Live data from Hacker News

Scanning your iPhone for Pegasus

arkadiyt.com

21–30 of 81 posts

Re: Scanning your iPhone for Pegasus

#21

Earlier quoted context omitted.

And here I thought iOS with its walled garden approach would make these kinds of attacks impossible.

Walls have never been fool proof, though that doesn't mean building them is a waste of time.

They built it so high up nobody could tell what’s going on until you jailbreak the device.

Re: Scanning your iPhone for Pegasus

#24

Earlier quoted context omitted.

And here I thought iOS with its walled garden approach would make these kinds of attacks impossible.

Walls have never been fool proof, though that doesn't mean building them is a waste of time.

The walls are financial, not security. The security is a lie.

Re: Scanning your iPhone for Pegasus

#25
Isn't "Pegasus" transmitted via a well-crafted iMessage ?

If only there was a central choke-point, globally, for all iMessage messages that could weed out particularly ill-formed messages such that they never reach your phone ...

If only ...

Re: Scanning your iPhone for Pegasus

#26

I ran this tool and found a trace that I was infected (malware detected in CrashReporter.plist). Any clue what I should be doing, if anything, to address this?

I'm no expert, but if you ask me, I would completely erase the phone, upgrade it via DFU, and start fresh. After setting it up again, run another backup and rerun the tool to doublecheck. That or ditch the phone

What’s the best procedure for getting data off a compromised iPhone before wiping? Plugging it into other devices via usb or backing up to iCloud seems sketchy to me but maybe I’m overly paranoid.

Re: Scanning your iPhone for Pegasus

#27

I ran this tool and found a trace that I was infected (malware detected in CrashReporter.plist). Any clue what I should be doing, if anything, to address this?

Reach out to Amnesty Tech and/or Citizen Lab for help establishing whether this is a real infection or a false positive.

If it's real: Adjust your behavior to account for the fact that once you know you're a target, there is no device on the market and no practical measures you can use to maintain safety. Assume everything you do on or near a computer used by you or a close contact is being monitored. The level of effort needed to maintain strong security in the context of being a target is astronomically higher than any individual can deal with.

Re: Scanning your iPhone for Pegasus

#28
post #25

Isn't "Pegasus" transmitted via a well-crafted iMessage ? If only there was a central choke-point, globally, for all iMessage messages that could weed out particularly ill-formed messages such that they never reach your phone ... If only ...

Because of E2EE that choke point is necessarily the software update process.

Re: Scanning your iPhone for Pegasus

#29
post #17

Earlier quoted context omitted.

I'm no expert, but if you ask me, I would completely erase the phone, upgrade it via DFU, and start fresh. After setting it up again, run another backup and rerun the tool to doublecheck. That or ditch the phone

This is an expert response.

The last three words are.
Post reply on HN