News for hackers. Stuff that matters.
Re:The Myth of Consumer-Grade Security by mieseratte on Wednesday August 28, 2019 @12:50PM (#20821534)
> For a while the President was tweeting from a consumer-grade Android (!) phone, likely made by China, in the Oval Office. It makes me wonder how many groups pwned that phone and have access to critical national security information.

You mentioned tweeting, was he doing NATSEC-relevant work from the phone or was he using an official device for those purposes?

Re:The Myth of Consumer-Grade Security by akersten on Wednesday August 28, 2019 @01:13PM (#20821798)
I can't speak for GP, but certainly this adminstration has used consumer Android devices for a little more than tweeting: https://www.theverge.com/2017/2/13/14597700/donald-trump-pho...
Re:The Myth of Consumer-Grade Security by mc32 on Wednesday August 28, 2019 @02:42PM (#20822706)
And previous administrations had blackberries.

I don’t think it’s possible to get high level pols to forgo their devices and follow good security hygiene. It’s in their nature to be communicative and available.

Re:The Myth of Consumer-Grade Security by entee on Wednesday August 28, 2019 @03:43PM (#20823341)
It’s my understanding that Obama had a specially locked down device, not just the off the shelf blackberry/iPhone.
Re:The Myth of Consumer-Grade Security by ColanR on Thursday August 29, 2019 @12:49AM (#20826779)
That was after a while. From my recollection, the locked down blackberry was a compromise after he insisted on his prior insecure blackberry.
Re:The Myth of Consumer-Grade Security by frankzinger on Thursday August 29, 2019 @01:13AM (#20826861)
One would hope for a little continuity in the Presidential Office's security department. Why would they reset their security at the beginning of each administration, only to have to learn the same lessons the hard way again?
Re:The Myth of Consumer-Grade Security by nostrademons on Wednesday August 28, 2019 @12:56PM (#20821599)
As I understand it he wasn't doing NATSEC-relevant work from the phone, but on Android spyware can turn on the microphone and camera remotely. During the Cold War our adversaries would've given anything to slip a bug into the Oval Office; now every hacker group who can pwn an Android phone has one.
Re:The Myth of Consumer-Grade Security by isostatic on Wednesday August 28, 2019 @01:35PM (#20822038)
> During the Cold War our adversaries would've given anything to slip a bug into the Oval Office

See

https://en.m.wikipedia.org/wiki/The_Thing_(listening_device)

Re:The Myth of Consumer-Grade Security by bubblethink on Wednesday August 28, 2019 @02:24PM (#20822522)
>but on Android spyware can turn on the microphone and camera remotely.

Seems like an unsubstantiated claim. Also, Android is a broad umbrella term where security varies widely across implementations and devices. Do you have any concrete information about reference Android devices (i.e., Pixels)

Re:The Myth of Consumer-Grade Security by opencl on Wednesday August 28, 2019 @02:30PM (#20822590)
He was using a Galaxy S3 long past the time it stopped receiving security patches.

https://www.androidcentral.com/which-android-phone-does-dona...

Re:The Myth of Consumer-Grade Security by okmokmz on Wednesday August 28, 2019 @03:55PM (#20823458)
>Seems like an unsubstantiated claim

It absolutely isn't. Evidence supporting his claim are easily found online, both in leaked documents as well as from other first and second hand sources

Re:The Myth of Consumer-Grade Security by SiempreViernes on Wednesday August 28, 2019 @01:46PM (#20822154)
Uh, he is doing pretty reckless diplomacy on twitter, does that count as natural security work?
Re:The Myth of Consumer-Grade Security by mandelbrotwurst on Wednesday August 28, 2019 @12:56PM (#20821604)
I'd be surprised if anyone in this thread has any way of knowing whether that's the case.
Re:The Myth of Consumer-Grade Security by mirimir on Wednesday August 28, 2019 @01:51PM (#20822207)
There might be, but they would never comment.