Hacker News new | ask | show | jobs
by systemvoltage 2112 days ago
I actually want a phone with absolutely no app store. Just browser is fine. Given the amount of information it holds, adding any kind of apps that allow system wide access is horrifying to me. Since we don't have such phones, the next best thing is a store run by a company that can have security staff, highly paid security engineers and a whole bunch of people trying to make it secure than some reddit group that wants to distribute apps to billions of people. For that, as I said, just use a browser.
1 comments
dylan-m 2112 days ago
App store reviewers are not the people you should be trusting to make your phone secure. They can and do make mistakes, because their job is to go through a checklist, look for things they don't like, and maybe run some analysis tools that other people wrote. (I'm guessing, of course: this process is completely invisible to the general public). The people who should be making your iPhone secure are the developers at Apple who are improving how apps are sandboxed, catching and fixing security vulnerabilities throughout the OS, sometimes even with open source code and published CVE entries.

If we have so little faith in those developers that we believe the last line of defence - the App Store reviewers - are the thing holding us back from disaster, then we definitely should not be using iPhones.

link
systemvoltage 2111 days ago
App store reviews are executing the policies and tools that security engineers built. Whether it is a human checking these policies or automated scripts doing it, the point is that the policies governing those filtering processes are conceptualized, written and developed by experts that know what they're doing and they get paid a handsome amount [250k USD and upwards]. You're also switching from AppStore to the whole device. The device is secure because of things like T2 chip and billions that probably went into making it possible.

It's really obvious to me which is more secure - a 2 trillion dollar company with vested interest and one of the key selling points, that is privacy; or ... literally anything else.

link