Hacker News Reader

Comment by mattsouth | Hacker News Reader

"To protect themselves from regular and pre-installed malware, users should implement advanced security measures capable of identifying and blocking any abnormality in the device’s behavior.". Aside from reflashing the device before first use, and I suppose on a reasonably regular basis, are there any other suggestions for implementing this suggestion?

View on HN

"Why yes! The authors just happen to work at a company that provides excellent products that do just that!"

Not saying this isn't an important finding, but that part was a bit self-serving.

Well, let's say they provide products. Let's not say they provide 'excellent products'. After all, Check Point is one of those companies that suggests to do SSL MITM 'to provide security'. They sniff your SNI to make sure you don't look at XKCD. They randomly cut your connection if you try to download the SHAttered pdf's over http. They are what makes corporate life tiring.

Indifference is my mobile protective strategy. Anything I have that's worth anything is located elsewhere and encrypted, so I have the luxury of not caring.

Edit: I guess I never fully drank the mobile kool aid anyway... It's been what 10 years, the gee-whiz-bang effect has worn off, and they're revealed to be little more than a leash/tracking device for humans, with a small shitty interface on which you can't use more than 1 or 2 digits (fingers, son). So that's the foundation of indifference the above indifference comes from.

Reply on news.ycombinator.com