3 ms·

AOSP addresses part of this concern, but see also baseband firmware, repeatable builds, connected services, kernel exploits, etc ad nauseam. Proving a negative

AOSP addresses part of this concern, but see also baseband firmware, repeatable builds, connected services, kernel exploits, etc ad nauseam. Proving a negative is notoriously difficult. If you've decided as a matter of faith that Apple is malevolent, then it is possible to interpret any news as corroborative of those beliefs. If you weigh the evidence objectively, things are far less clear. If you choose to err on the side of caution, then sure absolutely lean into the healthy paranoia (I do), but it makes more sense to evangelize the safer approach, than to preach against those you perceive (without evidence) as wicked. Apple is not perfect, and some of their misses are mind-boggling. All other vendors too. Snowden proved that NSA will do what NSA can do (we all suspected this). He did not prove that Apple (or Google) helped beyond their legal obligations. He helped Apple and Google find and improve some of their failures. No one here is talking about the CCP!

smoldesu 4y ago
> baseband firmware Important indeed, I look forward to the day when FCC-unregulated hardware becomes available. Still not a reasonable threat vector unless the software layer is also maliciously complicit. > repeatable builds Many ROMs are. > connected services Many of which do not exist in custom ROMs. > kernel exploits Generally more of a problem when you run a poorly-maintained kernel like XNU :p I get what you're trying to say here, and generally I agree with you - there is no secure computing anymore. So why defend Apple? They clearly have the means to remotely exfiltrate your device data, decrypt your private iCloud information and the willingness to cooperate with authorities. They're one bad regime away from operating with fascist impunit- oops, too late[0]. > Proving a negative is notoriously difficult. There's nothing to prove. Apple reports themselves that they can compromise their own device and account security. You can personally assume that they won't use that for nefarious purposes, but that doesn't make the backdoor any more innocent than an unfired gun being held against my head. > He did not prove that Apple (or Google) helped beyond their legal obligations. He proved that our government was extremely good at hiding unprecedented levels of surveillance a decade ago. Even if you assume that our government hasn't expanded their control over these companies in that time (which I have for the purposes of this response), the point stands - Apple has backdoor access to both your device and account. Both they and the US government claim that they only use this power for it's intended purpose, whether you believe the two of them is up to you. It is irrelevant for the purposes of discussing how badly these systems are compromised. > No one here is talking about the CCP! Apple certainly talks with them, though. Unfortunately, their working relationship with China has repeatedly been an example of how despotic corporate culture can get. You're right - it's not a uniquely Apple epidemic, but they're certainly the largest example. [0] https://support.apple.com/en-us/HT208351 https://support.apple.com/en-us/HT208351

smoldesu 4y ago

> baseband firmware Important indeed, I look forward to the day when FCC-unregulated hardware becomes available. Still not a reasonable threat vector unless the software layer is also maliciously complicit. > repeatable builds Many ROMs are. > connected services Many of which do not exist in custom ROMs. > kernel exploits Generally more of a problem when you run a poorly-maintained kernel like XNU :p I get what you're trying to say here, and generally I agree with you - there is no secure computing anymore. So why defend Apple? They clearly have the means to remotely exfiltrate your device data, decrypt your private iCloud information and the willingness to cooperate with authorities. They're one bad regime away from operating with fascist impunit- oops, too late[0]. > Proving a negative is notoriously difficult. There's nothing to prove. Apple reports themselves that they can compromise their own device and account security. You can personally assume that they won't use that for nefarious purposes, but that doesn't make the backdoor any more innocent than an unfired gun being held against my head. > He did not prove that Apple (or Google) helped beyond their legal obligations. He proved that our government was extremely good at hiding unprecedented levels of surveillance a decade ago. Even if you assume that our government hasn't expanded their control over these companies in that time (which I have for the purposes of this response), the point stands - Apple has backdoor access to both your device and account. Both they and the US government claim that they only use this power for it's intended purpose, whether you believe the two of them is up to you. It is irrelevant for the purposes of discussing how badly these systems are compromised. > No one here is talking about the CCP! Apple certainly talks with them, though. Unfortunately, their working relationship with China has repeatedly been an example of how despotic corporate culture can get. You're right - it's not a uniquely Apple epidemic, but they're certainly the largest example. [0] https://support.apple.com/en-us/HT208351 https://support.apple.com/en-us/HT208351