Just use dumb phones. Maybe one old smartphone purely for business to minimize personal information leak.
‘Zero-click’ hacks are growing in popularity
41–50 of 408 posts
Re: ‘Zero-click’ hacks are growing in popularity
#42Just use dumb phones. Maybe one old smartphone purely for business to minimize personal information leak.
dumb phones have their own problems
Re: ‘Zero-click’ hacks are growing in popularity
#43Qubes OS defends even from such attacks: it doesn't show non-ASCII symbols in window titles in dom0: https://www.qubes-os.org/doc/config-files . I think this OS deserves more attention. By the way, new version 4.1 is out: https://www.qubes-os.org/news/2022/02/04/qubes-4-1-0/ .
Also segregates every app/workspace into a different vritualized system IIRC
Re: ‘Zero-click’ hacks are growing in popularity
#44Rust won't be the miracle stopping this. Porting unveil/pledge to all OSes will.
Re: ‘Zero-click’ hacks are growing in popularity
#45Not to go all 'Rust Evangelism Strike Force' but almost universally, these exploits leverage memory unsafety somewhere in the stack, usually in a parser of some kind (image, text, etc). The fact that this is still tolerated in our core systems is a pox on our industry. You don't have to use Rust, and it won't eliminate every bug (far from it), but memory safety is not optional.
We truly need to work more towards eliminating every memory unsafe language in use today, until then we're fighting a forest fire with a bucket of water.
Re: ‘Zero-click’ hacks are growing in popularity
#46As a software engineer I still don't understand how this is even possible. What kind of logic behind a URL preview can bypass everything? I think companies like NSO Group are just finding backdoors not software bugs.
This one is a good example: https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i... Really worth the read, it was quite eye-opening. > JBIG2 doesn't have scripting capabilities, but when combined with a vulnerability, it does have the ability to emulate circuits of arbitrary logic gates operating on arbitrary memory. So why not just use that to build your own computer architecture and script that!? That's exa…
Holy shit
Re: ‘Zero-click’ hacks are growing in popularity
#47Years ago we used to regularly have worms that’d infect millions of computers without any clicks at all.
The truth is that “Zero-Click” hacks are becoming increasingly rare.
But of course everything is new for journos unfamiliar with the field.
Re: ‘Zero-click’ hacks are growing in popularity
#48Qubes OS defends even from such attacks: it doesn't show non-ASCII symbols in window titles in dom0: https://www.qubes-os.org/doc/config-files . I think this OS deserves more attention. By the way, new version 4.1 is out: https://www.qubes-os.org/news/2022/02/04/qubes-4-1-0/ .
Not supporting unicode as a feature leaves out most of the world’s population. I’m not interested in such “features” as a non-native English speaker.
No post body was provided.
Re: ‘Zero-click’ hacks are growing in popularity
#49Years ago we used to regularly have worms that’d infect millions of computers without any clicks at all. The truth is that “Zero-Click” hacks are becoming increasingly rare. But of course everything is new for journos unfamiliar with the field.
[deleted]
Re: ‘Zero-click’ hacks are growing in popularity
#50There are no laws in Israel preventing companies like NSO from building and selling zero-day and zero-click exploits? Without proper regulations the Israeli government is creating a sophisticated and dangerous platform for these kind of illegal attacks.