The anonymous sources say that they were part of a group of five individuals who were given the leaked iBoot code. However, Apple did not explain how the source code ended up being exposed to the public.
Motherboard was the first to report the leak of the iOS source code, which was for an iOS process named "iBoot".
Apple keeps code like this firmly under lock and key, in a form of 'security through obscurity', as it is essential to the core functionality of iOS.
Since Motherboard published the news, Apple has indeed confirmed that the code for its mobile phone operating system has been leaked online.
Some iOS source code got leaked at GitHub raising possible security or hacking concerns with devices now in use. Bugs in the iOS boot process are the most valuable ones to be covered by the company's bug bounty program, receiving a maximum payout of $200,000.
On Wednesday, someone posted what experts recognized to be source code for "iBoot", a main component of the iPhone's operating system, on the software development platform GitHub. Now that it gathered attention, Apple filed a copyright takedown request to Github, forcing the site to take down the code. According to Apple's own usage share figures, seven percent of active iOS devices are current running iOS 9 or below. Instead, while working at Apple, they were encouraged to use their access to help their friends in the jailbreaking community with their security research by leaking them internal Apple code.
Unfortunately for the company, copies of the code have already become available to many, and it remains to be seen if those prove to be disruptive to iOS devices. As is now evident, it was within just hours of the revelation of the code that Apple has sent a legal notice requesting immediate removal of the same.
Apple is known for keeping its iOS source code private to secure its devices, including iPhones though some parts of iOS and MacOS have been made open source over the years. There are no details on how ZioShiba got the iBoot source code, but after seeing it, we're certain it's the real deal. Many people ignored it because the user had a short history of posts.