3 ms·
> The security researchers also claimed they had created a modified version of Apple’s proprietary software development tool, Xcode, which could sneak surveilla
by tgragnato 8y ago
> The security researchers also claimed they had created a modified version of Apple’s proprietary software development tool, Xcode, which could sneak surveillance backdoors into any apps or programs created using the tool. Xcode, which is distributed by Apple to hundreds of thousands of developers, is used to create apps that are sold through Apple’s App Store.
> The modified version of Xcode, the researchers claimed, could enable spies to steal passwords and grab messages on infected devices. Researchers also claimed the modified Xcode could “force all iOS applications to send embedded data to a listening post.” It remains unclear how intelligence agencies would get developers to use the poisoned version of Xcode.
Sounds suspiciously like XCodeGhost: https://en.wikipedia.org/wiki/XcodeGhost https://en.wikipedia.org/wiki/XcodeGhost.
This is probably worth a reference to Ken Thompson's "Reflections on Trusting Trust".