Other With "critical" security issues happening every 2-3 weeks, how mandatory is it to software update?

[wirtandi]

I know there are people who software update as soon as they are released. There are also people who wait a few weeks/months, and those who wait a long time.

These critical security updates always mention zero-access, which to my understanding means the user doesnt even have to do anything, and they can get malware in their devices.

My question is, if I only visit big websites, only use top 10 apps, etc. I should be safe, yes? For example if I only use whatsapp, facebook, linkedin, etc. there is no way for me to get the malware, right?

 

[I7guy]

Malware could conceivably come in an email or text. If you’re not comfortable turning on security updates then keep it off and life goes on the same as now.

 

[eyoungren]

I know there are people who software update as soon as they are released. There are also people who wait a few weeks/months, and those who wait a long time.

These critical security updates always mention zero-access, which to my understanding means the user doesnt even have to do anything, and they can get malware in their devices.

My question is, if I only visit big websites, only use top 10 apps, etc. I should be safe, yes? For example if I only use whatsapp, facebook, linkedin, etc. there is no way for me to get the malware, right?

I was jailbroken on iOS 9.0.1 from October 2015 to December 2020. iPhone 6s+. I used my phone normally (calls, email, text, Apple Pay, web browsing, banking, etc) and never had any security issues.

If that tells you anything.

 

[wirtandi]

Thanks for sharing guys. Still looking to hear more opinions

 

[aue123]

whatsapp, facebook, ticktock are all security risks. wouldn’t matter if you updated or not. no recent news stories pop into mind about iphones being legitimately “hacked”, it’s usually negligence of the user which creates the opportunity of being exploited. ie random dudes ex girlfriend guesses the password and deletes stuff. guy claims he’s been “hacked” .. hardly.. i think the type of exploitation apple is trying to prevent are reasons you don’t bring your phone into a las vegas tech show that would most likely have people phishing remotely over bluetooth and wifi signals.

tldr: you’re most likely fine not updating.

 

[I7guy]

Fwiw, apple can still install updates, even with the toggle turned off.

 

[Xian Zhu Xuande]

How safe do you want to be? You can be as reckless as you like.

 

[VuvuzelaiPhone]

How safe do you want to be? You can be as reckless as you like.

This, you are taking a gamble.

The big companies you interact with are often held to high standards in some areas such as PCI and SoX, but that only confers a small amount of safety/security to you directly.

Most of what is happening on websites is entirely unregulated, so trust placed in these bigs players is unwarranted. I've worked at a number of them and you'd be surprised how much security is hand waved, not monitored, and actively deprioritized over features/revenue.

You are the only one that truly cares about your safety/security, I would recommend you exercise that whenever possible.