• Ever wanted an RSS feed of all your favorite gaming news sites? Go check out our new Gaming Headlines feed! Read more about it here.
  • We have made minor adjustments to how the search bar works on ResetEra. You can read about the changes here.

Syriel

Banned
Dec 13, 2017
11,088
This is great news for anyone who believes in RE, bug hacking, vulnerability exposure, etc.

This isn't just limited to Apple and could help ensure that copyright can't be used to block research.

In a ruling that has wide-reaching implications for iPhone security research and copyright law, a federal judge in Florida threw out Apple's claims that Corellium had violated copyright law with its software, which helps security researchers find bugs and security holes on Apple's products.

Corellium, co-founded in 2017 by husband and wife Amanda Gorton and Chris Wade, was a breakthrough in security research because it gave its customers the ability to run "virtual" iPhones on desktop computers. Corellium's software makes it unnecessary to use physical iPhones that contain specialized software to poke and prod iOS, Apple's mobile operating system.

The judge in the case ruled that Corellium's creation of virtual iPhones was not a copyright violation, in part because it was designed to help improve the security for all iPhone users. Corellium wasn't creating a competing product for consumers. Rather, it was a research tool for a comparatively small number of customers.

"Weighing all the necessary factors, the Court finds that Corellium has met its burden of establishing fair use," Smith wrote in Tuesday's order. "Thus, its use of iOS in connection with the Corellium Product is permissible."

Alexander Urbelis, a partner at the Blackstone Law Group in New York, said Tuesday's court decision could lead to more innovation in cybersecurity research.

"This ruling makes it possible for cybersecurity researchers to virtualize and test distinct components of third-party software for security vulnerabilities, which is something that has been lacking in the security community in part because of the fear of legal liability," he said. For instance, Urbelis, who was once acting chief security officer for the NFL, said "unfettered vulnerability hunting" could help stop big "supply chain" hacks such as the one that affected Solar Winds. That recently discovered hack allegedly gave Russian hackers access to a vast trove of U.S. government data.

Source:
 

ColdSun

Together, we are strangers
Administrator
Oct 25, 2017
3,291
Good. I'm glad this didn't go in Apple's favor.