4 ms·

The Apple store becomes a failure point in this. A state actor could turn a low paid store worker to switch out phones of journalists coming in. Not saying it’

• CharlesColeman 8y ago
  > The Apple store becomes a failure point in this. A state actor could turn a low paid store worker to switch out phones of journalists coming in. Not necessarily, the journalist could go to a random store and the process could be setup as an exception to a normal purchase flow, so the journalist only needs to identify themselves after the phone has been removed from stock (and any effort to swap it would be super suspicious).
  • skellera 8y ago
    If it’s a targeted attack, I’m sure the turned employee would know who they’re looking for. I don’t think it’d normally be a random, let’s get anyone kind of thing.
    • CharlesColeman 8y ago
      > If it’s a targeted attack, I’m sure the turned employee would know who they’re looking for. I don’t think it’d normally be a random, let’s get anyone kind of thing. You missed a key point. Having a turned employee is only helpful if the person you're targeting goes to that person, but the whole point of the process I outlined was to make it too difficult to predict or control which employee the targeted person would interact with, which makes turning employees impractical (since you'd have to turn so many to have a reasonable chance of success that you'd probably just reveal your attack instead).