3 ms·
The article indicates that it's pretty much six of one and half a dozen of the other. iOS is more of a monoculture compared to Android, so a successful exploit
by garren 7y ago
The article indicates that it's pretty much six of one and half a dozen of the other.
iOS is more of a monoculture compared to Android, so a successful exploit chain against the current version of iOS has the potential to affect quite a few more users.
On the other hand, the article states that Android is more fragmented, so a successful chain of exploits will likely affect fewer users. The article hints that "one-click" Android exploit chains are harder than iOS, and so are worth more at the moment.
It's interesting to me that a one-click compromise is so valuable given the supply-chain vulnerabilities [0] and ongoing "dodgy-app" issues [1]. Google just dropped a boatload of iOS issues, but they also just took care of nearly 200 issues, some long-standing and some critical in severity, within Android themselves [2].
It seems like declaring one as more secure than the other is more a game of hot-potato than anything.
[0] https://krebsonsecurity.com/2019/06/tracing-the-supply-chain-attack-on-android-2/ https://krebsonsecurity.com/2019/06/tracing-the-supply-chain...
[1] https://nakedsecurity.sophos.com/2012/07/31/almost-every-android-device-is-compromise/ https://nakedsecurity.sophos.com/2012/07/31/almost-every-and...
[2] https://www.forbes.com/sites/daveywinder/2019/08/23/android-10-google-confirms-193-security-vulnerabilities-need-fixing/#d6a94fc616ba https://www.forbes.com/sites/daveywinder/2019/08/23/android-...
- andrewflnr 7y agoExecuting a supply chain attack requires you to be in a pretty privileged position to start with. Most people can't just decide to do one, whereas most anyone can put up a malicious website or app.