Connect with us

Tech News

Apple Sues Corellium for Selling Access to Cloud-Based ‘Perfect Replicas’ of iOS

Published

on

Apple CEO Tim Cook at the 2019 Apple Worldwide Developers Conference.
Photo: Jeff Chiu (AP)

Apple is suing a company, Corellium LLC, that it says is illegally reselling virtual copies of its iOS operating system under the pretense of legitimate security research, Bloomberg reported on Thursday.

Corellium advertises itself as “the first and only platform to offer iOS, Android, and Linux virtualization on ARM.” Per TechCrunch, the company allows users to interact with simulated iOS devices such as an iPhone or iPad via a web portal—which allows for researchers to do things like quickly compare iOS versions to see how long a bug has persisted, or simply boot up another instance if their meddling renders the virtual device inoperable. As TechCrunch noted, prior coverage of Corellium has emphasized that some of its founders have roots in the iOS jailbreaking scene.

According to Bloomberg, Apple accused Corellium in court filings of copying its “operating system, graphical user interface and other aspects of the devices without permission” and additionally violating copyright by selling access to the simulated iOS devices. While Corellium says its goal is enabling white hat hackers (those whose intention is discovering and reporting rather than exploiting vulnerabilities), Apple wrote in the suit that the company’s “true goal is profiting off its blatant infringement. Far from assisting in fixing vulnerabilities, Corellium encourages its users to sell any discovered information on the open market to the highest bidder.”

Apple further accused Corellium of copying new versions of iOS and not implementing any requirements that users report discovered vulnerabilities in its products to Apple, Bloomberg wrote:

“For a million dollars a year, Corellium will even deliver a ‘private’ installation of its product to any buyer,” Apple said. “There is no basis for Corellium to be selling a product that allows the creation of avowedly perfect replicas of Apple’s devices to anyone willing to pay.”

Apple said “enough is enough” when it comes to Corellium advertising its products, including ones that compete with the Apple Developer Program, according to the complaint.

Apple’s lawsuit closely follows the expansion of their bug bounty program with an increased maximum payout of $1 million for critical vulnerabilities, such as ones that could allow an attacker to gain total control of a device with no interaction by a user, as well as the distribution of “dev” iPhones with special access to trusted security researchers.

Corellium’s intellectual property policy states that the company “respects the intellectual property rights of others and expects its users to do the same.” However, Ars Technica noted its website does not explain how the company’s products comply with Apple copyrights.

According to Motherboard, the move has angered some in the cybersecurity community, comparing the move to a theoretical Microsoft crackdown on virtual machines. As VentureBeat noted, Apple has so far declined to go after the relatively small and mostly hobbyist community running so-called “Hackintosh” devices—essentially any computer running macOS outside of Apple’s approved limitations—but it ensured that other than screen mirroring that there is no way for researchers to bring “iPhone’s or iPad’s full interface onto a computer screen for even indirect user manipulation.” Apple appears to be targeting Corellium because appears to be “selling emulated iOS access for profit,” VentureBeat argued, as well as its desire for total “control over how and where its operating systems can be run.”

One Apple employee speaking under the condition of anonymity told Motherboard that “You really couldn’t ask for a lawsuit more than Corellium has”:

The employee explained that the way Apple licenses its software, you can’t run a virtual version of MacOS on VMware or other virtualization platforms if it’s not running on a Mac computer. Corellium does something similar, but with iOS.

According to Ars Technica, Apple wrote in the lawsuit that Corellium has advertised itself “as an alternative to purchasing ‘jailbroken iPhones on eBay” and accused it of working with jailbreakers and exploit brokers. Corellium says on its website that it indemnifies end users against charges that its software violates copyright, Ars Technica added.

In its lawsuit, Apple is asking for an order blocking the sales of Corellium’s Apple product, for the company to notify its customers they are violating Apple copyrights, destruction of any infringing products, and damages, Bloomberg wrote.

Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech News

Witcher 3 Update Allows You To Transfer PC Saves To Switch

Published

on

By

The Witcher 3: Wild Hunt on Switch got an update today. It adds new graphical options, touch control for Gwent, and the ability to port your save between Switch and PC.

Rumors of the patch first spread on Reddit, but developer CD Projekt Red has since confirmed it. According to CDPR, update 3.6 includes:

  • Added touch control support.
  • Added save file integration with GOG, Steam and versions of the game for Switch from different regions.
  • Added more text languages (in selected regions).
  • Added more graphical options.
  • Added multiple performance optimizations.
  • Fixed various visual and functional bugs.Various gameplay and crash fixes.

When I load up The Witcher 3 on Switch now, there’s a menu option for “Cloud Saves” that gives me the option to upload a file from Steam or GOG. To upload from Steam, I entered my Steam login; my many, many PC saves promptly appeared on my Switch. Save transfer appears to go both ways: The menu has an “upload” function that, in the case of my Steam save, will “upload your local save to Steam cloud.” CDPR’s post notes that “Mod-related bugs and blockers might get transferred from a modded PC game save file,” as well as the fact that the system might have trouble finding your save if you renamed it.

In terms of graphics tweaks, the once-simple options of “motion blur” and “blur” have been expanded to include bloom, depth of the field, light shafts, foliage visibility, anti-aliasing, and more. The Switcher can’t really compare to the game on a PC or standard console, but it’s nice to have more options.

CDPR confirmed to Kotaku that sharing your saves is only possible between PC and Switch, so Xbox and PS4 players who want to transfer their saves between platforms are out of luck. But for me, who enjoys The Witcher 3 in its PC glory, I’m excited to bring my overpowered Geralt and his great haircut to my Switch. 



Source link

Continue Reading

Archives

Categories

Trending