Leaked Documents Suggest CIA Work on Hacked Version of Xcode, OS X Installer Exploit

xcodelogoUnited States Central Intelligence Agency researchers have been working for years to crack the security of Apple's iPhone and iPad, and may have done so through the creation of a modified version of Xcode, Apple's software development tool designed for developers.

According to secret documents obtained by The Intercept, at a 2012 "Jamboree" that focused on security flaws found in various electronics, CIA researchers outlined both a hacked version of Xcode and a modified OS X updater that could be used to install malicious software like keyloggers.

The modified version of Xcode, the researchers claimed, could enable spies to steal passwords and grab messages on infected devices. Researchers also claimed the modified Xcode could "force all iOS applications to send embedded data to a listening post." It remains unclear how intelligence agencies would get developers to use the poisoned version of Xcode.

The malicious version of Xcode could potentially be used to extract private data from devices that installed apps built by the hacked Xcode. Some of the things researchers said could be done with Xcode included installing "remote backdoors" in Mac apps, embedding an app developer's private key into iOS applications (letting the government masquerade as the targeted developer), forcing iOS apps to send data from an iPhone or iPad to a "listening post," and disabling core security features on iOS devices.

None of the documents detail how the Xcode and OS X installer exploits have been used by the CIA, and they also don't state whether the efforts have been successful, but as noted by The Intercept, they suggest that the government's efforts to crack the security technology companies employ is a continually ongoing effort.

Apple and the U.S. government have been at odds over privacy and security issues in recent years. A 2013 document leak suggested that Apple and other tech companies were working with the government on a secret project called PRISM, which allegedly provided the government with direct access to customer data on company servers.

Apple and multiple other technology companies like Google vehemently denied their participation in such a program and have since gone to great lengths to ensure the public that they're not involved in the government's spying attempts. Apple, Google, Facebook, Microsoft, and other companies banded together to ask for greater surveillance transparency and the ability to share more info on government data requests with consumers, which was ultimately successful.

Apple launched a privacy site in September of 2014 outlining the privacy features of its products and services and offering detailed information on government information requests. Across 2014, Apple CEO Tim Cook began putting a heavy emphasis on the importance of privacy, and with iOS 8, Apple significantly increased the encryption protection on iOS devices. Prior to iOS 8, Apple had the ability to access data on iOS devices with a company-held encryption key, and now, that no longer exists. Google has made similar changes.

The FBI has strongly opposed Apple's efforts to increase the security of its iOS devices, with FBI Director James Comey insisting that government access to electronic devices is necessary in some cases. Apple has reportedly been in talks with FBI officials over its security changes, but Apple CEO Tim Cook has maintained Apple's commitment to privacy and security.

At the White House Cyber Security Summit in February, Cook said customer trust means everything to Apple. "When it comes to the rights of customers and citizens, we're all talking about the same people," he said. "People have entrusted us with their most personal and precious information and we owe them nothing less than the best protections we can possibly provide by harnessing the technology at our disposal."

Note: Due to the political nature of the discussion regarding this topic, the discussion thread is located in our Politics, Religion, Social Issues forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.

Tags: Xcode, FBI, CIA

Top Rated Comments

(View all)
Avatar
69 months ago
this shouldn't be a surprise to anyone at this point. that in itself should be alarming
Score: 36 Votes (Like | Disagree)
Avatar
69 months ago

I wish people would stop being so suspicious of agencies like the CIA. These hard working men and women are there to protect us all. From the terrorists.

We live in a safer and more secure world, thanks to the CIA!



To protect us all?!
From the terrorists?!
http://en.wikipedia.org/wiki/Operation_Northwoods
Score: 28 Votes (Like | Disagree)
Avatar
69 months ago

I wish people would stop being so suspicious of agencies like the CIA. These hard working men and women are there to protect us all. From the terrorists.

We all live in a safer and more secure world, thanks to the CIA!


i love your sarcasm
Score: 27 Votes (Like | Disagree)
Avatar
69 months ago
NSA should be angry about CIA encroaching on their turf.
Score: 27 Votes (Like | Disagree)
Avatar
69 months ago

I wish people would stop being so suspicious of agencies like the CIA. These hard working men and women are there to protect us all. From the terrorists.

We all live in a safer and more secure world, thanks to the CIA!


You're kidding, right?
Score: 18 Votes (Like | Disagree)
Avatar
69 months ago
So many things wrong with this.
Score: 18 Votes (Like | Disagree)

Top Stories

Apple Officially Obsoletes First MacBook Pro With a Retina Display

Wednesday July 1, 2020 3:40 am PDT by
As expected, Apple's first MacBook Pro with a Retina display is now officially classed as "obsolete" worldwide, just over eight years after its release. In a support document, Apple notes that obsolete products are no longer eligible for hardware service, with "no exceptions." This means that any mid-2012 Retina MacBook Pro 15-inch models still out there that require a battery or other...

Kuo: iPhone 12 Models Won't Include Charger in Box, 20W Power Adapter Will Be Sold Separately

Sunday June 28, 2020 7:56 am PDT by
iPhone 12 models will not include EarPods or a power adapter in the box, analyst Ming-Chi Kuo said today in a research note obtained by MacRumors. This lines up with a prediction shared by analysts at Barclays earlier this week. Kuo said that Apple will instead release a new 20W power adapter as an optional accessory for iPhones and end production of its existing 5W and 18W power adapters...

Rosetta 2 Benchmarks Surface From Mac Mini With A12Z Chip

Monday June 29, 2020 7:48 am PDT by
While the terms and conditions for Apple's new "Developer Transition Kit" forbid developers from running benchmarks on the modified Mac mini with an A12Z chip, it appears that results are beginning to surface anyhow. Image Credit: Radek Pietruszewski Geekbench results uploaded so far suggest that the A12Z-based Mac mini has average single-core and multi-core scores of 811 and 2,781...

Apple's A12Z Under Rosetta Outperforms Microsoft's Native Arm-Based Surface Pro X

Monday June 29, 2020 10:31 am PDT by
Apple's Developer Transition Kit equipped with an A12Z iPad Pro chip began arriving in the hands of developers this morning to help them get their apps ready for Macs running Apple Silicon, and though forbidden, the first thing some developers did was benchmark the machine. Multiple Geekbench results have indicated that the Developer Transition Kit, which is a Mac mini with an iPad Pro chip, ...

New Mac Ransomware Found in Pirated Mac Apps

Tuesday June 30, 2020 11:44 am PDT by
There's a new 'EvilQuest' Mac ransomware variant that's spreading through pirated Mac apps, according to a new report shared today by Malwarebytes. The new ransomware was found in pirated download for the Little Snitch app found on a Russian forum. Right from the point of download, it was clear that something was wrong with the illicit version of Little Snitch, as it had a generic installer...

Developers Begin Receiving Mac Mini With A12Z Chip to Prepare Apps for Apple Silicon Macs

Monday June 29, 2020 5:43 am PDT by
As part of WWDC last week, Apple announced that it will be switching to its own custom-designed processors for Macs starting later this year. As part of this transition, the company is allowing developers to apply for a modified Mac mini with an A12Z chip and 16GB of RAM to develop and test their apps on a Mac with Arm-based architecture. As noted on Twitter and in the MacRumors forums, some...

Kuo: Apple to Launch 10.8-Inch iPad Later This Year, 8.5-Inch iPad Mini in 2021

Sunday June 28, 2020 9:04 am PDT by
Apple plans to launch a new 10.8-inch iPad in the second half of 2020, followed by a new 8.5-inch iPad in the first half of 2021, oft-reliable analyst Ming-Chi Kuo said today in a research note obtained by MacRumors. Kuo did not specify if the 10.8-inch iPad model will be a new version of the existing 10.2-inch iPad or the 10.5-inch iPad Air, but he has previously said that the 8.5-inch...

The New York Times Ends Apple News Partnership and Pulls All Articles

Monday June 29, 2020 11:17 am PDT by
The New York Times today announced that it is pulling out of Apple News, as the service does not "align with its strategy of building direct relationships with paying readers." Starting today, articles from The New York Times will no longer show up in the Apple News app. The news site says that Apple has given it "little in the way of direct relationships with readers" and "little control...

'iPhone 12 Pro' Models Could Be Capable of Shooting 4K Video at 120fps and 240fps

Monday June 29, 2020 3:57 am PDT by
Two new camera modes could be coming to some models of Apple's "iPhone 12," according to YouTube channel EverythingApplePro and Max Weinbach. Specifically, the video modes are said to include the ability to shoot 4K video at 120fps and 240fps. The new modes are thought to be coming to Apple's higher-end "iPhone 12 Pro" and "iPhone 12 Pro Max". Weinbach reportedly tore down the Camera app...

Leaker: Future iPhone Models to Come in 'Exquisite' Thinner Box

Wednesday July 1, 2020 1:57 am PDT by
Leaker L0vetodream this morning posted a tweet corroborating recent rumors that Apple's "iPhone 12" lineup won't come with EarPods or a charger in the box, adding that this will also eventually apply to the existing second-generation iPhone SE. L0vetodream also claims that future iPhone packaging will be "thinner" and "exquisite," which would make sense if Apple's handsets are set to come in ...