This has been a great convo. And look, we can disagree and still be civil and respectful. What an increadable achievement in this day and age.You did a fine job explaining it. I just don't agree with you!
Indeed! Think of what we would have missed here if we agreed!
I've disabled pretty much every thing in the personal info & privacy settings except for YouTube.
If I use Bing, Outlook, Here etc - am I flying under Google's radar or can Google still skim data somehow?
I'm not a privacy nut... I use Facebook!
I'm just wondering if you can truly opt-out with Google.
I'd imagine the EU Privacy guys would be all over Google if they were somehow stealing data through Android.
I'm looking at moving from my Lumia to Android or iOS. I like both platforms...but I don't trust the 'do no evil' company. Can someone put my mind at ease?
I've disabled pretty much every thing in the personal info & privacy settings except for YouTube.
If I use Bing, Outlook, Here etc - am I flying under Google's radar or can Google still skim data somehow?
I'm not a privacy nut... I use Facebook!
I'm just wondering if you can truly opt-out with Google.
I'd imagine the EU Privacy guys would be all over Google if they were somehow stealing data through Android.
I'm looking at moving from my Lumia to Android or iOS. I like both platforms...but I don't trust the 'do no evil' company. Can someone put my mind at ease?
is the reason we're targeting Google here is because they're open about what they do? We tend to believe that Microsoft and Apple and other companies do much less with our data.
I've disabled pretty much every thing in the personal info & privacy settings except for YouTube.
If I use Bing, Outlook, Here etc - am I flying under Google's radar or can Google still skim data somehow?
I'm not a privacy nut... I use Facebook!
I'm just wondering if you can truly opt-out with Google.
I'd imagine the EU Privacy guys would be all over Google if they were somehow stealing data through Android.
I'm looking at moving from my Lumia to Android or iOS. I like both platforms...but I don't trust the 'do no evil' company. Can someone put my mind at ease?
, completely agree with this. Plus Google and Facebook are the big brothers of the internet, its quite insane how far their trackers reach across the web.I think the reason to distrust Google more than MS or Apple is because Google is a Data/Advertising company, whereas MS and Apple are Software/Hardware companies.
For me PERSONALLY, I stopped trusting Google when they or Alphabet started buying military grade robotics companies like Boston Dynamic.
The majority of sec holes are from third party app stores. And hence the reason one should use Google mobile services and not third party ROMs that many people talk about on this forum. Android is targeted just like Microsoft is/was because it owns the market. The fact that Android applications run in thier own VM tells me things are just fine. There is not widespread phones being hacked out there, where are the articles that state people are losing thier banking information on Android?It's not just what Google is doing with the data, Android still remains the most vulnerable and most targeted OS by hackers. It is the weak link in terms of security, corporate data security managers are still very wary of Android. Meanwhile, Windows phone has been deamed "most secure" (and obviously its not a huge target because of low usage volume). I avoid Android in my home, the only exception is my Amazon Fire TV.
Here are a couple of related links:
https://www.siliconrepublic.com/enterprise/android-ios-malware
"According to F-Secure’s State of Cyber Security 2017, 99pc of all malware programs aimed at mobile targets are designed for Android devices."
Android is the most vulnerable platform: Nokia
https://mspoweruser.com/hacker-claims-windows-phone-the-most-secure-smartphone-os/
True that they aren't spying to give your data away to some third party. False that they aren't spying to try and use your data to make money from advertisers that they shove at you.
I don't want to be an ad sponge. I also don't want Google/Alphabet milking my activities for their own profit with the only benefit to me being that I pay $ for entry to begin with. Sure Android is "free" on paper but just having the code doesn't get you anything but some lines of code. You have to pay for the hardware and network to run it on.
I'll start a club. People pay me to join and I'll have someone follow them around so I can sell their anonymized activities to whomever wants to buy them and get super rich doing it. Sounds great, don't it?
There's a very good reason this gets asked about regularly that has nothing to do with paranoia. It's called not wanting to feel used and degraded into a commodity. Too many people just shrug their shoulders and accept it as "there's really no getting around it." For others it really sticks in their craw.
Yes, these companies are all mining data. But how and why is important; as is what they do with the resultant info. So let's nip the "But (insert X) tracks your data too" straw man argument in the bud. We aren't discussing anyone except Google in here.
I think you need a different outlook on things, so we clearly agree to disagree. You think I should just bend over and smile as they shove it in and I say no way, Jose.
If you're using Microsoft's services, you may as well be using Google's. There isn't an important difference between the privacy of each. If anything, Google has seemed less willing to give out info to court orders, whereas Microsoft allegedly gives almost no pushback. The safest place to be is on iOS and macOS, which are famously private and secure, especially if you don't use iCloud for anything you wouldn't want to be made public.
Also check out Telegram Messenger.
The majority of sec holes are from third party app stores. And hence the reason one should use Google mobile services and not third party ROMs that many people talk about on this forum.
where are the articles that state people are losing thier banking information on Android?
Sorry, but even the article you posted confirms that the third party app stores are the lost vulnerable. Of course users are the first firewall, we agree on that.This is incorrect. The largest security hole, which is breached thousands of times more often than the next class of security issue, is the user.
Ironically, two of the least secure OSes, Android and Win32, are the ones who gained widespread popularity. Unlike iOS or UWP, neither Win32 nor Android are secure by design and require a slew of tacked on functionality which attempt to make up for their security weaknesses... only somewhat successfully.
When an attack is successful, Android and Win32 also have little to no mechanisms by which to contain the damage. You mentioned Android's dalvik (VM), but that is almost irrelevant in this regard, as security isn't its focus. The Android sandbox is more about protecting the app than it is about protecting the system from apps... that's a completely different approach from iOS or UWP.
My main point is this:
There are differences between these OSes.
Many consumers tend to reduce the issue to "if it's widely targeted it's less secure", likely because (a) that makes sense without us having to understand anything about OS design and security and (b) the lack of attempts is how Apple was able to brainwash people into thinking OSX was secure (about a decade ago?) despite it being one of the least secure OSes out at the time.
If you only hang out at places like mobilenations (strictly consumer oriented and barely technical), you'll rarely see such articles. Most reports are either:
Still, it is possible to find non-technical reports, but you must look for them. They aren't served to you automatically on consumer websites like this. These are just a few examples, limited to the topic you specified (banking), 2017, and English:
- too complicated and/or not publicly available (publications written by security researchers)
- not spectacular enough, i.e. it doesn't generate enough clicks (e.g. affects only a few hundred people)
- not unique enough, i.e it doesn't generate enough clicks (it happens every day, which means it's commonplace, i.e. it's not news and only of interest to those affected or who are paid to solve the problem)
- not relevant to western media (only affects people with AOSP devices, primarily in Asia or the Ex-Soviet Union).
https://clientsidedetection.com/marcher.html
https://thehackernews.com/2017/08/android-banking-trojan.html
Russia Hacking: Bank Customers Hit By Malware in Android Phones | Fortune
https://blog.vasco.com/application-security/bankbot-android-malware-protection/
The security industry agrees that attacking iOS devices would actually be the more profitable criminal endeavor. The main reason it's much rarer is not because of market-share, but because it's much harder to pull off.
I'm bailing out again at this point since security and privacy are only tangentially related, so it's a bit off topic.
Just one more thing, I agree Android is more vulnerable to hacking. It's a semi open platform. My point is that if you go through the official Google Play store you will be protected for the most part. Nothing is obviously hack proof. My point about VM is that apps are contained which from what I understand makes it almost impossible for hackers to break in. You points are very well taken.This is incorrect. The largest security hole, which is breached thousands of times more often than the next class of security issue, is the user.
Ironically, two of the least secure OSes, Android and Win32, are the ones who gained widespread popularity. Unlike iOS or UWP, neither Win32 nor Android are secure by design and require a slew of tacked on functionality which attempt to make up for their security weaknesses... only somewhat successfully.
When an attack is successful, Android and Win32 also have little to no mechanisms by which to contain the damage. You mentioned Android's dalvik (VM), but that is almost irrelevant in this regard, as security isn't its focus. The Android sandbox is more about protecting the app than it is about protecting the system from apps... that's a completely different approach from iOS or UWP.
My main point is this:
There are differences between these OSes.
Many consumers tend to reduce the issue to "if it's widely targeted it's less secure", likely because (a) that makes sense without us having to understand anything about OS design and security and (b) the lack of attempts is how Apple was able to brainwash people into thinking OSX was secure (about a decade ago?) despite it being one of the least secure OSes out at the time.
If you only hang out at places like mobilenations (strictly consumer oriented and barely technical), you'll rarely see such articles. Most reports are either:
Still, it is possible to find non-technical reports, but you must look for them. They aren't served to you automatically on consumer websites like this. These are just a few examples, limited to the topic you specified (banking), 2017, and English:
- too complicated and/or not publicly available (publications written by security researchers)
- not spectacular enough, i.e. it doesn't generate enough clicks (e.g. affects only a few hundred people)
- not unique enough, i.e it doesn't generate enough clicks (it happens every day, which means it's commonplace, i.e. it's not news and only of interest to those affected or who are paid to solve the problem)
- not relevant to western media (only affects people with AOSP devices, primarily in Asia or the Ex-Soviet Union).
https://clientsidedetection.com/marcher.html
https://thehackernews.com/2017/08/android-banking-trojan.html
Russia Hacking: Bank Customers Hit By Malware in Android Phones | Fortune
https://blog.vasco.com/application-security/bankbot-android-malware-protection/
The security industry agrees that attacking iOS devices would actually be the more profitable criminal endeavor. The main reason it's much rarer is not because of market-share, but because it's much harder to pull off.
I'm bailing out again at this point since security and privacy are only tangentially related, so it's a bit off topic.