Torhoo onion mirror : torhoocc3yugradvhrppml2fin4xob7kgg7uf42s4xk7p6r5vzy62ead.onion

iOS vs Android : OpSec | Torhoo darknet markets

In examining discussions about iOS versus Android within the context of operational security (OPSec), I have observed that much of what is shared online—on platforms like Reddit and other purported privacy forums—is often based on personal opinions or references to sensationalist articles rather than concrete evidence.

To address this gap, I sought out peer-reviewed research to better understand the issue and came across an in-depth article detailing experiments conducted on a Google Pixel device and an iPhone. While this research is a few years old, my own assessment suggests that privacy concerns have likely grown worse since then.

The article is available in here:
https://www.scss.tcd ie/doug.leith/apple_google.pdf

, I also uploaded it to a onion hosting site:

http://eternalcbrzpicytj4zyguygpmkjlkddxob7tptlr25cdipe5svyqoqd onion/file/2d63f2032178c17c3b75609c5f21a0ad2b686142/6521333daf36e2abd7d62a.pdf

TLDR: iOS and Android both suck privacy wise, but Android is way worse. My own conclusion is to not use either os if you are either a buyer or a seller. Tails is the best choice honestly.

/u/DaVenom Made of Ⱡ₳₴ɆⱤ₴

3 points

3 weeks ago

A tip here on how to open unsafe PDF files or similar.

Reboot Tails without persistency
Don't login to Dread, use daunt.link to go back to the link page
Download the file
Turn off networking
Disconnect the Ethernet cable
Open the file and read
Insert a USB-memory (optional)
Format USB-memory with LUKS encryption (optional)
Copy the to the USB-memory (optional)
Safely unplug the USB-memory (optional)
Reboot

/u/fake_biz 📢 🍼 P

1 points

3 weeks ago

I know it sucks, but I didn't know any way to share the paper other than sharing the original link and/or uploading to an onion service. Does dread has a better way of sharing stuff?

/u/DaVenom Made of Ⱡ₳₴ɆⱤ₴

1 points

3 weeks ago

Dread has only quotes. It was not due to mistrust on you, I will stick this remainder each time I see external links. You will see it frequently.

/u/fake_biz 📢 🍼 P

2 points

3 weeks ago

I understand and agree with you. Is a healthy thing to do.

/u/MrBacon420 P 🐖🌿⚗️420🌿🚬 🐷

1 points

3 weeks ago

I thought for sure this was an infected PDF. Virustotal says it's clean though.

/u/Johjohdoe123

1 points

3 weeks ago

Not reading this. Exec summarise it for me pls.

/u/fake_biz 📢 🍼 P

1 points

3 weeks ago

TLDR: iOS and Android both suck privacy wise, but Android is way worse. My own conclusion is to not use either os if you are either a buyer or a seller. Tails is the best choice honestly.

/u/Johjohdoe123

1 points

2 weeks ago

Thank you. Approved.

/u/AngieJ P 🦸Baddest Bitch Around🦹

1 points

3 weeks ago

I think my comments on this thread are relevant. See: /post/d54087abc0d96391f87c/#c-274a0ae4388be9d67a

/u/fake_biz 📢 🍼 P

1 points

3 weeks ago

This perspective is fundamentally incorrect because it assumes that iOS does not transmit private keys back to Apple. For true end-to-end encryption, private keys must remain exclusively on the device. Consequently, only Apple's internal engineers are able verify whether these private keys are being retrieved or not. This highlights a significant lack of transparency and external oversight in Apple's practices regarding encryption and key management, just the fact the OS is not open source.

/u/AngieJ P 🦸Baddest Bitch Around🦹

1 points

3 weeks ago

You are correct.

I know that the private keys don't go back to Apple and that Apple does not have a way into a device with ADP enabled.

Based on what I know, that is enough for me. You may think differently and not have verifiable proof, and that is okay.

I just want to say that if you genuinely read about their guiding light philosophy and dig through the 300 page PDFs of their architecture and speak to engineers there -- which are all things I have done -- you will understand better.

/u/fake_biz 📢 🍼 P

1 points

3 weeks ago

That's why I shared the paper—to give people something more concrete than just gut feelings. Frankly, I don’t trust any Apple engineer to always be transparent with me, because those working on such projects probably won't risk their jobs just to spill the truth. At Apple, it’s all about making money for the board—and doing what's right for users is just a side benefit, not the main goal.

/u/AngieJ P 🦸Baddest Bitch Around🦹

1 points

3 weeks ago*

We could debate this all day. At Apple, the user isn't the product. Which is very different from Google.

I've been in the building in Cupertino.

There are reasons that entire governments and countries have banned their products or fought them.

I'm comfortable with my selection here. We should all use the tools available to us and information and make our own decisions based on our own risk and threat levels.

/u/fake_biz 📢 🍼 P

1 points

3 weeks ago

I’m not interested in debates either. Your arguments are based on proven falsehoods.

As the paper shows, just because Google is worse doesn’t mean Apple is good—they’re both bad. This argument is like saying, ‘My husband is good because he only beats me on the weekends, while my ex-boyfriend used to beat me every other day.’ It doesn’t make either of them acceptable.

Being inside an Apple building—whether in Cupertino, Seattle, New York, or any other location—doesn’t actually give you insight into how ADP is implemented.

I’m happy you’re happy — the same way millions of people are happy with Google tracking every aspect of their lives.

/u/AngieJ P 🦸Baddest Bitch Around🦹

1 points

3 weeks ago*

I'm going to keep arguing with you because now you throw out "falsehoods" and all that jazz.

Okay. Let's change the question. If Google is bad and Apple is bad. Who is good? Who do you recommend? Who is secure?

I've had the luxury of being able to sit down and talk to engineers at Apple for many hours on a variety of things.

Ditto with the FBI in my real life for a couple of reasons. You ever sat in a room with DHS, IRS-CI, USPIS, FBI, and a few others and talked to them about the latest methods they're using to get into devices? I have.

I know exactly what the Israeli companies (Elcomsoft, for example) can get into and what they can't.

But yea. You keep doing you dude.

You're a baby bottle who joined 13 hours ago and thinks you know more than me?

SIT DOWN. TAKE A FUCKING SEAT. AND LEARN FROM THE ADULTS IN THE ROOM.

/u/fake_biz 📢 🍼 P

1 points

3 weeks ago

There’s no way to corroborate your claims about being in all those places, so I’ll just ignore that. You might think it gives you some sort of authority, but it really doesn’t. I don't concern myself with feelings, I only care about proven facts.

Open-source alternatives to Android exist; GrapheneOS and CalyxOS are two of the more well-known options. I’ve inspected most of the code in GrapheneOS, and so far I haven’t found any red flags (you could do the same—it’s open to the public). I haven’t had the chance to do the same with Calyx OS’s code base, so I can’t provide any comparison or recommendation beyond sharing what I use (GrapheneOS).

It’s true—I joined 13 hours ago. But that doesn’t make your non-arguments relevant. No need to trust me (you shouldn’t), the code is public; you just have to read it.