4 ms·
Apple loses copyright battle against security startup Corellium
- barelysapient 3y agoBig deal if allowed to stand after its inevitably appealed.
- ncr100 3y agoA "fair use" win. > [Corellium] gave its customers the ability to run “virtual” iPhones on desktop computers. Corellium’s software makes it unnecessary to use physical iPhones that contain specialized software to poke and prod iOS, Apple’s mobile operating system. Neat. > [Judge] ruled that Corellium’s creation of virtual iPhones was not a copyright violation [...] because it was designed to help improve the security for all iPhone users. Right on.
- deleted 3y ago[deleted]
- reaperman 3y agoWow!
- agnokapathetic 3y agoTitle should be (2020)
- jhatemyjob 3y agoSeriously. I got really excited but this is old news. What's the point of posting this
- smoldesu 3y agoIt's the wrong link, if anything. Reuters ran a better article on what actually happened today, or you can read it straight from the horse's mouth: https://aboutblaw.com/7PK https://aboutblaw.com/7PK
- jhatemyjob 3y agoThank you. Wow. Good day.
- fsckboy 3y agoarticle Dec. 29, 2020 https://archive.ph/4WSne https://archive.ph/4WSne (captured 7 Aug 2021 23:58) FTA: The judge in the case ruled that Corellium’s creation of virtual iPhones was not a copyright violation, in part because it was designed to help improve the security for all iPhone users. Corellium wasn’t creating a competing product for consumers. Rather, it was a research tool for a comparatively small number of customers. Judge Rodney Smith called Apple’s argument on those claims “Puzzling, if not disingenuous.” Smith found that Corellium used a vetting process before selling its products to customers.
- smoldesu 3y agoReading through the appeal affidavit[0], some of the prosecution's claims are wild: > The district court granted summary judgment for Corellium on Apple’s three copyright claims [...] (2) direct infringement of Apple’s icons and wallpapers > For example, CORSEC (Apple says) competes with Apple’s (1) iOS Simulator, which “allows developers to work on a virtual iOS device”; (2) Security Research Device Program, which gives “customized iPhone[s] loaded with iOS to legitimate security researchers”; and (3) Xcode Cloud, a forthcoming program that will enable researchers “to remotely access iOS.” > Apple claims that our case is like Fox News Network, LLC v. TVEyes, Inc. In Fox News, TVEyes, a media company, “redistribute[d] Fox’s news programming in ten-minute clips, which . . . likely provide[d] TVEyes’s users with all of the Fox programming that they [would] seek" > Apple argues that CORSEC “customers care only about the function and ideas of the portions of iOS they are analyzing—not its many creative elements.” [0] https://aboutblaw.com/7PK https://aboutblaw.com/7PK
- jwildeboer 3y agoDecember 29, 2020 Should be added to the title.
- deleted 3y ago[deleted]
- CWilliams1013 3y agoThe posted article is from the original case, but the appeal had news from today: https://www.reuters.com/legal/apple-loses-bid-revive-us-copyright-claims-over-ios-simulation-2023-05-08/ https://www.reuters.com/legal/apple-loses-bid-revive-us-copy...
- pavon 3y agoDoes anyone know what became of the DMCA claims that weren't dismissed? Were they part of the 2021 settlement?
- EMIRELADERO 3y agoWoah. Looking at the ruling, they seem like very straight-to-the-point judges. The writing style is very intuitive and easy to understand even for non-legal minds!
- bmc7505 3y agohttps://fingfx.thomsonreuters.com/gfx/legaldocs/akpeqynglpr/APPLE%20COPYRIGHT%20LAWSUIT%20opinion.pdf https://fingfx.thomsonreuters.com/gfx/legaldocs/akpeqynglpr/...
- gregsadetsky 3y agoCrazy, Corellium offers (among many other things) certificate-pinning-disabling as a service :-) https://support.corellium.com/features/network-monitor#how-it-works https://support.corellium.com/features/network-monitor#how-i... "To defeat certificate pinning, Corellium patches sslsplit, the system's boringssl library, and the integrated WebView's boringssl library ..." That can be bonkers useful...!
- rektide 3y agoCertificate pinning is one of the most user-hostile security inventions we've created. It makes it so hard to get access to the traffic coming out of your own device, which heavens, seems like such an elementary ask.
- Rimintil 3y agoAnd one of the most security and privacy user-friendly features, defeating MiTM attacks from corporations and governments.
- rektide 3y agoImmoral & wrong to use possible security threats as excuses to secure devices against their owners. There have to be escape hatches. It has to be the user's device. Mitm your own traffic is a right. It's my traffic, not yours.
- aaomidi 3y agoI would challenge you on this. Certificate pinning makes declaring an incident where you’ve had your private key stolen effectively impossible. Which means you’re going to end up sacrificing user security when it inevitably ends up in that situation.
- gruez 3y ago>Certificate pinning makes declaring an incident where you’ve had your private key stolen effectively impossible. Is this an issue? If the certificate you pinned corresponds to a key on a HSM, what are the chances it's going to get stolen?
- deleted 3y ago[deleted]
- terrycody 3y agoSo currently we have no iOS emulator yet, except to buy digital emulation product from Corellium maybe?
- neurostimulant 3y agoYou can run iOS 12 on QEMU: https://github.com/alephsecurity/xnu-qemu-arm64 https://github.com/alephsecurity/xnu-qemu-arm64