• No smartphone is less secure than an Apple smartphone

    From Andy Burnelli@21:1/5 to All on Thu Nov 10 14:01:15 2022
    XPost: misc.phone.mobile.iphone

    With the huge number of zero-day holes in iOS that Apple has never once
    found on their own, can anyone logically refute the summary in the title?

    *No smartphone is _less_ secure than an Apple smartphone*

    Worse, if you're not on iOS 16, even Apple says they won't fully patch it!

    Can anyone refute these _obvious_ logical conclusions based on facts?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From badgolferman@21:1/5 to Andy Burnelli on Thu Nov 10 15:13:46 2022
    XPost: misc.phone.mobile.iphone

    Andy Burnelli wrote:

    With the huge number of zero-day holes in iOS that Apple has never
    once found on their own, can anyone logically refute the summary in
    the title?

    *No smartphone is less secure than an Apple smartphone*

    Worse, if you're not on iOS 16, even Apple says they won't fully
    patch it!

    Can anyone refute these obvious logical conclusions based on facts?

    Maybe they can't be refuted, but could you describe why the Android
    models are more secure? Specifically the ones that are in the hands of
    common users because we know you lock yours down rather tightly.
    People who have Facebook, TikTok, etc. can't be secure at all
    regardless of what operating system they use.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From sms@21:1/5 to badgolferman on Thu Nov 10 09:55:25 2022
    XPost: misc.phone.mobile.iphone

    On 11/10/2022 7:13 AM, badgolferman wrote:

    <snip>

    Maybe they can't be refuted, but could you describe why the Android
    models are more secure? Specifically the ones that are in the hands of common users because we know you lock yours down rather tightly.
    People who have Facebook, TikTok, etc. can't be secure at all
    regardless of what operating system they use.

    As usual, Arlen/Andy/Dean/etc., is not telling the whole story.

    If you compare a flagship Android device like a Google Pixel 7 or a
    Samsung Galaxy S22, to an iPhone, then yes, the Android device is more
    secure than the iPhone (at least if the owner isn’t installing Android
    apps from unknown sources). But low-end Android devices don’t have the
    same level of hardware security as the higher-end devices.

    Apple gets credit for coming out with the Secure Enclave, but Samsung,
    Google, Huawei, now have the equivalent in their higher-end phones.
    • Samsung: PUF (Physically Unclonable Function)
    • Qualcomm: Secure Processing Unit (SPU)
    • Huawei: Integrated Secure Element (inSE)
    • Google: Trust Platform Module (TPM)
    There’s a good article about this at https://9to5mac.com/2020/02/12/apples-secure-enclave/

    As to the operating system, it is true that the later versions of
    Android don’t have the code execution vulnerabilities that have been
    being discovered in iOS. This is due to a fundamental difference of how
    the operating systems are structured.

    In the latest instance, which 16.1.1 patches, Apple has credited Google
    Project Zero security researchers for discovering both issues, see https://www.securityweek.com/apple-patches-remote-code-execution-flaws-ios-macos.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Burnelli@21:1/5 to badgolferman on Thu Nov 10 17:57:27 2022
    XPost: misc.phone.mobile.iphone, comp.sys.mac.advocacy

    badgolferman wrote:

    Maybe they can't be refuted, but could you describe why the Android
    models are more secure? Specifically the ones that are in the hands of common users because we know you lock yours down rather tightly.
    People who have Facebook, TikTok, etc. can't be secure at all
    regardless of what operating system they use.

    Hi badgolferman,

    That's an adult question which is perfectly logical for you to ask of me.
    What _other_ metric would you like me to compare iOS vs Android security?

    A zero-day bug that gives _full_ permission is pretty severe, whether or
    not you "think" you locked down the phone rather tightly. You can't.

    Whether or not you use Facebook or TikTok, etc., if they _already_ have
    full control over your phone, then it doesn't really matter the lock down.

    That's why the zero days which give the bad guys _full control_ are so bad.
    And yet, Apple isn't even _looking_ for them (based on the evidence).

    Apple is only advertising that they are secure.
    And yet, iOS has the absolute worst record on zero-day exploits.

    Why doesn't Apple advertise that?
    My biggest beef with Apple is how much Apple lies to the gullible public.

    *Apple is an absolutely despicable company in terms of how much they lie*
    (Apple only tells the truth when forced to in court.)

    Since you're an adult, I don't have to simplify everything for you like I
    have to do with the iKooks who have never read a newspaper in their lives.

    In terms of zero-day bugs, Apple never finds any of them, correct?
    That's just a fact, right?

    Now, in terms of zero-day bugs (that Apple never finds), Google Project
    Zero said _half_ of them are the _same_ exploit done again a different way.

    Given Apple found _zero_ of the zero-day exploits, and given half of them
    are _already_ known to Apple (in terms of methodology), it's clear Apple
    isn't even _looking_ for zero-day bugs, right?

    Now if you dispute that, I will simply bring up the facts that Apple has, multiple times, re-released zero-day bugs (yes, you heard that correctly).

    The fact that Apple doesn't even put in place checks for bugs they already fixed, let alone the fact half the zero day exploits are foreseeable, tells
    me that Apple isn't even _looking_ for those bugs (which is my key point).

    Now... with that background in place (yes, I know it's way too
    comprehensive for the iKooks to fathom which is why I don't talk to the
    iKooks as if they're adults)... let's look at the zero-days for the iPhone.

    Whom do you think has far more zero days year after year: iOS or Android
    Which do you think?

    Bear in mind unless you've never read a newspaper in your life, you'd know
    the answer, so we can assume you already know who has the most zero days.

    Hence, in terms of zero-day security, iOS is far less secure than is
    Android; however, since you're an adult, we can delve deeper than that.

    What _other_ metric would you like me to compare iOS vs Android security?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From nospam@21:1/5 to scharf.steven@geemail.com on Thu Nov 10 13:16:26 2022
    XPost: misc.phone.mobile.iphone

    In article <tkjduf$jh3o$1@dont-email.me>, sms
    <scharf.steven@geemail.com> wrote:

    As usual, Arlen/Andy/Dean/etc., is not telling the whole story.

    projection.

    If you compare a flagship Android device like a Google Pixel 7 or a
    Samsung Galaxy S22, to an iPhone, then yes, the Android device is more secure than the iPhone

    demonstrably false.

    (at least if the owner isn¹t installing Android
    apps from unknown sources).

    even without that

    But low-end Android devices don¹t have the
    same level of hardware security as the higher-end devices.

    sometimes, but that's not a significant factor.

    the reality is that it's easier to compromise an android device than an
    ios device.

    Apple gets credit for coming out with the Secure Enclave, but Samsung, Google, Huawei, now have the equivalent in their higher-end phones.

    at least you admit android is always playing catch-up.


    As to the operating system, it is true that the later versions of
    Android don¹t have the code execution vulnerabilities that have been
    being discovered in iOS. This is due to a fundamental difference of how
    the operating systems are structured.

    not only is that claim false, but the reasoning is laughable. if
    anything, the structure of android makes it *easier* to pwn.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jolly Roger@21:1/5 to badgolferman on Thu Nov 10 18:58:38 2022
    XPost: misc.phone.mobile.iphone

    On 2022-11-10, badgolferman <REMOVETHISbadgolferman@gmail.com> wrote:
    Andy Burnelli wrote:

    With the huge number of zero-day holes in iOS that Apple has never
    once found on their own, can anyone logically refute the summary in
    the title?

    *No smartphone is less secure than an Apple smartphone*

    Worse, if you're not on iOS 16, even Apple says they won't fully patch
    it!

    Can anyone refute these obvious logical conclusions based on facts?

    Maybe they can't be refuted, but could you describe why the Android
    models are more secure? Specifically the ones that are in the hands
    of common users because we know you lock yours down rather tightly.
    People who have Facebook, TikTok, etc. can't be secure at all
    regardless of what operating system they use.

    Apple patches zero-day and other vulnerabilities as they are discovered. Meanwhile, Pegasus for Android does not require zero-day vulnerabilities
    to root the target device and install the malware. Instead, the threat
    uses an otherwise well-known rooting technique called Framaroot. They
    literally walk right in the front door. Anyone calling that "more
    secure" has a screw loose.

    --
    E-mail sent to this address may be devoured by my ravenous SPAM filter.
    I often ignore posts from Google. Use a real news client instead.

    JR

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From badgolferman@21:1/5 to Andy Burnelli on Thu Nov 10 19:02:27 2022
    XPost: misc.phone.mobile.iphone, comp.sys.mac.advocacy

    Andy Burnelli wrote:

    badgolferman wrote:

    Maybe they can't be refuted, but could you describe why the Android
    models are more secure? Specifically the ones that are in the
    hands of common users because we know you lock yours down rather
    tightly. People who have Facebook, TikTok, etc. can't be secure at
    all regardless of what operating system they use.

    Hi badgolferman,

    That's an adult question which is perfectly logical for you to ask of
    me. What other metric would you like me to compare iOS vs Android
    security?

    A zero-day bug that gives full permission is pretty severe, whether or
    not you "think" you locked down the phone rather tightly. You can't.

    Whether or not you use Facebook or TikTok, etc., if they already have
    full control over your phone, then it doesn't really matter the lock
    down.

    That's why the zero days which give the bad guys _full control_ are
    so bad. And yet, Apple isn't even looking for them (based on the
    evidence).

    Apple is only advertising that they are secure.
    And yet, iOS has the absolute worst record on zero-day exploits.

    Why doesn't Apple advertise that?
    My biggest beef with Apple is how much Apple lies to the gullible
    public.

    *Apple is an absolutely despicable company in terms of how much they
    lie* (Apple only tells the truth when forced to in court.)

    Since you're an adult, I don't have to simplify everything for you
    like I have to do with the iKooks who have never read a newspaper in
    their lives.

    In terms of zero-day bugs, Apple never finds any of them, correct?
    That's just a fact, right?

    Now, in terms of zero-day bugs (that Apple never finds), Google
    Project Zero said half of them are the same exploit done again a
    different way.

    Given Apple found zero of the zero-day exploits, and given half of
    them are already known to Apple (in terms of methodology), it's clear
    Apple isn't even looking for zero-day bugs, right?

    Now if you dispute that, I will simply bring up the facts that Apple
    has, multiple times, re-released zero-day bugs (yes, you heard that >correctly).

    The fact that Apple doesn't even put in place checks for bugs they
    already fixed, let alone the fact half the zero day exploits are
    foreseeable, tells me that Apple isn't even looking for those bugs
    (which is my key point).

    Now... with that background in place (yes, I know it's way too
    comprehensive for the iKooks to fathom which is why I don't talk to
    the iKooks as if they're adults)... let's look at the zero-days for
    the iPhone.

    Whom do you think has far more zero days year after year: iOS or
    Android Which do you think?

    Bear in mind unless you've never read a newspaper in your life, you'd
    know the answer, so we can assume you already know who has the most
    zero days.

    Hence, in terms of zero-day security, iOS is far less secure than is
    Android; however, since you're an adult, we can delve deeper than
    that.

    What other metric would you like me to compare iOS vs Android
    security?


    Not being a security expert, I admit some of this stuff is over my
    head. So here are some more questions:

    -- why are there zero-day exploits at all?
    -- what does Android do that's different than Apple?
    -- how would I know if my iPhone is compromised? (zero-day or any-day)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From nospam@21:1/5 to REMOVETHISbadgolferman@gmail.com on Thu Nov 10 14:33:00 2022
    XPost: misc.phone.mobile.iphone, comp.sys.mac.advocacy

    In article <tkjj40$jufg$1@dont-email.me>, badgolferman <REMOVETHISbadgolferman@gmail.com> wrote:

    -- how would I know if my iPhone is compromised? (zero-day or
    any-day)

    how do you know if your windows pc has been compromised?

    sometimes it's easy to tell and sometimes it's not.


    I know when my anti-virus program detects something or my computer is
    acting differently. I also know how to disinfect it. There is no such method of detection or disinfection for the iPhone which is readily
    available to me, is there?

    nope, because it's not needed due to sandboxing.

    in fact, apple blocks ios anti-malware apps because they *can't* do
    what they claim. in other words, they're fraudulent (and that includes
    on other platforms too).

    that doesn't mean ios devices are immune, it's just that it's a *lot*
    more difficult than on other platforms.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From badgolferman@21:1/5 to nospam on Thu Nov 10 19:23:44 2022
    XPost: misc.phone.mobile.iphone, comp.sys.mac.advocacy

    nospam wrote:

    -- how would I know if my iPhone is compromised? (zero-day or
    any-day)

    how do you know if your windows pc has been compromised?

    sometimes it's easy to tell and sometimes it's not.


    I know when my anti-virus program detects something or my computer is
    acting differently. I also know how to disinfect it. There is no such
    method of detection or disinfection for the iPhone which is readily
    available to me, is there?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From nospam@21:1/5 to REMOVETHISbadgolferman@gmail.com on Thu Nov 10 14:20:36 2022
    XPost: misc.phone.mobile.iphone, comp.sys.mac.advocacy

    In article <tkjhs2$jrcs$1@dont-email.me>, badgolferman <REMOVETHISbadgolferman@gmail.com> wrote:

    -- why are there zero-day exploits at all?

    because nothing in this world is perfect. all software has bugs, and
    sometimes the bad guys find them first and use them to their advantage.

    -- what does Android do that's different than Apple?

    quite a bit. the oses are very different internally.

    -- how would I know if my iPhone is compromised? (zero-day or any-day)

    how do you know if your windows pc has been compromised?

    sometimes it's easy to tell and sometimes it's not.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Your Name@21:1/5 to badgolferman on Fri Nov 11 08:47:57 2022
    XPost: comp.sys.mac.advocacy, misc.phone.mobile.iphone

    On 2022-11-10 19:02:27 +0000, badgolferman said:

    Andy Burnelli wrote:

    badgolferman wrote:

    Maybe they can't be refuted, but could you describe why the Android
    models are more secure? Specifically the ones that are in the
    hands of common users because we know you lock yours down rather
    tightly. People who have Facebook, TikTok, etc. can't be secure at
    all regardless of what operating system they use.

    Hi badgolferman,

    That's an adult question which is perfectly logical for you to ask of
    me. What other metric would you like me to compare iOS vs Android
    security?

    A zero-day bug that gives full permission is pretty severe, whether or
    not you "think" you locked down the phone rather tightly. You can't.

    Whether or not you use Facebook or TikTok, etc., if they already have
    full control over your phone, then it doesn't really matter the lock
    down.

    That's why the zero days which give the bad guys _full control_ are
    so bad. And yet, Apple isn't even looking for them (based on the
    evidence).

    Apple is only advertising that they are secure.
    And yet, iOS has the absolute worst record on zero-day exploits.

    Why doesn't Apple advertise that?
    My biggest beef with Apple is how much Apple lies to the gullible
    public.

    *Apple is an absolutely despicable company in terms of how much they
    lie* (Apple only tells the truth when forced to in court.)

    Since you're an adult, I don't have to simplify everything for you
    like I have to do with the iKooks who have never read a newspaper in
    their lives.

    In terms of zero-day bugs, Apple never finds any of them, correct?
    That's just a fact, right?

    Now, in terms of zero-day bugs (that Apple never finds), Google
    Project Zero said half of them are the same exploit done again a
    different way.

    Given Apple found zero of the zero-day exploits, and given half of
    them are already known to Apple (in terms of methodology), it's clear
    Apple isn't even looking for zero-day bugs, right?

    Now if you dispute that, I will simply bring up the facts that Apple
    has, multiple times, re-released zero-day bugs (yes, you heard that
    correctly).

    The fact that Apple doesn't even put in place checks for bugs they
    already fixed, let alone the fact half the zero day exploits are
    foreseeable, tells me that Apple isn't even looking for those bugs
    (which is my key point).

    Now... with that background in place (yes, I know it's way too
    comprehensive for the iKooks to fathom which is why I don't talk to
    the iKooks as if they're adults)... let's look at the zero-days for
    the iPhone.

    Whom do you think has far more zero days year after year: iOS or
    Android Which do you think?

    Bear in mind unless you've never read a newspaper in your life, you'd
    know the answer, so we can assume you already know who has the most
    zero days.

    Hence, in terms of zero-day security, iOS is far less secure than is
    Android; however, since you're an adult, we can delve deeper than
    that.

    What other metric would you like me to compare iOS vs Android
    security?


    Not being a security expert, I admit some of this stuff is over my
    head. So here are some more questions:

    -- why are there zero-day exploits at all?
    -- what does Android do that's different than Apple?
    -- how would I know if my iPhone is compromised? (zero-day or any-day)

    Please just ignore that moronic anti-Apple know-nothing troll "Andy
    Burnelli" (and numerous sock puppets). The idiot posts nothing but
    complete and utter bullshit.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Your Name@21:1/5 to badgolferman on Fri Nov 11 08:53:54 2022
    XPost: comp.sys.mac.advocacy, misc.phone.mobile.iphone

    On 2022-11-10 19:23:44 +0000, badgolferman said:

    nospam wrote:

    -- how would I know if my iPhone is compromised? (zero-day or
    any-day)

    how do you know if your windows pc has been compromised?

    sometimes it's easy to tell and sometimes it's not.


    I know when my anti-virus program detects something or my computer is
    acting differently. I also know how to disinfect it.

    There is a ton of Windoze malware (and Android malware) that doesn't
    show any visible symptoms nor is detected, let alone removed, by any anti-malware apps ... who are always two steps behind the malware
    makers anyway.




    There is no such method of detection or disinfection for the iPhone
    which is readily available to me, is there?

    Just do a search on the app store and you'll find a load of anti-virus
    apps, privacy blockers, etc. from all the usual names like Macafee,
    Norton, etc.

    The reality is that you do not need any of them since despite all the
    claims (mostly by anti-malware makers and know-nothing trolls), nobody
    in the real world has ever had a problem unless doing something stupid
    like visitin porn sites and using pirate / jailbreak apps.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Alan@21:1/5 to badgolferman on Thu Nov 10 11:49:59 2022
    XPost: misc.phone.mobile.iphone, comp.sys.mac.advocacy

    On 2022-11-10 11:02, badgolferman wrote:
    Andy Burnelli wrote:

    badgolferman wrote:

    Maybe they can't be refuted, but could you describe why the Android
    models are more secure? Specifically the ones that are in the
    hands of common users because we know you lock yours down rather
    tightly. People who have Facebook, TikTok, etc. can't be secure at
    all regardless of what operating system they use.

    Hi badgolferman,

    That's an adult question which is perfectly logical for you to ask of
    me. What other metric would you like me to compare iOS vs Android
    security?

    A zero-day bug that gives full permission is pretty severe, whether or
    not you "think" you locked down the phone rather tightly. You can't.

    Whether or not you use Facebook or TikTok, etc., if they already have
    full control over your phone, then it doesn't really matter the lock
    down.

    That's why the zero days which give the bad guys _full control_ are
    so bad. And yet, Apple isn't even looking for them (based on the
    evidence).

    Apple is only advertising that they are secure.
    And yet, iOS has the absolute worst record on zero-day exploits.

    Why doesn't Apple advertise that?
    My biggest beef with Apple is how much Apple lies to the gullible
    public.

    *Apple is an absolutely despicable company in terms of how much they
    lie* (Apple only tells the truth when forced to in court.)

    Since you're an adult, I don't have to simplify everything for you
    like I have to do with the iKooks who have never read a newspaper in
    their lives.

    In terms of zero-day bugs, Apple never finds any of them, correct?
    That's just a fact, right?

    Now, in terms of zero-day bugs (that Apple never finds), Google
    Project Zero said half of them are the same exploit done again a
    different way.

    Given Apple found zero of the zero-day exploits, and given half of
    them are already known to Apple (in terms of methodology), it's clear
    Apple isn't even looking for zero-day bugs, right?

    Now if you dispute that, I will simply bring up the facts that Apple
    has, multiple times, re-released zero-day bugs (yes, you heard that
    correctly).

    The fact that Apple doesn't even put in place checks for bugs they
    already fixed, let alone the fact half the zero day exploits are
    foreseeable, tells me that Apple isn't even looking for those bugs
    (which is my key point).

    Now... with that background in place (yes, I know it's way too
    comprehensive for the iKooks to fathom which is why I don't talk to
    the iKooks as if they're adults)... let's look at the zero-days for
    the iPhone.

    Whom do you think has far more zero days year after year: iOS or
    Android Which do you think?

    Bear in mind unless you've never read a newspaper in your life, you'd
    know the answer, so we can assume you already know who has the most
    zero days.

    Hence, in terms of zero-day security, iOS is far less secure than is
    Android; however, since you're an adult, we can delve deeper than
    that.

    What other metric would you like me to compare iOS vs Android
    security?


    Not being a security expert, I admit some of this stuff is over my
    head. So here are some more questions:

    -- why are there zero-day exploits at all?

    Because no software is free of bugs.

    -- what does Android do that's different than Apple?

    Nothing.

    -- how would I know if my iPhone is compromised? (zero-day or any-day)

    Read? Google?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From nospam@21:1/5 to YourName@YourISP.com on Thu Nov 10 14:59:09 2022
    XPost: comp.sys.mac.advocacy, misc.phone.mobile.iphone

    In article <tkjksh$71m$1@gioia.aioe.org>, Your Name
    <YourName@YourISP.com> wrote:


    Just do a search on the app store and you'll find a load of anti-virus
    apps, privacy blockers, etc. from all the usual names like Macafee,
    Norton, etc.

    no you won't, since anti-malware apps are not allowed.

    content blockers are entirely different, and on ios, they're designed
    so that pwning is virtually impossible (nothing is 100% perfect).

    The reality is that you do not need any of them since despite all the
    claims (mostly by anti-malware makers and know-nothing trolls), nobody
    in the real world has ever had a problem unless doing something stupid
    like visitin porn sites and using pirate / jailbreak apps.

    this is false.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Burnelli@21:1/5 to Jolly Roger on Fri Nov 11 05:12:40 2022
    XPost: misc.phone.mobile.iphone, comp.sys.mac.advocacy

    Jolly Roger wrote:

    Apple patches zero-day and other vulnerabilities as they are discovered. Meanwhile, Pegasus for Android does not require zero-day vulnerabilities
    to root the target device and install the malware. Instead, the threat
    uses an otherwise well-known rooting technique called Framaroot. They literally walk right in the front door. Anyone calling that "more
    secure" has a screw loose.

    Hi badgolferman,

    We can expect the ignorant iKooks like Jolly Roger to try to deflect the conversation because they don't own the adult skills to discuss any facts
    in a balanced manner (giving both iOS and Android an adult perspective).

    To be quite clear, Pegasus (which started as phishing software) infects
    both Android and iOS operating systems - only it does so differently.

    Given Jolly Roger's transparent attempt to deflect from zero-days, let's
    look at how Pegasus is known to infect the kernel of Android & iOS, OK?

    FACT: Pegasus has been well known to infect the iOS kernel multiple times. FACT: There are no known reports of Pegasus infecting the Android kernel.

    On _that_ metric alone, the Subject line of this thread is well supported.
    *No smartphone is less secure than an Apple smartphone*

    Now on the off chance that Pegasus has infected your smartphone you can use
    an Amnesty International macOS/Linux tool to remove it from Android & iOS:
    Amnesty Intl. Mobile Verification Toolkit <https://docs.mvt.re/en/latest/>

    Bear in mind that Pegasus isn't likely to be your "major" threat on either platform - but that the huge amount of zero-day holes in iOS doesn't help.

    Since this is an adult conversation, we can point out nuance in detail in
    that Pegasus has never been known to infect a USA telephone number, and, in fact, NSO says they will not grant access to USA telephone numbers (but, of course, we have to believe NSO on their word & on the known record).
    <https://www.androidauthority.com/pegasus-spyware-1646458/>

    Unlike uneducated iKooks who have never read a newspaper in their lives,
    you may be interested in this article explaining how to deal with Pegasus. í° <https://thenextweb.com/news/how-pegasus-spyware-infect-your-phone-syndication>

    Notice a critical component of protecting yourself is to update to the
    latest fully patched smartphone OS, which, in the case of iOS, as Apple recently admitted, is _only_ on iOS 16 (and no other version of iOS!).

    To address all concerns (as an adult should), let's look at Framaroot.

    In keeping with the adult nature of this conversation, nuance of detail
    will be expected to be comprehended by all participants, such as the fact
    that iOS and Android are _infected_ differently by the Pegasus spyware.
    *How is Pegasus malware different on Android than on iOS?* í° <https://www.techtarget.com/searchsecurity/answer/How-is-Pegasus-malware-different-on-Android-than-on-iOS>
    "Pegasus malware used to only target iOS devices, but a variant
    called Chrysaor now goes after Android devices, too."

    Both are infected, but they're infected _differently_ (which is important!)
    *Pegasus malware expands from iOS to Android* í° <https://www.techtarget.com/searchsecurity/news/450416359/Pegasus-malware-expands-from-iOS-to-Android>
    "Unlike with iOS, Pegasus for Android does not require zero-day
    vulnerabilities to root the target device and install the malware.
    Instead, the threat uses an otherwise well-known rooting technique
    called Framaroot"

    Notice what that tells you instantly?
    I do.

    If Apple was _effective_ at rooting out iOS zero days, Pegasus would end up infecting Android more than it does iOS - and yet - that's not happening.

    Which points us right back to the educated assessment in the Subject line:
    *No smartphone is less secure than an Apple smartphone*
    --
    Posted out of the goodness of my heart to disseminate useful information
    which, in this case, is to respond to the deflection attempt by iKooks.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Burnelli@21:1/5 to badgolferman on Fri Nov 11 04:30:44 2022
    XPost: misc.phone.mobile.iphone, comp.sys.mac.advocacy

    badgolferman wrote:

    Not being a security expert, I admit some of this stuff is over my
    head. So here are some more questions:

    Hi badgoloferman,

    EDIT: Surprisingly, nospam's response to this post was accurate.
    (It's not by accident that I've said he's the smartest of the ignorant
    iKooks where, in that response, nospam didn't try to bullshit you.)

    Thank you for responding to this thread like an adult would react.
    Your questions are perfectly valid and to be expected as an adult.

    It's my opinion that you don't need to be a "security expert" to read
    what's in the news which is to simply observe the well-known facts.

    FACT: *The Apple smartphones have the _most_ zero-day holes.*
    FACT: Clearly Apple isn't finding them (maybe not even _looking_ for them)! FACT: Only iOS 16 can be expected to be fully patched (even if they did).

    Those are facts, right?
    It's up to us, as adults, to _interpret_ those facts.

    Notice I speak with you differently than I do with the uneducated iKooks.
    Not only are they ignorant of all facts, they dispute them to the death.

    Only a fool disputes facts.
    An adult bases his belief system on the known facts.

    If there's any factual statement you want me to cite, just let me know as
    you know I am credible (but all of this was previously cited on this ng).

    -- why are there zero-day exploits at all?

    As Project Zero has reported many times, Apple coding is horrific.
    If you don't believe me, I can reference what we've cited many times.

    Worse, as also cited, Apple code is so horrific that much of it doesn't
    even work (Apple doesn't even _look_ for unexercised unused code in iOS)!

    Worse, as has been cited in the past, Apple doesn't even put in place any remedial actions each time someone else finds their zero-day iOS holes.

    *It's no wonder iOS is the most insecure smartphone operating system*

    -- what does Android do that's different than Apple?

    That's a good question indeed.
    The Android operating system development process is _completely_ different.

    There's almost nothing in common between how Android & iOS are developed.

    -- how would I know if my iPhone is compromised? (zero-day or any-day)

    Given iOS is the most insecure smartphone operating system, and given the
    rate is a new zero-day is added by Apple every month for years on end, and given as many as three to six zero-days are exploited at a time, you can
    pretty much assume you're extremely vulnerable on iOS at this very moment.

    Which brings me to the factual summary which is in the title:
    *No smartphone is less secure than an Apple smartphone*

    Note that's not what irks me about Apple's duplicity since iOS was never
    meant to be secure; what irks me are Apple's bold lies to the contrary.

    Apple only tells the truth in court.

    PS: Notice in the responses how _afraid_ of facts "Your Name" was, and yet,
    how rational nospam was in his response (which was mildly shocking to me).

    We _can_ talk like adults... if...
    a. If the iKooks (like Your Name) refrain from their mindless trolling, and
    b. If the iKooks (like nospam) don't defend everything Apple to the death.

    As for your quite valid question of what Android does differently, nospam
    was wholly correct that there's almost nothing in common in their
    development environments so the simple answer is _everything_ is different.

    But the complex answer is something I will try to ask on the Android
    newsgroups which is why is Android less vulnerable to zero-day exploits.
    --
    Posted out of the goodness of my heart to disseminate useful information
    which, in this case, is to have an adult conversation about zero-day bugs.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Burnelli@21:1/5 to sms on Fri Nov 11 05:26:05 2022
    XPost: misc.phone.mobile.iphone, comp.sys.mac.advocacy

    sms wrote:

    As usual, Arlen/Andy/Dean/etc., is not telling the whole story.

    Steve,
    Please cut the crap.

    The original post was four sentences (two of which were repeated!).
    *Of course it's not the whole story.*

    Only an idiot would think that three lines is the "whole story".

    It's two things in three lines:
    a. A well-informed summary of the current state of affairs
    b. An adult request to discuss the facts in an adult manner.

    I will always welcome an _adult_ conversation with you Steve, as you and
    nospam and badgolferman _can_ add adult value to this security discussion.

    But first, cut the crap.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Burnelli@21:1/5 to nospam on Fri Nov 11 05:43:24 2022
    XPost: misc.phone.mobile.iphone, comp.sys.mac.advocacy

    nospam wrote:

    If you compare a flagship Android device like a Google Pixel 7 or a
    Samsung Galaxy S22, to an iPhone, then yes, the Android device is more
    secure than the iPhone

    demonstrably false.

    Hi badgolferman,

    Actually nospam's rebuttal to Steve's comments is (surprisingly) valid.


    (at least if the owner isn¹t installing Android
    apps from unknown sources).

    even without that

    Again, nospam is correct that the ability to install from the so-called
    unknown sources (aka non Google authorized sources) isn't the bogeyman that uneducated people think it is.

    In fact, you can install a system wide firewall from "unknown sources" and
    that alone could _increase_ your security (by not allowing access to apps).


    But low-end Android devices don¹t have the
    same level of hardware security as the higher-end devices.

    sometimes, but that's not a significant factor.

    Yet again, nospam's rebuttal to Steve's inference is perfectly valid.


    the reality is that it's easier to compromise an android device than an
    ios device.

    Badgolferman... since I'm a well educated logical and sensible adult, I
    look at both platforms in a balanced manner, and in doing so, I agree with nospam that it "should" be easier to compromise an Android device than it
    is to compromise an iOS device... if... if... if... if .... if ... if

    If iOS didn't have so many of those horrible zero-day holes every month!


    Apple gets credit for coming out with the Secure Enclave, but Samsung,
    Google, Huawei, now have the equivalent in their higher-end phones.

    at least you admit android is always playing catch-up.

    While there's nothing wrong with a secure enclave in principle, Apple's inherent flaws opened up unpatchable holes in the past so it's not a
    panacea on either platform, particularly with zero-day holes abounding on
    iOS more so than they do on Android.

    As nospam wisely intoned, it "should" be the case that Android should be
    more vulnerable to hackers than iOS is... but that "if" is the problem.

    If... then... else.

    If Apple was _effective_ at catching their own zero-day holes, _then_
    (and only then) would iOS be more secure... else... it's not.



    As to the operating system, it is true that the later versions of
    Android don¹t have the code execution vulnerabilities that have been
    being discovered in iOS. This is due to a fundamental difference of how
    the operating systems are structured.

    not only is that claim false, but the reasoning is laughable. if
    anything, the structure of android makes it *easier* to pwn.

    On this count, nospam is only partly correct in so much as even nospam has
    said that the development environment for iOS and Android are completely different - and what nospam did NOT say was that the release structure of
    iOS and Android is even more completely different in terms of security
    patches.

    FACT: Only the latest iOS (i.e., iOS 16) is expected to be fully patched.
    FACT: Android releases security updates completely _differently_ than iOS.

    Note that most iKooks do not understand how _differently_ Android patches security holes than iOS does, those differences being quite far beyond the capability of the iKooks to comprehend.

    As before, the iKooks have never read a newspaper in their entire lives,
    so they will deny what no sane person could possibly deny in that regard.

    If any adults wish to discuss the myriad details of how Android breaks up
    the many updates and how iOS does not, we've covered that in detail before.

    But in terms of my assessment for badgolferman of nospam's reply to Steve's post, I would agree that nospam is providing a correct assessment of what
    Steve is attempting to claim.

    What's important is NOT the firmware encryption but something that goes far deeper into the iOS versus Android development and release process indeed.
    --
    Posted out of the goodness of my heart to disseminate useful information
    which, in this case is to agree for the most part with nospam's assessment.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Burnelli@21:1/5 to nospam on Fri Nov 11 05:45:29 2022
    XPost: misc.phone.mobile.iphone, comp.sys.mac.advocacy

    nospam wrote:

    If you compare a flagship Android device like a Google Pixel 7 or a
    Samsung Galaxy S22, to an iPhone, then yes, the Android device is more
    secure than the iPhone

    demonstrably false.

    Hi badgolferman,

    Actually nospam's rebuttal to Steve's comments is (surprisingly) valid.
    As I have always said, nospam _is_ capable of an adult conversation indeed!

    Since both Steve and nospam own technical capabilities most of the others
    on this newsgroup don't have, if Steve cuts the crap and if nospam
    maintains a civil response that isn't always a defense of Apple flaws to
    the death, all of us (including me and you badgolferman) can learn more.

    That's the whole point of Usenet, isn't it?
    Civil adult conversation where we all learn from each other.


    (at least if the owner isn¹t installing Android
    apps from unknown sources).

    even without that

    Again, nospam is correct that the ability to install from the so-called
    unknown sources (aka non Google authorized sources) isn't the bogeyman that uneducated people think it is.

    In fact, you can install a system wide firewall from "unknown sources" and
    that alone could _increase_ your security (by not allowing access to apps).


    But low-end Android devices don¹t have the
    same level of hardware security as the higher-end devices.

    sometimes, but that's not a significant factor.

    Yet again, nospam's rebuttal to Steve's inference is perfectly valid.


    the reality is that it's easier to compromise an android device than an
    ios device.

    Badgolferman... since I'm a well educated logical and sensible adult, I
    look at both platforms in a balanced manner, and in doing so, I agree with nospam that it "should" be easier to compromise an Android device than it
    is to compromise an iOS device... if... if... if... if .... if ... if

    If iOS didn't have so many of those horrible zero-day holes every month!


    Apple gets credit for coming out with the Secure Enclave, but Samsung,
    Google, Huawei, now have the equivalent in their higher-end phones.

    at least you admit android is always playing catch-up.

    While there's nothing wrong with a secure enclave in principle, Apple's inherent flaws opened up unpatchable holes in the past so it's not a
    panacea on either platform, particularly with zero-day holes abounding on
    iOS more so than they do on Android.

    As nospam wisely intoned, it "should" be the case that Android should be
    more vulnerable to hackers than iOS is... but that "if" is the problem.

    If... then... else.

    If Apple was _effective_ at catching their own zero-day holes, _then_
    (and only then) would iOS be more secure... else... it's not.



    As to the operating system, it is true that the later versions of
    Android don¹t have the code execution vulnerabilities that have been
    being discovered in iOS. This is due to a fundamental difference of how
    the operating systems are structured.

    not only is that claim false, but the reasoning is laughable. if
    anything, the structure of android makes it *easier* to pwn.

    On this count, nospam is only partly correct in so much as even nospam has
    said that the development environment for iOS and Android are completely different - and what nospam did NOT say was that the release structure of
    iOS and Android is even more completely different in terms of security
    patches.

    FACT: Only the latest iOS (i.e., iOS 16) is expected to be fully patched.
    FACT: Android releases security updates completely _differently_ than iOS.

    Note that most iKooks do not understand how _differently_ Android patches security holes than iOS does, those differences being quite far beyond the capability of the iKooks to comprehend.

    As before, the iKooks have never read a newspaper in their entire lives,
    so they will deny what no sane person could possibly deny in that regard.

    If any adults wish to discuss the myriad details of how Android breaks up
    the many updates and how iOS does not, we've covered that in detail before.

    But in terms of my assessment for badgolferman of nospam's reply to Steve's post, I would agree that nospam is providing a correct assessment of what
    Steve is attempting to claim.

    What's important is NOT the firmware encryption but something that goes far deeper into the iOS versus Android development and release process indeed.
    --
    Posted out of the goodness of my heart to disseminate useful information
    which, in this case is to agree for the most part with nospam's assessment.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Burnelli@21:1/5 to Your Name on Fri Nov 11 06:38:10 2022
    XPost: comp.sys.mac.advocacy, misc.phone.mobile.iphone

    Your Name wrote:

    There is a ton of Windoze malware (and Android malware) that doesn't
    show any visible symptoms nor is detected, let alone removed, by any anti-malware apps ... who are always two steps behind the malware
    makers anyway.

    Hi nospam,

    It's obvious from the ignorant iKook Your Name's desperate attempt to
    deflect the topic off of Apple's smartphone insecurity to that of
    Microsoft's operating system that the iKook is _afraid_ of the topic.

    Why is it that the iKooks are so mind numbingly _afraid_ of Apple's flaws?
    A security discussion on its own merits should be a civil conversation.

    nospam wrote:

    In article <tkjksh$71m$1@gioia.aioe.org>, Your Name
    <YourName@YourISP.com> wrote:


    Just do a search on the app store and you'll find a load of anti-virus
    apps, privacy blockers, etc. from all the usual names like Macafee,
    Norton, etc.

    no you won't, since anti-malware apps are not allowed.

    On that topic of anti-malware apps for iOS, and while I don't use
    anti-malware programs on my smartphones and iPads, certainly they are advertised to exist for iOS, aren't they? (albeit, mostly shills)

    *Best antiviruses for iPhone ¡V our detailed list*
    <https://cybernews.com/best-antivirus-software/antivirus-for-iphone/>

    *Best iPhone antivirus apps in 2022: top iOS security protection*
    <https://www.techradar.com/best/best-iphone-antivirus-app>

    *The best antivirus apps for the iPhone*
    <https://www.digitaltrends.com/mobile/best-antivirus-for-iphone/>

    content blockers are entirely different, and on ios, they're designed
    so that pwning is virtually impossible (nothing is 100% perfect).

    On that note of iOS content blockers, here's one for iOS:
    *Malwarebytes - Phone Security - Block Robocalls & Filter Texts*
    <https://apps.apple.com/us/app/malwarebytes-phone-security/id1327105431>

    While I'm pretty sure nospam has read a newspaper in the past few years, so he's well aware of this fact, I'm pretty sure Your Name hasn't read a
    newspaper in his entire life (figuratively speaking), so it's important
    that there is a greater variety of "utilities" on Android than on iOS.

    *Malwarebytes Mobile Security*
    <https://play.google.com/store/apps/details?id=org.malwarebytes.antimalware>
    "The Malwarebytes free antivirus app offers top spyware detection
    and virus protection."

    The reality is that you do not need any of them since despite all the
    claims (mostly by anti-malware makers and know-nothing trolls), nobody
    in the real world has ever had a problem unless doing something stupid
    like visitin porn sites and using pirate / jailbreak apps.

    this is false.

    Once again, nospam is being reasonable when he points out that virtually everything the ignorant uneducated Your Name iKook said, was incorrect.

    One has to wonder how people that incredibly ignorant can survive in this world, but then again, Apple seems to love people like this Your Name is.

    In return, this ignorant YourName iKooks loves Apple (it's a fair trade).

    However, the value of this thread isn't anything that the ignorant iKooks
    can possibly impart - but the value is what _adults_ can teach each other.

    If the summary in the Subject line is in any way false, then discuss that:
    *No smartphone is less secure than an Apple smartphone*

    It's what _adults_ do when they converse amongst intellectual equals.
    --
    Posted out of the goodness of my heart to disseminate useful information
    which, in this case, is to agree with nospam that Your Name is mistaken.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From nospam@21:1/5 to spam@nospam.com on Fri Nov 11 06:48:05 2022
    XPost: comp.sys.mac.advocacy, misc.phone.mobile.iphone

    In article <tkkqk7$9tb$1@gioia.aioe.org>, Andy Burnelli
    <spam@nospam.com> wrote:

    Your Name wrote:

    There is a ton of Windoze malware (and Android malware) that doesn't
    show any visible symptoms nor is detected, let alone removed, by any anti-malware apps ... who are always two steps behind the malware
    makers anyway.

    Hi nospam,


    fix your scripts, trollboy



    On that topic of anti-malware apps for iOS, and while I don't use anti-malware programs on my smartphones and iPads, certainly they are advertised to exist for iOS, aren't they? (albeit, mostly shills)

    *Best antiviruses for iPhone ?V our detailed list*
    <https://cybernews.com/best-antivirus-software/antivirus-for-iphone/>

    *Best iPhone antivirus apps in 2022: top iOS security protection*
    <https://www.techradar.com/best/best-iphone-antivirus-app>

    *The best antivirus apps for the iPhone*
    <https://www.digitaltrends.com/mobile/best-antivirus-for-iphone/>

    those familiar with ios (i.e., not you) can easily see that the various
    so called anti-virus apps listed in those links don't do anything about
    viruses and even tout features that are part of ios itself.

    simply doing a search on keywords without understanding what it is your searching for only exposes your ignorance.

    among what's listed are apps that check for insecure wifi networks (ios
    does that already), malicious websites and if the device is jailbroken
    (as if the user doesn't know that, since they would had to have taken
    steps to jailbreak it). there may also be a vpn, which is definitely
    not 'anti-virus'.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jolly Roger@21:1/5 to Andy Burnelli on Fri Nov 11 16:36:24 2022
    XPost: comp.sys.mac.advocacy, misc.phone.mobile.iphone

    On 2022-11-11, Andy Burnelli <spam@nospam.com> wrote:
    Your Name wrote:

    There is a ton of Windoze malware (and Android malware) that doesn't
    show any visible symptoms nor is detected, let alone removed, by any
    anti-malware apps ... who are always two steps behind the malware
    makers anyway.

    Hi nospam,

    LOL... Arlen is such an idiot. : D

    --
    E-mail sent to this address may be devoured by my ravenous SPAM filter.
    I often ignore posts from Google. Use a real news client instead.

    JR

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jolly Roger@21:1/5 to Andy Burnelli on Fri Nov 11 16:34:33 2022
    XPost: misc.phone.mobile.iphone, comp.sys.mac.advocacy

    On 2022-11-11, Andy Burnelli <spam@nospam.com> wrote:
    Jolly Roger wrote:

    Apple patches zero-day and other vulnerabilities as they are discovered.
    Meanwhile, Pegasus for Android does not require zero-day vulnerabilities
    to root the target device and install the malware. Instead, the threat
    uses an otherwise well-known rooting technique called Framaroot. They
    literally walk right in the front door. Anyone calling that "more
    secure" has a screw loose.

    Hi badgolferman,

    Hi Arlen. I'm not badgolderman, sorry.

    [the rest of your bullshit rightfully ignored]

    --
    E-mail sent to this address may be devoured by my ravenous SPAM filter.
    I often ignore posts from Google. Use a real news client instead.

    JR

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)