3 ms·
This honestly smells really strong like made up shit. Or the guy is very much a low key player. Generally, if you develop exploits, you should be completely aw
by ActorNightly 1y ago
This honestly smells really strong like made up shit. Or the guy is very much a low key player.
Generally, if you develop exploits, you should be completely aware of every single possible attack vector. If you are working for a company like Trenchant, and you know what you are doing, the last thing you do is use Apple devices (at least fully, most of the time you have a public phone and much more secure private phone)
The reason is, when you take an Apple phone, connect it to a router that proxies through a computer so you can inspect traffic, you can see the vast amounts of shit being sent back to Apple which you have no control of.
Meanwhile, if you do the same with my custom rooted, de-googled android phone that I take overseas, you will see only ntp traffic, and that is only so I don't have to deal with cert issues because my clock is wrong.
- saagarjha 1y agoTrenchant employees use iPhones just like everyone else. What else would they use?
- rekttrader 1y agoApple SRD devices.
- saagarjha 1y ago> The SRD is intended for use in a controlled setting for security research only…The SRD isn't meant for personal use or daily carry, and must remain on the premises of program participants at all times. (From https://security.apple.com/research-device https://security.apple.com/research-device)
- commandersaki 1y agoDoubtful, if you find exploits using an SRD then you're expected to disclose them to Apple. None of these shops would have SRDs.
- ActorNightly 1y agoFor anything that can be considered compromising, you dont use a smartphone.