Affiliate Disclosure
If you buy through our links, we may get a commission. Read our ethics policy.

Santander, intel contractor L3Harris Technologies drawn into Apple vs Corellium battle [u]

Corellium software virtualizes iOS and lets researchers look for vulnerabilities

Last updated

A new development in the Apple versus Corellium legal battle has drawn two high-value private companies — L3Harris Technologies and Santander Bank — into the fight for using the iPhone virtualization software in question.

Apple subpoenaed the companies to hand over all the communications between their companies and Corellium, how they used the iPhone virtualizing technology, and all contracts and information about Chris Wade, Corellium's cofounder. Apple believes that this data will aid Apple's claim that Corellium's software is being used in violation of the DMCA by creating an exact clone of iOS for jailbreaking and security breaching services.

The subpoena for L3Harris targets its subsidiary Azimuth Security, which is known for seeking vulnerabilities in iPhone software in its role as a defense contractor. Acquisition of information about known iPhone vulnerabilities could not only aid Apple in the court case, but help them close up previously unknown vulnerabilities.

Forbes claims knowledge of court filings not publicly available as of yet. The publication claims that Apple targeted Santander Bank after it used the software in a trial. The nature of the trial or what a bank would need with iOS virtualization software is unknown, however.

Santander Bank went on the record in saying they are not currently a Corellium client. A Tweet from bank head of research, Dan Cuthbert, suggested they were at least in possession of it.

In a follow up to the tweet, Daniel Cuthbert continued to remark that Apple was making a poor move in suing Corellium. That the software provided streamlined testing by removing clunky physical devices.

This clash has no end in sight. In other court filings, it was disclosed that Apple attempted to purchase Corellium in 2018, and the offer was declined. Since then, Corellium and Apple seem to be fighting in and out of the courtroom, with Corellium's lawyer describing Apple as a "bully."

Corellium's lawyer David Hecht says that "we will continue to expose Apple's bad faith tactics and, ultimately, prevail against it."

Following our initial publication, Hecht, the Managing Partner of Pierce, Bainbridge, Beck, Price & Hecht, reached out to AppleInsider to comment on Apple's filings.

"Apple's subpoenas to Santander and Harris appear to have been issued solely to harass Corellium and harm its business relationships. Apple is trying to intimidate a Corellium supporter by subpoenaing his employer, Santander, even though Santander has no relationship to Corellium," said David Hecht to AppleInsider. "Apple has been trying to harm Corellium's business and reputation since its failed acquisition of Corellium in 2018 and is now issuing subpoenas to Corellium's client, Harris. Corellium will be moving to quash both subpoenas."

Apple also stated that Corellium is harassing its own people, citing an incident with their SVP of software engineering, Craig Federighi. Forbes notes that the SVP met with Corellium cofounder Harris multiple times, yet Apple says there are others in the company more knowledgeable about their dealings with Corellium.

This case continues, amidst calls for Apple to submit to government requests to weaken security and encryption. Apple's viewpoint is that the Corellium software is an unlawful engineering of iOS, and seeks to prevent its spread while saying that it is trying to protect not just its own intellectual property, but the core of iOS encryption as well.

Update 3:50 P.M. Eastern time: Added further comment from David Hecht.



6 Comments

chasm 10 Years · 3624 comments

Santander bank saying they are not currently a Corellium client is a tacit admission that they were one previously, and Correllium's lawyer just proved he's a weasel (not that we couldn't have guessed that) by pretending that word doesn't exist in their response, or that their employee did not directly infer usage of it in his tweet.

seanismorris 8 Years · 1624 comments

I was initially anti Corellium.  I still think Apple will win, but they’re not going to walk away clean.

I’d like to see the documents related to their buyout offer.  Apple is coming across as 2 faced.

ajminnj 15 Years · 40 comments

I was initially anti Corellium.  I still think Apple will win, but they’re not going to walk away clean.

I’d like to see the documents related to their buyout offer.  Apple is coming across as 2 faced.

While it could be two faced, don't forget that Sony bought the Virtual Game Station from Connectix in order to kill what they saw as an infringement on their copyrights.  The offer could have been an attempt to do that. 

steven n. 13 Years · 1229 comments

As an outspoken opponent of the DMCA I hope Corellium wins this one. It seems they have not made so much a clone of iOS but an amazing clone of the actual hardware which can then run iOS.

Security needs to be an adversarial cat and mouse game in order for it to improve and the DMCA seriously limits this. 

mjtomlin 20 Years · 2690 comments

I was initially anti Corellium.  I still think Apple will win, but they’re not going to walk away clean.

I’d like to see the documents related to their buyout offer.  Apple is coming across as 2 faced.

Yeah, I’d guess that Apple offered to buy the company instead of suing them. The company said no. So here we are. That’s not Apple being two-faced, it’s called being pragmatic. They have to sue in  order to preserve ownership and control of their technology. There is no way to virtualize an iOS device without infringing on proprietary IP. This is why we don’t see iPhone clones... Most of the tech and components are Apple-only and only sold to Apple by suppliers.