Privacy lost...

nsaspook

Joined Aug 27, 2009
16,330
https://googleprojectzero.blogspot.com/2020/12/an-ios-zero-click-radio-proximity.html
For 6 months of 2020, while locked down in the corner of my bedroom surrounded by my lovely, screaming children, I've been working on a magic spell of my own. No, sadly not an incantation to convince the kids to sleep in until 9am every morning, but instead a wormable radio-proximity exploit which allows me to gain complete control over any iPhone in my vicinity. View all the photos, read all the email, copy all the private messages and monitor everything which happens on there in real-time.
...

Of course, an iPhone isn't designed to allow people to build capabilities like this. So what went so wrong that it was possible? Unfortunately, it's the same old story. A fairly trivial buffer overflow programming error in C++ code in the kernel parsing untrusted data, exposed to remote attackers.


In fact, this entire exploit uses just a single memory corruption vulnerability to compromise the flagship iPhone 11 Pro device. With just this one issue I was able to defeat all the mitigations in order to remotely gain native code execution and kernel memory read and write.

 
Last edited:

nsaspook

Joined Aug 27, 2009
16,330
A taste of what the government has had over the last few decades.
https://www.thespacereview.com/article/790/1

https://www.capellaspace.com/sar-101-an-introduction-to-synthetic-aperture-radar/
SAR 101: An Introduction to Synthetic Aperture Radar

Capella-Space-Spot-Image-Roswell-International-Air-Center-New-Mexico.jpg
https://www.capellaspace.com/capella-unveils-worlds-highest-resolution-commercial-sar-imagery/
We are unveiling the highest resolution commercial SAR imagery available in the market at 50 cm x 50 cm resolution in our new Spotlight or “Spot” imaging mode. Our Spot product is a specialized mode that allows for long exposures over an area of interest (AOI) and results in a beautiful and crystal-clear SAR imagery. This new 50 cm x 50 cm imagery is collected by dwelling our satellites over an AOI for a long period. Think of it as a long exposure on your digital camera when you are trying to collect more light into your sensor. Except we are doing a very long exposure looking at a single location on Earth while traveling at 7.5 km per second in space. Our satellites have been designed with the capability to dwell on a single location for as long as 60 seconds.
Capella-Space-Spot-Image-Tokyo-Japan-1.jpg
https://www.capellaspace.com/no-sar-cant-see-through-buildings/
We were surprised that this announcement caused so much debate but realized how not everyone understands SAR and how misunderstood science can lead to misinformation. As a result, we are committed to producing more educational resources around SAR technology to broaden everyone’s awareness of its amazing potential.

SAR is very different from the optical photographs that are built for interpretation by the human eye and we will explain why a ghost-like image of Tokyo is actually an artifact of SAR imagery distortion and not an “X-Ray of a City”.
SpaceNet6-Blog_Foreshortening-and-Layover-Geometry-e1581354716201-1024x435-1.png
As you can see in the above diagrams, objects are identified by their distance from the radar, not their distance projected ono the ground. Taller objects have certain points that are closer to the radar than some shorter objects that may be closer on the ground. When we project a radar image onto the ground, this phenomenon ends up distorting the image.

One of our radar scientists accurately described the phenomenon: It helps to think of it just as your brain’s interpretation of a two dimensional representation of the coherent sum of backscatter responses from electromagnetic waves.
 

nsaspook

Joined Aug 27, 2009
16,330
Headline: https://www.bbc.com/news/technology-55412230
Signal: Cellebrite claimed to have cracked chat app's encryption

Response: https://signal.org/blog/cellebrite-and-clickbait/
No, Cellebrite cannot 'break Signal encryption.'

Yesterday, the BBC ran a story with the factually untrue headline, “Cellebrite claimed to have cracked chat app’s encryption.” This is false. Not only can Cellebrite not break Signal encryption, but Cellebrite never even claimed to be able to.

Since we weren’t actually given the opportunity to comment in that story, we’re posting this to help to clarify things for anyone who may have seen the headline.

This world of ours
Last week, Cellebrite posted a pretty embarrassing (for them) technical article to their blog documenting the “advanced techniques” they use to parse Signal on an Android device they physically have with the screen unlocked.
 

nsaspook

Joined Aug 27, 2009
16,330

nsaspook

Joined Aug 27, 2009
16,330
https://theintercept.com/2021/05/03/car-surveillance-berla-msab-cbp/
So data-hungry government agencies have increasingly moved to exploit the rise of the smart car, whose dashboard-mounted computers, Bluetooth capabilities, and USB ports have, with the ascendancy of the smartphone, become as standard as cup holders. Smart car systems are typically intended to be paired with your phone, allowing you to take calls, dictate texts, plug in map directions, or “read ”emails from behind the wheel. Anyone who’s taken a spin in a new-ish vehicle and connected their phone — whether to place a hands-free call, listen to Spotify, or get directions — has probably been prompted to share their entire contact list, presented as a necessary step to place calls but without any warning that a perfect record of everyone they’ve ever known will now reside inside their car’s memory, sans password.
https://www.nbcnews.com/tech/tech-n...urn-car-data-destroy-suspects-alibis-n1251939
"I hear a lot of analogies of cars being smartphones on wheels. But that's vastly reductive," said Andrea Amico, founder of Privacy4Cars, which makes a free app that helps people delete their data from automobiles and makes its money by offering the service to rental companies and dealerships. "If you think about the amount of sensors in a car, the smartphone is a toy. A car has GPS, an accelerometer, a camera. A car will know how much you weigh. Most people don't realize this is happening."
 

nsaspook

Joined Aug 27, 2009
16,330
https://www.bbc.com/news/world-57394831

How did the ANOM sting work?
The FBI began operating an encrypted device network called ANOM, and covertly distributed devices with the chat app among the criminal underworld via informants.
The idea for the operation came after two other encrypted platforms were taken down by law enforcement agencies, leaving criminal gangs in the market for new secure phones.
The devices were initially used by alleged senior crime figures, giving other criminals the confidence to use the platform.
"You had to know a criminal to get hold of one of these customised phones. The phones couldn't ring or email. You could only communicate with someone on the same platform," the Australian police explained.
 

nsaspook

Joined Aug 27, 2009
16,330
Top