'Karma': A hack used by the UAE to break into iPhones of foes
1–10 of 238 posts
Re: 'Karma': A hack used by the UAE to break into iPhones of foes
#2IA link[0] for people who get "Page Not Found", trying to visit from Europe.
https://web.archive.org/web/20190130135641/https://www.reute...
Re: 'Karma': A hack used by the UAE to break into iPhones of foes
#3>Three former operatives said they understood Karma to rely, at least in part, on a flaw in Apple’s messaging system, iMessage. They said the flaw allowed for the implantation of malware on the phone through iMessage, even if the phone’s owner didn’t use the iMessage program, enabling the hackers to establish a connection with the device. To initiate the compromise, Karma needed only to send the target a text message — the hack then required no action on the part of the recipient.
Has anyone here heard about or is familiar with this malware?
Re: 'Karma': A hack used by the UAE to break into iPhones of foes
#4I realize it's a really sexy headline, but I'd like for there to be more than 0 proof that this is a real thing. Especially if they claim a vulnerability that's exploitable by only sending a text.
Re: 'Karma': A hack used by the UAE to break into iPhones of foes
#5>Three former operatives said they understood Karma to rely, at least in part, on a flaw in Apple’s messaging system, iMessage. They said the flaw allowed for the implantation of malware on the phone through iMessage, even if the phone’s owner didn’t use the iMessage program, enabling the hackers to establish a connection with the device. To initiate the compromise, Karma needed only to send the target a text message…
I wonder if this is https://www.theguardian.com/technology/2016/jul/22/stagefrig... again, the article mentions 2016.
Re: 'Karma': A hack used by the UAE to break into iPhones of foes
#6Am I the only one who feels like every time we get news of a government compromising an iPhone through some mystical exploit, the technology around it seems very fanciful?
Re: 'Karma': A hack used by the UAE to break into iPhones of foes
#7Am I the only one who feels like every time we get news of a government compromising an iPhone through some mystical exploit, the technology around it seems very fanciful?
Like an exploit where all you need to do is enter the target's phone number to compromise their phone?
Re: 'Karma': A hack used by the UAE to break into iPhones of foes
#8I realize it's a really sexy headline, but I'd like for there to be more than 0 proof that this is a real thing. Especially if they claim a vulnerability that's exploitable by only sending a text.
I would imagine details of such an exploit are worth more than A million so doubt people would be eager to share
Re: 'Karma': A hack used by the UAE to break into iPhones of foes
#9I realize it's a really sexy headline, but I'd like for there to be more than 0 proof that this is a real thing. Especially if they claim a vulnerability that's exploitable by only sending a text.
This article doesn't cite sources, but the other one cites Lori Stroud, a former developer of the application.
https://www.reuters.com/investigates/special-report/usa-spyi...
Re: 'Karma': A hack used by the UAE to break into iPhones of foes
#10Am I the only one who feels like every time we get news of a government compromising an iPhone through some mystical exploit, the technology around it seems very fanciful?
Like an exploit where all you need to do is enter the target's phone number to compromise their phone?
TFA says they need to send the target a text message.
The exploit must be something like a buffer overflow in iMessage. Which we know bugs like this have been fixed. Remember the text of death which could crash any iPhone from a couple years ago?