5 ms·

I know that apple did a lot of controversial moves in the past years, but i still get the impression that apple takes privacy seriously and tries to respect it

I know that apple did a lot of controversial moves in the past years, but i still get the impression that apple takes privacy seriously and tries to respect it even when there is the fundamental need for data collection [1]. [1] https://backchannel.com/an-exclusive-look-at-how-ai-and-machine-learning-work-at-apple-8dbfb131932b#.ckhw18y71 https://backchannel.com/an-exclusive-look-at-how-ai-and-mach...

matt_wulfeck 10y ago
Absolutely, and the commitment to security and privacy keeps me coming back to iOS. The iOS white paper[0] is an excellent read for anyone interested in security. Unlike android devies, iOS security is coupled to hardware HSM chips which Apple refers to the secure enclave. It's used not just to encrypt and decrypt, but to verify the entire boot process and all binaries used by the cellular chips. Now that google is manufacturing devices I expect them to begin following Apple's example. Avoid garbage like TrustZone and do it right. 1. https://www.apple.com/business/docs/iOS_Security_Guide.pdf https://www.apple.com/business/docs/iOS_Security_Guide.pdf
- izacus 10y ago
  "Garbage"? Can you explain why?
  - matt_wulfeck 10y ago
    There's very good reasons why Apple doesn't trust it and does something different. When so much of the phone security relies on it, it's very important to get it right. https://www.google.com/amp/www.slashgear.com/android-soc-security-keys-extracted-qualcomm-trustzone-in-question-31442245/amp/?client=safari https://www.google.com/amp/www.slashgear.com/android-soc-sec...
  - fowl2 10y ago
    The design and implementation surface area for TrustZone is just too big to be secure. Protecting a few secrets is a bit different from a Quasi-hypervisor environment that could be used to implement such a scheme.
  - tveita 10y ago
    The "trustlets" that run in the TrustZone have enhanced privileges and must be securely written. Once crap like DRM ends up in there, as it invariably does, it turns actively harmful. http://bits-please.blogspot.com/2016/05/qsee-privilege-escalation-vulnerability.html http://bits-please.blogspot.com/2016/05/qsee-privilege-escal...
    - twr 10y ago
      It should be mentioned that Matthew Green linked the above blog entry in the article, so if you didn't read either post, you should.

matt_wulfeck 10y ago

Absolutely, and the commitment to security and privacy keeps me coming back to iOS. The iOS white paper[0] is an excellent read for anyone interested in security. Unlike android devies, iOS security is coupled to hardware HSM chips which Apple refers to the secure enclave. It's used not just to encrypt and decrypt, but to verify the entire boot process and all binaries used by the cellular chips. Now that google is manufacturing devices I expect them to begin following Apple's example. Avoid garbage like TrustZone and do it right. 1. https://www.apple.com/business/docs/iOS_Security_Guide.pdf https://www.apple.com/business/docs/iOS_Security_Guide.pdf

izacus 10y ago
"Garbage"? Can you explain why?
- matt_wulfeck 10y ago
  There's very good reasons why Apple doesn't trust it and does something different. When so much of the phone security relies on it, it's very important to get it right. https://www.google.com/amp/www.slashgear.com/android-soc-security-keys-extracted-qualcomm-trustzone-in-question-31442245/amp/?client=safari https://www.google.com/amp/www.slashgear.com/android-soc-sec...
- fowl2 10y ago
  The design and implementation surface area for TrustZone is just too big to be secure. Protecting a few secrets is a bit different from a Quasi-hypervisor environment that could be used to implement such a scheme.
- tveita 10y ago
  The "trustlets" that run in the TrustZone have enhanced privileges and must be securely written. Once crap like DRM ends up in there, as it invariably does, it turns actively harmful. http://bits-please.blogspot.com/2016/05/qsee-privilege-escalation-vulnerability.html http://bits-please.blogspot.com/2016/05/qsee-privilege-escal...
  - twr 10y ago
    It should be mentioned that Matthew Green linked the above blog entry in the article, so if you didn't read either post, you should.