News for hackers. Stuff that matters.
Re:Rotten Apple by Angostura on Tuesday February 20, 2024 @07:54AM (#39440623)
A lot of this article appears to be based on the belief that the security architecture of iOS and MacOS are identical. This seems ... an unlikely assumption
Re:Rotten Apple by bryanrasmussen on Tuesday February 20, 2024 @08:23AM (#39440876)
No the article is under the belief that because something has not been a security problem for Mac it will not be a security problem for iOS, this does not necessarily have to be because the security architectures of both are the same.
Re:Rotten Apple by Retr0id on Tuesday February 20, 2024 @08:09AM (#39440756)
The security architectures of both are reasonably well documented[1] by apple, do you have any relevant distinctions to point out?

[1] https://help.apple.com/pdf/security/en_US/apple-platform-sec... [PDF]

Re:Rotten Apple by Angostura on Tuesday February 20, 2024 @06:54PM (#39448539)
I suspect that there are too many differences for me to really list., but for starters MacOS supports multiple user accounts and has beeen built from its inception to allow people to install software from anywhere.
Re:Rotten Apple by rchaud on Wednesday February 21, 2024 @10:06AM (#39454679)
For several years now, MacOS has blocked unsigned apps from running. You have to manually enable every single app installed this way inside System Preferences > Security.

Android handles it the same way.

Re:Rotten Apple by Angostura on Wednesday February 21, 2024 @07:18PM (#39461493)
Nope - yuo just right-click on the app and chose 'Open' from the menu. No need to go into preferences.
Re:Rotten Apple by rickdeckard on Tuesday February 20, 2024 @07:59AM (#39440676)
If the argument is that in reality the security architecture of iOS is much much worse than MacOS, I'd be interested to hear the details of that rationale...
Re:Rotten Apple by bjornsing on Tuesday February 20, 2024 @08:16AM (#39440803)
I think a more problematic assumption is that iOS and MacOS users are equally aware and knowledgeable about potential security threats. It’s true that the sky hasn’t fallen because MacOS users are exposed to these risks. But they are not new risks on MacOS. They will be on iOS.
Re:Rotten Apple by pretext-1 on Tuesday February 20, 2024 @08:24AM (#39440890)
Maybe people on this site are aware but I can assure you average Joe has no clue.
Re:Rotten Apple by bjornsing on Tuesday February 20, 2024 @12:06PM (#39443760)
Exactly. And average Joe has grown accustomed to not needing a clue.
Re:Rotten Apple by smoldesu on Tuesday February 20, 2024 @02:08PM (#39445477)
It hasn't protected Average Joe anyways. There is malware being actively distributed, today, that uses nothing other than first-party Apple services to attain persistence.

Average Joe has to grow up. Scam websites and scam callers aren't going away, and even scam apps are being approved and distributed on Apple's App Store. On iOS, you have to do your due diligence to avoid being exploited (and even that might not help against some threats).

Re:Rotten Apple by addicted on Tuesday February 20, 2024 @08:32AM (#39440981)
They don’t need to use a different browser engine.

You’re talking about a user who has gone out of their way through multiple scary Apple warnings to change their browser engine.

And even once they do that, they’re likely to be installing one of Firefox, Chrome, or Edge, all of which have as good if not better security histories than Safari.

Re:Rotten Apple by devnullbrain on Tuesday February 20, 2024 @08:54AM (#39441251)
The sky hasn't fallen for the 70% of smartphone users who have an Android.
Re:Rotten Apple by makeitdouble on Tuesday February 20, 2024 @09:47AM (#39441911)
Parent's point is that Apple successfuly maintains two different security levels for mac and iOS, and claiming that it absolutely can't lower iOS at any cost is just Apple's opinion.

For sure Apple doesn't like the macos security model and would want way tighter control on what's allowed to run, if it could get away with it. But it's not about what Apple wants, it's about what they're asked to do.