News for hackers. Stuff that matters.
Re:Bezos Investigation Says the Saudis Obtained His Private ... by pen2l on Saturday March 30, 2019 @07:14PM (#19532578)
Probably the same spyware that was used to spy on Khashoggi's iPhone -- spyware sold to them by the NSO group of Israel: https://www.nytimes.com/2018/12/02/world/middleeast/saudi-kh...
Re:Bezos Investigation Says the Saudis Obtained His Private ... by graeme on Saturday March 30, 2019 @09:08PM (#19533050)
Does NSO make software other than Pegasus? That software exploited a bug in ios prior to 9.3.5, which was patched in August 2016.

I’m wondering if there are new exploits, or if Bezos or his girlfriend ran really old ios versions. The latter seems unlikely.

https://en.m.wikipedia.org/wiki/Pegasus_(spyware)

Re:Bezos Investigation Says the Saudis Obtained His Private ... by goatsi on Saturday March 30, 2019 @09:40PM (#19533167)
They would only need to find a new exploit to install the malware, not rewrite the malware entirely. They have given demos as recently as 2018 where they have demonstrated a 0 interaction remote iphone 0day.

https://motherboard.vice.com/en_us/article/qvakb3/inside-nso...

>The entrepreneur, who spoke to Motherboard on condition of anonymity because he was not authorized to talk about the meeting, agreed, but said that NSO would have to target his other iPhone, which he brought with him and had a foreign phone number. He gave NSO that phone number and put the phone on the desk.

>After “five or seven minutes,” the contents of his phone’s screen appeared on a large display that was set up in the meeting room, all without him even clicking on a malicious link, he said.

>“I see clicking on all kinds of icons: email icon, SMS icon, and other icons,” he told Motherboard. “And suddenly I saw all my messages in there and I saw all the email in there and they were capable to open any information that was on my [iPhone].”

Re:Bezos Investigation Says the Saudis Obtained His Private ... by srcmap on Saturday March 30, 2019 @09:51PM (#19533222)
A semi good news from this is for the politicians to know that: "If Bezos' phone can be hacked by Saudis, so can all the politicians' phones and their office workers' phones."

A good story to tell next time when politician want to enact some new law to weaken the security of phone, for Apple/Android to build security holes for the "law enforcement / governments".

Re:Bezos Investigation Says the Saudis Obtained His Private ... by dragonwriter on Sunday March 31, 2019 @12:13AM (#19533807)
> A semi good news from this is for the politicians to know that: "If Bezos' phone can be hacked by Saudis, so can all the politicians' phones and their office workers' phones

Of course, they could have already learned that the hard way, and that could be why they turn a blind eye to Saudi wrongdoing.

Re:Bezos Investigation Says the Saudis Obtained His Private ... by amsau on Saturday March 30, 2019 @10:33PM (#19533391)
Why would anyone assume that politicians phones weren’t hacked? If anything this behavior, of invading privacy and trying to control people by blackmailing them, happened to the richest man in the world.

A lot of things mentioned in this article is similar to what happened with Alabama governer Robert Bentley. Early 2016, a leaked recordering of his conversation with his mistress was leaked to media (unknown source) Then a year later his wife screenshot his iMessage conversations with his mistress Rebekah! And everyone thinks it’s the wife. Between 2016-2017 and before the wife screenshot these photos there was an organized campaign against Alabama governer. Who by the way: - Supoorted Kasich to run for president - took down a confederate flag - was planning a settlement for Syrian refugee..

Just think of this, what if Trump was able to hack every congressman phone?

What gave national acquirer the confidence to black Bezos? Unless of course they’ve done it too many times to too many people. The question who are these victims?

We need to know who is/was used as a tool to implement Trump and kushner agenda.

Re:Bezos Investigation Says the Saudis Obtained His Private ... by gurumeditations on Sunday March 31, 2019 @12:04AM (#19533758)
If they tried to blackmail Bezos, then imagine how many senators and representatives they may have blackmail on. This is a true crisis.
Re:Bezos Investigation Says the Saudis Obtained His Private ... by geezerjay on Sunday March 31, 2019 @08:49AM (#19535308)
I always wondered how some regines, including the saudis, managed to get so much access to the US's political leadership.
Re:Bezos Investigation Says the Saudis Obtained His Private ... by rdtsc on Sunday March 31, 2019 @01:24AM (#19534053)
> Just think of this, what if Trump was able to hack every congressman phone?

Something like that already happened: https://www.democracynow.org/2014/8/1/john_brennan_faces_cal...

So what will we do if it happens and we find out. I guess he'll just apologize and we'll pretend it never happened? It worked like that last time:

http://www.msnbc.com/msnbc/cia-spied-senate-committee

> According to CIA spokesperson Dean Boyd, agency director John Brennan apologized

Re:Bezos Investigation Says the Saudis Obtained His Private ... by amsau on Sunday March 31, 2019 @02:03AM (#19534153)
That’s not the same. The cia didn’t hack phones and blackmailed businessmen and politicians.

Are you trying to change the topic?

Re:Bezos Investigation Says the Saudis Obtained His Private ... by rdtsc on Sunday March 31, 2019 @10:44AM (#19535840)
I quoted your line about executive branch spying on the members of the senate so I replied to that part. It wasn't just a theoretical possibility.

> The cia didn’t hack phones and blackmailed businessmen and politicians.

We know they hacked the devices of senators and even apologized for it later. Did the blackmail them? Could be. How do you know they didn't? Bezos was probably the rare case where he exposed their blackmail, in most cases, because of what it is, blackmail is something that is kept secret.

Re:Bezos Investigation Says the Saudis Obtained His Private ... by xmly on Saturday March 30, 2019 @11:26PM (#19533600)
what phone should we continue to use? A burner?
Re:Bezos Investigation Says the Saudis Obtained His Private ... by austhrow743 on Saturday March 30, 2019 @11:56PM (#19533729)
That and have sensitive discussions while both you and the other person are in the shower together. Also try to use language that requires the other party to have prior knowledge for your statements to make sense.
Re:Bezos Investigation Says the Saudis Obtained His Private ... by acct1771 on Sunday March 31, 2019 @01:34PM (#19536883)
Perfect forward secrecy.
Re:Bezos Investigation Says the Saudis Obtained His Private ... by leroy_masochist on Saturday March 30, 2019 @09:25PM (#19533104)
Purely speculation, but from a commercial perspective it would certainly make sense to have the highest-tier version of your product available only to select, high-paying customers; hypothetically this might include zero day exploits of up-to-date software. Pure speculation.
Re:Bezos Investigation Says the Saudis Obtained His Private ... by c0nducktr on Sunday March 31, 2019 @01:45AM (#19534115)
Would payments for this be higher than the potential costs of leaving known exploits active on their devices?
Re:Bezos Investigation Says the Saudis Obtained His Private ... by heavenlyblue on Sunday March 31, 2019 @09:10AM (#19535385)
Exploits are only used to access the system. You can delete them from memory afterwards.
Re:Bezos Investigation Says the Saudis Obtained His Private ... by JohnStrangeII on Sunday March 31, 2019 @08:27AM (#19535230)
Generally these companies use whatever method or exploit is available. Depending on how good their employees and other sources are (incl. the blackmarket, intelligence agency contacts, etc.), it might occasionally take some time after a patch until they get a new 0-day exploit. FinFisher makes or made the same promises, according to their own advertisements.

Most of the time you don't even need a 0-day exploit, simple trojan horses/targeted phishing attacks work fine. Fake celltowers can also be used. The possibilities are nearly endless. Endpoint security is virtually nonexistent.

[dead]
Re:Bezos Investigation Says the Saudis Obtained His Private ... by amsau on Saturday March 30, 2019 @07:41PM (#19532690)
Yes there is. It’s been reported by many reporters. Citizen labs did an amazing job investigating NSO hacked phones. https://www.haaretz.com/israel-news/report-israel-authorized... Then an ex mossad tried to get citizen labs to say antiemetic statement.

Undercover agents target cybersecurity watchdog https://www.apnews.com/9f31fa2aa72946c694555a5074fc9f42

I had to edit my comment to add these two very important links from CNN and khashoggi twitter. khashoggi funded a Saudi group (they called themselves the Bees) who were working to counterattack Saudi bots and trend manipulation. His conversation and planning with them was all intercepted by the Saudi using NSO software.

The group with khashoggi were able to push their hashtag and had it trending just 12 days before his murder

Khashoggi tweet with the hashtag #what_do_you_know_about_the_bees. https://twitter.com/jkhashoggi/status/1043028035455221760?s=...

CNN: WhatsApp conversation with the bee group intercepted by Saudi using NSO

https://www-m.cnn.com/2018/12/02/middleeast/jamal-khashoggi-...

QUOTING GAVIN DE BECKER “Bezos to sign would have required that I make a public statement, composed by them and then widely disseminated, saying that my investigation had concluded they hadn’t relied upon “any form of electronic eavesdropping or hacking in their news-gathering process.”

Note here that I’d never publicly said anything about electronic eavesdropping or hacking—and they wanted to be sure I couldn’t” ——- Looks like NSO doesn’t want us to know think it’s their software..

Re:Bezos Investigation Says the Saudis Obtained His Private ... by krn on Saturday March 30, 2019 @08:44PM (#19532929)
I have pointed this out 49 days ago:

https://news.ycombinator.com/item?id=19122206

Re:Bezos Investigation Says the Saudis Obtained His Private ... by amsau on Saturday March 30, 2019 @09:08PM (#19533051)
Thank you! It’s widely accepted and known in Saudi Arabia and other Arab countries that NSO is used by their dictators. Not sure why israel gov, the only democracy in that part of the world, is helping dictators by approving NSO to be sold to counties like Saudi Arabia, UAE and Mexico!!

It’s just shocking to see some people not only reject that its NSO but go beyond and above their ways to defend NSO, like the commentator we are relying to.. So many comments here are again insisting it’s the brother who leaked it when this article was SPECIFICALLY written by Gavin de Becker to say it’s the Saudis and not the brother...

please when you make a statement or reject an accusation cite a reputable source.

Check out this psygroup proposal to blackmail people name/shame by Psy-group.

It says in the proposal that these methods of blackmailing often work to silence target.

https://www.newyorker.com/news/news-desk/how-a-private-israe...

Worth mentioning that the smear campaign against Bezos on twitter is identical to what proposed to trumps son in his meeting at trump tower with George Nader Here is psy group proposal

https://www.nytimes.com/2018/10/08/us/politics/rick-gates-ps...

Re:Bezos Investigation Says the Saudis Obtained His Private ... by barry-cotter on Saturday March 30, 2019 @11:20PM (#19533579)
> Thank you! It’s widely accepted and known in Saudi Arabia and other Arab countries that NSO is used by their dictators. Not sure why israel gov, the only democracy in that part of the world, is helping dictators by approving NSO to be sold to counties like Saudi Arabia, UAE and Mexico!

Dictatorial and royal Arab governments are much friendlier to Israel than any democratic government would be. They’re not willing to officially regularise relations because they know how much their populace hates Israel but they’re perfectly willing to work with Israel. Israel knows this. That’s why they’re willing to work with these governments; they’re the closest to friends and allies they’re ever going to get as neighbours.

Re:Bezos Investigation Says the Saudis Obtained His Private ... by flyinglizard on Sunday March 31, 2019 @03:37AM (#19534377)
Precisely that, although the irony is that while the regimes themselves, anywhere in the Sunni Arab world, are friendly and cooperative towards Israel, their educational textbooks still preach for hatred and rejection of Israel and often times straight antisemitism. It's how they prop a common enemy to blame for their troubles.
Re:Bezos Investigation Says the Saudis Obtained His Private ... by gurumeditations on Saturday March 30, 2019 @11:54PM (#19533720)
Israel is a highly pragmatic country, primarily concerned with the survival of the Jews instead of a set of principles. Allowing NSO to be sold to nearby dictatorships like the Saudis would allow the Saudis to more easily defeat their own enemies rather than go after Israel, a sort of dark diplomacy.
Re:Bezos Investigation Says the Saudis Obtained His Private ... by doitLP on Saturday March 30, 2019 @11:37PM (#19533657)
>Not sure why israel gov, the only democracy in that part of the world, is helping dictators by approving NSO to be sold to counties like Saudi Arabia, UAE and Mexico!!!

Not surprising. For example the US has a “special relationship” with Saudi Arabia and sells a lot more than software (jets, arms, etc)

Re:Bezos Investigation Says the Saudis Obtained His Private ... by amsau on Sunday March 31, 2019 @01:11AM (#19534014)
But USA never helped Saudi to treat its people inhumanly. The US didn’t help or remained silent when Saudi violeted human rights. The US never EVER helped Saudi to spy on a journalist then advised its murderers on how to weather the storm, like Kushner did. Even Lindsey Graham couldn’t tolerate this atrocity but it was fine with Kushner and Israeli PM Netanyahu https://www.haaretz.com/israel-news/.premium-netanyahu-on-kh...
Re:Bezos Investigation Says the Saudis Obtained His Private ... by gyaniv on Sunday March 31, 2019 @05:28AM (#19534654)
>The US never EVER helped Saudi to spy on a journalist...

Israel didn't help them either, it just didn't stop an Israeli company from selling certain products to the Saudis. Do you think the US is stopping all companies from doing business with the Saudis, or even just stopping them from selling tools that can be used by the regime against the public?

because they aren't, they are however supposedly doing that with Iran and to a certain extent, with Russia, so it's not like it's something they can't do, it's just that they choose not to.

Re:Bezos Investigation Says the Saudis Obtained His Private ... by JohnStrangeII on Sunday March 31, 2019 @08:50AM (#19535311)
I'm by far not an expert, but I believe that This business (spyware for governments) works more similar to international weapons dealing. An Israeli company selling spyware to Saudi Arabia will likely at the same time work together with Mossad or another allied intelligence agency. Selling this software provides an obvious entry point, whether for human assets, piggy-backing on the eavesdropping software, or to map out future attack vectors.
Re:Bezos Investigation Says the Saudis Obtained His Private ... by PNWALIEN3 on Sunday March 31, 2019 @12:51PM (#19536592)
The founders and employees were members of the Israeli military cyber-security apparatus, if not Unit 8200 itself.

(https://www.forbes.com/sites/thomasbrewster/2016/08/25/every...)

I assume most software sold by these companies has backdoors either already shared with Aman/Mossad, or stored to be provided upon request.

Re:Bezos Investigation Says the Saudis Obtained His Private ... by gyaniv on Monday April 01, 2019 @05:54AM (#19541805)
They were former members in those organizations, like army vets, and as far as I understand they face a lot of criticism from the Israeli public, if not the government.

I think they are basically like those vets that go and work security for private contractors, and some of them end up working for some really bad people.

About the backdoors, I can't tell, on the one hand, I would assume you're correct, that they do provide access to the Mossad+friends, but on the other hand, if it was discovered, they would lose credibility, and all those basically bad people wouldn't work with them, and any normal entity probably aren't working with them already, so they would lose their entire business.

Re:Bezos Investigation Says the Saudis Obtained His Private ... by dotancohen on Sunday March 31, 2019 @02:52AM (#19534274)
You might be interested in seeing photos of F-15s above the Saana skies. In fact, the first F-15 lost combat was lost due to a Yeminite SAM.
Re:Bezos Investigation Says the Saudis Obtained His Private ... by darkpuma on Sunday March 31, 2019 @11:43AM (#19536139)
Reminds me of when the US assisted Iraqi poison gas attacks during the Iran-Iraq War.
Re:Bezos Investigation Says the Saudis Obtained His Private ... by JohnStrangeII on Sunday March 31, 2019 @08:41AM (#19535289)
Your claims about what the US did and didn't do seem rather implausible to me, and in any case it seems unlikely that you're in a position to know what e.g. the NSA, the CIA, or any of the countless US military intelligence agencies did or did not do for Saudia Arabia. All we know is that the US makes massive weapons and oil deals with Saudi Arabia and has considered the Saudis one of the most important strategic partners in the region. Personally, I find it not hard to believe that the same cynics involved in these deals and cooperation wouldn't care all too much about some Saudi journalists, gay Saudi youtube channel dancers, or human rights activists, but of course I could also be wrong. The point is that we don't know.
Re:Bezos Investigation Says the Saudis Obtained His Private ... by zaphirplane on Sunday March 31, 2019 @02:55AM (#19534279)
> Thank you! It’s widely accepted and known in Saudi Arabia and other Arab countries that NSO is used by their dictators. Not sure why israel gov, the only democracy in that part of the world, is helping dictators by approving NSO to be sold to counties like Saudi Arabia, UAE and Mexico!! >

Let’s see A) they are selling a product

B) they are helping propping the stable status quo

C) do you really help a country by selling oppression tools to its dictatorship, most democratic countries have overtaken dictatorships in all metrics with one exception

D) getting good will from the current rulers and establishing cooperative relationships within multiple levels of those countries

E) good will and relationships can be exploited

At a guess anyway

[dead]
Re:Bezos Investigation Says the Saudis Obtained His Private ... by amsau on Saturday March 30, 2019 @10:57PM (#19533486)
Can you please discuss the issue? because an Israeli company was involved we have the right to criticize it. And you have no right to accuse us of not liking Israel or inventing stories. If people with your reasoning are the only ones left to defend Israel, I worry about Israel...