3 ms·
Lots of interesting details in this article, including: - Apple unwittingly tried to hire David Wang, the creator of the exploit - Wang instead went on in 201
by danso 6y ago
Lots of interesting details in this article, including:
- Apple unwittingly tried to hire David Wang, the creator of the exploit
- Wang instead went on in 2017 to co-found Corellium, a company specializing in providing "virtual" iPhones for security testing.
- Apple sued Corellium in 2019 for copyright violation. The discovery process turned up Wang and his work on the San Bernadino exploit.
This is how the article describes the exploit:
> Azimuth specialized in finding significant vulnerabilities. Dowd, a former IBM X-Force researcher whom one peer called “the Mozart of exploit design,” had found one in open-source code from Mozilla that Apple used to permit accessories to be plugged into an iPhone’s lightning port, according to the person...
> Using the flaw Dowd found, Wang, based in Portland, created an exploit that enabled initial access to the phone — a foot in the door. Then he hitched it to another exploit that permitted greater maneuverability, according to the people. And then he linked that to a final exploit that another Azimuth researcher had already created for iPhones, giving him full control over the phone’s core processor — the brains of the device. From there, he wrote software that rapidly tried all combinations of the passcode, bypassing other features, such as the one that erased data after 10 incorrect tries.
- alamortsubite 6y agoAlso, since 2015 there's been speculation that the FBI's real motive for taking action against Apple was to set a legal precedent to make it easier to compel tech companies to unlock devices/accounts in the future. This appears to be confirmed.