Independently Confirming Amnesty Security Lab's Finding of Predator Targeting

citizenlab.ca

8 pointsupofadown3 comments

> Most of these checks seem designed to avoid infecting devices under active observation by security researchers. The validation also involves a rudimentary location check designed to avoid targeting American and Israeli devices

Isn't this a possible indication of who / what is behind this effort? Doesn't this say more than evaluating the X account that was sharing the links?

No, in a word. What do you hear those phrases saying that points you to a specific actor?

You should look at Kaspersky's Operation Triangulation and Project Zero's In-The-Wild series to understand how researchers are increasingly aggressive toward replaying & capturing these exploit chains. If you want to preserve your exploits & everyone does- you have to implement these checks

So it's not a matter of not spying on yourself. It's more about trying to mitigate known experts finding out about you? Ahh. Thanks. Makes sense.

Reply on news.ycombinator.com