{"id":360,"date":"2014-01-06T12:25:20","date_gmt":"2014-01-06T12:25:20","guid":{"rendered":"http:\/\/kevinbillington.com\/wordpress\/?p=360"},"modified":"2017-08-29T13:52:19","modified_gmt":"2017-08-29T12:52:19","slug":"did-apple-know-about-nsas-iphone-hack-program","status":"publish","type":"post","link":"https:\/\/kevinbillington.com\/site\/?p=360","title":{"rendered":"Did Apple know about NSA\u2019s iPhone hack program?"},"content":{"rendered":"

By Rebecca MacLary,\u00a0http:\/\/www.apppicker.com<\/a>\u00a0on 2nd January 2014.<\/p>\n

\"\"<\/p>\n

On Tuesday, Apple responded to\u00a0reports<\/a>\u00a0that the National Security Agency had devised a way to hack into iPhones. The hacking system, being called \u201cDROPOUTJEEP,\u201d is a software implant that allows users to access data from iPhones such as voicemail messages, geolocation, contact lists and text messages. The implant also allows a user to push or pull info onto the iPhone. It can also use the phone\u2019s mic and camera to turn the phone into a \u201chot mic.\u201d The system uses malware to help the hackers gain access.<\/p>\n

The only good news that came from the report is that the information is five years old and that a user would need to be in close proximity to the iPhone to install the program. Slides show a date of 2007.<\/p>\n

The bad news is that the report said that future releases will have remote installation capability.<\/p>\n

The initial report from Der Spiegel did not indicate that Apple had worked with the spy agency.<\/p>\n

Apple\u2019s statement on Tuesday said the company has never worked with the National Security Agency to make a backdoor in any of its products. Not only that, but Apple was not aware of the DROPOUTJEEP system. The company said it will continue to protect its customers from \u201cmalicious hackers,\u201d no matter who is behind the security attacks.<\/p>\n

The report was shared by security researcher Jacob Appelbaum, who is closely tied to Edward Snowden and Wikileaks. He opened his statements at the Chaos Communication Congress in Germany by saying his findings are \u201cwrist-slitting depressing.\u201d With NSA\u2019s claims that its efforts are 100 percent successful on any targeted iOS device, it\u2019s hard for him to believe that Apple didn\u2019t participate.<\/p>\n

So what is a person to think? Did Apple participate? And are you surprised that the spy agency has this ability? I mean, really. It\u2019s the NSA, after all.<\/p>\n

It\u2019s really not surprising that the NSA can hack into iPhones; there have always been a laundry list of severe vulnerabilities when it comes to the iPhone, including with iOS 7. Usually, to gain control of someone\u2019s iPhone in the manner described above, you need two vulnerabilities: a privilege escalation vulnerability and an arbitrary code execution vulnerability. These vulnerabilities work together to allow a user to install whatever software is desired. This is how jailbreaking works, after all. Since jailbreaking is perfectly possible, you really can\u2019t deny the fact that the reality of DROPOUTJEEP is likely.<\/p>\n

Even though some security vulnerabilities were fixed in iOS 7.0.1, including those that allow code execution and privilege execution, one would have to assume that NSA has access to vulnerabilities we don\u2019t know about or have not yet been patched.<\/p>\n

I don\u2019t think that the NSA yet has an over-the-air way to compromise the security of any iPhone; someone would have surely found that weakness and we would have heard about it. I also don\u2019t think that Apple necessarily has co-operated with NSA in this endeavor; wouldn\u2019t it be against the company\u2019s best interests? I mean, if it was revealed that Apple did have a hand in it, the company would lose its customer base.<\/p>\n","protected":false},"excerpt":{"rendered":"

By Rebecca MacLary,\u00a0http:\/\/www.apppicker.com\u00a0on 2nd January 2014. On Tuesday, Apple responded to\u00a0reports\u00a0that the National Security Agency …<\/p>\n","protected":false},"author":1,"featured_media":368,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[90],"tags":[93,135,136,134],"class_list":["post-360","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-apple","tag-hack","tag-iphone","tag-nsa"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/kevinbillington.com\/site\/wp-content\/uploads\/2014\/01\/olyefh1pox.png?fit=600%2C600&ssl=1","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p45vMv-5O","jetpack_likes_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/kevinbillington.com\/site\/index.php?rest_route=\/wp\/v2\/posts\/360","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kevinbillington.com\/site\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kevinbillington.com\/site\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kevinbillington.com\/site\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kevinbillington.com\/site\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=360"}],"version-history":[{"count":5,"href":"https:\/\/kevinbillington.com\/site\/index.php?rest_route=\/wp\/v2\/posts\/360\/revisions"}],"predecessor-version":[{"id":1131,"href":"https:\/\/kevinbillington.com\/site\/index.php?rest_route=\/wp\/v2\/posts\/360\/revisions\/1131"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kevinbillington.com\/site\/index.php?rest_route=\/wp\/v2\/media\/368"}],"wp:attachment":[{"href":"https:\/\/kevinbillington.com\/site\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=360"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kevinbillington.com\/site\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=360"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kevinbillington.com\/site\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=360"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}