4 ms·

“have you heard about any kind of security problems with Android recently? I haven't.” That’s a pretty silly thing to say [1] and a non-argument. Whether or no

“have you heard about any kind of security problems with Android recently? I haven't.” That’s a pretty silly thing to say [1] and a non-argument. Whether or not you’ve personally heard about security problems with android doesn’t mean they don’t exist or aren’t widely known to others. [1] https://www.cvedetails.com/vulnerability-list.php?vendor_id=1224&product_id=19997&version_id=0&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=2021&month=0&cweid=0&order=1&trc=363&sha=f1d918201ad0b0851a2b9b9562379023ac51bcd4 https://www.cvedetails.com/vulnerability-list.php?vendor_id=...

tommymachine 5y ago
In fairness, it's a perfectly acceptable argument if you are an ostrich.
2muchcoffeeman 5y ago
Flubot
heavyset_go 5y ago
According to Zerodium, iOS exploits are cheaper than Android exploits because iOS exploits are so plentiful[1][2] in comparison. It should also be noted that the #1 vector for malware installation on Android is the Play Store itself[3]. The issue isn't Apple or Google's mobile app distribution implementations themselves. The issue is that the app store model was only adopted because of its profitability, and security was an afterthought. Despite this, the companies' PR departments try to paint the app store model as necessary for "security" and then fall short of actually securing things because that might cost money or decrease revenue. There's no competition, so who is going to stop them or force them to improve? [1] https://www.theregister.com/2020/05/14/zerodium_ios_flaws/ https://www.theregister.com/2020/05/14/zerodium_ios_flaws/ [2] http://zerodium.com/program.html http://zerodium.com/program.html [3] https://www.zdnet.com/article/play-store-identified-as-main-distribution-vector-for-most-android-malware/ https://www.zdnet.com/article/play-store-identified-as-main-...
- easton 5y ago
  They said that two OS versions ago, pre-Blast Door and the other improvements Apple made (not that those helped against Pegasus, of course). Have they started buying iOS exploits again?
- ghuin 5y ago
  >According to Zerodium, iOS exploits are cheaper than Android exploits because iOS exploits are so plentiful[1][2] in comparison. On the other hand if your iPhone is vulnerable it will get an update. Can you say the same thing about Android?
  - aaomidi 5y ago
    Considering Samsung is the majority of Android phones, yes. They keep up and sometimes apply security updates faster than Google.
  - xxs 5y ago
    did you read the article, the author clearly states that Apple chose not to do anything for quite extended period of time.
  - lelandfe 5y ago
    Samsung has the greatest marketshare in the the Android ecosystem[0][1] and they've pledged to provide security updates for 4 years for >130 models[2] – which is pretty good! [0] https://www.appbrain.com/stats/top-manufacturers https://www.appbrain.com/stats/top-manufacturers [1] https://www.statista.com/statistics/271496/global-market-share-held-by-smartphone-vendors-since-4th-quarter-2009/ https://www.statista.com/statistics/271496/global-market-sha... [2] https://arstechnica.com/gadgets/2021/02/samsung-now-updates-android-for-longer-than-google-does/ https://arstechnica.com/gadgets/2021/02/samsung-now-updates-...
    - Retric 5y ago
      Their 4 year support from phones initial release is still quite bad and the last year is apparently only quarterly not monthly updates. So buy a phone X months after release and you get 36 - X months of monthly security patches and then minimal support for 1 year. That’s a big deal because their manufacturing last years model S20 and many people are buying not realizing it’s apparently got 1.5 years of full support remaining.

tommymachine 5y ago

In fairness, it's a perfectly acceptable argument if you are an ostrich.

2muchcoffeeman 5y ago

Flubot

heavyset_go 5y ago

According to Zerodium, iOS exploits are cheaper than Android exploits because iOS exploits are so plentiful[1][2] in comparison. It should also be noted that the #1 vector for malware installation on Android is the Play Store itself[3]. The issue isn't Apple or Google's mobile app distribution implementations themselves. The issue is that the app store model was only adopted because of its profitability, and security was an afterthought. Despite this, the companies' PR departments try to paint the app store model as necessary for "security" and then fall short of actually securing things because that might cost money or decrease revenue. There's no competition, so who is going to stop them or force them to improve? [1] https://www.theregister.com/2020/05/14/zerodium_ios_flaws/ https://www.theregister.com/2020/05/14/zerodium_ios_flaws/ [2] http://zerodium.com/program.html http://zerodium.com/program.html [3] https://www.zdnet.com/article/play-store-identified-as-main-distribution-vector-for-most-android-malware/ https://www.zdnet.com/article/play-store-identified-as-main-...

easton 5y ago
They said that two OS versions ago, pre-Blast Door and the other improvements Apple made (not that those helped against Pegasus, of course). Have they started buying iOS exploits again?
ghuin 5y ago
>According to Zerodium, iOS exploits are cheaper than Android exploits because iOS exploits are so plentiful[1][2] in comparison. On the other hand if your iPhone is vulnerable it will get an update. Can you say the same thing about Android?
- aaomidi 5y ago
  Considering Samsung is the majority of Android phones, yes. They keep up and sometimes apply security updates faster than Google.
- xxs 5y ago
  did you read the article, the author clearly states that Apple chose not to do anything for quite extended period of time.
- lelandfe 5y ago
  Samsung has the greatest marketshare in the the Android ecosystem[0][1] and they've pledged to provide security updates for 4 years for >130 models[2] – which is pretty good! [0] https://www.appbrain.com/stats/top-manufacturers https://www.appbrain.com/stats/top-manufacturers [1] https://www.statista.com/statistics/271496/global-market-share-held-by-smartphone-vendors-since-4th-quarter-2009/ https://www.statista.com/statistics/271496/global-market-sha... [2] https://arstechnica.com/gadgets/2021/02/samsung-now-updates-android-for-longer-than-google-does/ https://arstechnica.com/gadgets/2021/02/samsung-now-updates-...
  - Retric 5y ago
    Their 4 year support from phones initial release is still quite bad and the last year is apparently only quarterly not monthly updates. So buy a phone X months after release and you get 36 - X months of monthly security patches and then minimal support for 1 year. That’s a big deal because their manufacturing last years model S20 and many people are buying not realizing it’s apparently got 1.5 years of full support remaining.