News for hackers. Stuff that matters.

A comment on Pegasus spyware found on journalists’ phones, French intelligence confirms. Parent comment

Re:Pegasus spyware found on journalists’ phones, French inte... by gruez on Monday August 02, 2021 @05:36PM (#28043006)
>But if that imessage vulnerability was FOSS and you could flash your own image

1. the vulnerability wasn't FOSS. It was kept under wraps because otherwise it would get discovered and apple would patch it

2. what makes you think that amateurs working in their free time can patch 0days faster than the vendors themselves?

[ Parent | on HN ]
Re:Pegasus spyware found on journalists’ phones, French inte... by raxxorrax on Tuesday August 03, 2021 @02:42AM (#28046313)
Because these "amateurs" build all the essential tools we rely on today. That wasn't Apple. I cannot really believe what crap I have to read here. Vendor lock in is a huge factor for insecurity in software.
[ Parent | on HN ]
Re:Pegasus spyware found on journalists’ phones, French inte... by pvarangot on Tuesday August 03, 2021 @01:02PM (#28051535)
Amateurs behind what essential tools? Tell me a tool and a name. I've been thinking hard for 10 minutes and every FOSS tool I used the past week has highly regarded and well payed professionals behind it.

Maybe in 1995 it was like that, it's not now.

[ Parent | on HN ]
Re:Pegasus spyware found on journalists’ phones, French inte... by fartcannon on Monday August 02, 2021 @07:12PM (#28043870)
It's not yet even possibly to reliably detect the infection because of the closed nature of the device.

I think I'd like to check my iPhone, but I can't reliably do that.

So that, for a start, would help.

[ Parent | on HN ]
Re:Pegasus spyware found on journalists’ phones, French inte... by gruez on Monday August 02, 2021 @07:17PM (#28043912)
>I think I'd like to check my iPhone, but I can't reliably do that.

but you can, via itunes backup.

[ Parent | on HN ]
Re:Pegasus spyware found on journalists’ phones, French inte... by raxxorrax on Tuesday August 03, 2021 @02:48AM (#28046332)
Reading the dump? That isn't nearly as effective as giving users the ability to administer their system. That is in no way an alternative.
[ Parent | on HN ]