7 ms·
Aside from that obvious contradiction - this also indicates that the tools they deploy are either NSO hosted or use a licensing system to run. There was a rece
by q1w2 5y ago
Aside from that obvious contradiction - this also indicates that the tools they deploy are either NSO hosted or use a licensing system to run.
There was a recent Darknet Diaries episode that reported evidence that at least some of the NSO tools are hosted services.
- shmatt 5y agoI can't imagine something like this not being in the cloud. The potential for a customer to give their local NSA/8200 the tool to figure out the 0days used is too large Pegasus is only as good as its 0days are secret
- webmaven 5y ago> I can't imagine something like this not being in the cloud. The potential for a customer to give their local NSA/8200 the tool to figure out the 0days used is too large Heck, forget about bothering to extract 0-days; if you have access to the binary, straight-up warez techniques would be applied to nerf any restrictions (licensing or otherwise) on the operation of the software, as well as any monitoring functionality that can "phone home".
- faeyanpiraat 5y agoCouldn’t you hack your own phone and somehow log traffic to get the exploit used?
- GekkePrutser 5y agoYes you could. You could even use a fake phone which is wired to log everything. A lot of malware attempts to avoid VMs and stimulated environments but the actual 0 day would be before that point. If a state sponsored party really wants to find these zero days I'm sure they can. I would imagine that this is more like what happened with EternalBlue: it's something they know but don't report because it's useful to them too.
- deleted 5y ago[deleted]