Hacker News Reader

> how organizations can secure any device ios or android if they can't track and control the network layer, period out of it, and there are zero carveouts for the OS itself around network traffic visibility.

The closest I've seen is an on-device VPN like Lockdown Privacy , but it can't block Apple bypassing the VPN.

https://lockdownprivacy.com/ | https://github.com/confirmedcode/Lockdown-iOS

Or the tiny CPU on the networking hardware chip

You cannot.

iOS is one problem, but it goes for every other device/server/desktop/appliance that you use.

You can take a lot of precautions, and mitigate some risk, and ensure that operations can continue even if something bad happens¹, but you cant ever "be safe".

¹ "" There are known knowns; there are things we know we know. We also know there are known unknowns; that is to say we know there are some things we do not know. But there are also unknown unknowns—the ones we don't know we don't know "" (Often attributed to Donald Rumsfeld, though he did not originate the concept.)

Know what bad can happen is difficult.

Except Qubes OS, which often saves you even when an unknown unknown happens.

How do you expect to catch this with network traffic analysis?