Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NSO hacked WhatsApp to spy on top government officials at U.S. allies

reuters.com

Post reply on HN
Print view View original

311–320 of 321 posts

Re: NSO hacked WhatsApp to spy on top government officials at U.S. allies

#311

Post by tarcisiocjr »

ryanlol wrote: post #287
_trampeltier wrote: post #274

"Prior to notifying victims, WhatsApp checked the target list against existing law enforcement requests for information relating to criminal investigations, such as terrorism or child exploitation cases. But the company found no overlap, said a person familiar with the matter. Governments can submit such requests for information to WhatsApp through an online portal the company maintains." There is already an official…

I don't think it's fair to call this a "backdoor". Because of E2EE the law enforcement access is limited to looking up IP addresses associated with whatsapp users and such.

Here in Brazil, if I understand corrected from some leaks, after the judicial request WhatsApp stop (or something related) the encryption between Bob and Alice. After that all conversations is in plain text and accessible to federal police.

Re: NSO hacked WhatsApp to spy on top government officials at U.S. allies

#312

Post by f1refly »

eitland wrote: post #247
rodgerd wrote: post #166

Earlier quoted context omitted.

The Signal client is open source. The back end not so much. A lot of Signal is basically "trust Moxie".

> A lot of Signal is basically "trust Moxie". Let me come out and defend Signal (I usually defend Telegram, but I don't think we should be unfair to anyone): As far as I am aware no one who knows what they are talking about has come out with anything that says Signals end-to-end encryption is broken. If I have understood it correctly an as long as that is true, NSA, FSB and the Chinese might be running the message ha…

>As far as I am aware no one who knows what they are talking about has come out with anything that says Signals end-to-end encryption is broken.

You have to check xmpp with omemo, it has libre servers and in federated

Re: NSO hacked WhatsApp to spy on top government officials at U.S. allies

#313

Post by rshnotsecure »

ryanlol wrote: post #233
rshnotsecure wrote: post #42

Earlier quoted context omitted.

It comes mainly from mapping the subdomains over time and analysis of the ASNs. This is key. You will often see a company with perhaps 200 or so subdomains, that only does business in the United States. But then you will see one subdomain that maps to ASN 4803 or whatever, which then leads to “China Telecom xinjiang”. In fact I encourage you to type: org:”China Telecom xinjiang” “NSFOCUS” into Shodan. Also look at th…

>org:”China Telecom xinjiang” “NSFOCUS” into Shodan. No results found

Check your double quotes. Also do you have a registered / paid account? Lowest level of paid is fine.

Re: NSO hacked WhatsApp to spy on top government officials at U.S. allies

#314

Post by ryanlol »

tarcisiocjr wrote: post #311
ryanlol wrote: post #287

Earlier quoted context omitted.

I don't think it's fair to call this a "backdoor". Because of E2EE the law enforcement access is limited to looking up IP addresses associated with whatsapp users and such.

Here in Brazil, if I understand corrected from some leaks, after the judicial request WhatsApp stop (or something related) the encryption between Bob and Alice. After that all conversations is in plain text and accessible to federal police.

Do they disable it or do they noisily mitm it?

Re: NSO hacked WhatsApp to spy on top government officials at U.S. allies

#315

Post by sergiomattei »

rshnotsecure wrote: post #63
ChuckMcM wrote: post #51

Earlier quoted context omitted.

So you're saying "typical intelligence analyst stuff" is the reasoning here? Generally analysts produce questions which operations runs down to figure out if what they think is going on, is actually going on. Correct me if I'm wrong here but you're basically saying that you have done the first part and found some suspicious links but not the second part do develop actual evidence one way or the other, is that a fair…

I am writing this all on a phone and I am more than happy to produce a 5000 word report which will be posted in 96 hours. I will follow up via a comment here and also send to Michael Forsythe at the New York Times for additional review. You have my word. EDIT: 5000 words not pages

???

Re: NSO hacked WhatsApp to spy on top government officials at U.S. allies

#316

Post by mmazing »

rshnotsecure wrote: post #63
ChuckMcM wrote: post #51

Earlier quoted context omitted.

So you're saying "typical intelligence analyst stuff" is the reasoning here? Generally analysts produce questions which operations runs down to figure out if what they think is going on, is actually going on. Correct me if I'm wrong here but you're basically saying that you have done the first part and found some suspicious links but not the second part do develop actual evidence one way or the other, is that a fair…

I am writing this all on a phone and I am more than happy to produce a 5000 word report which will be posted in 96 hours. I will follow up via a comment here and also send to Michael Forsythe at the New York Times for additional review. You have my word. EDIT: 5000 words not pages

https://i.imgur.com/tqXzgon.jpg

Lol @ flagging this post - follow up on your promise.

Re: NSO hacked WhatsApp to spy on top government officials at U.S. allies

#317

Post by jacquesm »

rshnotsecure wrote: post #63
ChuckMcM wrote: post #51

Earlier quoted context omitted.

So you're saying "typical intelligence analyst stuff" is the reasoning here? Generally analysts produce questions which operations runs down to figure out if what they think is going on, is actually going on. Correct me if I'm wrong here but you're basically saying that you have done the first part and found some suspicious links but not the second part do develop actual evidence one way or the other, is that a fair…

I am writing this all on a phone and I am more than happy to produce a 5000 word report which will be posted in 96 hours. I will follow up via a comment here and also send to Michael Forsythe at the New York Times for additional review. You have my word. EDIT: 5000 words not pages

So, where is that post?

Re: NSO hacked WhatsApp to spy on top government officials at U.S. allies

#318

Post by rshnotsecure »

sergiomattei wrote: post #315
rshnotsecure wrote: post #63

Earlier quoted context omitted.

I am writing this all on a phone and I am more than happy to produce a 5000 word report which will be posted in 96 hours. I will follow up via a comment here and also send to Michael Forsythe at the New York Times for additional review. You have my word. EDIT: 5000 words not pages

???

It’s coming. I’ve got butcher paper on the floor mapping out 2000 ASNs. My wife says I look like one of the detectives tracking down a serial killer with red string. I run my own consulting company, and actually lost my main client due to the above post being interpreted as “anti-China”. That has been an enormous setback.

Anyone can do this research I want to emphasize. Look at any suspicious VPN company. Now look at 10 of them. Now plug some of those names into Shodan.

Bear with me here, but if you then simply Ctrl-F for ASNs with the same name with the same LLCs, you will construct a perfect circle of peering that is an “internet within an internet”. What it seems to be is a poor man’s TOR. While the US gov built a Tor, this is an alternate Dark Web built by someone...you can pass through 1,000 servers on 500 different hosting companies none of which do legitimate business.

(Hope this counts as a mini blog post for now this must be 250 words).

Re: NSO hacked WhatsApp to spy on top government officials at U.S. allies

#319

Post by rshnotsecure »

jacquesm wrote: post #317
rshnotsecure wrote: post #63

Earlier quoted context omitted.

I am writing this all on a phone and I am more than happy to produce a 5000 word report which will be posted in 96 hours. I will follow up via a comment here and also send to Michael Forsythe at the New York Times for additional review. You have my word. EDIT: 5000 words not pages

So, where is that post?

Check below for latest update. Wanted to comment so you got notification. My real name is in my profile with my email address so you’ve got me dead to rights on this one.

Re: NSO hacked WhatsApp to spy on top government officials at U.S. allies

#320

Post by rshnotsecure »

sergiomattei wrote: post #315
rshnotsecure wrote: post #63

Earlier quoted context omitted.

I am writing this all on a phone and I am more than happy to produce a 5000 word report which will be posted in 96 hours. I will follow up via a comment here and also send to Michael Forsythe at the New York Times for additional review. You have my word. EDIT: 5000 words not pages

???

See above and below.
Post reply on HN