Beautiful Virgin Islands

Thursday, Feb 22, 2024

We can make our phones harder to hack but complete security is a pipe dream

We can make our phones harder to hack but complete security is a pipe dream

Even the latest iPhone scare won’t persuade us to choose safety over convenience
Apple caused a stir a few weeks ago when it announced that the forthcoming update of its mobile and laptop operating systems would contain an optional high-security mode that would provide users with an unprecedented level of protection against powerful “spyware” software that surreptitiously obtains control of their devices.

It’s called Lockdown Mode and, according to Apple, “offers an extreme, optional level of security for the very few users who, because of who they are or what they do, may be personally targeted by some of the most sophisticated digital threats, such as those from NSO Group and other private companies developing state-sponsored mercenary spyware”.

Lockdown is effectively an alternative operating system mode. To turn it on, go to settings, choose it and restart your device. When you do, you find yourself with a rather different iPhone. Browsing the web is clunkier, for example, because Lockdown blocks many of the speed and efficiency tricks that Safari uses to render web pages. Some complex but widely used web technologies, like so-called just-in-time JavaScript compilation, which allow websites to run programs inside your browser, are disabled unless you specifically exclude a website from restriction. Still, more people might be persuaded to plump for greater security after vulnerabilities were revealed on Apple devices.

Lockdown also limits all kinds of incoming invitations and requests (for example, from FaceTime) unless you have specifically asked for them. In messages, the phone won’t show link previews and will block all attachments with the exception of a few standard image formats. Nor will it allow access to anything physically plugged into it. And so on.

The result of engaging Lockdown is that you have an iPhone that is more secure but less convenient to use. And, in a way, that is the most significant thing about Apple’s decision. As the security guru Bruce Schneier puts it: “It’s common to trade security off for usability and the results of that are all over Apple’s operating systems – and everywhere else on the internet. What they’re doing with Lockdown Mode is the reverse: they’re trading usability for security. The result is a user experience with fewer features, but a much smaller attack surface. And they aren’t just removing random features; they’re removing features that are common attack vectors.”

Ever since people started to worry about computer safety, the issue has been framed as striking a balance between security and convenience. Up to now, convenience has been winning hands down. Take passwords. Everyone knows that long, complex passwords are more secure than simple ones, but they’re also hard to remember. So, being human, we don’t use them: in 2021, the five most commonly used passwords were: 123456, 123456789, 12345, qwerty and password.

In the era of mainframe computers and standalone PCs, this kind of laxity didn’t matter too much. But as the world became networked, the consequences of carelessness have become more worrying. Why? Because there is no such thing as a completely secure networked device and we have been adding such devices to the so-called Internet of Things (IoT) on a maniacal scale. There are something like 13bn at the moment; by 2030, the tech industry thinks there might be 30bn.

The conventional adjective for these gizmos is “smart”. They can be “hi-tech” items such as smart speakers, fitness trackers and security cameras, but also standard household things such as fridges, lightbulbs and plugs, doorbells, thermostats and so on. From a marketing point of view, their USPs are flexibility, utility and responsiveness – in other words, convenience.

But smart is a euphemism that tactfully conceals the fact that they are tiny computers that are connected to the internet and can be remotely controlled from a smartphone or a computer. Some are made by reputable companies, but many are products of small outfits in China and elsewhere. They come with default usernames and passwords (such as “admin” and “password”) that buyers can change (but usually don’t). Because they’re networked, they are remotely accessible by their owners and, more importantly, by others. And there are billions of them out there in our homes, offices and factories.

Security researchers use the term “attack surface” to describe the number of possible points where an unauthorised user can access a system, extract data and/or inflict damage. The smaller the surface, the easier it is to protect. Unfortunately, the corollary also holds. In our Gadarene rush into the Internet of Things we are creating an attack surface of near-infinite dimensions.

The strange thing is that we already know what the consequences of this are like and yet seem unperturbed by them. In 2016, the security community was transfixed by a number of huge distributed denial-of-service attacks that caused outages, internet congestion and in one case overwhelmed the website of a prominent security guru.

Such attacks used to be conducted by botnets of thousands of infected PCs but the 2016 ones were carried out by a botnet that included perhaps half-a-million infected “smart” gizmos. The Mirai malware that assembled the botnet scoured the web for IoT devices protected by little more than factory-default usernames and passwords and then enlisted them in attacks that hurled junk traffic at an online target until it could no longer function.

Mirai is still around, so you might not be the only entity benefiting from those fancy new networked lightbulbs. The cost of convenience will be higher than we think. So upgrade those passwords.
#NSO 
Newsletter

Related Articles

Beautiful Virgin Islands
London's Iconic British Telecom Tower Sold To Become Hotel
I have a dream, MLK inspiring speech
Ukraine Arrests Father-Son Duo In Lockbit Cybercrime Bust
Aretha Franklin, Marvis Staples - Oh Happy Day
US Offers $15 Million For Info On Leaders Of Cybercrime Group Lockbit
BVI Freedom Song
Russia Claims UK Cultural Agency Spied for Ukraine
Billy Preston - You Can't Beat God Giving (Live)
Apple warns against drying iPhones with rice
VIRGIN ISLANDS REGGAE CARIBBEAN RIDDIMZ
Alexei Navalny: UK sanctions Russian prison chiefs after activist's death
Oh Happy Day Edwin Hawkins - Anthony Brown w FBCG Combined Choir
German economy is in 'troubled waters' - ministry
'Stand by Me' performed by Karen Gibson and The Kingdom Choir
In a recent High Court hearing, the U.S. argued that Julian Assange endangered lives by releasing classified information.
National Anthem of the British Virgin Islands - Oh, Beautiful Virgin
New video
Hello Dolly
Tucker Carlson says Boris Johnson wants "a million dollars, in Bitcoin or cash, from Tucker Carlson to talk about Ukraine.
for KING & COUNTRY - Amen (Reborn) [feat. Lecrae & The WRLDFMS Tony Wi
Russia is rebuilding capacity to destabilize European countries, new UK report warns
Bob Marley - Get Up Stand Up
EU Commission wants anti-drone defenses at Brussels HQ
Yes He Can
Von der Leyen’s 2nd-term pitch: More military might, less climate talk
What A Friend We Have In Jesus
Global Law Enforcement Dismantles Lockbit Ransomware Operation
Unforgettable
Prince William Urges End to Gaza Conflict
Touch The Hem Of His Garment
UK court to hear Assange's final appeal against extradition to the US, where he faces charges related to his journalistic work—the publication of a classified video in 2010 that exposed US war crimes against humanity.
The Lord's Prayer
About 50-60% kids either chose to be YouTuber or influencer
THE GOD MOVEMENT...BEAUTIFUL BVI
A viral video of Nationals MP Barnaby Joyce lying on a Canberra footpath is celebrated by his media mates.
Siyahamba
European Countries React to Navalny's Death by Summoning Russian Diplomats
Ray Charles And The Voices Of Jubilaton, Oh, Happy Day
Israel has gone ‘beyond self-defence’ in Gaza, says Labour’s Streeting
Ramblin' Rose
English farmers to be offered ‘largest ever’ grant scheme amid food security concerns
Protoje - Who Knows ft. Chronixx
Cameron government knew Post Office ditched Horizon IT investigation
Pressure - Virgin Islands Nice
EU Calls for Immediate Ceasefire in Gaza Conflict
Phil Wickham - House Of The Lord
EU Vows To Hold Putin "Accountable" After Meeting Alexei Navalny's Wife
My God Is Real (Yes, God Is Real)
EU Launches Probe Into TikTok Over Child Protection Under Digital Content Law
The Lion King Circle of Life by LEBO M. — LIVE at the HAVASI Symphonic
The EU Initiates Naval Mission to Defend Red Sea Trade Routes
Louis Armstrong - When The Saints Go Marching In
EU and UK Announce Joint Effort on Migration
Kanye West Sunday Service - hallelujah, salvation, and glory
Brazil's Lula Likens Gaza Operation to Holocaust, Israel Says "Red Line" Crossed
Jonathan Nelson - I Believe (Island Medley
Ministers Confirm Proposal to Prohibit Mobile Phone Usage in English Schools
From The Virgin Islands Sqad Up
Microsoft-backed OpenAI valued at $80bn after company completes deal
Common, John Legend - Glory
‘Alexei would want to tell Russia not to give up fighting’
Anthony Evans vs. Jesse Campbell - If I Ain't Got You
Rwandan Footballer's Dismissal Sparks Concerns Over UK Asylum Plan
I have a dream, MLK inspiring speech
Whisky Challenges China's Baijiu Market During New Year Celebrations
Aretha Franklin, Marvis Staples - Oh Happy Day
Avdiivka - Symbol Of Ukrainian Resistance Now In Control Of Russian Troops
BVI Freedom Song
Putin Critic Alexei Navalny's "Killers" Refusing To Hand Over Body, Say Allies
Billy Preston - You Can't Beat God Giving (Live)
"Historic Step": Zelensky Signs Security Pact With Germany
VIRGIN ISLANDS REGGAE CARIBBEAN RIDDIMZ
"Historic Step": Zelensky Signs Security Pact With Germany
Oh Happy Day Edwin Hawkins - Anthony Brown w FBCG Combined Choir
20 Tech Giants Sign Effort To Fight AI Election Interference Across Globe
'Stand by Me' performed by Karen Gibson and The Kingdom Choir
Joe Biden Accuses Putin of Causing Navalny's Death
National Anthem of the British Virgin Islands - Oh, Beautiful Virgin
Russian opposition leader Alexey Navalny has died at the Arctic prison colony
Hello Dolly
Tucker Carlson grocery shopping in Russia. This is so interesting.
for KING & COUNTRY - Amen (Reborn) [feat. Lecrae & The WRLDFMS Tony Wi
Julian Assange's Wife Warns of His Death if Extradited to US
Bob Marley - Get Up Stand Up
‘A lot higher than we expected’: Russian arms production worries Europe’s war planners
Yes He Can
Greece Legalizes Same-Sex Marriage and Adoption Rights
What A Friend We Have In Jesus
Hungarian Foreign Minister: Europeans will lose Europe, the Union's policy must change drastically
Unforgettable
In Britain Homeowners are receiving CPO’s (Compulsory Purchase Orders) so their homes can be redistributed to migrants
Touch The Hem Of His Garment
Microsoft says it caught hackers from China, Russia and Iran using its AI tools
The Lord's Prayer
Influencers Exploit X Platform for Profit Amidst Israel-Gaza Conflict
THE GOD MOVEMENT...BEAUTIFUL BVI
Former Dutch PM And Wife Die "Together Hand In Hand" Via Duo Euthanasia
Siyahamba
Media Giant Paramount Global, Which Owns CBS News, To Cut 800 Jobs
Ray Charles And The Voices Of Jubilaton, Oh, Happy Day
×