Leaked Documents Suggest CIA Work on Hacked Version of Xcode, OS X Installer Exploit

xcodelogoUnited States Central Intelligence Agency researchers have been working for years to crack the security of Apple's iPhone and iPad, and may have done so through the creation of a modified version of Xcode, Apple's software development tool designed for developers.

According to secret documents obtained by The Intercept, at a 2012 "Jamboree" that focused on security flaws found in various electronics, CIA researchers outlined both a hacked version of Xcode and a modified OS X updater that could be used to install malicious software like keyloggers.

The modified version of Xcode, the researchers claimed, could enable spies to steal passwords and grab messages on infected devices. Researchers also claimed the modified Xcode could "force all iOS applications to send embedded data to a listening post." It remains unclear how intelligence agencies would get developers to use the poisoned version of Xcode.

The malicious version of Xcode could potentially be used to extract private data from devices that installed apps built by the hacked Xcode. Some of the things researchers said could be done with Xcode included installing "remote backdoors" in Mac apps, embedding an app developer's private key into iOS applications (letting the government masquerade as the targeted developer), forcing iOS apps to send data from an iPhone or iPad to a "listening post," and disabling core security features on iOS devices.

None of the documents detail how the Xcode and OS X installer exploits have been used by the CIA, and they also don't state whether the efforts have been successful, but as noted by The Intercept, they suggest that the government's efforts to crack the security technology companies employ is a continually ongoing effort.

Apple and the U.S. government have been at odds over privacy and security issues in recent years. A 2013 document leak suggested that Apple and other tech companies were working with the government on a secret project called PRISM, which allegedly provided the government with direct access to customer data on company servers.

Apple and multiple other technology companies like Google vehemently denied their participation in such a program and have since gone to great lengths to ensure the public that they're not involved in the government's spying attempts. Apple, Google, Facebook, Microsoft, and other companies banded together to ask for greater surveillance transparency and the ability to share more info on government data requests with consumers, which was ultimately successful.

Apple launched a privacy site in September of 2014 outlining the privacy features of its products and services and offering detailed information on government information requests. Across 2014, Apple CEO Tim Cook began putting a heavy emphasis on the importance of privacy, and with iOS 8, Apple significantly increased the encryption protection on iOS devices. Prior to iOS 8, Apple had the ability to access data on iOS devices with a company-held encryption key, and now, that no longer exists. Google has made similar changes.

The FBI has strongly opposed Apple's efforts to increase the security of its iOS devices, with FBI Director James Comey insisting that government access to electronic devices is necessary in some cases. Apple has reportedly been in talks with FBI officials over its security changes, but Apple CEO Tim Cook has maintained Apple's commitment to privacy and security.

At the White House Cyber Security Summit in February, Cook said customer trust means everything to Apple. "When it comes to the rights of customers and citizens, we're all talking about the same people," he said. "People have entrusted us with their most personal and precious information and we owe them nothing less than the best protections we can possibly provide by harnessing the technology at our disposal."

Note: Due to the political nature of the discussion regarding this topic, the discussion thread is located in our Politics, Religion, Social Issues forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.

Tags: Xcode, FBI, CIA

Top Rated Comments

sputnikv Avatar
90 months ago
this shouldn't be a surprise to anyone at this point. that in itself should be alarming
Score: 36 Votes (Like | Disagree)
DiabBarca Avatar
90 months ago
I wish people would stop being so suspicious of agencies like the CIA. These hard working men and women are there to protect us all. From the terrorists.

We live in a safer and more secure world, thanks to the CIA!


To protect us all?!
From the terrorists?!
http://en.wikipedia.org/wiki/Operation_Northwoods
Score: 28 Votes (Like | Disagree)
bushido Avatar
90 months ago
I wish people would stop being so suspicious of agencies like the CIA. These hard working men and women are there to protect us all. From the terrorists.

We all live in a safer and more secure world, thanks to the CIA!

i love your sarcasm
Score: 27 Votes (Like | Disagree)
aaronvan Avatar
90 months ago
NSA should be angry about CIA encroaching on their turf.
Score: 27 Votes (Like | Disagree)
Four oF NINE Avatar
90 months ago
I wish people would stop being so suspicious of agencies like the CIA. These hard working men and women are there to protect us all. From the terrorists.

We all live in a safer and more secure world, thanks to the CIA!

You're kidding, right?
Score: 18 Votes (Like | Disagree)
gusapple Avatar
90 months ago
So many things wrong with this.
Score: 18 Votes (Like | Disagree)

Popular Stories

maxresdefault

Review: M1 Max MacBook Pro After Three Months

Wednesday January 19, 2022 11:30 am PST by
It's now been a few months since the M1 Pro and M1 Max MacBook Pro models launched in October, and MacRumors video editor Dan Barbera has been using one of the new machines since they debuted. Over on the MacRumors YouTube channel, Dan has shared a three month review of his MacBook Pro to see how it has held up over time and how it's changed his workflow. Subscribe to the MacRumors YouTube ...
iphone se 2020 top

New iPhone SE Likely to Launch in April Based on Production Timeframe

Wednesday January 19, 2022 6:44 am PST by
Apple suppliers will begin producing display panels for the third-generation iPhone SE this month, with final assembly of the device likely to start in March, according to information shared by display industry consultant Ross Young. Based on this production timeframe, Young believes the third-generation iPhone SE is likely to launch in the second half of April, or perhaps in early May at...
AirPods 3 New Firmware Feature

Apple Updates AirPods 3 Firmware to Version 4C170

Tuesday January 18, 2022 11:46 am PST by
Apple today released a new 4C170 firmware update for the AirPods 3, an update from the prior 4C165 that was made available in December. Apple does not offer details on what's included in new firmware updates for the AirPods‌, so we don't know what improvements or bug fixes the new firmware brings. There is no standard way to upgrade the ‌AirPods‌‌ software, but firmware is...
iPad Air Feature 2 green

New Apple Products Filed in Regulatory Database, Likely Including New iPhone SE and iPad Air

Tuesday January 18, 2022 6:11 am PST by
Apple today filed unreleased iPhone and iPad models in the Eurasian Economic Commission database, as spotted by French blog Consomac. The filings likely represent the rumored third-generation iPhone SE, fifth-generation iPad Air, and potentially more. The unreleased iPhone models have the identifiers A2595, A2783, and A2784, while the unreleased iPad models have the identifiers A2588, A2589, ...
iphone 5g mmwave

U.S. Airlines Warn of 'Catastrophic' Crisis With Impending 5G Rollout, AT&T and Verizon Agree to Delay Around Airports

Tuesday January 18, 2022 10:35 am PST by
Verizon and AT&T's upcoming rollout of new C-Band 5G technology could cause chaos and lead to widespread delays of passenger and cargo flights, major U.S. airlines said on Monday in a letter sent to the White House National Economic Council, the FAA, and the FCC (via Reuters). "Unless our major hubs are cleared to fly, the vast majority of the traveling and shipping public will essentially...
microsoft office icons

Microsoft Releases Office for Mac Update With Full Apple Silicon Support in Excel

Tuesday January 18, 2022 4:15 am PST by
Microsoft has released a new version of its Office for Mac productivity suite that includes an updated Excel app with 100% native support for Apple silicon machines. According to the release notes accompanying version 16.57, Excel will now run natively on Macs powered by Apple's M1-series processors without having to use the Rosetta 2 translation layer, which means anyone using a Mac with an ...
appleeducation

Apple's US Education Store Now Requires Institution Verification to Buy Discounted Products

Wednesday January 19, 2022 2:22 am PST by
Apple is now requiring that customers in the United States verify that they're active students, teachers, or staff members at an educational institution in order to access education discounts on products. Previously, little verification was needed for customers to purchase products through Apple's education store in the United States. Apple's education stores offer models of the iPad and Mac ...
iPhone 14 Mock pill and hole thumb

ProMotion Now Expected to Remain Exclusive to iPhone 14 Pro Models, Not Expand to Entire Lineup

Sunday January 16, 2022 8:56 am PST by
Continuing the tradition set with the iPhone 13 Pro, only the highest-end iPhone 14 models will feature Apple's ProMotion display technology, according to a respected display analyst. Ross Young, who on multiple occasions has detailed accurate information about Apple's future products, said in a tweet that ProMotion will not be expanded to the entire iPhone 14 lineup and will remain...
Beyond iPhone 13 Better Blue Face ID

Rumored iPhone 14 Pro Feature Delayed Until Next Year

Wednesday January 19, 2022 3:00 am PST by
Apple's long-rumored under-display Face ID technology will not be coming to the iPhone 14 Pro, according to recent reports. Based on the latest rumors, it now looks unlikely that the 6.1-inch iPhone 14 Pro and 6.7-inch iPhone 14 Pro Max will feature Face ID technology under the display as several reports claimed over the past year. Display industry consultant Ross Young, who often reveals ...