11 ms·
- Smart TV turned into listening devices with fake off mode? - Intercepting audio/texts before encryption by Signal, Whisper, WhatsApp etc. - Dozens of O-day
by bhouston 10y ago
- Smart TV turned into listening devices with fake off mode?
- Intercepting audio/texts before encryption by Signal, Whisper, WhatsApp etc.
- Dozens of O-day attacks again Andriod and iPhone.
Pretty powerful stuff.
- joeyspn 10y ago> Intercepting audio/texts before encryption by Signal, Whisper, WhatsApp etc I wish I could say that I'm surprised but no... not surprised at all. Same for the IoT stuff.
- nightpool 10y agoWhy would you be surprised by the fact that if your phone is compromised, even the best encryption software in the world isn't going to help?
- homakov 10y agoAnother victim of sensationalism.
- monochromatic 10y agoThe conclusions are correct. Talking about them isn't sensationalist just because you think they're foreseeable.
- homakov 10y agoI refered to "being not surprised that encryption is broken". There was nothing relevant to encr in the document. The title is wrong.
- joeyspn 10y agoWho said "being not surprised that encryption is broken"??? Read the quote again: "Intercepting audio/texts before encryption" I'm not surprised that they can INTERCEPT and read ALL your communications... jeez
- tmccrmck 10y agoYep. We all knew it was happening but turn a blind eye. And then one of these revelations are exposed and we all start wearing tin foil hats for a month or two.
- CaptSpify 10y agoThe big question for me is: What's the alternative? AFAIK, there's no secure replacement for most IoT stuff, or phones.
- ploggingdev 10y ago> Intercepting audio/texts before encryption by Signal, Whisper, WhatsApp etc. This basically means if your device is compromised, expect malware to be able to read all content (including Signal, WhatsApp messages). Nothing new. The way it's phrased makes it sound like Signal, WhatsApp have vulnerabilities, but no, the intention is sensationalism over sound analysis.
- roryisok 10y agoNo mention of Windows Phone. I guess I'm safe =)
- NoGravitas 10y agoYes, that's nothing new, and it's obvious to us here on HN. However, I disagree that the intention can only be sensationalism. The average computer/smartphone user (or journalist!) absolutely does not understand that if their device's operating system is compromised, that so are all the apps they run. Saying that messages can be intercepted before they are encrypted is worth pointing out as a realistic consequence of someone's device being compromised; a consequence that J. Random Journalist would not realize if it were not specifically pointed out.
- homakov 10y ago
- tptacek 10y agoThe iOS attack breakdown lists a combination of vulnerabilities in very old versions of iOS, vulnerabilities first published by jailbreak teams, and a couple purchased vulnerabilities. The breakdown ends with a publicly jailbroken iOS version. The Smart TV implant appears to just be a modified version of an open source firmware replacement project.
- draugadrotten 10y ago> vulnerabilities first published by jailbreak teams, I guess we now know who is sponsoring these jailbreak guys and why.
- stirlo 10y agoJailbreak teams publish widely and open source (mostly) they are actually the CIA's opponents burning zero days which they would much rather keep to themselves. The CIA would undoubtedly be customers of companies like Vupen and Zerodium though.
- ghughes 10y agoWhat would be the point of the CIA sponsoring jailbreak teams? The exploits they find are generally burned very quickly.
- willstrafach 10y ago> I guess we now know who is sponsoring these jailbreak guys and why. One of the vulnerabilities on the iOS page is from a team I had founded a few years ago. I certainly do not recall us getting a check from the CIA.
- freyr 10y agoI was upset that our government is exploiting our consumer devices. Now I'm upset that our government isn't exploiting our consumer devices better.
- tokenizerrr 10y agoIt's 0-day, not O-day.
- samstave 10y ago0K