Live data from Hacker News

U.S. State Department phones hacked with Israeli company spyware

reuters.com

191–200 of 651 posts

Re: U.S. State Department phones hacked with Israeli company spyware

#191

> NSO Group said in a statement on Thursday that it did not have any indication their tools were used but canceled the relevant accounts and would investigate based on the Reuters inquiry. Why would they cancel accounts without knowledge of wrongdoing?

Remember that this group's tools have been used to murder journalists, which they are unapologetic about.

Dead journalists can't close them down, but the US government can.

Re: U.S. State Department phones hacked with Israeli company spyware

#192
post #168

Earlier quoted context omitted.

What military operations would those be?

Stuxnet and the intervention in Syria just off the top of my head.

The intervention in Syria? That's a military operation done by the U.S for Israel? How did you come up with that? If there's no Israel tomorrow the entire region is still messed up with possibly tens of millions of new refugees flooding Europe. It's not all about Israel.

Re: U.S. State Department phones hacked with Israeli company spyware

#193
post #187

This is a typical "shadow government" symptom. You have forces working within the government that 1) have their own agendas; 2) have connection to international communities, usually military-intelligence ones; 3) have almost zero regulation; 4) even many high ranking government officials don't know about them because they are brotherhood-like closed circles. This reminds me of Operation Gladio or Propaganda Due but d…

> 3) have almost zero regulation; What would shadow government regulation look like?

Maybe stop funding them, for a start?

Congressional oversight used to be a thing.

Snowden showed the NSA lied to congress. No heads rolled.

Re: U.S. State Department phones hacked with Israeli company spyware

#195
post #187

This is a typical "shadow government" symptom. You have forces working within the government that 1) have their own agendas; 2) have connection to international communities, usually military-intelligence ones; 3) have almost zero regulation; 4) even many high ranking government officials don't know about them because they are brotherhood-like closed circles. This reminds me of Operation Gladio or Propaganda Due but d…

> 3) have almost zero regulation; What would shadow government regulation look like?

More light and transparency = less shadows

Re: U.S. State Department phones hacked with Israeli company spyware

#196

I don't understand the focus on NSO in these stories. If U.S State Department personnel in Uganda were shot from an M-16, would the headline mention "an American arms manufacturer"? No, because it's ridiculous. For better or worse, NSO's product is a weapon. How is it any different from an M-16? Where is the outrage towards the people who used this weapon against the State Department?

It's more like a PMC ala Wagner than selling an M-16. They essentially run the technical side of operations and provide the talent.

Re: U.S. State Department phones hacked with Israeli company spyware

#197

Earlier quoted context omitted.

The U.S basically protects the whole of Europe by subsidizing NATO. It's probably in the trillions. Sorry but Trump had a point there. What it gives Israel is peanuts compared to that. Without U.S support to Europe who knows what happens, maybe the Russians and Chinese start looking at Europe as easy prey to pick on. Also the obsession with Israel isn't a uniquely American thing, it's the same in France and Canada an…

The attacks on NATO are such a weird thing. US support of NATO isn't a charity operation, there are strategic and economic benefits to the US from NATO participation that greatly exceed the expenses. If the argument is that the United States shouldn't be a global power, that it should dismantle the US military and be a demure, multilateral player in the international space, sure, attack NATO. However, attacking NATO…

I'm not attacking NATO. I'm saying the U.S is subsidizing Europe's defense in the trillions (if we count since WW2 end). It could be beneficial to the U.S, or not. I'm only saying U.S aid to Israel is not unique and is peanuts compared to the NATO subsidy. People here like saying they are super focused on Israel because of the 3 billion annual subsidy the U.S gives to Israel. I call bullshit on that.

Re: U.S. State Department phones hacked with Israeli company spyware

#198
post #189

Is anyone working on a microkernel design for privacy-sensitive devices (like phones) that would prevent outright this class of kernel-level arbitrary code execution exploits? We're stuck with iOS and Android for the foreseeable future, but is there hope that we'll get this right some day? Actually, would a microkernel design even be sufficient? Given that hackers exploit deserialization, memory safety, and variable…

Many of the kernel issues exploited in iOS are caused indirectly by its microkernel architecture, namely, the use of "ports" for kernel to kernel and kernel to user land IPC. For example: https://bugs.chromium.org/p/project-zero/issues/detail?id=21... .

Microkernel vs monolithic kernel has little to do with this, IMO. The main issues are asynchronous complexity and memory safety.

Also, a lot of your most sensitive data lives in userland. If someone gets access to the iMessage sandbox and the message database files, that's your most sensitive and privileged data gone, no kernel touched.

Re: U.S. State Department phones hacked with Israeli company spyware

#199

> NSO Group said in a statement on Thursday that it did not have any indication their tools were used but canceled the relevant accounts and would investigate based on the Reuters inquiry. Why would they cancel accounts without knowledge of wrongdoing?

And simultaneusly: - not have any indication their tools were used - canceled the relevant accounts Which "relevant" accounts if NSO's tools weren't used?

Presumably the full accusation is "Entity ABC used NSO tools for XYZ". So the reaction was to cancel ABC's account while NSO investigates whether ABC actually did use the tools for XYZ, or whether ABC was only using them for other (approved) purposes.
Post reply on HN