Live data from Hacker News

Amazon Shuts Down NSO Group Infrastructure

vice.com

31–40 of 260 posts

Re: Amazon Shuts Down NSO Group Infrastructure

#31
post #3

Shouldn’t there be an outcry against the suppression of free speech? When Facebook or Google blocks extremist propaganda, it’s a big thing. What jurisdiction’s laws were broken by this company?

Not convinced that using the service to distribute malware, on behalf of odious third party governments for antidemocratic purposes, is protected by free speech demands. It's not speech, is it?

Re: Amazon Shuts Down NSO Group Infrastructure

#32

Isn't NSO just a poor-man's NSA, since the NSA can force Google/Apple/Microsoft/Amazon/[Any Carrier] to do anything to any number of devices or data, and in secret?

NSO seems to be used by tyrants to go after legitimate opposition. The NSA isn't used by the President to target the party out of power no? But in NSO case in India apparently it was: https://www.theguardian.com/news/2021/jul/19/key-modi-rival-...

NSO is used to keep those with money and access to NSO in power undermine their legitimate rivals. It can be used to plant evidence on their devices as well as monitor everything they do.

Re: Amazon Shuts Down NSO Group Infrastructure

#33

I contacted Amazon to report an advertiser out of Tel Aviv that was using JavaScript hosted on CloudFront to fingerprint user's devices and if an Android device was detected a fake media player or fake CAPTCHA would trick user's into accepting push notifications for fake virus warnings to install questionable apps from the Play Store. This script also pushed ads for a fake AdBlock app that was a dropper for banking t…

It feels like this is more a result of Amazon not being able to connect you with the right escalation path to verify & act on these claims than a considered decision to ignore them.

Does anyone here know what an individual reporter should do? Is there an escalation ramp that exists but was so poorly marked that neither sloshnmosh nor Amazon support was able to find it? Does the ramp go through other organizations (e.g. report to CERT or some other org first and come back with a case ID)? Does the ramp not exist and need to be built?

Re: Amazon Shuts Down NSO Group Infrastructure

#34
I am willing to bet money that NSO Group has multiple AWS accounts, many under several layers of cover.

You can't really spin them up with any significant quota on short notice (ask me how I know, AWS service team) so having established ones with workable limits in advance across multiple cloud providers would be table stakes for any competent spying organization.

Re: Amazon Shuts Down NSO Group Infrastructure

#35
post #8

Earlier quoted context omitted.

It's "DigitalOcean" - sorry to be pedantic, it drives me absolutely nuts when people put a space between, especially publications.

My pet peeve is publications spelling NASA as Nasa. They've come up with some story to explain their decision that sounds just as bad as some of the lies Walter White told. I don't care how ubiquitous NASA maybe, it is and always will be an acronym. I accept removing the dots so it's not N.A.S.A., but I will only accept Nasa as a formal name if that's the name of a person.

How do you feel about "scuba" or "laser?" Acronyms that are pronounced like they're spelled (eg, Nasa, gif, taser) tend to end up being spelled like words sooner or later instead of being in all caps.

Re: Amazon Shuts Down NSO Group Infrastructure

#36
post #28

Anyone notice that this statement from NSO in the article doesn't make sense: "NSO does not operate its technology, does not collect, nor possesses, nor has any access to any kind of data of its customers." If this is true, how do we have a singular list of all phone numbers penetrated? If there was this type of "segmentation" or firewall between NSO and its clients, why was there this huge central data leak? NSO is…

It could mean that NSO controls the infrastructure that manages the tool, but that they don't actually collect the data themselves. So what they said could technically be true if all they do is manage the infrastructure that enables their clients to do the collection of data.

Re: Amazon Shuts Down NSO Group Infrastructure

#37
post #32

Isn't NSO just a poor-man's NSA, since the NSA can force Google/Apple/Microsoft/Amazon/[Any Carrier] to do anything to any number of devices or data, and in secret?

NSO seems to be used by tyrants to go after legitimate opposition. The NSA isn't used by the President to target the party out of power no? But in NSO case in India apparently it was: https://www.theguardian.com/news/2021/jul/19/key-modi-rival-... NSO is used to keep those with money and access to NSO in power undermine their legitimate rivals. It can be used to plant evidence on their devices as well as monitor ever…

[deleted]

Re: Amazon Shuts Down NSO Group Infrastructure

#38
post #32

Isn't NSO just a poor-man's NSA, since the NSA can force Google/Apple/Microsoft/Amazon/[Any Carrier] to do anything to any number of devices or data, and in secret?

NSO seems to be used by tyrants to go after legitimate opposition. The NSA isn't used by the President to target the party out of power no? But in NSO case in India apparently it was: https://www.theguardian.com/news/2021/jul/19/key-modi-rival-... NSO is used to keep those with money and access to NSO in power undermine their legitimate rivals. It can be used to plant evidence on their devices as well as monitor ever…

>The NSA isn't used by the President to target the party out of power no?

No, definitely not.

Re: Amazon Shuts Down NSO Group Infrastructure

#39
post #36
post #28

Anyone notice that this statement from NSO in the article doesn't make sense: "NSO does not operate its technology, does not collect, nor possesses, nor has any access to any kind of data of its customers." If this is true, how do we have a singular list of all phone numbers penetrated? If there was this type of "segmentation" or firewall between NSO and its clients, why was there this huge central data leak? NSO is…

It could mean that NSO controls the infrastructure that manages the tool, but that they don't actually collect the data themselves. So what they said could technically be true if all they do is manage the infrastructure that enables their clients to do the collection of data.

But do they have access to the phone numbers that their customers are targeting? That seems by itself to contradict their statement ("nor has any access to any kind of data of its customers") right there.

Something isn't adding up.

Re: Amazon Shuts Down NSO Group Infrastructure

#40
post #9

Perhaps NSO Group should be considered a terrorism-aiding organization. Freeze its assets, track all their employees, backers, etc. Wonder if they are even helping to hack US government employees through China, etc. (besides just helping to torture dissidents).

The biggest customers for these companies are Western governments. You’re not going to take away their toys.
Post reply on HN