iOS overall security

[Thomi2]

We know iOS is a secure environment. At least it must be.
What do you really think of mobile's operating systems security?
Because we actually know that iOS is not really open to the "world", it remains designed by Apple to Apple devices exclusively. They their own environment, although I suppose all of this must be based on an open source kernel (?)
And that's where comes the difference with Android for exemple.
Although Android has some arguments on security, cannot we just admit that this environment is prone to viruses and malwares? Or these kind of new ransomware?
Why does Android is not as secure as iOS is? Just because Android is based on AOSP (open source), that means it lets the door open for everyone who's willing to, to take control over one's device.
That's might be stupid but why it's not possible for someone to remotely take control of an iOS device?
Just because Apple doesn't allow downloading files from Internet doesn't mean it's not possible to infect an iOS device.

Most importantly, I'm wondering about the security of informations on devices.
Apple mentions they do not let data arrives to their server and it remains locally saved on the phone.

Are you concerned about security on your devices, and would it be determinant for choosing a iPhone or others?

 

[Zirel]

Just because Apple doesn't allow downloading files from Internet doesn't mean it's not possible to infect an iOS device.

Exactly.

That's why Apple monitors all Apps, each one of the 1.5 million of them that enter the AppStore.

If they find bad Apps, they deny.

If they find Apps that behave badly, they can disable them remotely (extreme cases).

And what each App can do, is controlled by Apple. Apple limits what developers can do, and one App can't access other App's files. Simple as that.

And while iOS has been designed close by default, Android has been designed open as default.

Apple has been adding API's to let developers make broader Apps, while Google has trouble controlling Android ecosystem... like, sending Ads on notifications, or eat all your battery with background processes that send all your location 24/7.

Also, Apple has an extremely well made boot loader, meaning you can't install a pirate version of iOS, and you can't use an iOS device that has been "iCloud locked".

The flash drive on all iPhones since iOS 7 is fully encrypted too, meaning even if you desolder the Flash chip, you have an useless chip, as everything is encrypted, nothing like on Android, that you can take out SD cards, and read all users photos on a computer (default setting).

Recently, Apple has been proven as not skimping on hardware, while Android manufacturers have been... Apple has added a secure enclave since iPhone 5S, where memory for your Fingerprint reader, and credit cards is stored, memory not directly accessible by the main CPU (where all Apps run), and only accessible by processors (fingerprint and NFC) that run a program that can't be altered by hackers.


It has nothing to do with the kernel. Or if it's open source or not. In fact, iOS is as "open source" as a Samsung Android device.

 

[Yun0]

the most secure phone, is a generic flip phone with no smart capabilities including data/wifi/bluetooth..

 

[wsc9005]

the most secure phone, is a generic flip phone with no smart capabilities including data/wifi/bluetooth..

Haha, Last time I heard, GSM phone calls and texts are the least secure communication methods ..

But again, we could say the same about iPhone.

 

[AndyK]

The most secure phone is a burner phone !

 

[throAU]

All operating systems will have security issues. I choose iOS because

- its architecture is designed with security in mind from the outset (code signing required, only code signed by a certificate signed by apple will run by design - jailbreaks notwithstanding) - android not so much, open-ness is a higher priority than security. that's a trade-off i'm not wanting
- iOS gets reliably updated so long as your device isn't ancient and considered to be out of support. android updates are a crap-shoot.

 

[Zirel]

Haha, Last time I heard, GSM phone calls and texts are the least secure communication methods ..

But again, we could say the same about iPhone.

Lte can not be broken easily...

On top of what has been said, Android really sucks from a security perspective:

https://securityintelligence.com/on...derprivileged-apps-super-status/#.Vc9CXdl5enM