128

Kaspersky's iShutdown Tool Detects Pegasus Spyware and Other Mawlare on iOS Devices (www.hackread.com)

submitted 8 months ago by 111@zerobytes.monster to c/technology@lemmy.world

19 comments fedilink hide all child comments

all 20 comments

sorted by: hot top controversial new old

[-] halva@discuss.tchncs.de 83 points 8 months ago

Using Russian malware to avoid Israeli malware utilizing backdoors left by American three letter orgs. Gotta love international collaboration.

[-] gravitas_deficiency@sh.itjust.works 49 points 8 months ago

Simply because kaspersky is based in Russia, you should not use kaspersky. I’d be shocked if the FSB hasn’t forced them to build in backdoors at this point.

[+] McDropout@lemmy.world -36 points 8 months ago

Just because something is based in Russia, means that nobody should use it?

[-] gravitas_deficiency@sh.itjust.works 40 points 8 months ago

The government under which a corporate entity operates has direct and meaningful impact on a lot of things about said company. For instance: US companies are subject to ITAR regulations, and there are MASSIVE penalties for breaching those laws. Russia is a totalitarian surveillance state, so I wouldn’t trust any security software from a Russian company. Much the same way that I wouldn’t trust any logic design or 3D modeling software coming out of a major Chinese company, because the CCP has a long and storied history of stealing and reverse engineering shit that they’re not legally allowed to.

[+] stardreamer@lemmy.blahaj.zone -7 points 8 months ago* (last edited 8 months ago)

Out of curiosity what do you think of Nginx, which was Russian based and used to have its main offices in Russia (that also got raided by Russian police) or Arch Linux, where one of the main packagers (up to 30% of official packages) is managed by Felix Yan (which I believe is a Chinese citizen)? Where is the line drawn? Is it only for profit companies, security software, or something specific?

[-] BassTurd@lemmy.world 28 points 8 months ago

Both examples you listed are open source, so anyone can review their code. No government can dictate what gets published to the code, and if they can, it will be noticed and get forked.

[-] stardreamer@lemmy.blahaj.zone 12 points 8 months ago

This probably sounds pedantic but based on this the issue isn't that the software is Russian. It's that the software is under the regulation of an authoritarian government (which is Russia)

[-] gravitas_deficiency@sh.itjust.works 15 points 8 months ago

Precisely. If kaspersky were 100% open source, I would not have said what I did. But it’s closed source, and it’s owned by a Russian company, subject to Russian laws, and Russia is a authoritarian state, hostile to most of the world at this point - either directly or indirectly - so one would be forgiven for assuming the worst, in terms of what was put in the code at the FSB’s behest.

[-] Supervivens@lemmy.world 6 points 8 months ago

Arch Linux is open source which makes a huge difference. Idk about nginx tho

[-] stardreamer@lemmy.blahaj.zone 5 points 8 months ago

Nginx is 2-clause BSD, which I would argue is more "Open Source" than Arch Linux (official repo contains proprietary components such as discord, steam, multimedia codecs). You could argue that the majority of it (and it's build system) is open source, but probably not "Arch Linux" is fully Open Source.

[-] TransplantedSconie@lemm.ee 13 points 8 months ago

Correct.

Slava Ukraini

[-] eskimofry@lemmy.world 1 points 8 months ago

Just because it exists doesn't mean you should use it? You sound like a horny hamster.

[-] Asudox@lemmy.world 3 points 8 months ago

Mawlare

[-] altima_neo@lemmy.zip 3 points 8 months ago* (last edited 8 months ago)

Darth Mawlare

He's Italian

[-] piracysails@lemm.ee -2 points 8 months ago

He meant to say malware

[-] Asudox@lemmy.world 1 points 8 months ago

yeah

[-] piracysails@lemm.ee 1 points 8 months ago

Like not mawlare but malware.

[-] Kiernian@lemmy.world 1 points 8 months ago

Neat!

Is there something like this for Android?

[-] jivandabeast@lemmy.browntown.dev 2 points 8 months ago

AFAIK you could potentially use MVT

https://github.com/mvt-project/mvt

Not 100% though

this post was submitted on 18 Jan 2024

128 points (94.4% liked)

Technology

58123 readers

4357 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS