Google Outlines iPhone Vulnerabilities That Let Malicious Websites Steal User Data for Years, Now Fixed

[nvmls]

Logical fallacy. I could also ask you:

If Google values security so highly, why don’t they update all Android devices at the same time?

They don't, they are an ad agency.

But Apple's privacy PR oh boy, that gets fun. Safari, which is an old bloated pos on a pretty UI, the extensions are a joke and most of them are even paid, the performance is subpar for being a stock app, run it side by side with Brave or Firefox and it's a disgrace. Gotta love the "it's snappier" posts, that's all it is, a sad joke, unless you use it for social media exclusively (not that it didn't spin fans like crazy only to hang & crash on some of these sites like linkedin not long ago anyways).

What good is a damn cross site tracking prevention checkbox when you have ads spamming? Oh right, so now the ads should be random, much better privacy!

 

[DaveN]

The defenders will soon be here trying to explain how Apple was not at fault and that the company is really trying to put privacy priority # 1 (ha...ha...ha).

The bug-hunting hackers at Google reported the issue to Apple on Feb. 1 and, less than a week later, Apple updated its operating systems.

 

[BWhaler]

I’d bet anything Facebook was one of the companies using the exploits.

 

[AustinIllini]

Google values ad revenue over privacy, everyone knows that.

This. Google values ad revenue, which requires the use of customer data. Apple sells hardware.

Here's the thing, though. Apple doesn't actually value your privacy. Apple only values their ability to market privacy. That's why you see certain oddities where Apple has been compromising your privacy.

 

[coolfactor]

The Project Zero blog post links to further posts which explain the exploit in excruciating detail.

That is some UNBELIEVABLE analysis! Wow! I suddenly have a new-found respect for these researchers!

 

[Expos of 1969]

Apple has employees looking for bugs in their own OSes. Google has employees looking for bugs in all OSes, and whenever a non-android bug shows up they tell the world about it to make it seem that Android is more secure.

So Apple employees did not find these bugs but Google employees did?

 

[FFR]

This. Google values ad revenue, which requires the use of customer data. Apple sells hardware.

Here's the thing, though. Apple doesn't actually value your privacy. Apple only values their ability to market privacy. That's why you see certain oddities where Apple has been compromising your privacy.

Well if it sells more hardware or services, you can bet apple values privacy.

 

[realtuner]

Wow, dealing with you is certainly frustrating. Your response to questions is often "Source" or "Logical fallacy" or some similar nonsense. Google does not put huge billboards on buildings or put up slides during their keynote presentations stating that PRIVACY is so important to them and they really focus on it. But your beloved Apple does so my question is a very sound question to which you have no concrete response. I never said that Google values security highly but Apple certainly states publicly that it does. Therefore, you should be able to answer my question quite easily but obviously Apple and its actions does not provide you with credible information to do so.

No problem. But it would be easier and more honest if you just said that you cannot answer the question rather than stating "Logical fallacy. I could ask you..."

Can't answer a question that's been intentionally worded so as not to have an answer. I don't know how Apple internally deals with exploits. I don't know if they have a team similar to Project Zero. Apple doesn't talk publicly about how they investigate and deal with security exploits. Therefore it's impossible for me to answer your question.

 

[dannyyankou]

Hey, at least Android 10 will fix the 193 security vulnerabilities Android has. That is, if your device even supports Android 10.

https://www.forbes.com/sites/daveyw...ity-vulnerabilities-need-fixing/#1d2c5846616b

 

[Rob_2811]

They don't, they are an ad agency.

But Apple's privacy PR oh boy, that gets fun. Safari, which is an old bloated pos on a pretty UI, the extensions are a joke and most of them are even paid, the performance is subpar for being a stock app, run it side by side with Brave or Firefox and it's a disgrace. Gotta love the "it's snappier" posts, that's all it is, a sad joke, unless you use it for social media exclusively (not that it didn't spin fans like crazy only to hang & crash on some of these sites like linkedin not long ago anyways).

What good is a damn cross site tracking prevention checkbox when you have ads spamming?

It really does.

The platform was built on the third party apps that are available, Apps from Facebook and Google that have basically no real concern for peoples privacy.

The top ten free apps downloaded on iOS in 2018 were YouTube, Instagram, Snapchat, Facebook Messenger, Facebook, Bitmoji, Netflix, Google Maps, Gmail and Spotify and the default search engine for Safari is Google (which Apple happily takes a fee for).

This privacy ideal Apple sells exists for hardly anybody using their platform.

 

[realtuner]

This. Google values ad revenue, which requires the use of customer data. Apple sells hardware.

Here's the thing, though. Apple doesn't actually value your privacy. Apple only values their ability to market privacy. That's why you see certain oddities where Apple has been compromising your privacy.

I call BS on this.

 

[coolfactor]

Here's the thing, though. Apple doesn't actually value your privacy. Apple only values their ability to market privacy. That's why you see certain oddities where Apple has been compromising your privacy.

Nonsense. Apple absolutely values your privacy. It's unreasonable for anyone to think they can be _perfect_ at it. Go read that Google blog post to realize just how incredibly complex these exploits are! Not simple stuff for Apple's developers to have caught.

 

[Expos of 1969]

Can't answer a question that's been intentionally worded so as not to have an answer. I don't know how Apple internally deals with exploits. I don't know if they have a team similar to Project Zero. Apple doesn't talk publicly about how they investigate and deal with security exploits. Therefore it's impossible for me to answer your question.

You have just answered the question as you should have the first time. Admitting that you don't know if Apple has a team similar to Project Zero. Much better than putting a term on my question and responding with a question.

 

[kis]

That's impossible - only Android has malware (just ask Tim)

 

[Rob_2811]

I call BS on this.

Why do they take money from Google to be default search provider in Safari. Seems at odds with their commitment to privacy no?

 

[now i see it]

glad I stayed on iOS 9

 

[tizeye]

Let's see. A competitor, Google, publishes a story today that was fixed 7 months ago. Apple became aware of it...they fixed it without 3rd party (corporate, media, or government) pressure. Given that this is old news, why is it published today. Also, the report becomes suspicous by its absence. Notice how android wasn't mentioned once...even to assure that didn't happen with that operating system, so it must have happened and they want to bury that fact by it's absence.

 

[AustinIllini]

Nonsense. Apple absolutely values your privacy. It's unreasonable for anyone to think they can be _perfect_ at it. Go read that Google blog post to realize just how incredibly complex these exploits are! Not simple stuff for Apple's developers to have caught.

Saying "we respect your privacy" while letting contractors listen to Siri recordings isn't imperfection, it's straight-up lying.

Apple only cares about privacy so long as it can use it to sell you apps and services. Period.

They betrayed your trust by letting contractors (people who don't explicitly work for Apple) listen to your Siri conversations without telling you.

I still prefer Apple, but you need to get over this delusion that Apple really cares about your privacy. They care about selling you privacy as a way to make money. The second they decide it's not worth your money to remain private, everything can and will change.

 

[Hessian]

Google is trying to be a Crook and a Policeman simultaneously.

OK.

They probably noticed this with Advertisements promoting sites with the bad data, just a guess...

 

[AustinIllini]

glad I stayed on iOS 9

Why? Because you are now susceptable to vulnerabilities that have been fixed in the last 4 releases of iOS?

Staying that far behind is asking to have your information stolen.
[doublepost=1567177457][/doublepost]

They probably noticed this with Advertisements promoting sites with the bad data, just a guess...

Pick on them all you want, but your devices are safer because of Project Zero.

 

[timeconsumer]

Nonsense. Apple absolutely values your privacy. It's unreasonable for anyone to think they can be _perfect_ at it. Go read that Google blog post to realize just how incredibly complex these exploits are! Not simple stuff for Apple's developers to have caught.

Apple has a closed system, we don’t know what they are doing behind the scenes. They do state that they do, but nobody except Apple knows for sure. But regardless, software exploits can and will happen. Security and privacy are two separate things.

 

[FFR]

Why do they take money from Google to be default search provider in Safari. Seems at odds with their commitment to privacy no?

Who cares about the default? The fact that I can set duck duck go as my default search engine on iOS is proof of apples commitment to privacy, not lack there of.

At least it’s an option with iOS at the users discretion, don’t think google even offers that.

 

[AustinIllini]

Apple has a closed system, we don’t know if they value privacy or not. They do state that they do, but nobody except Apple knows for sure. But regardless, software exploits can and will happen. Security and privacy are two separate things.

Also, Apple has done a pretty terrible job of providing their definition of privacy.

They make it sound like they don't want your data, but it's a little hard to tell if privacy to them means "private to you alone" or "private between you and Apple".

Your fingerprint data is truly private on iPhone. Your iCloud data is private between you and Apple.
[doublepost=1567177649][/doublepost]

Who cares about the default? The fact that I can set duck duck go as my default search engine on iOS is proof of apples commitment to privacy, not lack there of.

At least it’s an option with iOS at the users discretion, don’t think google even offers that.

Again, that's just marketing. They can't market privacy with Google as their main search engine.

 

[Expos of 1969]

I call BS on this.

Saying "we respect your privacy" while letting contractors listen to Siri recordings isn't imperfection, it's straight-up lying.

Apple only cares about privacy so long as it can use it to sell you apps and services. Period.

They betrayed your trust by letting contractors (people who don't explicitly work for Apple) listen to your Siri conversations without telling you.

I still prefer Apple, but you need to get over this delusion that Apple really cares about your privacy. They care about selling you privacy as a way to make money. The second they decide it's not worth your money to remain private, everything can and will change.

Well stated. I feel for the contractors who are poor pawns in the new global "gig economy" exploitation racket. However I feel nothing but cold contempt for Apple and how it operates these days.

 

[Rob_2811]

Who cares about the default? The fact that I can set duck duck go as my default search engine on iOS is proof of apples commitment to privacy, not lack there of.

At least it’s an option with iOS at the users discretion, don’t think google even offers that.

Android allows you to use a completely different browser as the default.

You haven't answered the question, they are talking privacy yet taking Googles money to be default search provider. Thats doesn't make any sense.

Cynics would say they care about privacy as long as it doesn't hurt their bottom line.