4 ms·

Isn't Android at this point a more secure OS? The price for zero days at least is signaling that.

_bxg1 7y ago
As far as I know the consensus is still that iOS is more secure. Of course there are different definitions of that. Certainly Android is more ripe for abuse by apps downloaded from the store, for example; they can run freely in the background and do things like draw UX over other apps. Also, privacy != security. iOS is absolutely in a better position on privacy, even after this new development.
- lern_too_spel 7y ago
  iOS has been worse for privacy for a very long time. You cannot even develop apps for your own device without telling Apple who you are or download apps without creating an Apple account. You cannot get your location without also sending it to Apple. Android suffers from none of these problems.
guitarbill 7y ago
It could be signalling one is a far more attractive target to exploit, because e.g. harden shell, soft interior (M&M architecture). Or maybe Apple patches quicker and gets them out quicker, so exploit lifetime is shorter. Just to be clear, I don't know if that's true, but it's equally plausible explanation for the exploit price
- _bxg1 7y ago
  That's a good point- there are nine times as many Android devices out there as iOS devices, making exploits for the former more valuable in certain ways.
  - pbhjpbhj 7y ago
    The people with iOS devices probably have 9-times the money mind you?
filoleg 7y ago
Theoretically, maybe, I have no idea. Realistically, not at all, considering that even flagship Android phones tend to receive updates with an insane delay (except Pixel ones), not even talking about non-flagships or any android phones that have been released 2+ years ago. Last Android phone I have bought was Galaxy S8+, just a few months after the release. Had to wait about half a year (if not more) for the next major Android update after it had already dropped for Pixel devices.

As far as I know the consensus is still that iOS is more secure. Of course there are different definitions of that. Certainly Android is more ripe for abuse by apps downloaded from the store, for example; they can run freely in the background and do things like draw UX over other apps. Also, privacy != security. iOS is absolutely in a better position on privacy, even after this new development.

lern_too_spel 7y ago
iOS has been worse for privacy for a very long time. You cannot even develop apps for your own device without telling Apple who you are or download apps without creating an Apple account. You cannot get your location without also sending it to Apple. Android suffers from none of these problems.

guitarbill 7y ago

It could be signalling one is a far more attractive target to exploit, because e.g. harden shell, soft interior (M&M architecture). Or maybe Apple patches quicker and gets them out quicker, so exploit lifetime is shorter. Just to be clear, I don't know if that's true, but it's equally plausible explanation for the exploit price

_bxg1 7y ago
That's a good point- there are nine times as many Android devices out there as iOS devices, making exploits for the former more valuable in certain ways.
- pbhjpbhj 7y ago
  The people with iOS devices probably have 9-times the money mind you?

filoleg 7y ago

Theoretically, maybe, I have no idea. Realistically, not at all, considering that even flagship Android phones tend to receive updates with an insane delay (except Pixel ones), not even talking about non-flagships or any android phones that have been released 2+ years ago. Last Android phone I have bought was Galaxy S8+, just a few months after the release. Had to wait about half a year (if not more) for the next major Android update after it had already dropped for Pixel devices.