Re:Google reveals fistful of flaws in Apple's iMessage app
by scarface74 on Thursday August 08, 2019 @02:25AM
(#20642306)
We already discussed this. iOS has a huge attack surface that can only be patched via system updates, which is horribly bad design and terrible for security.
And your theory isn’t supported by facts on the ground - we have statistics about the percentage of iOS devices running the latest version of iOS versus the number of Android devices.
Since iOS annoying asks you to upgrade when there is one available and you are given a choice to automatically update when you’re not using, do you have a reliable citation showing the number of iOS devices without the latest version compared to the number of Android devices? Or do you just have a hunch?
We already discussed this. iOS has a huge attack surface that can only be patched via system updates, which is horribly bad design and terrible for security.
> The other 2.7 billion Android users probably would care if they knew any better.
If those billions knew better, they would get an Android One or Pixel instead of an instead of an iOS or other Android device. We already established that there is only one set of devices that is good for security, and the vast majority of people, including you it seems, do not have them. It's not my problem to fix their security. I don't buy them myself.
> I have a Mac Mini from 2006 running Windows 7 that is still getting security updates and a Dell
In exactly the same way, updates work fine for those of us on properly updated Android devices, and Windows updates don't work for people with hardware that has poorly supported drivers. You didn't address my point. Also, you still haven't addressed why this matters.
> Linux is free open source software that anyone can use, no one pays Linus for using it, and Linus doesn’t have much of any criteria about how it’s used.
So exactly the same as Android.
> There is no five year old iPhone that isn’t supported and receiving security patches.
And all of them have poorly updated userspace. There is no five year old Android phone that has poorly updated userspace. All of those are insecure except for the subset of Android devices that have properly updated base system.