Live data from Hacker News

NYT journalist hacked with Pegasus after reporting on previous hacking attempts

citizenlab.ca

1–10 of 330 posts

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#3
So, what is the legality of this? I've not followed much about this at all, but NSO group appears to be an Israeli company.

Do they just sell, or operate the hacking software for their clients? If they operate it, is it illegal for an Israeli company to hack an American citizen (I assume it is illegal in America, but how about Israel?)

Is the sale of hacking software regulated in any way?

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#5

So, what is the legality of this? I've not followed much about this at all, but NSO group appears to be an Israeli company. Do they just sell, or operate the hacking software for their clients? If they operate it, is it illegal for an Israeli company to hack an American citizen (I assume it is illegal in America, but how about Israel?) Is the sale of hacking software regulated in any way?

Since the US government has historically been one of the largest customers in the zero-day market, my guess would be no.

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#6

So, what is the legality of this? I've not followed much about this at all, but NSO group appears to be an Israeli company. Do they just sell, or operate the hacking software for their clients? If they operate it, is it illegal for an Israeli company to hack an American citizen (I assume it is illegal in America, but how about Israel?) Is the sale of hacking software regulated in any way?

yes. mostly just ITAR as far as I know back in 2016.

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#7

So, what is the legality of this? I've not followed much about this at all, but NSO group appears to be an Israeli company. Do they just sell, or operate the hacking software for their clients? If they operate it, is it illegal for an Israeli company to hack an American citizen (I assume it is illegal in America, but how about Israel?) Is the sale of hacking software regulated in any way?

Since the US government has historically been one of the largest customers in the zero-day market, my guess would be no.

The US government is also one of the largest customers of ICBM rockets too. And you would find that it is not an unregulated field at all.

I don’t know about regulations in the field. All I know is that “US gov buys a lot of X, therefore it X is not regulated” is not a convincing argument.

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#8

So, what is the legality of this? I've not followed much about this at all, but NSO group appears to be an Israeli company. Do they just sell, or operate the hacking software for their clients? If they operate it, is it illegal for an Israeli company to hack an American citizen (I assume it is illegal in America, but how about Israel?) Is the sale of hacking software regulated in any way?

My understanding is they sell it, after the Israeli gov't (Israeli Defense Ministry) vets the sale. It is operated by the client. NSO has claimed they do not have any info on targets by the purchaser, and has no way to find out post-sale.

https://www.cbsnews.com/news/interview-with-ceo-of-nso-group...

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#10

So, what is the legality of this? I've not followed much about this at all, but NSO group appears to be an Israeli company. Do they just sell, or operate the hacking software for their clients? If they operate it, is it illegal for an Israeli company to hack an American citizen (I assume it is illegal in America, but how about Israel?) Is the sale of hacking software regulated in any way?

I read that it's export-controlled now in the US,

https://www.theverge.com/2021/10/22/22740155/commerce-depart... ("New US rules on spyware exports try to limit surveillance tech like Pegasus")

edit: and HN thread

https://news.ycombinator.com/item?id=28933981 ("U.S. tightens export controls on items used in surveillance of private citizens")

Post reply on HN