UK Government Officials Infected with Pegasus

Re:UK Government Officials Infected with Pegasus by tomatowurst on Monday April 18, 2022 @05:41PM (#31076960)

The question is then what phone exists that is immune from this? A flip phone? A Nokia 1011? I might be completely misinformed but seems like SIM card and the underlying OS is vector. What happens if I use a cell phone from late 90s and early 2000s? What is there to hack with those flip phones? JavaME over the wire? What if the cell phone dates even further?

Legitimately curious what options is there. Could If you are someone of interest then it seems like having a smartphone is an automatic liability. What then solution is possible since sending and reading a simple text message is enough to escalate privilege?

[ Parent | on HN ]

Re:UK Government Officials Infected with Pegasus by EwanToo on Monday April 18, 2022 @06:05PM (#31077216)

No technology is entirely secure today, we haven't built it in a provably secure way

The most secure today is probably a Pixel 6 running a secure messaging app with a limited attack surface, no image support, no emoji, etc. Removing all the standard apps including the browser and Webview engine would significantly help.

If you could switch an iPhone into a secure mode which removed large chunks of messaging functionality then it would be the preferred option.

[ Parent | on HN ]

Re:UK Government Officials Infected with Pegasus by usrn on Monday April 18, 2022 @05:46PM (#31077013)

I would be shocked if people couldn't find an RCE in an early 2000s flip phone. I had a friend who had hers since 2010 and MMS crashed it all the time.

[ Parent | on HN ]

Re:UK Government Officials Infected with Pegasus by b33f on Monday April 18, 2022 @05:52PM (#31077087)

If you're talking about flip phones and trying to protect against an eavesdropper of a phone call or SMS, then there's no point. The network that these phones used is full of holes already https://en.wikipedia.org/wiki/Signalling_System_No._7#Protoc...

[ Parent | on HN ]

Re:UK Government Officials Infected with Pegasus by hsbauauvhabzb on Monday April 18, 2022 @09:14PM (#31078767)

Attack surface reduction is the important part. I’m not in disagreement with what you said, but if you took a modern iPhone and removed all capabilities other than sending and receiving phone calls, it would be much more secure than one which supports mms, email, browsing, etc.

[ Parent | on HN ]

Re:UK Government Officials Infected with Pegasus by kmeisthax on Monday April 18, 2022 @11:02PM (#31079386)

Are you sure having a phone in your phone is a good idea? Phone calls are a significant source of attacks now, even if none of those attacks exploit a vulnerability in the phone software. As far as I'm concerned, the only point in having a dial-able phone number is to ensure I'm still eligible for car warranty scams and 2FA code harvesting attacks.

[ Parent | on HN ]

Re:UK Government Officials Infected with Pegasus by hsbauauvhabzb on Monday April 18, 2022 @11:43PM (#31079573)

You’re right, my point was surface reduction, not that one tech is more or less vulnerable than others

[ Parent | on HN ]

Re:UK Government Officials Infected with Pegasus by alfalfasprout on Monday April 18, 2022 @11:07PM (#31079414)

Print from your phone to a piece of paper. Then use RFC 1149 (https://datatracker.ietf.org/doc/html/rfc1149)-- IP over carrier pigeon. And then use one time pads on each end.

[ Parent | on HN ]

Re:UK Government Officials Infected with Pegasus by pksebben on Tuesday April 19, 2022 @05:32AM (#31081140)

thank you for posting this, made my day.

I'm still cracking up over:

> A typical MTU is 256 milligrams

[ Parent | on HN ]

Re:UK Government Officials Infected with Pegasus by xiphias2 on Monday April 18, 2022 @06:07PM (#31077230)

Probably PGP encryption / authentication using files on an SD card with a computer separated from internet is your best bet for secure communication. An ,,easier to use’’ version can use a firewall that only allows the PGP emails through, at least in that case the firewall can be made simple and secure.

[ Parent | on HN ]

Re:UK Government Officials Infected with Pegasus by fsflover on Tuesday April 19, 2022 @02:30PM (#31086980)

GNU/Linux phones are immune to this (or at least they make it easy to fix bugs and separate the modem from the OS): Librem 5 and Pinephone.

[ Parent | on HN ]

Re:UK Government Officials Infected with Pegasus by ycuser2 on Tuesday April 19, 2022 @03:22AM (#31080447)

Tin foil chat!

https://github.com/maqp/tfc

[ Parent | on HN ]