Leaked Documents Suggest CIA Work on Hacked Version of Xcode, OS X Installer Exploit

xcodelogoUnited States Central Intelligence Agency researchers have been working for years to crack the security of Apple's iPhone and iPad, and may have done so through the creation of a modified version of Xcode, Apple's software development tool designed for developers.

According to secret documents obtained by The Intercept, at a 2012 "Jamboree" that focused on security flaws found in various electronics, CIA researchers outlined both a hacked version of Xcode and a modified OS X updater that could be used to install malicious software like keyloggers.

The modified version of Xcode, the researchers claimed, could enable spies to steal passwords and grab messages on infected devices. Researchers also claimed the modified Xcode could "force all iOS applications to send embedded data to a listening post." It remains unclear how intelligence agencies would get developers to use the poisoned version of Xcode.

The malicious version of Xcode could potentially be used to extract private data from devices that installed apps built by the hacked Xcode. Some of the things researchers said could be done with Xcode included installing "remote backdoors" in Mac apps, embedding an app developer's private key into iOS applications (letting the government masquerade as the targeted developer), forcing iOS apps to send data from an iPhone or iPad to a "listening post," and disabling core security features on iOS devices.

None of the documents detail how the Xcode and OS X installer exploits have been used by the CIA, and they also don't state whether the efforts have been successful, but as noted by The Intercept, they suggest that the government's efforts to crack the security technology companies employ is a continually ongoing effort.

Apple and the U.S. government have been at odds over privacy and security issues in recent years. A 2013 document leak suggested that Apple and other tech companies were working with the government on a secret project called PRISM, which allegedly provided the government with direct access to customer data on company servers.

Apple and multiple other technology companies like Google vehemently denied their participation in such a program and have since gone to great lengths to ensure the public that they're not involved in the government's spying attempts. Apple, Google, Facebook, Microsoft, and other companies banded together to ask for greater surveillance transparency and the ability to share more info on government data requests with consumers, which was ultimately successful.

Apple launched a privacy site in September of 2014 outlining the privacy features of its products and services and offering detailed information on government information requests. Across 2014, Apple CEO Tim Cook began putting a heavy emphasis on the importance of privacy, and with iOS 8, Apple significantly increased the encryption protection on iOS devices. Prior to iOS 8, Apple had the ability to access data on iOS devices with a company-held encryption key, and now, that no longer exists. Google has made similar changes.

The FBI has strongly opposed Apple's efforts to increase the security of its iOS devices, with FBI Director James Comey insisting that government access to electronic devices is necessary in some cases. Apple has reportedly been in talks with FBI officials over its security changes, but Apple CEO Tim Cook has maintained Apple's commitment to privacy and security.

At the White House Cyber Security Summit in February, Cook said customer trust means everything to Apple. "When it comes to the rights of customers and citizens, we're all talking about the same people," he said. "People have entrusted us with their most personal and precious information and we owe them nothing less than the best protections we can possibly provide by harnessing the technology at our disposal."

Note: Due to the political nature of the discussion regarding this topic, the discussion thread is located in our Politics, Religion, Social Issues forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.

Tags: Xcode, FBI, CIA

Popular Stories

Apple WWDC24 Apple Intelligence hero 240610

Apple Explains iPhone 15 Pro Requirement for Apple Intelligence

Wednesday June 19, 2024 4:48 am PDT by
With iOS 18, iPadOS 18, and macOS Sequoia, Apple is introducing a new personalized AI experience called Apple Intelligence that uses on-device, generative large-language models to enhance the user experience across iPhone, iPad, and Mac. These new AI features require Apple's latest iPhone 15 Pro and iPhone 15 Pro Max models to work, while only Macs and iPads with M1 or later chips will...
Apple Intelligence General Feature

Apple Intelligence Features Not Coming to European Union at Launch Due to DMA

Friday June 21, 2024 9:44 am PDT by
Apple today said that European customers will not get access to the Apple Intelligence, iPhone Mirroring, and SharePlay Screen Sharing features that are coming to the iPhone, iPad, and Mac this September due to regulatory issues related to the Digital Markets Act. In a statement to Financial Times, Apple said that there will be a delay as it works to figure out how to make the new...
iPhone 16 Pro Max Generic Feature 2

5 Biggest Changes Rumored for iPhone 16 Pro Max

Wednesday June 19, 2024 5:00 am PDT by
Given Apple's rumored plan to add an all-new high-end tier to its iPhone 17 series in 2025, this could be the year for Apple to bring its boldest "Pro Max" model to the table — the kind of iPhone 16 upgrade that stands tall above its siblings, both figuratively and literally. If you have been holding out for the iPhone 16 Pro Max, here are five of the biggest changes rumored to be coming...
Apple Vision Pro 2 Feature 2

Apple Reportedly Suspends Work on Vision Pro 2

Tuesday June 18, 2024 8:17 am PDT by
Apple has suspended work on the second-generation Vision Pro headset to singularly focus on a cheaper model, The Information reports. Apple was widely believed to have plans to divide its Vision product line into two models, with one "Pro" model and one lower-cost standard model. The company is said to have been deprioritizing the next Vision Pro headset over the past year, gradually...
back to school 2024

Apple's 2024 Back to School Sale Launches, Up to $150 Gift Card With Mac or iPad

Thursday June 20, 2024 4:29 am PDT by
Apple has launched its annual Back to School promotion for college students in the United States. This year's promotion offers a free Apple gift card with the purchase of an eligible Mac or iPad. Apple is also offering students 20% off AppleCare+ plans. Apple is offering a $150 gift card with any new MacBook Air, MacBook Pro, or iMac, and a $100 gift card with the purchase of any new M4 iPad ...
iOS 17

Apple Releases First Public Beta of iOS 17.6

Thursday June 20, 2024 10:18 am PDT by
Apple today seeded the first betas of upcoming iOS 17.6 and iPadOS 17.6 updates to public beta testers, with the betas coming a few days after the initial iOS and iPadOS 17.6 developer betas. Public beta testers can get the beta by opening up the Settings app, going to the Software Update section, tapping on the "Beta Updates" option, and toggling on the iOS 17 or iPadOS 17 Public Beta....

Top Rated Comments

sputnikv Avatar
121 months ago
this shouldn't be a surprise to anyone at this point. that in itself should be alarming
Score: 36 Votes (Like | Disagree)
DiabBarca Avatar
121 months ago
I wish people would stop being so suspicious of agencies like the CIA. These hard working men and women are there to protect us all. From the terrorists.

We live in a safer and more secure world, thanks to the CIA!


To protect us all?!
From the terrorists?!
http://en.wikipedia.org/wiki/Operation_Northwoods
Score: 28 Votes (Like | Disagree)
bushido Avatar
121 months ago
I wish people would stop being so suspicious of agencies like the CIA. These hard working men and women are there to protect us all. From the terrorists.

We all live in a safer and more secure world, thanks to the CIA!

i love your sarcasm
Score: 27 Votes (Like | Disagree)
aaronvan Avatar
121 months ago
NSA should be angry about CIA encroaching on their turf.
Score: 27 Votes (Like | Disagree)
Four oF NINE Avatar
121 months ago
I wish people would stop being so suspicious of agencies like the CIA. These hard working men and women are there to protect us all. From the terrorists.

We all live in a safer and more secure world, thanks to the CIA!

You're kidding, right?
Score: 18 Votes (Like | Disagree)
gusapple Avatar
121 months ago
So many things wrong with this.
Score: 18 Votes (Like | Disagree)