Live data from Hacker News

Apple will notify users about state-sponsored cybersecurity threats

support.apple.com

121–130 of 166 posts

Re: Apple will notify users about state-sponsored cybersecurity threats

#121

Earlier quoted context omitted.

Meanwhile apple has added iMessage apps[1], that you can add to your iMessage and there recently were a few iMessage exploits including a zero-click one[2]. [1] https://support.apple.com/en-us/HT206906 [2] https://9to5mac.com/2021/07/19/zero-click-imessage-exploit/

I think you have replied to the wrong person, otherwise I fail to see how either of these citations are in any way relevant.

Yeah I did, sorry.

Re: Apple will notify users about state-sponsored cybersecurity threats

#124
post #43

Earlier quoted context omitted.

I think you need to add a translation of the tweet. Because it sounds as if he didn't obey Apple's warning. Yet I think he approves of Apple's s notification. It is the government who he wasn't obeying? So the government installed the spyware?

It is like polish Watergate: the prosecutor has been criticizing minister Ziobro and already lost her job (not only her, this problem is now on EU table and European trials say polish gov is breaking the law doing this) and now she learned minister Ziobro was spying her (and probably is still doing this)

Wow. Just need to have something against state level power … just can’t fight them on an individual basis on one’s own alone.

Re: Apple will notify users about state-sponsored cybersecurity threats

#125
post #77

Earlier quoted context omitted.

Respond by using 2fa if you weren't already, not signing into the account from untrusted devices, checking OAuth grants for apps you don't recognize, not using same pw elsewhere

Yeah, we were doing that, so the response was to just shrug. Without a lot more context it's hard to know what your reaction should be to something like that.

A lack of context is kind of the problem here. What we need are specific method details, including origination addresses. There may be times when only most of that info is helpful, but withholding is always the opposite of helpful.

Re: Apple will notify users about state-sponsored cybersecurity threats

#126

So something like PRISM that targets everybody won't trigger a warning?

I doubt it. Keep in mind this will only work for non-court-gag-ordered instances. If the US subpoenas Apple about an individual they won't be allowed to notify them. I have no idea how this applies to other countries. I think this is more like: "We noticed unusual API usage and we don't have a gag order so whatever it is, it's not likely to be good"

tl;dr: Apple will notify us as long as the attacking state isn't the US - which it very often is.

Re: Apple will notify users about state-sponsored cybersecurity threats

#128

Earlier quoted context omitted.

NSA surveillance is illegal. Will we be notified?

Which surveillance? By what ruling? The phone metadata collection was ruled illegal, but that does not affect Apple.

Under rulings that never happen due to the FISA court declaring a lack of standing due to the court keeping the evidence secret that proves standing.

It utterly sucks having the sole oversight court having IC's back at our expense.

Re: Apple will notify users about state-sponsored cybersecurity threats

#130
they'll only do it if the US government allows them to.

Like it or not, if they go against three-letter-agencies in the US, high ranked apple employees will spend years in jail based on the rulings of secret courts where all of your rights are irrelevant. The moment the cia says the word "terrorism", all your rights are gone regardless of how wrong the investigators might be. They can literally declare you guilty without you even knowing you were were accused of anything because according to them, national security is more important than the constitution.

they are on the same level as the ccp

Post reply on HN