News for hackers. Stuff that matters.
Re:Zero-day in Sign in with Apple by kohtatsu on Saturday May 30, 2020 @02:51PM (#23363588)
This was pretty true not long ago. It's still a notoriously short window for OEM software patches on Android, whereas Apple's first 64-bit phone, the 5s from Fall 2013 is still getting patches (May 20th was the last one, iOS 12.4.7)

Apple pioneered usable security with TouchID and the secure enclave; a lot of Android fingerprint readers were gimmicks for years, same with the face unlocks. https://manuals.info.apple.com/MANUALS/1000/MA1902/en_US/app...

They also invest piles of money into privacy https://apple.com/privacy (1 minute overview), https://apple.com/privacy/features (in-depth with links to whitepapers).

I imagine that's where your teacher was coming from.

Re:Zero-day in Sign in with Apple by fishywang on Saturday May 30, 2020 @03:01PM (#23363685)
Yes I'm not gonna defend Google's privacy issues, but privacy is totally different from security. People tend to confuse them. I understand it if it's average Joe got confused. But if you are a "security consultant" and you still have no idea what's the difference between them, then that's a big problem.

Regarding security, see examples like https://qz.com/1844937/hong-kongs-mass-arrests-give-police-a...

Re:Zero-day in Sign in with Apple by fishywang on Saturday May 30, 2020 @03:13PM (#23363784)
For privacy, I guess you can have full confident that Apple has the intention to keep your data private. But do you have full confident that Apple has the competence to fulfill that intention?

Google doesn't have the intention to keep all your data private, sure. They are an ads company after all. But for things they want to protect, in most cases they are competent enough to protect them.

(Disclaimer: I also worked for Google, but the "employer" I mentioned in my original comment was not Google)

Re:Zero-day in Sign in with Apple by enitihas on Saturday May 30, 2020 @02:58PM (#23363652)
Fortunately, it seems google has separated security updates from the OEM updates on some newer phones it seems. The phone I bought In November 2018, right now is receiving monthly security updates via Play Services updates, and is right now on the May version for some time.
Re:Zero-day in Sign in with Apple by saagarjha on Saturday May 30, 2020 @03:11PM (#23363766)
> The phone I bought In November 2018

I think it’s too early to claim anything for that one.