Published: Fri, February 09, 2018
Hi-Tech | By Cory Rios

IPhone Secret Code Revealed In 'Biggest Leak In History'

IPhone Secret Code Revealed In 'Biggest Leak In History'

Motherboard reported the leak last night after what appeared to be source code for iBoot was posted publicly online.

Flaws in older versions of iBoot have been leveraged by hackers to compromise the iPhone's security, but users have also relied on the vulnerabilities for jailbreaking. Although the code has now been taken down, there are still backups of it circulating on the web, as mentioned by a post on r/jailbreak.

"This is the biggest leak in history", Jonathan Levin, an author of several book about iOS and Mac OSX's inner workings told reporters at Motherboard.

Shortly after that article was posted, the publication updated its report to say that Apple had sent GitHub a Digital Millennium Copyright Act (DMCA) takedown notice demanding removal of the source code link.

Interestingly, the same source code was also published on Reddit four months earlier by a user named apple_internals.

This gives both security researchers and hackers alike better insight into how critical parts of iOS operate, and even though tags in the leak suggest that this material comes from iOS 9, part of the code may still be in use today. The fact that the code is available on GitHub and is making the rounds through media outlets across the web confirms that jailbreakers now have their hands on the information and are posing a real threat to the security of Apple's operating system.

More news: Last Two ISIS 'Beatles' Captured in Syria

A skilled anonymous hacker leaked the source code for Apple's ultra-secret iBoot software on Wednesday, raising fears that nearly any iPhone might be vulnerable to hackers. This is a big deal because it will likely lead to custom software for the latest iPhone devices.

It wasn't immediately clear who leaked the code.

Only 7% of iOS devices are using a version older than iOS 10, which was released in 2016, according to Apple's website.

The leaked code has since been removed from the site. Apple, like many major companies, has a bug bounty program and for anyone who finds a fault in the boot process, the payout could be as much as $200,000.

In other words, Apple's multi-layered approach to keeping iOS secure involves a lot more safeguards than what you'd see in a leak like this, however it may have made its way to GitHub.

Like this: