231–240 of 313 posts
Earlier quoted context omitted.
I'm on Android. It auto-updated on May 10th to v2.19.134 "The issue affects WhatsApp for Android prior to v2.19.134"
The problem is iOS AppStore. If you update via the "Updates" tab, you don't get the latest version. But if you search for WhatsApp as if installing it for the first time, then you get the new version.
Earlier quoted context omitted.
All my life I've thought spyware was developed primarily by evil Russian and Chinese hackers. But apparently also by Israeli developers with their government's blessing and open endorsement. That's some very shady stuff. Gamma Group is an Anglo-German company that provides similar surveillance software with government blessing and endorsement. Hacking Team (Italian company) sells similar surveillance software to vari…
> Before an embarrassing data breach in 2015 they also used to sell surveillance software to various totalitarian regimes outside Europe. Why do you think they stopped selling to those regimes? (I didn't follow the issue after it disappeared from the news)
Can the WhatsApp-injected spyware escape the iOS App Sandbox?
Earlier quoted context omitted.
From my favourite Usenix paper ( https://www.usenix.org/system/files/1401_08-12_mickens.pdf ): Basically, you’re either dealing with Mossad or not-Mossad. If your adversary is not-Mossad, then you’ll probably be fine if you pick a good password and don’t respond to emails from ChEaPestPAiNPi11s@virus-basket.biz.ru. If your adversary is the Mossad, YOU’RE GONNA DIE AND THERE’S NOTHING THAT YOU CAN DO ABOUT IT. The Mos…
> ...they’re going to hold a press conference and say “It wasn’t us” as they wear t-shirts that say “IT WAS DEFINITELY US,” and then they’re going to buy all of your stuff at your estate sale so that they can directly look at the photos of your vacation instead of reading your insipid emails about them. That's basically Israel's attitude on anything: doing anything they want without any kind of boundaries, then denyi…
That’s actually a time-honoured Russian/Soviet SOP, currently embodied by Mr. Sergey Lavrov.
The USSR had a lot of influence on early Israel, and it shows in many little things like this.
Earlier quoted context omitted.
You're still vulnerable then. "Affected versions: ... WhatsApp for iOS prior to v2.19.51" from https://www.facebook.com/security/advisories/cve-2019-3568 The news outlets are all telling us to update, but until WhatsApp/Apple get their act together, there's no point. Worse still, people won't realise they need to do it again and will remain vulnerable indefinitely.
Lol, App Store for 2.19.51 describes the update as: > You can now see stickers in full screen when you long press a notification If that’s how we encourage critical security updates, I’ll suspect that Facebook themselves are behind all of this.
I assume the stickers thing truly was the most notable patch, and they didn’t want to scare people & tip off the attackers.
Earlier quoted context omitted.
But no "government" was involved. This is a private company with international investors. Why isn't anyone mad at Apple who (falsely) advertises iOS as being "Secure By Design?"
> But no "government" was involved. Huh? This is Israel. And some of us are mad at Google and Apple for selling such insecure-by-design junk. By that I mean that apps are trusted more than (and can't fully be controlled by) device owners.
Earlier quoted context omitted.
> ...they’re going to hold a press conference and say “It wasn’t us” as they wear t-shirts that say “IT WAS DEFINITELY US,” and then they’re going to buy all of your stuff at your estate sale so that they can directly look at the photos of your vacation instead of reading your insipid emails about them. That's basically Israel's attitude on anything: doing anything they want without any kind of boundaries, then denyi…
> doing anything they want [...] then denying brazingly That’s actually a time-honoured Russian/Soviet SOP, currently embodied by Mr. Sergey Lavrov. The USSR had a lot of influence on early Israel, and it shows in many little things like this.
The term used to have a very negative connotation, but interestingly, Google says "usually used approvingly". It seems to fit pretty well the descriptions of the "rudeness" and "boldness" in common Israeli culture.
Earlier quoted context omitted.
Lol, App Store for 2.19.51 describes the update as: > You can now see stickers in full screen when you long press a notification If that’s how we encourage critical security updates, I’ll suspect that Facebook themselves are behind all of this.
I don’t think this is a conspiracy by Big Social. If they really want to do that, they can still do that. I assume the stickers thing truly was the most notable patch, and they didn’t want to scare people & tip off the attackers.
At least say something like “bug fixes”. Some kind of carrot to discourage me from thinking “Total waste of time and too many developers”.
Isn’t Sandboxing supposed to prevent this from getting any worse than hacking the app itself?