A Closer Look at North Korea’s Ullim Tablet
38north.org
A Closer Look at North Korea’s Ullim Tablet
1–10 of 177 posts
Re: A Closer Look at North Korea’s Ullim Tablet
#2Credit where credit is due - they have turned android into ios. They have locked bootloader, kernel patch protection and static and dynamic code signing.
Re: A Closer Look at North Korea’s Ullim Tablet
#3ok , so DPRK is installing spyware on tablets that are sold in DPRK.
Reading this article, it occurs to me that it's not very different than the surveillance that the NSA is performing on US Citizens, except the NSA is smarter about it and taps the network access, at the network provider.
Re: A Closer Look at North Korea’s Ullim Tablet
#4Here's a link to the talk from 33c3 - https://www.youtube.com/watch?v=fAtWwadP6CY
Re: A Closer Look at North Korea’s Ullim Tablet
#5ok , so DPRK is installing spyware on tablets that are sold in DPRK. Reading this article, it occurs to me that it's not very different than the surveillance that the NSA is performing on US Citizens, except the NSA is smarter about it and taps the network access, at the network provider.
There is a big difference. A compromised device would mean that _everything_ you do is being open to surveillance. Passive taps limits the eavesdropper to rely on either the transport being unencrypted or vulnerabilities in related software. In other words, passive network surveillance will only reliably provide a limited subset of information, such as meta-data, rather then content of the payload which may or may not be available to the organisation undertaking the surveillance.
WhatsApp can't defend against screenshots on your device. The article states -
It runs in the background and takes a screenshot every time the user opens an app.
Re: A Closer Look at North Korea’s Ullim Tablet
#6ok , so DPRK is installing spyware on tablets that are sold in DPRK. Reading this article, it occurs to me that it's not very different than the surveillance that the NSA is performing on US Citizens, except the NSA is smarter about it and taps the network access, at the network provider.
The NSA isn't attempting to control what you do on your devices in any way.
Re: A Closer Look at North Korea’s Ullim Tablet
#7I prefer the version "not all that glitters is gold", otherwise it sounds like gold, which glitters, is not gold. Interestingly in Spanish both versions are also popular.
Re: A Closer Look at North Korea’s Ullim Tablet
#8ok , so DPRK is installing spyware on tablets that are sold in DPRK. Reading this article, it occurs to me that it's not very different than the surveillance that the NSA is performing on US Citizens, except the NSA is smarter about it and taps the network access, at the network provider.
There is a big difference. A compromised device would mean that _everything_ you do is being open to surveillance. Passive taps limits the eavesdropper to rely on either the transport being unencrypted or vulnerabilities in related software. In other words, passive network surveillance will only reliably provide a limited subset of information, such as meta-data, rather then content of the payload which may or may no…
Perhaps you're not familiar with Intel's management engine?
Re: A Closer Look at North Korea’s Ullim Tablet
#9The one good, albeit tragic, thing about the existence of North Korea is that it serves as a constant reminder of what society can become if we're not vigilant about educating each generation about the dangers of certain ideologies and modes of social organization.
Re: A Closer Look at North Korea’s Ullim Tablet
#10ok , so DPRK is installing spyware on tablets that are sold in DPRK. Reading this article, it occurs to me that it's not very different than the surveillance that the NSA is performing on US Citizens, except the NSA is smarter about it and taps the network access, at the network provider.
> it's not very different than the surveillance that the NSA is performing
Here's one obvious way: the Norks "Viewer" app shows you what they've collected on you which is itself a form of control (though it could be used to hunt for blind spots). The NSA doesn't really want you to know what they know or how they learnt it.