iOS is generally more secure than Android

Newsfeed

MyBroadband Newsfeed
Joined
Jun 28, 2017
Messages
6,424
iOS is generally more secure than Android

Google has stated that its mobile operating system, Android, is just as secure as iOS.

While this may be true for the operating system itself, when you compare the two smartphone ecosystems as a whole, the data suggests that iOS is generally more secure.
 

bwana

B MyBroadband
Super Moderator
Joined
Feb 23, 2005
Messages
72,371
Awaiting influx of insecure Android users... :whistling:
 

ngwe23

Executive Member
Joined
May 12, 2011
Messages
5,244
The problem with "Android" is that is covers a multitude of sins. From the Chinese made R2000 low-end devices that will never see any security update to the R15000 Pixel which is just as secure as the iphone. So it's not a surprice that, on average, Apple with it's vertical intergation approach is better.
 

powermzii

Expert Member
Joined
Jun 4, 2007
Messages
2,337
Well apple.is better suited to push patches and fixes through the the product line, android is at the mercy of many a ROM cooker, lol.
 

SYNERGY

Executive Member
Joined
Jul 13, 2007
Messages
5,535

Daruk

Honorary Master
Joined
Jul 18, 2008
Messages
39,032

W33KND

New Member
Joined
Jun 27, 2018
Messages
7
As other users have pointed out, it's not a particularly accurate thing to say. Cheap phones from the East are as much Android phones as the highest end Galaxy or Pixel, but the manufacturer's "modifications" to the stock standard Android OS set them apart. The former are known to not only be more vulnerable to viruses and such, but also come preloaded with spyware.

And yes, iOS is extremely secure. Not invulnerable, but secure enough for it to be the number one choice (unless you want a dingaling phone that no hacker has any interest in getting ahold of, of course.)
 

HavocXphere

Honorary Master
Joined
Oct 19, 2007
Messages
31,492
Got told the exact same thing by a visiting pen tester

Definitely wasn't a fan of android in the corporate context

Awaiting influx of insecure Android users... :whistling:
The internet religious wars shall persist forever
 

backstreetboy

Honorary Master
Joined
Jun 15, 2011
Messages
13,496
“iOS hardware – iPhones, iPads and iPods – has some good security measures, but Android devices are a mixed bag,” SensePost chief technology officer Dominic White told MyBroadband.
Spreading FUD probably to sell your work there. Sod off.

https://www.computerworld.com/article/3268904/android/android-security-facts.html

Android security has multiple layers
Hearing that your phone might not have the most recent Android security patch is upsetting — and it should be. Android's monthly security patches absolutely do matter. But they're also a single part of a much bigger Android security picture, one in which no single layer by itself is typically a make-or-break element.

Much of Android's security is at its core, with factors like the aforementioned sandboxing along with the platform's permissions system, encryption system, and Verified Boot system. These are the types of areas we see improve with OS updates each year (like with Oreo in 2017 and Android P now — a perfect example, as I've said before, of why OS updates unequivocally matter). Even by themselves, they make most types of truly damaging "infections" incredibly difficult to achieve.

Then there's Google Play Protect, which continuously scans the Play Store and your actual device for signs of suspicious behavior (and remains active and up to date independently, without the need for any manufacturer- or carrier-provided rollouts). And yes, that system does occasionally fail, but (a) that happens far less frequently than Android security headlines would lead you to believe — more on that in a moment — and (b) such constant challenging and adaption is an inevitable part of any security system.

Beyond that, Chrome on Android keeps an eye out for any website-based threats, and Android itself monitors for signs of SMS-based scams and warns you if any such signals are detected.
 

whatwhat

Executive Member
Joined
Jun 1, 2009
Messages
5,895
Except he's not... Sense post have more than enough other work
Yup. It is really easy to secure applications and the like, lots of people just don't care or know how to do it properly.

Oh no, adding this extra step is going to make testing a little harder, or the IT guys will need to do this extra thing to deploy so we'll skip it as everything is behind a firewall.

I hope SensePost is making a fortune from all the big companies they are consulting with because those companies need to pay stupid tax. What they are doing isn't rocket science, and they are not going to get around to testing everything that the company releases.
 

CataclysmZA

Expert Member
Joined
Apr 1, 2010
Messages
4,234
Got told the exact same thing by a visiting pen tester

Definitely wasn't a fan of android in the corporate context
Could also be bias creeping in to the pentester's opinion as well. Android can be secure, or even more secure, but it's platform-dependent. Something like Android One or a Google Nexus/Pixel device will get updates in the same kind of relative timeframe as Apple from when vulnerabilities are discovered or disclosed. Carrier-branded phones add an extra delay on top of that, whilst iOS can bypass them all completely.
 

Daruk

Honorary Master
Joined
Jul 18, 2008
Messages
39,032

HavocXphere

Honorary Master
Joined
Oct 19, 2007
Messages
31,492
Could also be bias creeping in to the pentester's opinion as well.
It could. Or not. I'm not really in a position to tell either way.

He seemed mostly worried about exposure to "click on this shady link" type mails & SMS as attack surface.

Something like Android One or a Google Nexus/Pixel device will get updates in the same kind of relative timeframe as Apple from when vulnerabilities are discovered or disclosed. Carrier-branded phones add an extra delay on top of that, whilst iOS can bypass them all completely.
To some extent your post proves the point - needs to be name brand. If you've got a BYOD policy people are going to drag some spyware infected chinese specials into the door that hasn't seen an update in a year. That presumably pulls down the average for android.
 

Daruk

Honorary Master
Joined
Jul 18, 2008
Messages
39,032
Could also be bias creeping in to the pentester's opinion as well. Android can be secure, or even more secure, but it's platform-dependent. Something like Android One or a Google Nexus/Pixel device will get updates in the same kind of relative timeframe as Apple from when vulnerabilities are discovered or disclosed. Carrier-branded phones add an extra delay on top of that, whilst iOS can bypass them all completely.
Yep, there are a ton of devices from different manufacturers that run Android and a handful of devices that run iOS. One is a closed ecosystem with a single hardware/software manufacturer. The other not. It really does stand to reason that iOS is going to be more secure at lower effort/cost.
 

CataclysmZA

Expert Member
Joined
Apr 1, 2010
Messages
4,234
If you've got a BYOD policy people are going to drag some spyware infected chinese specials into the door that hasn't seen an update in a year. That presumably pulls down the average for android.
Yeah, if you don't give people a set list and say, "If you have this phone, you can use it here, otherwise take the company phone", then there's scope for security holes to be introduced with those devices. Blueborne especially leaves a lot of people vulnerable.
 

SauRoNZA

Honorary Master
Joined
Jul 6, 2010
Messages
33,767
Google’s own phone may very well be.

Everyone else running Android is like rolling a dice.
 

Dave

Honorary Master
Joined
Aug 31, 2008
Messages
48,243
Not sure why that quote would be relevant - it does nothing to compare Android to iOS. I didn't read the article as running Android down so much as comparing iOS and concluding that iOS is generally more secure. I thought it was kind to Android under the circumstances.
Willy, it's backstreetboy you're trying to rationalise with.

Tell me, do you play chess with pigeons as a hobby? ;)
 
Top