Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

iMessage, Apple Music used by NSO Pegasus to attack journalist iPhones

appleinsider.com

Post reply on HN
Print view View original

11–20 of 177 posts

Re: iMessage, Apple Music used by NSO Pegasus to attack journalist iPhones

#11

Post by gjsman-1000 »

sneak wrote: post #9
gjsman-1000 wrote: post #7

Earlier quoted context omitted.

Then buy an iPhone, and turn off iCloud Backup in Settings, it's not hard to do. Then your iMessages are fully E2E Encrypted.

Nope, because they get escrowed by the other end of the iMessage conversation. Also, the whole point of disabling iMessage (in this thread) is to close the iMessage-related zero click exploits described in TFA.

The other end of the conversation escrows the key on any messenger. Otherwise how would you read the message? Unless you consider Snapchat, but that's not End to End Encrypted.

And are you really sure that Signal or your preferred messengers don't also have Zero-Click exploits? After all, they aren't sandboxed to the degree iMessage is with BlastDoor.

Re: iMessage, Apple Music used by NSO Pegasus to attack journalist iPhones

#12

Post by 3pt14159 »

I dated a journalist once. She used some random free app for phone calls because recording calls isn't built into iOS and she needed to record calls. I suggested a small device for her to plug her headphones through, but she declined.

I'm sure there's a few journalists out there that take cybersecurity seriously, but I'd wager the vast majority are pretty trivially monitored.

Re: iMessage, Apple Music used by NSO Pegasus to attack journalist iPhones

#13

Post by abaracadab »

askonomm wrote: post #6
sneak wrote: post #2

This coupled along with the fact that iMessage's E2EE has been backdoored by the non-E2EE iCloud Backup key escrow is a good argument for leaving iMessage, FaceTime, and iCloud all turned off on a device. I go one step further and leave the SIM card out, which means the SMS vulnerability path is closed too.

Should probably also dig an underground bunker and collect cans of sardines to last for decades.

Don’t forget your pentium and DOS collection! Air-gapped of course.

Re: iMessage, Apple Music used by NSO Pegasus to attack journalist iPhones

#15

Post by meepmorp »

sneak wrote: post #8
gjsman-1000 wrote: post #4

Earlier quoted context omitted.

But then you are using SMS, which your cell carrier can absolutely see and intercept because it's decrypted. So in either case... turn off native messaging and use Signal or something if you are paranoid. You aren't really using the "phone" part anymore, so buy an iPod touch or something. Also, iMessage is fully E2E if you disable iCloud Backup. Which can easily do in Settings.

Please stop using the term "paranoid" to describe those who desire personal privacy.

It is paranoid for the average person to think they're sufficiently interesting to be a surveillance target.

Re: iMessage, Apple Music used by NSO Pegasus to attack journalist iPhones

#16

Post by xenocratus »

3pt14159 wrote: post #12

I dated a journalist once. She used some random free app for phone calls because recording calls isn't built into iOS and she needed to record calls. I suggested a small device for her to plug her headphones through, but she declined. I'm sure there's a few journalists out there that take cybersecurity seriously, but I'd wager the vast majority are pretty trivially monitored.

But it also depends on what kind of journalism they're doing, right? Not all report on criminal activity, or on investigating the government. It's kinda like threat-models, no need to be super secure if your work brings no risks to you, your organisation, or those you come in contact with.

Re: iMessage, Apple Music used by NSO Pegasus to attack journalist iPhones

#17

Post by esens »

max_ wrote: post #14

Time for a cyber security focused smartphone?

Would it actually have more resources that say Apple? I think if Apple can not do it, I am unsure if anyone else could. All supposedly secure smart phones are not, but they are at least obscure.

I think that one should probably buy an Apple (at least they control everything rather than the cobbled together android clones) and disable basically everything except exactly what is needed. At least that reduces the surface area. And keep personal stuff on a separate phone.

Re: iMessage, Apple Music used by NSO Pegasus to attack journalist iPhones

#19

Post by Karunamon »

meepmorp wrote: post #15
sneak wrote: post #8

Earlier quoted context omitted.

Please stop using the term "paranoid" to describe those who desire personal privacy.

It is paranoid for the average person to think they're sufficiently interesting to be a surveillance target.

Passive surveillance being a thing means everyone reading this text is a target.
Post reply on HN