← Back to context

Comment by smoldesu

4 years ago

This article doesn't seem to have a direction, it just seems to be a lump of refutations about how hard it is to maintain a secure system, and how we need to be understanding throughout this process. What it doesn't actually address is security nihilism, so let's expand on the seed he plants in the final section:

> It’s the scale, stupid

This should 100% be the focus, not how truly amicable Apple's efforts are to improve security. Security nihilism is entirely about scale, and understanding your place in the digital pecking order. The only way to be 'secure' in that sense is to directly limit the amount of personal information that the surrounding world has on you: in most first-world countries, it's impossible to escape this. Insurance companies know your medical history before you even apply for their plan, your employer will eventually learn about 80% of your lifestyle, and the internet will slowly sap the rest of the details. In a world where copying is free, it's undeniable that digital security is a losing game.

Here's a thought: instead of addressing security nihilism in the consumer, why don't you highlight this issue in companies? There's currently no incentive to hack your phone unless it has valuable information that can't be found anywhere else: in which case, you have more of a logistics issue than a security one. Meanwhile, ransomware and social-engineering attacks are at an all-time high, yet our security researchers are taking their time to hash out exactly how mad we deserve to be at Apple for their exploit-of-the-week. If this is the kind of attitude the best-of-the-best have, it's no wonder we're the largest target for cyberattacks in the world.

> The only way to be 'secure' in that sense is to directly limit the amount of personal information that the surrounding world has on you

I may misunderstand you but this is privacy, not security. The 2 are not completely separated, but that’s another issue.