191–200 of 327 posts
Earlier quoted context omitted.
It doesn't matter. The Whatsapp exploit affected both IOS and Android: https://appleinsider.com/articles/19/05/13/whatsapp-vulnerab...
That's interesting. How would that work? Under Android, all apps effectively run inside a Java sandbox, right? So how would the attackers be able to install spyware through Whatsapp?
Is it that easy to be hacked with WhatsApp?
Well, here's a list of known WhatsApp hacks that were revealed in 2019: Call hack [0]: https://www.wired.com/story/whatsapp-hack-phone-call-voip-bu... Video hack [1]: https://thehackernews.com/2019/11/whatsapp-hacking-vulnerabi... GIF hack [2]: https://thehackernews.com/2019/10/whatsapp-rce-vulnerability... That call hack was famously used by NSO, hitting thousands of people [3]: https://thehackernews.com/2019/10/wha…
Geez that seems pretty incompetent.
Pavel Durov argued that WhatsApp's vulnerabilities are intentionally created as part of surveillance programs with government agencies. [1] If that were true, Bezos's case would be an example of how that approach to security is double-edged. Backdoors can be just as useful to foreign intelligence as they are to whoever pushed for their implementation. [1] https://t.me/s/durov/109
That's one hell of a tinfoil-hat theory. How would you even orchestrate that from within a public company with so many developers involved?
Earlier quoted context omitted.
As an engineer that has basic permissions to our build and deployment system (unrelated non communication application) I could pretty easily think of multiple steps in the build where I could inject and link in pretty much arbitrary code. For instance, anything that can hook directly on a build machine, or artifact upload, or even just simply precompiled into one of the black-box 3rd party dependencies that basically…
Is the "our" you're referring to Whatsapp? If not, then I'm not sure how much we can derive from your experience. There are places that take build and deployment security much more seriously than what you're describing.
Earlier quoted context omitted.
Not orchestrated, but happily tolerated. All Google needs is to be able to plausibly deny complicity, but the other practices of Google (such as not offering warrant canaries on all Google accounts) indicate that Google is eager to cooperate and please governments, so it would have been easy to leave a few doors unlocked, hire a plant (with solid itsec skills), etc.
Was this reported in the news? Why did I not hear about it?
Earlier quoted context omitted.
Yeah, I was using semi-facetious understatement. He's very brazen for someone in his position.
Thankfully he is loved by the West and is untouchable, goes a long way when you are a maniacally evil despot with a penchant for torture. Who are the bad guys again? Didn't watch the tele today, they usually tell me.
Earlier quoted context omitted.
This reminds me of the way that Barrack Obama tried to keep his personal cellphone once he became president. Having a personal relationship with the wealthy and powerful is a unique thing since these are the ultimate decision makers. I would guess that Bezos or anyone like him chats frequently with very powerful people and that this is factor in him maintaining his own power and influence. And mobile devices would se…
I shudder to think what would have happened if Obama had ultimately refused to give up his personal phone, and every half-talented hacking group on the planet had pwned it six ways from Sunday—what a national security disaster that would have been! Oh wait
One thing which this article doesn't address at all, is what is the beef between MBS and Bezos? Why would the Saudi prince leak this data? How did Amazon upset him?
Bezos owns the Washington Post. Jamal Khashoggi was a journalist for WaPo.
Follow the white rabbit....
Earlier quoted context omitted.
Where's the Feds on this? I don't find it comforting that attacks happening on the US's free press go unanswered by law enforcement. We should be indicting MBS.
Not only has the US president declared the press the "enemy of the people", he also has a personal vendetta against Jeff Bezos for hurting his feelings. And he's got a personal lackey doing his personal bidding at the head of the DOJ. If anything, it's more plausible to have been directed by the President (though it probably wasn't) than for any consequences of these actions to come from this administration (which ce…