iPhone vs. Android: Which Is More Secure? - MUO - MakeUseOf

https://ift.tt/misZurH

Android and iOS are the leading mobile platforms today, and each of them has its selling point. Both Android and Apple keep updating their privacy and security features to combat the latest threats and vulnerabilities.

But which of these mobile Operating Systems (OSes) wins in terms of security? Some people claim it's iOS, some stand with Android, while others feel it's an equal share. So Apple vs. Android: which is most secure?

1. Source Code Contribution

Android and iOS separate lines when it comes to source code contribution. How does this affect their security?

iOS

Apple solely maintains its iOS internally; no one else has access to the iOS source code besides Apple. While the source code remains private to the company, this approach has pros and cons.

While only the authorized authority, i.e. Apple, manages all algorithms in the iOS source code, it's not subject to open criticism and improvement. So there might be little dynamism of ideas. A consequence is they might push a version with a security loophole, and attackers might've exploited this vulnerability before detection. An example is the iMessage zero-click attack spotted in iOS versions earlier than 14.8. Cybercriminals had exploited this vulnerability to install the Pegasus spyware onto users' devices until Apple fixed it in its iOS 14.8 release.

It's possible that someone would have noticed this flaw if it were an open-source OS.

Android

Except for Google Play Services and a few other ones, Android is open-source for the most part. Android's updated source code is in the Android Open-Source Project (AOSP), so smartphone manufacturers and app developers can grab and modify it to suit their users' needs.

This makes the platform transparent and able to receive better contributions regarding security and bug fixing. Nevertheless, this might also be a gateway for threat actors or poorly secured software to introduce malware into your Android smartphone.

Looking at the flexible scope of the Android platform, app developers and manufacturers are responsible for maintaining security and patching loopholes in their software. Such an approach focuses more on app security rather than platform security itself.

This is why installing an unsafe app from the Play Store might introduce malware into your device.

2. Are Google Play and App Store Safe?

Android's Play Store and iOS' App Store also determine how secure both platforms are. Let's look at each store's principles.

Android's Google Play Store

Since Android is open-source, there's no strict scrutinization of apps pushed by Android developers to the Play Store. Invariably, almost any app finds its way into the Play Store as far as there's a manifest file holding its metadata.

Although Google uses Play Protect to screen apps before users download them, these apps are there on the Play Store already. So users are more likely to ignore security warnings, even if there is malware.

Apple's App Store

On the other hand, Apple inspects an app closely using its apps review program before allowing it into the App Store. This lets them test-run apps manually using staff (i.e. human) judgment and a use-case simulator to detect memory leaks, security loopholes, adherence to standards, and more.

Unlike Android, iOS developers need to tailor their apps toward the iOS platform security standards. It's not uncommon for Apple to reject any app that doesn't meet its specifications.

This security scrutinization makes the App Store more secure than Play Store. You're more likely to pick up malware from the Play Store; you're less likely to do so from the App Store.

3. Network Traffic and Location Tracking

Apps that track your network traffic monitor the sites and apps you visit and track your likes. And location data is another piece of information used by third-party apps to tailor ads. Besides this, cybercriminals might leverage these to introduce malware into your device or hack your accounts online.

How do these OSes handle network and location tracking?

iOS

Features that help users protect users' privacy have been around since iOS 12 was released. This feature has been a staple of Apple with further improvements down the line from iOS 14.5 through iOS 15.

These let you control how apps access your internet and location data with a few taps here and there. Apple, however, beefed this further up in iOS 15.2 and later, giving users the ability to monitor apps' activities and how they use given permissions.

Apps don't know what you're up to on your iPhone and can't see your internet behavior, so you're unlikely to come across unsolicited ad notifications on iOS devices.

Android

Although Android has been host to network and location-tracking apps in the past, it has improved to combat this loophole.

For instance, OSes like Infinix's XOS have received updates that allow users to choose app permission preferences. Samsung also features a privacy dashboard similar to Android 12's, where you can set and monitor apps permissions. If you use Samsung, Infinix, or any smartphone running Android 12, you'll notice that you can keep app tracking in check. This works in a way to catch all ad promotions, social news, and more—should you block them using the feature. This makes up for Android's history of buzzing ads and intrusions.

But with that said, despite efforts to create a more secure environment in Android, some apps still sneak through these blockers. Besides, Android phones share an open-source platform, so desperate app developers can bypass blocking algorithms in the source code at some points. This is much more difficult to achieve on iOS.

4. How Frequently Are Apple and Android Updated?

Software updates present many benefits, including loophole patches and user experience improvements. Let's see the pattern of updates in iOS and Android.

Android

On an OS level, Android currently operates a yearly update schedule, as evident in its version release pattern, starting with Pie (Android 9.0) in 2018 to the more recent Android 12, codenamed Snow Cone. And this is partly due to the fragmentation within the Android community. However, many smartphones have update support, and you can't update them as new Android versions come out after a year.

Nonetheless, manufacturers like Oppo, Samsung, Google Pixels, and OnePlus, among others, have extended security update support in flagship devices. This is the case for many other Android devices that support the Android One program.

iOS

Apple focuses on a few device releases in a year, so it's easy to release updates more frequently than found in its Android counterpart.

Apple also has an extended update lifespan of up to five years, and even most of its early iPhones can update and run iOS 15 conveniently. Undoubtedly, the iOS update pattern is more frequent than Android. Between September 2021 and the time of writing, Apple has released up to five iOS updates.

Most of these updates are minor security and user experience updates, but they stand to maintain the iOS security integrity in the long run. Sorry Android, but iOS wins this round.

5. Advanced Security Features

Both iOS and Android offer impressive ranges of security features, like fingerprint and Face ID protection. With that said, Android and iOS seem to view security differently.

Android security features like Find My Device (similar to Find My in iOS), Google Play Protect, Lock Down mode, and the ability to stop USB debugging gives it uniqueness. A notable advanced iOS security feature is the iCloud keychain that lets users manage their credentials in an encrypted vault using Hide My Email. Additionally, Apple prides itself on the fact that users can save passwords and credit card credentials on their iPhones without compromise.

Many more built-in security features shipped with iOS 15. Nonetheless, each platform has its security focus in this regard, and we can't ignore that.

Android or iOS: Which Is More Secure?

Having looked at various determining factors, iOS paces ahead of Android when it comes to OS security. However, each platform meets specific user goals, and whatever security program they put in place doesn't make them wholly immune to malware. It's down to individuals too. If you ever have to choose between Android and iPhone, all that matters, in the end, is your core purpose behind choosing either platform.