2

If I replace my current smartphone with a Google Pixel, which would get updates pretty quickly, would I be just as safe from hackers as I would be using an iPhone? This is assuming I don't install shady apps, of course.

If you're wondering what my baseline for security updates is, I have a Google Nexus 6 (good support) and used to use a Samsung Galaxy S III (not very good support IMO).

Thanks in advance.

closed as primarily opinion-based by Steve, Anders, Xiong Chiamiov, Serge Ballesta, Trey Blalock May 3 '17 at 6:49

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    "intrinsically more secure" from what? – schroeder Apr 29 '17 at 9:12
  • Good question. I was thinking in terms of things like remote exploits. That's why I said "assuming I don't install shady apps"; I want to know if Android phones would be easily hackable by criminal botnets or the CIA even if I do everything right. Granted, if I'm super concerned about that, I would want to consider something like a Coppherhead phone, but that may be impractical due to costs and the lack of Google Play access. – jajavoli Apr 29 '17 at 17:56
  • if your Threadmodel includes the CIA then you are pretty much doomed. Both apple and google are U. S. companies and thus provide backdoors for the government. Even if they don't have a backdoor (but yes they have) they have the legal powers to force google/apple to crack into the phone. – BlueWizard Apr 29 '17 at 22:57
  • Very true; I was just giving a rather colorful example of an entity than exploit security bugs – jajavoli Apr 30 '17 at 1:14
5

I will attempt to make this question which could easily be viewed as an "opinion based answer" into something with concrete facts.

I think that, on a whole, the Android ecosystem is a tire fire. If you put every iPhone sold up against every device running Android sold up against each other and compared which platform had more security vulnerabilities, Android would win by a landslide. The reason for this is the variety of form factors and phone manufacturers makes cheap hardware possible, but you have no vetting of your supply chain in many cases. We have seen Android handsets sent with factory installed malware in several cases. Couple this with the fact there is no easy native backup solution which drives people to root their phones and you have an environment where malware can thrive.

Now with that said, if you put a Google Pixel, which was purchased from the manufacturer, not rooted and running the standard ROM (without any carrier bloatware) up against an iPhone I would argue that there is no difference in security between one or the other. Both manufacturers tightly control their supply chain and manufacturing process, as well as put out ROMs or OS's with a security focus in mind.

  • 1
    There are a lot of junk Android devices. – MikeP Apr 28 '17 at 23:00
  • What if I get a Pixel through the Verizon upgrade program and then flash it with Google factory image? – jajavoli Apr 29 '17 at 2:59
  • Never mind. It turns out that Verizon ships the Pixel with a locked bootloader. Ugh. – jajavoli Apr 29 '17 at 18:12
2

iOS requires all code to be signed before it can be run. This complicates things a lot when you want to install persistent malware on iOS, as you've not only got to put the files in the right place, you also need to patch the kernel so that on the next reboot it no longer enforces code signature so that it can run your malware.

Here's an example of such an attack. The attackers had an exploit for Safari that allowed them to execute code, but they also needed other exploits to be able to patch the kernel to disable code signature enforcement, effectively "jailbreaking" the device. Without those two extra exploits their malware wouldn't be able to persist.

Android on the other hand allows you to choose whether to allow apps from the Play store or from untrusted sources, however I am not sure whether this check is made only at installation or at runtime. Unless it's the latter the device is still vulnerable to exploits that plant malicious binaries (without involving the installer) since the signature won't be checked on those.

The other issue with Android is that the quality bar on the Play store is much lower than its iOS counterpart. There have been instances where actual malware was published on the Play store.

iOS apps run in a much more restricted sandbox than Android. This can be good or bad as it prevents apps from doing things that can be useful in certain cases, but on the other hand prevents some attacks by malicious apps. For example, in iOS, when you press the home button you can be sure you're going back to the OS's trusted home screen. On Android nothing prevents the previous app from drawing over that screen or even simulating it completely, making you think you're opening another app that you trust (password manager?) while in reality you're still in the malicious app that's just mimicking the home screen and password manager in an attempt to capture your master password.

Finally, while this doesn't apply to your question as you already chose a trusted device, in the iOS world it's much easier to buy a clean device that is guaranteed to receive updates. You can buy it from Apple, a carrier or even a shady phone shop, as long as the device isn't counterfeit it will receive latest updates and the firmware running on there hasn't been tampered with. With Android on the other hand you could have the same hardware device but depending on where you buy it from will run a different firmware (sometimes with built-in spyware from the carrier) and have different update schedules. There's also no easy way to tell those apart (some carrier firmware looks just like the stock one, besides the fact that you'll never get updates and there's probably spyware hidden in there).

  • Hmmm, does that mean that I could get a Pixel through the Verizon upgrade program and flash it with the Google factory image to be safe? – jajavoli Apr 29 '17 at 0:00
  • Actually, scratch that last comment. It turns out that Verizon locks the bootloader on the Pixel. In this day and age. Ugh. – jajavoli Apr 29 '17 at 18:13
  • @jajavoli yeah that's the issue - if you've got the time to figure out how to install a custom firmware then go for it, but I personally value my time and would rather give my money to a manufacturer that doesn't force me to tinker with firmware just to be able to have an usable and secure device. – André Borie Apr 29 '17 at 18:15
  • yes, all iOS apps are cryptographically signed. But so is more or less every piece of consumer software since the new millenium. All Android apps are cryptographically signed just like iOS apps are. It is impossible to install unsigned apps on both platforms (althouh this doesn't mean that the signature needs to be from a trusted source) – BlueWizard Apr 29 '17 at 22:58
  • Many of the things you mention don't make iOS superior because android has them too. Yes, iOS has App-Sandboxing. But so does Android. Android uses state-of-the-art sandboxing technology. iOS devices do so too. Although your point about app store quality is correct. There is malware in the google play store while it's fairly rare in the apple app store. – BlueWizard Apr 29 '17 at 23:04

Not the answer you're looking for? Browse other questions tagged or ask your own question.