Apple Says the Leaked iPhone Source Code is Outdated (cnet.com)
Apple has responded to security concerns surrounding leaked iPhone source code, pointing out that any potential vulnerabilities would be outdated. From a report: "Old source code from three years ago appears to have been leaked," Apple said in a statement, "but by design the security of our products doesn't depend on the secrecy of our source code. There are many layers of hardware and software protections built in to our products, and we always encourage customers to update to the newest software releases to benefit from the latest protections." The iBoot source code for iOS 9, a core part of what keeps your iPhones and iPads secure when they turn on, was leaked on GitHub, Motherboard first reported. The source code leak was considered a major security issue for Apple, as hackers could dig through it and search for any vulnerabilities in iBoot. Apple had used a DMCA notice to get the Github page hosting the leaked code taken down, but multiple copies of the code have already spread online.
That code may contain ROM source code, which can't be updated. It'd be for older chips, but if it's ROM, it's never out of date.
Funny thing is, with the source being closed you'd have to take their word for it.
If it does then it is outdated.
The entire source code for Android was leaked online.
Rumor has it Google was the one to leak it.
You can find the leaked code at https://source.android.com/
What iBoot needs is many eyes; they make all bugs shallow.
"but by design the security of our products doesn't depend on the secrecy of our source code." ...
" as hackers could dig through it and search for any vulnerabilities in iBoot. Apple had used a DMCA notice to get the Github page hosting the leaked code taken down,"
So its security doesn’t depend on being secret but let’s take it down quickly because its security depends on it being secret.
I guess Larry Nassar also did some encouraging then.
Teh G keeps much code secret, only for its use. Not even talking about the modem.
If you are actively maintaining it, it is outdated as soon as some programmer checks something new into what ever you use for source code management, which if you are Apple, likely happens multiple times a day for the development streams. Even a small group of developers doing agile (the right way) will be committing changes multiple times a day... Apple does releases every few months on average, so any code is out of date every quarter or so...
The question is really how long ago this code was actually in use.... Yesterday? last year? The year before?
"File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
Apple was the leaker?
..."Old source code from three years ago appears to have been leaked," Apple said in a statement...
This code screenshot has a copyright date of 2016. http://www.theregister.co.uk/2...
Apple also said that the security of their products does NOT depend on the secrecy of the source code.
Okay, Apple: then release all the source code. Duh. Obviously if that is their position, then open source could ONLY be a positive for security.
People buy Apple because of the hardware quality, brand recognition, and ease of use. Open sourcing the code isn't going to suddenly lead to a flood of competitors magically copying Apple's business model and taking all their sales.
Name a single product running AOSP.
Archos 43 Internet Tablet. Kindle Fire. Fire Phone. Every Android device intended for the People's Republic of China market.
Apple claims to support their phones for five years after the last date of manufacture for the product - https://support.apple.com/en-u...
The iPhone 4S ceased production in February 2016. Official Apple support stopped very shortly thereafter.
Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
That said people were holding the phone wrong. That said the slowdown was a "feature" and on and on.
So I wonder if there is a possibility that this could be used to chain another bootloader in order to get linux or even android to boot on some older phones?
"Freedom in the USA is not the ability to do what you want. It is the ability to stop others from doing what THEY want"
"The 4S was discontinued officially on September 9, 2014 following the announcement of the iPhone 6" (the Feb 2016 date was for 'developing markets' which presumably fall under a different policy)
The 5 year guarantee is for hardware service & customer support. As of today, iPhone 4S is still supported by Apple in that sense (see here: serviced ).
There is no guarantee that you'll continue getting software updates for 5 years. The last iPhone 4s-compatible iOS update was iOS 9.3.5, released on August 25, 2016, which is almost 5 years from the initial release of the iPhone 4S (October 4, 2011), and that's pretty typical (>4 years of software updates on the newest model).
Feel free to cite another major smartphone manufacturer that does better in terms of customer & hardware support lifetime and OS updates.
No the point is that you can't just take AOSP, build it and install it on any device.
Google is trying to fix that. Treble in Android 8 is an ABI allowing new versions of Android to install on top of the hardware abstraction layer provided by the manufacturer of an Android 8+ device. It'll be more like Windows or some GNU/Linux distributions, where the blobs are their own separate package and have their own test suite (Treble VTS on Android or HCK on Windows).
I can take the ubuntu source, build it and run it on just about any PC
And be without accelerated graphics, audio, WLAN, and suspend until you install blobs. Good luck building Debian or any other GNU/Linux distribution from source and installing it on an ASUS T100TA, for which many key blobs were never remade for Linux (source).
1. Apple has never claimed they would provide 5 years of software updates on iPhones from the last point of manufacture. If you have a cite to show otherwise then please post it.
2. No major phone manufacturer provides a guarantee of 5 years of software updates, Apple is the clear leader in software update lifetime for phones--and it's not close.
3. The SW on an iPhone 4S continues to work just fine, it's just stuck at iOS 9.3.5 and won't benefit from new features.
4. Nobody is forcing you to buy an iPhone, why do you care so much what phone other people use?
Apple probably released it themselves to scare users into buying the latest and expensivest.