31–40 of 101 posts
Instead of blaming the victims of pegasus, we should focus our attention on the lack of actions from key policymakers and regulatory bodies. It is not possible for every individual to be a technical expert when it comes to malware removal, but we can reduce the likelihood of misusing surveillance software by creating an ethical framework around it, backed by nations that value freedom and democracy.
I also wonder if there was something like that when windows mobile was on the market.
I wonder what would have happened to windows phone/lumias if things had turned out differently. I also wonder if there was something like that when windows mobile was on the market.
https://github.com/AmnestyTech/investigations/issues/11
If anyone can help on that front it'd be much appreciated.
I wonder what would have happened to windows phone/lumias if things had turned out differently. I also wonder if there was something like that when windows mobile was on the market.
Earlier quoted context omitted.
> it would be easy to guarantee that you can get a rootkit-free phone The problem in this case is that you get the malware installed through a no-click required iMessage and not a "supply chain" attack on the image your phone is running on. How would that help?
It would help because knowledgeable people would get to pick what software they run on their phones and iMessage probably wouldn't be on the list.
Earlier quoted context omitted.
I'm all for having the right to repair. I'm not convinced any of the folks involved ability to root would prevent the situation described.
If you could safely (on the hardware level) replace image of the phone with another, it would be easy to guarantee that you can get a rootkit-free phone - all you need is a trusted image.
I bet you, that image will be provided by the trustworthy people from NSO, free of charge or at a price! Whatever makes you trust their image.
IMHO devices should be root-able but with high barriers of entry, something like soldering should be involved. If you are after doing something that you don't understand but a stranger on the internet told you to do it you shouldn't be able to do it.
I just want to remind you that quite recently a few police agencies come together, built a "secure messaging app", fed it to the criminals and tracked all their communication until gather enough information to take down their entire operation.[0]
Or the time when CIA run a Swiss encryption company[1]
Earlier quoted context omitted.
If you could safely (on the hardware level) replace image of the phone with another, it would be easy to guarantee that you can get a rootkit-free phone - all you need is a trusted image.
> it would be easy to guarantee that you can get a rootkit-free phone The problem in this case is that you get the malware installed through a no-click required iMessage and not a "supply chain" attack on the image your phone is running on. How would that help?
Earlier quoted context omitted.
If you could safely (on the hardware level) replace image of the phone with another, it would be easy to guarantee that you can get a rootkit-free phone - all you need is a trusted image.
> all you need is a trusted image I bet you, that image will be provided by the trustworthy people from NSO, free of charge or at a price! Whatever makes you trust their image. IMHO devices should be root-able but with high barriers of entry, something like soldering should be involved. If you are after doing something that you don't understand but a stranger on the internet told you to do it you shouldn't be able to…
I have seen some manuals were released and some tools reverse engineered. What is currently the best link for a deep technical overview of how these tools work/worked?
As I did not get any replies I share what I found. If anybody has better or more detailed resources, please be kind and feed our curious minds: "Technical Analysis of Pegasus Spyware" https://info.lookout.com/rs/051-ESQ-475/images/lookout-pegas... "Pegasus Spyware" https://en.wikipedia.org/wiki/Pegasus_(spyware) "The Million Dollar Dissident" https://citizenlab.ca/2016/08/million-dollar-dissident-iphon...