Live data from Hacker News

Amazon Shuts Down NSO Group Infrastructure

vice.com

111–120 of 260 posts

Re: Amazon Shuts Down NSO Group Infrastructure

#111
post #13
post #8

Earlier quoted context omitted.

It's "DigitalOcean" - sorry to be pedantic, it drives me absolutely nuts when people put a space between, especially publications.

There is another point if view, and that is that corporate marketing should not take precedence over correct use of language. Some languages tend to be more strict about this. I think it's particularly common to see English play fast and loose with the language compared to other languages. In Sweden, for example you will see media write Iphone, because it's a name, and names are capitalised. The same goes for Digital…

[deleted]

Re: Amazon Shuts Down NSO Group Infrastructure

#112
post #98

Earlier quoted context omitted.

Doesn't cloudfront generally act like cloudflare? Ie. We don't inspect your content. Law enforcement are the only people who can stop us hosting a site.

Cloudflare has taken voluntary action on sites 2 (or 3?) times now. They can no longer claim complete neutrality. I don't know about Cloudfront.

If you violate policy (of which there are likely many varied yet incontestable interpretations), AWS pulls the rug out from under you faster than one can say "neutral". That's excluding they do not make newer policies on-the-fly.

Ex A: https://signal.org/blog/looking-back-on-the-front/

Re: Amazon Shuts Down NSO Group Infrastructure

#113
post #21

Earlier quoted context omitted.

Isn't the line due process of law, though? If NSO is allegedly committing a crime, then we can punish them in courts of law that are empowered and qualified to investigate the allegations fully and decide whether to deprive them of their rights. Why would we put these decisions in the hands of Big Tech? At least, that's what I heard during the debates about deplatforming Parler. It was apparently very bad for private…

> Isn't the line due process of law, though? For state actions, yes. For private actors, if I suspect someone is using my services to break the law or engage in terrorism, "but your honor, I didn't have a court order confirming they were terrorists" won't cut my liability. Parler was a free speech question because it was almost purely speech. NSO Group isn't just speaking. It's doing, and it's doing things that will…

So then the question becomes Did Amazon let police gather evidence before touching anything?

Re: Amazon Shuts Down NSO Group Infrastructure

#114
post #13

Earlier quoted context omitted.

There is another point if view, and that is that corporate marketing should not take precedence over correct use of language. Some languages tend to be more strict about this. I think it's particularly common to see English play fast and loose with the language compared to other languages. In Sweden, for example you will see media write Iphone, because it's a name, and names are capitalised. The same goes for Digital…

The media in Sweden use both by the looks of it. They do that for IKEA as well but it doesn't really make sense imo since it's an abbreviation of names. Both are made up language constraints anyway so I don't really see why the typographic rules of a language are more important than the equally artificial typographic rules of a company name.

[deleted]

Re: Amazon Shuts Down NSO Group Infrastructure

#115
post #8

Earlier quoted context omitted.

It's "DigitalOcean" - sorry to be pedantic, it drives me absolutely nuts when people put a space between, especially publications.

My pet peeve is publications spelling NASA as Nasa. They've come up with some story to explain their decision that sounds just as bad as some of the lies Walter White told. I don't care how ubiquitous NASA maybe, it is and always will be an acronym. I accept removing the dots so it's not N.A.S.A., but I will only accept Nasa as a formal name if that's the name of a person.

It's a British/American English difference.

Re: Amazon Shuts Down NSO Group Infrastructure

#116
post #101

Earlier quoted context omitted.

It feels like this is more a result of Amazon not being able to connect you with the right escalation path to verify & act on these claims than a considered decision to ignore them. Does anyone here know what an individual reporter should do? Is there an escalation ramp that exists but was so poorly marked that neither sloshnmosh nor Amazon support was able to find it? Does the ramp go through other organizations (e.…

always a narrative/explanation...right on

If there is no escalation path, that's a big problem, and nobody here is pretending otherwise.

Re: Amazon Shuts Down NSO Group Infrastructure

#117
post #49

Earlier quoted context omitted.

It feels like this is more a result of Amazon not being able to connect you with the right escalation path to verify & act on these claims than a considered decision to ignore them. Those two things are actually the same thing, both are wilfully ignoring situations like this.

Never assume malice where ignorance and incompetence would suffice instead. Those two things are actually not the same thing at all, depending on how you define “willful.”

Amazon could do it if they wished; they don't want to.

Re: Amazon Shuts Down NSO Group Infrastructure

#118
post #49

Earlier quoted context omitted.

It feels like this is more a result of Amazon not being able to connect you with the right escalation path to verify & act on these claims than a considered decision to ignore them. Those two things are actually the same thing, both are wilfully ignoring situations like this.

Never assume malice where ignorance and incompetence would suffice instead. Those two things are actually not the same thing at all, depending on how you define “willful.”

How about never assume ignorance when you're dealing with a giant corporation's systemic problem that the giant corporation benefits from ignoring.

Re: Amazon Shuts Down NSO Group Infrastructure

#119

Earlier quoted context omitted.

The biggest customers for these companies are Western governments. You’re not going to take away their toys.

Their biggest customers are middle eastern governments according to the WaPo article. US certainly has bought the software but it's mostly Saudi, UAE, Qatar, etc. US has NSA so they don't really need some software. Middle eastern powers dont have the same type of technical expertise to develop their own in-house.

1. There are many, many more Western countries other than the US.

2. Even if they develop their own tools and research their exploits, using NSO provides a layer of plausible deniability and hiding behind someone else's fingerprint (think about the command and control servers, for example).

3. Even if they develop their own stuff, most governments have multiple arms which can use these tools (think about FBI, CIA, NSA, various military intelligence branches), and they tend not to share between them. This makes smaller government branches which don't have the resources and expertise of the others (think DEA, ATF...) buy from 3rd parties.

4. Zero days are a scarce resource, if I ran an agency I'd rather use someone else's every day and keep my own just for the special stuff.

In summary, it's exceedingly appealing for bodies like the Dutch police to use NSO tools and NSO's association with the Saudis and other provides a convenient masking to their operations.

Re: Amazon Shuts Down NSO Group Infrastructure

#120
post #62

Earlier quoted context omitted.

So should we consider the NSA a terrorism-aiding organization? edit: the tone is lost via internet; my own opinion on this: yes, it is.

Does terrorizing citizens through illegal spying and mass surveillance constitute terrorism ? Or does only setting off bombs in public spaces count?

There would need to be some actual violence involved to constitute terrorism. If you spy on some journalist and then us that info to catch him and cut him in pieces while he's still alive, then the dismemberment may be considered terrorism and the spying was aiding that terrorism; if you spy on many people and the end result is just that some officers laugh about their naked photos or deny them jobs or disallow crossing borders, then that's just "ordinary" mass surveillance with no relationship to terrorism.
Post reply on HN