5 ms·
Most people seem to have missed the reported fact that a security researcher now working as an executive at Grayshift was previously an employee at Apple. The e
by developer2 8y ago
Most people seem to have missed the reported fact that a security researcher now working as an executive at Grayshift was previously an employee at Apple. The exploit being used in the GrayKey device may have been exported directly from within Apple's walls. Perhaps this man was involved enough with iOS security that he a) built in a backdoor; or b) discovered a vulnerability, and instead of disclosing it, left Apple to profit off the exploit; or c) gained enough knowledge of the systems to be able to reverse engineer an exploit from scratch, after leaving Apple.
The fact that the company producing the GreyKey has an executive who is a security researcher and used to work for Apple is such an obvious, damning piece of evidence. I don't understand why this connection hasn't been more widely reported and investigated.
- saagarjha 8y ago> gained enough knowledge of the systems to be able to reverse engineer an exploit from scratch, after leaving Apple While the other two are suspicious, I don't think the last one is. If you're good enough to come up with a clean room implementation than I don't see any foul play here.
- stordoff 8y agoIsn't that by definition _not_ a clean room? You have knowledge about the device that you wouldn't be able to derive just from looking at the device itself.
- scottmf 8y agoWhat was his position at Apple?
- saagarjha 8y agoNo, that's what the other two were. I'm saying that there's the possibility that you got hired at Apple because you were smart, and end up continuing work on iOS even when you leave, but without any sort of knowledge of the internals. For example, say they rewrote some portion of code that you were familiar with: in that case, you should be free to take a look since you no longer have any inside information on it.
- chx 8y agoWell, he better be ready to flee the USA if he used his prior knowledge because the civil suit is guaranteed and a criminal suit is very likely. Of course, once he makes tens or even hundreds of millions, finding a country where Apple doesn't have a subsidiary shouldn't be too hard.