3 ms·
Why are top management at Kaspersky using iPhones, presumably they knew iPhones were a “black box” and a security risk.
by Ecstatify 3y ago
Why are top management at Kaspersky using iPhones, presumably they knew iPhones were a “black box” and a security risk.
- vivegi 3y agoI guess everyone at Kaspersky knew the risk of an attack was non-zero given their industry profile. Their SIEM finally caught it, albeit it is arguable if the detection was timely and as others in the thread have pointed out, their MDM should have detected the upgrade failures or version issues. We will probably hear about it in the detailed paper/presentation later. Their rant on the closed nature of the ios ecosystem is more around Apple's hold on the research tools. That is what I took from the statement, among other things.
- prox 3y agoWhy are they running iMessage? That’s the real vector here.
- dmix 3y agoI don't think you can disable iMessage.
- samtheprogram 3y agoYou can and this is trivially verifiable.
- dmix 3y agoRight you can turn off getting any messages entirely and deregister your phone from their network. I believe what I was remembering was you can't swap out the primary SMS receiving app like you can on Android. Unless something changed. Not everyone like's to live in a security bubble w/o phone access, even the security minded.
- isx726552 3y agoThere is a switch in the Settings app to disable iMessage and just use SMS. This is an option for the built in messaging app, no need to “swap” or install another app.
- samtheprogram 3y agoYou can disable iMessage and still get plain SMS and MMS. The app is called Messages, and Apple's version of RCS is called iMessage. But you are correct that you cannot switch to a different SMS/MMS app.
- prox 3y agoI have it disabled. One of the first things I do on a new install.
- vivegi 3y agoActually, Apple should consider making iMessage open source. Given it is such a popular attack vector, it probably benefits the ios ecosystem to take the benefit of open source scrutiny. There are other messaging apps like Signal, WhatsApp, Telegram etc., So, it is not like a copycat would suddenly emerge and threaten Apple's position. Apple hold the keys to the app store anyway and can review any potential copycat (supposedly malicious one) and prevent it from being released.
- SheinhardtWigCo 3y agoWhat should they be using instead?
- SheinhardtWigCo 3y agoEh, of course they did. It almost almost sounds like a honeypot, even. I think there is more to this than they're saying for now.