"It's Worse Than We Thought"

a few years ago i set the goal for israel of becoming one of the top five cyber security powers in the world and this really surveillance software tool capable of accessing microphones cameras and other data nso group in today's world based on the evidence we have they are the worst of the worst this company uh the ceo's name i think is chalet julio um is uh run in israel it was previously owned actually by an american venture capital firm i believe they've been uh re-bought out but doesn't really matter their entire business is preying on flaws in the critical infrastructure of all the software running on the most popular devices in the world the number one target right is the iphone and this is because the iphone uh as secure as it is relative to a lot of other phones is a monoculture right like if you if you have an iphone you get these little software update notifications all the time that are like hey please update to the the most recent version of ios and that's a fabulous thing that's a wonderful thing for security because the number one way that people's devices get screwed if it's not just through user error right like you entering your password somewhere you shouldn't it's like a fake site um it looks like gmail but it's not actually gmail you just gave the guy your password now he uses your password to log in but to actually break into a device is that it's not patched right patch means getting these uh security updates these little code updates uh that fix holes that researchers found in the security device well uh apple's really good about rolling these out all the time for everybody in the world the problem is basically all these different iphones right you got an iphone 6 you got an iphone 8 you got an iphone x you got an iphone you know three whatever uh these are all running a pretty narrow band of uh software versions and so these guys go if they want to target for example android phones like google phones like a samsung galaxy or something like that there's like a billion different phones made by a billion different people uh half of them are completely out of date but uh what it means is it's not one version of software they're running it's like 10 000 and this is actually bad for security on the individual level but it's good for security in a very unusual way which is the guys who are developing the exploits the guys like this nso group who are trying to find ways to break into phones they now have to have like 50 different handsets running 50 different versions of software they're all changing they've got different hardware they've got different chip sets for the they've got different like all kinds of just technical variables that can screw up the way they attack uh your phone and then when they find one it only works on like this samsung galaxy line it doesn't work on like the google pixel line or it doesn't work on like a nokia line or something like that whereas they realize if they find a way to attack an iphone which is actually you know this is difficult this is really difficult stuff now it works against basically every iphone and who has iphones all the rich people right all the important people all the lawmakers all the the guys who are in there so they've made a business on basically attacking the iphone and selling it to every two-bit thug who runs a police department in the world you know they sell this stuff to saudi arabia they sell this to mexico and there's a group of researchers in canada uh working at a university called the citizen lab um and uh these guys are really like the best in the world at tracking what asl group is doing if you want to learn about this stuff the real stuff look up citizen lab and the nso group and what they have found uh is all the people who are being targeted by the nso group the classes of people the countries that are using this and you know it's not like the local police department in germany trying to bust up you know a terrorism ring or something like that it's the mexican government spying on the head of the mexican opposition we're trying to look at human rights defenders who are investigating like student disappearances or it's people like the friends and associates of jamal khashoggi who was murdered by the saudi government um or it's people like uh dissidents in bahrain and these like petro states these bad actors nationally will pay literally tens of millions of dollars each year just to have the ability to break into an iphone for a certain number of times because that's how these guys uh do it they sell their business plan they go we'll let you break in any iphone uh just by basically sending a text message to this phone all you need to find is the phone number or a person who's running an iphone and we will exploit something like the easiest uh forms of exploit or rather the easier types of exploits are where they send you a text message right and it'll be like an imessage or something like that and it's got a link in it that'll be like oh gosh terrible news you know your buddy's father just died um and we're making funeral arrangements are you gonna be there it's the day after tomorrow and when you click the link for the funeral arrangements it opens your web browser and the web browser on your phone is always the biggest most complicated process in it right uh there's a zillion lines of code in this as opposed to an instant messenger where there's fewer lines of code in it and they'll find one thing in that where there's a flaw that lets them feed instructions not just to the browser but basically escape the little sandbox that the browser's supposed to plan that's supposed to be safe where it can't do anything too harmful and it'll run out of this sandbox and it'll ransack your your phone's like hardwired operating system uh the the system image it'll like give them uh privileges to do whatever they want on your phone as if they are you and then as if they have a higher level of privilege than you they have system level privileges to change the phone's operation permanently right and this is the problem is on the phone you can replace the phone right and they'll lose access to that but if they've already used that to gain the passwords that you use to access you know your icloud or whatever when they have control of the phone they've already got your photo roll right they've already got your contact list they already have everything that you've ever put in that phone they already have all your notes they already have all your files they already have everything that's in your message history right they can pull that out immediately and now because they have you know all your contacts and things like that they see that phone stop being active they know you've changed your phone number all they have to do is find the new phone number and then they can try to go after you again the benefit is uh with that old style of attack if you get that message and you don't click that link you're somebody in a vulnerable class right you've had these kind of attacks answered before it looks suspicious you don't know who this person is the number isn't right something like that and you save that link you don't click the link you don't do anything with that link but you send it to a group like citizen lab uh they can basically use that link to basically use uh like a dummy phone like a sort of a trojan horse to go to the site that would attack your phone and catch it and this is what the sort of uh process that all of their research is based on there are other different types of attacks that actually don't have these defenses against them that are far more scary um but the bottom line is can i stop you for a second what is citizen lab uh citizen lab you just yeah the citizen lab is the name of this research group at the university in canada uh who basically studies state sponsored and corporate malware attacks against civil society it's ron run by a guy named ron dieber i believe you guys will have to fact check me on that one i think he just published a book actually was publishing a book about all of this but it's really they are the the world leaders uh in my opinion in uh basically investigating these kind of attacks and exposing them and it's true public service um let's go back to that one thing i asked you about warrants and you talked about the fact that like people could plant evidence on things and then get motivation uh or or um rather they could show probable cause right to the court to then investigate you um and then they can get everything and you said you know you thought that uh a warrant man they can go and search your house and this is the kind of thing that we you know modern people are used to thinking of in the context of a warrant cops go to a specific place looking for specific things uh that are elements of a crime now you know you you've heard all these things where like cops find a way to like stop somebody and they like are like oh i smelled pot or whatever and they try to you know toss their car or whatever or plain sight doctrines where they open the door and the guy sits down and talks and they go you know i see a bong or something you know that's paraphernalia you're going to jail but uh until i think it was 1967 [Music] warrants in the united states could only be used to gather two things they were called the fruits and instrumentalities of a crime which meant even if the cops knew you did it even if cops knew you you know rode the subway or worked for this company or whatever they couldn't get all the company's records uh they couldn't if they existed uh get all the emails that you ever wrote they couldn't get your friend to turn over like an exchange of letters that you had with this person the fruits of the crime were the things that they gained from it right if they robbed the bank the cops could get the sack of money the instrumentalities were the tools that were used right like if you uh used dynamite or a crowbar or a getaway car they could seize all of those things uh but the idea that the cops can get everything uh the idea that the fbi can get all these records you know all of these things your whole history is very much a new thing and nobody talks about that today we we just presume it's normal we presume it's okay but between 1967 and today think about how many more records there are about your life and how things like how you live private things about you that have nothing to do with criminality and everything to do with the intimacy of of who you are and the fact that all of that now today is exposed and not just to let's say you love the us government let's say you you know you you are like throwing cookouts for your local police department but every other government in the world too and we really need to ask ourselves how much information do the authorities of the day need to do their job or how much do we want them to have how much is proper and appropriately and necessary and how much is too much and if we decide the cops shouldn't have this if we decide the spies shouldn't have this well why in the hell should facebook or google or somebody trying to sell you nikes why should they have this

Channel: Inner Motivation

Views: 2,986,813

Rating: 4.8485746 out of 5

Keywords: inspiration, inspirational speech, inspirational video, motivational, motivation, motivational speech, motivational video, positivity and motivation, positive vibes, inspirational speech, inspire, positivity, empowering speech, goal cast, goalcast, tedtalks, tedx, ted x, speech motivation, speech motivation about life

Id: 0k9fE8PpIzs

Length: 11min 25sec (685 seconds)

Published: Thu Mar 25 2021

Reddit Comments

[u/stonebit]

Well that's pretty much what i thought. So what's worse? Because it's probably that.

[u/waldito]

InnerMotivation, the author of the video, has basically ripped off the Youtube video 'Joe Rogan Experience #1368: Edward Snowden' with an all-you-can-get stock video, added some affiliate links in the video description and make easy money from his digital-nomad-hideaway somewhere in Asia.

It's the second it's published here. The first one seemed like some antimask stuff using Edwards Snowden almost out of context.

At least credit the original interview.