This isn't the first time Facebook have attempted this behavior, previously they were successful in purchasing a zero-day exploit and launching it against users. [1] You may think that case warrants an exception, but it sets a clear precedent and encourages the hoarding of zero-days. I think it's extremely easy to believe Facebook would launch exploits at users because they already have. [1] https://nakedsecurity.sop…
Wow. I’ve heard of this case before but did not know FB bought a zero day to crack his phone.
It's like the one thing universally true about spies is they can never keep it g. As a security guy, this is why you don't get involved with dodgy companies. When the pressure is on, they will pull in everyone they ever spoke to and use you protecting your rep to try get leverage. Pretty clear how he's choosing to go out. However, I'd also be willing to make a huge bet there is zero chance the FB CISO at the time was…
This article is from the last year, so that is also good to note. The most recent issues weren’t that public yet.
Also that Facebook's response was that NSO is misrepresenting the conversations, rather than denying that they occurred.
Unless NSO reached out to Facebook to try and sell them something, that is highly suspect.
NSO would kill for the sort of intelligence facebook gathers from phones via messenger. I don't see how facebook would benefit from any partnership with them only NSO.
It's like the one thing universally true about spies is they can never keep it g. As a security guy, this is why you don't get involved with dodgy companies. When the pressure is on, they will pull in everyone they ever spoke to and use you protecting your rep to try get leverage. Pretty clear how he's choosing to go out. However, I'd also be willing to make a huge bet there is zero chance the FB CISO at the time was…
Are you sure about that?
Facebook has been caught several times doing shady surveillance type stuff on its users.
The VPN app that is mentioned in the thread is one.
There was another incident years ago when Facebook users were forced to download antivirus software from their “trusted partners” and scan their PC’s before they were allowed to login to their FB accounts.
People that had been flagged for scanning tested some theories and found that it had nothing to do with the users computer as their partner that shared the same device could login to their FB account on the same machine without having to run an AV scan.
There’s not a lot of information out there about that incident.