VPN services and other security tools won’t be able to protect people from this kind of state-surveillance. What’s next for France’s justice reform bill?
France is really at a point of breaking. This is especially sad since France was the de facto leader of libre/foss movement in Europe.
Most other countries already have these sort of laws. In the US you’d just need a warrant from a Judge - which is laughably easy, especially with FISA warrants.
The US really is not the standard any country should set for themselves
As far as I know, police cannot activate your phone’s camera or microphone to spy on you in the US, even with a warrant. Do you know of something that says otherwise?
The ANT catalog[a] (or TAO catalog) is a classified product catalog by the U.S. National Security Agency (NSA) … DROPOUTJEEP … “A software implant for the Apple iPhone that utilizes modular mission applications to provide specific SIGINT functionality. This functionality includes the ability to remotely push/pull files from the device. SMS retrieval, contact list retrieval, voicemail, geolocation, hot mic, camera capture, cell tower location, etc. Command, control and data exfiltration can occur over SMS messaging or a GPRS data connection. All communications with the implant will be covert and encrypted.”
Louis Rossman has an interesting take on this
I can’t even imagine the protests that will erupt due to this.
deleted by creator
Can someone explain why VPN services can’t protect people from that
Also, you’re connecting to a nearby cell tower which then relays your connection to the wider web, with an exit point at your VPN provider.
If the nearby cell tower is compromised, they can try MITM attacks which might not need SSL authentication (e.g. you might have a backdoor on your device that does not require an external certificate to access it (in fact I would be surprised if it would)).
Doing this before would be illegal. Now it is legal.
MITM would break any remotely decent VPN. The article talks about being able to activate cameras and what not but offers no explanation of how. This would almost certainly require software to be installed on the target device. I don’t see how this will accomplish any more than making it easier to get geolocation data.
The baseband firmware on your phone has access to all hardware resources and can be modified over the cellular connection without your cooperation or knowledge.
It can’t be done by a third party without extreme effort. This requires the cell phone manufacturer to participate along with the cellular service company as well.
Sorry for the late reply but I’d just like to warn you that it doesn’t take a lot of effort. It takes some time, some knowledge of programming, electronics and communication protocols and a few hundred $$$ of equipment. DIY cell phone tower
Anyone knows how they going to technically implement this?
How is this supposed to work? Won’t real criminals just buy more secure devices to circumvent this surveillance?
This isn’t going to be regularly used. For the average iPhone user you’d probably need to use Pegasus, which costs something insane like US$60k per target device.
The more likey vector will be things like Ring doorbells - we already know Amazon will handover footage to Police without even requiring a warrant.
This isn’t going to be regularly used.
(눈‸눈)
I’m not saying they won’t want to use it, but Police have limited budgets like everyone else. A quick google shows the average salary of a police office in France is US$57k. Pegasus is $60k per use. If a police department has to choose between spying on 10 phones or hiring 10 more cops, I think they’re going to choose the extra manpower almost every time.
A few things. How do we know it’s going to be Pegasus? How do you know the price, why is it so expensive (and why would anyone assume it to stay so)?
Because if it actually is Pegasus, the main problem with this bill isn’t surveillance (although it is most definitely a problem),
but the tacit endorsement of this unregulated infoweapon.As the poet said: doubleplusungood.
I assume the French also gained access to stuff like DROPOUTJEEP after signing the secret Lustre treaty.
Que Macron aille se faire enculer
