苹果发文反击谷哥：别在那边夸大其词带风向 by Brian Fang on 9/07/2019 最近美国 Google 公司旗下的安全团队 Project Zero，发布了 iPhone 存在一系列安全漏洞报告，可被恶意网站利用来盗取用户讯息。Apple 公司今天发布了一篇「有关 iOS 安全性的讯息」声明回应，表示 Google 提到的漏洞复杂攻击范围很狭隘，并非大规模的安全漏洞，对於大多数人来说没有太大威胁。 Apple 希望确保所有用户都了解事实，无论攻击规模如何，我们都非常重视所有用户的安全。其次，所有证据表明，这些网站攻击只能在短时间内运行，大约两个月，而不是 Google 暗示的“两年”，而且我们在 2 月修复了有问题的漏洞。 Google 利用 Project Zero 研究来反击 Apple 主打的隐私权行销，因为 Google 主要的业务收入是记录用户的网路浏览行为和个人资讯，然後放送精准的广告。 Apple 表示：「安全是一个永无止境的旅程，我们的客户可以确信我们正在为他们工作。iOS 安全性是无与伦比的，因为我们对硬体和软体的安全性负有端到端的责任。」 Copyright 爱疯日报 https://www.iphonetaiwan.org/2019/09/a-message-about-ios-security.html ------------ 官方 Newsroom 网页： https://www.apple.com/newsroom/2019/09/a-message-about-ios-security/ （目前台湾网站还没发新闻，之後有的话即补充。） Last week, Google published a blog about vulnerabilities that Apple fixed for iOS users in February. We’ve heard from customers who were concerned by some of the claims, and we want to make sure all of our customers have the facts. First, the sophisticated attack was narrowly focused, not a broad-based exploit of iPhones “en masse” as described. The attack affected fewer than a dozen websites that focus on content related to the Uighur community. Regardless of the scale of the attack, we take the safety and security of all users extremely seriously. Google’s post, issued six months after iOS patches were released, creates the false impression of “mass exploitation” to “monitor the private activities of entire populations in real time,” stoking fear among all iPhone users that their devices had been compromised. This was never the case. Second, all evidence indicates that these website attacks were only operational for a brief period, roughly two months, not “two years” as Google implies. We fixed the vulnerabilities in question in February — working extremely quickly to resolve the issue just 10 days after we learned about it. When Google approached us, we were already in the process of fixing the exploited bugs. Security is a never-ending journey and our customers can be confident we are working for them. iOS security is unmatched because we take end-to-end responsibility for the security of our hardware and software. Our product security teams around the world are constantly iterating to introduce new protections and patch vulnerabilities as soon as they’re found. We will never stop our tireless work to keep our users safe. 苹果少见会特别发新闻澄清事件， 看来的确是很在意被指控不安全， 苹果之後又要推出 Sign In with Apple， 某书跟其它各种靠使用者隐私数据来卖广告的公司真的要气炸。 --

※ 发信站: 批踢踢实业坊(ptt.cc), 来自: 220.133.14.178 (台湾) ※ 文章网址: https://webptt.com/cn.aspx?n=bbs/iOS/M.1567888830.A.3AA.html 出现了 说 Google Project Zero 不是 Google 的 htc 使用者八卦板板主 使出次元切割刀+9 ※ 编辑: kouta (220.133.14.178 台湾), 09/09/2019 04:40:04