3 ms·
> There are four major classes of threat vector in your phone. Hardware, OS, apps and malware. I would correct this as hardware, OS, Apps (including malware),
by WaitWaitWha 3y ago
> There are four major classes of threat vector in your phone. Hardware, OS, apps and malware.
I would correct this as hardware, OS, Apps (including malware), and external systems including carrier and destination sites.
In my opinion when it comes to data flow, there is little to no distinction between apps and malware. On the other hard, the carriers do collect both meta and data about activities, so do the other end of most communications.
I am also uncomfortable with not dwelling in to this vector. It is very much akin to "just use Private/privacy/Incognito mode when browsing". It may take care at the device, but nothing outside of the device is protected. APTs often pick their target based on external data availability.
- celtoid 3y agoAgreed. "A fundamental vulnerability in the Network Processing Unit (NPU) chipset has been uncovered recently, which can be exploited by attackers to eavesdrop on data transmitted over a wireless network, affecting over 89% of real-world Wi-Fi networks." [0] [0] https://blog.apnic.net/2023/05/29/mitm-attacks-in-public-wi-fi-networks-without-rogue-access-points/ https://blog.apnic.net/2023/05/29/mitm-attacks-in-public-wi-...
- TheRealDunkirk 3y agoYeah, in the discussion about privacy, most of it centers on the social networks and the OS, but dishearteningly leaves out the cell carriers and the internet providers. I'm sure AT&T, Verizon, and Comcast, et. al. love this. They're flying under the radar, and I'm convinced that data is a lot of what organizations like the FBI are buying, so that Facebook and Twitter can claim they aren't giving them that data.