News for hackers. Stuff that matters.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by clueless on Wednesday September 18, 2024 @11:20AM (#41580868)
so how does one verify that the battery in their iphone doesn't contain explosives?
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by shmatt on Wednesday September 18, 2024 @11:26AM (#41580945)
As long as it doesn’t say “made in Hungary”

And on a more serious note. Hizbolla is a blacklisted terrorist org, they can’t just order stuff from regular factories. Buying from an anonymous white label factory in Hungary with no address and little information is probably pretty normal from them - because anyone doing business with them in the EU will go to jail

As long as you’re not buying electronics from shady factories with no known owners you’ll be fine

Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by tamimio on Wednesday September 18, 2024 @11:35AM (#41581106)
> As long as you’re not buying electronics from shady factories with no known owners you’ll be fine

For now and to our knowledge so far.

Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by fortran77 on Wednesday September 18, 2024 @11:36AM (#41581123)
Exactly. The EU designates Hezbolla as a terrorist group. It is illegal for EU to sell to them.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by tptacek on Wednesday September 18, 2024 @11:22AM (#41580892)
The supply chain for an iPhone is much stronger than for a Gold Alpha pager, and it's likely that the same thing will end up being true of these ICOM radios: they'll turn out to be designed and branded by ICOM, but actually manufactured and distributed by some random Eastern European outfit that paid to use ICOM as a skinsuit. That would never happen with an Apple device.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by ianburrell on Wednesday September 18, 2024 @11:55AM (#41581463)
It is likely that they were authentic Icom devices. My understanding is that it is common for commercial radios to be programmed by distributor. Or Gold Alpha gave a good deal on pagers and radios and then were intercepted from warehouse.

I don't think Icom would ever put name on generic radio, they make all their radios in Japan. It is like Toyota putting name on another car.

Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by borski on Wednesday September 18, 2024 @12:34PM (#41582080)
Toyota puts their engines in other cars all the time.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by toast0 on Wednesday September 18, 2024 @02:44PM (#41583881)
There's lots of Toyotas in this list[1] in both directions. Toyota is happy to build cars with other people's names on them, as well as put their name on a car someone else built.

[1] https://en.m.wikipedia.org/wiki/List_of_badge-engineered_veh...

Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by ianburrell on Wednesday September 18, 2024 @06:50PM (#41586493)
I read that Icom V82 is discontinued and most available are counterfeit.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by rmbyrro on Wednesday September 18, 2024 @11:30AM (#41581026)
> The supply chain for an iPhone is much stronger

Probably not strong enough to make it unreachable by a sophisticated agency like the Mossad.

Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by tptacek on Wednesday September 18, 2024 @11:33AM (#41581058)
I think the most likely outcome here is that all these devices were intercepted from the same firm.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by borski on Wednesday September 18, 2024 @12:35PM (#41582087)
With enough time, effort, and money? Sure.

But that would be many orders of magnitude more difficult that what they pulled off here, which was already very impressively difficult to pull off.

Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by this_user on Wednesday September 18, 2024 @11:52AM (#41581407)
Well, are you a member of a terrorist group? If no, then odds are that nobody is going to go through the trouble of adding explosives to your phone's battery.

In this case the people responsible must have discovered where these terrorists were buying their devices. Since basically no one except for them was buying large quantities of these, they were easy to target.

Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by vlovich123 on Wednesday September 18, 2024 @11:29AM (#41580995)
The mechanism of action is unclear at this time. I’ve seen it written that the explosives were part of PCBs with electronics that mimicked the original.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by colechristensen on Wednesday September 18, 2024 @11:31AM (#41581029)
It was an addon board with explosives on it which was attached to the existing normal circuit board.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by xnx on Wednesday September 18, 2024 @11:34AM (#41581085)
Was there enough empty space in the device for this? Were other components removed or miniaturized?
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by colechristensen on Wednesday September 18, 2024 @11:38AM (#41581163)
It was a few lines in a news article, so unknown.

But you can see photos of the same model of pager and it's an LCD screen in a plastic shell, the kind that seems like there would be room on the inside for a little addon board to be attached to the existing board.

Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by colechristensen on Wednesday September 18, 2024 @11:29AM (#41581012)
X-Ray image compared to known X-Ray of the exact same model

Bomb sniffing dog or chemical test of surfaces

Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by tptacek on Wednesday September 18, 2024 @11:33AM (#41581072)
Allegedly hidden well enough that a casual X-ray of the pager wouldn't have revealed it.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by geysersam on Wednesday September 18, 2024 @11:42AM (#41581228)
Interesting that it wasn't discovered by any bomb sniffing dog in Lebanon. They had thousands of devices. There must be at least a few bomb dogs in Lebanon right?
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by Zironic on Wednesday September 18, 2024 @11:50AM (#41581361)
Bomb sniffing dogs can't detect every explosive compound under the sun. They're trained on some of the most common ones but there are almost infinite variations of explosive chemistries.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by clueless on Wednesday September 18, 2024 @12:04PM (#41581626)
"According to Sky News Arabia; Mossad was able to Inject a Compound of Pentaerythritol Tetranitrate (PETN) into the Batteries of the New Encrypted Pagers that Hezbollah began using around February, before they even arrived in the Hands of Hezbollah Members, allowing them to Remotely Overheat and Detonate the Lithium Battery within the Device."
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by Aerroon on Wednesday September 18, 2024 @12:46PM (#41582238)
If that's true, then does that make electric vehicles into potential car bombs if "the right thing" is injected into the battery?
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by toast0 on Wednesday September 18, 2024 @02:48PM (#41583912)
If you add explosives to a car, it becomes a potential car bomb, yes. Doesn't matter what the power source is.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by colechristensen on Wednesday September 18, 2024 @04:56PM (#41585370)
This wasn't something magical that turned the battery into an explosive, they allegedly injected an explosive compound into the battery which would be triggered by intentionally overheating the battery.

Like if you packed C4 into an electric car battery, it would be a bomb, much the same way if you packed it into an ordinary empty box. Sure the battery adds some extra energy, but the explosive is the explosive, ya know.

Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by mrguyorama on Wednesday September 18, 2024 @04:45PM (#41585240)
I am extremely skeptical.

High explosives rarely require only heat to detonate, and most can be quite literally set on fire by an open flame and burn without detonating. PETN is not terribly sensitive, and should require a detonator of some sort. What's more, that doesn't jive with the other claim that they added a daughterboard to the device.

Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by Araxeus on Thursday September 19, 2024 @12:50AM (#41588611)
This report came out 4 hours after the first attack.

I'm very skeptical of a report about a specific compound and method 4 hours after an attack - Its not enough time for analysis

Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by mmh0000 on Wednesday September 18, 2024 @02:05PM (#41583379)
Simply because "bomb" dogs, like "drug" dogs are a scam to give the police a legal excuse to violate your rights. The dogs don't detect bombs/drugs, they detect cues from the controlling officer.

https://en.wikipedia.org/wiki/Detection_dog#Criticism

  The law was reviewed in 2006 by the New South Wales Ombudsman, who handed down a critical report regarding the use of dogs for drug detection. The report stated that prohibited drugs were found in only 26% of searches following an indication by a drug sniffer dog. Of these, 84% were for small amounts of cannabis deemed for personal use.[27]: 29  Subsequent figures obtained from NSW Police in 2023 revealed that between 1 January 2013 and 30 June 2023, officers had conducted 94,535 personal searches (refers to both strip searches and less invasive frisk or "general" searches) resulting from drug detection dog indications, with only 25% resulting in illicit drugs being found.[28]
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by colechristensen on Wednesday September 18, 2024 @11:40AM (#41581180)
It might have looked like a normal pager under xray, but I bet it looked _different_ than an unmodified pager. Not suspicious on its own but suspicious because it was changed.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by Tiktaalik on Wednesday September 18, 2024 @08:33PM (#41587185)
how the hell is anyone going to be able to fly anymore?
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by s1artibartfast on Thursday September 19, 2024 @12:44PM (#41593754)
the idea TSA security has always been a farce, detecting only the crudest methods of attack.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by TiredOfLife on Wednesday September 18, 2024 @11:35AM (#41581101)
Don't be a part of a terrorist organization and if you are - https://en.wikipedia.org/wiki/Bring_your_own_device
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by tamimio on Wednesday September 18, 2024 @11:25AM (#41580936)
Replace it.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by itishappy on Wednesday September 18, 2024 @11:29AM (#41581014)
As I understand, Hezbollah reactively replacing their phones was the exact thing that made yesterday's attack possible.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by tamimio on Wednesday September 18, 2024 @11:36AM (#41581126)
Replace the battery, not the device.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by rasz on Wednesday September 18, 2024 @11:46AM (#41581297)
Start with "do I work for Terrorist organization?"
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by WJW on Wednesday September 18, 2024 @11:29AM (#41581010)
Imagine if the Russians managed to do something like this in the US...
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by beeboobaa3 on Wednesday September 18, 2024 @11:27AM (#41580969)
Israel has shown us (again) that we cannot trust any device whose full supply chain hasn't been properly audited. Which you can't really do at this scale.

So yeah, literally anything you buy can apparently just be stuffed full of explosives waiting to kill you and anyone near you.

Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by hersko on Wednesday September 18, 2024 @11:44AM (#41581258)
Yes. Explosives can be placed in any device that has a small cavity. This has always been true....
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by beeboobaa3 on Wednesday September 18, 2024 @12:40PM (#41582161)
It just hasn't been likely.
Re:Hezbollah hand-held radios detonate across Lebanon, sourc... by mrguyorama on Wednesday September 18, 2024 @04:38PM (#41585175)
Have you angered Mossad? If no, you are almost certainly fine. If yes, you are already dead.

James Mickens explained this clearly a decade ago.

https://www.usenix.org/system/files/1401_08-12_mickens.pdf

You cannot answer any security questions without a threat model. Are you worried about your neighbor putting a bomb in your phone? Mossad isn't putting bombs in random phones.