Live data from Hacker News

NYT journalist hacked with Pegasus after reporting on previous hacking attempts

citizenlab.ca

31–40 of 330 posts

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#31

So how do we protect our privacy from the advance of technology? It doesn't seem possible. Just going after NSO is useless.

Rejecting the smartphone might be a start.

I don't think you can escape the use of the smart phone. But treating them as "throw-away", as not your device, etc.

I think the original landlines, which were/are a few switches connected to a write on one side and some microphones on the other, were close to inherently insecure. Phones haven't ever been "your device" whereas a laptop might, maybe be rendered trustworthy.

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#32
post #22

Forget Y Combinator -- come build the next great surveillance start-up at the IDF's Unit 8200, the world's greatest hacker school and incubator for mass surveillance start-ups. With generous subsidies from US taxpayers, Unit 8200 lets you level up your surveillance game by practicing on 4.5 million Palestinian beta-testers. (Go nuts, it's not like they can sue you!) Plus, say goodbye to those moral qualms -- at 8200,…

[deleted]

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#33
post #22

Forget Y Combinator -- come build the next great surveillance start-up at the IDF's Unit 8200, the world's greatest hacker school and incubator for mass surveillance start-ups. With generous subsidies from US taxpayers, Unit 8200 lets you level up your surveillance game by practicing on 4.5 million Palestinian beta-testers. (Go nuts, it's not like they can sue you!) Plus, say goodbye to those moral qualms -- at 8200,…

@dang This comment is negative, and doesn't contribute anything productive to the conversation. Please remove

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#34

So how do we protect our privacy from the advance of technology? It doesn't seem possible. Just going after NSO is useless.

It depends on what your threat model is. If its individuals, local law enforcement, or even national law enforcement (context dependent) you are trying to hide from, you can obtain phones with cash and make it very difficult to link them to you (use a sim card bought with cash and never give out that number, use a VOIP service for your primary number, use an OS that doesn't send back much telemetry, turn off location, never use the phone near your home, etc).

If your threat model includes targeted attack by a major intelligence agency, just accept that you are likely screwed.

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#35

So how do we protect our privacy from the advance of technology? It doesn't seem possible. Just going after NSO is useless.

Hope that White Hats publish? The zero-click exploits have to be patched by Apple after they've been exposed. It all depends who finds it and when. Really not much you can do with zero-clicks. Don't be rich or famous I guess? Or don't use smartphones.

A proper bug bounty program facilitates that, however, it seems that Apple has mismanaged theirs to the effect that it drives frustrated researchers to not report their findings to Apple.

E.g. https://news.ycombinator.com/item?id=28469193 and https://news.ycombinator.com/item?id=27564236

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#36
post #26

I am but one atom in a molecule in a drop in an ocean, but I have pledged to never be involved in the hiring of any person who has had any willing association with any organization responsible for efforts similar to Pegasus, with no exceptions. I will also immediately resign any job that violates the above as well. Trends like this are not to be taken lightly - for the first time in human history, the concept of an a…

I can't get behind bifurcation of job market based on what political side you belong to. This seems destructive at best, dangerous at worse. It's like the classic Palantir vs Google argument.

I won't hire anyone if they show any sort of activism at work.

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#37
post #26

I am but one atom in a molecule in a drop in an ocean, but I have pledged to never be involved in the hiring of any person who has had any willing association with any organization responsible for efforts similar to Pegasus, with no exceptions. I will also immediately resign any job that violates the above as well. Trends like this are not to be taken lightly - for the first time in human history, the concept of an a…

I can't get behind bifurcation of job market based on what political side you belong to. This seems destructive at best, dangerous at worse. It's like the classic Palantir vs Google argument. I won't hire anyone if they show any sort of activism at work.

This is not a political argument. If you willingly participate in the construction and deployment of technological systems that are designed to be used to monitor, suppress and ultimately threaten the physical security of people who are non-violently opposed to the current group of people in power, you have essentially declared yourself an enemy of mankind, and I choose to personally act accordingly.

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#38
post #37

Earlier quoted context omitted.

I can't get behind bifurcation of job market based on what political side you belong to. This seems destructive at best, dangerous at worse. It's like the classic Palantir vs Google argument. I won't hire anyone if they show any sort of activism at work.

This is not a political argument. If you willingly participate in the construction and deployment of technological systems that are designed to be used to monitor, suppress and ultimately threaten the physical security of people who are non-violently opposed to the current group of people in power, you have essentially declared yourself an enemy of mankind, and I choose to personally act accordingly.

Would you hire a plumber if they worked at an ammunitions factory before?

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#39
post #8

So, what is the legality of this? I've not followed much about this at all, but NSO group appears to be an Israeli company. Do they just sell, or operate the hacking software for their clients? If they operate it, is it illegal for an Israeli company to hack an American citizen (I assume it is illegal in America, but how about Israel?) Is the sale of hacking software regulated in any way?

My understanding is they sell it, after the Israeli gov't (Israeli Defense Ministry) vets the sale. It is operated by the client. NSO has claimed they do not have any info on targets by the purchaser, and has no way to find out post-sale. https://www.cbsnews.com/news/interview-with-ceo-of-nso-group...

US DOJ has notably secured convictions against spyware authors that simply sold the software. There is no legal distinction between "dude in his apartment" versus "multinational Israeli defense contractor" in this regard.

Re: NYT journalist hacked with Pegasus after reporting on previous hacking attempts

#40
post #26

I am but one atom in a molecule in a drop in an ocean, but I have pledged to never be involved in the hiring of any person who has had any willing association with any organization responsible for efforts similar to Pegasus, with no exceptions. I will also immediately resign any job that violates the above as well. Trends like this are not to be taken lightly - for the first time in human history, the concept of an a…

I can't get behind bifurcation of job market based on what political side you belong to. This seems destructive at best, dangerous at worse. It's like the classic Palantir vs Google argument. I won't hire anyone if they show any sort of activism at work.

Is “not wanting to work with surveillance” an example of a political opinion from the left, or from the right? It kinda just seems like a personal preference.
Post reply on HN