Unbelievable work by @AmnestyTech, done in spite of @Apple’s reticence to provide means to verify the integrity of iOS devices. What’s it going to take for Apple to stop burying its head in the sand?
https://twitter.com/billmarczak/status/1416801439402262529
These remarks on the limitations when inspecting iOS devices should give us pause… there’s a mistaken belief that privacy is protected by limiting checks on system integrity and correlation of anomalies. What privacy is protected in these cases? (@tim_cook @radian) 
I love Apple products. Wonderful things are regularly done under the hood to increase the cost of attack. But it’s clearly not enough to tinker with security engineering alone. Plenty of unscrupulous actors are finding it affordable and we can’t even tell how big that iceberg is.
I promise you @Apple has no idea how deep the iceberg of targeted iOS malware goes. Not by a long shot. They’ve just accepted it as an unremarkable inevitability and we can’t.
Since this is blowing up, let me add that I know great folks who are or have worked security at Apple with the best intentions. If anything this is a plea to empower those folks to do more, prioritize their concerns, give them avenues to innovate, notify, and publish.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
