Although it cannot be said to be a truly new product, it is really a very special existence in the iPhone – the point is that it is only for loan and not for sale, and there are many regulations for its use (definitely more than Apple employee work form home rulesmore rigorous). This iPhone, which is full of code and seems to be crashing, is actually a very special version specially prepared for the Information Security Research Institute – to put it simply, it is an official unlocked iPhone that can easily and deeply explore the iOS system without the steps of jailbreaking and cracking. Continue reading Apple launches security research version of iPhone, allowing white hat hackers to dig out potential vulnerabilities immediately.
▲Image source: Apple
Even if you want to buy it, you can’t buy it. Apple launches a security research version of the iPhone
Based on past experience, the Apple operating system, which is relatively closed and has a small number of users, does have better information security than other systems. Back then, Apple was quite proud of its lack of viruses and other problems, and it even used it as a selling point for its products. But moving forward to modern times, as the Apple ecosystem has gradually grown into the mainstream—especially iOS, in recent years it has become a target for hackers to exploit vulnerabilities and may even be used for malicious purposes. Faced with such information security challenges, Apple has also begun to participate in hacker information security forums and other occasions, and has even launched a bounty program “Apple Security Bounty” for security vulnerabilities.
However, Apple seems to have realized that instead of letting hackers who are willing to help waste time waiting for a third party to crack the system, they can actually dig deep into the system to find vulnerabilities. It would be better for the official to open a convenient door for these capable white hat hackers to improve efficiency and dig deeper into system problems. This door is the newly launched “Apple Security Research Device Program”.
This device can actually be considered an official unlocked version of the iPhone. The preloaded iOS system is very different from the ordinary iPhone. It basically lifts most of the restrictions and will directly allow users to access and use SSH, use Debugging tools, and even execute program code with the highest permissions of the root shell. The biggest point is to be able to dig in and inspect the system to find problems before others (including malicious hackers) can enter the system through jailbreaking and other methods – this is the key point that makes the SRD project theoretically more efficient.
Apple also revealed in a TechCrunch report that rather than simply providing tools, Apple hopes to use this project to promote more collaboration on system security, and will therefore have more interactive discussions with Apple engineers. Developers who qualify for this program and find vulnerabilities can also receive substantial incentives through the bounty program.
Since SRD is already a bit like a plug-in for white hat hackers (or bounty hunters), Apple also has many regulations on this plan. For example, the basic qualifications are to be a developer program account holder and have certain security qualifications, etc., and the qualifications will be reviewed by Apple.
The SRD device is stipulated not to be used for personal daily use, and can only be used for testing and research purposes in the areas and personnel applying for use (so it should be difficult for ordinary people to see the actual device). The lease period is 12 months (can apply for renewal). There are also certain regulations when a vulnerability is discovered, such as the timing of the vulnerability’s public release – usually after Apple releases a patch. This is not surprising. After all, this should be regarded as a faster and more convenient tool that can only be obtained by cooperating with the official. In addition, the most important consideration is probably the worry that the loopholes will be exploited by interested parties early.
Pictures/sources cited in this article
Further reading:
Elon Musk: People who think AI can’t be smarter than themselves are dumber than they think
Android 11/Android R hidden dessert name revealed, have you tried Red Velvet Cake?
Source: KOCPC Chinese