Thats the article that should have been posted. Scary that this is an actual company that built this complex spyware. Given that their customers are nation-states you could consider these folks to be a terrorist organization.

Also shows you how hard it is to build secure systems, you have to be perfect and the attacker only has to be persistent and succeed once.

Maybe a mod could change the article link to this?

Yeah, this wasn't written for the nerds.

Original Link

http://www.vanityfair.com/news/2016/11/how-bill-marczak-spyw...

If Android/IOS can be modified such that all apps are always place under docker style container/VM, would it help?

a kernel exploit doesn't help you much with a docker style container. Also docker is not a VM. And iOS/Android are already way better with sandboxing than our desktop environments.

For Kernel exploit, probably be true.

If one becomes root in a docker container, the worst damage it can do is to that container's files. That is better the current "sandboxing" in iOS/Android setup, true?

Thank you! That's awesome