I would like to remind people of the 2016 Adups backdoor:
> According to Kryptowire, Adups engineers would have been able to collect data such as SMS messages, call logs, contact lists, geo-location data, IMSI and IMEI identifiers, and would have been able to forcibly install other apps or execute root commands on all devices.
You know... they could be just another malicious actor. I mean they appeal to emotions, github is not showing them as active in the community, pseudonym without any details in the profile. And by malicious actor I do not mean that they are trying to gain access, they could be just trolling Larhzu.
They are talking about the tone of the message. "it shouldn't be this hard" is not the proper way to report a bug at least not in a neutral way. It has the intention to make the maintainer feel bad and increase the likelihood of a change. And that was just in the title.
And yet, "it shouldn't be this hard" is an incredibly pertinent observation perhaps with the intention to make the maintainer understand that offloading tons of work on many other people has an impact.
Adding a backdoor to closed source software if you are the government is (almost) free so I do not think that the argument he is making about cost is a valid one.
> I think it's unfair to compare Facebook actively screwing us to Apple not adopting your proposed metric
I don't think they were comparing. They were basically saying that Apple is complicit to what Facebook (and others) are doing with regard to data collection.
> According to Kryptowire, Adups engineers would have been able to collect data such as SMS messages, call logs, contact lists, geo-location data, IMSI and IMEI identifiers, and would have been able to forcibly install other apps or execute root commands on all devices.
https://www.bleepingcomputer.com/news/security/android-adups...