upvote
Apple Security Research Device

(security.apple.com)

If you sign up to this program and use one of their devices for 'research', then you are bound by contract to report any security bugs to them and only them (unless the bug is in a 3rd party app). I see this as a pretty sneaky way of avoiding your security vulnerabilities going public and all the bad media exposure that goes along with it.

It is giving security researchers something they have always wanted in return for their silence. Another way to put it is bribery.

reply
Create a problem, and then heroically fight to make a solution.

This shouldn't exist in the first place. There would be no need for it if Apple didn't insist on "we own all the iPhones, our users just get to tap at them".

If you could just unlock the bootloader, re-enable SWD and do what you want with an iPhone that you actually own, there would be no need for this restrictive program at all.

reply
It wouldn’t be the most secure consumer phone then, would it?
reply
The fact so many technical people believe that security and freedom are mutually exclusive, and pay for that lie, is proof the Apple propaganda is working exactly as intended.
reply
It's not that secure anyway, as evidenced by the multiple 1-click exploits going around on X this week.
reply
It would be. You would have more eyeballs if you had an open bootloader instead of this program they're offering.
reply
How do we know it is, besides apple marketing?

Given how many high profile politicians, journalists and businessmen have gotten their phones hacked, the iPhone is not unhackable.

reply
Why not? In the default locked state it's just as secure as before, and unlocking it would require both physical access and your Apple ID.
reply
By definition, it could be more secure if people actually would be able to inspect it. Is it regardless the most secure? Hard to say. GrapheneOS is quite secure, probably more.
reply
GrapeheneOS are both operating systems where a single party has the signing keys to run any software they want on your device at any time, and even remotely brick it.

I for one am not comfortable with anyone having that much power over something that is supposed to be mine, so they are the same to me. Untrustable black boxes.

reply
iPhone supports making and receiving credit card payments. Payment infrastructures demand tamper proofing for devices that handle payments.
reply
This is also why my current Macbook will be my last, I'm going back to Linux. No matter how superior M-series chips are the amazing hardware can't make up for the unbearable nanny software. So tired of Apple machines telling me what I should do. It's supposed to be the other way around.
reply
Almost every employer in my career ignored that I want to choose my hardware, and gave me a macbook, and I got them to compromise by giving me a pass to run whatever software I wanted. Every time I installed Linux on it, sometimes porting it myself with custom patches, on their time.

The greatest middle finger to Apple is freeing their hardware. Been at it since I built and booted a uCLinux kernel on my first iPod I got as a kid.

reply
Surely everyone sees this as an obvious trap to get researchers to sign NDAs for all research in advance, right?

Do not fall for it. Publish everything publicly after appropriate embargo periods.

reply
The title should be "Apple bribes security researchers with free devices"
reply
"Help us make the nooses we put around your necks tighter."
reply
Does this include... Israel being able to pwn any Apple device ?
reply
Israel can probably pwn any normal mobile phone because they invested a lot in this area, and has no reason to be afraid to do it. They are always shielded from consequences.
reply
Cool. Where can I buy one.
reply
Just gotta sign away your soul.
reply
well that's cheaper than expected!
reply
the periodic terms and conditions updates are hell though.
reply