Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

WhatsApp voice calls were used to inject spyware on phones

ft.com

Post reply on HN
Print view View original

111–120 of 313 posts

Re: WhatsApp voice calls were used to inject spyware on phones

#111

Post by Semaphor »

winter_blue wrote: post #110
metildaa wrote: post #86

Earlier quoted context omitted.

Huawei's equipment will almost assuredly run anyone's spyware. Huawei uses a medley of ancient, highly vulnerable OpenSSL libraries sprinkled through their basestation code, and apparently they've forgone any kind of version control to ensure an optimally confusing work environment for their development teams: https://hmgstrategy.com/resource-center/articles/2019/04/04/... Frankly, these products are likely unmaintai…

Huawei's software development practices seem quite horrifying. Critical systems like these ideally would be written in specially-designed programming languages that support mathematically proving correctness (Coq comes to mind). There's probably still room in the programming language design field to create new languages that are user-friendly but also integrate Coq-like systems plus other verifiability and correctnes…

If you find that horrifying, don't look at Cisco CVEs ;)

Re: WhatsApp voice calls were used to inject spyware on phones

#113

Post by zaroth »

accountwhatever wrote: post #109

Why was the word "Israeli" removed from the title?

OT, but scroll down with “showdead” and it should become apparent exactly why. It is HN trying to promote substantive discussion on the topic without devolving into flame war.

Re: WhatsApp voice calls were used to inject spyware on phones

#114

Post by tekknolagi »

bigiain wrote: post #91
wyclif wrote: post #63

Earlier quoted context omitted.

I agree. Nobody should underestimate the Mossad: https://youtu.be/bJujIwtdk8w

From my favourite Usenix paper ( https://www.usenix.org/system/files/1401_08-12_mickens.pdf ): Basically, you’re either dealing with Mossad or not-Mossad. If your adversary is not-Mossad, then you’ll probably be fine if you pick a good password and don’t respond to emails from ChEaPestPAiNPi11s@virus-basket.biz.ru. If your adversary is the Mossad, YOU’RE GONNA DIE AND THERE’S NOTHING THAT YOU CAN DO ABOUT IT. The Mos…

That is an amazing article.

Re: WhatsApp voice calls were used to inject spyware on phones

#115

Post by MagicPropmaker »

mirimir wrote: post #84
deytempo wrote: post #66

Earlier quoted context omitted.

How do they differ from international terrorists then?

They're a government that the US recognizes, and that's widely recognized by other governments that the US recognizes. That makes them legitimate. Terrorists by definition do not include legitimate governments. Anyone that doesn't agree is a "terrorist sympathizer". I don't necessarily agree, but that's just how it is.

But no "government" was involved. This is a private company with international investors.

Why isn't anyone mad at Apple who (falsely) advertises iOS as being "Secure By Design?"

Re: WhatsApp voice calls were used to inject spyware on phones

#117

Post by mirimir »

MagicPropmaker wrote: post #115
mirimir wrote: post #84

Earlier quoted context omitted.

They're a government that the US recognizes, and that's widely recognized by other governments that the US recognizes. That makes them legitimate. Terrorists by definition do not include legitimate governments. Anyone that doesn't agree is a "terrorist sympathizer". I don't necessarily agree, but that's just how it is.

But no "government" was involved. This is a private company with international investors. Why isn't anyone mad at Apple who (falsely) advertises iOS as being "Secure By Design?"

> But no "government" was involved.

Huh? This is Israel.

And some of us are mad at Google and Apple for selling such insecure-by-design junk. By that I mean that apps are trusted more than (and can't fully be controlled by) device owners.

Re: WhatsApp voice calls were used to inject spyware on phones

#118

Post by bigiain »

tekknolagi wrote: post #114
bigiain wrote: post #91

Earlier quoted context omitted.

From my favourite Usenix paper ( https://www.usenix.org/system/files/1401_08-12_mickens.pdf ): Basically, you’re either dealing with Mossad or not-Mossad. If your adversary is not-Mossad, then you’ll probably be fine if you pick a good password and don’t respond to emails from ChEaPestPAiNPi11s@virus-basket.biz.ru. If your adversary is the Mossad, YOU’RE GONNA DIE AND THERE’S NOTHING THAT YOU CAN DO ABOUT IT. The Mos…

That is an amazing article.

Mikkens has a track record of writing stuff like that. It's worth hunting down and reading pretty much everything he's published.

Re: WhatsApp voice calls were used to inject spyware on phones

#120

Post by eof »

macintux wrote: post #74
eof wrote: post #30

Earlier quoted context omitted.

I love how you’ve been convinced that Russia and China are naughty and Israel is somehow too good to be shady.

Well, the first half of that statement seems undeniably true.

Absolutely. But no more naughty than USA or Israel, as far as I can tell.
Post reply on HN