3 ms·

"Last compatible" means no more security updates, which basically means - we no longer care about the flaws we've made, go ahead and risk your privacy (includin

by badpun 8y ago

"Last compatible" means no more security updates, which basically means - we no longer care about the flaws we've made, go ahead and risk your privacy (including for example your life savings if you bank online). Also, my experience with the last compatible version (for iPhone 4 IIRC) was that IIRC neither Skype nor Hangouts worked anymore. Plus the whole device was incredibly slow.

scarface74 8y ago
What security flaws do you expect in older versions of apps that were able to escape the iOS sandbox that were later fixed by updating the applications? What exploit has there been in an app that let it exfiltrate data from another app or read your web browsing history for any version of iOS? As far as Google, it’s no surprise that Google abandoned older protocols. That’s kind of their MO....
- badpun 8y ago
  I'm talking about security fixes to non-newest versions of iOS. Apple just does not do them.
  - scarface74 8y ago
    To nitpick actually they have. IOS 6.1.2 came out 6 months after iOS 7 But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data?
    - badpun 8y ago
      > But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data? I don't follow the field of iOS security. I only know that, like everyone whose computing devices handle sensitive data and/or money, I want my system to be patched ASAP if a vulnerability is detected. AFAIK, Apple makes no such guarantees.
      - scarface74 8y ago
        The alternative is Android that has a much weaker security model and where the manufacturers don’t offer patches for more than two years if at all. But as far as iOS, I am not aware of any unpatched security vulnerabilities that have been reported in over ten years that would allow an app to exfiltrate sensitive data from another app on a none jailbroken device.
    - saagarjha 8y ago
      > But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data? …a jailbreak?
      - scarface74 8y ago
        I haven’t been able to find an untethered Jailbreak for iOS 5 - ie a method for an unsuspecting user to have his iOS device compromised. A “tethered jailbreak” means the user purposefully went through a series of steps to jailbreak thier device or someone else physically got access to thier device.
        saagarjha 8y ago
        I don't quite understand what you're trying to say here. The difference between an "untethered" and a "tethered" jailbreak is that an untethered one sticks around after you reboot your phone. So how exactly is this relevant here?
        scarface74 8y ago
        An untethered jailbreak is one that doesn’t required you to be connected to your computer. (http://osxdaily.com/2010/11/24/tethered-jailbreak-vs-untethered-jailbreak/ http://osxdaily.com/2010/11/24/tethered-jailbreak-vs-untethe...). A tethered jailbreak requires you to be connected to a computer. The difference is that an untethered jailbreak takes advantage of a security flaw in the OS that could be theoretically embedded into a website that you visit and your phone could be jail broken without your knowledge. A tethered jailbreak means that you either intentionally took steps to bypass the security of the OS or someone who had access to your device did.

by badpun 8y ago

scarface74 8y ago

What security flaws do you expect in older versions of apps that were able to escape the iOS sandbox that were later fixed by updating the applications? What exploit has there been in an app that let it exfiltrate data from another app or read your web browsing history for any version of iOS? As far as Google, it’s no surprise that Google abandoned older protocols. That’s kind of their MO....

badpun 8y ago
I'm talking about security fixes to non-newest versions of iOS. Apple just does not do them.
- scarface74 8y ago
  To nitpick actually they have. IOS 6.1.2 came out 6 months after iOS 7 But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data?
  - badpun 8y ago
    > But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data? I don't follow the field of iOS security. I only know that, like everyone whose computing devices handle sensitive data and/or money, I want my system to be patched ASAP if a vulnerability is detected. AFAIK, Apple makes no such guarantees.
    - scarface74 8y ago
      The alternative is Android that has a much weaker security model and where the manufacturers don’t offer patches for more than two years if at all. But as far as iOS, I am not aware of any unpatched security vulnerabilities that have been reported in over ten years that would allow an app to exfiltrate sensitive data from another app on a none jailbroken device.
  - saagarjha 8y ago
    > But what unpatched security flaws have been reported in older versions of iOS that would allow an attacker to install a keylogger or otherwise exfiltrate user data? …a jailbreak?
    - scarface74 8y ago
      I haven’t been able to find an untethered Jailbreak for iOS 5 - ie a method for an unsuspecting user to have his iOS device compromised. A “tethered jailbreak” means the user purposefully went through a series of steps to jailbreak thier device or someone else physically got access to thier device.
      - saagarjha 8y ago
        I don't quite understand what you're trying to say here. The difference between an "untethered" and a "tethered" jailbreak is that an untethered one sticks around after you reboot your phone. So how exactly is this relevant here?
        scarface74 8y ago
        An untethered jailbreak is one that doesn’t required you to be connected to your computer. (http://osxdaily.com/2010/11/24/tethered-jailbreak-vs-untethered-jailbreak/ http://osxdaily.com/2010/11/24/tethered-jailbreak-vs-untethe...). A tethered jailbreak requires you to be connected to a computer. The difference is that an untethered jailbreak takes advantage of a security flaw in the OS that could be theoretically embedded into a website that you visit and your phone could be jail broken without your knowledge. A tethered jailbreak means that you either intentionally took steps to bypass the security of the OS or someone who had access to your device did.