Their "Blastdoor" in iOS 14 is an effort to address this (by sandboxing more parts of the message processing pipeline):
googleprojectzero.blogspot.com
This is a very valid concern.
Their "Blastdoor" in iOS 14 is an effort to address this (by sandboxing more parts of the message processing pipeline):
A Look at iMessage in iOS 14
Posted By Samuel Groß, Project Zero On December 20, Citizenlab published “ The Great iPwn ”, detailing how “Journalists [were] Hacked ...
Apparently there's still some work to do ...
I wouldn't be surprised if France was actually one of their customers. Germany just admitted to it too ...
I doubt that very much. Zero-click exploits are worth millions. They'd only want to use it on high-value targets to make it less likely that it's discovered and patched.
The US should threaten to block all US tech from Israel if the Israeli gov't doesn't put a stop to this immediately. This is way over the top and it needs to stop.Google, Microsoft and some other tech companies have joined Facebook's pending lawsuit over NSO's Whatsapp breach. Why Apple isn't joining in I don't know. They'd certainly have standing after the recent news ...
Microsoft and Google join Facebook’s legal fight against infamous spyware vendor
NSO Group argues it should benefit from sovereign immunity.www.theverge.com
So much wrong with this but here goes:
but but… our software would no longer include features that can wow people and our marketing department would need to be axed.
And shareholders wouldn’t be happy. Do you have sources that any US police forces are NSO customers? First I hear about it.
That is debatable. We'll see what happens when Facebook's lawsuit starts. For example, in the US unauthorized access to devices is illegal under the Computer Fraud and Abuse Act (which may be why they claim that their software cannot be used in the US). Other countries may have similar laws.
And there will be another set of exploits waiting to be discovered for that new standard, could be even more damaging and more widespread. We never know.
Software duplication cost is so low, and iOS security is so “high”, average people would never realise their iOS has already been jailbroken regardless. Just that they won’t be used to install Cydia. While it is true that they will be prioritised on high value targets, governments are more than happy to deal with a system full of exploits than a system that is less exploitable.
They need to fix security holes in iOS 15. Do you want a phone with more emoticons, new icons and such or do you want a phone that is secure?but but… our software would no longer include features that can wow people and our marketing department would need to be axed.
That's all you need. It is not trust in the apps which is required. Rather trust in the content you may download (possibly in the background).
Don’t ask me. Ask random teenagers on the street what they want.
