Remix.run Logo
▲ runjake 5 hours ago

1. Try to obtain an Apple Security Research Device (SRD)[1] or a jailbroken iPhone.

2. Set up TLS MITM between the device and the Internet. Install the cert on the device.

3. On the device, disable certificate pinning for Apple's apps.

4. Use the device normally, observe all the telemetry flowing to Apple.

You might be a little shocked at the amount of... personal and usage details sent to Apple FQDNs.

Remember: Privacy is a feature of the Apple Marketing dept -- not SWE!

  1. https://security.apple.com/research-device/
▲mmmlinux 5 hours ago | parent | next [-]

Do you have any more info. Or are you just going to hand wave away all the actual details, suggesting we do the research our self.

▲danudey 5 hours ago | parent | prev [-]

Let's please dispense with the "trust me bro" paranoia takes. Link to something that demonstrates your point or you're just making baseless accusations that discourage people from trusting actual privacy and security research.

▲newspaper1 5 hours ago | parent [-]

You can call Apple support and they can remotely take control of your entire phone. They have access to everything if they want it.

▲Bud 4 hours ago | parent [-]

[dead]