Night mode is an automatic setting which takes advantage of the new wide-angle camera that's in the iPhone 11 and 11 Pro models. It's equipped with a larger sensor that is able to let in more light, allowing for brighter photos when the light is low.
Apple Confirms iPhone Source Code Leak is Real, But Says its Security Doesn't Depend on Secrecy
Source code for iBoot, a core component of the iPhone's operating system leaked on GitHub yesterday, raising concerns that the hackers and security researchers could dig into the code to find iOS vulnerabilities.
In a statement issued to MacRumors this morning, Apple confirmed the authenticity of the code but emphasized that it's for iOS 9, a three-year-old operating system that's been replaced with iOS 11 and is in use on only a small number of devices.
In addition to acknowledging that the leak contained real source code, Apple this morning also sent a DMCA takedown notice to GitHub this morning, successfully getting the code removed from the site.
The data that was shared on GitHub was incomplete so the iBoot code was not able to be compiled, but it did include a documents directory that offered up additional information relevant to iBoot, and combined, the data leak could make it easier to locate vulnerabilities to create new jailbreaks.
Average users should not need to be concerned about the leak, however, as Apple has many layers of protection in place, like the Secure Enclave, and does not rely on source code secrecy alone as a way to keep its users safe.
Security researcher Will Strafach, who spoke to TechCrunch, echoed what Apple had to say. He believes the source code is compelling because it provides an inside look into the inner workings of the bootloader, but ultimately, "Apple does not use security through obscurity," so there is nothing risky in the code.
In a statement issued to MacRumors this morning, Apple confirmed the authenticity of the code but emphasized that it's for iOS 9, a three-year-old operating system that's been replaced with iOS 11 and is in use on only a small number of devices.
"Old source code from three years ago appears to have been leaked, but by design the security of our products doesn't depend on the secrecy of our source code. There are many layers of hardware and software protections built into our products, and we always encourage customers to update to the newest software releases to benefit from the latest protections."Based on data from Apple's App Store support page for developers, iOS 11 is installed on 65 percent of devices, iOS 10 is installed on 28 percent of devices, and earlier versions of iOS, such as iOS 9, are installed on just seven percent of devices.
In addition to acknowledging that the leak contained real source code, Apple this morning also sent a DMCA takedown notice to GitHub this morning, successfully getting the code removed from the site.
The data that was shared on GitHub was incomplete so the iBoot code was not able to be compiled, but it did include a documents directory that offered up additional information relevant to iBoot, and combined, the data leak could make it easier to locate vulnerabilities to create new jailbreaks.
Average users should not need to be concerned about the leak, however, as Apple has many layers of protection in place, like the Secure Enclave, and does not rely on source code secrecy alone as a way to keep its users safe.
Security researcher Will Strafach, who spoke to TechCrunch, echoed what Apple had to say. He believes the source code is compelling because it provides an inside look into the inner workings of the bootloader, but ultimately, "Apple does not use security through obscurity," so there is nothing risky in the code.
[ 79 comments ]
Top Rated Comments
(View all)
23 months ago
"root" <enter> <enter>
jk jk
Glad they are actually being vocal instead of almost dead silent during the battery thing. That just lead to people coming to their own conclusions. It's quite a bit harder to change people's minds once they form their own opinion, even if it's dead wrong.
jk jk
Glad they are actually being vocal instead of almost dead silent during the battery thing. That just lead to people coming to their own conclusions. It's quite a bit harder to change people's minds once they form their own opinion, even if it's dead wrong.
23 months ago
How many of the "better post quick and say something sarcastic" posters actually read the article and saw it was for iOS 9?
23 months ago
Anyone could always just decompile the code. C doesn't decompile as easily/neatly as, say, java, but products like Hopper Decompiler exist if you want to convert from compiled code to C.
HA! Good luck with that. Give it a try and let us know how it works out. Hint: there's a reason someone hasn't just done that.
[doublepost=1518120690][/doublepost]
"we always encourage customers to update to the newest software releases to benefit from the latest protections"
...and for those of you with older devices that cannot run the newest software releases, we encourage you to throw your device into a landfill because the millisecond that we make a new iOS version, we stop putting security fixes into the previous version.
That's not true at all. Apple continues issuing security updates for older devices years after they're no longer on sale. Android has new devices on the market which don't even run the current version of Android. The same can't be said for their push to secure older devices like Apple.
23 months ago
Not so worried about the security implications, but it could mean that ios could be booted on a generic ARM device. Basically a "hackintosh" for ios.
23 months ago
It’s pretty funny that, ever since Tim Cook said Apple was doubling down, they’ve surely had twice as many fails.
And they’re like 200% bigger. Funny how that works.
23 months ago
Windows source code has leaked in the past and not caused issues. Some are making this out to be a far larger deal than it really is. It's only a big issue if we assume (incorrectly) that nothing has changed within the OS since iOS 9 three years ago and that Apple has made no changes to security or other pieces since.
23 months ago
It’s pretty funny that, ever since Tim Cook said Apple was doubling down, they’ve surely had twice as many fails.
23 months ago
Not so worried about the security implications, but it could mean that ios could be booted on a generic ARM device. Basically a "hackintosh" for ios.
Most likely not as the source code wasn't 100% complete and could not be compiled.[ Read All Comments ]
Apple CEO Tim Cook and United States President Donald Trump will soon tour facilities in Texas where Apple products are made, reports Reuters.
The goal of the trip is to showcase companies that...
AirPods Pro sport an all-new in-ear design with three sizes of soft, flexible silicone tips included in the box, including small, medium, and large. Apple does not sell the ear tips directly, but if...
Apple today seeded the second beta of an upcoming tvOS 13.3 update to developers, one week after seeding the first beta and two weeks after releasing the tvOS 13.2 update.
Designed for the...
Apple today seeded the second beta of an upcoming watchOS 6.1.1 update to developers for testing purposes, one week after seeding the first beta and two weeks after releasing the watchOS 6.1 update.
...
Apple this morning shared a new "First Look" featurette covering "Ghostwriter," one of the TV shows that launched on Apple TV+ when it became available in early November.
...
Amazon has introduced a new sale on the Mid 2019 13-inch MacBook Pro with a 1.4 GHz processor, 8GB RAM, and a 256GB SSD, now priced at $1,299.99, down from $1,499.00. At $199 off, this is...
Last week, Disney CEO Bob Iger revealed that Disney+ will launch in the United Kingdom and other select European countries on March 31, 2020.
Iger didn't mention how much European...
Twitter is set to roll out a new feature called "Topics" that allows users to follow conversations about subjects of interest, similar to how they'd follow an account.
According...
