Live data from Hacker News

Amazon Shuts Down NSO Group Infrastructure

vice.com

131–140 of 260 posts

Re: Amazon Shuts Down NSO Group Infrastructure

#131
post #103
post #32

Earlier quoted context omitted.

NSO seems to be used by tyrants to go after legitimate opposition. The NSA isn't used by the President to target the party out of power no? But in NSO case in India apparently it was: https://www.theguardian.com/news/2021/jul/19/key-modi-rival-... NSO is used to keep those with money and access to NSO in power undermine their legitimate rivals. It can be used to plant evidence on their devices as well as monitor ever…

To clarify, are you arguing that NSO Group have had a bigger impact on innocent people, suppression of speech, etc. than the NSA? If so, I'm not sure I buy what you seem to be arguing, that "NSO case in India" and "It can be used to plant evidence" makes it anywhere near as bad as what the NSA has done/does. In my opinion this is exactly how a "poor-man's NSA" would look: What your money can buy from greedy corporati…

> arguing that NSO Group have had a bigger impact on innocent people, suppression of speech, etc. than the NSA?

I'm not the OP, but maybe a way to put it is that impacts are more variable or chaotic?

Generally speaking, the "impact" of a US government entity is reasonably predictable based on US policy and interests. Something like NSO, where tools are sold on the market to many entities are probably less predictable and thus more impactful. I'd expect a lower level of operational discipline from than from the US military.

The other factor is who are NSO Group's masters, and what do they know? If compromises , does get intel?

Re: Amazon Shuts Down NSO Group Infrastructure

#132
post #67

WTF? Wasn’t it the NSO that hacked Bezos’s and Khashoggi’s phone? I guess the customer is always right up until the point the widow of your murdered employee goes to the press.

> Bezos Bezos' phone probably wasn't hacked. https://www.bloomberg.com/news/features/2021-05-05/how-jeff-...

https://www.wired.com/story/bezos-phone-hack-mbs-saudi-arabi...

Re: Amazon Shuts Down NSO Group Infrastructure

#133
post #62

Earlier quoted context omitted.

So should we consider the NSA a terrorism-aiding organization? edit: the tone is lost via internet; my own opinion on this: yes, it is.

> So should we considered the NSA a terrorism-aiding organization This statement needs the "we" defined to be meaningful. If it is the U.S., then obviously no, the NSA is an arm of the state. If "we"` is e.g. China, probably no, because words have meanings and the arms of recognized foreign states don't conduct terrorism, they do espionage and they do war. If "we" is a freshman dorm room, then, of course, the NSA is…

> If it is the U.S., then obviously no, the NSA is an arm of the state.

Some here in the states don't exactly feel like the people running the USG have the people's best interests at heart. Common folk across countries probably have more in common with each other than with the ruling elite.

State-sponsored terrorism is a thing - and has been for a LONG time. And US citizens are targets as well as non-citizens.

Re: Amazon Shuts Down NSO Group Infrastructure

#134
post #13
post #8

Earlier quoted context omitted.

It's "DigitalOcean" - sorry to be pedantic, it drives me absolutely nuts when people put a space between, especially publications.

There is another point if view, and that is that corporate marketing should not take precedence over correct use of language. Some languages tend to be more strict about this. I think it's particularly common to see English play fast and loose with the language compared to other languages. In Sweden, for example you will see media write Iphone, because it's a name, and names are capitalised. The same goes for Digital…

In English,

Also, Marty McFly is not Marty Mc Fly or McFly. Internal capital letters are OK.

Re: Amazon Shuts Down NSO Group Infrastructure

#135
post #23

Earlier quoted context omitted.

> Shouldn’t there be an outcry against the suppression of free speech? Only if someone was one of the many people who don't understand what Free Speech is or incorrectly think of rights only in terms of themselves and people they like, not for those who they don't. In this case, Amazon is exercising their own Free Speech rights. Free speech necessarily (and as a matter of law) means the freedom to not speak and to no…

I don't understand the line where lots of people are seemingly outraged about people using online platforms to disseminate propaganda and extremist materials. (ie. most recently Google Drive) NSO group seems to be a not-so-nice company. But why does what they do justify blackballing, while similar companies (say BlueCoat or any of a dozen companies that provide solutions to hack on behalf of the police) are ok?

>I don't understand the line where lots of people

You're going to have to be more specific than a handwave-y "lots of people" to have good online discussions. You also need to be specific in your terminology. You need to actually address the specific people and their arguments, or else do a much better job of phrasing an inquiry into theoretical tradeoffs. Ie., from your other reply:

>What I don't understand is why AWS is justified to shut them down; but Google or Facebook is not justified in preventing their platforms from being propaganda distribution channels?

So I do in fact think Google and Facebook at 100% "justified" to shut them down, and I think Amazon is too. I do have lines where I think morally, if not legally, a service can start to drift into quasi-governmental (or perhaps should be that way) territory. An example for me would be core physical infrastructure companies, not just at Tier 3 but also at Tiers 2 and 1. I think those should operate as common carriers. But I don't think social media fits. Not using it at all (as I don't) may have "costs" in terms of social opportunities but alternatives are trivial.

So for me there isn't any dissonance here, I generally support "Big Tech" (and everyone down the ladder) associating as they see fit when it comes to ongoing online service relationships within existing jurisprudence. The initial legal tweaks I'd like would be aimed at things like expanding user power in a purely additive way (like giving people the option to access root hardware/software key stores), or internalizing costs some companies are shifting onto the public, rather then beating down what some people don't like.

Hacker News (and every other forum) aren't hive mind and it's silly and tiresome to have them treated that way. What you did in your first post here was essentially throw up a big silly strawman.

Re: Amazon Shuts Down NSO Group Infrastructure

#136
post #103
post #32

Earlier quoted context omitted.

NSO seems to be used by tyrants to go after legitimate opposition. The NSA isn't used by the President to target the party out of power no? But in NSO case in India apparently it was: https://www.theguardian.com/news/2021/jul/19/key-modi-rival-... NSO is used to keep those with money and access to NSO in power undermine their legitimate rivals. It can be used to plant evidence on their devices as well as monitor ever…

To clarify, are you arguing that NSO Group have had a bigger impact on innocent people, suppression of speech, etc. than the NSA? If so, I'm not sure I buy what you seem to be arguing, that "NSO case in India" and "It can be used to plant evidence" makes it anywhere near as bad as what the NSA has done/does. In my opinion this is exactly how a "poor-man's NSA" would look: What your money can buy from greedy corporati…

The people decide what is legitimate opposition by elections.

NSO was used to tap the democratically elected leader of opposition in India. Doesn't get any clearer than that. [1]

I don't know how to compare between hot pan and the fire on who is worse

[1] with Watergate and more recent (unproven) accusations on wiretapping of politicians, the US is no stranger do this type of monitoring either

Re: Amazon Shuts Down NSO Group Infrastructure

#137

I contacted Amazon to report an advertiser out of Tel Aviv that was using JavaScript hosted on CloudFront to fingerprint user's devices and if an Android device was detected a fake media player or fake CAPTCHA would trick user's into accepting push notifications for fake virus warnings to install questionable apps from the Play Store. This script also pushed ads for a fake AdBlock app that was a dropper for banking t…

Did they reply in the negative or just not respond?

How does it matter?

No response is a response and in this kind of situation it is explicit "I will not do anything and I'm dishonest enough to not acknowledge that.".

Re: Amazon Shuts Down NSO Group Infrastructure

#138

I contacted Amazon to report an advertiser out of Tel Aviv that was using JavaScript hosted on CloudFront to fingerprint user's devices and if an Android device was detected a fake media player or fake CAPTCHA would trick user's into accepting push notifications for fake virus warnings to install questionable apps from the Play Store. This script also pushed ads for a fake AdBlock app that was a dropper for banking t…

I wouldn’t be so quick to rush into a future where Amazon takedowns are as easy as YouTube DMCA requests.

Yes! Let’s stay in a present where Israeli hackers-for-hire can help dictatorships capture and murder dissidents.

At a minimum we should demand transparency and accountability from all of these scale-enabling organizations.

Re: Amazon Shuts Down NSO Group Infrastructure

#139
post #23

Earlier quoted context omitted.

> Shouldn’t there be an outcry against the suppression of free speech? Only if someone was one of the many people who don't understand what Free Speech is or incorrectly think of rights only in terms of themselves and people they like, not for those who they don't. In this case, Amazon is exercising their own Free Speech rights. Free speech necessarily (and as a matter of law) means the freedom to not speak and to no…

> " In this case, Amazon is exercising their own Free Speech rights. " Corporations aren't humans; they don't have free speech rights.

>Corporations aren't humans; they don't have free speech rights.

As a matter of law in the United States you are objectively wrong. This has been settled in a series of SCOTUS decisions starting with Buckley v. Valeo (1976). Corporations are legal persons, and further the individual humans that make them up do not somehow lose the free speech rights just because they decide to take collective action.

And in turn: as a matter of morality, common sense and the point of free speech you're also wrong. It's important that people be able to speak to power, and a core part of that for humanity is socializing, being able to form groups to support each other and pool ideas, skills and resources to have a greater effect than what any individual alone could accomplish. Seriously, you say "corporations don't have free speech rights"? Exactly what form of combined effort do you imagine most, say, NEWSPAPERS are organized under? So what, you think individuals should be able to investigate something all by themselves, but the government should be free to put the boot down on newspapers because they're corporations? You think that jives with free speech?

Oh maybe you only meant "the bad ones". That makes it very easy, but no reason to limit it to corps in this case, just stop "the bad humans" too and everything is great. Nothing could possibly go wrong with that plan, since everyone agrees who "the bad ones" are.....

Re: Amazon Shuts Down NSO Group Infrastructure

#140

If someone were to use NSO paid hacking to attack Apple executives's devices and then release everything they found, I bet Apple might take this more seriously instead of having some PR flack write marketing copy. Same is true of any tech company: until it hurts them specifically they can just ignore it or make it sound innocuous. Maybe Amazon has been targeted and they found out. If someone were to use it against US…

> Apple might take this more seriously instead of having some PR flack write marketing copy What are they supposed to do?

Take security a lot more serious than they currently do. They've had some seriously embarrassing security holes in their software the last few years.

Also, they could increase the payout for their bug bounty. Why report to apple for a 0-day when you can make $1 million from these guys? It's not like Apple doesn't have the cash.

Post reply on HN