Live data from Hacker News

U.S. State Department phones hacked with Israeli company spyware

reuters.com

31–40 of 651 posts

Re: U.S. State Department phones hacked with Israeli company spyware

#32

>In a public response, NSO has said its technology helps stop terrorism and that they've installed controls to curb spying against innocent targets. For example, NSO says its intrusion system cannot work on phones with U.S. numbers beginning with the country code +1. So the point is to stop terrorism and to do that they've immediately ruled that all Americans aren't terrorists. That doesn't seem like a good metric of…

Reminds me of how some ransomware looks for if your default keyboard language is Russian. If so then it exits, doing nothing.

Re: U.S. State Department phones hacked with Israeli company spyware

#33

I thought the exploited holes were patched by iOS at some point. How are these phones still getting hacked?

Because there is a never-ending supply of vulnerabilities in our smartphones.

A system this complex can never be secure no matter what google/apple PR dep claims.

Re: U.S. State Department phones hacked with Israeli company spyware

#34

> NSO Group said in a statement on Thursday that it did not have any indication their tools were used but canceled the relevant accounts and would investigate based on the Reuters inquiry. Why would they cancel accounts without knowledge of wrongdoing?

Because the US government is one of the few groups that can put real pressure on them and they're in full panic mode

Re: U.S. State Department phones hacked with Israeli company spyware

#35

Is there a timetable when Apple plans to stop using memory-unsafe languages to avoid memory-bugs? If not, how can the amount of zero-days stop with constant development?

You do know that memory-safe languages are developed using memory-unsafe languages, and eventually execute the binary code on the actual CPU?

Re: U.S. State Department phones hacked with Israeli company spyware

#38

> NSO Group said in a statement on Thursday that it did not have any indication their tools were used but canceled the relevant accounts and would investigate based on the Reuters inquiry. Why would they cancel accounts without knowledge of wrongdoing?

And simultaneusly:

- not have any indication their tools were used

- canceled the relevant accounts

Which "relevant" accounts if NSO's tools weren't used?

Re: U.S. State Department phones hacked with Israeli company spyware

#39
post #26

>In a public response, NSO has said its technology helps stop terrorism and that they've installed controls to curb spying against innocent targets. For example, NSO says its intrusion system cannot work on phones with U.S. numbers beginning with the country code +1. So the point is to stop terrorism and to do that they've immediately ruled that all Americans aren't terrorists. That doesn't seem like a good metric of…

So I just have to buy a US phone to evade detection from NSO? And why didn't that logic work for US State Dept phones? I'm honestly of the opinion there is nothing that NSO can say that isn't outright lying. This isn't a normal company in anyway.

I remember reading that some Russian (private sector) computer viruses did not attack computers whose language and locale were set to Russia. It's never about ethics. It's always about making as much money as possible without pissing off powerful people and entities.
Post reply on HN