3 ms·
> We have to trust Apple tells the truth, because we have no access to Apple's servers and databases and because its software is closed source. There is no way
by conradev 3y ago
> We have to trust Apple tells the truth, because we have no access to Apple's servers and databases and because its software is closed source. There is no way to confirm this statement.
Yes. You do have to trust Apple to tell the truth, just like you trust every vendor to do the same. You can also choose to trust professionals[1] who do compliance/privacy auditing.
Only looking at what is directly visible to you (the filesystem) and jumping to conclusions (these things run Siri) is too shallow a pass to understand at all what is going on, and this blog post is just spreading FUD.
I helped create one of the daemons you link in the blog post, `siriactionsd`, and it was created for the Shortcuts app. It contains a bucket of different services used across the operating system by a series of features all attributed to Shortcuts. We then then did all of the work to wire everything up to a series of understandable switches: in Shortcuts settings. You can turn those switches off and/or delete the app and you have to (again) trust that the engineering team implemented them properly and in a way that you would agree with. Not all engineering teams are equally good, even at Apple.
If you like to understand how your operating system works and what every single process is doing, then I would switch to an open source operating system like Linux.
Try turning off other services and looking for traces of them – you'll turn up similar results. Daemons are baked into the read-only operating system image on all of Apple's platforms and there is no way to uninstall them.
[1] like Will Strafach: https://www.bleepingcomputer.com/news/security/accuweather-ios-app-sends-location-data-to-advertising-partner/ https://www.bleepingcomputer.com/news/security/accuweather-i...
- saagarjha 3y agoThe thing is that Linux isn’t much more accessible at all. Assuming that your vendor isn’t actively trying to hide backdoors from you, reverse engineering closed-source binaries is a little annoying but not all that different from trying to figure out what some open source code does. It’s really the sheer quantity that is the problem here.