Live data from Hacker News

Apple Platform Security (Jan 2026) [pdf]

help.apple.com

101–110 of 205 posts

Re: Apple Platform Security (Jan 2026) [pdf]

#101
post #49

Earlier quoted context omitted.

It's all tempered by them ultimately controlling what you can put on your phone though. As was demonstrated in LA, it's starting to have significant civil rights consequences.

Security is pointless if platform allows 90% users to be social engineered into running code disabling that security

[deleted]

Re: Apple Platform Security (Jan 2026) [pdf]

#102
post #30
post #29

Earlier quoted context omitted.

For some reason they don't release userdebug versions which was a dealbreaker for me.. (the device should be secure, but not against me) But if you wish to build it from source, it could probably be a good option.

You can re-sign it using https://github.com/chenxiaolong/avbroot I don't currently have any root on the phone, but I reserve the right to add it or run the userdebug build at a later date

We could use it to install magisk, but that wouldn't make the build proper "userdebug" one.

I fully agree with your original comment - AOSP security model is NOT a proper solution to the security problem, and I'd add to it that it was also designed to be anticompetitive - Google can do what third party apps can't.

Android architecture is tainted by Google's business model and it shouldn't be used as an example of a secure operating system..

Re: Apple Platform Security (Jan 2026) [pdf]

#103

Earlier quoted context omitted.

Apple is an ad company now though

Apple's ad revenue was 1% of its total in 2024. It was estimated to be 2-3% in 2025. https://www.apple.com/newsroom/pdfs/fy2024-q4/FY24_Q4_Consol... https://www.macrumors.com/2025/10/30/apple-4q-2025-earnings/

The point is that Apple will make money any way that it can, including ads. That's why iOS privacy is worse than its competitors. You can't install an app without telling Apple because if you could, Apple wouldn't be able to monetize you as well. You can't get your location without also telling Apple because if you could, Apple wouldn't be able to build its location services as easily. No such problems on Android.

Re: Apple Platform Security (Jan 2026) [pdf]

#105
Somehow, they conveniently forgot to mention these "security" features:

1. Constant popups about "application requesting access" on macOS. That often happens without any user's activity.

2. If you leave the permission popup open for some time (because it's on a different screen), it auto-denies. And then you won't be able to find ANY mention of it in the UI.

3. macOS developers can't be assed to fix mis-features, like inability to bind low ports to localhost without having root access (you can open any listening port on 0.0.0.0 but you can't open 127.0.0.1:80).

Re: Apple Platform Security (Jan 2026) [pdf]

#106

Apple's commitment to privacy and security is really cool to see. It's also an amazing strategic play that they are uniquely in the position to take advantage of. Google and Meta can't commit to privacy because they need to show you ads, whereas Apple feels more like a hardware company to me.

I still like their hardware. But let’s not pretend that there is any part of Trump’s body that he won’t kiss and sell out his customers for. If Trump asked Cook to put a backdoor in iPhones or impose tariffs on Apple, Cook would do it in a minute

Re: Apple Platform Security (Jan 2026) [pdf]

#107
post #58

Earlier quoted context omitted.

Apple is an ad company now though

Apple sells some ads yes. But it’s a tiny fraction of their revenue. Would Google or Meta go bankrupt if they stopped selling ads? Yes. Apple wouldn’t.

As long as you don’t count the $25 billion that Apple gets from Google.

Re: Apple Platform Security (Jan 2026) [pdf]

#108

Earlier quoted context omitted.

Apple is an ad company now though

Apple's ad revenue was 1% of its total in 2024. It was estimated to be 2-3% in 2025. https://www.apple.com/newsroom/pdfs/fy2024-q4/FY24_Q4_Consol... https://www.macrumors.com/2025/10/30/apple-4q-2025-earnings/

Their net profit was a little over $100 billion last fiscal year. They get $20 Billion+ in pure profit from Google being their default search engine.

That’s 20% of their profit

Re: Apple Platform Security (Jan 2026) [pdf]

#109
post #41

Apple's commitment to privacy and security is really cool to see. It's also an amazing strategic play that they are uniquely in the position to take advantage of. Google and Meta can't commit to privacy because they need to show you ads, whereas Apple feels more like a hardware company to me.

modeless linked to this article earlier today: https://james.darpinian.com/blog/apple-imessage-encryption/ My current understanding of the facts: 1. Google defaults to encrypted backups of messages, as well as e2e encryption of messages. 2. Apple defaults only to e2ee of messages, leaving a massive backdoor. 3. Closing that backdoor is possible for the consumer, by enabling ADP (advanced data protection) on your devi…

Apple's other emphasis is customer experience, and there are more "I forgot my code, help me recover my stuff" people than you can imagine.

It would be bad PR for Apple if everybody constantly kept losing their messages because they had no way to get back into their account.

Re: Apple Platform Security (Jan 2026) [pdf]

#110

No mention of Pegasus and other software of such sort. Can latest iOS still be infected? There is no point creating such document if elephant in the room is not addressed.

Apple's head of SEAR (Security Engineering & Architecture) just gave the keynote at HEXACON, a conference attended by the companies who make Pegasus such as NSO Group.

That doesn't seem like avoiding the elephant in the room to me. It seems like very much acknowledging the issue and speaking on it head-on.

https://www.youtube.com/watch?v=Du8BbJg2Pj4

Post reply on HN