# Remove iVerify Basic **URL:** https://discuss.privacyguides.net/t/remove-iverify-basic/20133 **Category:** Tool Suggestions **Tags:** completed **Created:** 2024-08-16T20:18:45Z **Posts:** 21 ## Post 1 by @ph00lt0 — 2024-08-16T20:18:45Z ### Why should this tool be removed? Trail of Bits the owner of Iverify seems to make some strange claims on Android security together with one of their customers big evil Palentir. Source: > **[GrapheneOS (@GrapheneOS@grapheneos.social)](https://grapheneos.social/@GrapheneOS/112967309987371034)** > > Wired was manipulated into spreading misinformation to market Palantir and iVerify by misrepresenting a vulnerability in a disabled demo app as being a serious problem which could be exploited in the real world. They should retract the article but... What I get from it the apps were already known in 2017 and discussed by by the time Copperhead, now GrapheneOS and the CEO of Trail of Bits on at the time Twitter, now X. The app is not included in the latest firmware of Pixel. And now trial of bits ceo claims this discovery. The app surely is horribly insecure but given it is disabled by default it will not run without someone having physical access to the device on beforehand. The Android version of iVerify does not show you any information of what is detected, not even what is the indicator until you upload your system logs to them. This was already a red flag to me. The IPhone version does not run in the background as indicated on the website of PG already. This does make it hardly any more useful than just running MVT (whether through iMazing or not) TLDR I see no reason to keep this recommendsation as it doesn’t add anything beneficial to our users and the company seems to make some FUD. --- ## Post 2 by @ph00lt0 — 2024-08-16T20:22:47Z > Google disputed many of iVerify’s claims in response to inquiries from Recorded Future News, explaining that the issue “is not an Android platform nor Pixel vulnerability.” > **[Google to remove app from Pixel devices following claims that it made phones...](https://therecord.media/google-to-remove-app-pixel-vulnerable)** > > Google and a cybersecurity company are in a dispute over claims that an application on Android phones left the devices vulnerable to cyberattacks and spyware. --- ## Post 3 by @exaCORE — 2024-08-16T20:34:05Z Related thread: [Debunking fake stock Pixel OS vulnerability from an EDR company](https://discuss.privacyguides.net/t/debunking-fake-stock-pixel-os-vulnerability-from-an-edr-company/20102) --- ## Post 4 by @ph00lt0 — 2024-08-16T20:41:24Z Cheers missed that. I guess this thread is not intenting to replicate the discussion on the news but let’s assess whether iVerify has actually some benefits to bring to the game. I don’t think so --- ## Post 5 by @redoomed1 — 2024-08-16T20:55:50Z > [@ph00lt0](#): > > whether iVerify has actually some benefits to bring to the game Looking at the screenshot of the iPad app on the App Store… ![iverify-ipad](//forum-uploads.privacyguidesusercontent.com/original/2X/f/fea4baa9b7c43b753169e97822a0050649b806a8.webp) At first glance, it looks like much of the actionable suggestions the app gives you are settings you should already have enabled (screen lock), or things you should already be cognizant of depending on your threat model (turning on airplane mode). And all these suggestions can be found in the [iOS Overview](https://www.privacyguides.org/en/os/ios-overview/). --- ## Post 6 by @ph00lt0 — 2024-08-16T20:57:43Z Could just have been a checklist on our website :smiley: --- ## Post 7 by @dngray — 2024-08-17T10:26:24Z It seems like this app just tells you some settings to change, and I’m not sure that really justifies an entire app. The Showcase thing was also a non-event as as far as I know required physical access and is removed from future versions of Android anyway as it’s not used by Verizon anymore. So that basically means there isn’t a problem. When it comes to privacy I’m always a fan of only installing just what you need to do your work, and not random nag apps like this which don’t really do anything. Likewise, if it can be done in a browser without an app, then perhaps it should be. --- ## Post 8 by @anon55464882 — 2024-08-17T10:47:34Z I agree with your points. Similar guidance is available in Privacy Guides’ [recommended configurations for iOS](https://www.privacyguides.org/en/os/ios-overview/#activation-lock) or from various web-based sources, such as by [The New Oil](https://thenewoil.org/en/guides/most-important/mobile-settings/), which doesn’t necessitate downloading a whole app. Especially considering that the iVerify Basic app gathers diagnostic and usage data from users. --- ## Post 9 by @Andrew1 — 2024-08-17T11:19:14Z Since this app doesn’t scan anymore, what about Certo? Is it reliable? --- ## Post 10 by @anon63378630 — 2024-08-17T13:41:35Z @Andrew1 proprietary spyware trash like everything else --- ## Post 11 by @jonah — 2024-08-17T19:05:39Z > [@ph00lt0](#): > > This does make it hardly any more useful than just running MVT (whether through iMazing or not) Notably, MVT requires an additional device and time to perform a full system backup. --- ## Post 12 by @ph00lt0 — 2024-08-17T20:23:53Z In my experience making such exports is fairly quick. But depending on your model. Sure it requires another device but that also makes it more reliable. --- ## Post 13 by @ignoramous — 2024-08-17T20:41:48Z > [@anon63378630](#): > > proprietary spyware trash like everything else It is like Onavo all over again. > [@ph00lt0](#): > > Cheers missed that. I guess this thread is not intenting to replicate the discussion on the news [It was](https://discuss.privacyguides.net/t/debunking-fake-stock-pixel-os-vulnerability-from-an-edr-company/20102/8). Disappointing that the mod (in this instance) was too eager to close the orginal thread (after having themselves [derailed it with an offtopic comment](https://discuss.privacyguides.net/t/debunking-fake-stock-pixel-os-vulnerability-from-an-edr-company/20102/2)) on iVerify. --- ## Post 14 by @Rasta — 2024-08-17T21:00:20Z Was that an off topic comment considering the nature of the discussion and news? Also, the thread was well and truly off topic at that point. --- ## Post 15 by @ph00lt0 — 2024-08-18T14:41:03Z > > > Changes proposed in this PR: > Remove iVerify Basic > > Discussion: https://discus…s.privacyguides.net/t/remove-iverify-basic/20133 > > > > > > - [x] I agree to the terms listed below: >
Contribution terms (click to expand) > 1) I am the sole author of this work. > 2) I agree to grant Privacy Guides a perpetual, worldwide, non-exclusive, transferable, royalty-free, irrevocable license with the right to sublicense such rights through multiple tiers of sublicensees, to reproduce, modify, display, perform, relicense, and distribute my contribution as part of this project. > 3) I have disclosed any relevant conflicts of interest in my post. > 4) I agree to the Community Code of Conduct. >
--- ## Post 16 by @ph00lt0 — 2024-08-18T16:33:58Z --- ## Post 17 by @jonah — 2024-08-19T03:51:06Z This change has not been completed. --- ## Post 18 by @ph00lt0 — 2024-08-19T08:18:59Z @jonah sorry didnt know you still wanted to add something in. Please see my reply here ^ --- ## Post 19 by @jonah — 2024-08-19T15:21:44Z > [@ph00lt0](#): > > In my experience making such exports is fairly quick. But depending on your model. It’s less dependent on your model on iOS and more dependent on how much data you have, because it involves a full iTunes backup. It may be quicker on Android, but as we already note, it isn’t particularly useful for Android in the first place, so iOS is kind of the primary consideration here. > [@ph00lt0](#): > > Sure it requires another device but that also makes it more reliable. It’s a matter of accessibility: > **[Mobile Fact Sheet](https://www.pewresearch.org/internet/fact-sheet/mobile/#smartphone-dependency-over-time)** > > Americans today are increasingly connected to the world of digital information while “on the go” via smartphones. Explore the latest patterns, trends and statistics that have shaped the mobile revolution. --- ## Post 20 by @ph00lt0 — 2024-08-19T20:22:31Z While i understand your point here. I do not like the set up of auditing on a single device and dont think it is a good idea generally. --- ## Post 21 by @fria — 2024-08-20T00:07:19Z Also really iverify isn’t able to do much anyway from inside the Android and iOS sandbox (and you wouldn’t want it to either). --- ## Post 22 by @redoomed1 — 2024-10-29T17:38:33Z Closing thread since the PR marked as solution has been merged