Hacker News new | ask | show | jobs
by deregulateMed 1788 days ago
Holy shit, there's literally a dozen of Apple products exploited.

It's not a single "Apple music exploit", it's dozens of separate services. Music, messenger, safari, iOS, etc...

I never want to hear Apple cares about security again.

I could forgive 1 mistake, but this seems like negligence. (Don't put me down as a defender of MS or Android, but at least they don't use "Security" in their marketing)

2 comments

If you would have actually read the report, you would have known the attacks are not specifically device or mobile OS bound. They simply say that iOS leaves behind more useable traces.

From paragraph 10:

  Much of the targeting outlined in this report involves Pegasus attacks targeting iOS devices. It is important to note that this does not necessarily reflect the relative security of iOS devices compared to Android devices, or other operating systems and phone manufacturers. In Amnesty International’s experience there are significantly more forensic traces accessible to investigators on Apple iOS devices than on stock Android devices, therefore our methodology is focused on the former. As a result, most recent cases of confirmed Pegasus infections have involved iPhones.
The article doesn't mention android again.

And I'm not even defending android, I'm attacking Apples unethical marketing practices of claiming security and privacy, but failing.

That seems dramatic. It's a billion dollar ex-spy run company catering towards governments with seemingly no ethics. No offense to Apple but this is near state level actor as a threat and with enough motivation ($$$$$$$$) they will find ways to exploit Apple's software no matter what.
Sure, but their marketing still claims security.
That's what happens when Apple pays 100k for a critical bug bounty and governments pay millions for the same bug exploit.
And closed sourced projects.

And marketing prioritized over quality