Hacker News new | ask | show | jobs
by kbart 3499 days ago
"If your threat model includes a three letter agency, then don't use Android. Full stop. The iPhone is the ecosystem you want."

I wouldn't count on that either.. It depends on how "interesting" you are for them, given their reach, I would be really surprised if some of these agencies doesn't have zero-days and/or backdoors stockpiled for high value targets.
1 comments
captainmuon 3499 days ago
Heck, or they even have cooperation from Apple. Apple claims they dont have a backdoor, and the FBI moans that they can't hack current iPhones.

But honestly, who can ensure to me that there is no national security letter (or other mechanism I don't know about) forcing Apple to cooperate, with a gag order forcing them to keep silent?

Who can ensure me that the NSA et al have are not bribing, blackmailing, or using court orders on the three or four vocal security experts I can name (like Bruce Schneier, tptacek, Moxie Marlinspike, ...). Everything they say on this topic might be manipulated, who knows.

There could be backdoors everywhere, in apps, hardware, routers, lamps, whatever. Occam's razor suggests that this is crazy, but then people found spam sending wifi chips in clothes irons, so I guess nothing is too far fetched.

If you suspect "they" might be out to get you, the only thing you can really do is to stay under the radar, and hope they don't notice you and target you individually.

link
matt4077 3499 days ago
If we turn completely cynical and tell everyone that all manufacturers are equal, we take away all incentives for them to actually try to protect their users' privacy.

Apple deserves some recognition for their attempts. At some point they were fighting several lawsuits seeking to protect their users, and were under massive attack by some politicians because one of the cases was a terrorist. That's quite risky – with the current political climate, being associated with one of the parties has the potential to cut your revenue in half.

The FBI may have ultimately gotten the data after buying a zero-day exploit, which is unfortunate. But Apple seemed to be winning in court at that time and the gov may have been quite happy to find a way to drop the lawsuits without losing face.

Apple also uses https://en.wikipedia.org/wiki/Warrant_canary, which may or may not be useful.

link
pdimitar 3499 days ago
I keep wondering the same. And I keep thinking that by the time I became privacy conscious, I am already like 20-30 years late...

What can we do?

link