New in OS X: Get MacRumors Push Notifications on your Mac

Resubscribe Now Close

Leaked Documents Suggest CIA Work on Hacked Version of Xcode, OS X Installer Exploit

xcodelogoUnited States Central Intelligence Agency researchers have been working for years to crack the security of Apple's iPhone and iPad, and may have done so through the creation of a modified version of Xcode, Apple's software development tool designed for developers.

According to secret documents obtained by The Intercept, at a 2012 "Jamboree" that focused on security flaws found in various electronics, CIA researchers outlined both a hacked version of Xcode and a modified OS X updater that could be used to install malicious software like keyloggers.
The modified version of Xcode, the researchers claimed, could enable spies to steal passwords and grab messages on infected devices. Researchers also claimed the modified Xcode could "force all iOS applications to send embedded data to a listening post." It remains unclear how intelligence agencies would get developers to use the poisoned version of Xcode.
The malicious version of Xcode could potentially be used to extract private data from devices that installed apps built by the hacked Xcode. Some of the things researchers said could be done with Xcode included installing "remote backdoors" in Mac apps, embedding an app developer's private key into iOS applications (letting the government masquerade as the targeted developer), forcing iOS apps to send data from an iPhone or iPad to a "listening post," and disabling core security features on iOS devices.

None of the documents detail how the Xcode and OS X installer exploits have been used by the CIA, and they also don't state whether the efforts have been successful, but as noted by The Intercept, they suggest that the government's efforts to crack the security technology companies employ is a continually ongoing effort.

Apple and the U.S. government have been at odds over privacy and security issues in recent years. A 2013 document leak suggested that Apple and other tech companies were working with the government on a secret project called PRISM, which allegedly provided the government with direct access to customer data on company servers.

Apple and multiple other technology companies like Google vehemently denied their participation in such a program and have since gone to great lengths to ensure the public that they're not involved in the government's spying attempts. Apple, Google, Facebook, Microsoft, and other companies banded together to ask for greater surveillance transparency and the ability to share more info on government data requests with consumers, which was ultimately successful.

Apple launched a privacy site in September of 2014 outlining the privacy features of its products and services and offering detailed information on government information requests. Across 2014, Apple CEO Tim Cook began putting a heavy emphasis on the importance of privacy, and with iOS 8, Apple significantly increased the encryption protection on iOS devices. Prior to iOS 8, Apple had the ability to access data on iOS devices with a company-held encryption key, and now, that no longer exists. Google has made similar changes.

The FBI has strongly opposed Apple's efforts to increase the security of its iOS devices, with FBI Director James Comey insisting that government access to electronic devices is necessary in some cases. Apple has reportedly been in talks with FBI officials over its security changes, but Apple CEO Tim Cook has maintained Apple's commitment to privacy and security.

At the White House Cyber Security Summit in February, Cook said customer trust means everything to Apple. "When it comes to the rights of customers and citizens, we're all talking about the same people," he said. "People have entrusted us with their most personal and precious information and we owe them nothing less than the best protections we can possibly provide by harnessing the technology at our disposal."

Note: Due to the political nature of the discussion regarding this topic, the discussion thread is located in our Politics, Religion, Social Issues forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.

Tags: Xcode, FBI, CIA


Top Rated Comments

(View all)

19 months ago
this shouldn't be a surprise to anyone at this point. that in itself should be alarming
Rating: 36 Votes
19 months ago

I wish people would stop being so suspicious of agencies like the CIA. These hard working men and women are there to protect us all. From the terrorists.

We live in a safer and more secure world, thanks to the CIA!



To protect us all?!
From the terrorists?!
http://en.wikipedia.org/wiki/Operation_Northwoods
Rating: 28 Votes
19 months ago
NSA should be angry about CIA encroaching on their turf.
Rating: 27 Votes
19 months ago

I wish people would stop being so suspicious of agencies like the CIA. These hard working men and women are there to protect us all. From the terrorists.

We all live in a safer and more secure world, thanks to the CIA!


i love your sarcasm
Rating: 27 Votes
19 months ago
So many things wrong with this.
Rating: 18 Votes
19 months ago

I wish people would stop being so suspicious of agencies like the CIA. These hard working men and women are there to protect us all. From the terrorists.

We all live in a safer and more secure world, thanks to the CIA!


You're kidding, right?
Rating: 18 Votes
19 months ago
What next.
Rating: 16 Votes
19 months ago
Pretty despicable what our government is doing. Everything they do to hack and infiltrate American's computers, phones, tablets, etc is a clear violation of Federal anti-hacking and computer fraud and abuse laws. Yet they do it anyways and the DOJ refuses to ever investigate how many laws our government breaks.

When what you do is a crime and when the government does it, it's legal...thats how you know you live under a tyrannical government.
Rating: 15 Votes
19 months ago
well, thanks to apple for pushing back against big brother with something they (at least not yet or that we know of) have not been able to hack.
Rating: 13 Votes
19 months ago
It's all part of that Transparency in Government initiative that Obama ran on. Or did he ditch that a long time ago?
Rating: 13 Votes

[ Read All Comments ]