News for hackers. Stuff that matters.

A comment on Apple's Business Beyond the iPhone. Parent comment

Re:Apple's Business Beyond the iPhone by ancorevard on Wednesday January 30, 2019 @06:11PM (#19040621)
At this point Android is such a privacy hell hole that creating a secure messaging app will be doomed to fail. It matter little if the app and its protocols are secure if the device is rooted or otherwise exploited and typed conversations can be siphoned which would expose both the sender and the receiver. The receiver might be an iOS device, causing the communication security/privacy integrity of an iOS user to be at the mercy of any Android device.
[ Parent | on HN ]
Re:Apple's Business Beyond the iPhone by walterbell on Wednesday January 30, 2019 @07:49PM (#19041220)
iOS messaging apps need an option to warn the sender (or block delivery) when the receiver has non-iOS devices, e.g. in a specific group context with sensitive data.
[ Parent | on HN ]
Re:Apple's Business Beyond the iPhone by CarriersSuck on Wednesday January 30, 2019 @08:06PM (#19041308)
This would have to be the case. You can't trust an Android device to not have anything between the keyboard app and the messaging app.
[ Parent | on HN ]
Re:Apple's Business Beyond the iPhone by on_and_off on Wednesday January 30, 2019 @08:38PM (#19041474)
how is that different than exploiting security flaws in iOS ?
[ Parent | on HN ]
Re:Apple's Business Beyond the iPhone by scarface74 on Thursday January 31, 2019 @06:32AM (#19044055)
There is a difference between a security flaw and insecure by design as with Android. One simple example is how third party keyboards work on both platforms. First the user has to install the keyboard, then explicitly go to settings to use it and even then it doesn’t have network access by default. The user has to go back into settings to give it network access and iOS gives you a big scary warning.

Even then, iOS will switch back to the standard keyboard when you type into a password field.

[ Parent | on HN ]
Re:Apple's Business Beyond the iPhone by on_and_off on Saturday February 02, 2019 @09:46PM (#19067486)
You could just as easily argue that iOS is by nature insecure since absolutely exterior audits are impossible.
[ Parent | on HN ]
Re:Apple's Business Beyond the iPhone by scarface74 on Sunday February 03, 2019 @05:26AM (#19068804)
It isn’t “impossible.” People have been analyzing assembly language programs and hacking them since the dawn of personal computers. How do you think Google has been able to find exploits in iOS? I have no idea why people think that assembly language is the language of wizards.

Between the binary blob drivers that the OEMs don’t even have access to and Google Play Services, Android is equally hard to audit.

[ Parent | on HN ]
Re:Apple's Business Beyond the iPhone by on_and_off on Friday February 08, 2019 @03:20AM (#19112396)
false equivalence
[ Parent | on HN ]