0

I want to ask whether it is safe to install an app from a high-risk provider. Googling has shown that Apple's app store does vetting of code to prevent stealing of information from personal information management (PIM) apps that are native to the iPhone, e.g., here and here.

The question is subjective, but I make it much more specific by describing the app provider's country of origin and it's attempts to hide that fact. I further make it more specific by stating the assumption of not being particularly targeted.

This stack exchange's guidance links to a description of good subjectivity in questions. I'm on the fence as to whether my question is specific enough. Security can be very subjective by nature.

I have posted the question on reddit, but it isn't getting any attention, as it is not a security-oriented forum. Reddits mobile security forum doesn't seem to have seen activity in years and I do not get response to a request to participate (it is a restricted forum).

1 Answer 1

Reset to default
2

Any type of question that asks "is it safe if..." is not answerable in any meaningful way on Stack Exchange, as there is no single answer that is correct. Every visitor could have a different risk appetite and we need questions and answers to be of value to future visitors.

Having looked at your question on reddit, it would not be on topic here, as there is no useful answer.

4
  • I appreciate the response! However, I also describe how this site's guide also references inevitability of subjectivity and how to recognize good subjectivity. I also narrow the breadth of answers by describing how I narrow my risk appetite by opening with the assumption of being not targeted (because I recognize that if someone is out to get you and has the resources, the possibilities are endless). Can you please speak to these things in your answer? Thanks!
    – user2153235
    Dec 19, 2022 at 13:06
  • 1
    You'll need to remove any reference to "is it safe" - because that is a null question.
    – Rory Alsop Mod
    Dec 19, 2022 at 17:18
  • I try to find a way to convey that I'm not looking for a black-and-white assessment. Maybe if anyone has experiences to share that might give an idea of the prevalence of known threats that circumvent the best practices (not special tools that target individuals).
    – user2153235
    Dec 19, 2022 at 17:26
  • 1
    @user2153235 - there are companies that publish those sorts of things, ranging from the annual DBIR and others, to daily status feeds, but they change a lot over time
    – Rory Alsop Mod
    Dec 20, 2022 at 7:56

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .