3 ms·
Interesting! I'm assuming this should have limited access to what requests it sends to the phone. I'm also assuming this limited access would be implemented by
by ThalesX 3y ago
Interesting! I'm assuming this should have limited access to what requests it sends to the phone. I'm also assuming this limited access would be implemented by the manufacturer.
So my question, based on those assumptions, is: this application toolkit, as well as OS level calls would require an exploit by the intelligence agency to be able to give commands such as start the camera and stream it? I guess the barrier between the OS and the SIM holding hardware would have to be broken so that the camera could be made to stream to some random endpoint.
- JPLeRouzic 3y agoAbout camera I don't know but controlling the browser and multimedia is possible: https://www.etsi.org/deliver/etsi_ts/131100_131199/131111/17.08.00_60/ts_131111v170800p.pdf https://www.etsi.org/deliver/etsi_ts/131100_131199/131111/17...
- ale42 3y agoFrom the specification it looks it can open a browser... combine that with an exploit for the browser...
- ThalesX 3y agoIf I were some sort of criminal and my phone's browser would open up after which I'd see the video / audio / gps icons light up, I'd be very suspicious.
- ale42 3y agoDefinitely. But I guess that it might be more subtle. The web page can show some benign message (let's say something related to your cell provider) and deliver an exploit to install a spyware like Pegasus. There would be no immediate sign of infection or suspicious activity besides the unexpected browser opening.