Re:How to unc0ver a 0-day in 4 hours or less
by httpsterio on Thursday July 09, 2020 @10:20PM
(#23787499)
That's like saying that all Apple products suck because they bend, antenna doesn't work, keys stop working and screens start to stain.
Like the person said, it was literally one Samsung model that had issues and it could've just as well have been an iOS device. Looking at how many recalls and repair programs they have for design flaws, I don't think anyone should paint Apple as the better side here.
Re:How to unc0ver a 0-day in 4 hours or less
by muppetman on Thursday July 09, 2020 @10:19PM
(#23787495)
Can you link me to a custom ROM on XDA that was shown to have Malware?
That's a poor argument. That's like saying you didn't read this page's article, because the malware being discussed wasn't already known to you. Absence of evidence is not evidence of absence. Formally, this is called an argument from ignorance.
Re:How to unc0ver a 0-day in 4 hours or less
by Bnshsysjab on Friday July 10, 2020 @08:32AM
(#23790823)
This seems like a pretty weak argument, are you sure you want to trust a bunch of hobbiest devs with the security of your (probably) most valuable computer?
Just because something doesn’t have any know issues, doesn’t mean it’s not wise to avoid it because it flat out smells.
Re:How to unc0ver a 0-day in 4 hours or less
by devenblake on Friday July 10, 2020 @02:05PM
(#23794418)
I trust hobbiests more than I trust Google or Apple to handle my security.
Re:How to unc0ver a 0-day in 4 hours or less
by Bnshsysjab on Friday July 10, 2020 @06:14PM
(#23797188)
That really depends on your threat model, are Apple and google going to use marketing data against you? Probably.
Are they going to plant malware which steals your banking details? Probably less likely than a random binary package you found on some forum.
If my house burns down, I personally won't care if it's android in general, the model, or the battery in the android phone which destroyed everything I own.
> That's actually solved by rooting since you can update from any source instead of just signed packages
Installing software downloaded from xda-developers is, what I like to call, malware as a service (tm).