After Chiding Apple On Privacy, Germany Says It Uses Pegasus Spyware (appleinsider.com) 38
"Germany's Federal Criminal Police Office (BKA) purchased access to NSO Group's Pegasus spyware in 2019 after internal efforts to create similar iOS and Android surveillance tools failed," reports AppleInsider. The news comes less than a month after the Digital Agenda committee chairman of Germany's federal parliament, Manual Hoferlin, declared Apple to be on a "dangerous path" with plans to enact on-device child sexual assault material monitoring. He said the system undermines "secure and confidential communication" and represents the "biggest breach of the dam for the confidentiality of communication that we have seen since the invention of the Internet." From the report: The federal government revealed the agreement with NSO in a closed-door session with the German parliament's Interior Committee on Tuesday, reports Die Zeit. When the BKA began to use Pegasus is unclear. While Die Zeit says the tool was purchased in 2019 and is currently used in concert with a less effective state-developed Trojan, a separate report from Suddeutsche Zeitung, via DW.com, cites BKA Vice President Martina Link as confirming an acquisition in late 2020 followed by deployment against terrorism and organized crime suspects in March.
Officials made the decision to adopt Pegasus in spite of concerns regarding the legality of deploying software that can grant near-unfettered access to iPhone and Android handsets. As noted in the report, NSO's spyware exploits zero-day vulnerabilities to gain access to smartphones, including the latest iPhones, to record conversations, gather location data, access chat transcripts and more. Germany's laws state that authorities can only infiltrate suspects' cellphone and computers under special circumstances, while surveillance operations are governed by similarly strict rules.
BKA officials stipulated that only certain functions of Pegasus be activated in an attempt to bring the powerful tool in line with the country's privacy laws, sources told Die Zeit. It is unclear how the restrictions are implemented and whether they have been effective. Also unknown is how often and against whom Pegasus was deployed. According to Die Zeit, Germany first approached NSO about a potential licensing arrangement in 2017, but the plan was nixed due to concerns about the software's capabilities. Talks were renewed after the BKA's attempts to create its own spyware fell short.
Officials made the decision to adopt Pegasus in spite of concerns regarding the legality of deploying software that can grant near-unfettered access to iPhone and Android handsets. As noted in the report, NSO's spyware exploits zero-day vulnerabilities to gain access to smartphones, including the latest iPhones, to record conversations, gather location data, access chat transcripts and more. Germany's laws state that authorities can only infiltrate suspects' cellphone and computers under special circumstances, while surveillance operations are governed by similarly strict rules.
BKA officials stipulated that only certain functions of Pegasus be activated in an attempt to bring the powerful tool in line with the country's privacy laws, sources told Die Zeit. It is unclear how the restrictions are implemented and whether they have been effective. Also unknown is how often and against whom Pegasus was deployed. According to Die Zeit, Germany first approached NSO about a potential licensing arrangement in 2017, but the plan was nixed due to concerns about the software's capabilities. Talks were renewed after the BKA's attempts to create its own spyware fell short.
First rule of spying on your citizen club is (Score:5, Insightful)
You don't talk about spying on your citizens.
Re: (Score:2)
Re: (Score:3)
For a lot of people who actually live in Germany, striving for privacy is an ongoing fight.
https://en.wikipedia.org/wiki/... [wikipedia.org]
https://en.wikipedia.org/wiki/... [wikipedia.org]
https://netzpolitik.org/2015/how-the-german-foreign-intelligence-agency-bnd-tapped-the-internet-exchange-point-de-cix-in-frankfurt-since-2009/
Just to name a couple of major issues in the recent two decades.
Like with most places that have millions of people, the people are not o
Re: (Score:2)
Seems like the Federal Criminal Police Office is part of the former group. Y'all might want to consider eliminating that particular agency....
Re: (Score:2)
I'm not sure about eliminating. Ideally they ought to respect the German constitution and be held accountable for whenever they violate the law.
And that's probably the main problem here, just like with other cases before, if stuff gets public people like I make a big stink about it, going to the streets demonstrating. Then you get some politician idiots paying some lip-services to us. And maybe the
Re: (Score:1)
Who is this "Germany" you are talking about exactly?
Cause I'm German. And somehow I haven't gotten the memo for in which direction to goose step...
So can you enlighten me, dear Armchair Expert?
(Hint: Almost everyone in Germany is strongly against any form of spying on their own people. Even the kids whose grandparents didn't see the Gestapo for themselves. We have years of history lessons to teach us that stuff.
It's just that some nutjobs with a massive anxiety disorder are so afraid of literally everything
Re: (Score:2)
I have always wondered about that Fight Club rule. If the first rule is that you don't talk about it, then how does someone tell you that rule?
Re: (Score:1)
ThatsTheJoke.mp4
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
We've all seen innocent hackers punished for making and selling tools like this to ordinary people or even just information such as how to bypass polygraphs and the like. Is there some reason these traitors to the people are above-the
I agree it's hypocritical, but (Score:4, Insightful)
I wouldn't be surprised if there's a lot of these stories coming out soon, pointing out inconsistent behavior on the part of certain large public detractors of Apple's on-device scanning plans... and that Apple PR is discreetly behind them all.
It might be hypocritical if Germany was a person (Score:5, Insightful)
One person in Germany is concerned about Apple's CP thing.
Another person, who is also in Germany, wants to do policing with a tool that can "execute search warrants" on a phone.
If the population of Germany was one person, it would potentially be hypocritical.
Except not necessarily even if Germany was one person.
The German government specifically asked for some capabilities of the tool to be removed so that it was less likely to be abused. One CAN think that after getting a warrant based on probable cause, from a court, police might need to search a phone AND ALSO believe that Apple shouldn't be searching everyone's phone.
There is nothing inconsistent about thinking that a warrant, specific to an individual based on evidence, matters.
Personally, as a security professional, I'm aware that Apple's software ALREADY has the capability to see all of the images stored on the phone. That's how you're able to look at images on an iphone - by using Apple's software. Images which are stored on the phone by Apple's software. Then displayed on the screen by Apple's software. Apple can already dig through your phone if they want to - they made the whole OS. For that reason, I personally think the concern is overblown.
Buy anyway, even if we weren't talking about two different people in Germany, who do different jobs and therefore have different concerns, it's wholly consistent to say that searches to take place only after showing evidence and getting a warrant.
Re:It might be hypocritical if Germany was a perso (Score:4, Insightful)
Re: (Score:2)
Its akin in my mind to saying the holocaust was wrong, but being ok with capital punishment. The scale, and reasons are totally different. Apple was scanning every photo, on every Apple device, the police as you say, are likely using a tool after getting a warrant to go after someone, after presumably showing evidence in a court of law that leads them to believe there is criminal activity. I see no hypocrisy here, there are good reasons to occasionally need to use some kind of spyware in certain cases if
Re:I agree it's hypocritical, but (Score:4, Insightful)
It's not inconsistent. Apple is a private business, these guys are state run law enforcement.
There are lots of things that private companies should not do, but which the state probably should.
Re: (Score:2)
Great ad for Pegasus, this article. (Score:2)
One of the most ridiculous articles I've seen here (Score:3)
There are some things which are ok for a government (like having a police in the first place, with substantially extended rights) but not for anyone else... Which, by the way, does not say Germany's use of Pegasus would be a good thing. It's just a completely different thing for which the question what Apple does or doesn't do is completely irrelevant.
Like, now Apple is building a military with weapons of mass destruction and Germany complains, ha ha but hasn't Germany a military, too?
Re: (Score:2)
Indeed. This is a really strange conflation of what corporation is doing with what a sovereign nation state is doing.
It's almost as if there's a propaganda drive to conflate the two on the path from nation states to corporatocracy where corporations are sovereign, like/rather than national governments. And therefore have all of the same competencies that current governments have, such as intelligence gathering.
After chiding on solarwinds... (Score:2)
Slashdot got a shitload of mileage out of discussion of Solarwinds hacks.
Now they're carrying Solarwinds ads on the front page, sandwiched in between the stories.
Re: (Score:2)
I have a bunch of ad blocking going, and the only ads I see are ones that look like stories but are in another color. Generally there's only one on the front page, in the second story position. I probably could trivially make it go away with a user script, but I haven't bothered yet.
Ze Germans (Score:1)
This reads like something written by Apple (Score:3)
This entire article reads like a "whataboutism" written by the Apple marketing department.
Re: (Score:2)
This.
Apple is trying to complain that an elected government should be permitted to do things that Apple - shock - may not.
Fuck you, Apple.
Re: (Score:1)
PROTIP: Germany is more than one person! (Score:2)
There are people in there who care about privacy. Or the GDPR, which every government agency must obey too, wouldn't exist.
And there are pieces of shit who spy on their own people any are lapdogs of the NSA or Apple.
This headline, right there, is precisely what Dunbar's Number is all about: You put an entire government, and even an entire country, in one box, as if it was one single individual. Removing any chance of empathy or to see them as humans
Sorry. We're not goose-stepping anymore. There are internal
Company vs Government (Score:2)
It's almost as if some people think there should be different rules for companies and elected goevrnments.
Apple less trustworthy (Score:1)
Spying is necessity (Score:2)
The world is a very bad place and ignorance deadly. Any nation lacking effective espionage capability cedes the field to its opponents from criminals to ideological and nation-state enemies.
The choice is trust in the kindness of one's enemies or collecting intel as effectively as one may.