Rocksolid Light

News from da outaworlds

mail  files  register  groups  login

Message-ID:  

You will have good luck and overcome many hardships.


rocksolid / Security / Is iOS as insecure as "the Torture Journal" reports?

SubjectAuthor
* Is iOS as insecure as "the Torture Journal" reports?"Niocláiſín Cóilín de Ġlo
`- Re: Is iOS as insecure as "the Torture Journal" reports?Niocláisín Cóilín de Ghlostéir

1
Subject: Is iOS as insecure as "the Torture Journal" reports?
From: Niocláiſín Cóil
Newsgroups: relcom.comp.security, rocksolid.shared.security, alt.comp.issues.security
Organization: A noiseless patient Spider
Date: Sun, 12 Jan 2025 08:54 UTC
Path: news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: Master_Fontaine_is_dishonest@Strand_in_London.Gov.UK (Niocláiſín Cóilín de Ġloſtéir)
ſtéir" <Master_Fontaine_is_dishonest@Strand_in_London.Gov.UK>
Newsgroups: relcom.comp.security,rocksolid.shared.security,alt.comp.issues.security
Subject: Is iOS as insecure as "the Torture Journal" reports?
Date: Sun, 12 Jan 2025 09:54:26 +0100
Organization: A noiseless patient Spider
Lines: 97
Message-ID: <0c025cbe-cd06-a332-63c2-190ae3515c25@Strand_in_London.Gov.UK>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="8323329-671501072-1736672070=:570917"
Injection-Date: Sun, 12 Jan 2025 09:54:31 +0100 (CET)
Injection-Info: dont-email.me; posting-host="c403f879b9d19fdc3be6ff251eead11b";
logging-data="1154543"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18XtpFBxUpndmxo3FoOX75gGiheFxjY3IF5CJpCUlfP5w=="
Cancel-Lock: sha1:14zLhVoSI9XrgRrHwfBOPs2/PBA=
View all headers

Happy New Year!

Please excuse me if this post is better suited for a different newsgroup.
If so, then please recommend a relevant newsgroup.
(muc.lists.freebsd.security
and
muc.lists.freebsd.security.notifications
or even
muc.lists.netbsd.tech.security
might be good but I am not certain that a message via USENET to them would
get through and I did not subscribe an email account to those email
lists.)

"A well-known case of surveillance software
usage is that of Pegasus21, the programme that
came to light when R3D, a Mexican human
rights organisation protecting freedom of expression
discovered its systematic use by the
government to spy on journalists and activists
who were later targeted, some of them suffering
threats, defamation, kidnapping or torture
(R3D, 2017). The software consists of malware
that infects Apple iPhones through a WhatsApp
message or a failed phone call. The attacker
has access to everything in the victim’s device:
email, messaging services, camera, and microphone.
The software is manufactured by the
Israeli company, NSO Group. On its website22
the company claims to sell the tool exclusively
to governments on the condition that it is only
used “to combat terrorists” and notes that the
software has saved “thousands of lives.” The
software is sold also to private companies and
contractors through reseller companies such as
Hacking Team. According to R3D, the government
is billed around 75,000 euros per successfully
controlled telephone. A report by the Red
en Defensa de los Derechos Digitales (Network
for the Defense of Digital Rights) evidenced
that the software was acquired by the Mexican
Army in 2012 and by the office of the Attorney
General (PGR) in 2014. An impressive series of
studies show how the use of Pegasus has been
an essential element in the murdering of journalists
and for targeting politicians, lawyers and
opponents in Mexico.23

A research center, Citizen Lab24 based at
the University of Toronto, produces regular
reports and provides advice against such practices.
It has detected the use of Pegasus in 45
countries and other similar software in almost
all countries25."
says
@article{cdominey_+Torture+Volume+30-01_digital_edition_FINAL-5-22.pdf,
title={{Internet and communications as elements for CIDT and Torture.
Initial reflections in an unexplored field}},
volume={30},
url={HTTPS://Tidsskrift.Dk/torture-journal/article/view/120593},
DOI={10.7146/torture.v30i1.120593},
number={1},
journal={Torture Journal},
author={Pérez-Sales, Pau and Serra, Laia},
year={2020},
month={May},
pages={5--22},
abstractNote={&amp;lt;div
class=&amp;quot;page&amp;quot; title=&amp;quot;Page 5&amp;quot;&amp;gt;
&amp;lt;div class=&amp;quot;section&amp;quot;&amp;gt; &amp;lt;div
class=&amp;quot;layoutArea&amp;quot;&amp;gt; &amp;lt;div
class=&amp;quot;column&amp;quot;&amp;gt; &amp;lt;p&amp;gt;The internet was
once seen as a new and definitive window to freedom and a world without
torture. There is however, another less obvious but perhaps more notorious
side: torturous environments can also be created through the internet; a
place where individu- als may be targeted for discrimination, coer- cion
or control.There is a dearth of academic research and theoretical
developments in this very new area of knowledge and this Edito- rial will
review and reflect on various aspects, thereby suggesting possible lines
of research.&amp;lt;/p&amp;gt; &amp;lt;/div&amp;gt; &amp;lt;/div&amp;gt;
&amp;lt;/div&amp;gt; &amp;lt;/div&amp;gt;}
}

(I am citing this paper in a draft of a research article for a different
reason.)

Subject: Re: Is iOS as insecure as "the Torture Journal" reports?
From: Niocláisín Cóilí
Newsgroups: relcom.comp.security, rocksolid.shared.security, alt.comp.issues.security
Organization: A noiseless patient Spider
Date: Fri, 7 Mar 2025 21:59 UTC
References: 1
Path: news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: Master_Fontaine_is_dishonest@Strand_in_London.Gov.UK (Niocláisín Cóilín de Ghlostéir)
Newsgroups: relcom.comp.security,rocksolid.shared.security,alt.comp.issues.security
Subject: Re: Is iOS as insecure as "the Torture Journal" reports?
Date: Fri, 7 Mar 2025 22:59:54 +0100
Organization: A noiseless patient Spider
Lines: 10
Message-ID: <8c446142-6a59-76e9-7c5a-e6a665c435ed@Strand_in_London.Gov.UK>
References: <0c025cbe-cd06-a332-63c2-190ae3515c25@Strand_in_London.Gov.UK>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Injection-Date: Fri, 07 Mar 2025 22:59:59 +0100 (CET)
Injection-Info: dont-email.me; posting-host="49c6073c690d21020513e04f89913420";
logging-data="3948854"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18kHX1UXEZWaU9PBtL8K9eMGarZFgKLfhCiZ0OFrDKRcw=="
Cancel-Lock: sha1:oUu3c01sreZlrzwa0XNxL2YxoPs=
In-Reply-To: <0c025cbe-cd06-a332-63c2-190ae3515c25@Strand_in_London.Gov.UK>
View all headers

Hello,

I asked the unanswered question of the beginning of this thread so I asked
a similar question on news:de.comp.security.misc so Stefan Claas is
asserting that this Apple-iOS insecurity is real, and the way he answered
does not restrict his answer to Apple iOS. Cf.
news:vqc075$21ss5$2@paganini.bofh.team

Sincerely,
Colin Paul de Gloucester

1

rocksolid light 0.9.8
clearnet tor