Fw: [討論] 蘋果發文反擊谷哥：別在那邊誇大其詞帶

[kouta (ΦωΦ)]

※ [本文轉錄自 iOS 看板 #1TT1M-Eg ]

作者: kouta (ΦωΦ) 看板: iOS
標題: [討論] 蘋果發文反擊谷哥：別在那邊誇大其詞帶
時間: Sun Sep  8 04:40:26 2019

蘋果發文反擊谷哥：別在那邊誇大其詞帶風向
by Brian Fang on 9/07/2019

最近美國 Google 公司旗下的安全團隊 Project Zero，發布了 iPhone 存在一系列安全漏洞報告，可被惡意網站利用來盜取用戶訊息。Apple 公司今天發布了一篇「有關 iOS 安全性的訊息」聲明回應，表示 Google 提到的漏洞複雜攻擊範圍很狹隘，並非大規模的安全漏洞，對於大多數人來說沒有太大威脅。

Apple 希望確保所有用戶都了解事實，無論攻擊規模如何，我們都非常重視所有用戶的安全。其次，所有證據表明，這些網站攻擊只能在短時間內運行，大約兩個月，而不是 Google 暗示的“兩年”，而且我們在 2 月修復了有問題的漏洞。

Google 利用 Project Zero 研究來反擊 Apple 主打的隱私權行銷，因為 Google 主要的業務收入是記錄用戶的網路瀏覽行為和個人資訊，然後放送精準的廣告。

Apple 表示：「安全是一個永無止境的旅程，我們的客戶可以確信我們正在為他們工作。iOS 安全性是無與倫比的，因為我們對硬體和軟體的安全性負有端到端的責任。」

Copyright    愛瘋日報
https://www.iphonetaiwan.org/2019/09/a-message-about-ios-security.html

------------
官方 Newsroom 網頁：
https://www.apple.com/newsroom/2019/09/a-message-about-ios-security/
（目前台灣網站還沒發新聞，之後有的話即補充。）

Last week, Google published a blog about vulnerabilities that Apple fixed for iOS users in February. We’ve heard from customers who were concerned by some of the claims, and we want to make sure all of our customers have the facts.

First, the sophisticated attack was narrowly focused, not a broad-based exploit of iPhones “en masse” as described. The attack affected fewer than a dozen websites that focus on content related to the Uighur community. Regardless of the scale of the attack, we take the safety and security of all users extremely seriously.

Google’s post, issued six months after iOS patches were released, creates the false impression of “mass exploitation” to “monitor the private activities of entire populations in real time,” stoking fear among all iPhone users that their devices had been compromised. This was never the case.

Second, all evidence indicates that these website attacks were only operational for a brief period, roughly two months, not “two years” as Google implies. We fixed the vulnerabilities in question in February — working extremely quickly to resolve the issue just 10 days after we learned about it. When Google approached us, we were already in the process of fixing the exploited bugs.

Security is a never-ending journey and our customers can be confident we are working for them. iOS security is unmatched because we take end-to-end responsibility for the security of our hardware and software. Our product security teams around the world are constantly iterating to introduce new protections and patch vulnerabilities as soon as they’re found. We will never stop our tireless work to keep our users safe.


蘋果少見會特別發新聞澄清事件，
看來的確是很在意被指控不安全，
蘋果之後又要推出 Sign In with Apple，
某書跟其它各種靠使用者隱私數據來賣廣告的公司真的要氣炸。

--
※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 220.133.14.178 (臺灣)
※ 文章網址: https://www.ptt.cc/bbs/iOS/M.1567888830.A.3AA.html
※ 轉錄者: kouta (220.133.14.178 臺灣), 09/08/2019 04:40:50
→ karta177024 : 結果被攻擊的還真的是維吾爾族XDD
→ kouta       : QQ
推 force5566   : 腦羞
→ DarenR      : 通常都是被戳到痛處才會這樣氣pupu
→ ke19721972  : 通常是莫名被抹黑才會氣pupu吧，雖然我不知道這次
→ ke19721972  : 情況算哪種XD
粉絲會各自解讀 馬上就有活生生的例子

→ abelyi100   : 原po的發言不也是帶著立場解讀的活生生例子嗎= =
這篇文章裡的哪一個部分？
※ 編輯: kouta (220.133.14.178 臺灣), 09/08/2019 08:49:27
噓 DarenR      : 整個部分，謝謝
→ abelyi100   : 光最後一行就是了，推出Sign in with Apple這點
→ abelyi100   : 就自動幫其他公司腦補會氣炸也是不容易
→ abelyi100   : 何況這東西到底推不推的起來，能不能達到隱私防範
→ abelyi100   : 都是未知數，爭議也不少
推 enderboy7652: 總之水果還是有漏洞嘛，打臉狂粉都說水果不會被駭
推 abc21086999 : 靠，別人幫你抓漏洞還要被你罵
推 chitsaijang : 把金鑰給中國的人談隱私？？
推 ReDmango    : 看了內文想說是哪來的無視狂粉 出去看ID原來如此
推 zrna0515    : 最近CamScan事件還比較嚴重吧！？
噓 blue09      : ID
噓 jhangyu     : 笑死，只影響兩個月，騙外行的吧
噓 lanszul     : 貧果從老賈開始就在腦羞了，庫克還一直洗老賈臉
推 DJRobin     : 推這句「安全是一個永無止境的旅程」
→ DJRobin     : 或者安卓有自信以後都不用更新修正任何漏洞?
推 otherman    : 把所有資料放在中國就永遠不可能安全
→ otherman    : 習皇要你apple監控人民你敢說不？
→ qqq15963    : 感覺真的很氣耶！