Live data from Hacker News

A Saudi woman's iPhone revealed hacking around the world

reuters.com

51–60 of 184 posts

Re: A Saudi woman's iPhone revealed hacking around the world

#52
post #49

Isn't the walled garden and locked down OS/hardware supposed to prevent these things?

Only provably correct software would prevent such things. A walled garden could make it simpler to enforce that only software proved correct can be installed, but without the proof, it does not guarantee much,,only makes certain things less probable. Writing provably correct software us now a rare and expensive engineering feat. Most consumer OSes have nothing of thus sort, sadly. And I mean just the limited set of s…

"Beware of bugs in the above code; I have only proved it correct, not tried it." https://www-cs-faculty.stanford.edu/~knuth/faq.html

Re: A Saudi woman's iPhone revealed hacking around the world

#53
post #7

Earlier quoted context omitted.

How does one know which category they are in?

Think about who would want to spy on you, what they'd want to know, and how much they'd be willing to spend to know it. If the most they could get out of you was a few thousand bucks from your bank account and maybe your email password, you're probably in the first category. On the other hand, if you have access to highly confidential information (think classified government info or you're literally working on the ne…

Who will target you if you are working on next iPhone?

Re: A Saudi woman's iPhone revealed hacking around the world

#54
post #51

Why doesn’t Apple have a team doing what Citizens Lab does, instead of victims contacting a third party? Also, I wonder if Google Pixel is more secure?

Because Animoji was more important.

Incase anyone was wondering, yes the amount they spent on that particular feature vastly eclipsed their spend on the kinds of teams that could have caught this.

Re: A Saudi woman's iPhone revealed hacking around the world

#55
post #33

Earlier quoted context omitted.

"Cook's egg" is a recommended reading. Summary here (spoilers ahead): https://icdt.osu.edu/cuckoos-egg

Was "Cuckoo's Egg" autocorrected to "Cook's egg"?

Yes, indeed. I don't see an edit option.

Re: A Saudi woman's iPhone revealed hacking around the world

#56
post #53

Earlier quoted context omitted.

Think about who would want to spy on you, what they'd want to know, and how much they'd be willing to spend to know it. If the most they could get out of you was a few thousand bucks from your bank account and maybe your email password, you're probably in the first category. On the other hand, if you have access to highly confidential information (think classified government info or you're literally working on the ne…

Who will target you if you are working on next iPhone?

China.

Xiaomi, Huawei, Oppo, Honor... there are quite a few Chinese phone brands that would benefit from knowing what Apple are working on.

Re: A Saudi woman's iPhone revealed hacking around the world

#57
post #53

Earlier quoted context omitted.

Think about who would want to spy on you, what they'd want to know, and how much they'd be willing to spend to know it. If the most they could get out of you was a few thousand bucks from your bank account and maybe your email password, you're probably in the first category. On the other hand, if you have access to highly confidential information (think classified government info or you're literally working on the ne…

Who will target you if you are working on next iPhone?

everyone

Re: A Saudi woman's iPhone revealed hacking around the world

#58
post #51

Why doesn’t Apple have a team doing what Citizens Lab does, instead of victims contacting a third party? Also, I wonder if Google Pixel is more secure?

Speaking of Google's security, this gem was in the article, "Soon after her release from jail, the activist received an email from Google warning her that state-backed hackers had tried to penetrate her Gmail account."

Re: A Saudi woman's iPhone revealed hacking around the world

#60

Earlier quoted context omitted.

Holy shit. My relatives have asked me in the past "could this [image|video|other supposedly innocuous file format] be a virus or hack my phone?". I've always told them not to worry. Can't do that anymore.

These exploits are only really an issue for your grandparents and whoever if some large-scale mass hack is happening[^2]. As long as they stay up-to-date, anyone not targeted by nation state actors and not holding millions in cryptocurrency[0] likely has nothing to worry about, as these exploits are better used hacking journalists trying to expose corruption or political opponents running against the incumbent[1]. 0:…

You're really cavalier about whether widespread hacks happen. See any of the text message attacks from the past decade.
Post reply on HN