3 ms·
The reason mobile OS don’t have such a problem is because of the ‘walled-garden’ for App Store. Essentially, every binary being run on all Apple and likely most
by feyman_r 2y ago
The reason mobile OS don’t have such a problem is because of the ‘walled-garden’ for App Store. Essentially, every binary being run on all Apple and likely most Android has been ‘blessed’ by the manufacturer App Store.
Is it possible to rootkit phones? Yes; does a typical user do it - heck no.
- dagmx 2y agoThe app store does some pre-checks, yes. But it can’t catch all the security vulnerabilities that might be unknown. It’s only a small piece of the pie. Largely it exists to make sure apps work, don’t have malicious UX patterns and don’t use private APIs. iOS (and to a lesser degree, macOS) use notarization to be able to pull apps found of being risky as needed. Additionally they implement much stricter levels of sandboxing so that even if something slips by all detection, it’s heavily limited in what it can do without a users explicit permission or a catastrophic vulnerability.
- fulafel 2y agoAndroid supports third party app stores and sideloading out of the box without rooting. There's a separate apk scanning feature that works with sideloading. (There's a big android user population without access to the Android app store at all)