Phil Schiller Tweets Link to Mobile Malware Report That Slams Android

[KdParker]

Don't know about anyone else but I just see this 'tweet' as a pathetic attempt at scare mongering slander, kind of sad Apple has gone to this level to try and gain those sales back from Android, is it utterly incapable of actually changing iOS and giving people what they want and something fresh? Obviously it is..

What makes you think they are losing sales to Android?

Because a comercial told you so?

 

[LordVic]

you know how to avoid malware / trojans
I know how to avoid malware / trojans.

The problem isn't techies such as ourselves.
the problem is your CEO. your end users. your non techie accountants who use their devices for work. having sensitive, or secure information, who Do not know what is even out there. They think if it's on the store, it's safe. They think if their friend says it's safe, it's safe. They don't take 20 seconds to even think about it, and assume that the "give access" screen is just for basic information and click past, as the majority of users do.

in the world of BYOD that has taken over the workplace, these risks can be detrimental. Apple gets around it by their method of software scrutiny before it hits the store, as well as their internal security. Blackberry gets aroudn it by having a completely locked down OS and their closed garden platform.

Android doesn't have this. If it comes down to corporate security and having users use their devices for both fun and work, Android would be a major concern of mine. you can only hope that as an administrator and policy enforcer that your BYOD are smart, but that assumes too much.

This is why Android's current issues with malware strikes me as important.

It's different for your average home user than it is your corporate side. these ARE concerns corporations do have to have

 

[chiefpavvy]

The fact that someone hasn't broke into your house isn't because you have great security at home, it's because no one gives a damn about your house.

Bad, no, terrible analogy.

Also it stands to reason that with the value of the iOS ecosystem and market, the bad guys are all over it. And it stands to reason they may get through at some point. But they haven't yet, and that's a testament to the "closed" ecosystem. If you don't think they aren't poking around, you are incredibly naive.

 

[cclloyd]

I feel like the .7% exploits for iOS was the 5.0 and 5.1 jailbreak 😛

 

[linux2mac]

Precisely, which is why I do not jailbreak my devices.

EDIT: Also, hence, why Apple does not allow "sideloading" of apps. If you choose to break that by jailbreaking the device, you accept the issues which may arise with that. It's not default behavior.

"BOOM!" They just don't get it.

 

[apolloa]

What makes you think they are loosing sales to Android?

Because the comercial told you so?

Erm? What commercial do you know of that advertises sales figures? Seriously what advert states that???

Also facts and figures that show how it has more market share. And I am not talking about America exclusively.

 

[gatearray]

I think his tweet is shining the light on the facts. On something that has been promoted about this device. The security of iOS isn't some dream or some lying marketing ploy, it is a fact. How could they not point this out. It needs to be know, and businesses who care about security should take notice.

I hope to see this in security and mobile blogs everywhere.

This is especially important since Samsung has recently launched a new ad campaign targeted at enterprise users with the catchphrase SAFE. After this damning report, a more accurate slogan would be DANGEROUS, no? 🙂

Another interesting thing about all this is that Samsung doesn't advertise itself as Android front and center anymore, in fact, they do their best to diminish this fact. Good for Phil Schiller!

 

[samcraig]

Who needs malware when all you have to do is stick the phone in the freezer for a while :

Researchers bypass Android encryption by exposing phones to freezing temperatures.


http://appleinsider.com/articles/13...n-by-exposing-phones-to-freezing-temperatures

Yeah. Amusing. But how concerned should someone really be about this fact. For one - it was a custom program that needs to be run.

The fact that the encryption can be bypassed in this manner is pretty damn remote. You know - unless you're on the FBI watch list 🙄

 

[CausticPuppy]

Desperate times call for desperate actions.

Way to go, Phil. Next time though, try to be a little more subtle.

I thought this was way more subtle than just saying Android is the mobile OS for porn.

 

[TMay]

Don't have one installed on my Skyrocket. Never had a virus. Don't know anyone in my office or amongst my friends with Android who have. The only stories I've read about viruses have either been on here/forum users spreading their usual sillyness and/or in articles about chinese scam apps that are patterned to look like their real counterpart apps, but in fact are malware.

Very weak attempt at spin in your response; "My anecdotal evidence trumps industry research".

I Google "Android Malware" and most tech sites have stories on it, and most of those sites aren't Apple fanboy sites.

But of course, you don't have an anti-Apple bias so how is it possible that you could be wrong?

 

[Oletros]

http://www.techradar.com/us/news/ph...roid-malware-gives-itself-root-access-1062294

http://www.redmondpie.com/new-android-malware-can-remotely-gain-root-access-to-devices/

Yap, two examples that in the right OS version and right device can root that device BUT 99% of malware doesn't have root access so no, malware doesn't have root access.

It does once the dumb user gives it access to root. And it uses a vulnerability found in JAVA, not in OS X. Otherwise, it can't get into the system.

Yes, I know. And every other malware has to be installed by the user, otherwise, it can't get into the system

----------

Precisely, which is why I do not jailbreak my devices.

EDIT: Also, hence, why Apple does not allow "sideloading" of apps. If you choose to break that by jailbreaking the device, you accept the issues which may arise with that. It's not default behavior.

It's not default behavior on Android too, you have to check a flag and accept a very informative warning

 

[freejazz-man]

Bad, no, terrible analogy.

Also it stands to reason that with the value of the iOS ecosystem and market, the bad guys are all over it. And it stands to reason they may get through at some point. But they haven't yet, and that's a testament to the "closed" ecosystem. If you don't think they aren't poking around, you are incredibly naive.

No, you clearly have no idea what you are talking about. Why don't you tell me exactly why it's a bad analogy instead of just saying so??

Tell me - what features in iOS make it harder to write exploits???

Internationally, who has a bigger market share, iOS or android???

You don't know anything about secure software development so I'm wondering why you keep trying to convince me that you do.

Apple's current distribution model makes it cost ineffective to write exploits for iOS when the most you can get is a CC and Android's distribution model allows for a larger target base of victims. This has nothing to do with iOS security design. Considering that android exploits will also work on the ever larger number of small computers running android, one would wonder why anyone would bother writing exploits for iOS when the only other device it runs on is an iPad.

The amount of malware that exists is proportional to the reward for successful exploits, this means exploit writers decide what to exploit by the maximum rewards possible, as opposed to shutting up iOS fanboys.

Of course facts mean nothing to many of the posters in this thread, but the little amount of iOS malware that's out there is only a result of the fact that globally, many many many more people use android. It's the same reason OSX never had as much malware, most of the world uses windows. That's where the MONEY is.

 

[TheHateMachine]

But you probably represent less than 1% of the Android users. The vast majority of people buying Android and iOS phones are consumers now, not geeks like in the early days of smartphones. These people most definitely are not going to "be safe out there" and will be an "idiot". There are tons of cries about iOS being a closed system and restrictive, and the AppStore is a monopoly and all that crap... but you know what, It friggin works. And average consumers want their stuff to work... not blow up and have all their personal data stolen.

When I was in the AT&T store buying my kids iPhones last year, there were plenty of people around me buying various Android devices too... trust me, there wan't anyone in the bunch that remotely qualified as a geek and likely had no clue how to manage the risks of an open door platform. My favorite was an Asian young lady that was well under 5' tall and playing with her new Samsung Galaxy Note. If I didn't know better, I would have thought it was a sitcom or something because it was gigantic when held to her head. She didn't appear to be someone that was tech savy, but just wanted a big honkin phone.

Ok, I know this may make me sound like a cold heartless bastard but how does this effect me at all? I'm not the average consumer, you pointed this out and I can reap the benefits from a platform that allows me more freedom.

BTW Side loading also is disabled by default, it even warns you that this would make your device more vulnerable if you allow it. Not only does it hide the option for side loading in a few menu options but a big error message pops up basically saying "WARNING, you agree that this could damage your device and get your information stolen".

 

[samcraig]

Very weak attempt at spin in your response; "My anecdotal evidence trumps industry research".

I Google "Android Malware" and most tech sites have stories on it, and most of those sites aren't Apple fanboy sites.

But of course, you don't have an anti-Apple bias so how is it possible that you could be wrong?

We see what we want to. You see spinning. I only offered my experience. I never implied it was the norm. But of course...

How about you stop worrying so much about any perceived bias and more about posting something productive on the thread. It's getting really old and rather boring responding to posts like this. Is this all you have to offer?

I never said I was right or wrong. I stated my opinion on the subject matter. Isn't that what forums are for? Yeah. I'm pretty sure it is.

 

[Taz Mangus]

Tell you what, you can keep your locked down phone with a lack of side loading and 3rd party stores. Ill enjoy them on my phone and be careful about what I install and not be an idiot.

According to your signature you have no problem keeping your locked down iPad 4 16GB and iPod Touch 3G 16GB that lacks side loading. Pot meet kettle.

 

[samcraig]

According to your signature you have no problem keeping your locked down iPad 4 16GB iPod Touch 3G 16GB that lacks side loading. Pot meet kettle.

Well you realize that the flaw in your rebuttal is that his phone is a different device than those you listed. Perhaps he wants more flexibility with his phone that with those other devices.

 

[chiefpavvy]

No, you clearly have no idea what you are talking about. Why don't you tell me exactly why it's a bad analogy instead of just saying so??

Well, Einstein, not too many people protect their physical phone with a 12 gauge 😀 😀 😀 Think about how ridiculous your analogy is.

You don't know anything about secure software development so I'm wondering why you keep trying to convince me that you do.

Please show me where I claimed to be an expert in "Secure Software Development" ... Also, please provide your credentials.

Apple's current distribution model makes it cost ineffective to write exploits for iOS when the most you can get is a CC and Android's distribution model allows for a larger target base of victims. This has nothing to do with iOS security design. Considering that android exploits will also work on the ever larger number of small computers running android, one would wonder why anyone would bother writing exploits for iOS when the only other device it runs on is an iPad.

So your argument is the tired old "security through obscurity" which just doesn't hold up when there are hundreds and hundreds of millions of iOS devices in use daily.

Of course facts mean nothing to many of the posters in this thread, but the little amount of iOS malware that's out there is only a result of the fact that globally, many many many more people use android. It's the same reason OSX never had as much malware, most of the world uses windows. That's where the MONEY is.

And given the MONEY developers are cashing, I guess iOS has the advantage there too. 😀 😀 😀

----------

It's not default behavior on Android too, you have to check a flag and accept a very informative warning

Someone made this point early on in the thread. Consumers pay no attention to those "warnings" and various pop-ups. They just click "OK" or "Continue" and get on with it.

 

[Oletros]

Someone made this point early on in the thread. Consumers pay no attention to those "warnings" and various pop-ups. They just click "OK" or "Continue" and get on with it.

Yap, but they still have to go to an obscure system setting an enable it

 

[samcraig]

Someone made this point early on in the thread. Consumers pay no attention to those "warnings" and various pop-ups. They just click "OK" or "Continue" and get on with it.

If that's true - why all the hate in the thread about the IAP process towards the father for being a bad/stupid/idiot parent....

he says tongue planted firmly in cheek

 

[freejazz-man]

Please show me where I claimed to be an expert in "Secure Software Development" ... Also, please provide your credentials.



So your argument is the tired old "security through obscurity" which just doesn't hold up when there are hundreds and hundreds of millions of iOS devices in use daily.



And given the MONEY developers are cashing, I guess iOS has the advantage there too. 😀 😀 😀

----------



Someone made this point early on in the thread. Consumers pay no attention to those "warnings" and various pop-ups. They just click "OK" or "Continue" and get on with it.

... you think a 12 gauge is good security for your house? No wonder you think iOS is secure... you clearly aren't firing on all cylinders.

You claim to be an expert in secure software development when you insist iOS is more secure than android, it isn't. I'm telling you it isn't and I'm asking you for to provide me with detailed technical reasons on why iOS isn't more susceptible to exploits... but you can't. Hence me reminding you that you don't know what you are talking about.

I'm not advocating security through obscurity. That's what iOS is right now. It's more obscure than android and you seem to think that means its more secure. Honestly, it's kind of hilarious that you would even bring up that argument, you clearly don't even understand what you are saying.

I'm not sure why you think I care if one os is better than the other. I'm not even talking about if one has an advantage. I'm responding to the idea that iOS is more secure than android. It simply isn't. If you could stop acting like an annoying fanboy for 5 minutes you'd probably be able to realize that.

 

[chugg]

Very weak attempt at spin in your response; "My anecdotal evidence trumps industry research".

I Google "Android Malware" and most tech sites have stories on it, and most of those sites aren't Apple fanboy sites.

But of course, you don't have an anti-Apple bias so how is it possible that you could be wrong?

Talk about anecdotal evidence.

Stick to the Play store, leave "install apps from unknown sources" unchecked and you will have NO problems. Hell, EVERY app on the Play store explicitly tells you what permissions you are granting the app. Even The Verge has an article on this mentioning how these security issues are WAY overblown.

I have an MBA + Nexus 4 BTW. But hey, maybe I have an anti-Apple bias so how could I be wrong?

 

[TheHateMachine]

According to your signature you have no problem keeping your locked down iPad 4 16GB and iPod Touch 3G 16GB that lacks side loading. Pot meet kettle.

Keyword being phone here. Regardless though, why exactly should I ditch my iOS devices? They certainly have other value. How am I a hypocrite? What is the point of your post?

Your post smacks of someone who gets defensive that someone has offended the almighty Apple. Then you scoff at the fact that they posted it from an iPad. As if people can't use a companies products and be critical of their practices and the way their certain products work. The world isn't black and white with clear lines divided for Hyperfans on both sides. Get real.

 

[bawbac]

LOL!!! Create fear to steer people to your products.
Sounds desperate.
Share holders and management must not be happy these days. 😀

 

[jonnysods]

All this is going to make people get angry and make malware for us iOS folk.

 

[cantona1995]

Android doesn't have this. If it comes down to corporate security and having users use their devices for both fun and work, Android would be a major concern of mine. you can only hope that as an administrator and policy enforcer that your BYOD are smart, but that assumes too much.

This is why Android's current issues with malware strikes me as important.

It's different for your average home user than it is your corporate side. these ARE concerns corporations do have to have

Most (if not all) Corporate Apps cannot be installed on Rooted Android devices so what you're saying is irrelevant.