I know there are plenty of software missing from here. This is just a fun infographic I made, no need to take it seriously :)

you are viewing a single comment's thread
view the rest of the comments
[–] 12 points 1 year ago (5 children)

Cool and who validates the code base for security vulnerability? And sends tons of packets related to tracking back to there servers?

  • source
  • parent
  • hideshow 5 child comments
  • [–] -2 points 1 year ago (4 children)

    the codebase itself? besides XNU, nobody... but, given the immense amount of scrutiny placed on the software, if there was some magic backdoor (an intentional one, anyway, not talking about like NSO group RCEs 'n shit), don't you think we'd know?

    the average person doesn't even know what grapheneos is. if they're either going to buy an iphone, or some generic android phone running a vendor kernel that hasn't been patched this administration, i'd want them to buy the iphone.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 4 points 1 year ago (3 children)

    There are massive backdoors, tho on android too. How do you think Pegasus works

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 1 year ago (1 child)

    wasn't Pegasus attack vector sms how is it a OS issue if its a protocol its the same as saying Linux is insecure because xmpp had a vulnrabilty and allowed remote access

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 year ago

    depends on the chain in question. some used iMessage as a way in, but (at least in the case i'm thinking of rn) it was only used to trigger an image parsing bug. in others, sms was used to trick someone into clicking a link, exploiting a bug in JavaScriptCore.

  • source
  • parent
  • [–] 3 points 1 year ago

    moi: "not talking about like NSO group RCEs 'n shit"

    tu: "how do you think pegasus works"

    you could have at least picked a different cyberwarfare company...

    by that logic, every OS under the sun has massive backdoors. bugs exist, man. my point was that for the average person, a fully-patched ithing is going to be among the more secure options.

  • source
  • parent