Feed your mind. Feast your eyes.
IN JANUARY, IT was reported that
Jeff Bezos — CEO of Amazon and,
more relevantly, proprietor of The
Washington Post — had had data
leaked from his phone by malware
installed when he received a video
from Mohammad bin Salman, the
Crown Prince of Saudi Arabia. The
story was based on an ongoing
inquiry by UN special rapporteurs
drawing on a technical analysis
commissioned by Bezos. This
suggested that the hack could have
been done using Pegasus, a spyware
product from the Israeli company
NSO, or Galileo from Milan–based
HackingTeam. At the time of
writing, Saudi Arabia and NSO had
denied any involvement, while the
other parties hadn’t commented.
But nobody claims to know
exactly what was done, or how.
When Bezos’ iPhone X was later
examined by Cellebrite, which
“cracks” iOS devices for law
enforcement, no malware was
found. Perhaps code contained
in the video file, received via
WhatsApp on 8 November 2018
had executed itself — although iOS
should prevent this — and exfiltrated
the megabyte or more of data per
day that Bezos’ records would show
had been transmitted in the
following months, then deleted
itself. Ironically, WhatsApp’s end–to–
end encryption, which (as with
Apple’s iMessage) prevents
messages being intercepted or
faked, hampered investigation.
There are certainly examples of
“cyberarms” targeting iOS by
exploiting newly discovered security
vulnerabilities before Apple patches
them. Android and WhatsApp have
also been targeted. It’s assumed
that national security agencies
acquire tools to compromise all
platforms. Because many tools are
developed by third parties who also
sell to others, they could in theory
be used against any of us to bypass
iOS’ security. But the effort and
expense makes it unlikely.
If anything can help to protect
you from a determined attacker, it’s
following standard advice. Don’t
click unknown links and don’t open
unexpected attachments. And think
twice about owning a newspaper.
ANKER iPHONE LED FLASH
Frqqhfwv#yld#Oljkwqlqj#+wkh#Ľuvw#
ľdvk#fhuwlĽhg#wr#gr#vr,#iru#xs#wr#
wzlfh#wkh#udqjh#dqg#irxuĞwlphv#
wkh#euljkwqhvv#ri#wkh#lSkrqh#ľdvk
'7<1<<#iurp#dqnhu1frp2ohgľdvk
MUST HAVES
TENBA FULTON 14L BACKPACK
Wklv#5oe#edfnsdfn#wdnhv#d#GVOU/#
wkuhh#wr#irxu#ohqvhv#dqg#dq#lSdg#
+xs#wr#4318Ğlqfk,/#soxv#|rxu#oxqfk#
dqg#mdfnhw#lq#wkh#uroo#wrs1#
$99.95 from tenba.com
HYPERJUICE 110W
Wklv#xqlw#fkdujhv#xs#wr#Ľyh#
ghylfhv#dw#rqfh#yld#Ľyh#XVEĞF#SG#
613#sruwv#+wzr#433Z/#wkuhh#78Z,/#
Ľyh#XVEĞD/#dqg#wzr#ghwdfkdeoh#
48Z#Tl#fkdujlqj#pdwv1#
'44<1<<#iurp#k|shuvkrs1frp
Image rights from top: Anker, Tenba, Hyper.
Start
10 APR 2020 maclife.com
Zkdw#wkh#khfnB
Did a video really hack Jeff Bezos’ iPhone?
BY ADAM BANKS
WINS & FAILS
BAIT Google finds security flaws in Safari’s Intelligent
Tracking Prevention
BLOCK EA announces Tetris will be pulled from the
App Store on 21 April 2020
NIXED Founder Jack Dorsey says Twitter will probably never
introduce an edit button
SWITCH Google telling Apple how to protect your personal
data? Bring on Opposite Day
VOTE If we want to watch misfits cancelling each other out,
there’s the Democratic Primaries
FIXED Wait, we went back to his statement and now it says
maybe they will...?