9 ms·

> Shell access is available, and you can run any tools, choose your own entitlements, and even customize the kernel. Wow, I want one of this just for fun, soun

> Shell access is available, and you can run any tools, choose your own entitlements, and even customize the kernel. Wow, I want one of this just for fun, sounds like what I want my normal iPhone to be able to do > Have a proven track record of success in finding security issues on Apple platforms, or other modern operating systems and platforms. Well, that put a stop to my dream...

camkego 4y ago
The quote mentioned above can be found here: https://security.apple.com/research-device/ https://security.apple.com/research-device/
- capableweb 4y ago
  I think two HN submissions got merged, I think the submission I made my comment to lead directly to that page. At least that's my excuse in case someone asks.
wnissen 4y ago
I remember when the iPhone tech remoted into my phone. I knew it had to be technically possible but it is reserved for Apple. Probably a good idea that it's not generally accessible, all my relatives who I recommend use their iPads for banking would be in trouble.
- KerrAvon 4y ago
  What do you mean by “remoted”?
  - xnyan 4y ago
    I’ve seen this done for support. Apple seems to have an internal remote access tool similar to common VNC or RDP based tools that allows them to view a video stream of your display and send touch inputs to it as if they were physically using your device.
    - noja 4y ago
      > and send touch inputs to it as if they were physically using your device. No they can't. They overlay a red arrow showing where they want you to push, and you (the user) are asked to push there.
      - lrvick 4y ago
        They can literally send custom firmware to the device. It is their device, not yours, and they can do whatever they want with it.
        such12 4y ago
        Not even close to true. If Apple were to exfiltrate your files, or monitor your screen intentionally without you opting in, they’d be taken to pieces in court.
        lrvick 4y ago
        Or maybe you visit a different country, like China, where Apple has ceded all power over their servers and encryption keys to the CCP. Or even in the US, the courts you think will save you could be the very ones ordering your data because you are suspected of a crime because you typed a certain trigger phrase that activates an automated warrant like those Google has. The 4th amendment only protects you when data is stored on your property. When it is in control of a corporation, the corporation gets the warrant, not you. Or maybe Apple simply changes their terms of service to resemble that of TikTok or Facebook giving them more or less complete legal freedom over your data. Or maybe it is just a rouge Apple system administrator that does not care about the rules. You can not own an Apple device and the data on it is at the mercy of choices made by remote humans with incentives very different from yours. Power that exists will always be abused. It is how humans work.
        such12 4y ago
        Maybe, the sky is falling, maybe it isn’t. > Power that exists will always be abused. I hate to break it to you, but power isn’t going anywhere, and it isn’t always abused. Telling the difference is what matters.
  - darknoon 4y ago
    Apple support can push a screen share to your device. Iirc, you have to accept it before it starts sharing.
- alden5 4y ago
  it really spooked me when they did that to my mac
  - kif 4y ago
    Did you have to accept a prompt? There's a preinstalled app to do that in macOS, called Screen Sharing. You can remotely access other people's macs using only their Apple ID, and their approval of course.
    - philistine 4y ago
      And your own server !
deleted 4y ago
[deleted]
omegacharlie 4y ago
If you want a potential alternative to the security research device from Apple look into Corellium[1] - startup that emulates iOS on ARM64 server hardware, sued by Apple for copyright claims and survived. It is a paid product (eg $x/hr cloud billing). Supposedly easier to obtain than the security research device. [1] https://corellium.com https://corellium.com

camkego 4y ago

The quote mentioned above can be found here: https://security.apple.com/research-device/ https://security.apple.com/research-device/

capableweb 4y ago
I think two HN submissions got merged, I think the submission I made my comment to lead directly to that page. At least that's my excuse in case someone asks.

wnissen 4y ago

I remember when the iPhone tech remoted into my phone. I knew it had to be technically possible but it is reserved for Apple. Probably a good idea that it's not generally accessible, all my relatives who I recommend use their iPads for banking would be in trouble.

KerrAvon 4y ago
What do you mean by “remoted”?
- xnyan 4y ago
  I’ve seen this done for support. Apple seems to have an internal remote access tool similar to common VNC or RDP based tools that allows them to view a video stream of your display and send touch inputs to it as if they were physically using your device.
  - noja 4y ago
    > and send touch inputs to it as if they were physically using your device. No they can't. They overlay a red arrow showing where they want you to push, and you (the user) are asked to push there.
    - lrvick 4y ago
      They can literally send custom firmware to the device. It is their device, not yours, and they can do whatever they want with it.
      - such12 4y ago
        Not even close to true. If Apple were to exfiltrate your files, or monitor your screen intentionally without you opting in, they’d be taken to pieces in court.
        lrvick 4y ago
        Or maybe you visit a different country, like China, where Apple has ceded all power over their servers and encryption keys to the CCP. Or even in the US, the courts you think will save you could be the very ones ordering your data because you are suspected of a crime because you typed a certain trigger phrase that activates an automated warrant like those Google has. The 4th amendment only protects you when data is stored on your property. When it is in control of a corporation, the corporation gets the warrant, not you. Or maybe Apple simply changes their terms of service to resemble that of TikTok or Facebook giving them more or less complete legal freedom over your data. Or maybe it is just a rouge Apple system administrator that does not care about the rules. You can not own an Apple device and the data on it is at the mercy of choices made by remote humans with incentives very different from yours. Power that exists will always be abused. It is how humans work.
        such12 4y ago
        Maybe, the sky is falling, maybe it isn’t. > Power that exists will always be abused. I hate to break it to you, but power isn’t going anywhere, and it isn’t always abused. Telling the difference is what matters.
- darknoon 4y ago
  Apple support can push a screen share to your device. Iirc, you have to accept it before it starts sharing.
alden5 4y ago
it really spooked me when they did that to my mac
- kif 4y ago
  Did you have to accept a prompt? There's a preinstalled app to do that in macOS, called Screen Sharing. You can remotely access other people's macs using only their Apple ID, and their approval of course.
  - philistine 4y ago
    And your own server !

deleted 4y ago

[deleted]

omegacharlie 4y ago

If you want a potential alternative to the security research device from Apple look into Corellium[1] - startup that emulates iOS on ARM64 server hardware, sued by Apple for copyright claims and survived. It is a paid product (eg $x/hr cloud billing). Supposedly easier to obtain than the security research device. [1] https://corellium.com https://corellium.com