?Edward Snowden: How Your Cell Phone Spies on You

Timestamps:
1. Network data collection
2. App data collection
3. Importance of Firewall & Permissions on per app bases
4. Buying device & still not owning it
5. Third party doctrine, loophole to prove your data is no yours?

?"The scandal isn't how they're breaking the law, the scandal is that they don't have to break the law"

? WATCH -YT
? WATCH - Invidio
? Watch Source
#GoodShare #DataMining #Surveillance

? Adopt Android Privacy > Go NoGapps

YouTube

Edward Snowden: How Your Cell Phone Spies on You

Taken from JRE #1368 w/Edward Snowden: https://youtu.be/efs3QRr8LWw

? New York Times was able to track President Trump's movements by combining leaked location data with public information, showing the ease which which cell phone location data can be turned into a spying tool ❗️

➖Times Privacy Project got the data from anonymous whistleblowers concerned about this vulnerability and a lack of regulations ❗️Dataset of >50 billion location pings from the phones of >12 million people in this country. It was a random sample from 2016 and 2017, but it took only minutes, with assistance from publicly available information to deanonymize location data and track the whereabouts of President
➖NYT said result being tracking and identifying people as easy. And there is no regulation to stop the exchange of sych data between different parties and companies for profit❗️
➖“Tech companies are profiting by spying on Americans.. report is another alarming case for why we need to break up big tech, adopt serious privacy regulations and hold top executives of these companies personally responsible.” Senator Elizabeth Warren, a Democrat running for president, told NYT
➖“Location tracking data of individuals can be used to facilitate reconnaissance, recruitment, social engineering, extortion and in worst-case scenarios, things like kidnapping and assassination,” warned a cybersecurity expert

?The sources who provided the trove of location information to Times Opinion did so to press for regulation and increased scrutiny of the location data market. So far, Washington has done virtually nothing to address the threats, and location data companies have every reason to keep refining their tracking, sucking up more data and selling it to the highest bidders.? Read - a #GoodRead with good infographics
#Tracking #Location #Datamining

?Stop using Google/Other location data malware. Go NoGapps

Nytimes

Opinion | How to Track President Trump (Published 2019)

Smartphones leave a trail that anyone — and any foreign government — could follow.

⬛️ EFFECT
1️⃣ WhatsApp filed suit in US against ISRAELI spyware vendor(NSO) for allegedly hacking its users.
Adds a FAQ called video calling cyber attack xD

2️⃣ Lawsuit mentions that in 2015, a Ghanain subsidiary of NSO, agreed to sell Pegasus to Ghana for a fee of $8mil + service contract worth $1.76mil/yr & that "contract could only be fulfilled by a nation state, or a non-state actor with close ties to Israeli govt" > thus confirming govt's or non-state actors across world, used spyware as licensing costs+ conditions are out of reach of regular threats?

3️⃣NSO defended to provide tech to licensed govt intelligence & law enforcement agencies to help them fight terrorism & serious crime & not against human rights activists & journalists

4️⃣ Facebook is deleting acc's of NSO employees Aww so cute, ZUCK- The 'Optimus Prime' of Privacy?

5️⃣ I STILL use that shite, HELP ME❗️
▪️Backup chats> Last msg to important contacts> Delete acc ("Enjoy my data" as reason)> Uninstall>Profit
▪️**Move to Riot.im- A matrix client; Federated; Foss

OR Wire Messenger- Good UI, MultiOS, Email signups, Foss server

OR Foss-Telegram Fork-Good for transition from whatsapp; Great UI; Multi-OS; Feature rich; Caters to both types of users; Big user base among alternatives; Use e2e encrypted private chats & calls when required; Owner has long history of standing for privacy & didn't use cryptography promoted by American experts, particularly since NSA docs leaked by Snowden revealed NSA secretly paid RSA,an influential computer security firm, to use a flawed technique that NSA knew how to crack
▪️Ask important contacts to do so. Leave rest for NSO?

▪️Why not Signal?(imo)
- US based; Mobile no. based; Wonky UI; Feature-famine
- Owner MoxieMarlinspike has big business conflict-of-interest (millions of $'s) with Facebook, Whatsapp, Microsoft & even Google (Sells signal encryption protocol to them & promotes closed source shite like whatsap, facebook messenger, skype, allo, thus helping latter promote their backdoored apps as e2e encrypted> hence keeping users cozy in fake sense of security & privacy)
- Owner ran hash cracking services
- Spirit against Open source-forced takedown's of signal forks & then got "recorded" selling binaries for millions to "WIRE"; later settled outside court #GoodRead?
- Promotes Spyware play services & Playstore-a malware distributer; Had blocked non-store releases for yrs & hates F-Droid ?
- "Signal Foundation" co-founder is ex-whatsapp owner - Acton (read his hypocrisy post whatsapp sale??)
- Foundation advertised as non-profit but was NOT till feb2019- Only proof
-Parent "Open Whisper Systems" started with funding from OpenTechnologyFund of US Govt(organization spun off from CIA) & criticized as aiming to facilitate existing U.S. Govt propaganda & foreign influence
- More on US, Cryptography, Signal & Telegram

?NoGapps

​​#Whatsapp #SocialMedia #Malware #Privacy #Data

‼️WHATSAPP EXPLOITED (AGAIN)
▪️The famous US based, closed source, facebook owned app, with multiple past vulnerabilities, advertised as e2e encrypted app, exploited again.
▪️Never forget, Whatsapp founders SOLD whatsapp(users), a "Free app" for $19+ Billion to Zuckerberg - largest acquisition of a venture-backed company in history
▪️Owner agreed selling users privacy to Facebook; before asking users to #DeleteFacebook

⬛️WHAT

WhatsApp Voice Calls Used to Inject NSO Group Spyware on phones (various OS incl. Android & IOS)
A buffer overflow vulnerability in VOIP SRTCP protocol > CVE-2019-3568
Patched in may 2019
Whatsapp took >5 months after patching to "inform" those exploited?
Some proof that exploits were used as early as 2017, as per citizenlab data?
For iOS "Trust Apple" fanboys -2016 & 2019

⬛️HOW

Citizenlab tracked NSO Group’s Pegasus Spyware to
▪️Operations in 45 Countries
▪️36 Operators
▪️10 Operators with infections in other countries
▪️6 Operators linked to countries with history of using spyware to target human rights in civil society
DETAILS - Tracking Spyware Operations in 45 Countries
PDF manual of PEGASUS spyware #GoodRead
NSO told buyers they can surreptitiously scrape all of an individual’s data from the servers of Apple, Google, Facebook, Amazon and Microsoft,

⬛️WHO

Citizen Lab Volunteered to help Whatsapp identify cases where the suspected targets of this attack were members of civil society
(As of now) More than 1400 human rights defenders, journalists, academicians, lawyers were believed to be hacked using malware sold by NSO Group
WhatsApp 'hack' is serious rights violation, say victims. Activists across countries like UAE, Morocco, Rwanda, India, Bahrain, Mexico & US speak out
Govt officials around the globe targeted too-Reuters

? Go @NoGapps

#DIGEST

◾️Simjacker >Next Generation Spying Over Mobile

29 countries where mobile operators ship vulneable SIM cards
FAQ & Demo
Paper

◾️Why Adding Client-Side Scanning Breaks End-To-End Encryption #GoodRead

◾️Don't Play in Google's Privacy Sandbox❗️

Google announced a plan to “build a more private web.”. Company that tracks user behavior on > 2/3rd of the web said that “Privacy is paramount to us, in everything we do.” ?‍♂️

◾️The Open Letter from the Governments of US, UK, and Australia to Facebook is An All-Out Attack on Encryption (Ok, whatever lame encryption+backdoors they got)

◾️Google Achieves Quantum Supremacy. Is Encryption Safe??

More on Post Quantum Cryptography

◾️How to avoid becoming the next victim of a data breach

Ofc first is "Reduce the amount of information you give out". Always remember "Data is the new oil". ALWAYS❗️
◾️ Remove GApps crap > Go @NoGapps

? #Update - MicroG gets updated :) GMS Core bumped to version v0.2.10.19420
▪️ Fix issues with Hangouts Meets and Google Maps
▪️ Fix ProGuard destroying release builds.
v0.2.9.19420
▪️ Improvements in mapbox implementation
▪️Dummy implementation for TapAndPay API (needed by some banking apps)
▪️Various other fixes
? Read
⏬ APK
? @FDroid

?Want better privacy on Android ?
➖ Try MicroG, a lightweight FLOSS (Free/Libre Open Source Software) alternative to Google's proprietary Play(Spy) Services?
? Read more
? Go @NoGapps

The Great Hack #Trailer
❗️They took your data. Then they took control
❗️The Great Hack uncovers the dark world of data exploitation through the compelling personal journeys of players on different sides of the explosive Cambridge Analytica/Facebook data scandal
❗️Britanny Kaiser- whistleblower Cambridge Analytica- "The reason why #Google, #Facebook are most powerful companies in the world is because last yr Data surpassed oil in value. #Data is the most valuable asset on earth"
? WATCH
? WATCH - Invidio

?Replugging worthwhile posts
⬛️ Glenn Greenwald makes the case for why you need to care about Privacy > Great Watch
⬛️ Power of Big Data & Psychographics - CAMBRIDGE ANALYTICA Founder > Posted b4 it was BUSTED
⬛️ Like OIL leads to GLOBAL WARMING, DATA leads to 'SOCIAL COOLING' > Infographic
#GoodShare #Mining

? Reclaim Privacy > Go @NoGapps

YouTube

The Great Hack | Official Trailer | Netflix

They took your data. Then they took control. The Great Hack uncovers the dark world of data exploitation through the compelling personal journeys of players on different sides of the explosive Cambridge Analytica/Facebook data scandal. In select theaters…

❗️ #FACBEOOK FINED Record breaking $5 Billion by FTC for Cambridge Analytica #PRIVACY Violations - Reports

▪️Multiple Reports citing anonymous sources familiar with the matter, reported Friday afternoon that the settlement was approved by a 3-2 vote that broke along party lines. The justice department is expected make a final approval of the #fine, a record beaking against a tech company▪️Critics say the changes required of Facebook are not substantial enough, and the fine will hardly make a dent in Facebook’s bank account. The company had more than $15bn in revenue in the first three months of 2019.
“This isn’t a fine, it’s a favor to Facebook, a parking ticket which will clear them to conduct more illegal and invasive surveillance,” said Matt Stoller, a fellow at the Open Markets Institute who specializes in monopoly power.? Read
? Wall Street Journal
? Washington Post
? Adopt Android Privacy > Go NoGapps

the Guardian

Facebook to be fined $5bn for Cambridge Analytica privacy violations – reports

The $5bn fine would be the largest ever levied by the Federal Trade Commission against a technology company

#Google admits CONTRACT workers listen to PRIVATE voice recordings of owners of Google Home speaker ❗️
▪️Google in a statement said it pays "language experts" around the world to listen to and transcribe audio recordings. "Temporary workers" , supplied by "contractors" , are sent audio recordings to transcribe so that Google can improve its services
▪️ Belgian whistleblower told VRT News about the issue, and it was able to personally identify the address of two sets of #Voice recordings from the content, and neither set had an "OK Google" command at any point?
▪️ Whistleblower says that those doing the work were given no guidance as to what to do if they heard someone in danger or undertaking something illegal, adding that there were regular arguments between couples, make-up sex noises and, in some cases, concern over the welfare of the voice at the other end. Rather than confront this, Google has suggested its more interested in finding the whistleblower for breaching its security policies than righting the wrong ?
▪️Amazon’s Alexa and Apple’s Siri assistants operate similarly, and for similar purposes
? Read
? More
? How Amazon Workers Are Listening to Alexa recordings?

? Remove closed source voice-assistant FILTH from Android> Go @NoGapps

http://www.theinquirer.net

Google goes after whistleblower who revealed it sends voice recordings for transcription

How do you spell 'uuuuuuungh' anyway?

? #Update - MicroG gets updated :) GMS Core bumped to version v0.2.7.17455
▪️ Prototype of complete maps API rewrite
▪️ Initial Cast API support
▪️ Whitelist support for Doze
▪️ Fix some issues with Google accounts on latest Chromium and Android versions
▪️ Various improvements and UI fixes
? Read
⏬ APK
? MicroG F-Droid Repo
? @FDroid

?Want better privacy on Android ?
➖ Try MicroG, a lightweight FLOSS (Free/Libre Open Source Software) alternative to Google's proprietary Play(Spy) Services?
? Read more
? Go @NoGapps