4 ms·

Is signal on iOS safer than signal on Android?

wmf 4y ago
Yes, just because iOS itself is harder to hack. For example there are trivial evil maid style attacks against Android: https://www.tiktok.com/@android_infosecurity/video/7185907898814352645 https://www.tiktok.com/@android_infosecurity/video/718590789...
- CommitSyn 4y ago
  Security 101: Physical compromise is full compromise. If someone with the means has access to your unlocked iPhone, it's game over as quickly as Android. Remember JailbreakMe? That was the NiceGuy™ version of iPhone hacking. Now companies bill governments millions of dollars for iPhone jailbreaks and you can't even sideload apps after.
  - deleted 4y ago
    [deleted]
  - hsbauauvhabzb 4y ago
    As time goes on the cost of physical attacks increases. This was more true in the 90s when secure boot and FDE weren’t a thing, sure it’s still possible but it’s much harder now.
    - CommitSyn 4y ago
      Secureboot and FDE will still protect against this. The attack in the linked video just uses a flipper zero to mimic someone holding your phone and disabling protections then installing malware. Even if the phone was on, unencrypted, and locked it would fail. Edit: I initially misunderstood where you were coming from. Yes, today things are more secure, but if someone has unfettered physical access to your device they can just as easily install hardware that waits for you to login and then do these things or replace your charger plug (on a mobile device) or use a modified Bluetooth or USB proxy to keylog (on a full device). We're of course getting into high-level corporate attacks at that point if to be unnoticed (i.e. no popups, prompts, unexpected changes), so the average user is much more safe.
      - hsbauauvhabzb 4y ago
        Pretty much, iOS jailbreaks were common and free, now they’re worth millions (assuming they can be exploited remotely). At some point, if you have physical access and the device pin, you should assume it’s game over, but there may also be a point in time where we no longer care about physical security as much, if at all.

wmf 4y ago

Yes, just because iOS itself is harder to hack. For example there are trivial evil maid style attacks against Android: https://www.tiktok.com/@android_infosecurity/video/7185907898814352645 https://www.tiktok.com/@android_infosecurity/video/718590789...

CommitSyn 4y ago
Security 101: Physical compromise is full compromise. If someone with the means has access to your unlocked iPhone, it's game over as quickly as Android. Remember JailbreakMe? That was the NiceGuy™ version of iPhone hacking. Now companies bill governments millions of dollars for iPhone jailbreaks and you can't even sideload apps after.
- deleted 4y ago
  [deleted]
- hsbauauvhabzb 4y ago
  As time goes on the cost of physical attacks increases. This was more true in the 90s when secure boot and FDE weren’t a thing, sure it’s still possible but it’s much harder now.
  - CommitSyn 4y ago
    Secureboot and FDE will still protect against this. The attack in the linked video just uses a flipper zero to mimic someone holding your phone and disabling protections then installing malware. Even if the phone was on, unencrypted, and locked it would fail. Edit: I initially misunderstood where you were coming from. Yes, today things are more secure, but if someone has unfettered physical access to your device they can just as easily install hardware that waits for you to login and then do these things or replace your charger plug (on a mobile device) or use a modified Bluetooth or USB proxy to keylog (on a full device). We're of course getting into high-level corporate attacks at that point if to be unnoticed (i.e. no popups, prompts, unexpected changes), so the average user is much more safe.
    - hsbauauvhabzb 4y ago
      Pretty much, iOS jailbreaks were common and free, now they’re worth millions (assuming they can be exploited remotely). At some point, if you have physical access and the device pin, you should assume it’s game over, but there may also be a point in time where we no longer care about physical security as much, if at all.