Apple's Beats brand in April unveiled the Powerbeats Pro, a redesigned wire-free version of its popular fitness-oriented Powerbeats earbuds.
iPhone Source Code Was Leaked by Low-Level Apple Employee
Earlier this week, source code for iBoot, a core component of the iPhone's operating system, leaked on GitHub. The code was old, for a version of iOS 9, and it was quickly pulled from GitHub after Apple issued a DMCA takedown notice, but it left many wondering how such sensitive code ended up publicly available.
To answer that question, Motherboard got in touch with unnamed sources who were involved in the leak and investigated screenshots, text messages, and more, to determine just how it happened.
As it turns out, the code originally came from a low-level Apple employee who took the code from Apple in 2016 to share with friends in the jailbreaking community. This employee wasn't unhappy with Apple and didn't steal the code with malicious intent, but instead was encouraged by friends to obtain the code to benefit the jailbreaking community.
According to the unnamed people who spoke to Motherboard, what leaked wasn't the "full leak." "It's not the original leak-it's a copy," said one source.
Following the leak, Apple confirmed the authenticity of the code in a statement to MacRumors and pointed out that it's for a three-year-old operating system that's been replaced by iOS 11 and is in use only on a small number of devices.
To answer that question, Motherboard got in touch with unnamed sources who were involved in the leak and investigated screenshots, text messages, and more, to determine just how it happened.
As it turns out, the code originally came from a low-level Apple employee who took the code from Apple in 2016 to share with friends in the jailbreaking community. This employee wasn't unhappy with Apple and didn't steal the code with malicious intent, but instead was encouraged by friends to obtain the code to benefit the jailbreaking community.
The person took the iBoot source code--and additional code that has yet to be widely leaked--and shared it with a small group of five people.The original group of five people who were provided with access to the code didn't intend to share it, but it somehow got out. From one of the original people involved:
"He pulled everything, all sorts of Apple internal tools and whatnot," a friend of the intern told me. Motherboard saw screenshots of additional source code and file names that were not included in the GitHub leak and were dated from around the time of this first leak.
"I personally never wanted that code to see the light of day. Not out of greed but because of fear of the legal firestorm that would ensue," they said. "The Apple internal community is really full of curious kids and teens.I knew one day that if those kids got it they'd be dumb enough to push it to GitHub."The code began circulating more widely in 2017 and picked up in popularity late in the year before ending up on GitHub this week. Many in the jailbreaking and iPhone research communities attempted to stop sharing, but the major public leak couldn't be avoided.
According to the unnamed people who spoke to Motherboard, what leaked wasn't the "full leak." "It's not the original leak-it's a copy," said one source.
Following the leak, Apple confirmed the authenticity of the code in a statement to MacRumors and pointed out that it's for a three-year-old operating system that's been replaced by iOS 11 and is in use only on a small number of devices.
"Old source code from three years ago appears to have been leaked, but by design the security of our products doesn't depend on the secrecy of our source code. There are many layers of hardware and software protections built into our products, and we always encourage customers to update to the newest software releases to benefit from the latest protections."The iBoot code leak should not be of concern to the average user because Apple has many layers of protection in place, like the Secure Enclave, and does not rely on source code secrecy alone to keep its users safe. The leak could, however, make it easier for people to locate vulnerabilities to create new jailbreaks.
[ 109 comments ]
Top Rated Comments
(View all)
18 months ago
BREAKING NEWS: Android source code leaked, possibly by Google themselves!!
https://source.android.com
This isn't a big deal. If anything it means finding some remaining open holes which can then be patched. All Linux is open source. There aren't issues there because of it. If anything it means others can help to find vulnerabilities which can then be corrected.
iOS 9 was released 3 years ago. A LOT has changed in the source code since then and this isn't even the entire source as it can't be compiled.
https://source.android.com
This isn't a big deal. If anything it means finding some remaining open holes which can then be patched. All Linux is open source. There aren't issues there because of it. If anything it means others can help to find vulnerabilities which can then be corrected.
iOS 9 was released 3 years ago. A LOT has changed in the source code since then and this isn't even the entire source as it can't be compiled.
18 months ago
What a scumbag. There's really no other word to describe someone who would do this. You're given an opportunity to work for one of the best companies in the industry or the world for that matter and you betray them in the worst way possible. This isn't a careless employee leaving an iPhone 4 prototype at a bar. Malicious intent or not, this is a criminal act and I hope this guy is prosecuted to the fullest extent of the law.
It's one thing when jailbreakers find exploits on their own through countless hours of hard work and another thing when an employee violates the trust given to him by his employer. Thankfully the impact of this is limited and the security of most users won't be compromised but Apple will have to be a lot more careful with the people they hire from now on and what they're able to leave the premises with.
It's one thing when jailbreakers find exploits on their own through countless hours of hard work and another thing when an employee violates the trust given to him by his employer. Thankfully the impact of this is limited and the security of most users won't be compromised but Apple will have to be a lot more careful with the people they hire from now on and what they're able to leave the premises with.
18 months ago
Yikes. I wonder if he's going to be fired.
Pink Slip Time
The funny thing is that his friends push him to do it and then they expose him.
Funny how “friends” can throw friends under the bus huh?
Also peer pressure may have been a red flag as to how good of “friends” they really were
“Dude come do this thing that’s possibly illegal or could get us sued”
Not well thought out on the part of the friends
18 months ago
BREAKING NEWS: Android source code leaked, possibly by Google themselves!!
This was the bootloader, pretty sure that isn't Open Source on Android otherwise rooting wouldn't be such a big deal.
18 months ago
"I knew one day that if those kids got it they'd be dumb enough to push it to GitHub"
- True words.
- True words.
18 months ago
Following the leak, Apple confirmed the authenticity of the code in a statement to MacRumors and pointed out that it's for a three-year-old operating system that's been replaced by iOS 11 and is in use only on a small number of devices.
Really? Any iPad 2, 3, 4, iPad Mini 1, iPod Touch 5th Gen, etc. can't run anything above iOS 9. I imagine there are more of those devices still out there than you might think.I know that where I work, people and departments still continue to hang on to quite a lot of these types of devices, despite efforts from IT to get them to trade up or give them up.
18 months ago
These criminals need to be dealt with swiftly and aggressively. Jail is necessary because you don't want others thinking they can get away with it.
[ Read All Comments ]
Belkin today announced that its InvisiGlass Ultra Front and Back Protection for the latest iPhone models is now available for purchase from Apple.
The InvisiGlass Ultra Front and Back...
Apple this morning released the second beta of watchOS 6, the software that runs on the Apple Watch. The second beta comes two weeks after Apple first unveiled the new update at the Worldwide...
Apple today seeded the second beta of an upcoming tvOS 13 update to developers, two weeks after first unveiling the tvOS 13 software at the Worldwide Developers Conference.
Designed for the...
Aspyr has announced that today is the last day of sales for its 32-bit Mac games, in anticipation of Apple's upcoming move to 64-bit only apps on macOS Catalina later this year.
After...
Amazon is offering the latest MacBook Pro at a new all-time-low price, with savings of up to $199 off original prices. Across the board these are the best deals available online from the major...
MacRumors and Twelve South's latest partnership offers our readers an exclusive chance to save 12 percent off their entire purchase on TwelveSouth.com. In the past, our exclusive Twelve South...
In iOS 13, Apple has extended the system's built-in screenshot feature to include the ability to save a full web page as a multi-page PDF.
Don't expect this option to appear when...
For this week's giveaway, we've teamed up with Twelve South to offer MacRumors readers a chance to win a prize pack that includes a BookBook vol. 2 for iPad Pro, an AirFly, and a set of...
