3 ms·

>Usage of Pegasus means all intercepts are on the servers in Israel Wait, seriously? Any sources on that? I find it hard to believe that any government would s

>Usage of Pegasus means all intercepts are on the servers in Israel Wait, seriously? Any sources on that? I find it hard to believe that any government would spend $$$ on a security tool that doesn't allow on-prem installation and instead beams all your surveillance to another country.

DANmode 3y ago
You have a lot to catch up on, then.
xemoka 3y ago
I’m curious about this statement too, seems there’s evidence that they don’t and the customer is the data handler: https://www.edps.europa.eu/system/files_en?file=2023-01/0221_2022-0615_019_redacted.pdf https://www.edps.europa.eu/system/files_en?file=2023-01/0221... top of page 4. I guess this is all according to NSO claims. I’d like to see evidence otherwise!
- axlee 3y ago
  Why would you trust anything a spyware company says? This is not a tongue-in-cheek question.
  - miohtama 3y ago
    No honour among the thieves
  - giancarlostoro 3y ago
    It is a lot of money lost if it comes out that you lied to some of your biggest clients.
    - retox 3y ago
      Not if your customers are reticent to even admit being a customer in the first place.
      - giancarlostoro 3y ago
        Your other customers will see every major headline that you lied and kept confidential documents.
- rasz 3y ago
  That was one of the claims during parliamentary committee investigating it.
  - deleted 3y ago
    [deleted]
voytec 3y ago
S(pyware)aaS
siva7 3y ago
a) it's not a security tool but spyware b) this spyware is meant to spy on the government so this job is better outsourced to another government
Szpadel 3y ago
this was meant to be used for spying terrorists and such, so should not be big deal from what I heard about Pegasus: noone could get that malware for themselves to not compromise it, so it's you wanted to hijack some phone you would send them phone number so they could resend exploit again (spyware was not persistent across reboots, so you needed to rehack it every time)
surfingdino 3y ago
NATO countries' governments and military use phones with encrypted communications to which the US has the keys. This fact was made available during investigation into the Polish government plane crash in Smolensk. The US authorities have access to the recordings of the calls made by the late president of Poland, but said they would not make them available. source: https://www.money.pl/archiwum/wiadomosci/artykul/usa;nie;ujawnia;tresci;rozmowy;braci;kaczynskich,110,0,642158.html https://www.money.pl/archiwum/wiadomosci/artykul/usa;nie;uja... Indirectly, all software vulnerability tools that send source code and other artefacts to servers outside government's control give third parties access to information about potential attack vectors, software vulnerabilities, and infrastructure layout.
- FirmwareBurner 3y ago
  >NATO countries' governments and military use phones with encrypted communications to which the US has the keys. What do these phones look like and who manufactures them?
  - surfingdino 3y ago
    [flagged]
    - FirmwareBurner 3y ago
      [flagged]

DANmode 3y ago

You have a lot to catch up on, then.

xemoka 3y ago

I’m curious about this statement too, seems there’s evidence that they don’t and the customer is the data handler: https://www.edps.europa.eu/system/files_en?file=2023-01/0221_2022-0615_019_redacted.pdf https://www.edps.europa.eu/system/files_en?file=2023-01/0221... top of page 4. I guess this is all according to NSO claims. I’d like to see evidence otherwise!

axlee 3y ago
Why would you trust anything a spyware company says? This is not a tongue-in-cheek question.
- miohtama 3y ago
  No honour among the thieves
- giancarlostoro 3y ago
  It is a lot of money lost if it comes out that you lied to some of your biggest clients.
  - retox 3y ago
    Not if your customers are reticent to even admit being a customer in the first place.
    - giancarlostoro 3y ago
      Your other customers will see every major headline that you lied and kept confidential documents.
rasz 3y ago
That was one of the claims during parliamentary committee investigating it.
- deleted 3y ago
  [deleted]

voytec 3y ago

S(pyware)aaS

siva7 3y ago

a) it's not a security tool but spyware b) this spyware is meant to spy on the government so this job is better outsourced to another government

Szpadel 3y ago

this was meant to be used for spying terrorists and such, so should not be big deal from what I heard about Pegasus: noone could get that malware for themselves to not compromise it, so it's you wanted to hijack some phone you would send them phone number so they could resend exploit again (spyware was not persistent across reboots, so you needed to rehack it every time)

surfingdino 3y ago

NATO countries' governments and military use phones with encrypted communications to which the US has the keys. This fact was made available during investigation into the Polish government plane crash in Smolensk. The US authorities have access to the recordings of the calls made by the late president of Poland, but said they would not make them available. source: https://www.money.pl/archiwum/wiadomosci/artykul/usa;nie;ujawnia;tresci;rozmowy;braci;kaczynskich,110,0,642158.html https://www.money.pl/archiwum/wiadomosci/artykul/usa;nie;uja... Indirectly, all software vulnerability tools that send source code and other artefacts to servers outside government's control give third parties access to information about potential attack vectors, software vulnerabilities, and infrastructure layout.

FirmwareBurner 3y ago
>NATO countries' governments and military use phones with encrypted communications to which the US has the keys. What do these phones look like and who manufactures them?
- surfingdino 3y ago
  [flagged]
  - FirmwareBurner 3y ago
    [flagged]