"XcodeGhost" Source
首先,我为XcodeGhost事件给大家带来的困惑致歉。XcodeGhost源于我自己的实验,没有任何威胁性行为,详情见源代码:https://github.com/XcodeGhostSource/XcodeGhost
所谓的XcodeGhost实际是苦逼iOS开发者的一次意外发现:修改Xcode编译配置文本可以加载指定的代码文件,于是我写下上述附件中的代码去尝试,并上传到自己的网盘中。
在代码中获取的全部数据实际为基本的app信息:应用名、应用版本号、系统版本号、语言、国家名、开发者符号、app安装时间、设备名称、设备类型。除此之外,没有获取任何其他数据。需要郑重说明的是:出于私心,我在代码加入了广告功能,希望将来可以推广自己的应用(有心人可以比对附件源代码做校验)。但实际上,从开始到最终关闭服务器,我并未使用过广告功能。而在10天前,我已主动关闭服务器,并删除所有数据,更不会对任何人有任何影响。
愿谣言止于真相,所谓的"XcodeGhost",以前是一次错误的实验,以后只是彻底死亡的代码而已。
需要强调的是,XcodeGhost不会影响任何App的使用,更不会获取隐私数据,仅仅是一段已经死亡的代码。
再次真诚的致歉,愿大家周末愉快
I apologize for bringing confusion to the community about XcodeGhost event. XcodeGhost is originated from my own experiment without malicious behavior, and the source code is here https://github.com/XcodeGhostSource/XcodeGhost
The so called XcodeGhost is actually our fucking fucked developers' accidental discovery which is that changing compiling configuration for Xcode enables us to load specific code snippet. Then I wrote the code as what is in this repository and uploaded to my own online disk. The information accessed by this code is only basic App information without any exception: Application Name, Application Version Number, IOS Version Number, Language, Country Name, Developer ID, Device Name, Device Type. What needs to be pointed here is that, I selfishly injected code for advertising my own App which can be verified by comparing the source code here. However, I never used the advertising function from starting the server to shutting it down. And 10 days ago, I had already shut down the server and deleted all gathered data. It will never affect any one. I wish that rumors could stopped by truth, that so called "XcodeGhost" was just an experiment by mistake, and it will be dead code from now on. I also want to emphasize that XcodeGhost doesn't affect usage of any App, let alone accessing user's privacy information.
It's just a piece of dead code.
Wish all of you a good weekend, with my sincere apology again!