News for hackers. Stuff that matters.

A comment on Pegasus vs. Predator. Parent comment

Re:Pegasus vs. Predator by schleck8 on Friday December 17, 2021 @05:18AM (#29590214)
iOS is uniform whereas there are many popular Android distros with different security approaches (some have an antivirus vendor integrated, or hardened kernels).

Also iOS users tend to be less security savvy, but that's just my impression

[ Parent | on HN ]
Re:Pegasus vs. Predator by AnonymousPlanet on Friday December 17, 2021 @05:26AM (#29590291)
Counterpoint 1: For security savvy people it would seem to be more reasonable to choose a platform with steady security updates.

Counterpoint 2: There are much more Android devices with outdated versions of Android with known security bugs around than similar iOS devices.

Maybe you just don't need the big guns for most Android phones, so you will find them only on the harder targets.

[ Parent | on HN ]
Re:Pegasus vs. Predator by schleck8 on Friday December 17, 2021 @06:02AM (#29590581)
Counter Counterpoint 1: AOSP gets a security update per month and system component updates through the Playstore

https://source.android.com/security/bulletin

Counter Counterpoint 2: You are right

[ Parent | on HN ]
Re:Pegasus vs. Predator by AnonymousPlanet on Saturday December 18, 2021 @05:21AM (#29603384)
> Counter Counterpoint 1: AOSP gets a security update per month and system component updates through the Playstore

Sadly, I don't think that's very relevant. There are countless Android phones in daily use that won't get any security update ever again (mostly because of bad update policies of OEMs). The story is different for iOS. I wouldn't be surprised if that alone makes a difference in statistics in so far as that a random Android phone you encounter is less likely to be so secure to warrant the use of big guns like Pegasus, compared to your random iPhone. And that is regardless of how secure an up to date Android is.

So I think the statistics in the article is less due to Android vs iOS security, but more a reflection of update policies.

[ Parent | on HN ]
Re:Pegasus vs. Predator by zibzab on Sunday December 19, 2021 @05:03AM (#29612700)
I think you are ignoring how much Android security has improved in the past 3-4 years.

Core libraries (where historically the biggest security bugs have been found, see for example stagefreight) plus all core applications (e.g. Web browser, email client) are now updated from the store.

[ Parent | on HN ]