Live data from Hacker News

U.S. State Department phones hacked with Israeli company spyware

reuters.com

541–550 of 651 posts

Re: U.S. State Department phones hacked with Israeli company spyware

#541

Earlier quoted context omitted.

Remember that this group's tools have been used to murder journalists, which they are unapologetic about.

Dead journalists can't close them down, but the US government can.

I don't think the US really cares all that much if Saudi Arabia cracks down on dissidents. It's only bad if Russia or China does it.

Re: U.S. State Department phones hacked with Israeli company spyware

#542
post #525

Earlier quoted context omitted.

> In principle, America could drop Hellfire R9X sword missiles through the cars of every NSO employee. The next step isn't to blow them up, the next step is to sue them. I just assume the IDF and Shin Bet would like to be the only ones who blow up civilians in Israel, but I can't think of a single reason why the Israeli government would oppose an extradition request if they were presented with evidence of cyber-whate…

> I can't think of a single reason why the Israeli government would oppose an extradition request if they were presented with evidence of cyber-whatever. If an American company would get caught doing the similar, would US allow extradition request of those people to some other country?

…if they were presented with evidence that crimes were committed?

This is what extradition treaties are for. The specific laws involved and the evidence matter a lot.

Re: U.S. State Department phones hacked with Israeli company spyware

#543

Earlier quoted context omitted.

Israel is a client state of the USA. They are America's enforcers in the Middle East.

That's factually wrong. Israel is it's own full state.

Israel wouldn't last a year without the unequivocal support of the West.

Re: U.S. State Department phones hacked with Israeli company spyware

#544

Earlier quoted context omitted.

U.S. weapons manufacturers receive a lot of criticism too, both domestically in the U.S. and internationally. The comments here focus on NSO because the story is about what NSO did. This is computer tech kind of community so you’re going to see more computer weapon stories here than stories about improper use of rifles.

The U.S sells super sophisticated weapons such as attack drones, F-15s or nuclear submarines. The tech behind these things is probably super interesting and there's a lot of software involved. If you look at the comments here, around 90% of them don't care about the tech at all but focus on bashing Israel. This isn't a tech story.

An Israeli company selling hacking services to every dictatorship and or corporation willing to pay? I hope you can see why that's bad.

And yes I'm acutely aware that the CIA literally ran torture training camps in the 1970s but two wrong don't make something right.

Re: U.S. State Department phones hacked with Israeli company spyware

#545
post #228

Earlier quoted context omitted.

Imagine all the dirt the NSA has on congress.

Imagine how much society would improve if all the dirt got aired. Hiding this information is trading the wellbeing of the country for the NSA's own internal goals and power.

[deleted]

Re: U.S. State Department phones hacked with Israeli company spyware

#546
post #471

Earlier quoted context omitted.

Well since they do the exploitation on behalf of customers, yes? NSO is very popular with governments that don't have robust domestic intelligence because all you have to do is type a phone number into a web form and in anywhere from an hour to a week you get a point and click GUI for accessing the contents of the phone.

My thought was that the customer runs the server provided by NSO. I though the web form is running off of a webserver in a building owned by the customer.

I used to work for an ISV in the finance industry. Most of our customers ran our stuff on their own servers in their own data centres, but we had direct logon to the application user account to manage the application config, do software upgrades, investigate issues, etc. A few of our customers preferred to support the software entirely themselves, we had no access and ran training courses for their support teams. I wouldn't be surprised if NSO offer a similar range of options depending on the client's budget and technical capabilities.

Re: U.S. State Department phones hacked with Israeli company spyware

#547
post #503

Earlier quoted context omitted.

Really, all you need is a subtle suggestion to the Israeli government that the hundred billions or so dollars they receive from the US every year might be impacted by continued NSO bad publicity.

that number is way off, and the money they "receive", is specifically for use with US defence contracts and deals.. Its like Disneyland giving you Disneydollars.. You can only spend them at Disneyland.. It is a way for the US military-industrial complex to stay afloat.. And it is a drop in the bucket for Israeli Defence spending, and would make little difference if they took it out.

It somehow keeps the US military industrial complex afloat while being a drop in the bucket for Israel?? You may be biased.

Threat of removing 20% of Israeli defense budget [1] would hypothetically be plenty enough to apply serious political pressure, and thats just the money, forgetting the political support and the deterrent US support provides them.

[1] https://usafacts.org/articles/how-much-military-aid-does-the...

Re: U.S. State Department phones hacked with Israeli company spyware

#548
post #365

This is a typical "shadow government" symptom. You have forces working within the government that 1) have their own agendas; 2) have connection to international communities, usually military-intelligence ones; 3) have almost zero regulation; 4) even many high ranking government officials don't know about them because they are brotherhood-like closed circles. This reminds me of Operation Gladio or Propaganda Due but d…

“Shadow government” = “Deep state”?

Yes, basically a state organization that the public has no control over it and is following its own goals, often against the goals of organizations under the control of the public.

It's often taught in political classes and it isn't a conspiracy that there exists a "deep state" or "shadow goverment".

For example, the roman elite troop, the Praetorian Guards, can be classified as a "deep state", as they had their own goals and if they were not meet, then they would just kill the emperor. At the same time, the emporer and the senat had almost no control over the Praetorian Guard.

Re: U.S. State Department phones hacked with Israeli company spyware

#549
post #189

Is anyone working on a microkernel design for privacy-sensitive devices (like phones) that would prevent outright this class of kernel-level arbitrary code execution exploits? We're stuck with iOS and Android for the foreseeable future, but is there hope that we'll get this right some day? Actually, would a microkernel design even be sufficient? Given that hackers exploit deserialization, memory safety, and variable…

I don't know why anyone would even bother to suggest such a thing when there's a second, completely-independent, unobservable computer running on every phone, with ring -1 access. Until we get rid of those, phones will continue to be the IDEAL surveillance tool for state-level actors. It's like the old saying about security: If you have access to the hardware, all bets are off. In our phones, the cell companies already have hardware-level access. It's almost like the government had a hand in developing the cell phone technology stack to make it so easy to use in this capacity... (Seriously, they did, but I don't want to go down the rabbit hole of finding links.)

Re: U.S. State Department phones hacked with Israeli company spyware

#550

> NSO Group said in a statement on Thursday that it did not have any indication their tools were used but canceled the relevant accounts and would investigate based on the Reuters inquiry. Why would they cancel accounts without knowledge of wrongdoing?

Remember that this group's tools have been used to murder journalists, which they are unapologetic about.

It seems to me their entire repeated justification is to pass the buck to foreign governments that buy their product. It's like the 4th time I've seen this company pop up in my newsfeed in the last 6 months, every time a similar story. I wonder when enough is enough for whoever holds authority over them
Post reply on HN