Remix.run Logo
bigyabai 6 hours ago

I've found that Apple's interests are pretty fickle, concerning real-world security: https://www.securityweek.com/apple-suddenly-drops-nso-group-...

nozzlegear 3 hours ago | parent [-]

> Apple has abruptly withdrawn its lawsuit against NSO Group, citing increased risk that the legal battle might unintentionally reveal sensitive vulnerability data and difficulties in acquiring essential information from the spyware vendor.

> In a court filing Friday, Apple said continuing the lawsuit now poses “too significant a risk” of exposing the anti-exploitation and threat intelligence efforts needed to fend off the very adversaries involved in the legal dispute.

> “When it filed this lawsuit nearly three years ago, Apple recognized that it would involve sharing information with third parties. However, developments since then have reshaped the risk landscape associated with sharing such information,” the Cupertino device maker said.

I mean, iOS has never been open source so Apple has always practiced security through obscurity. It doesn't seem unreasonable that they'd be concerned about this. Idk, seems like a nothingburger but maybe I'm wrong.

bigyabai 2 hours ago | parent [-]

https://knowyourmeme.com/photos/1307138-we-did-it-patrick-we...

Dropping the case is great for Apple's obscurity, but terrible for enforcing the security of iOS users that are still vulnerable to Pegasus malware. Now NSO Group is not threatened or deterred, which is the worst of all worlds for iOS security.