Apple opens rego for security research device program
Do you want to get a free iPhone just so you can hack the device? Apple has you covered.
Apple’s Security Research Device program provides security researchers with an iPhone specially designed for them. The phones are “specially fused” and come without any of the usual iPhone security features.
Researchers can access the shell, run any tool they want, and even manipulate the iPhone kernel.
“Using the SRD allows you to confidently report all of your findings to Apple without the risk of losing access to iOS’ internal security layers,” Apple said in a statement. “In addition, any vulnerabilities you discover with the SRD are automatically considered for Apple Security Bounty.”
But of course there are some caveats.
The Security Research Device, or SRD, is provided for use in a controlled location and is provided for a 12-month loan period that may be renewed as needed. The device will remain the property of Apple.
The SRD is not intended for daily use and should not be used outside of the aforementioned closed environment. All errors must be reported to Apple or any third party responsible for the defective code. Any faults found without using the SRD must also be reported.
Apple is looking for researchers with a “proven track record of success” when it comes to finding bugs and who are not Apple employees. Researchers must also be of legal age in their jurisdiction.
Applications are open until October 31, 2023.
