5 ms·

the more interesting thing is why the default state has to be made vulnerable in the first place instead of just making lockdown the default method of using an

by acters 3y ago

the more interesting thing is why the default state has to be made vulnerable in the first place instead of just making lockdown the default method of using an apple device

acdha 3y ago
Because it turns off a lot of functionality people like: https://support.apple.com/en-us/HT212650 https://support.apple.com/en-us/HT212650 This is a classic challenge for security: every feature expands the attack surface, but users often pick what to buy based on those features.
- TylerE 3y ago
  Isn't there something like a 50% performance hit too, since it turns off a lot of optimizations?
  - acdha 3y ago
    In Safari, yes, losing the JavaScript JIT is hefty but I’d somewhat cynically argue that it’s probably balanced out performance-wise if you install an ad blocker.
cdchn 3y ago
Lots of people would be blocked iMessaging each other TIF images.
seanhunter 3y ago
The even more interesting thing is that all functionality increases the attack surface and therefore makes all devices more vulnerable. The most secure state is not to have the device at all or, failing that, to have it permanently turned off. This is true of every device, not just apple. The reason people possess devices is to use functionality and therefore they have to make some tradeoffs in terms of security. The default state is what apple currently think is the best tradeoff in terms of risk vs functionality for most people. For people with an extremely unusual threat profile it stands to reason a different tradeoff might be appropriate.
- bt1a 3y ago
  Great reply, but don't forget to add Apple's bottom line to the balance beam of user risk and device functionality there
  - seanhunter 3y ago
    True. That said, they do give a lot of granular control to the user to turn off individual functions if the user feels differently and wants to change their stance eg iMessage can be disabled with a switch in settings.

by acters 3y ago

the more interesting thing is why the default state has to be made vulnerable in the first place instead of just making lockdown the default method of using an apple device

acdha 3y ago

Because it turns off a lot of functionality people like: https://support.apple.com/en-us/HT212650 https://support.apple.com/en-us/HT212650 This is a classic challenge for security: every feature expands the attack surface, but users often pick what to buy based on those features.

TylerE 3y ago
Isn't there something like a 50% performance hit too, since it turns off a lot of optimizations?
- acdha 3y ago
  In Safari, yes, losing the JavaScript JIT is hefty but I’d somewhat cynically argue that it’s probably balanced out performance-wise if you install an ad blocker.

cdchn 3y ago

Lots of people would be blocked iMessaging each other TIF images.

seanhunter 3y ago

The even more interesting thing is that all functionality increases the attack surface and therefore makes all devices more vulnerable. The most secure state is not to have the device at all or, failing that, to have it permanently turned off. This is true of every device, not just apple. The reason people possess devices is to use functionality and therefore they have to make some tradeoffs in terms of security. The default state is what apple currently think is the best tradeoff in terms of risk vs functionality for most people. For people with an extremely unusual threat profile it stands to reason a different tradeoff might be appropriate.

bt1a 3y ago
Great reply, but don't forget to add Apple's bottom line to the balance beam of user risk and device functionality there
- seanhunter 3y ago
  True. That said, they do give a lot of granular control to the user to turn off individual functions if the user feels differently and wants to change their stance eg iMessage can be disabled with a switch in settings.