this post was submitted on 11 Nov 2024
585 points (99.2% liked)
Privacy
1245 readers
103 users here now
Icon base by Lorc under CC BY 3.0 with modifications to add a gradient
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Apple is very clear how they make their money. Desirable products at high margins, free customer support, and an ecosystem that encourages the purchase of additional devices and services.
They have also been very clear about their commitment to privacy, and have consistently led the industry in customer-focused privacy software. It’s the primary reason many customers choose Apple over their competitors.
Realistically, why would Apple blow up a $3.3T global success for an extra $10M? That 1/330 of the company value. For comparison, Apple sells ~$54M in Apple Pencils every year.
What apple wants or doesnt want to do is completely irrelevant. The fact that they have the ability to remotely modify your device is a disqualifying factor for any rational person thinking about risk of life level privacy.
Also they can be legally forced to put backdoors into their software while, under the threat of state violence, being prohibited from telling the public about it. Thats how the US legal system works.
They can also be forced to put on a theater to make it look like they are not giving the feds access btw.
How can Apple remotely modify your device? Software updates? They have no access to your data.
Correct, forced software updates i.e. remotely modifying your device. Also what makes you think they have no access to your data already? Do just trust them when they say "we promise uwu" ?
Also phones can be caught during shipping and modified, thats how the feds did it for one of their more recent big drug operations. Under Trump who fucking knows what justifications will be used to do the most vile shit.
Updates aren’t forced. You have the ability to enable automatic updates, but they are turned off by default. They also cannot affect user data. iOS and app software is sandboxed. The kernel keeps application and OS layers independent, just like Linux. User data is stored in a separate partition.
Apple users will experience the same thing that all other computer owners experience when they disable updates entirely; outdated security software and limited compatibility.
Brother in christ, how hard is this to understand.
How do you know? Have you checked the code that runs the updates? Just because the phone usually gives you the option to postpone regular updates doesnt mean that they cant be forced.
What makes you believe that? Did you write the software that keeps it sandboxed?
Do people just believe anything that companies claim? If we could believe the things that companies claim, then the world would be a much nicer place but its not.
If its not proven, then its not the case as far as anyone should be concerned. Do we believe in religion now because the pope says that god is real?
And i havent even talked about code quality. Nobody can verify how well designed their software is. It could be a complete shitfest filled with old and insecure code that nobody does any auditing on.
Yes. I worked for Apple for over a decade.
You could be Tim Cook and i would still not believe a word out of your mouth.
You don’t have to. Opinions are subjective, and you’re entitled to believe whatever you’d like.
That still doesn’t mean you’re correct.
I am 100% correct in my assessment that iOS source code is not public which proves every single point i made beyond any doubt. Not a matter of opinion whatsoever.
Edit: I would be very happy if you could use your apple employee access to leak the source code ofcourse :)
All you’ve proven is that neither your claim nor mine is provable.
That still doesn’t make you correct. It means neither argument can be proven.
At least my argument is logical. You’re convinced Apple would risk blowing up a $3.3T empire for $10M.
Get real.
In software security, not proven to be secure = not secure
https://en.wikipedia.org/wiki/Provable_security
Prove it.
https://security.apple.com/bounty/
Their opinion is more valid regarding safety, because it's skeptical of the behaviors of an international megacorp, which is the smarter approach.
No. Apple claims updates aren't forced. With proprietary software, we have no way to verify if they have some way of forcing an update through.
No. Apple claims that only the user can enable automatic updates. With proprietary software, we have no way to verify if Apple can enable them remotely.
Also, are you really going tell users to not update?
No. Apple claims that updates cannot affect user data. Again, with proprietary software, there is no way to truly verify.
Oh...so updates are good now, and we should update, even if it puts us at risk of something malicious?
You are taking Apple's claims as truth and pretending they are good. They probably aren't.
But, as someone else mentioned in the thread: The US government can force companies to spy for them. Even if Apple was as good as they market themselves to be, they cannot outrun the government.
Now, it's not realistic to force everybody to switch away from iPhones. But, we should stop treating proprietary software as truly trustworthy with our data.
Because they know that even after being caught harvesting user data for advertising, people will still claim they don't do that even on a specialist privacy community on lemmy. Now think just how long it will take for the average apple user to realize it
Yes. There was an issue with iOS 14.1 that enabled personalized ads by default if you didn’t restore from a backup. I was working for Apple at that time. It wasn’t intentional or malicious, and a hotfix was implemented as soon as the bug was identified. The lawsuit was just. Apple fucked up.
"If you are paying, it doesn't mean you are not the product"
- Cory Doctorow