Key iPhone Source Code Gets Posted Online • Hacker News Board

Re: Key iPhone Source Code Gets Posted Online

#51

Post by jchb » Thu, Feb 08, 2018, 9:03 AM UTC

blowski wrote: post #48

How does something like this get leaked? A rogue Apple developer?

Just totally speculating here, but there are some class action suites regarding the Apple battery debacle. Maybe they had to provide source code as part of pre-trial discovery, and it got leaked that way?

Re: Key iPhone Source Code Gets Posted Online

#52

Post by rgovostes » Thu, Feb 08, 2018, 9:03 AM UTC

okket wrote: post #41

bitwise-evan wrote: post #40

Earlier quoted context omitted.

It is much easier to find security vulnerabilities if you have the source code.

Then maybe Apple leaked this code intentionally to harvest free security reviews?

Please, it doesn’t help anything to publish unfounded conspiracy theories. Apple already publishes open source projects and has a bug bounty in which they pay for security vulnerabilities in some areas of iOS. It’s ludicrous to advance the theory that they hatched a plan to leak this important project to Reddit instead of through one of their official channels.

Re: Key iPhone Source Code Gets Posted Online

#53

Post by mikejb » Thu, Feb 08, 2018, 9:10 AM UTC

okket wrote: post #41

bitwise-evan wrote: post #40

Earlier quoted context omitted.

It is much easier to find security vulnerabilities if you have the source code.

Then maybe Apple leaked this code intentionally to harvest free security reviews?

Risky strategy, it depends on who does the review. (It should be a motivator for white-hats to dig into this - black-hats surely will).

Re: Key iPhone Source Code Gets Posted Online

#54

Post by codemusings » Thu, Feb 08, 2018, 9:11 AM UTC

From the source_layout.txt in /docs:

  ...
  
  /arch/arm
          ARM-specific code.
  
  /docs
          Optimisim.
  
  /drivers
          Portable drivers and driver infrastructure.
  ...

There's more documentation in this folder than most projects have :)

Re: Key iPhone Source Code Gets Posted Online

#55

Post by jonashoechst » Thu, Feb 08, 2018, 9:15 AM UTC

EatonZ wrote: post #30

Interesting: https://github.com/h1x0rz3r0/iBoot/blob/master/apps/iBoot/bo...

Although there's FBI written, that def just invokes calls of profile() which is probably to profile the certain parts of the bootloader. I doubt that being a backdoor, only clue would be the name, and that would be rather easily hidable.

Re: Key iPhone Source Code Gets Posted Online

#56

Post by kalleboo » Thu, Feb 08, 2018, 9:23 AM UTC

deckard1 wrote: post #38

TheEnder8 wrote: post #21

The newest copyright on any file is 2015. The source code might be quite old. (Yes, I realize that a copyright header doesn't actually stay in sync with patches. It's just the only indicator of date there is)

There are a few references to 2016. There is also a target/iphone8 folder. Don't see any reference to iPhone X though.

"iphone8" might not be a reference to a product name but the internal model numbers "iPhone8,1"/"iPhone8,2" which are the 6s and 6s Plus (released in 2015). The iPhone 8 model number is "iPhone10,1"

edit: there appears to be a reference to "N66" in init.c, which is the codename for the 6s

Re: Key iPhone Source Code Gets Posted Online

#57

Post by romanovcode » Thu, Feb 08, 2018, 9:30 AM UTC

loeg wrote: post #37

rambojazz wrote: post #34

How to confirm it's not a farce but the actual source code? I could post anything, whatever, and say "this is iBoot leaked".

https://twitter.com/supersat/status/961480792483381248

Doesn't prove anything. Apple is huge, they can do with GitHub whatever they want.

Re: Key iPhone Source Code Gets Posted Online

#58

Post by beegeezuz » Thu, Feb 08, 2018, 9:39 AM UTC

What is "iphone" source code?

Re: Key iPhone Source Code Gets Posted Online

#59

Post by linopolus » Thu, Feb 08, 2018, 9:50 AM UTC

deckard1 wrote: post #38

TheEnder8 wrote: post #21

The newest copyright on any file is 2015. The source code might be quite old. (Yes, I realize that a copyright header doesn't actually stay in sync with patches. It's just the only indicator of date there is)

There are a few references to 2016. There is also a target/iphone8 folder. Don't see any reference to iPhone X though.

The iPhone 6S, which was released 2015 with iOS9, had the hardware string 8,1, so nothing unexpected there.

https://en.wikipedia.org/wiki/List_of_iOS_devices#iPhone

Re: Key iPhone Source Code Gets Posted Online

#60

Post by linopolus » Thu, Feb 08, 2018, 9:56 AM UTC

codemusings wrote: post #54

From the source_layout.txt in /docs: ... /arch/arm ARM-specific code. /docs Optimisim. /drivers Portable drivers and driver infrastructure. ... There's more documentation in this folder than most projects have :)

I like /docs: Optimism..