6 ms·

There is a reputation of Apple being more secure, but it's largely unfounded. It just looks that way because the ecosystem is completely locked down and softwar

There is a reputation of Apple being more secure, but it's largely unfounded. It just looks that way because the ecosystem is completely locked down and software isn't allowed to exist without apple's stamp of approval.

kbolino 2y ago
Apple drove genuine security improvements in mobile hardware well before Android, including dedicated security chips and encrypted storage. The gap has been closed for a few years now, though, so the reputation is not so much "unfounded" as "out of date".
- beeboobaa3 2y ago
  You're not talking about security that protects end users against malware. You're talking about "security" that protects the device against "tampering", i.e. the owner using it in a way apple does not approve of. Apple's "security improvements" have always been about protecting their walled garden first and foremost.
  - fingerlocks 2y ago
    This just isn’t true. We have multiple bricked android devices from bootloader infected malware downloaded directly from the Play store. Nothing like that has ever happened on iOS.
    - beeboobaa3 2y ago
      The only thing this may prove is that Apple's app store review is more strict.
      - fingerlocks 2y ago
        Yeah, along with the API entitlements. That’s how sandbox security works.
  - kbolino 2y ago
    A mobile device, in most users' hands: - Stores their security credentials for critical sites (banks, HR/payroll, stores, govt services, etc.) - Even if not, has unfettered access to their primary email account, which means it can autonomously initiate a password reset for nearly any site - Is their primary 2FA mechanism, which means it can autonomously confirm a password reset for nearly any site That's an immense amount of risk, both from apps running on the device, and from the device getting stolen. Both of the measures I mentioned are directly relevant to these kinds of threats. And, as I already said, Android has adopted these same security measures as well.
    - beeboobaa3 2y ago
      So the same as any computer since online banking and email were invented. This isn't some new development. You should stop trying to nanny people.
      - kbolino 2y ago
        I have no idea what you are trying to say in the context of the thread. Hardware security is important for all of that and security measures have to evolve over time.
- cyberax 2y ago
  Like?

kbolino 2y ago

Apple drove genuine security improvements in mobile hardware well before Android, including dedicated security chips and encrypted storage. The gap has been closed for a few years now, though, so the reputation is not so much "unfounded" as "out of date".

beeboobaa3 2y ago
You're not talking about security that protects end users against malware. You're talking about "security" that protects the device against "tampering", i.e. the owner using it in a way apple does not approve of. Apple's "security improvements" have always been about protecting their walled garden first and foremost.
- fingerlocks 2y ago
  This just isn’t true. We have multiple bricked android devices from bootloader infected malware downloaded directly from the Play store. Nothing like that has ever happened on iOS.
  - beeboobaa3 2y ago
    The only thing this may prove is that Apple's app store review is more strict.
    - fingerlocks 2y ago
      Yeah, along with the API entitlements. That’s how sandbox security works.
- kbolino 2y ago
  A mobile device, in most users' hands: - Stores their security credentials for critical sites (banks, HR/payroll, stores, govt services, etc.) - Even if not, has unfettered access to their primary email account, which means it can autonomously initiate a password reset for nearly any site - Is their primary 2FA mechanism, which means it can autonomously confirm a password reset for nearly any site That's an immense amount of risk, both from apps running on the device, and from the device getting stolen. Both of the measures I mentioned are directly relevant to these kinds of threats. And, as I already said, Android has adopted these same security measures as well.
  - beeboobaa3 2y ago
    So the same as any computer since online banking and email were invented. This isn't some new development. You should stop trying to nanny people.
    - kbolino 2y ago
      I have no idea what you are trying to say in the context of the thread. Hardware security is important for all of that and security measures have to evolve over time.
cyberax 2y ago
Like?