News for hackers. Stuff that matters.
Re:Apple sues NSO Group to curb the abuse of state-sponsored... by TillE on Tuesday November 23, 2021 @05:46PM (#29324523)
Nerds always want to interpret the law in some strict pedantic fashion, but in practice this is almost never how it works. Law is not applied stupidly or mechanically, you can't fashion yourself some ad hoc workaround unless you're extremely certain about what you're doing, preferably with a mountain of precedent behind you.
Re:Apple sues NSO Group to curb the abuse of state-sponsored... by rendaw on Tuesday November 23, 2021 @06:10PM (#29324730)
"NSO can be sued under California law because they accepted the EULA" seems like a mechanical, strict, pedantic application of law though.
Re:Apple sues NSO Group to curb the abuse of state-sponsored... by woah on Tuesday November 23, 2021 @06:50PM (#29325150)
How does that seem pedantic? It's incredibly straightforward.

On the other hand, creating some kind of convoluted, contrived paper trail to claim that mysterious third parties were the ones to have physically pressed the "Accept" button on your 100 fake accounts and so you didn't even know there was a EULA seems kind of like it might actually be fraud.

Re:Apple sues NSO Group to curb the abuse of state-sponsored... by inopinatus on Tuesday November 23, 2021 @10:23PM (#29326632)
In addition, it doesn't survive past the moment it is discussed in court documents, at which point NSO are screwed if they ever pull the same shit again.

A full paper trail would also necessarily disclose the entity that provided those devices, which they may well be loathe to do (since it either drags in a related company, who Apple can then also target, or embarrasses a third party who would rather remain nameless).

However, in practice, a technology engineering firm claiming to have no knowledge of the licensing that applies to the devices in which they also claim expertise, is such a far-fetched statement that it's almost trivially set aside, and earns a rebuke from the bench to boot.

Re:Apple sues NSO Group to curb the abuse of state-sponsored... by alasdair_ on Tuesday November 23, 2021 @08:23PM (#29325929)
I don’t see how this differs much from a common “clean room” reverse engineering strategy where one set of engineers accepts the eula and then writes down in excruciating detail exactly how the target item works, then a second set of engineers that have never seen the item in question (or accepted a eula) takes these detailed writings and uses them to reverse engineer the item in question. (A mere description of a device or software is not protected)

This is standard practice at large companies when reverse engineering chips, devices and software and seems very similar to the above eula argument.

Re:Apple sues NSO Group to curb the abuse of state-sponsored... by desdiv on Tuesday November 23, 2021 @11:56PM (#29327041)
In the clean room reverse engineering case:

1a. one team examines the device and products a detailed specification of it

1b. another team works solely off that newly produced specification; this team has zero contact with the actual device

In this hypothetical case:

2a. a third party affiliate accepts the Apple EULA, and gives the Apple IDs to NSO Group

2b. NSO Group uses the Apple IDs as credential to obtain Apple services

Notice that in case 2b, NSO Group has actual contact with Apple in two ways. They used Apple IDs, and that they obtain Apple services. This didn't happen in the reverse engineering case.

Re:Apple sues NSO Group to curb the abuse of state-sponsored... by alasdair_ on Tuesday November 23, 2021 @11:57PM (#29327049)
Good points - thank you!
Re:Apple sues NSO Group to curb the abuse of state-sponsored... by tentacleuno on Wednesday November 24, 2021 @05:15AM (#29328542)
Wouldn't there be an article in the EULA that states if you use an Apple device, regardless of clicking buttons, you automatically consent to the ToS? Or is that not how the law works ...?
Re:Apple sues NSO Group to curb the abuse of state-sponsored... by GoblinSlayer on Thursday November 25, 2021 @08:24AM (#29341149)
EULA isn't ToS. If you accept EULA and EULA automatically joins you to ToS, then you also accept ToS, usually including all its future versions.
Re:Apple sues NSO Group to curb the abuse of state-sponsored... by jacquesm on Tuesday November 23, 2021 @11:23PM (#29326906)
Yes, American companies love to stack the deck against their users when it comes to selecting venue, but at the same time balk when the EU requires that they have an EU anchor to allow legal enforcement.
Re:Apple sues NSO Group to curb the abuse of state-sponsored... by dkonofalski on Wednesday November 24, 2021 @11:52AM (#29332039)
Who balked? Apple anchored in Ireland and got an amazing deal. I doubt they balked at that.
Re:Apple sues NSO Group to curb the abuse of state-sponsored... by XnoiVeX on Wednesday November 24, 2021 @10:49AM (#29331149)
That's how law works.
Re:Apple sues NSO Group to curb the abuse of state-sponsored... by butMyside on Tuesday November 23, 2021 @07:56PM (#29325719)
Taken out of its context to prove a point on a web forum and I would agree

Lots of people negotiated these things and agreed to make commerce happen.

Novel to you does not mean novel to humanity.

Re:Apple sues NSO Group to curb the abuse of state-sponsored... by shsbdncudx on Tuesday November 23, 2021 @08:59PM (#29326175)
Speaking as someone who’s been on the unfortunate wrong end of it, the law is applied stupidly and mechanically. All the time. That’s the default. The judge will go to great pains to super pedantically apply the rule of the law, regardless of common sense and believe it or not in most cases also regardless of common sense.

As it should be. It doesn’t always work well for all circumstances, but we don’t have a better system

Re:Apple sues NSO Group to curb the abuse of state-sponsored... by inopinatus on Tuesday November 23, 2021 @10:12PM (#29326579)
Irrespective of your personal experience, the law is nevertheless still not a programming language, thankfully.

However, "common sense" is also not how it works, so sure, when people rely on what they expect "common sense" to mean, then they too get screwed (the meaning of "common sense" after all varying dramatically from person to person).

Law has its own principles, philosophy, and practices, that's all. And judges, especially senior judges, do not like it one iota when folks try to circumvent the meaning, substance, and purpose of these elements.

Re:Apple sues NSO Group to curb the abuse of state-sponsored... by jacquesm on Tuesday November 23, 2021 @11:25PM (#29326911)
This isn't the case everywhere. In some countries it is the intent of the law that matters, in others it is the letter of the law, in some a mix of both.
Re:Apple sues NSO Group to curb the abuse of state-sponsored... by appleflaxen on Tuesday November 23, 2021 @06:14PM (#29324770)
Your argument loses weight with the ad homonym attack.
Re:Apple sues NSO Group to curb the abuse of state-sponsored... by Zenbit_UX on Wednesday November 24, 2021 @01:01AM (#29327310)
Disagree. It was the cherry on top.
Re:Apple sues NSO Group to curb the abuse of state-sponsored... by AnthonyMouse on Tuesday November 23, 2021 @05:55PM (#29324605)
Nerds always want the law to be consistent. Lawyers are Machiavellian professionals trained in getting it to say "heads I win tails you lose" for their clients, and often succeed.

That doesn't mean the nerds are wrong to want what they want.

Re:Apple sues NSO Group to curb the abuse of state-sponsored... by evgen on Wednesday November 24, 2021 @05:50AM (#29328744)
No, it is just that most nerds are too ignorant to understand how law works and its purpose and mechanisms. They expect it to be some sort of API spec that can be mechanically manipulated. Their own efforts at such intellectual mechanics are nothing but a trail of tears and failure, with bug after bug making a mockery of any claim they have about the benefits of such a system. Law has had millennia to work out the kinks in the system and develop practices that are robust in the face of adversarial attack by actual smart people; coders can't seem to keep basic services operating in ideal conditions and yet you expect anyone to look to this group when it comes to actual life and death decisions? Hard pass.
Re:Apple sues NSO Group to curb the abuse of state-sponsored... by AnthonyMouse on Wednesday November 24, 2021 @11:25AM (#29331657)
> No, it is just that most nerds are too ignorant to understand how law works and its purpose and mechanisms.

People have a pretty good idea of its mechanisms.

Powerful people break laws that are clear enough and then don't go to jail because of "prosecutorial discretion" or Johnnie Cochran or retroactive telecoms immunity for illegal mass surveillance.

Powerless people break laws that are ambiguous, or most people don't even know exist, or people know exist but they're only enforced against the nameless and poor, and the US has the largest prison population in the world.

This outcome is your great victory for "millennia to work out the kinks in the system and develop practices that are robust in the face of adversarial attack by actual smart people"?

> trail of tears

Really?

> coders can't seem to keep basic services operating in ideal conditions and yet you expect anyone to look to this group when it comes to actual life and death decisions?

We already have code running when it comes to actual life and death decisions. There is code running in aircraft and heart bypass machines, and it works, because then people care that it works. Nobody cares enough that some ad tracking code is perfectly reliable and efficient, so it isn't.

You're also asking for a double standard. The OpenBSD people do a nice job on OpenSSH. It's pretty good, not perfect. There have been vulnerabilities in even that. Then they get patched.

But you can't possibly be claiming that there are no "vulnerabilities" in the law. If that was the case then why do they have to keep passing new ones every year? The ask isn't that it never change, it's that it be changed by the legislature prospectively instead of being in a constant state of superposition until it's resolved by a court ex post facto.

Re:Apple sues NSO Group to curb the abuse of state-sponsored... by phatfish on Wednesday November 24, 2021 @07:41AM (#29329392)
The is also why the Crypto-bro dream of having "smart" contracts manage the entire global financial system is insane.