What percentage of iPhone owners do you think have never touched iCloud at all, ever, "not even once"? Apple's mobile security model has been top-shelf for sure, but projects like @CopperheadOS make the iOS/Android distance less "overwhelming" and more about trade-offs.
-
-
Replying to @Snowden @CopperheadOS
We all come at this with a different context in mind. For me, it's important to be able to point low-tech, high-risk people (like journalists or congressional campaign staff) at a device that will protect them, in a situation where they don't have access to expert support
2 replies 0 retweets 7 likes -
So particularly important is lock screen protection, and the guarantee of timely software updates
1 reply 0 retweets 6 likes -
No one would be happier than me if Google decided to make an Android phone that had iPhone-equivalent security. I know the Android team is capable of doing it, and wants to do it, but Google does not, and employees have not been able to override this decision.
2 replies 1 retweet 9 likes -
It's strange to claim that Google business interests are somehow not aligned with Pixel hardware security. They've made significant progress on improving the firmware/hardware security with each of the past device generations. It isn't something that happens in one day.
2 replies 1 retweet 6 likes -
Replying to @CopperheadOS @Snowden
So why isn't a Pixel as secure as an iPhone? It has a superior camera to the Apple device, but inferior data protection, despite being designed later. Google's priorities seem crystal clear.
1 reply 0 retweets 1 like -
Explain what you mean by inferior data protection? The Pixel and Pixel 2 both have hardware-bound key derivation and the Pixel 2 has a security chip enforcing exponentially escalating delays on failure. The hardware support is good already, the remaining work is mostly software.
1 reply 1 retweet 6 likes -
Both Android and iOS use the same default for app storage, which keeps it at rest only after a reboot until the first unlock. iOS apps can more easily opt-in to having data protected when the screen is locked, but Android does have that functionality. It's just more verbose.
4 replies 0 retweets 2 likes -
Replying to @CopperheadOS @Snowden
My definition is operational. As a non-technical user, you can take a stock iPhone and configure it very securely by following a short guide. To get an equivalent level of protection in Android, you need to be an expert, or have expert assistance.
2 replies 0 retweets 2 likes -
In what way is it harder to get similar protection on a Pixel 2 compared to an iPhone 8? What additional steps are there for Android? Should probably tell someone like
@rene_mobile because they should fix it.2 replies 1 retweet 5 likes
Is my data encrypted when the lock screen comes on on a Pixel 2, or do I need to fully power off the device?
-
-
CopperheadOS Retweeted CopperheadOS
You need to power off an iPhone for most data to be at rest when locked too. Mentioned that in a previous tweet: https://twitter.com/CopperheadOS/status/968231976468602880 … Most Android and iOS support protecting data when locked and both have the same default. iOS just makes it a lot easier for apps to do this.
CopperheadOS added,
CopperheadOS @CopperheadOSReplying to @CopperheadOS @Pinboard @SnowdenBoth Android and iOS use the same default for app storage, which keeps it at rest only after a reboot until the first unlock. iOS apps can more easily opt-in to having data protected when the screen is locked, but Android does have that functionality. It's just more verbose.1 reply 0 retweets 3 likes -
Replying to @CopperheadOS @Pinboard and
Since on iOS, you just switch data from the default class to the class at rest when locked. On Android, you need to use the keystore to encrypt data, which is a lot more verbose without using a third party library. They need to add other data classes to make it easier on Android.
1 reply 0 retweets 2 likes - Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.