Apple Not Trying Hard Enough to Protect Users Against Surveillance, Researchers Say

Following the news of widespread commercial hacking spyware on targeted iPhones, a large number of security researchers are now saying that Apple could do more to protect its users (via Wired).

tim cook privacy
Earlier this week, it was reported that journalists, lawyers, and human rights activists around the world had been targeted by governments using phone malware made by the surveillance firm NSO Group known as "Pegasus."

Now, security researchers are stating that Apple could and should do more to protect its users against advanced surveillance tools like Pegasus. Independent security researcher Cedric Owens told Wired:

It definitely shows challenges in general with mobile device security and investigative capabilities these days. I also think seeing both Android and iOS zero-click infections by NSO shows that motivated and resourced attackers can still be successful despite the amount of control Apple applies to its products and ecosystem.

The security community has frequently criticized Apple for its limits on the ability to conduct forensic investigations into the security of iOS and the use of monitoring tools. A greater level of access to the operating system itself would, they claim, help to catch attacks and vulnerabilities more easily. For example, combating spyware like Pegasus would need access to read a device's filesystem, the ability to examine which processes are running, access to system logs, and more.

Android also places limits on "observability," but the locked-down nature of iOS, in particular, has drawn the ire of security researchers because Apple has heavily leaned into its focus on privacy and strong security protections, especially compared to other platforms. SentinelOne threat researcher Juan Andres Guerrero-Saade commented:

The truth is that we are holding Apple to a higher standard precisely because they're doing so much better. Android is a free-for-all. I don't think anyone expects the security of Android to improve to a point where all we have to worry about are targeted attacks with zero-day exploits.

Johns Hopkins University cryptographer Matthew Green similarly said: "Apple is trying, but the problem is they aren't trying as hard as their reputation would imply." iOS security researcher Will Strafach suggested that there are many options open for Apple to allow observation and imaging of iOS devices to catch bad actors in a safe environment.

On the other hand, there is a level of concern in the security community that more openness and an increased number of system indicators could inadvertently give attackers more leverage. For example, there are already suspicious applications on macOS that antivirus tools cannot fully remove since the system gives them a heightened level of trust, potentially by mistake. It is likely that any new system privileges in iOS would likewise be used by rogue analysis tools.

Nevertheless, the discovery of Pegasus and its severity is prompting discourse around device security and calls for Apple to do more to prevent surveillance, as well as discussion around the potential need for a government-supported global ban on private spyware.

Top Rated Comments

eicca Avatar
20 months ago
Oh really? What do these same researchers have to say about Google, Amazon, Facebook et al?
Score: 26 Votes (Like | Disagree)
Phil77354 Avatar
20 months ago
Interesting and a reminder that these issues are going to impact everyone regardless of platform.

If this helps to motivate Apple to step up their efforts, then I'm all for that!
Score: 19 Votes (Like | Disagree)
edgonzalez32 Avatar
20 months ago
I swear to god, most of you don't even bother reading the articles that are linked to these posts.


infections by NSO shows that motivated and resourced attackers can still be successful despite the amount of control Apple applies to its products and ecosystem.
That's a very valid observation. Apple claims that the system and app store is locked down for security, yet this happens. I'm not saying they need to be perfect, but just for a second take your fanboy hat off and read that. That's a valid criticism.

Also this

“The truth is that we are holding Apple to a higher standard precisely because they're doing so much better,” says SentinelOne principal threat researcher Juan Andres Guerrero-Saade. “Android is a free-for-all. I don't think anyone expects the security of Android to improve to a point where all we have to worry about are targeted attacks with zero-day exploits.”
Again, valid. I mean Jesus are you guys incapable of reading and just having a discussion? Nobody is saying to hate on apple. You know what makes the things you love better? Criticism and feedback. You know what makes me a better graphic designer? Criticism. How am I supposed to get better if all people do is praise me? You can STILL LOVE your precious Apple products and criticize them at the same time.
Score: 18 Votes (Like | Disagree)
lkrupp Avatar
20 months ago

Oh really? What do these same researchers have to say about Google, Amazon, Facebook et al?
Apple is the go-to target. If you write a negative screed abut Apple it gets millions of clicks. If you say Facebook sucks no one cares.
Score: 17 Votes (Like | Disagree)
nikaru Avatar
20 months ago
"A greater level of access to the operating system itself would, they claim, help to catch attacks and vulnerabilities more easily. "

Sure...just like making easier for thieves to enter my home, I actually make it safer because it is easier to catch them.
Score: 14 Votes (Like | Disagree)
Just sayin... Avatar
20 months ago
I’ve said it before and I’ll say it again: unless and until Apple provides full, end-to-end encryption for iCloud backups, their privacy/security words are merely “marketing-speak”.

https://www.reuters.com/article/us-apple-fbi-icloud-exclusive-idUSKBN1ZK1CT
Score: 12 Votes (Like | Disagree)

Popular Stories

iOS 16

iOS 16.3 Now Available for Your iPhone With These 4 New Features

Friday February 3, 2023 1:13 pm PST by
Apple released iOS 16.3 in late January following nearly six weeks of beta testing. The software update is available for the iPhone 8 and newer, and while it is a relatively minor update, it still includes a handful of new features, changes, and bug fixes. Below, we've recapped new features in iOS 16.3, including support for physical security keys as a two-factor authentication option for...
magsafe duo perspective feature

Apple Releases New MagSafe Duo Firmware

Tuesday February 7, 2023 12:41 pm PST by
Apple today released updated firmware for the MagSafe Duo charger that is designed to work with the Apple Watch and MagSafe-compatible iPhone models. The new firmware is version 10M3063, but in the settings app, you'll see a 256.1067.0 version number, up from 186.0.0.0. The MagSafe Duo was first released in 2020 alongside the iPhone 12 models, and it has not had a firmware update before....
oneplus 11 3

Camera Comparison: Apple's iPhone 14 Pro Max vs. OnePlus 11 5G

Tuesday February 7, 2023 10:11 am PST by
Chinese smartphone company OnePlus today announced the official debut of the OnePlus 11 5G, which is the company's latest flagship smartphone. The device was already announced in China, but today marks the global launch so we thought we'd compare the OnePlus 11 5G to the iPhone 14 Pro Max to see how the camera measures up. Subscribe to the MacRumors YouTube channel for more videos. Apple's...
HomePod 2 White and Midnight Feature Purple Orange

Apple Releases tvOS 16.3.1 and HomePod 16.3.1 Software Updates

Monday February 6, 2023 10:13 am PST by
Apple today released new tvOS 16.3.1 and HomePod 16.3.1 software updates, with the software coming two weeks after the tvOS 16.3 and HomePod 16.3 updates were released. According to Apple's release notes for HomePod software 16.3.1, the update includes general performance and stability improvements. Notes for tvOS 16.3.1 are unavailable as of yet, but are probably similar to the HomePod...
iPhone 15 Pro Blue Feature

iPhone 15 Pro 'Buttonless Design' Rumors: Everything We Know

Monday February 6, 2023 7:44 am PST by
The iPhone 15 Pro models will feature a "buttonless design" thanks to additional Taptic Engines, according to multiple corroborated reports, so what do we know about the change so far? Apple analyst Ming-Chi Kuo was first to report that the volume and power buttons on this year's two high-end iPhone models will adopt a solid-state design, similar to the iPhone 7's home button, replacing a...
iPhone 14 Pro Purple Side Perspective Feature Purple

Gurman: Apple Considering New High-End iPhone Alongside Pro and Pro Max

Sunday February 5, 2023 6:07 am PST by
Apple has discussed selling a new top-of-the-line iPhone alongside the Pro and Pro Max models in 2024 at the earliest, according to Bloomberg's Mark Gurman. Based on this timeframe, the device would be part of the iPhone 16 lineup or later. In a September 2022 edition of his weekly "Power On" newsletter, Gurman said there was "potential" for an iPhone 15 Ultra to replace the iPhone 15 Pro...
iphone ultra concept daehnert

'iPhone Ultra' Concept Envisions Apple's Rumored Future Top-Tier Smartphone

Tuesday February 7, 2023 5:38 am PST by
Apple has reportedly considered releasing a new top-of-the-line iPhone alongside future Pro and Pro Max models, tentatively referred to as "iPhone Ultra," and one designer has taken it upon himself to envision what such a device could potentially look like. German industrial designer Jonas Daehnert came up with this impressive-looking concept (pictured) by marrying design elements of the...
Apple iPad 10th gen Magic Keyboard Folio Apple Pencil Feature Blue

Apple Could Break an iPad Tradition This Year

Wednesday February 8, 2023 3:13 am PST by
Apple usually releases a new entry-level iPad every year, but the current lineup and rumors for 2023 may indicate that this will be the first year when the company breaks this convention. When Apple introduced the 10th-generation iPad last year, it added the device to the lineup above the ninth-generation model from 2021. As a result, Apple currently sells both the ninth- and 10th-generation ...