<story><title>Despite the hype, iPhone security no match for NSO spyware (2021)</title><url>https://www.washingtonpost.com/technology/2021/07/19/apple-iphone-nso/</url></story><parent_chain><item><author>pyuser583</author><text>Because Apple controls the entire stack.&lt;p&gt;From processor, to boards, to OS, to the walled garden of apps.&lt;p&gt;No other tech has that level of control.&lt;p&gt;Think of the controversy surrounding the Intel ME and other  “secondary processors”.&lt;p&gt;Not an issue with the IPhone (from Apples perspective).&lt;p&gt;When Google decided they wanted to control all the computing on their servers, from bare metal up, they ran into the ME.&lt;p&gt;Apple is the only key civilian entity with that level of control.</text></item><item><author>spideymans</author><text>Regarding the headline, it is absurdly unrealistic to expect that any consumer-grade software can defend itself from state-funded hackers. Not even the entirety American intelligence apparatus can defend itself against state hackers. Why would we expect lowly iOS (or any other consumer software) to do better?&lt;p&gt;If you have reason to believe you&amp;#x27;re targeted by state-backed intelligence agencies, you really oughta be working under the assumption that they can see &lt;i&gt;everything&lt;/i&gt; you&amp;#x27;re doing.</text></item></parent_chain><comment><author>devoutsalsa</author><text>I had to lookup Intel ME.  It&amp;#x27;s the Intel Management Engine.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;Intel_Management_Engine&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;Intel_Management_Engine&lt;/a&gt;&lt;p&gt;From the Wikipedia article:&lt;p&gt;&lt;i&gt;The Intel Management Engine (ME), also known as the Intel Manageability Engine, is an autonomous subsystem that has been incorporated in virtually all of Intel&amp;#x27;s processor chipsets since 2008. It is located in the Platform Controller Hub of modern Intel motherboards.&lt;/i&gt;&lt;p&gt;&lt;i&gt;The Intel Management Engine always runs as long as the motherboard is receiving power, even when the computer is turned off. This issue can be mitigated with deployment of a hardware device, which is able to disconnect mains power.&lt;/i&gt;&lt;p&gt;&lt;i&gt;The Intel ME is an attractive target for hackers, since it has top level access to all devices and completely bypasses the operating system. The Electronic Frontier Foundation has voiced concern about Intel ME and some security researchers have voiced concern that it is a backdoor.&lt;/i&gt;</text></comment>
<story><title>Despite the hype, iPhone security no match for NSO spyware (2021)</title><url>https://www.washingtonpost.com/technology/2021/07/19/apple-iphone-nso/</url></story><parent_chain><item><author>pyuser583</author><text>Because Apple controls the entire stack.&lt;p&gt;From processor, to boards, to OS, to the walled garden of apps.&lt;p&gt;No other tech has that level of control.&lt;p&gt;Think of the controversy surrounding the Intel ME and other  “secondary processors”.&lt;p&gt;Not an issue with the IPhone (from Apples perspective).&lt;p&gt;When Google decided they wanted to control all the computing on their servers, from bare metal up, they ran into the ME.&lt;p&gt;Apple is the only key civilian entity with that level of control.</text></item><item><author>spideymans</author><text>Regarding the headline, it is absurdly unrealistic to expect that any consumer-grade software can defend itself from state-funded hackers. Not even the entirety American intelligence apparatus can defend itself against state hackers. Why would we expect lowly iOS (or any other consumer software) to do better?&lt;p&gt;If you have reason to believe you&amp;#x27;re targeted by state-backed intelligence agencies, you really oughta be working under the assumption that they can see &lt;i&gt;everything&lt;/i&gt; you&amp;#x27;re doing.</text></item></parent_chain><comment><author>wolverine876</author><text>&amp;gt; Apple controls the entire stack&lt;p&gt;Control doesn&amp;#x27;t guarantee security, it just assesses accountability. Also, control doesn&amp;#x27;t mean Apple writes all the software. They outside code like everyone else.</text></comment>