Live data from Hacker News

Apple will notify users about state-sponsored cybersecurity threats

support.apple.com

151–160 of 166 posts

Re: Apple will notify users about state-sponsored cybersecurity threats

#153
post #14

"If Apple discovers activity consistent with a state-sponsored attack" I am really interested in understanding more about a "state-sponsored attack" as someone who works in Ops and has experience in CyberSec. All these years working in the industry and I had no idea you could identify an "attack" that easily.

It’s not easy. > Unlike traditional cybercriminals, state-sponsored attackers apply exceptional resources to target a very small number of specific individuals and their devices, which makes these attacks much harder to detect and prevent. > State-sponsored attackers are very well-funded and sophisticated, and their attacks evolve over time. Detecting such attacks relies on threat intelligence signals that are often…

I was being sarcastic. Not only is it not easy, it is impossible! There is no such thing as distinguishing a cyber attack of any kind between a state-sponsored and independent-sponsored. This move by Apple is bizarre to say the least.

Re: Apple will notify users about state-sponsored cybersecurity threats

#154
post #8
post #3

Earlier quoted context omitted.

Also if the state if USA...

https://www.apple.com/legal/transparency/us.html Contains the canary: “To date, Apple has not received any orders for bulk data.”

Could also be weasly wording here. They can still truthfully make that statement even if Apple themselves have decided to be pro-active and decided to give out bulk data without receiving any orders before. As the Snowden leaks showed, we should be really careful about how we read the words from large companies about data.

Re: Apple will notify users about state-sponsored cybersecurity threats

#156
post #22

I know of one case of a Polish prosecutor who does not obey (do not want to bend the law) Zbigniew Ziobro, who is both the minister of justice and the prosecutor general. She received a notification from Apple just today. Source: https://mobile.twitter.com/e_wrzosek/status/1463551631648251...

OK, but what does that mean? They use that Israeli spying tool against her?

Re: Apple will notify users about state-sponsored cybersecurity threats

#157
post #130

they'll only do it if the US government allows them to. Like it or not, if they go against three-letter-agencies in the US, high ranked apple employees will spend years in jail based on the rulings of secret courts where all of your rights are irrelevant. The moment the cia says the word "terrorism", all your rights are gone regardless of how wrong the investigators might be. They can literally declare you guilty wit…

> they'll only do it if the US government allows them to.

This is a warning that someone is trying to gain unauthorized access to your account. If the US government wants access it probably has better methods than brute force, such as ordering Apple to hand over your stuff.

Re: Apple will notify users about state-sponsored cybersecurity threats

#158
post #131
post #130

they'll only do it if the US government allows them to. Like it or not, if they go against three-letter-agencies in the US, high ranked apple employees will spend years in jail based on the rulings of secret courts where all of your rights are irrelevant. The moment the cia says the word "terrorism", all your rights are gone regardless of how wrong the investigators might be. They can literally declare you guilty wit…

> they are on the same level as the ccp Nonsense.

Proof?

Re: Apple will notify users about state-sponsored cybersecurity threats

#159
This is a good service since states felt it was necessary to use surveillance powers against the domestic population.

To me that warrant retaliation in my opinion, it would be a case for self-defense. For example isolating the trojan in a honey-pot OS and delivering it to foreign actors cybersecurity research labs. Just make it unfeasible to support such software and it will stop. My country (Germany) sadly is prone to ignore civil liberties. There were home searches because someone called a some minister a penis on Twitter and there were other severe transgressions. Since the law doesn't protect against them anymore, the state has proved that it is not capable for responsible conduct with software the relies on zero-day-exploits which endanger every computer system.

Glad that companies with real security expertise put up the slack here, although they shouldn't have to do that.

Re: Apple will notify users about state-sponsored cybersecurity threats

#160
post #8

Earlier quoted context omitted.

https://www.apple.com/legal/transparency/us.html Contains the canary: “To date, Apple has not received any orders for bulk data.”

Could also be weasly wording here. They can still truthfully make that statement even if Apple themselves have decided to be pro-active and decided to give out bulk data without receiving any orders before. As the Snowden leaks showed, we should be really careful about how we read the words from large companies about data.

True. They also could be part of the conspiracy to make people sick with 5g so that bill gates can inject microchips into people through the vaccines.

After all, they haven’t denied it!

Post reply on HN