Is an iPhone safer or a Pixel 4a w/ 5G safer? I seem to hear a lot about iOS 0days and not so much about pixel 0days.
Until recently, iOS 0days were worth a lot of money, more than Android, it also represents a nice target because a relatively few number of OS and hardware configurations make up the vast majority of devices. This means you have to do less configuration/messing around to get your exploit working on a lot of devices.
It’s not clear if this was involved in the exploits mentioned here.
It has been proven to be a weak point in their implementation with previous exploits, and it's likely to be the case here - it's a good guess at least. Will be interesting to read a write-up.
Apple has been hardening their software to use NSSecureCoding and similar since then, so I would be surprised if this would still be a problem (since this is fairly easy to check for and fix). My guess is that this is probably a run-of-the-mill overflow or corruption.
Apple needs to do a serious architecture of how its own apps work. Its clearly unacceptable that their own apps are not sandboxed to the same level as everything else. If its not possible to implement all of imessage with the public APIs then they need to find a way to expose those private APIs publicly in a safe way. imessage and facetime have been a constant source of exploits.
Apple has never devoted enough care, resources, or money to cybersecurity. It’s just a fact. They’ve also never devoted enough care, resources, or money to network architecture and how important availability is (with fairness, they have improved in this area in the last couple of years due to the major iCloud outages they had). Apple doesn’t hire mainstream IT people and cybersecurity people from the enterprise realm…
Apple has some of the top security people in the business. If “enterprise” experience is your bar, they have former Microsoft, Amazon, Google people ranging from junior engineers to VPs, including their current CISO. They have also hired non-enterprise people who wrote exploits like the one NSO used, as well as other prominent hackers.
Journalists as messengers have always been targeted, and even killed, and it seems that Apple’s messaging system was the attack vector here. While the article decries NSO being nefarious and selling to suspect “authoritarian” countries, high schools here in our democratic US have been buying hacking solutions to spy on students: https://gizmodo.com/u-s-schools-are-buying-phone-hacking-tec...
That isn’t a spy tool. It’s for forensics. You have to hand over your phone and unlock it voluntarily, and physically attach it to that thing and dump it. Very different.
> because one country is a superpower and a different country is the client. If you have really been paying attention to the US-Israel relationship you know that this is not true.
I say that precisely because I have been paying attention. The opposite impression is useful for both sides, but in reality America calls the shots. Israel would go against America's position only on issues it considers existential or close to such. I doubt NSO even registers.
Netanyahu ran campaign ads about how he undermined and disrespected Obama, even while getting Obama to give him a record $38 billion aid. He colluded with Flynn and the Russians to undermine Obama and promote Trump. He gets whatever he wants from the US. When he wanted to attack BDS he got the first piece of legislation out of the 2019 US Senate, bill S-1. That's more US political power than Chuck Schumer.
I doubt it's macOS only, if you remember EternalBlue, that was called that way because it kept bluescreening on machines the NSA tested it on ...
Do you have a source on the blue screening?. Usually code names are random but can be less random within a group of exploits/projects (such as eternalblue, eternalromance, eternalsyngery, eternalchampion)
Not OP, but just google Windows7 & eternalblue
EDIT: I realise now that does not answer your question. Apologies.
America has no qualms killing journalists in their sphere of influence, and they even prosecute journalists for reporting on their killings. See "Collateral Murder."
You better watch and read up on collateral murder again, because it sure as shit wasn’t an example of America having no qualms about killing journalists.
Two journalists were killed for being with people committing no hostile actions, the soldiers involved in the actions laughed and taunted those they slaughtered, the government then lied about what had happened for years, and the only people to face punishment are Manning and Assange. And no, carrying weapons in a war zone does not make this acceptable.
When exactly does the US give a shit about killing journalists?
America should stop giving aid to Israel as long as Israeli companies are going to assist in getting journalists arrested/murdered/dismembered.
not sure why the USA love Israel so much
From [1]: It's a tight interplay of America's long-running Middle East strategy, US public opinion/electoral politics, and a pro-Israel lobbying campaign that is effective.
Related to the pro-Israel lobbying, the documentary "The Occupation of The American Mind"[2] delves into the propaganda effort that was carried out for years to shape the American public opinion about Israel. I quite recemmend it.
America didn't stop giving aid to Israel despite 53 years of military occupation and apartheid. You think this is going to be the thing that changes the status quo on Israel?
Sponsoring international terrorism used to be a real faux pas in the U.S. I guess those days are over.
Hardly.. I still remember when it was considered edgy but acceptable for wealthy Americans to fund the IRA
>Requiring that we deal with every single one of those problems simultaneously else we shouldn't bother with any of them doesn't seem productive. Then deal with the domestic ones first, the ones we have the most control over. People only care about these issues when the solution is "punish the country," a solution that likely causes more suffering than it stops.
Oh yea, NSO is totally not causing suffering. It's a benefit to the world, right?
No, punishing an entire country for the NSO's actions won't necessarily prevent more suffering than it causes.