Samsung embeds IronSource spyware app on phones across WANA

Post by Grimeton » Sat, Jun 21, 2025, 12:15 PM UTC

joshstrange wrote: post #258

Grimeton wrote: post #221

Earlier quoted context omitted.

Because Apple blocks everybody else from spying on you but Apple themselves are still perfectly spying on you. And not just that, by disallowing all other apps to get their hands on your data you even tell Apple which data it can sell for a higher price because it's only available via Apple and noons else... Let that sink in.

Let what sink in? Your completely unprovable/unproven conspiracy theory? You are suggesting that Apple is actively tracking you in other apps (apps that aren’t allowed to track you themselves). I find that completely preposterous and a huge risk for Apple to take given their marketing. > Because Apple blocks everybody else from spying on you but Apple themselves are still perfectly spying on you. Extraordinary claims…

Post by saagarjha » Sat, Jun 21, 2025, 12:20 PM UTC

chaosbolt wrote: post #129

boramalper wrote: post #10

I suspect a strong link between mass surveillance (by corporations for advertising or by states for intelligence purposes) and the very recent targeting of the senior Iranian nuclear scientist and military officers at their homes in Iran. Wherever you are from or whatever side of the conflict you are on, I think we can all agree that it’s never been easier to infer so much about a person from “semi-public” sources su…

I suspect Israel has backdoor access to most CPUs. Here is how Pegasus seems: - China has 1.5 billion people, lots of resources, would profit a lot economically if they found a way to hack iOS, etc. But yet couldn't hack it. - Israel with its 7 million people, not only hacks iOS multiple times, but does it to spy on its allies. Now I've seen the threads analysing Pegasus' complexity, I don't know if it's been reprodu…

Post by ulrikrasmussen » Sat, Jun 21, 2025, 12:22 PM UTC

Zak wrote: post #219

gmueckl wrote: post #193

Earlier quoted context omitted.

4. Apps with special security needs are allowed to detect whether a device is unlocked and can either disable themselves or go into a mode that shifts ALL related liability onto the user. It's not the bank's fault if the user disabled protections and some spyware logs the online banking password or something like that.

I'm pretty sure I'm against this. I could be convinced otherwise by documentation of significant fraud involving compromised devices (especially Android phones) that would have been stopped by a device attestation scheme. I should note Google has such an attestation scheme, and there are reliable defeats for it in most situations given root access. Apps have been able to insist on hardware-backed attestation which ha…

Post by cigiv » Sat, Jun 21, 2025, 12:29 PM UTC

more-nitor wrote: post #112

willtemperley wrote: post #103

Earlier quoted context omitted.

So Unity can now be considered malware by association.

[flagged]

Post by xg15 » Sat, Jun 21, 2025, 12:33 PM UTC

miki123211 wrote: post #138

ulrikrasmussen wrote: post #108

Earlier quoted context omitted.

We need regulation which defines that any hardware device capable of running software developed by a third party different from the hardware manufacturer qualifies as a general purpose computing device, and that any such device is disallowed to put cryptographic or other restrictions on what software the user wants to execute. This pertains to all programmable components on the device, including low-level hardware co…

I agree, but I think three extra conditions would need to be added here. 1. Devices should be allowed to display a different logo at boot time depending on whether the software is manufacturer-approved or not. That way, if somebody sells you an used device with a flashed firmware that steals all your financial data, you have a way to know. 2. Going from approved to unapproved firmware should result in a full device w…