黑基网 首页 资讯 安全圈 查看内容

苹果iOS源代码泄露始末:竟是底层员工所为

2018-2-12 01:11| 投稿: xiaotiger |来自: 互联网

摘要: 本周早些时候,iPhone操作系统的核心组件iBoot的源代码被泄漏到了GitHub上。比较幸运的是,这些代码是老的iOS 9版本,并且这些泄漏的源代码中,少了最核心的部分,所以是不会被有心人利用起来的。代码泄露对任何互联 ...

本周早些时候,iPhone操作系统的核心组件iBoot的源代码被泄漏到了GitHub上。比较幸运的是,这些代码是老的iOS 9版本,并且这些泄漏的源代码中,少了最核心的部分,所以是不会被有心人利用起来的。

代码泄露对任何互联网公司都是一件很大的安全事件,对于安全措施一向严格甚至严酷的苹果来说,这些核心代码究竟是怎么泄露出的呢?恐怕很多人都想知道这个问题的答案。

为了回答这个问题,Motherboard网站联系了涉及泄露事件的一系列消息来源,最终确认了这起代码泄露事件的来龙去脉。

事实证明,这些代码最初来自于苹果的一名底层员工,这名员工在2016年从苹果公司获得了这些代码,并且分享给了几位在越狱组织干活的朋友。

这名员工对苹果公司并没有感到不满,而且也不是怀着其它恶意来窃取代码。相反,他只是受到朋友的鼓励,本着为越狱组织添砖加瓦做贡献的心理获取了这些源代码。

这名员工拿走了iBoot源代码,以及其它一些还没有被广泛泄露的代码,并且随后将这些代码和一个5人小组进行了分享。

“他把所有的东西,各种各样的苹果内部工具都拿出来了,”一位事件内部人士告诉Motherboard网站。

最早获得代码的5人小组并没有打算分享这些代码,但不知何故,某位成员放出了部分源代码。

这位内部人士表示:“我个人从来都不希望这些代码被泄露出来,因为随之而来的必然将是法律风暴。苹果公司内部社区真的充满了好奇的孩子和青少年。我知道有一天,如果这些孩子得到了它,他们会愚蠢到把它推到GitHub。”

这些代码在2017年其实已经开始了广泛的流传,越狱和iPhone研究社区的很多人试图停止这些分享行为,但最终无法避免这部分代码主要部分的泄露。

不过据消息人士表示,此次代码泄露并非完全的泄露,只是一部分代码的拷贝副本。

泄露之后,苹果公司在向MacRumors声明中确认了代码的真实性,并指出这是一个已经被iOS 11所取代的三年前操作系统,并且只在少数设备上使用。

苹果公司表示,“三年前的老源代码似乎已经被泄漏,但是从设计上来说,我们的产品的安全性并不取决于我们的源代码的保密性,在我们的产品中嵌入了许多硬件和软件保护层,始终鼓励客户升级到最新的软件版本,从最新的保护中受益。“

iBoot代码泄漏不应该是普通用户关心的问题,因为苹果有许多保护层,像Secure Enclave,并且不依赖源代码保密来保证用户的安全。但是泄露可能会使人们更容易找到漏洞来创建新的越狱。

, groupId: 6520877332868104708, itemId: 6520877332868104708, type: 1, subInfo: { isOriginal: false, source: 快科技, time: 2018-02-10 18:54:26 }, tagInfo: { tags: [{"name":"iPhone"},{"name":"iOS"},{"name":"苹果公司"},{"name":"GitHub"},{"name":"软件"}], groupId: 6520877332868104708, itemId: 6520877332868104708, repin: 0, }, has_extern_link: 0 }, commentInfo: { groupId: 6520877332868104708, itemId: 6520877332868104708, comments_count: 7, ban_comment: 0 }, mediaInfo: { uid: 1897278681, name: 快科技, avatar: //p3.pstatp.com/large/4494/4075873079, openUrl: /c/user/1897278681/, follow: false }, pgcInfo: {"media_info":{"open_url":"/c/user/1897278681/","avatar_url":"https://p3.pstatp.com/large/4494/4075873079","media_id":4521170903,"name":"快科技","user_verified":false},"articles":[{"item_id":"6521238931546046979","url":"/item/6521238931546046979","title":"不挤牙膏就是爽!Intel首次给笔记本带来六核心"},{"item_id":"6521224156720136717","url":"/item/6521224156720136717","title":"马云带国际奥委会主席体验虚拟试衣镜 我看起来更帅了"},{"item_id":"6521220829907255815","url":"/item/6521220829907255815","title":"春节过年红包该发多少,这家公司给出的答案感人"},{"item_id":"6521158935930470926","url":"/item/6521158935930470926","title":"最快4月份推送!vivo公布安卓8.0适配计划:7款机型可升"}]}, feedInfo: { url: /api/pc/feed/, category: __all__, initList: [{"comments_count":305,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"苹果为什么突然召回iPhone7,所有7系列都在召回之列吗?","single_mode":true,"gallary_image_count":11,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6519680061472243976/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/5b0000083878b1e5c15d","group_id":"6519680061472243976"},{"comments_count":175,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"苹果现金储备达1.8万亿,为什么不大量收购公司,建立庞大的互联网帝国?","single_mode":true,"gallary_image_count":1,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6518969600913178888/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/39b40002927102af34cf","group_id":"6518969600913178888"},{"comments_count":153,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"苹果有什么软件让你相见恨晚?","single_mode":true,"gallary_image_count":8,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6518942462638031118/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/5e8b0001771119c02820","group_id":"6518942462638031118"},{"comments_count":23,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"苹果手机价格昂贵,为什么越来越多的人都喜欢使用苹果手机?","single_mode":true,"gallary_image_count":6,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6519634044097921293/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5b020007976edaed298a","group_id":"6519634044097921293"},{"comments_count":210,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"iPhone 6怎样关闭更新?","single_mode":true,"gallary_image_count":4,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6519716902590218503/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5e470011b1b53bccaef4","group_id":"6519716902590218503"},{"comments_count":0,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"iPhone手机系统iOS 9源代码泄露,有可能被黑客利用损害用户吗?","single_mode":true,"gallary_image_count":2,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6520460520011596040/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5fef00040c19b535526b","group_id":"6520460520011596040"},{"comments_count":10,"media_avatar_url":"//p10.pstatp.com/large/5b500000cee9b1a1df28","is_feed_ad":false,"is_diversion_page":false,"title":"iPhone里的“i”是什么意思吗?挨P的i?","single_mode":true,"gallary_image_count":5,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6519278230053061123/","source":"解读热点","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5e8b00049d3f9fcac85b","group_id":"6519278230053061123","is_related":true,"media_url":"/c/user/85343163421/"},{"comments_count":17,"media_avatar_url":"//p6.pstatp.com/large/382d0018cc84a1f9abc5","is_feed_ad":false,"is_diversion_page":false,"title":"2018年,你最应该跟踪的全球十大开源AI项目","single_mode":true,"gallary_image_count":11,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6519329774085603853/","source":"科技行者","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":5,"image_url":"//p1.pstatp.com/list/190x124/615900008e5e0dc57cbd","group_id":"6519329774085603853","is_related":true,"media_url":"/c/user/3999828589/"},{"comments_count":48,"media_avatar_url":"//p1.pstatp.com/large/46e70002c8b286020332","is_feed_ad":false,"is_diversion_page":false,"title":"2分钟告诉你应不应该升级iOS 11.3beta2","single_mode":true,"gallary_image_count":4,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6519779358565990926/","source":"亓纪的想法","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":18,"image_url":"//p3.pstatp.com/list/190x124/615f00028c5acaeba1f7","group_id":"6519779358565990926","is_related":true,"media_url":"/c/user/57845381695/"}] }, shareInfo: { shareUrl: https://m.toutiao.com/group/6520877332868104708/, abstract: 比较幸运的是,这些代码是老的iOS9版本,并且这些泄漏的源代码中,少了最核心的部分,所以是不会被有心人利用起来的。
小编推荐:欲学习电脑技术、系统维护、网络管理、编程开发和安全攻防等高端IT技术,请 点击这里 注册黑基账号,公开课频道价值万元IT培训教程免费学,让您少走弯路、事半功倍,好工作升职加薪!



免责声明:本文由投稿者转载自互联网,版权归原作者所有,文中所述不代表本站观点,若有侵权或转载等不当之处请联系我们处理,让我们一起为维护良好的互联网秩序而努力!联系方式见网站首页右下角。


鲜花

握手

雷人

路过

鸡蛋

相关阅读

最新评论


新出炉

返回顶部