• Goun
    link
    fedilink
    arrow-up
    4
    ·
    6 months ago

    I agree.

    What could be possible, would be maybe send tiny bits. For example, a device could categorize some places or times, detect out of pattern behaviours and just record a couple of seconds here and there, then send it to the server when requesting something else to avoid being suspicious. Or just pretend it’s a “false positive” or whatever and say “sorry, I didn’t get that.”

    I don’t think they’re listening to everything, but they could technically get something if they wanted to target you.

    • Septimaeus@infosec.pub
      link
      fedilink
      arrow-up
      2
      ·
      edit-2
      6 months ago

      Right, I suppose cybersecurity isn’t so different than physical security in that way. Someone who really wants to get to you always can (read: why there are so many burner phones at def con).

      But for the average person, who uses consumer grade deadbolts in their home and doesn’t hire a private detail when they travel, does an iPhone fit within their acceptable risk threshold? Probably.