A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by malshe on Wednesday December 15, 2021 @01:34PM (#29569846)

From the top of the article:

> We want to thank Citizen Lab for sharing a sample of the FORCEDENTRY exploit with us, and Apple’s Security Engineering and Architecture (SEAR) group for collaborating with us on the technical analysis.

This reminded me that NSO went after Citizen Lab on multiple fronts. They even tried to use a spy to talk to JSR (https://www.johnscottrailton.com) and make him say controversial things, which could be later used to malign Citizen Lab. Darknet Diaries covered this incident recently: https://darknetdiaries.com/episode/99/

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by Etheryte on Wednesday December 15, 2021 @04:59PM (#29572133)

The transcript is such an intriguing read. You don't expect these things to happen in real life, but yet here they are, tie-cameras, pen recorders, driving circles around the block and all.

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by malshe on Wednesday December 15, 2021 @05:23PM (#29572362)

100% with you on this one. My life feels so boring in comparison!

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by goblinux on Wednesday December 15, 2021 @05:28PM (#29572406)

Darknet Diaries is so good. To anyone who hasn't listened, highly recommend. Jack hits a homerun each week and the story about JSR and NSO was buck wild

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by malshe on Wednesday December 15, 2021 @08:40PM (#29573842)

Jack is awesome. Btw, I must give credit to many in the HN community who have recommended this podcast so many time in various threads. On my own I would have never found it.

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by GekkePrutser on Wednesday December 15, 2021 @10:26PM (#29574438)

I wish they would write articles too.. I don't have the patience to listen to podcasts :) But I've been told it's really good.

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by genewitch on Thursday December 16, 2021 @01:14AM (#29575496)

A good podcast app may help. For slower podcasts, instead of speeding it up - which may chipmunk or otherwise cause artifacts - podcast addict trims silence. You may miss stuff below the gate threshold, but it is still slick.

I only listen to 2 podcasts, I don't really and have never really liked the format. I prefer reading with music or silence, and have always loved weblogs for that. However, it's worth a shot to find a podcast app that "clicks" with your style of input.

With podcasting 2.0, the new features should allow producers that don't want to be part of an ecosystem to still make some income, plus you get streaming album art where supported, and liner notes and all sorts of other goodies.

I think podcastindex has a list of compatible 2.0 podcasting apps, but I'm unable to check.

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by weaksauce on Wednesday December 15, 2021 @10:26PM (#29574442)

yeah it really is refreshing to hear a podcast for the masses that actually gets technical details correct. It's a pet peeve when people simplify it and get it really wrong.

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by Operyl on Thursday December 16, 2021 @01:44AM (#29575688)

He sometimes messes up the small details, but frankly they’re tiny enough that it doesn’t destroy the overall experience

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by goblinux on Wednesday December 15, 2021 @05:29PM (#29572409)

every other week release for the podcast, not weekly*

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by headmelted on Wednesday December 15, 2021 @05:41PM (#29572515)

every other week release for STORIES FROM THE DARK SIDE OF THE INTERNET*

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by S_A_P on Wednesday December 15, 2021 @03:26PM (#29571184)

https://9to5mac.com/2021/12/15/pegasus-spyware-maker-nso-run...

hopefully this company is on the way out...

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by rhizome on Wednesday December 15, 2021 @05:48PM (#29572567)

I'd assume they're using the Erik Prince/Constellis business model, taking some time off and getting the band back together under a different name to do the same work.

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by DaftDank on Wednesday December 15, 2021 @10:05PM (#29574339)

I think when you are providing such a valuable service, there is almost zero chance they just stop.

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by rhizome on Friday December 17, 2021 @07:32PM (#29600123)

Yep. The way I think about it in mainstream terms is, "Jeffrey Epstein's clients didn't just stop wanting what he was providing, someone took his place. Who is that?"

[ Parent | on HN ]

Re:A deep dive into an NSO zero-click iMessage exploit: Remo... by trashcat on Wednesday December 15, 2021 @03:35PM (#29571303)

I literally just listened to this episode today. Some crazy stuff.

[ Parent | on HN ]