NSO hacked WhatsApp to spy on top government officials at U.S. allies

Re:NSO hacked WhatsApp to spy on top government officials at... by tomcooks on Thursday October 31, 2019 @03:46PM (#21412871)

Use Matrix (Riot.im is a great client)

Or Signal, but without the phone number signup

[ Parent | on HN ]

Re:NSO hacked WhatsApp to spy on top government officials at... by jokoon on Friday November 01, 2019 @05:37AM (#21417268)

How do you sign up without a phone number?

[ Parent | on HN ]

Re:NSO hacked WhatsApp to spy on top government officials at... by antpls on Friday November 01, 2019 @03:02AM (#21416743)

From what I read, NSO didn't only hack Whatsapp, they also used vulnerabilities in the Android OS in the media decoder. Given all the CVEs patched on each Android security patch, that wouldn't be surprising.

If that's the case, the articles are focusing too much on WhatsApp failure, but not enough on the failure of the Android OS. To me there is some kind of shared responsibility between the app and the OS here.

Who knows how many CVEs are hiding in the Signal and Riot.im apps? And Riot.im asks for many permission...

[ Parent | on HN ]

Re:NSO hacked WhatsApp to spy on top government officials at... by gyuserbti on Friday November 01, 2019 @07:53AM (#21417814)

Or Briar or Ricochet, or something developed in house. Honestly, the thing that's so perplexing to me is why so many people in these roles would be using Whatsapp at all for these things. It's like SoS mentality (to use an imperfect metaphor) run amok.

[ Parent | on HN ]