Note that, unlike Corellium, this isn't about emulating an iPhone. Apple is providing an iOS kernel for Virtualization.framework in PCC/cloudOS images and this project pairs it with the iOS user-space and patches to make everything run. Applications can very easily tell it apart from the real thing.<p>More details here: <a href="https://github.com/wh1te4ever/super-tart-vphone-writeup" rel="nofollow">https://github.com/wh1te4ever/super-tart-vphone-writeup</a>
[flagged]
The handle is publicly[1] tied to a South Korean security researcher, and there’s no evidence that it refers to white supremacy.<p>[1] “CVE-2025-43347: JZ, Seo Hyun-gyu (@wh1te4ever)”<p><a href="https://support.apple.com/en-us/125115?utm_source=chatgpt.com" rel="nofollow">https://support.apple.com/en-us/125115?utm_source=chatgpt.co...</a>
Even if this person <i>is</i> South Korean and didn’t just adopt a pseudonym as a fig leaf, that’s not an affirmative defense against being a white supremacist.<p>The evidence is <i>prima facie</i>, it’s right there in the name. “14” is a famous-enough racist dog whistle it’s got a Wikipedia page, and when paired with “white forever” it ceases to be a dog whistle.
You are expecting everyone to be as aware of these issues as you are. I don't think white supremacy has as large of a share of the mindspace in south korea as you think - not every issue (even if it has a wikipedia page!) is burned into everyone's mind across the globe. But I am happy to hear that every time you pick a username, you make sure it is free of dog whistles in all cultures and that the letters and numbers cannot be picked out or rearranged in a way that hints at one.
> during iOS setup, don't pick Japan or the EU as your region (extra regulatory checks the VM can't satisfy)<p>I'm curious what are these checks
It will be to prevent access to third-party app stores as both the EU and Japan legislated they must be allowed.<p>> In a support document about alternative app marketplaces in the EU, Apple explained that “device eligibility for alternative app marketplaces is determined using on-device processing with only an indicator of eligibility sent to Apple.” In practice, iOS users in the EU who want to install alternative marketplaces will need to set the country or region of their Apple ID to an eligible country or region. Moreover, they will also need to be physically located in supported EU countries.<p>> In the case iOS users in the EU leave eligible regions, Apple will offer a “grace period” until apps downloaded from alternative app stores can no longer be updated. “If you’re gone for too long, you’ll lose access to some features, including installing new alternative app marketplaces. Apps you installed from alternative app marketplaces will continue to function, but they can’t be updated by the marketplace you downloaded it from,” the company explained.<p><a href="https://www.thurrott.com/apple/298862/apple-adds-some-conditions-for-using-alternative-app-stores-on-ios" rel="nofollow">https://www.thurrott.com/apple/298862/apple-adds-some-condit...</a>
In addition to the third-party installation capability mentioned by siblings, Japan also has a regional capability for reassigning the side button to a third-party voice assistant (`com.apple.developer.side-button-access.allow`).
For Japan it might be the Felica chip.
That would surprise me. I don't recall having to change my iPhone's region after moving to Japan. Transport IC cards in Apple Pay have "just worked".<p>I am vaguely aware that some phone manufacturers silently remove certain NFC hardware (or disable some driver) in order to avoid paying Sony patent fees. Apple doesn't seem to do that, though.
I'm tired of Apple and its stupid rules, and its arrogant assumption that it is better than a democracy.
Companies have never been “democracies”. Most companies are more like dictatorships internally (for employees) and past a certain size also externally (for customers). Everything is dictated by a small group of leaders and shareholders not chosen by either employees or customers.<p>If you really want to imagine them like democracies, you are voting with your wallet. Maybe you’re just in the minority.
This seams neat, but I'm not sure I understand the purpose/difference between this and using the iOS simulator.
The iOS Simulator consists of (some of) the userspace components of iOS compiled to run on macOS. This would be a full iPhone image running as-is via virtualization.
The simulator is a different SDK target than iOS itself.<p>You have to compile completely independently for it, and depending on your dependencies they may not compile for the simulator.<p>Additionally the simulator runs a really ancient and feature restricted version of Metal. That means you can’t test a lot of graphical things that the hardware actually supports. I’m not sure if this supports GPU passthrough but the macOS VMs do, so that alone would be a huge improvement if possible.
Looks like this tool can provide a jailbroken environment for the latest iOS versions whereas one does not exist on iOS simulator or a real device
Here are some reasons to use this instead of the simulator: security research, testing, automation
The simulator is a completely different OS. It may even still be using Intel.<p>I always figured that Apple never set up a true emulator (like what Android does), because they didn't want people exploring their OS with a debugger.
Incorrect. The iOS simulator is and always has been, simply iOS frameworks running fully natively on
macOS. It’s best to think of it as an alternative window managers but the apps are native Mac processes. They can be seen and debugged via the terminal using top and ps and lldb alongside all other processes. They just present gui via the Simulator Mac app container.<p>They do not live in a VM and are certainly not emulated at an instruction set level. They are Mac apps.
Ah. That makes sense.<p>I would think that "Mac apps," means that they are, actually, a different OS (I actually already knew that, which was why I said what I said. The Intel thing was a spitball).<p>But one of the few joys geeks get, these days, is telling other geeks they are wrong, so I feel as if I’ve done my bit to make this a happier place.
I better not get more spam iMessages!!
Fantastic project, I use it regularly to test apps and there is a vphone-mcp which allows agents to control it, take screenshots and navigate the UI!
Is this safe?<p>There are some binaries in scripts/resources that you need to run as root. No idea what's inside them.
Is this what apple does in xcode?
What a release! Congrats to the builder, lots of great work done here and in IOS profiling in general has been done here recently. Corellium went research only and I lost the ability to actually profile my applications the way I'd like. I've got a fun thing over coffee in the morning!
Feels weird that after their attempts to shut down corellium they themselves shipped the necessary bits to allow this<p><a href="https://github.com/wh1te4ever/super-tart-vphone-writeup" rel="nofollow">https://github.com/wh1te4ever/super-tart-vphone-writeup</a>
Will this project make it easier to performance test Apps on the virtual iPhone?
Does this include a virtual baseband?
this is potentially useful for me do you know if this can fully handle callkit?
This project is really cool its a shame you have to disable or partial disable SIP which can break some things.
Interesting project. If it actually works it opens up a ton of possibilities for testing and reverse engineering.
Can this be used to test the phone's browser on localhost?
This is virtualization, so localhost will just be the virtual iphone itself. But you should have some command of how hosts are resolved, so you can always point the browser to the device hosting what you want to test, no?<p>Even easier, of course, is just using the iOS simulator included with xcode, which runs on your host computer. There, localhost resolves to your host computer.
Will there ever be a day where I could run this on a PC or something like it?
Will Apple break this?
what is "PCC"?
Private cloud compute I think. I learnt about it today too from this reddit post which mentions how:<p>> At WWDC, Apple announced that starting in the 27.x versions of iOS, macOS, etc., devs would be able to call Private Cloud Compute directly from Swift with no additional API configuration. Presently, the only way to get free cloud inference is by joining the App Store Small Business Program.<p><a href="https://www.reddit.com/r/appledevelopers/comments/1vztibh/reminder_take_advantage_of_the_app_store_small/" rel="nofollow">https://www.reddit.com/r/appledevelopers/comments/1vztibh/re...</a>
Can this be used for account recovery?
[dead]
[flagged]