.com/juliansteenb...

#Flutter #FlutterDev #MobileSecurity #iOS #OpenSource

What’s new in Flutter 3.38 Write less, see more, build faster

Nice surprise seeing my contribution pop up in the new @flutter.dev release article 👀

blog.flutter.dev/whats-new-in...

#FlutterDev #oss #OpenSourceContribution

The Secure Enclave and Flutter security post
bsky.app/profile/ahme...

Still not merged yet, but it’s in progress.
Let’s see where this leads us.

Remember the Secure Enclave and #Flutter security post?

I’ve submitted a Pull Request to 𝙛𝙡𝙪𝙩𝙩𝙚𝙧_𝙨𝙚𝙘𝙪𝙧𝙚_𝙨𝙩𝙤𝙧𝙖𝙜𝙚 adding Secure Enclave support for iOS:
github.com/juliansteenb...

#Flutter #FlutterDev #iOS #MobileSecurity #OpenSource

Code smells
sammancoaching.org/reference/co...

Ever noticed that if you open #YouTube on your laptop and your TV with the same account, you get different ads?

Saved data on iOS is not secure · Issue #917 · juliansteenbakker/flutter_secure_storage Recently, one of the apps I've been working on underwent a penetration testing review. The pentest discovered (with demonstrated proof) that local storage data on iOS devices can be accessed in pla...

The right solution is to use the Secure Enclave for key wrapping and only store the wrapped blob in the keychain.

There’s already an open issue about this: github.com/juliansteenb...

More info on Secure Enclave: support.apple.com/en-gb/guide/...

#TIL about Secure Enclave and #Flutter security.

If you store sensitive data with #flutter_secure_storage, anyone running your app on a jailbroken hashtag#iOS device can easily extract your keys in plaintext.

#FlutterDev #MobileSecurity

Okay, this is a record for me in LinkedIn

Where’s the best place to showcase open source contributions on LinkedIn?

How do you find good issues to work on in Flutter OSS? 🤔

#FlutterDev #OSS

I get the issue from the good first issue flag that wasn’t even assigned.
After I sent the PR, many people suddenly commented wanting to take it, luckily I was just ahead.

The hardest part of contributing to @flutter.dev wasn’t the coding,it was finding the right issue.
Most issues are either taken, or get fixed before you finish.

#FlutterDev #OSS

My first @flutter.dev contribution 🥳

#FlutterDev #OpenSource #oss

github.com/flutter/flut...

Regardless of whether we call it MVVM, MVN, or something else, the #Flutter team’s architecture guidance explains each layer’s role really well.

It’s simple, easy to follow, and exactly the kind of clarity you’d expect from Flutter’s docs.

t.co/s6qhYCjMRN

#FlutterDev

Scheduling posts is such an underrated feature. I love it.

Maybe I’m this close 🤏🏾 to getting my first PR merged into the #FlutterDev repo.

Pushing yourself out of your comfort zone isn’t easy, especially when you’re in a place where you’re respected and loved.
But growth demands it, and new lessons only come when you step beyond comfort.

Add SliverGrid.list convenience constructor by ahmeddhus · Pull Request #173925 · flutter/flutter This PR adds a new SliverGrid.list convenience constructor that accepts a List<Widget> children parameter, providing a cleaner API compared to manually creating SliverChildListDelegate. What ...

I picked a “good first issue” to get started and submitted my first PR to Flutter, which already got an initial approval (hopefully it gets merged too 😅).

It’s a small change, but I still learned a lot along the way, and I’m excited to contribute more 😄

github.com/flutter/flut...

@tahatesser.com

Besides that, should I comment on the issue to “claim” it before submitting the PR? It’s not assigned to anyone and no PR is linked

Just picked a good first issue from the Flutter repo and submitted a PR.

How long does it usually take to get a response? (Even more curious since the issue was opened by someone from the Flutter team 👀)

#FlutterDev #OSS

a man wearing glasses and a black turtleneck is holding something in his hands and making a funny face . ALT: a man wearing glasses and a black turtleneck is holding something in his hands and making a funny face .

ending my first PR to the #Flutter repo led me to discover the Language Funnel, the Flutter Build Dashboard, the repo workflows, etc.

#OSS

Language funnel • dart-lang Language funnel

And it's in the Language Funnel

github.com/orgs/dart-la...

Static extension methods · Issue #723 · dart-lang/language Motivation Currently, extension methods do not support adding static methods/factory constructors. But this is a missed opportunity! There are many situations where semantically we want a static me...

This would be a really nice thing to have

#dart

github.com/dart-lang/la...

#TIL: You can combine two #Git repos into one and preserve all commit history.

Didn't come to my mind before😅