Live data from Hacker News

UK Government Officials Infected with Pegasus

citizenlab.ca

11–20 of 381 posts

Re: UK Government Officials Infected with Pegasus

#11

I'm surprised this isn't a major diplomatic incident between the UK and Israel too, since the Israeli intelligence company was supposedly "closely monitoring how their customers were using the software" or akin to that. Like, yeah, blame the UAE mostly for this but let's also have a discussion about why this was sold to anyone who would pay with no oversight at all. Western countries need to do better.

3rd and 4th party collection are a hell of a drug

Re: UK Government Officials Infected with Pegasus

#12
And what were GCHQ, MI6 and NCSC doing to protect our prime-minister at this time?

We have a problem in democratic nations. I've written about it here [1]. Bruce Schneier has also addressed it in his own way.

Our lack of any framework for civic cybersecurity is a disgrace. People in future ages will look back on our time as a wild-west.

A solution can only come from a ground-up awareness through education.

[1] http://www.icicte.org/assets/icicte2019_5.4_farnell.pdf

Re: UK Government Officials Infected with Pegasus

#13
The question is then what phone exists that is immune from this? A flip phone? A Nokia 1011? I might be completely misinformed but seems like SIM card and the underlying OS is vector. What happens if I use a cell phone from late 90s and early 2000s? What is there to hack with those flip phones? JavaME over the wire? What if the cell phone dates even further?

Legitimately curious what options is there. Could If you are someone of interest then it seems like having a smartphone is an automatic liability. What then solution is possible since sending and reading a simple text message is enough to escalate privilege?

Re: UK Government Officials Infected with Pegasus

#14

And what were GCHQ, MI6 and NCSC doing to protect our prime-minister at this time? We have a problem in democratic nations. I've written about it here [1]. Bruce Schneier has also addressed it in his own way. Our lack of any framework for civic cybersecurity is a disgrace. People in future ages will look back on our time as a wild-west. A solution can only come from a ground-up awareness through education. [1] http:/…

> And what were GCHQ, MI6 and NCSC doing to protect our prime-minister at this time?

Nobody is perfect - but there are people who blatantly ignore ITSEC best practices and are therefore almost unprotectable.

Re: UK Government Officials Infected with Pegasus

#15

The question is then what phone exists that is immune from this? A flip phone? A Nokia 1011? I might be completely misinformed but seems like SIM card and the underlying OS is vector. What happens if I use a cell phone from late 90s and early 2000s? What is there to hack with those flip phones? JavaME over the wire? What if the cell phone dates even further? Legitimately curious what options is there. Could If you ar…

I would be shocked if people couldn't find an RCE in an early 2000s flip phone. I had a friend who had hers since 2010 and MMS crashed it all the time.

Re: UK Government Officials Infected with Pegasus

#16
post #8

Earlier quoted context omitted.

>"I'm surprised this isn't a major diplomatic incident between the UK and Israel too." I think Realpolitik is the reason why and that's all I'm going to say about that.

The realpolitik of it is that Johnson some weeks ago went to the Saudis hat in hand asking for oil after they've stopped responding to phone calls from POTUS . Last year: The Saudi crown prince, Mohammed bin Salman, warned Boris Johnson in a text message that UK-Saudi Arabian relations would be damaged if the British government failed to intervene to “correct” the Premier League’s “wrong” decision not to allow a £300…

odds are UK and UAE mutually hacked each other.

Re: UK Government Officials Infected with Pegasus

#17
post #4

I'm surprised this isn't a major diplomatic incident between the UK and Israel too, since the Israeli intelligence company was supposedly "closely monitoring how their customers were using the software" or akin to that. Like, yeah, blame the UAE mostly for this but let's also have a discussion about why this was sold to anyone who would pay with no oversight at all. Western countries need to do better.

Ironically, the fact that it's not playing out as a major dust-up in public will probably only further contribute to conspiratorial thinking in re: the Israeli gov't.

No post body was provided.

Re: UK Government Officials Infected with Pegasus

#18

And what were GCHQ, MI6 and NCSC doing to protect our prime-minister at this time? We have a problem in democratic nations. I've written about it here [1]. Bruce Schneier has also addressed it in his own way. Our lack of any framework for civic cybersecurity is a disgrace. People in future ages will look back on our time as a wild-west. A solution can only come from a ground-up awareness through education. [1] http:/…

>Bruce Schneier has also addressed it in his own way.

very interesting, can you link to it? tia!

Re: UK Government Officials Infected with Pegasus

#19
post #8

Earlier quoted context omitted.

>"I'm surprised this isn't a major diplomatic incident between the UK and Israel too." I think Realpolitik is the reason why and that's all I'm going to say about that.

The realpolitik of it is that Johnson some weeks ago went to the Saudis hat in hand asking for oil after they've stopped responding to phone calls from POTUS . Last year: The Saudi crown prince, Mohammed bin Salman, warned Boris Johnson in a text message that UK-Saudi Arabian relations would be damaged if the British government failed to intervene to “correct” the Premier League’s “wrong” decision not to allow a £300…

Some context/background to the deal

the sale has been stalled for more than a year at that point , the league had decided arbitrarily to put a fitness check and delay(not reject) the deal. Roman, usmanov (minority holder ) and Abu Dhabi sovereign fund are current owners of major clubs before Saudi Arabia .

The stalling and later approval has nothing to do with concerns of sportswashing (PL has sold out any morality they had long before then). The block and later approval was mostly because Qatar was pissed .

Qatar owns PSG , hosting 2022 World Cup and most importantly owns lucrative PL broadcast rights in Middle East.

beIN with Saudi government informal support has been streaming matches illegally. Complicating this Qatar for last 4/5 years has been pretty much isolated in Middle East and kicked out of many forums in unrelated diplomatic fights.

In the end Saudi paid 1Billion pounds to Qatar to settle that dispute before Newcastle could be bought.

Sovereign/government influence peddling and involving in sports clubs is nothing new. Real Madrid has benefited a lot over the years , west ham got a brand new stadium for nothing , even in the U.S. favorable policies , tax breaks are used heavily to attract sports teams at city /state level all the time.

Democracy or dictators sports are cheap trick to improve ratings , it has been used at least since gladiators in Rome as a tool.

My intention is not defend Saudi actions just that it is not surprising governments were involved.

Disclaimer : I am a Newcastle fan

Re: UK Government Officials Infected with Pegasus

#20
post #7

I'm curious about the threat modelling of those high level officials. With all these hacking going on, if feels like it's not been a consideration. Pegasus claims iOS and Android hacking capabilities, one would expect more specialised communications being used at that level. Car companies provide specialised vehicles for governmental use, I would have expected to see specialised iOS or Android devices at least. Nothi…

I'm pretty sure its just accepted it is government by WhatsApp groups.
Post reply on HN