Live data from Hacker News

Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit

citizenlab.ca

171–180 of 314 posts

Re: Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit

#171

Earlier quoted context omitted.

We have an interal bug bounty program! But it's more of a retainer when you think about it. We basically transfer a six figure dollar amount, in 12 monthly installments, to our developers. Then in return when they find a bug they bring it to attention and fix it. It works pretty well!!

It would be interesting to have a dedicated bug fixer whose only job was hunting bugs. No meetings, no scrum, no design docs, etc.

Kind of like a red team.

Re: Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit

#172

Earlier quoted context omitted.

It’s called selection bias. It’s fun and always acceptable to hate on Israel. It’s also more memorable due to the sensationalization of it. A few years ago bluecoat systems was caught providing deep packet inspection gear to the Syrian government. But that wasn’t Israel so no biggie and you either never heard about it or didn’t pay much attention because it wasn’t Israel. American and European companies do this all t…

You think it is "fun" to hate on Israel?

[deleted]

Re: Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit

#173
post #151
post #78

Is an iPhone safer or a Pixel 4a w/ 5G safer? I seem to hear a lot about iOS 0days and not so much about pixel 0days.

Until recently, iOS 0days were worth a lot of money, more than Android, it also represents a nice target because a relatively few number of OS and hardware configurations make up the vast majority of devices. This means you have to do less configuration/messing around to get your exploit working on a lot of devices. Saying that theres plenty of Android exploits but they tend to get less press for some reason. https:/…

Yep. Currently Android 0day is more expensive than iOS.

https://zerodium.com/program.html

Re: Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit

#174
post #167

Earlier quoted context omitted.

The error here is in considering “America” as a single entity “America” may be more powerful than Israel, but no single American politician is more powerful than AIPAC

AIPAC's secret is the impression it's so powerful, but whenever an American administration wanted to advance a policy AIPAC didn't like (from selling aircraft to the Saudis in the 80s all the way to the Iran Deal), AIPAC melted away. It has no power to defend NSO, and I doubt it even has an interest to.

And yet the Iran deal is gone and not coming back, and recently the US has pushed Arab states to normalize relations with Israel.

Re: Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit

#175
post #167

Earlier quoted context omitted.

AIPAC's secret is the impression it's so powerful, but whenever an American administration wanted to advance a policy AIPAC didn't like (from selling aircraft to the Saudis in the 80s all the way to the Iran Deal), AIPAC melted away. It has no power to defend NSO, and I doubt it even has an interest to.

And yet the Iran deal is gone and not coming back, and recently the US has pushed Arab states to normalize relations with Israel.

Both due to Trump, not AIPAC. Biden is likely to restore the Iran deal, at least in form. US pushing mideast peace is longstanding American policy.

Re: Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit

#176

How come when we hear about this stuff it is always Israeli companies involved? Is ethics not taught in Israeli Computer Science curricula? Those who wrote this exploit are clearly "brilliant" and at least some of them are bound to be reading Hacker News. Is other countries' spyware firms just better at hiding their malware than Israel's is?

Israel has a large security industry with deep ties to their military. More so than other countries.

Re: Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit

#177

Earlier quoted context omitted.

It’s called selection bias. It’s fun and always acceptable to hate on Israel. It’s also more memorable due to the sensationalization of it. A few years ago bluecoat systems was caught providing deep packet inspection gear to the Syrian government. But that wasn’t Israel so no biggie and you either never heard about it or didn’t pay much attention because it wasn’t Israel. American and European companies do this all t…

NSO is owned by a UK-based private equity group. It's not even an "Israeli" company.

Oh, that's such formal crap. The Founders are Israeli, RND is Israeli, most employees are Israelis in israel. It's an Israeli company. As an Israeli with very similar background to the people who work there I'm ashamed of our industry involvement in this disgusting business.

Re: Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit

#178
post #107

Earlier quoted context omitted.

They didn't just whine, they sued Facebook in Israeli court (and won). Facebook was forced to reinstate their accounts: https://www.cyberscoop.com/facebook-nso-group-accounts-reins...

If Facebook was sincere, they could have held their ground. The Israeli government would then have to decide whether it was willing to ban a platform so widely used in their country or to simply fine them. Instead, FB decided to comply. Just a bunch of dead brown people — who cares?

The Israeli government has absolutely no say in how any of this plays out, that is the entire point of an independent judiciary. The lawsuit and sanctions are decided by the courts based on existing laws and precedent, and for them Facebook's size or position in the Israeli market does not (and should not) hold any weight whatsoever.

The most the legislative can do is amend the relevant laws to make what Facebook tried to do legal going forward, and that still wouldn't apply retroactively. The odds of the government choosing to extensively overhaul its consumer protection laws for the interests of a single multinational in a single lawsuit aren't great.

Re: Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit

#179
post #46

America should stop giving aid to Israel as long as Israeli companies are going to assist in getting journalists arrested/murdered/dismembered.

WhatsApp "attempted" to get NSOs export license revoked and failed. How would you expect America to stop two of their allies from dealing with each other (with a potential courtship in the works)? Especially when America itself gets major weapons contracts to look the other way? This will just continue to get worse. More journalists and human rights activists will die because some delusional maniacs feelings were hur…

The US is actively encouraging this business and these weapon deals. If interested in it, the US could thwart it in a second.

Re: Journalists Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit

#180
post #163

Earlier quoted context omitted.

Netanyahu ran campaign ads about how he undermined and disrespected Obama, even while getting Obama to give him a record $38 billion aid. He colluded with Flynn and the Russians to undermine Obama and promote Trump. He gets whatever he wants from the US. When he wanted to attack BDS he got the first piece of legislation out of the 2019 US Senate, bill S-1. That's more US political power than Chuck Schumer.

"Netanyahu ran campaign ads about how he undermined and disrespected Obama" More accurately, he ran campaign ads arguing that he fought for Israel against the Iran deal. He further presented himself as a victim of Obama's disrespect, especially since the 'shoe on table' incident. [EDIT: "while getting Obama to give him a record $38 billion aid" Longstanding American policy to bolster its client, also a part of the Ca…

With the GOP his power is substantial. He is dangerous to Israel and the US. Dark times :(
Post reply on HN