Slashdot Mirror
Apple Says the Leaked iPhone Source Code is Outdated (cnet.com)
Apple has responded to security concerns surrounding leaked iPhone source code, pointing out that any potential vulnerabilities would be outdated. From a report: "Old source code from three years ago appears to have been leaked," Apple said in a statement, "but by design the security of our products doesn't depend on the secrecy of our source code. There are many layers of hardware and software protections built in to our products, and we always encourage customers to update to the newest software releases to benefit from the latest protections." The iBoot source code for iOS 9, a core part of what keeps your iPhones and iPads secure when they turn on, was leaked on GitHub, Motherboard first reported. The source code leak was considered a major security issue for Apple, as hackers could dig through it and search for any vulnerabilities in iBoot. Apple had used a DMCA notice to get the Github page hosting the leaked code taken down, but multiple copies of the code have already spread online.
I agree that this is misinformation, or perhaps disinformation. Apple is trying to avoid a knee-jerk reaction from investors who don't understand what this actually means. I can't really blame them. Tech speculators are superstitious and foolish.
Cloudiot: A person who does not see offsite storage as a way to lose control over access to his or her own data.
The entire source code for Android was leaked online. Rumor has it Google was the one to leak it.
You can find the leaked code at https://source.android.com/
The difference is that Android's source code has been out there and scrutinized by many people and organizations. Apple's has only been scrutinized by Apple until now. Even if significant amounts of the code are outdated, it could give people a better idea of what kind of attacks may be possible. Plus the fact that it is news may spur more attention to IOS exploits, if only out of curiosity.
Even those who arrange and design shrubberies are under considerable economic stress at this period in history.
If you are actively maintaining it, it is outdated as soon as some programmer checks something new into what ever you use for source code management, which if you are Apple, likely happens multiple times a day for the development streams. Even a small group of developers doing agile (the right way) will be committing changes multiple times a day... Apple does releases every few months on average, so any code is out of date every quarter or so...
The question is really how long ago this code was actually in use.... Yesterday? last year? The year before?
"File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
..."Old source code from three years ago appears to have been leaked," Apple said in a statement...
This code screenshot has a copyright date of 2016. http://www.theregister.co.uk/2...