4 ms·

I don't trust google for multiple reasons, wont use them for anything important or start new services, I am careful to what I search, etc... However, as far as

I don't trust google for multiple reasons, wont use them for anything important or start new services, I am careful to what I search, etc... However, as far as my knowledge tells me Google is the best in the biz when it comes to security. While iPhones 0 click exploits cause the death of journalists and leak nudes of billionaires; The biggest 'Android' exploit Pegasus has requires going to some website, downloading an APK, going to settings, clicking allow install from web, then installing the malware. (Don't @me about Samsung hardware issues, if you cared about quality/did research, you wouldn't have bought a Samsung Android. Or heck, anything from Samsung.) Google is a crap company that I barely use(at most degoogled services and the occasional search when DDG can't do it), but we should give companies credit when they do things well. It promotes competency over relentless marketing.

tired-turtle 3y ago
Not disagreeing, but consider the user base of iOS vs Android. iOS users are wealthier/etc., so exploits affecting them seem more likely to be “newsworthy” and, hence, more likely to be pursued (higher upside). Similarly, consider how a sunken ferry that killed hundreds of migrants went largely unnoticed during the brouhaha surrounding the Titanic sub.
- drivebycomment 3y ago
  https://zerodium.com/program.html https://zerodium.com/program.html Zerodium pays more for Android zero click FCP(full chain with persistence) than on iOS zero click FCP. Most other categories Android and iOS exploits pay the same.
wahnfrieden 3y ago
Google is substantially wiretapped
- surajrmal 3y ago
  This is baseless fud.
  - wahnfrieden 3y ago
    [flagged]
    - mda 3y ago
      It is utter fud / bs.
      - wahnfrieden 3y ago
        Don't accuse me of spreading fud, it's widely covered news
    - alpaca128 3y ago
      > It’s documented fact Can you link any sources that document this?
      - doublerabbit 3y ago
        https://www.vice.com/en/article/qkvaam/google-confirms-cops-can-wiretap-your-hangouts https://www.vice.com/en/article/qkvaam/google-confirms-cops-... https://heartland.org/opinion/widespread-wiretapping-is-how-google-works/ https://heartland.org/opinion/widespread-wiretapping-is-how-... https://www.reuters.com/article/us-alphabet-google-privacy-lawsuit-idCAKCN24F2N4 https://www.reuters.com/article/us-alphabet-google-privacy-l... To post a few
      - dooglius 3y ago
        https://www.washingtonpost.com/world/national-security/nsa-infiltrates-links-to-yahoo-google-data-centers-worldwide-snowden-documents-say/2013/10/30/e51d661e-4166-11e3-8b74-d89d714ca4dd_story.html https://www.washingtonpost.com/world/national-security/nsa-i...
    - Kiro 3y ago
woobar 3y ago
Are you sure about biggest Android exploit? Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require only that the attacker know the victim's phone number. [1] [1] https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html https://googleprojectzero.blogspot.com/2023/03/multiple-inte...
- charcircuit 3y ago
  Do you have evidence Pegasus used this?
- Xeamek 3y ago
  To be exact, those aren't exploits of android itself, just the device it's running on. Not much of a difference in the outcome, but i guess it doesn't defeat the argument of google having good platform
  - woobar 3y ago
    This is a recent one. Whatsapp bug [1] exposed both Android and iOS few years back. And then there was MMS exploit [2] that affected close to 95% of android phones [1] https://www.ft.com/content/4da1117e-756c-11e9-be7d-6d846537acab https://www.ft.com/content/4da1117e-756c-11e9-be7d-6d846537a... [2] https://en.wikipedia.org/wiki/Stagefright_(bug) https://en.wikipedia.org/wiki/Stagefright_(bug)
    - arsome 3y ago
      While Stagefright "affected" them, it often wasn't exploitable. Not to mention that was 5+ years ago and they've since sandboxed all codecs, mitigating potential threats from that vector in the future.

tired-turtle 3y ago

Not disagreeing, but consider the user base of iOS vs Android. iOS users are wealthier/etc., so exploits affecting them seem more likely to be “newsworthy” and, hence, more likely to be pursued (higher upside). Similarly, consider how a sunken ferry that killed hundreds of migrants went largely unnoticed during the brouhaha surrounding the Titanic sub.

drivebycomment 3y ago
https://zerodium.com/program.html https://zerodium.com/program.html Zerodium pays more for Android zero click FCP(full chain with persistence) than on iOS zero click FCP. Most other categories Android and iOS exploits pay the same.

wahnfrieden 3y ago

Google is substantially wiretapped

surajrmal 3y ago
This is baseless fud.
- wahnfrieden 3y ago
  [flagged]
  - mda 3y ago
    It is utter fud / bs.
    - wahnfrieden 3y ago
      Don't accuse me of spreading fud, it's widely covered news
  - alpaca128 3y ago
    > It’s documented fact Can you link any sources that document this?
    - doublerabbit 3y ago
      https://www.vice.com/en/article/qkvaam/google-confirms-cops-can-wiretap-your-hangouts https://www.vice.com/en/article/qkvaam/google-confirms-cops-... https://heartland.org/opinion/widespread-wiretapping-is-how-google-works/ https://heartland.org/opinion/widespread-wiretapping-is-how-... https://www.reuters.com/article/us-alphabet-google-privacy-lawsuit-idCAKCN24F2N4 https://www.reuters.com/article/us-alphabet-google-privacy-l... To post a few
    - dooglius 3y ago
      https://www.washingtonpost.com/world/national-security/nsa-infiltrates-links-to-yahoo-google-data-centers-worldwide-snowden-documents-say/2013/10/30/e51d661e-4166-11e3-8b74-d89d714ca4dd_story.html https://www.washingtonpost.com/world/national-security/nsa-i...
  - Kiro 3y ago

woobar 3y ago

Are you sure about biggest Android exploit? Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require only that the attacker know the victim's phone number. [1] [1] https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html https://googleprojectzero.blogspot.com/2023/03/multiple-inte...

charcircuit 3y ago
Do you have evidence Pegasus used this?
Xeamek 3y ago
To be exact, those aren't exploits of android itself, just the device it's running on. Not much of a difference in the outcome, but i guess it doesn't defeat the argument of google having good platform
- woobar 3y ago
  This is a recent one. Whatsapp bug [1] exposed both Android and iOS few years back. And then there was MMS exploit [2] that affected close to 95% of android phones [1] https://www.ft.com/content/4da1117e-756c-11e9-be7d-6d846537acab https://www.ft.com/content/4da1117e-756c-11e9-be7d-6d846537a... [2] https://en.wikipedia.org/wiki/Stagefright_(bug) https://en.wikipedia.org/wiki/Stagefright_(bug)
  - arsome 3y ago
    While Stagefright "affected" them, it often wasn't exploitable. Not to mention that was 5+ years ago and they've since sandboxed all codecs, mitigating potential threats from that vector in the future.