Your iPhone knows more about you than anyone. Here’s how to lock it down in an afternoon: passcode, account, location, lock screen, radios, browser and backups. Full checklist at the end.
Your iPhone knows more about you than anyone. Here’s how to lock it down in an afternoon: passcode, account, location, lock screen, radios, browser and backups. Full checklist at the end.
That is not true.
I am open to hearing evidence to the contrary.
Apple admits to secretly giving governments push notification data - Ars Technica
There are a lot things that are hidden to public, until they are accidentally revealed, and then they are FORCED to admit it. They have many many layers of obscurity where some parts being secure relies upon and could have intentional backdoors.
Take a look at article above, you could have the most “secure™” app, OS and protocols but if the company running the OS is funneling data to the government, your cult like loyalty doesn’t mean shit.
They’ll never admit to anything and can just call everything else an inadvertent bug. And people will eat it up, and the cult will defend it like their personality depends on it.
You’ll probably blow it off as a conspiracy theory or “apple bad” or whatever else but if you’ve kept up with cyber security, government leaks and developments in surveillance technology, this is how spying works.
A harmless traffic camera becomes a surveillance terminal. If you still choose to believe it’s still just a traffic camera, you do you.
Anyone handling (incredibly insecure! This cannot be understated!) push notifications can be secretly compelled by force of law to hand them over. That’s not unique to Apple or ios.
To bring that all the way back to what I said, that the claim “ios hardening is a myth” is not true: you can turn off push notifications in ios. Because of the nature of the technology there are other controls around it that are not part of the receiving devices operating system and need to be handled separately.
If you haven’t already, disable push notifications.
I think there’s a fundamental lack of understanding amongst people in general about the purpose of our networks. The Internet, like cable television and broadcast tv and radio before it, is a propaganda and surveillance technology overlaid on military command and control.
can it reach graphene os levels of privacy – where not even apple or isreal have the ability to look at the contents of your phone?
“If it can’t reach the hardening level of a bespoke os built for security it can’t be hardened” is the equivalent of “if you can’t make your car as fast as the fastest car ever made you can’t make it any faster”
I’ve never seen anyone side-by-side compare the merits of iOS vs graphene os in this context and @TrollAccount69@lemmy.ml has given me reason to trust their take on the matter previoussly, so I asked.
I have nothing against iOS or Apple.
Or at least nothing out of the ordinary. :p
I don’t know what can happen.
What has been shown over and over again in the world of physical security is cellebrite (an Israeli phone hacking company) reporting in their internal marketing and training leaks that updated iphones are less exploitable with their hardware system than everything except for updated graphene pixels. Cellebrite is commonly used by cops. The most recent leak indicated that a locked after first unlock (afu), a less secure state than before first unlock (bfu), iphone could have enough data retrieved from it that the company would sell you their services to produce a hack unique to that device and software in six months.
Ios is a big target and has had exploits used by nations intelligence services before. It is extremely rare that they are zero-day, meaning that there isn’t a patch out, and if memory serves there has never been one seen in the wild that was both a zero day and not covered by lockdown mode.
I encourage you to look into the cellebrite leaks, the op list and the computer security worlds reporting of ios vulnerabilities and evaluate for yourself if it meets that bar. I use both ios and graphene daily so it meets my personal criteria.
E: In case I am being too detailed, adp encrypts your cloud data removing your capacity to recover your account through apple and the phones themselves are using encrypted memory and storage. Restart often and learn your phones duress options.
i can’t provide evidence for a negative.
what i can say is, all of the toggles are meaningless unless apple gives me the source code to prove they do something.
That’s an absurd statement. I do not need to open the power switch on my table saw to understand and recognize that when I turn it off the blade stops spinning.
Even if I were unable to directly view the blade I could see that stock passed across it is not cut.
Even if I didn’t have a table saw I could read the news stories about law enforcement complaints that turning the power button to the off position stops the saw from spinning and craftsman is unwilling to offer a bypass to the switch citing safety concerns and form a cohesive rational understanding that the control does what it says on the tin.
likewise, i can read the news stories about the lawsuits and the corporations ignoring switches and collecting that data anyway.
also remember privacy and security are related but are two different things.
I am open to hearing evidence that iphone hardening is a myth.
again: can’t prove a negative.
you show me transmission of data can be stopped.
I didn’t make the claim that iPhone hardening is a myth, you did. I am open to you providing something to back it up, as I have not seen anything that would.
You said you can read news stories about the toggles not doing anything. May I see the news stories that show the options in iOS don’t do anything?
you made the point that it works. here’s one example i googled in 30 seconds. here’s one for apple i also found in another 10.
your turn i guess.
I want to keep it 100% with you: I did not make the point that it works. I made the point that your claim (and apologies, I’m paraphrasing here) “there is no way to believe it works unless you personally can see the code” is absurd and I will stand by that.
The first link you sent seems to be about google. You were talking about iPhones though. Are you trying to make a broader point about more than just iOS?
The mysk case referenced in your next link (nov. 2022 analysis of a mid 2021 iOS version) actually had an interesting update this year: all the wiretapping type charges got thrown out but the deceptive practices claims were allowed to proceed. It’s likely the plaintiffs will win that one since the company has significantly changed the wording around the settings controls in question in the intervening five and a half years of development.
Despite how this might seem, I’m not trying to fight you. I want to bring this back to how you initially said “ios hardening is a myth”. I really think you have a cohesive approach and argument to make but you’re not tying it all together because you think that left on their own claims like the above and the one about not being able to trust settings unless you can see the source are self evident but they’re not.
as a kind of backwater waste of time discussion spur I think that specifically the source reading line of reasoning pushes people away from security and privacy because it excludes a person who can’t analyze the source code because they are unable to effectively read it.
Normal person who can’t read code even if it were in front of them in plaintext: “well fuck me I guess”
Now it’s extremely clear to me from your replies that you feel you’re in some kind of fight or something. I don’t want that. We don’t have to keep talking if this is stressing you out and it’s not a win or a loss.