3 ms·
Regarding your first point, it's difficult to implement some security schemes at the operating system level alone. With full vertical control of the product, yo
by wyc 9y ago
Regarding your first point, it's difficult to implement some security schemes at the operating system level alone. With full vertical control of the product, you can have nice things like secure enclaves and de-facto hardware cryptography acceleration.
See here for details: https://www.apple.com/business/docs/iOS_Security_Guide.pdf https://www.apple.com/business/docs/iOS_Security_Guide.pdf
A lot of the features would be very difficult to implement in Android without cooperating hardware, and hardware is notoriously expensive to get right and scale up. Projects like neo900 and Purism regularly encounter delays, unexpected costs, and pricing issues. It's really tough.
On a broader note, people are spending more and more time in data-hungry apps anyway, which can send almost anything they want to the network. This is sure to chip at any device-level security, pushing it towards irrelevance. I wish I had a log entry every time an app used the location service on my phone along with a database containing a history of Internet-transacted data.
- newscracker 9y agoThanks for the explanation on the Android side. It still seems weird that nobody wants to take this up as a USP for their devices (referring to non-Google entities). > On a broader note, people are spending more and more time in data-hungry apps anyway, which can send almost anything they want to the network. This is sure to chip at any device-level security, pushing it towards irrelevance. I wish I had a log entry every time an app used the location service on my phone along with a database containing a history of Internet-transacted data. I've long wished for network access permission on iOS, allowing the user to decide which apps can never connect to any networks. To reduce the total attack surface, I'd want to keep many apps (especially games) running only within their sandboxes and having access to only the data they create/generate on-device and no other external resource/server. AFAIK, Android has had this even in the days of permission requests at app install time. I don't know if granular control is available on this from Android 6 onwards.
- wyc 9y agoI know that Samsung is trying to push its Knox product to enterprises. I'm unsure about their technical or financial success. I don't know of anyone trying this in the consumer space either, but I'd definitely love to see more activity in this long-neglected sector. Knox: https://www.samsungknox.com/en https://www.samsungknox.com/en