Discover and read the best of Twitter Threads about #LockdownMode
Most recents (4)
PSA: Have an #iPhone?
Do you think because of who you / what you do, someone may try to hack you?
Try enabling #LockdownMode.
For the first time, we found evidence that it does frustrate *certain* hacking attempts. 🧵1/
Do you think because of who you / what you do, someone may try to hack you?
Try enabling #LockdownMode.
For the first time, we found evidence that it does frustrate *certain* hacking attempts. 🧵1/
2/ Here's the research I'm talking about👇
Basically, we @citizenlab found some sophisticated #Pegasus #spyware hacking attempts against human rights groups were getting stopped by #LockdownMode.
Basically, we @citizenlab found some sophisticated #Pegasus #spyware hacking attempts against human rights groups were getting stopped by #LockdownMode.
3/ When #LockdownMode first came out last year a lot of people were pointing out: hey, this mode degrades some features!
(#Apple is also up front about this)
So there was this question: are the trade-offs worth it?
Well, we finally have some evidence of it doing its job.
(#Apple is also up front about this)
So there was this question: are the trade-offs worth it?
Well, we finally have some evidence of it doing its job.
NEW INVESTIGATION: recent Mexican #Pegasus spyware abuses led us to evidence of a trio of zero-click exploits used by #NSO.
Targets? HomeKit & FindMy.
Remarkably, #Apple's #iOS #LockdownMode blocked one of them.
Quick THREAD 1/
citizenlab.ca/2023/04/nso-gr…
Targets? HomeKit & FindMy.
Remarkably, #Apple's #iOS #LockdownMode blocked one of them.
Quick THREAD 1/
citizenlab.ca/2023/04/nso-gr…
2/ First, the new victims: Mexican lawyers representing families of victims of Military abuses
The timing of the targeting matches key developments in efforts to hold #Mexico's army responsible.
It's really bad.
We @citizenlab forensically confirmed the spyware infections.
The timing of the targeting matches key developments in efforts to hold #Mexico's army responsible.
It's really bad.
We @citizenlab forensically confirmed the spyware infections.
3/ We found evidence of 3 #zeroclick #0day chains used by NSO's #Pegasus #spyware in 2022.
First: #PWNYOURHOME: worked against #homekit even if you didn't set up a home.
Apple's changes in iOS 16.3.1 that address.
#LockdownMode also kneecaps it.
First: #PWNYOURHOME: worked against #homekit even if you didn't set up a home.
Apple's changes in iOS 16.3.1 that address.
#LockdownMode also kneecaps it.
NEW: @Apple's #LockdownMode is radical reduction of the threat surface of an iPhone.
Cannot overstate how big a change this is for Apple.
So important that people at higher digital risk have the option to harden their phones.
Some thoughts 1/
apple.com/newsroom/2022/…
Cannot overstate how big a change this is for Apple.
So important that people at higher digital risk have the option to harden their phones.
Some thoughts 1/
apple.com/newsroom/2022/…
2/ When you notify users that they've been targeted with sophisticated threats, they inevitably ask:
'How can I make my phone safer?'
We haven't had many great, honest answers that really make an impact.
Hardening a consumer handset is really out of reach.
'How can I make my phone safer?'
We haven't had many great, honest answers that really make an impact.
Hardening a consumer handset is really out of reach.
3/There's a common mental barrier among big platforms & OS developers around mainstreaming high-security features.
A lot of inevitable considerations, like:
- Worse user experience (esp. vs. the competition!)
- Breaking features
- More customer support resources required, etc.
A lot of inevitable considerations, like:
- Worse user experience (esp. vs. the competition!)
- Breaking features
- More customer support resources required, etc.
NEW: @apple announces #LockdownMode, a major change to iPhone security that promises to help high risk users + other actions to hold the mercenary spyware industry to account nr.apple.com/d2I3Q1s4s0
My thread w context & details 👇
My thread w context & details 👇
The @citizenlab has been undertaking evidence-based research on targeted espionage against civil society for close to 15 years
citizenlab.ca/category/resea…
citizenlab.ca/category/resea…
We published the first report on NSO Group’s Pegasus spyware in 2016
citizenlab.ca/2016/08/millio…
Since then, @AmnestyTech, @FbdnStories, @ForensicArchi, and many others have joined the effort
citizenlab.ca/2016/08/millio…
Since then, @AmnestyTech, @FbdnStories, @ForensicArchi, and many others have joined the effort
