Re:Javascript exploit actively used against TorBrowser
by wheelerwj on Tuesday November 29, 2016 @09:38PM
(#13068008)
Thanks! That's mostly what I suspected. Android does have massive market share outside of North America, but here it is much closer to 50/50. Obviously our security/privacy concerns are drastically different than those in other parts of the world so it makes sense to secure android first.
It's hard to recommend alternative distributions of android to most people. I feel like it's similar to linux 15 years ago, it CAN be more secure, but it can also be incredibly insecure if setup improperly. And if you are just going to go install playstore and google apps, was anything really accomplished?
Re:Javascript exploit actively used against TorBrowser
by secfirstmd on Tuesday November 29, 2016 @09:52PM
(#13068074)
Yes. Though in some countries and threat models (where Google/NSA is not your problem) we are seeing many activists/journalists switching entirely to a Google Platform...Google Apps, Docs, Android, Google Chromebooks etc. If implemented properly (two factor etc) in some threat models it actually makes more sense compared to a mishmash of systems without anyone capable of monitoring and protecting them - and it helps to reduce the overall attack surface...It's not ideal but often the best that can be offered in certain circumstances.
Re:Javascript exploit actively used against TorBrowser
by wheelerwj on Tuesday November 29, 2016 @09:59PM
(#13068121)
> it actually makes more sense compared to a mishmash of systems
100% agreed! It's like using new, super secret, awesome encryption (telegram/zcash) vs something more established that's been reviewed, tested, and has support.
Re:Javascript exploit actively used against TorBrowser
by Nition on Wednesday November 30, 2016 @01:14AM
(#13068836)
The Russian government just confirmed Sailfish for all government mobile work going forward: https://cdn.jolla.com/wp-content/uploads/bsk-pdf-manager/Jol...
-Umbrella on iOS is coming in 2nd quarter of next year! Whoohoo (We get asked about this all the time).
-The main reason that we and a number of other open-source projects built on Android first is that because is by far the dominant smartphone platform. Especially in developing areas with significant human rights problems like China, Russia, parts of Africa and Asia. Mainly because the cost of Android phones is low.
-On the security specific question. I think the Android vs iOS debate has evolved. A few years ago it was felt that the open-source(ish) and customisation aspects of the Android platform meant that it was the more obvious choice for a secure phone.
I think that what we have seen recently, with tens of millions of Android phones not getting updates etc - has probably challenged that[1]. Especially when iOS now has encryption as standard and other security features. Of course there are Android options like Copperhead/F-Droid/Guardian Project which are examples of how you can retake control to a certain extent, but I think for the average person's threat model iOS is probably pulling ahead on the security side of things.
[1] https://threatpost.com/android-security-report-29-percent-of...