8 ms·
Key iPhone Source Code Gets Posted Online
- blueish 9y agoHere's the link to the github repo, since the article didn't mention it: https://github.com/h1x0rz3r0/iBoot https://github.com/h1x0rz3r0/iBoot
- geowwy 9y agoI'm surprised it hasn't been taken down yet
- turrini 9y agoThey did it now -> https://github.com/h1x0rz3r0/iBoot https://github.com/h1x0rz3r0/iBoot
- jumelles 9y agoAt least one has: https://github.com/ZioShiba/iBoot/tree/master/docs https://github.com/ZioShiba/iBoot/tree/master/docs
- nerdponx 9y agoGitHub seems like an odd place to post this kind of thing. I would have expected an IPFS link, or an I2P torrent, or something like that.
- peterburkimsher 9y agoThe article says that it was first posted on Reddit, but nobody noticed for a while. The Github copy is almost certainly a repost, by a different author than the original leak. "This source code first surfaced last year, posted by a Reddit user called “apple_internals” on the Jailbreak subreddit. That post didn’t get much attention since the user was new and didn’t have enough Reddit karma; the post was quickly buried. Its new availability on GitHub..."
- nxc18 9y agoThere’s lots of stolen shit on github, including (as of a few months ago) the Windows 2k3 kernel. I’m not surprised by this leak. I am surprised more people aren’t aware of this.
- softawre 9y agoSource live as of now: https://0xacab.org/sizeofcat/iBoot https://0xacab.org/sizeofcat/iBoot
- anta40 9y agoDamn, too late to see this. Dead already.
- bob_theslob646 9y agoHow hard will it be for Apple to patch this?
- eridius 9y agoTo patch what? This isn't a vulnerability. This is leaked source code. Apple can file takedown notices to GitHub since they own the copyright but people can always post it somewhere else.
- bob_theslob646 9y agoThat is what I thought. I apologize for the stupid question.
- skygazer 9y agoNo need to apologize. This source, which Apple intended to stay private, may (or may not) still reveal exploitable vulnerabilities, which would need to be patched, if they exist, but it's not immediately obvious either way.
- monocasa 9y ago> in 'Biggest Leak in History' IDK, the Win2K source leak was pretty big.
- beefhash 9y agoWasn't that one a partial leak stripped of some interesting bits?
- 4ad 9y agoNothing significant was missing. For some reason the press relayed the news as "Windows NT and a small portion of Windows 2k source code were leaked". This was false, possibly started my Microsoft itself to downplay the scope of the leak. Virtually everything was there. Some people built it and booted it up.
- beefhash 9y agoWindows NT 4.0, yes. But 2000 would surprise me. To my knowledge, at least the product key handling was missing.
- dannyw 9y agoI did some research [0] and I cannot find anyone claiming that more than ~15% of the Win 2k source code was available. People are able to build and boot Win NT, not Win 2k. [0]: https://www.betaarchive.com/forum/viewtopic.php?f=61&t=33250&sid=702bb8d1e35999fa73641d4ab4d04eae https://www.betaarchive.com/forum/viewtopic.php?f=61&t=33250...
- trentnelson 9y agoThere was a third leak, circa 2003, the Windows Research Kernel, which is what you'd get if, say, you had an academic license as part of a university or something. That one you could very much build and alter.
- sgillen 9y agoThe author of the quote may have meant biggest leak in Apple's history, which it may well be. As for biggest leak in history, maybe the shadow brokers leak of all those NSA tools? I'm not sure if anything huge resulted from the Win2k leak but I'm not too informed about it.
- dsl 9y agoIn the docs directory there is a guide to fuzzing. On the plus side, from my initial read, it looks like most of the important stuff has fuzzing harnesses already which means the code should be free of most low hanging security bugs. It also means that with the harnesses already in place, it will be easy for outsiders to just throw a ton of compute at it and possibly find some of the deeper issues.
- virgilp 9y agoYou mean, more tons of computing than Apple can afford?
- CodeWriter23 9y agoYou mean, more tons of computing than Apple has already thrown at the problem?
- deleted 9y ago[deleted]
- evv 9y agohttps://github.com/h1x0rz3r0/iBoot/tree/master/include/drivers https://github.com/h1x0rz3r0/iBoot/tree/master/include/drive... Now that these drivers have been leaked, would it be possible to run Linux on old iPhones? From my understanding, the main reason it couldn't be done is because nobody had access to the driver source code, and now..
- dsl 9y agoIt looks like just the headers, not the actual source code. Also iBoot is basically the "BIOS" of the phone. Just enough to get it up and running and then load iOS into memory and kick it off, so it wouldn't have drivers for things like the touch screen or accelerometer for example.
- deleted 9y ago[deleted]
- kyrra 9y agohttps://github.com/h1x0rz3r0/iBoot/blob/master/platform/s5l8945x/pmgr/pmgr.c#L360 https://github.com/h1x0rz3r0/iBoot/blob/master/platform/s5l8... I'd disagree, this includes source code.
- revelation 9y agoFor power management and sequencing chips. Like a BIOS would. There are no interesting drivers there.
- dsl 9y agoI was referring to the directory the grand-parent referred to. Of course there is source in other places.
- maddyboo 9y agoThere's also a /drivers directory which seems to contain source files for many of the /include/drivers header files.
- 9y ago
- flyGuyOnTheSly 9y agoIf true, this will be the catalyst to Apple stock tanking this morning... and possibly the entire US stock market. IT Security is serious stuff.
- voltagex_ 9y agoWhy? Don't overreact.
- flyGuyOnTheSly 9y agoWe're already on pretty shaky ground... biggest Net Change drop in DOW Jones history just happened 3 days ago.
- saagarjha 9y ago…which was completely unrelated to this at all?
- TheEnder8 9y agoSerious for us, maybe. I'm not sure if it's serious for people that actually move stock prices. Intel is actually up since Spectre/Meltdown...
- TheEnder8 9y agoThe newest copyright on any file is 2015. The source code might be quite old. (Yes, I realize that a copyright header doesn't actually stay in sync with patches. It's just the only indicator of date there is)
- iliketosleep 9y agoThe article states that the code is from iOS 9, which was first released in 2015.
- deckard1 9y agoThere are a few references to 2016. There is also a target/iphone8 folder. Don't see any reference to iPhone X though.
- kalleboo 9y ago"iphone8" might not be a reference to a product name but the internal model numbers "iPhone8,1"/"iPhone8,2" which are the 6s and 6s Plus (released in 2015). The iPhone 8 model number is "iPhone10,1" edit: there appears to be a reference to "N66" in init.c, which is the codename for the 6s
- linopolus 9y agoThe iPhone 6S, which was released 2015 with iOS9, had the hardware string 8,1, so nothing unexpected there. https://en.wikipedia.org/wiki/List_of_iOS_devices#iPhone https://en.wikipedia.org/wiki/List_of_iOS_devices#iPhone
- fmntf 9y agoIt's just a bootloader. I don't think they changed much between iOS 9 and 11. The probably only added support for newer boards/devices.
- solarkraft 9y agoDoes this have any real implication for iPhone hacking?
- qrbLPHiKpiux 9y agoYes, any leak does.
- EatonZ 9y agoInteresting: https://github.com/h1x0rz3r0/iBoot/blob/master/apps/iBoot/boot.c#L56 https://github.com/h1x0rz3r0/iBoot/blob/master/apps/iBoot/bo...
- amorde 9y agoLooks like it just stands for "find boot images", given the name of the function...
- EatonZ 9y agoProbably, still spooky to see that there!
- jonashoechst 9y agoAlthough there's FBI written, that def just invokes calls of profile() which is probably to profile the certain parts of the bootloader. I doubt that being a backdoor, only clue would be the name, and that would be rather easily hidable.
- rambojazz 9y agoHow to confirm it's not a farce but the actual source code? I could post anything, whatever, and say "this is iBoot leaked".
- loeg 9y agohttps://twitter.com/supersat/status/961480792483381248 https://twitter.com/supersat/status/961480792483381248
- romanovcode 9y agoDoesn't prove anything. Apple is huge, they can do with GitHub whatever they want.
- JustSomeNobody 9y agoSo, Apple just lied and said it was theirs? That makes absolutely zero sense.
- ikeboy 9y agoI was involved with a case earlier this week with Apple making a false IP claim under penalty of perjury, they don't seem to care too much. Have heard from others who've been bullied by them as well. Look up HARD2FIND ACCESSORIES INC v. AMAZON COM INC APPLE INC for another instance of them abusing IP claims.
- jmull 9y agoI looked that case up... Doesn't it show the opposite of what you claim? Hard2find's suit against Apple and Amazon was dismissed with prejudice and that decision was confirmed on appeal.
- ikeboy 9y agoThey ruled that Apple had immunity, which is not the same as finding that Apple didn't lie.
- murukesh_s 9y agoCan we figure out where they are putting the 'code' to slow down the older phones? If we can figure it out it could be a big shame for Apple, if any..
- saagarjha 9y agoMaybe the fact that nobody has found it yet means that it doesn't exist? The "code" behind battery throttling as already been found (as in, it's been disassembled).
- okket 9y agoUnless there are encryption keys hidden in source code that I can't find, I fail to see the implications of this leak.
- bitwise-evan 9y agoIt is much easier to find security vulnerabilities if you have the source code.
- okket 9y agoThen maybe Apple leaked this code intentionally to harvest free security reviews?
- rgovostes 9y agoPlease, it doesn’t help anything to publish unfounded conspiracy theories. Apple already publishes open source projects and has a bug bounty in which they pay for security vulnerabilities in some areas of iOS. It’s ludicrous to advance the theory that they hatched a plan to leak this important project to Reddit instead of through one of their official channels.
- draw_down 9y agoDon’t think GP was entirely serious.
- mikejb 9y agoRisky strategy, it depends on who does the review. (It should be a motivator for white-hats to dig into this - black-hats surely will).
- tinus_hn 9y agoBetter switch the Linux servers to Windows then
- 9y ago
- stuntkite 9y agoDoes this mean Jailbreaking might be a thing again? I've been wanting to use some iOS devices (like 6 and newer) for some projects and now jailbreaking is super dead. I am not an embedded wizard, but I think it's pretty hard to get a new bootloader on an iOS device currently. Does anyone have better info on that?
- kiliankoe 9y agoWasn't an iOS 11 jailbreak announced just the other day? I don't think the scene is dead at all, it's just that many of us who once used jailbreaks on every iOS version no longer do and don't follow those news anymore.
- imron 9y agoThere's also the fact that if you have an exploit for a recent iPhone, that can sell for upwards of a million dollars (edit: $1.5 million for a remote jailbreak with persistence: https://www.zerodium.com/program.html https://www.zerodium.com/program.html). If you have the capabilities to hack the iPhone you are then faced with a question - do you release it for free or do you sell it for a million dollars. A million dollars is life changing enough that many hackers will take that option.
- zie 9y agoYou presumably could do both, sell it for a million dollars, and then send an email to apple as well. I'm sure the terms of the sale stipulate you can't share it with anyone else, but if you can hack the iPhone but can't figure out how to send anonymous email to Apple, you are doing something wrong.
- imron 9y agoAccording to zerodium's faq, there are bonuses for exploits that meet specific lifespan requirements.
- stuntkite 9y ago
- singularity2001 9y agowhere's the mirror?
- wafflesraccoon 9y agoHere you go https://0xacab.org/sizeofcat/iBoot/ https://0xacab.org/sizeofcat/iBoot/
- blowski 9y agoHow does something like this get leaked? A rogue Apple developer?
- moviuro 9y agoBad permission management, untrustworthy third-party, USB drives, APT(?), human error, etc.
- jchb 9y agoJust totally speculating here, but there are some class action suites regarding the Apple battery debacle. Maybe they had to provide source code as part of pre-trial discovery, and it got leaked that way?
- eddyg 9y agoThis was released on reddit[1] back in September of 2017 and is not related to any battery lawsuits. [1] https://www.reddit.com/r/jailbreak/comments/71p5qs/newsiboot_bootrom_ibss_ibec_illb_source_codes/ https://www.reddit.com/r/jailbreak/comments/71p5qs/newsiboot...
- moon4u 9y agoCould a potential jailbreak be used to unlock an iphone?
- codemusings 9y agoFrom the source_layout.txt in /docs: ... /arch/arm ARM-specific code. /docs Optimisim. /drivers Portable drivers and driver infrastructure. ... There's more documentation in this folder than most projects have :)
- linopolus 9y agoI like /docs: Optimism..
- stfwn 9y agoFrom the IO Spreadsheet Standard document (in /docs): "This document describes the format of the I/O Spreadsheet for iOS Products. (...) The I/O spreadsheet shall be sheet in an Excel workbook." Numbers? Nope, Excel.
- mrguyorama 9y agoWith the pushes Microsoft has made in the past few years at making office significantly better on Mac, I'm not surprised.
- thesmok 9y agoI've tried to use Numbers for technical stuff and found it too unreliable. A big surprise was when I filtered the spreadsheet by column values so only a subset of rows were visible, then selected a range of rows in that subset and deleted them. When I disabled the filtering I found that it also deleted rows in that range that were hidden.
- beegeezuz 9y agoWhat is "iphone" source code?
- NietTim 9y agoAnyone have a clue what the 'thunderbolt'/'thunderboot' driver is? Almost seems like they have proprietary thunderbolt cables for developing this or something? Relevant files: https://github.com/h1x0rz3r0/iBoot/tree/master/drivers/thunderbolt https://github.com/h1x0rz3r0/iBoot/tree/master/drivers/thund...
- ea016 9y agoSome macs have the ability to load OSX from network or from an external hard drive. It might be the same on the iPhone
- acdha 9y agoThunderbolt could allow direct memory access which would be really useful for low-level debugging early in the boot process before higher-level tools are available.
- elevated 9y agoAll the GitHub repos seem to have been hit with DMCA takedowns, so here is a mirror: https://0xacab.org/sizeofcat/iBoot https://0xacab.org/sizeofcat/iBoot
- sigzero 9y agoI hope the poster is caught and thrown in jail.
- Froyoh 9y ago"This document may not be reproduced or transmitted in any form, in whole or in part, without the express written permission of Apple Inc."
- lorenzofb 9y agoHere's the story behind the leak: https://motherboard.vice.com/en_us/article/xw5yd7/how-iphone-iboot-source-code-leaked-on-github https://motherboard.vice.com/en_us/article/xw5yd7/how-iphone...