[dunham]

Zdziarski also claimed house_arrest was not used by the dev tools (slide 32), but Xcode allows you to archive and restore your app's entire filesystem. (I believe it uses house_arrest for this.) I tend to use "ifuse" to access this data, but definitely find it an invaluable development resource.

I hadn't seen the packet capture thing before, but after reading the slides a quick google search turned up the link to the apple dev util that you referenced.

I'm also not sure how big of deal the "doesn't require developer mode" thing is, since the issues he raises require pairing records, and I believe you can enable developer mode if you have that much access. I've never had the device ask for confirmation when I turned on developer access.