hn.today

Apple Security Research Device

security.apple.com191 points152 comments
Screenshot of Apple Security Research Device

Apple’s Security Research Device Program gives approved researchers access to a specially configured iPhone for investigating iOS security without first bypassing its protections. The device provides shell access, custom tools and entitlements, kernel customization, and access to software previews, security beta projects, and a research community. Researchers may examine iOS and iPhone components, but Apple Pay and third-party apps are excluded. Findings discovered with the device are automatically considered for Apple Security Bounty, including possible bonuses for issues found in preview or beta software.

The device is a renewable 12-month loan and remains Apple’s property. It must be used only for security research in a controlled setting, kept on the participant’s premises, and accessed only by people authorized by Apple. Vulnerabilities found or verified using it must be reported promptly to Apple and, where relevant, the third-party code owner. Applicants need a demonstrated record of finding security issues, must be of legal adult age and based in an eligible region, and cannot currently work for Apple or have done so in the previous 12 months. Places are limited; applications are open through October 30, 2026. Organizations may apply through an authorized representative and must identify everyone who will use the device.

Read on security.apple.com152 comments on Hacker News

Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.

More in Security

1984: The Canadian Edition

1984: The Canadian Edition

Canada’s proposed Bill C-22 would let officials compel digital services to assist surveillance and create law-enforcement access, raising concerns about security and privacy. Signal, NordVPN, Windscribe, and other companies say they could limit services or leave Canada if the bill passes. (btxx.org)

The daily digest

Today's best Hacker News stories, summarized and screenshotted, one email a day.