ciscoresearch

Phil Schiller doesn’t tweet very often. But when he does, he tends to make good use of his 115,000+ followers. Early last year the executive tweeted a link to an Android-slamming mobile malware report, and today he’s pointed to another report that highlights Android’s security flaws.

This afternoon, Schiller tweeted a link to Cisco’s 2014 Annual Security Report, which was released last week. The report notes that overall vulnerabilities are the highest they’ve ever been (since tracking began in 2000), and that 99% of all mobile malware is targeted at Android devices…

Here’s the tweet:

And here’s an excerpt from the report via MacRumors:

“Not all mobile malware is designed to target specific devices, however. Many encounters involve phishing, likejacking, or other social engineering ruses, or forcible redirects to websites other than expected. An analysis of user agents by Cisco TRAC/SIO reveals that Android users, at 71 percent, have the highest encounter rates with all forms of web-delivered malware, followed by Apple iPhone users with 14 percent of all web malware encounters.”

What’s ironic here is that the thing most Android users complain about regarding Apple—its closed ecosystem—is the very thing that’s keeping iOS users safe from most mobile malware. By default, iPhone and iPad users can only install apps from the heavily monitored and curated App Store.

Android, on the other hand, is a free-for-all. Users can install apps from either Google’s Play store or one of dozens of 3rd party venues. Admittedly, this kind of openness allows for deeper customization and other stuff you can’t do on iOS, but it also makes it much more vulnerable to security risks.

Interestingly enough, Schiller’s tweet comes less than a week after the Starbucks iPhone app was found to store sensitive user data in unencrypted text. I wonder if Apple has received a lot of feedback from customers in regards to security concerns, and maybe they’re trying to change the conversation.

What do you think? Good or bad move by Schiller to tweet a link to this report?

  • Virus

    Just can’t trust anything made by Google / Android these days everything is garbage or spyware

    • ✪ aidan harris ✪

      Still not as bad as Amazon whose products come with spyware (adverts) built in…

      • BoardDWorld

        I wonder how much malware comes out of Samsung for gathering statistics etc.

    • La Cucaracha

      You can infect me all you want, virus

  • PiraCee

    Phil is awesome!

  • onebyone_

    playstore is a hell of scam apps, they simply can’t control this big trouble, majority of devs has been afected by the scam apps (with same icon as the original App)

    • grumpyfuzz

      Yea, and if you get the wrong app, you have 15 minutes to get a refund… So IDK…

      • ✪ aidan harris ✪

        So what if you do something else during the fifteen minutes after purchasing a scam? You have then not only been scammed by the developers of the scam app but also been scammed by Google and their absurd refund policy that dictates that you have fifteen minutes to obtain a refund unless Google issues you a refund as a good will gesture (which they may or may not do).

      • grumpyfuzz

        Then you can contact google, but I don’t know why you would buy an app then not even try it out. Plus, at least Google offers a return in 15 minutes unlike your beloved company apple.

      • ✪ aidan harris ✪

        That’s besides the point. The scam apps that exist shouldn’t (I think we can both agree on that) and in addition to this if you were to purchase any ordinary product from a shop you normally have the best part of a month to obtain a refund so fifteen minutes is a bit of a joke to be honest…

      • grumpyfuzz

        How is it a joke? It isn’t exactly easy to request a refund on iOS or android. With the 15 minutes, you can just tap a button and get your refund instantly.

      • ✪ aidan harris ✪

        I’m not saying the act of receiving a refund on a digital purchase made via the Google Play store is joke but that the time limit in which you must do so is a joke…

      • grumpyfuzz

        It is better than what Apple gives you, no time.

      • ✪ aidan harris ✪

        This is because Apple makes it explicitly clear that all sales are final. Read the terms and conditions some time 😉

        “All sales and rentals of products are final.”

        Source: https://www.apple .com/legal/internet-services/itunes/us/terms.html

      • grumpyfuzz

        That just proves my point, you say the time you must do it is a joke, while on an iOS device you have no time.

      • grumpyfuzz

        That just proves my point, you said the time they give you on the play store is a joke but on an iOS device, they give you no time.

      • ✪ aidan harris ✪

        Honestly no time at all is better than fifteen minutes only. I’d hate to buy an expensive app on the Google Play Store only for it to take too long to download or for me to accidentally spend more than fifteen minutes using it. At least Apple makes it absolutely clear to its customers that what you buy is final and cannot be returned it forces you to use your initiative and do some research and actually ask yourself “Do I really need this app?”. In short since you as a user know that you cannot get a refund (except in extenuating circumstances) it allows you to make more of an informed choice. The AppStore also has many lite versions of applications to try out and what is becoming increasingly popular applications with basic functionality and optional iAPs in order to upgrade your user experience.

        TLDR; There really isn’t any need to receive a refund when using the AppStore and if there is it’s because you haven’t done your research properly.

      • Kash Gummaraju

        What about in-app purchases made by accident? Buying Apps and tweaks should be like buying actual objects online or in-store. You like it, you keep it, you don’t like it, you get a refund.

      • ✪ aidan harris ✪

        “except in extenuating circumstances”

        Apple allows refunds made by accident but at their discretion…

      • Kash Gummaraju

        “accident” and “their discretion”. That almost never happens. The court has to force Apple to do anything that involves giving or spending money on something that isn’t Apple( the whole in-app purchases lawsuit, taxes, and price fixation fines).

      • ✪ aidan harris ✪

        At the end of the day though Apple is a business. If you unintentionally purchase something this is your own fault. If Apple wants to refuse a refund they have every right to do so. This may not seem fair but until as you stated legal action takes place or laws change Apple is in no way, shape, or form liable for anything you as a user do. But if someone else purchases something using your account this is of course a whole different ball game…

      • mehrab

        Nope just email the apps buyer id and say this app is not what I though it was that’s it

      • felixtaf

        “Apps and tweaks should be like buying actual objects online or in-store. You like it, you keep it, you don’t like it, you get a refund.”
        I disagree. Refund for digital content is a worst idea. Even an average user can keep a copy and use it after a refund. It forces Apple to develop somekind of specific licensing to deal with that. Its complicated!

        And what do you mean by in-app purchases by accident? The app itself has a banner about in-app purchases (atleast now). When you buy it, you are agreeing that you will handle it. So, it your mistake even if its a accident. Apple is a rich tech company, which doesnt mean that they have to pay us for our mistakes!

      • Kash Gummaraju

        You’re wifi would have to suck in order to have an app take anything more than 3 minutes to download. Lite versions usually reveal next to nothing about the actual full version. Lite versions tend to restrict the experience to very few features, unlike Google Play “lite” apps which offer you a trial period with full features. Apple does not make it fully clear to its customers that apps are non-refundable, most people are too lazy to fight over a couple bucks. But if Apple did have the refund feature, so many people would be getting refunds.

      • grumpyfuzz

        If you want to try out an app on android, maybe it’s a good paid app, and you don’t like it. Guess what? You can return it. On an iOS device, you can’t go back. And trust me, not everyone is happy with apps they purhcase on an iOS device. Just accept that 15 minutes is better than none. And also, how many average people read the terms and conditions?

      • Rowan09

        Apple gives refunds all the time when scammed its nothing new.

      • mehrab

        They give you 90 days
        To email apples refunding team

      • grumpyfuzz

        Go ask people with iPhones how many people actually take the time who do that. Go ask people with a good android phone how many have used the refund feature. Tell me the results.

      • Xee

        I’m not a fan of Android but I prefer 15mins over nothing that Apple gives us. Let’s you at least try out the app for a couple of mins. I’m sure we have all purchased apps on the App Store that have not lived up to the hype or what we had expected (especially when no lite/free version is available to test).

      • marco1993

        Apple do offer refund on apps and the refund window is more than 15 mins for sure
        If it is a scam app apple will not only refund you the money it will take it off the App Store too
        The scam app won’t pass Apple’s screening process to start with unlike the play store

      • Kash Gummaraju

        Plenty of scam apps pass Apple’s screening process. And no Apple does not give refunds, unless forced to by the Court. 15 minutes is enough to decide that you don’t like an app and get a refund. It’s like buying infinity blade and hating it(idk why but people hate its repetitiveness) and then realizing that you can’t get back that $8 you “wasted”.

      • grumpyfuzz

        Yes the refund for a scam app is also way more than 15 minutes, it’s the same with Google. But what about a real app that you just want to try out and turn out not liking? Apple won’t let you return that unless doing a lot of bs to get a refund. But on the play store, you have 15 minutes to try out a paid app and then if you don’t like it, you can press a few buttons to get your money back instantly.

      • mehrab

        Uh apples refund is for 90 days actually lol

      • redjazon

        I for one never had any problem with refunds and have gotten freebies from Apple. I got 2 movies and 1 rental credits including the refunds from repurchasing songs that I already have from iTunes.
        You just have to be nice when in correspondence with a csr. 🙂

      • grumpyfuzz

        Except it isn’t as easy as pressing a button,. And buying a real app, non-scam they will not let you return it, unlike the 15 minutes on the play store.

      • mehrab

        Ik right thank you so much your absolutely 100 percent right they never will return it to you bcos you buy apps from the play store why would they refund apps from there anyway?

      • grumpyfuzz

        Not sure if serious…

      • mehrab

        Not duh

  • Sandy Cook

    Hard to believe anyone would take this report seriously. There’s a major error on that bar graph for starters

    • Danuel Carr

      Care to elaborate?

    • Đức Anh Trần

      I’m curious to see what you found in this report is consider “a major error”.

      • Sandy Cook

        A hint for those who didn’t notice: Android is one column

  • Framboogle

    Phil Schiller is the best

  • ✪ aidan harris ✪

    “Interestingly enough, Schiller’s tweet comes less than a week after the Starbucks iPhone app was found to store sensitive user data in unencrypted text. I wonder if Apple has received a lot of feedback from customers in regards to security concerns, and maybe they’re trying to change the conversation.”

    This has nothing to do with iOS and everything to do with the sheer stupidity of Starbucks and their developers. The same thing could happen to any user of any operating system…

    • BoardDWorld

      Curation should have prevented the Starbucks app being made available like this. That was the point.

  • Decio Arruda

    I was amazed at iOS threats by this. Didn’t tis it was nearly as high as it is.

  • [Ding Ding] Siri, tell me a joke.
    [Dong Dong] “Google Android is the most secure mobile OS ever made.”

  • Ben Barros

    virus is so beautiful 😉

  • Ben Barros

    i will never own an android ever again iphones are more reliable in my experience i work on all different types of cellphones and LOVE iphones 🙂

  • Ricardo Monterrubio

    I just think he should tweet more often

  • n0ahcruz3

    If iOS is secure, how come the President isnt allowed to use one. And how come DOD havent given iOS authority to operate? Answer.. iOS is also insecure lol

    • John

      Who said it was secure? Look at the damn graph. Where does it show iOS as secure? Do you see that small bar next to android? Right. Think before you type mate.

      • n0ahcruz3

        It was meant as a joke, sorry for the bad joke lol