I’m wondering if there are new exploits, or if Bezos or his girlfriend ran really old ios versions. The latter seems unlikely.
https://motherboard.vice.com/en_us/article/qvakb3/inside-nso...
>The entrepreneur, who spoke to Motherboard on condition of anonymity because he was not authorized to talk about the meeting, agreed, but said that NSO would have to target his other iPhone, which he brought with him and had a foreign phone number. He gave NSO that phone number and put the phone on the desk.
>After “five or seven minutes,” the contents of his phone’s screen appeared on a large display that was set up in the meeting room, all without him even clicking on a malicious link, he said.
>“I see clicking on all kinds of icons: email icon, SMS icon, and other icons,” he told Motherboard. “And suddenly I saw all my messages in there and I saw all the email in there and they were capable to open any information that was on my [iPhone].”
A good story to tell next time when politician want to enact some new law to weaken the security of phone, for Apple/Android to build security holes for the "law enforcement / governments".
Of course, they could have already learned that the hard way, and that could be why they turn a blind eye to Saudi wrongdoing.
Something like that already happened: https://www.democracynow.org/2014/8/1/john_brennan_faces_cal...
So what will we do if it happens and we find out. I guess he'll just apologize and we'll pretend it never happened? It worked like that last time:
http://www.msnbc.com/msnbc/cia-spied-senate-committee
> According to CIA spokesperson Dean Boyd, agency director John Brennan apologized
Are you trying to change the topic?
> The cia didn’t hack phones and blackmailed businessmen and politicians.
We know they hacked the devices of senators and even apologized for it later. Did the blackmail them? Could be. How do you know they didn't? Bezos was probably the rare case where he exposed their blackmail, in most cases, because of what it is, blackmail is something that is kept secret.
Most of the time you don't even need a 0-day exploit, simple trojan horses/targeted phishing attacks work fine. Fake celltowers can also be used. The possibilities are nearly endless. Endpoint security is virtually nonexistent.