6 ms·

Holy shit, there's literally a dozen of Apple products exploited. It's not a single "Apple music exploit", it's dozens of separate services. Music, messenger,

Holy shit, there's literally a dozen of Apple products exploited. It's not a single "Apple music exploit", it's dozens of separate services. Music, messenger, safari, iOS, etc... I never want to hear Apple cares about security again. I could forgive 1 mistake, but this seems like negligence. (Don't put me down as a defender of MS or Android, but at least they don't use "Security" in their marketing)

t-c-h 5y ago
If you would have actually read the report, you would have known the attacks are not specifically device or mobile OS bound. They simply say that iOS leaves behind more useable traces. From paragraph 10: Much of the targeting outlined in this report involves Pegasus attacks targeting iOS devices. It is important to note that this does not necessarily reflect the relative security of iOS devices compared to Android devices, or other operating systems and phone manufacturers. In Amnesty International’s experience there are significantly more forensic traces accessible to investigators on Apple iOS devices than on stock Android devices, therefore our methodology is focused on the former. As a result, most recent cases of confirmed Pegasus infections have involved iPhones.
- deregulateMed 5y ago
  The article doesn't mention android again. And I'm not even defending android, I'm attacking Apples unethical marketing practices of claiming security and privacy, but failing.
ohashi 5y ago
That seems dramatic. It's a billion dollar ex-spy run company catering towards governments with seemingly no ethics. No offense to Apple but this is near state level actor as a threat and with enough motivation ($$$$$$$$) they will find ways to exploit Apple's software no matter what.
- deregulateMed 5y ago
  Sure, but their marketing still claims security.
  - hu3 5y ago
    That's what happens when Apple pays 100k for a critical bug bounty and governments pay millions for the same bug exploit.
    - deregulateMed 5y ago
      And closed sourced projects. And marketing prioritized over quality

t-c-h 5y ago

If you would have actually read the report, you would have known the attacks are not specifically device or mobile OS bound. They simply say that iOS leaves behind more useable traces. From paragraph 10: Much of the targeting outlined in this report involves Pegasus attacks targeting iOS devices. It is important to note that this does not necessarily reflect the relative security of iOS devices compared to Android devices, or other operating systems and phone manufacturers. In Amnesty International’s experience there are significantly more forensic traces accessible to investigators on Apple iOS devices than on stock Android devices, therefore our methodology is focused on the former. As a result, most recent cases of confirmed Pegasus infections have involved iPhones.

deregulateMed 5y ago
The article doesn't mention android again. And I'm not even defending android, I'm attacking Apples unethical marketing practices of claiming security and privacy, but failing.

ohashi 5y ago

That seems dramatic. It's a billion dollar ex-spy run company catering towards governments with seemingly no ethics. No offense to Apple but this is near state level actor as a threat and with enough motivation ($$$$$$$$) they will find ways to exploit Apple's software no matter what.

deregulateMed 5y ago
Sure, but their marketing still claims security.
- hu3 5y ago
  That's what happens when Apple pays 100k for a critical bug bounty and governments pay millions for the same bug exploit.
  - deregulateMed 5y ago
    And closed sourced projects. And marketing prioritized over quality