61–70 of 314 posts
> Almisshal’s device shows what appears to be an unusual number of kernel panics (phone crashes) between January and July 2020. While some of the panics may be benign, they may also indicate earlier attempts to exploit vulnerabilities against his device.
Earlier quoted context omitted.
Seems fairly hypocritical in a number of ways. From our own companies actions, like Blackwater, to our allies actions, like Saudi Arabia, to our own government's actions, like "Collateral Murder" or events in Yemen. Why punish Israel?
Everyone does it so I can too? You have to start somewhere. But yes, let’s also cut off all the others you mentioned.
Then start with yourself. I'm not condoning Israel's actions but punishing them for what we still do is tyranny.
Earlier quoted context omitted.
Israel is not a signatory of the Wassenaar Arrangement, and I'm not sure how that would work under the law mentioned. Either way, it would be rather targeted enforcement considering what the Hacking Team apparently did with Italy signing the agreement.
I guess the question now is; under what jurisdiction does exploits based on WhatsApp and iOS source code lie? If I reverse engineered and sold exploits of American missile systems while in Somalia would that mean everything is A-OK? Idk. Again, not a lawyer.
As someone that isn't a developer, I wonder how many zero days come from people inside the software team. To simply have knowledge of a difficult bug that hasn't been resolved would seem to be valuable commodity in a closed source system.
Impossible to track in-person knowledge exchange, so code wouldn’t really be the culprit IMO.
Earlier quoted context omitted.
Seems fairly hypocritical in a number of ways. From our own companies actions, like Blackwater, to our allies actions, like Saudi Arabia, to our own government's actions, like "Collateral Murder" or events in Yemen. Why punish Israel?
> Why punish Israel? The whole "assist[ing] in getting journalists arrested/murdered/dismembered" thing still seems like pretty good justification to me. I'm not sure "but everyone else is doing it!" makes that acceptable. Requiring that we deal with every single one of those problems simultaneously else we shouldn't bother with any of them doesn't seem productive. I'm also not sure I'd describe the refusal to active…
Then deal with the domestic ones first, the ones we have the most control over. People only care about these issues when the solution is "punish the country," a solution that likely causes more suffering than it stops.
Earlier quoted context omitted.
Everyone does it so I can too? You have to start somewhere. But yes, let’s also cut off all the others you mentioned.
>You have to start somewhere Then start with yourself. I'm not condoning Israel's actions but punishing them for what we still do is tyranny.
More generally, is there a known correlation between kernel panics and exploits, especially on macOS? > Almisshal’s device shows what appears to be an unusual number of kernel panics (phone crashes) between January and July 2020. While some of the panics may be benign, they may also indicate earlier attempts to exploit vulnerabilities against his device.
Earlier quoted context omitted.
I guess the question now is; under what jurisdiction does exploits based on WhatsApp and iOS source code lie? If I reverse engineered and sold exploits of American missile systems while in Somalia would that mean everything is A-OK? Idk. Again, not a lawyer.
Whether the actions are technically illegal doesn't really matter unless we are already punishing anyone that breaks those laws. In your hypothetical, we would be punishing Somalia when Italy did the exact same thing unpunished.
Iirc, hacking team dissolved or greatly downsized after their leak. I do not recall any cases against them for their export license to be revoked. I'm sure if the Italian courts rejected the case baselessly then there would be consequences (maybe further legal action/sanctions on specific individuals) as Italy does not operate with the same unique impunity that Israel does.
The difference with Italy is that it does not receive state aid from the Americans. I'm sure if they were then people would be calling for cuts in a similar situation.
Apple needs to do a serious architecture of how its own apps work. Its clearly unacceptable that their own apps are not sandboxed to the same level as everything else. If its not possible to implement all of imessage with the public APIs then they need to find a way to expose those private APIs publicly in a safe way. imessage and facetime have been a constant source of exploits.
It’s not just the lack of sandboxing — iMessage uses language-level serialization of object graphs. This design is never suitable for sending across privilege boundaries. Apple should replace the format with a reasonable wire format. If this requires updates to apps that integrate with iMessage or breaks interoperability with older iOS versions, so be it.