• 0 Posts
  • 82 Comments
Joined 2 years ago
cake
Cake day: December 31st, 2023

help-circle


  • The good news for Microsoft is the EOL did make me buy a new computer

    The bad news is that I have no intention of ever using Windows again now. I was already on the fence whether I’d ever willingly upgrade to Win11, but making it a high barrier to entry cemented my decision


  • Disclaimer: The app is closed source, so all we can go off is the developer’s word, although the fact the government removed it is a strong indicator they don’t have access to data from the app

    The developer stated they do not even retain any identifying data, so the only data the government could get is public anyway. Through Apple they’d be able to see who downloaded it, and likely when it was used. Your defense would be easy enough though: “I just wanted to make sure the libs weren’t harassing our fascist patriotic ICE agents near me”



  • No sideloading and no unlocked bootloader means you can’t sideload malware or install malware-preloaded ROMs

    It’s a simple configuration change to disable it and can be done with any corporate MDM system, making this a moot point. Not to mention too many people don’t understand security, so Android is taking away sideloading anyway, FoR sEcUriTY

    No root also means you can’t just install malware that uses root access

    The vast majority of Android phones do not come with root access. For both, you generally have to elevate access yourself

    Long OS support means fewer people run around with iPhones that are 5 OS versions behind

    If you’re running an out-of-date OS, clearly security is not a priority

    There’s no tiny boutique iPhone manufacturers who sell phones that come pre-loaded with malware

    Supply chain attacks absolutely can happen to iPhones as well. There are plenty of re-sellers


    You missed the actual security benefit over iOS that Android cannot compete with: Apple controls the entire software chain from security patch to OTA update. This allows them to patch and release a fix for critical vulnerabilities far faster than any Android device possibly could. Apple does not need to get the approval of an OEM (such as Samsung), and, due to special deals, they do not need to get the approval of a carrier (like Verizon). Android devices typically need to get approvals from both before releasing updates (although Google flagship phones can bypass one, and can fast track the other)

    The downside there is there are no checks on Apple. They could release a horribly vulnerable patch with no additional checks in-between


  • In terms of security alone, iPhones easily beat most Android phones

    That’s not how security works in the modern tech landscape. No major OS is going to meet a high security standard out of the box. All of them have to be configured to the desired security level, then be added to ongoing security efforts. Every major OS can be secured to the highest security standards

    The primary difference is how much effort each takes, but even then there isn’t much of a difference. You’ll find tooling and in-house expertise makes a much larger difference than the OS

    The myth that some OS are inherently secure really needs to die off


  • Usually when people complain about DNS, they’re talking about stability issues. In this case I think he’s pointing out how centralized it is, and how a bad actor could cause significant issues

    At a local level, the most common issue I know of is ISPs blocking sites at the DNS level by feeding in fake information that redirects you to one of the ISP’s blocked/parked domains. Usually implemented to prevent customers going to piracy sites. It’s not much of an issue to subvert currently, as you can simply use any public DNS provider

    That being said, much of that has been consolidated into a dozen or so tech companies. In the current political climate, I could see a coordinated effort happening between those tech companies to block sites deemed non gratis. Obviously there’s still ways to subvert it, but the vast majority of user’s won’t be able to



  • I ended up dropping them today because of that. My random domain went from $30 to $90 over the course of a couple years. Found another registrar for $35

    Namecheap is 100% ripping people off on the renewals

    They also use AI support now, so don’t even get the benefit of good support any more