Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Serious question: If Apple values privacy so highly why do they not have a division like Googles Project Zero doing this kind of work? If they do have such a division, what has it exposed over the years?

Again valuing privacy and valuing security are two different things. Security is necessary but not sufficient to ensure privacy. Apple values both (hence their actions removing the Zoom web server exploit on macOS). Apple has a security team that looks for security problems in their own systems. They have spoken at the DEFCON and Black Hat security conferences. If you are asking why they do not focus on other companies’ security problems, the answer would be simple, that is not their problem. Apple’s responsibility is to do everything they can (including issuing timely fixes) to keep its own systems safe for its customers. That Google feels they benefit by having a team focused on finding problems in other companies’ systems, does not mean that every company has to feel that way.
 
Out of curiosity, do you ever wonder why they haven’t done this?

Nope, do not wonder at all. Microsoft, despite its market share in desktop systems has not been able to gain significant market share in the search engine space, there is no reason to believe that Apple would do better there (they do support Duck Duck Go, to ensure that their is at least one privacy-respecting search engine). For many years, the bulk of the content watched on YouTube was copyrighted content uploaded by others. While this did not bother Google, Apple’s relationship with content providers would have prevented them for doing that. At this point, building a meaningful competitor would be difficult and probably not financially worth it. As I already pointed out, Apple Maps are available on the web and Apple has a Google Docs competitor, so those were just incorrect, and FireFox is a privacy respecting browser with enough market share as to make it not worth it for Apple to try to compete with Safari again.
 
Out of curiosity, do you ever wonder why they haven’t done this?

no company can enter all markets, they rather do what they excel at best for maximum profit. If they open search engine and will make 20% profit while same resources will be used to make yet another iphone and make 40% profit. Its money thing.

They have done this they are just not as successful at it as Google. They have iPages for Gdocs, Apple Maps for Google Maps, Safari failed on Windows, the 2 things they don't have is search engine and video site because they are not in the ads business so far.

Other people decided to enter the search engine business including Bing, Qwant, DuckDuckGo, and StartPage (i know they rely on Google).
 
DuckDuckGo is a privacy friendly search engine. Why would Apple need to build one, rather than supporting the existing one (which they do by allowing it to be a user’s default on iOS and macOS, and supporting it with Apple Maps integration).



While they had Safari for Windows, they determined that they were unable to gain enough market share (at the time, everyone still used IE) and that Firefox offered a privacy respecting browser with enough market share to matter, so they no longer spent time on it.



Apple Maps is available on the web, and is used by DuckDuckGo among others for exactly this reason. It respects user privacy and provides a great experience.



Apple offers iCloud with free access to Pages, Numbers and Keynote (arguably better than Google Docs), and have for a long time.



Google posting stories about security exploits they discover does shame Apple. Glad they found and disclosed these exploits and Apple mitigated them. Not sure how they determine the timing of these releases (past the minimum 90-day window they guarantee), and have not been able to find any information on it (meaning that immediately after I post this someone will find a link that explains it) :) so I will give them the benefit of the doubt and presume it was just the time for the release, not that it was timed to coincide with the new iPhone’s announcement.

Apple Safari failed where Google's Chrome has succeeded. DDG is too small to really compete against GSearch it is also reliant on Yahoo. No one really uses Apple Maps except iloyalists. Planet earth uses Google Earth/Maps including tv networks. Apple Office suite is not available except on iDevices and web. Gdocs has iOS, Android, Chromebooks, and Web.

They need to compete in those markets just as much as they are competing against the Samsung 10.
 
no company can enter all markets, they rather do what they excel at best for maximum profit. If they open search engine and will make 20% profit while same resources will be used to make yet another iphone and make 40% profit. Its money thing.

They have done this they are just not as successful at it as Google. They have iPages for Gdocs, Apple Maps for Google Maps, Safari failed on Windows, the 2 things they don't have is search engine and video site because they are not in the ads business so far.

Other people decided to enter the search engine business including Bing, Qwant, DuckDuckGo, and StartPage (i know they rely on Google).

The entire i-suite of productivity is simply not great for anything other than the most straight forward tasks. I suppose one can interpret that "not as successful as company XYZ" even if near the bottom of the list.

Apple Maps is great for some people on mobile. But I think they have to use DDG in order use it in browser. It's atrocious for POIs currently as it links out to Yelp using Apple Maps API.

Safari failed for numerous reasons. I won't go into details.

I disagree with they didn't do search engine / video site because they are not in the ads business. I think they were(are) primarily a hardware company trying to create services that could complement their hardware well. The problem is they simply don't do many of their services well outside (and arguably inside) of Apple.
 
Same question. Read the articles, and didn’t see them listed. Maybe I missed them... I feel google has the responsibility to disclose them.
No, Apple has the responsibility to be up front about this. It's their product.
[doublepost=1567304914][/doublepost]
Does Microsoft find all/some/any of their vulnerabilities?
Microsoft recently closed a hole in their Remote Desktop service that allowed anyone to completely take over a computer without any account access.
Honestly folks, we need to work at rethinking life and get all the important stuff off the web connected world. This stuff just keeps happening.
 
Apple Safari failed where Google's Chrome has succeeded.

Apple’s original reason for building Safari for Windows was to have a browser that was not Internet Explorer the dominant browser at the time, so that people would build websites that were not IE specific and that supported the WHAT-WG web extensions. Google adopted WebKit and began to aggressively push Chrome. Apple’s concern was not Windows users, but a web that would not be accessible for Mac users. Once Chrome and Firefox successfully beat Internet Explorer, and iOS became popular enough that most web developers needed to support Safari, there was no longer any incentive for Apple to care about a browser for Windows users and they dropped development of Safari for Windows.

DDG is too small to really compete against GSearch it is also reliant on Yahoo.

Too small to compete in what way? It is a great search engine, with a small market share. When I first switched, if I did not get a good set of results, I would go search again using Google. It has been several years since I needed to do that. DuckDuckGo gets some of its ads from the Bing-Yahoo search alliance. I am not sure what you mean by “reliant on Yahoo” other than that, nor am I sure why it matters.

No one really uses Apple Maps except iloyalists.

It is still the most used mapping software on iOS and more and more reviews are saying that it meets of exceeds Google Maps in many respects.

Planet earth uses Google Earth/Maps including tv networks.

Not sure what you mean here, nor why it matters? Apple’s goal is to provide an alternative for their users, which they do. They make it available on the web to enable people who care to use it. TV networks using Google maps have no privacy implications for Apple users.

Apple Office suite is not available except on iDevices and web.

Apple’s iWork is available on macOS and iOS as application, and via browsers on Windows (just like Google Docs is). The Google Docs iOS apps are almost unusable. Keynote is not only better than Google Slides, it is better than PowerPoint. Numbers and Pages are quite sufficient for any application where the Google Docs and Google Sheets would work.

They need to compete in those markets just as much as they are competing against the Samsung 10.

Asserting they need to compete without providing any reason why they should, does not mean much. Why should they expend resources on building a competitive search engine? Microsoft has spent a great deal and has very little to show for it. As long as there is a privacy preserving search engine for its users, why does Apple need one? Why should Apple care what browser Windows users use, as long as web applications run on all its users’ platforms? Same question as to why they should care about Android maps users? Etc.

Apple needs to ensure that its customers have access to privacy preserving options, which they do. Beyond that, I am not sure why they should care.
 
Too small to compete in what way? It is a great search engine, with a small market share. When I first switched, if I did not get a good set of results, I would go search again using Google. It has been several years since I needed to do that. DuckDuckGo gets some of its ads from the Bing-Yahoo search alliance. I am not sure what you mean by “reliant on Yahoo” other than that, nor am I sure why it matters.

I think he means this: https://help.yahoo.com/kb/SLN27299.html

DDG still for me is pretty useless as a daily search engine. I remember back in the day Excite/Webcrawler/Altavista/Yahoo etc were all trying to give the most relevant results back to users. Now, the emphasis is on privacy for some and not so much for others. I think at the end of day it really depends on what people care about and what they are willing to give up.

It is still the most used mapping software on iOS and more and more reviews are saying that it meets of exceeds Google Maps in many respects.

I think the mere fact that Google Maps on iOS has a significant footprint still says something about it and shouldn't really be overlooked.

Apple’s iWork is available on macOS and iOS as application, and via browsers on Windows (just like Google Docs is). The Google Docs iOS apps are almost unusable. Keynote is not only better than Google Slides, it is better than PowerPoint. Numbers and Pages are quite sufficient for any application where the Google Docs and Google Sheets would work.

For corporate and business use, there's no contest here. Apple's iWork is just not a conversation starter.

Apple needs to ensure that its customers have access to privacy preserving options, which they do. Beyond that, I am not sure why they should care.

This is the current objective that Apple is trying to achieve. However, there is a cost to this. Customer acquisition and retention costs for Apple are generally higher than others, partly due to the target audience for their platform. I do not think the privacy rhetoric alone is something they can continue pursuing long term. It's their latest trend right now, and if/when it is a nonfactor, they need to be ready to pivot to something else. Because of these trends, I think they should care somewhat.
 

That is an old link. Early on DuckDuckGo used them as a major partner, that has not been the case for a long time. Currently, they are one of the sites for direct answer links.

DDG still for me is pretty useless as a daily search engine.

How about a simple experiment: Rerun your last 10 Google searches and give us the first page of the results. Then run them with the same search terms on DuckDuckGo and do the same. It has been years since I didn’t get the results I was seeking on the first page of the results.

You say it is useless, I would like to see a set of concrete examples that show why.

I think the mere fact that Google Maps on iOS has a significant footprint still says something about it and shouldn't really be overlooked.

For many people, it comes from the launch. It takes a while before people realize that things have changed. The more stories that we see in main stream media saying Apple maps are as good or better than Google maps, the few people will bother to download Google maps.

For corporate and business use, there's no contest here. Apple's iWork is just not a conversation starter.

Microsoft Office is still number 1 there, with Google number 2. That does not change the fact that iWork exists, continues to improve and is better than Google docs in many cases. I hope at some point Apple does decide to make a push to sell iCloud/iWork to corporate customers.

This is the current objective that Apple is trying to achieve. However, there is a cost to this.

Is your argument that in order to remain relevant as a hardware and services company, Apple needs to have its own search engine? It needs to have a browser on Windows? It should make a push to sell corporate customers iCloud/iWork?

Customer acquisition and retention costs for Apple are generally higher than others, partly due to the target audience for their platform.

If we believe the analysts, it seems that Google’s costs for maintaining their default search placement on iOS has gone up a factor of 3-4 over the last few years. Seems like their acquisition costs are rising much faster than Apple’s.

I do not think the privacy rhetoric alone is something they can continue pursuing long term. It's their latest trend right now, and if/when it is a nonfactor, they need to be ready to pivot to something else.

You call it rhetoric, and I call it a fundamental design goal for them (as it has been for years). Clearly this point is starting to hit home as Google and Facebook (two of the biggest violators) have started making noises in this direction. We will see if that is enough, and if not, if governments will intervene in ways that make it much more difficult for Google than for Apple.
 
  • Like
Reactions: FriendlyMackle
Serious question: If Apple values privacy so highly why do they not have a division like Googles Project Zero doing this kind of work? If they do have such a division, what has it exposed over the years?
Apple doesn’t employ hackers to hack other systems like google does because it does not benefit their model. How often are the high level of Android vulnerabilities shared on this site? Almost never. They are very quietly released. And some very significant ones are dealt with by discontinuing support of those versions, even though the majority of users are stuck there. Where is the outrage.

Also, on several occasions Google’s true motive has been exposed. They hack other systems to further their cause. They used this program to find a way to keep tracking Safari users secretly when they turned off tracking. They were fined billions around the world for this.
 
...This is the current objective that Apple is trying to achieve. However, there is a cost to this. Customer acquisition and retention costs for Apple are generally higher than others, partly due to the target audience for their platform. I do not think the privacy rhetoric alone is something they can continue pursuing long term. It's their latest trend right now, and if/when it is a nonfactor, they need to be ready to pivot to something else. Because of these trends, I think they should care somewhat.
Imo, customer acquisition is easy due to the Apple brand, word of mouth, large foot print. That’s why Apple doesn’t have to advertise, in general, like Coke.

Retention for both android and iOS are harder due to people switching it up.(same with automobiles)
 
How about a simple experiment: Rerun your last 10 Google searches and give us the first page of the results. Then run them with the same search terms on DuckDuckGo and do the same. It has been years since I didn’t get the results I was seeking on the first page of the results.

"dyson aircurler discounts"
- Google returns a more comprehensive list of retailers as well as miscellaneous review links
- DDG returns direct results, but nothing intuitive. It doesn't even mention Sephora on the 1st page.

"hugo templates loop"
- Google returns the first link to GoHugo's forum entitled "how do i for loop in a template in GoHugo"
- DDG returns direct results to various hugo resources, but nothing intuitive.

"balanced cables massdrop 789"
- Google returns some vendors that sell relevant balanced cables including direct links to Monoprice
- DDG returns direct results to different websites, but doesn't do a good job on correlation

"fantasy football sleepers"
- Google returns a plethora of relevant links from different sites
- DDG returns a decent amount, but where's CBS? It's not on the first page.

"wayla pics"
- Google returns in the first 4 links pictures of Wayla food
- DDG just links out to Yelp and some links that contain the word "Wayla". They are reasonably relevant, but it's a lot of work to wade through.

These are just some examples of the last couple searches I did. I never get the same results for what I am looking for. Google flat out gives better related results. It's no contest here, and it's why DDG is still fairly niche (at least for me).

For many people, it comes from the launch. It takes a while before people realize that things have changed. The more stories that we see in main stream media saying Apple maps are as good or better than Google maps, the few people will bother to download Google maps.

Because Google maps is ubiquitous on every platform with very little effort, I don't see how that will change habit.

Microsoft Office is still number 1 there, with Google number 2. That does not change the fact that iWork exists, continues to improve and is better than Google docs in many cases. I hope at some point Apple does decide to make a push to sell iCloud/iWork to corporate customers.

When has Apple ever focused on their corporate customers with software?

Is your argument that in order to remain relevant as a hardware and services company, Apple needs to have its own search engine? It needs to have a browser on Windows? It should make a push to sell corporate customers iCloud/iWork?

If we believe the analysts, it seems that Google’s costs for maintaining their default search placement on iOS has gone up a factor of 3-4 over the last few years. Seems like their acquisition costs are rising much faster than Apple’s.

No, my argument is that it needs to be ready to pivot. It's pretty apparent that they really want people to hone in on privacy, which is great but is a diversion. The recent news of various privacy / security intrusions kind of dampen their messaging. They should really focus on offerings and expand their ecosystem to be beyond. They have started to do this, but the results have been shaky so far.

You call it rhetoric, and I call it a fundamental design goal for them (as it has been for years). Clearly this point is starting to hit home as Google and Facebook (two of the biggest violators) have started making noises in this direction. We will see if that is enough, and if not, if governments will intervene in ways that make it much more difficult for Google than for Apple.

It's going to hurt both Google and Apple. As Google addresses these privacy concerns, they can catch up. Apple in the meantime just doesn't have the breadth of users that will allow them to be completely independent from any 3rd party. At some point just like we've seen historically, people will switch if there are reasonable options.
 
"...No, my argument is that it needs to be ready to pivot. It's pretty apparent that they really want people to hone in on privacy, which is great but is a diversion. The recent news of various privacy / security intrusions kind of dampen their messaging. They should really focus on offerings and expand their ecosystem to be beyond. They have started to do this, but the results have been shaky so far...:
Dampens “The message” maybe to you but clearly is no diversion and a commitment to do more. In conjunction with other stuff.

I think to the critics anything will make them more cynical, while to the supporters realize they need to improve.
 
It's cute that Google's making fun of this. We all know there are many vulnerable Android devices out there which are not getting updates. At least that's not the case for the vast majority of Apple devices out there.
 
So many exploits in a roll. Heheh, it looks like Google has been collecting them for sometime and just decided to splash Apple with them just before the announcement. They know that boot all can be fixed with in the time gram and .... well they will come back again publishing whatever ...

This Corp wars such a fun ....
 
How are they making fun of this?
I just mean that they have no right to speak about iPhone vulnerabilities, when the vast majority devices running their OS are far more vulnerable. Have to hand it to them though, they did right by making their own smartphones. The Pixel line, and others that use vanilla Android, are definitely competitors when it comes to security.
 
It's cute that Google's making fun of this. We all know there are many vulnerable Android devices out there which are not getting updates. At least that's not the case for the vast majority of Apple devices out there.
If you know about some Android vulnerabilities you should report them to Google instead of posting about it on MR. Google would pay you big money for these. MR readers won't.
 
If you know about some Android vulnerabilities you should report them to Google instead of posting about it on MR. Google would pay you big money for these. MR readers won't.
The Android vulnerabilities are known to anyone who cares to look them up. Most Android phones do not receive updates. You cannot patch vulnerabilities in phones which do not receive updates.
 
No, Apple has the responsibility to be up front about this. It's their product.
[doublepost=1567304914][/doublepost]
Microsoft recently closed a hole in their Remote Desktop service that allowed anyone to completely take over a computer without any account access.
Honestly folks, we need to work at rethinking life and get all the important stuff off the web connected world. This stuff just keeps happening.

For whatever reason, even most very educated people have been so brainwashed into smart everything that their argument will be “we have nothing to hide.” As with most things, only when their identity is stolen will they wake up. But as long as this isn’t a mass problem (i.e. negative consequences affect < 1% of the population) the chances of companies being asked to take more responsibility probably rivals my chances of winning the lottery the next time I buy a ticket.

Equifax was allowed to settle for approx $5 per person’s data that was stolen. That’s about how much our government thinks a person’s financial information is worth. The information sells for far more on the dark web.

About the only thing that has become clear from this is that the privacy being sold by Apple is an illusion. Without security, there is no privacy.

What happens on iPhone doesn’t stay on the iPhone but can be seen by the rest of the world. It’s just that Apple won’t be selling your info, but others can. You will likely find it on the dark web, available to anyone for a price.
 
  • Like
Reactions: dantroline
Apple’s original reason for building Safari for Windows was to have a browser that was not Internet Explorer the dominant browser at the time, so that people would build websites that were not IE specific and that supported the WHAT-WG web extensions. Google adopted WebKit and began to aggressively push Chrome. Apple’s concern was not Windows users, but a web that would not be accessible for Mac users. Once Chrome and Firefox successfully beat Internet Explorer, and iOS became popular enough that most web developers needed to support Safari, there was no longer any incentive for Apple to care about a browser for Windows users and they dropped development of Safari for Windows.



Too small to compete in what way? It is a great search engine, with a small market share. When I first switched, if I did not get a good set of results, I would go search again using Google. It has been several years since I needed to do that. DuckDuckGo gets some of its ads from the Bing-Yahoo search alliance. I am not sure what you mean by “reliant on Yahoo” other than that, nor am I sure why it matters.



It is still the most used mapping software on iOS and more and more reviews are saying that it meets of exceeds Google Maps in many respects.



Not sure what you mean here, nor why it matters? Apple’s goal is to provide an alternative for their users, which they do. They make it available on the web to enable people who care to use it. TV networks using Google maps have no privacy implications for Apple users.



Apple’s iWork is available on macOS and iOS as application, and via browsers on Windows (just like Google Docs is). The Google Docs iOS apps are almost unusable. Keynote is not only better than Google Slides, it is better than PowerPoint. Numbers and Pages are quite sufficient for any application where the Google Docs and Google Sheets would work.



Asserting they need to compete without providing any reason why they should, does not mean much. Why should they expend resources on building a competitive search engine? Microsoft has spent a great deal and has very little to show for it. As long as there is a privacy preserving search engine for its users, why does Apple need one? Why should Apple care what browser Windows users use, as long as web applications run on all its users’ platforms? Same question as to why they should care about Android maps users? Etc.

Apple needs to ensure that its customers have access to privacy preserving options, which they do. Beyond that, I am not sure why they should care.

The same reason they released Safari for Windows, to not let Google dominate the Web like Microsoft did. It is already reported that YouTube works better in Chrome over other web-browsers. Soon it will be Maps, GDocs, Gmail... you know how it works
 
This.

Going to quote it simply to counter the inevitable posts saying Apple somehow screwed up....blah....blah....blah.

First off, Apple didn't ignore this exploit for years. They simply didn't know about it. The only reason it went unnoticed for so long is because it wasn't widespread. Once an exploit becomes common it's usually discovered quickly. This is why zero-days are so valuable and often sold to governments or others who can afford to pay a couple million for an exploit. It's also why those same people only use the exploits on targets they consider valuable, because once it's out there it will be discovered and fixed.

Secondly, Apple dealt with it immediately. Google notified Apple on Feb 1st and Apple released a patch on Feb 7th. This is a perfect example of Apple having superior security to Android. Exploits will always exist. Being able to quickly roll out a fix for an exploit is one of the most important methods in dealing with them. Something Android is absolutely horrible at.

How do you know it wasn't widespread? You have absolutely no idea who knew about it, or how it was exploited to say anything like that.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.