22 ms·
If Cellebrite was disclosing these vulns when they found them, there would be no business, thus no Cellebrite, thus they wouldn’t have found them. “Destroy Cell
by spoonjim 5y ago
If Cellebrite was disclosing these vulns when they found them, there would be no business, thus no Cellebrite, thus they wouldn’t have found them. “Destroy Cellebrite” is a possible outcome but “Have Cellebrite release 0days when they find them” isn’t.
- kstrauser 5y agoTheir terrible business model isn’t my concern. And “keep security vulnerabilities secret and hope that we’re the only ones who can use them” is, indeed, terrible.
- spoonjim 5y agoRight, so your beef with Cellebrite is that they exist (fair) not that they hoard 0days (which is a necessary condition for them to exist).
- Kim_Bruning 5y agoI disagree with your re-casting of the parent's statement. I believe the parent said that they are in fact opposed to Cellebrite's hoarding of 0-days.
- kstrauser 5y agoI’m not sure how you came up with that incorrect conclusion.
- ric2b 5y agoAny 0-days they find can be used on already confiscated devices even if they report them and the manufacturer issues a fix, so their business could in theory still work.