News for hackers. Stuff that matters.
Re:Preinstalled Malware Targeting Mobile Users by pdog on Saturday March 11, 2017 @10:42AM (#13845743)
If you care at all about security, use an iPhone. Make sure the latest version of iOS is installed. Set up a difficult passcode.

Android security is a joke. Seriously. Don't use an Android phone.

Re:Preinstalled Malware Targeting Mobile Users by chrisper on Saturday March 11, 2017 @12:01PM (#13846100)
Yes at the cost of not allowing you do to many things.

In that sense, a prison is safer than being outside, too. Should I live in a prison instead then?

I am not trying to bash iOS here, but it is very clear that security in iOS comes at the cost of freedom and not being able to do a lot of things. For example, you can only install apps through the App Store. You cannot mount USB drives and so on.

Security is always a tradeoff.

Re:Preinstalled Malware Targeting Mobile Users by ubernostrum on Sunday March 12, 2017 @09:29AM (#13850562)
One person's prison is another person's comfortable home. Many people do not perceive iOS as a prison, and would take issue with your choice of words to describe it as such. If you feel that it is, then of course there are alternatives available. You just also know what you're giving up and the risks you're taking.

(and, of course, Android is not so nice either without the magic non-Free bits from Google...)

Re:Preinstalled Malware Targeting Mobile Users by M_Grey on Saturday March 11, 2017 @01:52PM (#13846600)
>In that sense, a prison is safer than being outside, too. Should I live in a prison instead then?

I mean... I see Android as akin to the situation in The Walking Dead that led to them living in a literal prison, so yes. I've always avoided Mac when possible, but in the mobile space I'd rather use those devices less, and less freely, but more securely. I'll explore my options on my desktop or laptop.

Re:Preinstalled Malware Targeting Mobile Users by CaptSpify on Saturday March 11, 2017 @11:30AM (#13845943)
Android security is indeed a joke. That doesn't make me eager to use a different device with a bunch of closed-source software. We really need better choices.
Re:Preinstalled Malware Targeting Mobile Users by egwynn on Saturday March 11, 2017 @02:15PM (#13846698)
Yes, but isn’t that the problem with Android security updates? OEMs need to (and fail to) deliver closed-source binary blobs to end users. If open source is the real goal, then we* need to be demanding much more openness from OEMs.

* Not me strictly-speaking, because I’m an iOS user for the reasons specified by GP, among others.

Re:Preinstalled Malware Targeting Mobile Users by dredmorbius on Saturday March 11, 2017 @03:41PM (#13847141)
Security updates, shovelware / crapware preloads, Google, and a slew of other stuff.

I'm exceedingly disappointed with all current mobile offerings. Holding out distant hope for Ubuntu.

Re:Preinstalled Malware Targeting Mobile Users by CaptSpify on Saturday March 11, 2017 @06:14PM (#13847832)
> Holding out distant hope for Ubuntu.

me too! I've recently got one and am eager to get it going. But as it stands now, it's not an alternative.

Re:Preinstalled Malware Targeting Mobile Users by bitmapbrother on Saturday March 11, 2017 @11:38AM (#13845993)
Why don't you enlighten us? Better yet, how about you show us by compromising an up to date Google device?
Re:Preinstalled Malware Targeting Mobile Users by CaptSpify on Saturday March 11, 2017 @01:28PM (#13846483)
http://core0.staticworld.net/images/article/2015/05/android_...

There's a picture of their crappy security in practice. It needs much better and more granular controls for me to consider it secure.

Re:Preinstalled Malware Targeting Mobile Users by nitrogen on Saturday March 11, 2017 @01:54PM (#13846607)
Android's network security model is atrocious, with full network access being in the "other" category that all apps get. You don't need to have root on a phone to go rogue and attack/analyze other devices, if the phone already gives your "no permissions" app full access.
Re:Preinstalled Malware Targeting Mobile Users by bobsam on Saturday March 11, 2017 @05:59PM (#13847755)
The can only be one logical reason for this: to Google AdSense is more important than your privacy.

I can't take things like project zero seriously when the same company works hard to weaken Android privacy.

Re:Preinstalled Malware Targeting Mobile Users by bitmapbrother on Saturday March 11, 2017 @02:36PM (#13846785)
So you have an issue with Android's permission model? Fair point, it could be more granular. Are permissions more granular on iOS? Because I'd like to block access to the Internet for some apps that display ads. I'm guessing probably not.
Re:Preinstalled Malware Targeting Mobile Users by Buge on Saturday March 11, 2017 @05:15PM (#13847554)
Is there a permissions model on Linux, Mac, or Windows? This issue seems kind of unimportant. If a hacker can compromise the device, they can disregard all permissions.
Re:Preinstalled Malware Targeting Mobile Users by codedokode on Saturday March 11, 2017 @04:27PM (#13847356)
Does iPhone has a firewall? Or does one have to trust Apple and app developers that they won't collect a single byte of "anonymous" "analytics"?
Re:Preinstalled Malware Targeting Mobile Users by thinkling on Saturday March 11, 2017 @05:24PM (#13847584)
No, there is no built-in firewall for outgoing connections on iOS, and I don't know of a way to install one without using an external device like a router with a filtering proxy.

The OS limits an app's access to data that belongs to that app, so an app can't gather information you do not give it access too. (e.g. you have to give explicit permission for it to access photos or GPS location). But you do not have any control over other analytics the app may gather and upload, e.g. frequency of app use or info you enter.

Re:Preinstalled Malware Targeting Mobile Users by geoffmcc on Saturday March 11, 2017 @03:59PM (#13847225)
> Android security is a joke. Seriously. Don't use an Android phone.

Can confirm it sucks. Android Security Patch Level on my phone is 2016-01-01. Funny cause on my old different manufacturer phone before this one I had a more recent security patch. I am pretty sure some nasty stuff came out between now and then.

Can't tell if Android is the issue, the phone manufacturer or both.

[dead]
Re:Preinstalled Malware Targeting Mobile Users by dang on Sunday March 12, 2017 @06:07PM (#13853429)
> Your post is a joke.

Please edit that kind of name-calling out of your comments here. I realize it started upthread, but this crosses into incivility and tarnishes your otherwise fine comment.

Re:Preinstalled Malware Targeting Mobile Users by bobsam on Saturday March 11, 2017 @04:03PM (#13847248)
To add to that, in China people have bought what they thought was a genuine iPhone (in an "Apple store" no less) but turned out to be a clone full of crapware. These are extremely well made clones, people have used them for years without understanding what they were.

What does that tell us about iPhone security? Nothing.

Re:Preinstalled Malware Targeting Mobile Users by bobsam on Saturday March 11, 2017 @06:08PM (#13847806)
Re:Preinstalled Malware Targeting Mobile Users by tokenizerrr on Saturday March 11, 2017 @12:49PM (#13846311)
iPhones are an absolute joke. I am not paying 100s of dollars for the privilege of developing software for my own hardware.
Re:Preinstalled Malware Targeting Mobile Users by josch on Saturday March 11, 2017 @03:14PM (#13847006)
That is not necessary since a while ago (Xcode 7).
Re:Preinstalled Malware Targeting Mobile Users by khedoros1 on Saturday March 11, 2017 @03:44PM (#13847155)
Where's the Windows or Linux version of Xcode 7, then? Or a version of OSX licensed to run on the capable hardware that I already own? I suppose I could spend $500 on a Mac Mini, but then we're back to tokenizerrr's question.
Re:Preinstalled Malware Targeting Mobile Users by tokenizerrr on Saturday March 11, 2017 @04:34PM (#13847380)
Oh? Where do I find the docs and the download link? It has to run on Linux laptop or my Windows desktop, both which have perfectly capable hardware. I am not buying a Mac for the privilege of developing software for an iPhone.
Re:Preinstalled Malware Targeting Mobile Users by megablast on Saturday March 11, 2017 @05:43PM (#13847665)
> Where do I find the docs and the download link?

On the Apple developer website, when you make a free dev account.

And yes, it is mac only. But they are a mac company.

Re:Preinstalled Malware Targeting Mobile Users by tokenizerrr on Saturday March 11, 2017 @05:54PM (#13847730)
I'd gladly run the free developer copy of mac os on my perfectly capable hardware if that is what they desire I use. Something like https://developer.microsoft.com/en-us/microsoft-edge/tools/v...
Re:Preinstalled Malware Targeting Mobile Users by H4CK3RM4N on Saturday March 11, 2017 @10:28PM (#13848761)
A Hackintosh is perfectly viable. Assuming you can boot the installer(free from the Mac App Store), it's trivial to set up the necessary bootloader and extensions(certainly easier that making Windows dual boot nicely).
Re:Preinstalled Malware Targeting Mobile Users by tokenizerrr on Saturday March 11, 2017 @11:25PM (#13848951)
This is legal?