2 ms·

Seriously, it is like every second month on average a news about how insecure are different Apple products. I personally decided to go away from Apple ecosystem

Seriously, it is like every second month on average a news about how insecure are different Apple products. I personally decided to go away from Apple ecosystem just after their famous "empty root password" issue was discovered. It is sometimes sounds like a joke, but their level of incompetence in software engineering is simply above any reasonable amount. If you trust your data to them, think twice.

Jonnax 7y ago
Okay? So you probably also don't trust Microsoft. Well then if you use Linux, it's pretty secure. But most money goes into headless servers. Do you trust the GNOME project, is it well funded? Or KDE or whatever. Actually fundamentally. Do you trust the X Server?
- buildzr 7y ago
  Does any of that need to be? Consider the attack surface, none of that is regularly exposed to untrustworthy content. More relevant: Do I trust SSH? My browser?
- Mathnerd314 7y ago
  The X server is known to be insecure, in the sense that keyloggers can steal credentials from anything else running. But in that sense no OS is particularly secure besides Qubes OS. The discussion was on phones, there the issues are mostly core Android's lack of updates from manufacturers (but quite good record of Google releasing patches) vs iOS's closed-source buggy OS. IDK, security is hard. The easiest solution is to get a nice clay brick and smash whatever phone you have to pieces.
Accacin 7y ago
No one's saying that there are no exploits, only an idiot would assume otherwise. I'm happy they're being found and disclosed and I'm happy that they've a decent bug bounty program.
mikhailt 7y ago
That's because it's popular to post news about Apple, not because Apple's platforms are insecure "by default". If you think Apple is the only one that has these issues, you're not paying close attention. How about nVidia with their 5 security issues: https://www.bleepingcomputer.com/news/security/nvidia-patches-high-severity-flaws-in-windows-gpu-display-driver/ https://www.bleepingcomputer.com/news/security/nvidia-patche... Checkpoint Endpoint AV that allows escalation to admin because of failing to verifying their DLL files: https://safebreach.com/Post/Check-Point-Endpoint-Security-Initial-Client-for-Windows-Privilege-Escalation-to-SYSTEM https://safebreach.com/Post/Check-Point-Endpoint-Security-In... How about Intel with Spectre issues which are still ongoing? Speaking of Intel, their SGX isn't as secure as it could be: https://www.zdnet.com/article/researchers-hide-malware-in-intel-sgx-enclaves/ https://www.zdnet.com/article/researchers-hide-malware-in-in...

Jonnax 7y ago

Okay? So you probably also don't trust Microsoft. Well then if you use Linux, it's pretty secure. But most money goes into headless servers. Do you trust the GNOME project, is it well funded? Or KDE or whatever. Actually fundamentally. Do you trust the X Server?

buildzr 7y ago
Does any of that need to be? Consider the attack surface, none of that is regularly exposed to untrustworthy content. More relevant: Do I trust SSH? My browser?
Mathnerd314 7y ago
The X server is known to be insecure, in the sense that keyloggers can steal credentials from anything else running. But in that sense no OS is particularly secure besides Qubes OS. The discussion was on phones, there the issues are mostly core Android's lack of updates from manufacturers (but quite good record of Google releasing patches) vs iOS's closed-source buggy OS. IDK, security is hard. The easiest solution is to get a nice clay brick and smash whatever phone you have to pieces.

Accacin 7y ago

No one's saying that there are no exploits, only an idiot would assume otherwise. I'm happy they're being found and disclosed and I'm happy that they've a decent bug bounty program.

mikhailt 7y ago

That's because it's popular to post news about Apple, not because Apple's platforms are insecure "by default". If you think Apple is the only one that has these issues, you're not paying close attention. How about nVidia with their 5 security issues: https://www.bleepingcomputer.com/news/security/nvidia-patches-high-severity-flaws-in-windows-gpu-display-driver/ https://www.bleepingcomputer.com/news/security/nvidia-patche... Checkpoint Endpoint AV that allows escalation to admin because of failing to verifying their DLL files: https://safebreach.com/Post/Check-Point-Endpoint-Security-Initial-Client-for-Windows-Privilege-Escalation-to-SYSTEM https://safebreach.com/Post/Check-Point-Endpoint-Security-In... How about Intel with Spectre issues which are still ongoing? Speaking of Intel, their SGX isn't as secure as it could be: https://www.zdnet.com/article/researchers-hide-malware-in-intel-sgx-enclaves/ https://www.zdnet.com/article/researchers-hide-malware-in-in...