[dheera]

MITM proxies don't work when apps use certificate pinning. Many popular apps do this.

> everyone who wants to manually inspect the bytes coming out of their phone

== everyone who actually gives a damn about their privacy

Do you even know what your phone apps are sending about you? I know what my apps are sending about me. Some of it is pretty scary, honestly.

[slver]

So you like an OS that sends fake sensor data to apps, but you trust it to send real network data to you? What if it doesn't? What if the hardware sends fake network data to the OS? You clearly don't give a damn about your privacy, because everything you do can be subverted through any of those components.

People who give a damn about their privacy write their own OS, apps and install it on their custom built hardware that was built into their own semiconductor factories, using personally sourced materials and designs.

Yes, I can also play this game.

[dheera]

> on their custom built hardware

Sure, make your own phone, I'll very much support and admire you if you do.

Until then, since I don't have that hardware engineering prowess, I'm at least a few steps ahead of any iOS user and at least have control over my OS and what my apps do.

iOS users on the other hand just surrender their privacy management to almighty Apple and trust that Apple does no evil, and trust that the signed apps they run on their devices do no evil.

Yeah, if Qualcomm does evil in their Snapdragons I'm screwed, but at least I've reduced my privacy risks by a few notches, better than nothing.

[slver]

iOS is also better than nothing.

It's the best solution to people who have better stuff to do, but want relative security compared to Android.