Nostr Web Client

Your mistake is thinking Apple keeps your data secure. Pegasus and other malwares have been able to bypass iPhone security measures for years, and there's still no fix. iOS and OSX are entirely closed source. Nobody can confirm if its actually secure. Nobody can confirm what Apple actually does with your data. You just have to trust Apple and the US govt. _And there are countless examples of them breaking your trust_

Obviously my comment only applies to people who care about their privacy, security, and people who know better than to trust big tech or the govt to just give it to them. If that's not you, if you just trust Apple and the US to treat you appropriately, then I don't have time to convince you otherwise.

You don't need to be a techie to become ungovernable. But you have to want it.

Witty Hen 2y ago

I understand your point, however I don’t know if the anonymous people “verifying” code are good actors either.

For people who can’t verify for themselves (like me) - Apple is the best available option, whereas they appear to be legit in attempting to protect user data and they have the resources to fight legally.

I love the idea of Graphene and I have it installed on a Pixel 5 so I can use Samurai wallet. My primary point is I am trusting that the folks who tell me Graphene is safe are legitimate as well.

You could be a CIA agent attempting to persuade people to use Graphene because you were able to merge a back door into it. I don’t know.

Reply to this note

Please Login to reply.

Discussion

geodesic 2y ago

Ah, yeah, I see your point. I totally agree, if you don't become a software expert and read every line of code (an impossible task), then you'll always be trusting someone at some level.

You're completely right. The thing I might point out though, is that with Apple you have one org which has total control over the entire ecosystem (hardware, firmware, OS, apps, app store, etc) and no hope of any audit. There is an immense opportunity for corruption and malicious design.

UnGoogled Android (i.e. Graphene) on the other hand has many many many contributors that touch only small pieces of the ecosystem. If any of them are CIA agents (or even several of them), it would still be a monumental effort for them to orchestrate any sort of systemic malicious design across the entire ecosystem. AND they'd have to pull it off without the honest software devs noticing. Maybe certain components or libraries could be compromised, but that is much better than the monolithic power that Apple has over its ecosystem.

At least with UnGoogled Android, you have the option to choose how much you want verify yourself and how much you want to trust other people to verify. Apple you have no choice. I'm not naive enough to think I can attain perfect security or privacy. I just want to minimize the amount of trust I have to give to any one person, and not make it overtly easy to control my digital life.