Live data from Hacker News

Espionage Against the European Parliament

citizenlab.ca

81–90 of 145 posts

Re: Espionage Against the European Parliament

#81
post #6

Earlier quoted context omitted.

"he did not recall receiving the Apple notifications" so he didn't notice them.

I could be wrong here, but I can’t see any way of viewing old notifications. It isn’t hard to accidentally dismiss one then wonder what it was. Why there isn’t there an interface for looking back? Edit: below it says there are emails and notices on web login.

If a notification is dismissed on iphone, there's indeed no central UI to see it again on the phone. That's a sad state of iphone. Many people have asked, but Apple just doesn't care enough to do it. Now I hope this kind of high-profile security incidents could nudge Apple towards taking action.

Re: Espionage Against the European Parliament

#82

Earlier quoted context omitted.

I could be wrong here, but I can’t see any way of viewing old notifications. It isn’t hard to accidentally dismiss one then wonder what it was. Why there isn’t there an interface for looking back? Edit: below it says there are emails and notices on web login.

If a notification is dismissed on iphone, there's indeed no central UI to see it again on the phone. That's a sad state of iphone. Many people have asked, but Apple just doesn't care enough to do it. Now I hope this kind of high-profile security incidents could nudge Apple towards taking action.

Any source for that “Apple just doesn’t care”, as opposed to thinking there are security/privacy tradeoffs or other considerations that cut against such a feature?

Re: Espionage Against the European Parliament

#84
post #6
post #5

Earlier quoted context omitted.

>> Further validating our finding of targeting, our forensic analysis shows Kouloglou received multiple Apple threat notifications about targeting with mercenary spyware on three occasions: March 2, 2023, August 29, 2023, and April 10, 2024. It is important to note that threat notifications from Apple and other companies are not real-time alerts. They are typically sent to users in batches, often months or more after…

"he did not recall receiving the Apple notifications" so he didn't notice them.

Or he lied about noticing them to avoid embarrassment.

Re: Espionage Against the European Parliament

#85
post #82

Earlier quoted context omitted.

If a notification is dismissed on iphone, there's indeed no central UI to see it again on the phone. That's a sad state of iphone. Many people have asked, but Apple just doesn't care enough to do it. Now I hope this kind of high-profile security incidents could nudge Apple towards taking action.

Any source for that “Apple just doesn’t care”, as opposed to thinking there are security/privacy tradeoffs or other considerations that cut against such a feature?

Ok, apple does not care, but gives “security/privacy” consideration as a public reason for not doing anything.

Re: Espionage Against the European Parliament

#86

Earlier quoted context omitted.

How many nutjobs with Pegasus are really running around out there?

I think OP is more worried about one nutjob with a lot of targets.

wouldn't that burn the capability rather quickly though?

Re: Espionage Against the European Parliament

#87
post #82

Earlier quoted context omitted.

If a notification is dismissed on iphone, there's indeed no central UI to see it again on the phone. That's a sad state of iphone. Many people have asked, but Apple just doesn't care enough to do it. Now I hope this kind of high-profile security incidents could nudge Apple towards taking action.

Any source for that “Apple just doesn’t care”, as opposed to thinking there are security/privacy tradeoffs or other considerations that cut against such a feature?

If Apple can store the sms/iMessage, and email history, and health/journal history, and my Wallet payment history, in a safe manner I would think Apple can store notification history in a safe manner. How would notifications be meaningfully different from these?

I think the proof of Apple’s level of care is in their lack of attention to this issue.

Re: Espionage Against the European Parliament

#88
post #9

Earlier quoted context omitted.

That seems to be the case, although he claims to have somehow missed them. Overall this is one of those stories that's obviously an outrage, except for the fact that every country on Earth spies on the rest, and quite a few private entities do as well. Still the way the game is played if you get caught you have to act ashamed, and the people catching you get to gloat. It's silly, but it's a show the public never tire…

In this case he was investigating misuse of Pegasus spyware specifically, and was targeted with it while doing so. That's obstruction of justice, morally speaking, and would feel very scary, in that it would make you feel that this company might be so powerful that investigating it is personally dangerous.

Alternate spin: He now has a conflict of interest. He’s now too biased to work on the committee.

Re: Espionage Against the European Parliament

#89
post #56

Earlier quoted context omitted.

> The US does not spy on Five Eyes government leadership or that of Israel. Doubt. > unless there was a compelling national security reason There always is.

> Doubt Can you substantiate your doubt with even one piece of hard evidence?

1. I think burden of proof is on the opposite side. (Previous legislations/directives were circumvented without problem)

2.Asking for hard evidence of top spies secretly spying on heads of other states is … (not sure if there is a word for it; some blend between: unrealistic, unreasonable and oxymoron’ish. If they do their job well, you will not find it out, also it might be illegal or punishable to present such evidence)

Re: Espionage Against the European Parliament

#90
Isn't it the problem with software architecture choices like large monolitic kernels, lots of unnecessary telemetry/marketing services, legacy APIs, unsafe languages like C, lack of static analysis, etc?

You should threat a phone as an infected ground and do not keep anything important there.

Some leaders simply do not use smartphones and are protected from electronic spyware.

Post reply on HN