XPost: alt.comp.os.windows-11, misc.phone.mobile.iphone
On Wed, 11 Jun 2025 23:43:58 +0000, Tyrone wrote :
On Jun 11, 2025 at 2:29:39 PM EDT, "Marion" <[email protected]> wrote:
75 known-to-be exploited 0-days disclosed in 2024 across all platforms.
9 were on mobile devices, and 66 were not.
4 were in Android (plus 3 which were in 3rd-party components)
2 were in iOS (plus 3 in WebKit, which is part of iOS & macOS)
No, Webkit is NOT part of iOS and MacOS. But hey, nice attempt to equalize the numbers.
Hi Tyrone,
You know networking better than I do, so I appreciate that you know stuff,
even as you always tirelessly defend Apple to the death, no matter what.
I'm both a scientist & and engineer so I take any reliable information into account when I form assessments, which can change based on the data set.
For you to claim "Webkit is not part of iOS or macOS" is kind of strange,
but from your (skewed, always defending Apple) perspective, I can easily understand how you might want the appreciable amount of WebKit zero-day
holes to "just go away" and not be counted.
However, when I refer to 'WebKit holes' in the context of 'iOS', I'm not implying that WebKit is an external component to iOS. Instead, I'm
referring to zero-day holes within the WebKit rendering engine, which is a fundamental and integral part of iOS. As even you ignorant Apple trolls
must be aware, WebKit is the engine that powers Safari on iOS, and it's
also used by many other apps that display web content. So, any hole in
WebKit directly impacts the functionality and user experience on iOS.
Therefore, when we're assessing the overall zero-day landscape for iOS,
it's crucial to include WebKit holes because they directly affect how web content is rendered and interacted with on the operating system. You can't really have a functional iOS web experience without WebKit, so its
stability and bug count are directly relevant to the quality of iOS itself.
But good try nonetheless, as you Apple trolls are desperate to find excuses
for why Apple's (rather brilliant) marketing on security never pans out in reality.
Interesting how you just gloss over the fact that Android had more 0-days in 2024 than iOS. When for MONTHS you have been loudly claiming that "iOS is the most insecure OS ever".
Since I'm both a well-educated scientist & engineer, I always will agree
with any rationally stated logical sensible viewpoint, Tyrone.
Hence, it's interesting that you bring up the excellent point that I've
always stated that the CISA KEV catalog always shows the iOS zero-day
exploit count to be hugely greater than Android (by about 1-1/2 times greater!).
As of today, a quick look at the CISA KEV catalog shows that searching for "iOS" yields significantly more known exploits than "Android."
(A quick filter shows around 108 known exploits in the wild for iOS/iPadOS/watchOS/macOS vs 73 for Android, including Samsung exploits.)
That means, cumulatively iOS had about 1-1/2 more exploits than Android,
which is exactly what I've been saying all along, Tyrone.
So you and I both agree that iOS has vastly more exploits than Android.
<
https://www.cisa.gov/known-exploited-vulnerabilities-catalog>
Bear in mind, since you're NOT a scientist, nor an engineer, you don't
appear to comprehend that there's a difference between the CISA cumulative zero-day exploit count and the GTIG one-year zero-day count.
a. Different time frame
b. Different measurement of zero-days
(i.e., one is zero-day count in a year, the other cumulative exploits)
You're an Apple troll, so, given you have no education, you're not expected
to understand how to interpret commonly available 0-day data.
The reason you don't understand the difference between a yearly snapshot
and a cumulative total can be summarized by understanding your abilities.
You're an Apple troll.
So, of course you do not understand the difference.
a. You have no education to speak of
b. You are a herd animal who believes in Apple's (brilliant) propaganda
c. And you are a religious zealot, who defends Apple to the death
So, of course... you don't understand any data that conflicts with what
Apple has (brilliantly) fed you to believe.
You *hate* that Apple lied to you by saying they put you in the walled
prison garden to make you safer - when - clearly - you're NOT safer.
In fact, to this very day, iOS has had 1-1/2 times more zero-day exploits
than Android, even as last years' zero-days were roughly about the same.
And Oh Look At This. A FACT that you did not bother to list here from the same "reliable GTIG blog" that YOU quoted. iOS had 9 0-days in 2023 and 2 (yes 2, they do NOT count the 3 in Webkit as "Part of iOS") in 2024.
Tyrone... you can't make WebKit 0-days "just go away" by wishful thinking.
While
Android remained the same in both years at 7. Did Google not fix any of the 2023 0-days? Or did they have 7 new 0-days in 2024? Either way, in 2024 iOS was WAY more secure than Android.
I realize you're an Apple troll so you're desperate to excused the fact
that Apple's "security propaganda" never matches the reality, but that one
blog doesn't even try to count *all* the zero-days in 2023 for either iOS
or for Android.
The blog says "Of the 37 zero-day vulnerabilities in browsers and mobile devices exploited in 2023, we attributed over 60 percent to CSVs that sell spyware capabilities to government customers", so we need to account for at least 37 zero-day holes in both iOS and Android (assuming the browsers are mobile device browsers, of course).
Therefore, while a specific count for Android and iOS individually isn't explicitly stated for 2023, the data indicates a higher number than the
2024 figures of 7 Android and 2 iOS, especially considering the broader category of "browsers and mobile devices" had 37 zero-days in 2023.
Also, Safari had 11 0-days in 2023 and 3 in 2024. Chrome had 6 in 2023 and 7 in 2024. Again, in 2024 Safari was WAY more secure than Chrome.
Tyrone... you can't make WebKit 0-days "just go away" by wishful thinking.
In FACT, Safari and iOS were the only products that had fewer (far fewer actually) 0-days in 2024 than in 2023. Every other product in the category went up or stayed the same.
Yes, these numbers could easily change in 2025. And who cares anyway? But will you now admit that, in 2024 at least, Apple was clearly the secure choice? After all, I can admit that in 2023 Android was clearly the secure choice!
Because you see, unlike you, I have no emotional attachment to any of this. I can deal with facts just fine. It's just hard for you to see that because you
rarely present any facts.
I own both platforms, Tyrone. You misread my intent on publishing facts.
What I hate are lies.
Apple only tells the truth, in court, and even now, Apple is currently
being considered for a criminal charge of brazenly lying to the court.
What I dislike are the lies. And human sheep *believing* those lies.
a. I dislike when Apple lies
b. I dislike when Google lies
c. I dislike when Microsoft lies
Hell, I dislike when Gavin Newsom said yesterday that Trump lies (which is true) but Gavin also lies (when he said the fires were caused by global
warming when I saw the lightning bolts that caused those fires on a Sunday
and NOT A SINGL FIREFIGHTER arrived to fight them until Wednesday!).
The problem you see me illustrating is that you *believe* Apple put you
into the walled prison garden for security - when - in fact - there is no security when you look at the proof - which is in the taste of the pudding.
Notice that iOS zero-days in 2024 were slightly less but about the same as Android zero-days - which I gladly report because I'm not beholden to a narrative other than the narrative which is the truth.
Facts are my truth.
Not Apple propaganda.
If Apple put you into that walled prison garden for 'security', why are iOS cumulative zero-day exploits 1-1/2 times those of Android, Tyrone?
And, if you suffer that walled prison garden for "security" reasons, why
are the 2024 Apple zero-days not appreciably smaller than Android (which doesn't force you into the walled prison garden)?
The answer is obvious.
Apple lied.
The proof is in the facts.
Give me more facts if you want me to change my assessment, Tyrone.
I'll change my mind on a dime (like any good scientist or engineer would),
if you provide reliable facts - which is what this thread is asking for.
To everyone:
What other platform-comparisons of zero-day holes are you aware of?
1. <
https://www.cisa.gov/known-exploited-vulnerabilities-catalog>
2. <
https://cloud.google.com/blog/topics/threat-intelligence/2024-zero-day-trends>
3. ?
We need facts; not lies.
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)