Bitcoin Forum
May 06, 2024, 02:10:19 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Warning: One or more bitcointalk.org users have reported that they strongly believe that the creator of this topic is a scammer. (Login to see the detailed trust ratings.) While the bitcointalk.org administration does not verify such claims, you should proceed with extreme caution.
Pages: [1]
  Print  
Author Topic: XcodeGhost作者凌晨现身微博并公开源码 称只是实验项目  (Read 618 times)
nextblast (OP)
Hero Member
*****
Offline Offline

Activity: 658
Merit: 500



View Profile
September 19, 2015, 02:52:36 AM
 #1

XcodeGhost事件的爆出着实让全国的iOS应用开发者和用户吓出一身冷汗,今天凌晨4:40分,该事件的始作俑者以@XcodeGhost-Author的身份在新浪微博贴出致歉声明,称其只是一个实验性项目,并没有任何包含威胁性的行为。并公开了源码,从源码看可信度较高。微博全文如下:

微博原文访问入口:

http://weibo.com/u/5704632164

"XcodeGhost" Source 关于所谓”XcodeGhost”的澄清

首先,我为XcodeGhost事件给大家带来的困惑致歉。XcodeGhost源于我自己的实验,没有任何威胁性行为,详情见源代码:https://github.com/XcodeGhostSource/XcodeGhost

所谓的XcodeGhost实际是苦逼iOS开发者的一次意外发现:修改Xcode编译配置文本可以加载指定的代码文件,于是我写下上述附件中的代码去尝试,并上传到自己的网盘中。

在代码中获取的全部数据实际为基本的app信息:应用名、应用版本号、系统版本号、语言、国家名、开发者符号、app安装时间、设备名称、设备类 型。除此之外,没有获取任何其他数据。需要郑重说明的是:出于私心,我在代码加入了广告功能,希望将来可以推广自己的应用(有心人可以比对附件源代码做校 验)。但实际上,从开始到最终关闭服务器,我并未使用过广告功能。而在10天前,我已主动关闭服务器,并删除所有数据,更不会对任何人有任何影响。

愿谣言止于真相,所谓的"XcodeGhost",以前是一次错误的实验,以后只是彻底死亡的代码而已。

需要强调的是,XcodeGhost不会影响任何App的使用,更不会获取隐私数据,仅仅是一段已经死亡的代码。

再次真诚的致歉,愿大家周末愉快。
1714961419
Hero Member
*
Offline Offline

Posts: 1714961419

View Profile Personal Message (Offline)

Ignore
1714961419
Reply with quote  #2

1714961419
Report to moderator
1714961419
Hero Member
*
Offline Offline

Posts: 1714961419

View Profile Personal Message (Offline)

Ignore
1714961419
Reply with quote  #2

1714961419
Report to moderator
There are several different types of Bitcoin clients. The most secure are full nodes like Bitcoin Core, which will follow the rules of the network no matter what miners do. Even if every miner decided to create 1000 bitcoins per block, full nodes would stick to the rules and reject those blocks.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714961419
Hero Member
*
Offline Offline

Posts: 1714961419

View Profile Personal Message (Offline)

Ignore
1714961419
Reply with quote  #2

1714961419
Report to moderator
1714961419
Hero Member
*
Offline Offline

Posts: 1714961419

View Profile Personal Message (Offline)

Ignore
1714961419
Reply with quote  #2

1714961419
Report to moderator
1714961419
Hero Member
*
Offline Offline

Posts: 1714961419

View Profile Personal Message (Offline)

Ignore
1714961419
Reply with quote  #2

1714961419
Report to moderator
v0yager
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500



View Profile
September 20, 2015, 06:02:49 AM
 #2

1.私自修改官方xcode 编译器 2.诱导开发者下载山寨编译器 3.利用编译器往app中植入恶意代码,获取用户信息,并传至自己的服务器/*且不说你获取的是不是敏感的用户信息*/ 4.你还在这光明正大的 澄清",可知你这种行为已经触犯了法律?被逮到了就说只是获取了基本的系统信息,如果没被发现是不就获取隐私了
Big0Bang
Sr. Member
****
Offline Offline

Activity: 476
Merit: 250



View Profile
September 20, 2015, 03:27:24 PM
 #3

需要强调的是,XcodeGhost不会影响任何App的使用,更不会获取隐私数据,仅仅是一段已经死亡的代码。
Abbey_j
Sr. Member
****
Offline Offline

Activity: 322
Merit: 250



View Profile
September 21, 2015, 03:58:57 AM
 #4

其实问题没那么严重,过分炒作了
umairsaleem
Hero Member
*****
Offline Offline

Activity: 658
Merit: 500



View Profile
September 21, 2015, 03:03:58 PM
 #5

愿谣言止于真相,所谓的"XcodeGhost",以前是一次错误的实验,以后只是彻底死亡的代码而已。
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!