Apple Shares Private Cloud Compute Virtual Research Environment, Provides Bounties for Vulnerabilities

Private Cloud Compute is a cloud intelligence system that Apple designed for private artificial intelligence processing, and it's what Apple is using to keep Apple Intelligence requests secure when they need to be processed in the cloud.

Apple Intelligence General Feature 2
Apple promised to allow security and privacy researchers to verify the end-to-end security and privacy promises that Apple made with Private Cloud Compute, and today, Apple made its Private Cloud Compute Virtual Research Environment (VRE) and other materials publicly available to all security researchers.

Apple has a Private Cloud Compute (PCC) Security Guide that details all of the components of PCC and how they work to provide privacy for cloud-based AI processing. Apple released the source code for select components of PCC that help implement its security and privacy requirements, which allows for a deeper dive into PCC.

apple private cloud compute security
The Virtual Research Environment is a set of tools that lets researchers perform their own security analysis on PCC using a Mac. The VRE can be used for inspecting PCC software releases, verifying the consistency of the transparency log, booting a release in a virtualized environment, and modifying and debugging PCC software for deeper investigation. The VRE can be accessed in the macOS 18.1 Developer Preview and can be used with a Mac that has an Apple silicon chip and 16GB+ unified memory.

Along with these tools, Apple is expanding its Apple Security Bounty to include rewards for vulnerabilities that demonstrate a compromise of the fundamental privacy and security guarantees of Private Cloud Compute. Security researchers who locate a vulnerability can earn up to $1 million.

Popular Stories

Generic iOS 18

Apple Announces iOS 18.2 Launching Today With These New Features

Wednesday December 11, 2024 5:23 am PST by
Apple has announced that iOS 18.2, iPadOS 18.2, and macOS Sequoia 15.2 will be released today following more than six weeks of beta testing. For the iPhone 15 Pro and iPhone 16 models, the update introduces additional Apple Intelligence features, including Genmoji for creating custom emoji, Image Playground and Image Wand for generating images, and ChatGPT integration for Siri. There is also ...
Generic iOS 18

Apple Seeds Second Release Candidate Versions of iOS 18.2 and More With Genmoji, Image Playground and ChatGPT Integration

Monday December 9, 2024 10:06 am PST by
Apple today seeded the second release candidate versions of upcoming iOS 18.2, iPadOS 18.2, and macOS 15.2 updates to developers and public beta testers for testing purposes, a week after releasing the first RCs. The first iOS 18.2 RC had a build number of 22C150, while the second RC's build number is 22C151. Release candidates represent the final version of beta software that's expected to see a ...
iPhone SE 4 Single Camera Thumb 3

iPhone SE 4 Said to Feature 48MP Rear Lens, 12MP TrueDepth Camera

Monday December 9, 2024 4:48 am PST by
Apple's forthcoming iPhone SE 4 will feature a single 48-megapixel rear camera and a 12-megapixel TrueDepth camera on the front, according to details revealed in a new Korean supply chain report. ET News reports that Korea-based LG Innotek is the main supplier of the front and rear camera modules for the more budget-friendly ~$400 device, which is expected to launch in the first quarter of...
Apple MacBook Pro M4 hero

MacBook Pros With OLED Displays Won't Have a Notch, Roadmap Shows

Monday December 9, 2024 7:36 am PST by
Apple plans to remove the notch from the MacBook Pro in a few years from now, according to a roadmap shared by research firm Omdia. The roadmap shows that 14-inch and 16-inch MacBook Pro models released in 2026 will have a hole-punch camera at the top of the display, instead of a notch. It is unclear if there would simply be a pinhole in the display, or if Apple would expand the iPhone's...
vipps nfc tap to pay iphone

World's First Apple Pay Alternative for iPhone Launches in Norway

Monday December 9, 2024 1:28 am PST by
Norwegian payment service Vipps has become the world's first company to launch a competing tap-to-pay solution to Apple Pay on iPhone, following Apple's agreement with European regulators to open up its NFC technology to third parties. Starting December 9, Vipps users in Norway can make contactless payments in stores using their iPhones. The service initially supports customers of SpareBank...
New Things Your iPhone Can Do in iOS 18

20 New Things Your iPhone Can Do in iOS 18.2

Friday December 6, 2024 4:42 am PST by
Apple is set to release iOS 18.2 in the second week of December, bringing the second round of Apple Intelligence features to iPhone 15 Pro and iPhone 16 models. This update brings several major advancements to Apple's AI integration, including completely new image generation tools and a range of Visual Intelligence-based enhancements. There are a handful of new non-AI related feature controls...
Apple Watch Series 10 lineup 240909 feature

Apple Watch Could Get Blood Pressure Monitoring in 2025

Tuesday December 10, 2024 11:51 am PST by
Apple is ramping up work on a blood pressure monitoring feature for the Apple Watch and it could be ready as soon as 2025, reports Bloomberg's Mark Gurman. Blood pressure monitoring is a health addition that Apple has been working on for the last several years, and based on rumors, Apple wanted to debut it in 2024. The feature would not provide exact systolic and diastolic blood pressure...
macOS Sequoia Night Feature

Apple Releases macOS Sequoia 15.2 With New Apple Intelligence Features

Wednesday December 11, 2024 10:02 am PST by
Apple today released macOS Sequoia 15.2, the second update to the macOS Sequoia operating system that was released in September. macOS Sequoia 15.2 comes over a month after the release of macOS Sequoia 15.1. Mac users can download the ‌macOS Sequoia‌ update through the Software Update section of System Settings. macOS Sequoia 15.2 adds Image Playground, an app that lets you create...

Top Rated Comments

UpsideDownEclair Avatar
7 weeks ago

From a security perspective, the only way to 100% prove transparency is having an outside firm perform and publish an audit on their internal servers.

Which will never happen




Attachment Image
Score: 8 Votes (Like | Disagree)
ProbablyDylan Avatar
7 weeks ago

I'm talking about what Apple does with your data. There's nothing stopping them from having code we can't see that collects data from users.
Image pulled directly from Apple's documentation, and a link to where I found it ('https://security.apple.com/documentation/private-cloud-compute').

Score: 4 Votes (Like | Disagree)
ProbablyDylan Avatar
7 weeks ago

If you have proof that's true, let's see it. In comparison to Proton, they have had outsourced firms inspect their servers to verify they're statement of end-to-end encryption is true. Apple has done 0 outsourced audits of their servers.
Right. That's because none of this stuff is ready to go yet. Proton's products are ready to inspect. Apple's aren't. You don't check the doneness of a steak before it hits the grill do you?

You don't have to hear it from me though. You're welcome to read Apple's documentations and promises at that link I provided, but I get the feeling that you're more interested in being skeptical than in being informed.
Score: 3 Votes (Like | Disagree)
bergert Avatar
7 weeks ago

If you have proof that's true, let's see it. In comparison to Proton, they have had outsourced firms inspect their servers to verify they're statement of end-to-end encryption is true. Apple has done 0 outsourced audits of their servers.
This is quite better, anyone can verify the claims - virtual server Mseries with 16GB is needed: MacStudio will do. Run it yourself.

This is quite a bold step, now iCloud next please.
Score: 1 Votes (Like | Disagree)
Timpetus Avatar
7 weeks ago
Somehow I doubt there is a macOS 18.1 Developer Preview yet...
Score: 1 Votes (Like | Disagree)
macduke Avatar
7 weeks ago
I'm always curious how many of these bounties are actually collected? One time I sent an iPad OS Lock Screen bypass vulnerability to Apple and nobody ever responded. Feel like that should've been worth something. For how huge some of these vulnerabilities would impact their public image if they were released, you would think Apple would be interested in paying more for them.
Score: 1 Votes (Like | Disagree)