Google Android vs Apple iOS: Which is Better for Privacy and Cybersecurity?

Summary

In this episode of the Shared Security Show, co-hosts Scott Wright and Kevin Johnson join Tom to discuss a range of topics focusing on privacy and cybersecurity. They delve into the ongoing debate of Android vs. Apple iOS, examining the strengths and weaknesses of each platform concerning privacy, the app stores, operating system updates, device tracking, and text messaging security. The hosts also touch upon a recent social engineering attack on Apple and Facebook, highlighting the importance of validation and verification processes when dealing with sensitive data requests. The discussion underscores the need for individuals and organizations to be vigilant about data security, advocating for awareness and the use of secure communication platforms like Signal for sensitive information.

Takeaways

• 🎶 The podcast begins with a humorous discussion about being 'rock stars' and the hosts' musical preferences, setting a light-hearted tone for the show.
• 📱 The main topic of the episode is a comparison between Android and Apple iOS, focusing on privacy and cybersecurity aspects.
• 🔒 A significant point made is that Blackberry currently offers the best privacy due to its minimal usage, highlighting the irony of security through obscurity.
• 📚 The hosts reference the book 'Losing the Signal' for insights into BlackBerry's rise and fall, emphasizing the importance of understanding the past in cybersecurity.
• 🤔 The discussion touches on a social engineering attack on Apple and Facebook, where forged emergency data requests were used to gain access to sensitive information.
• 📉 There's a debate on the effectiveness of Apple's and Google's verification processes for apps, and the ongoing need for vigilance despite these measures.
• 🚀 The hosts praise Apple's control over its ecosystem, including hardware and software updates, as a strength in ensuring security and privacy.
• 📱 Fragmentation in the Android ecosystem is identified as a challenge, with varying OS versions across devices potentially leading to security vulnerabilities.
• 🛍️ Google's business model, heavily reliant on advertising, is contrasted with Apple's focus on hardware sales, affecting their respective approaches to user privacy.
• 📧 The episode covers the importance of secure text messaging, with recommendations for apps like Signal that offer end-to-end encryption.
• ⚖️ The hosts express concern over political efforts to backdoor encryption, emphasizing the need for a balanced discussion on privacy and security.

Q & A

What is the main topic of discussion in episode 219 of the Shared Security Show?

The main topic of discussion is a comparison between Android and Apple iOS, focusing on which is better for privacy and cybersecurity.

What is the 'Aware Much' segment about in this episode?

The 'Aware Much' segment discusses a social engineering attack that targeted Apple and Facebook by impersonating law enforcement to gain access to sensitive information.

What is the significance of the discussion about BlackBerry in the context of privacy?

The discussion about BlackBerry highlights that it currently has the best privacy because of its low usage, implying that fewer users means fewer hacking attempts.

Why did the hosts mention Microsoft's biggest mistake in the mobile space?

The hosts mentioned that Microsoft's biggest mistake was not buying BlackBerry when they had the chance, as BlackBerry's enterprise services could have helped Microsoft secure a stronger position in the mobile market.

What book is recommended for understanding the rise and fall of BlackBerry?

The book recommended is 'Losing the Signal', which provides an in-depth look at BlackBerry's lifecycle, including internal interviews.

What is the primary business model of Google, and how does it affect their approach to privacy?

Google's primary business model is advertising, which influences their approach to privacy as they need to balance user data collection for ad personalization with growing privacy concerns and regulations.

What is Google's Privacy Sandbox initiative?

Google's Privacy Sandbox is a proposed solution for enhancing privacy on Android, which aims to change how user data is used for advertising while still maintaining Google's ad revenue streams.

Why is Apple's approach to app store security considered more stringent than Google's?

Apple's approach is considered more stringent because they have a closed ecosystem (the 'walled garden'), where they control both the hardware and software, enforce strict developer policies, and perform multiple verifications on apps before they are available for download.

What is the difference between Apple's iMessage and Android's default text messaging in terms of security?

iMessage uses end-to-end encryption by default for messages sent between Apple devices, while Android's default SMS messaging does not offer the same level of security. However, Google Messages can offer end-to-end encryption if both parties are using the app, but not when communicating with non-Google Messages or iMessage users.

What is the recommendation for secure messaging between friends who may not be in the security community?

The hosts recommend using Signal, an app known for its strong focus on privacy and end-to-end encryption, as it is considered one of the most secure messaging apps available.

What is the stance of some politicians regarding privacy and encryption?

Some politicians are advocating for privacy while simultaneously pushing for backdoors in encryption, which is a contradiction because backdoors weaken encryption and privacy.