London Daily

Focus on the big picture.
Saturday, Feb 04, 2023

We can make our phones harder to hack but complete security is a pipe dream

We can make our phones harder to hack but complete security is a pipe dream

Even the latest iPhone scare won’t persuade us to choose safety over convenience
Apple caused a stir a few weeks ago when it announced that the forthcoming update of its mobile and laptop operating systems would contain an optional high-security mode that would provide users with an unprecedented level of protection against powerful “spyware” software that surreptitiously obtains control of their devices.

It’s called Lockdown Mode and, according to Apple, “offers an extreme, optional level of security for the very few users who, because of who they are or what they do, may be personally targeted by some of the most sophisticated digital threats, such as those from NSO Group and other private companies developing state-sponsored mercenary spyware”.

Lockdown is effectively an alternative operating system mode. To turn it on, go to settings, choose it and restart your device. When you do, you find yourself with a rather different iPhone. Browsing the web is clunkier, for example, because Lockdown blocks many of the speed and efficiency tricks that Safari uses to render web pages. Some complex but widely used web technologies, like so-called just-in-time JavaScript compilation, which allow websites to run programs inside your browser, are disabled unless you specifically exclude a website from restriction. Still, more people might be persuaded to plump for greater security after vulnerabilities were revealed on Apple devices.

Lockdown also limits all kinds of incoming invitations and requests (for example, from FaceTime) unless you have specifically asked for them. In messages, the phone won’t show link previews and will block all attachments with the exception of a few standard image formats. Nor will it allow access to anything physically plugged into it. And so on.

The result of engaging Lockdown is that you have an iPhone that is more secure but less convenient to use. And, in a way, that is the most significant thing about Apple’s decision. As the security guru Bruce Schneier puts it: “It’s common to trade security off for usability and the results of that are all over Apple’s operating systems – and everywhere else on the internet. What they’re doing with Lockdown Mode is the reverse: they’re trading usability for security. The result is a user experience with fewer features, but a much smaller attack surface. And they aren’t just removing random features; they’re removing features that are common attack vectors.”

Ever since people started to worry about computer safety, the issue has been framed as striking a balance between security and convenience. Up to now, convenience has been winning hands down. Take passwords. Everyone knows that long, complex passwords are more secure than simple ones, but they’re also hard to remember. So, being human, we don’t use them: in 2021, the five most commonly used passwords were: 123456, 123456789, 12345, qwerty and password.

In the era of mainframe computers and standalone PCs, this kind of laxity didn’t matter too much. But as the world became networked, the consequences of carelessness have become more worrying. Why? Because there is no such thing as a completely secure networked device and we have been adding such devices to the so-called Internet of Things (IoT) on a maniacal scale. There are something like 13bn at the moment; by 2030, the tech industry thinks there might be 30bn.

The conventional adjective for these gizmos is “smart”. They can be “hi-tech” items such as smart speakers, fitness trackers and security cameras, but also standard household things such as fridges, lightbulbs and plugs, doorbells, thermostats and so on. From a marketing point of view, their USPs are flexibility, utility and responsiveness – in other words, convenience.

But smart is a euphemism that tactfully conceals the fact that they are tiny computers that are connected to the internet and can be remotely controlled from a smartphone or a computer. Some are made by reputable companies, but many are products of small outfits in China and elsewhere. They come with default usernames and passwords (such as “admin” and “password”) that buyers can change (but usually don’t). Because they’re networked, they are remotely accessible by their owners and, more importantly, by others. And there are billions of them out there in our homes, offices and factories.

Security researchers use the term “attack surface” to describe the number of possible points where an unauthorised user can access a system, extract data and/or inflict damage. The smaller the surface, the easier it is to protect. Unfortunately, the corollary also holds. In our Gadarene rush into the Internet of Things we are creating an attack surface of near-infinite dimensions.

The strange thing is that we already know what the consequences of this are like and yet seem unperturbed by them. In 2016, the security community was transfixed by a number of huge distributed denial-of-service attacks that caused outages, internet congestion and in one case overwhelmed the website of a prominent security guru.

Such attacks used to be conducted by botnets of thousands of infected PCs but the 2016 ones were carried out by a botnet that included perhaps half-a-million infected “smart” gizmos. The Mirai malware that assembled the botnet scoured the web for IoT devices protected by little more than factory-default usernames and passwords and then enlisted them in attacks that hurled junk traffic at an online target until it could no longer function.

Mirai is still around, so you might not be the only entity benefiting from those fancy new networked lightbulbs. The cost of convenience will be higher than we think. So upgrade those passwords.
#NSO 
Newsletter

Related Articles

London Daily
Close
0:00
0:00
Charlie Munger, calls for a ban on cryptocurrencies in the US, following China's lead
You're Beautiful - James Blunt (Boyce Avenue acoustic cover)
Shell reports highest profits in 115 years
You Are So Beautiful
EU found a way to use frozen Russian funds
Postmodern Jukebox European Tour Version
First generation unopened iPhone set to fetch more than $50,000 at auction.
An old French tune (by Georges Brassens) Pomplamoose ft. John Schroeder
WARNING GRAPHIC CONTENT - US Memphis Police murdering innocent Tyre Nichols
Sattahip Motor Show 20
Almost 30% of professionals say they've tried ChatGPT at work
SONATE AU CLAIR DE LUNE - Moonlight sonata
Interpol seeks woman who ran elaborate exam cheating scam in Singapore
A kiss to build a dream on
What is ChatGPT?
Wiz Khalifa - See You Again ft. Charlie Puth, Furious
Bill Gates is ‘very optimistic’ about the future: ‘Better to be born 20 years from now...than any time in the past’
Wonderful Tonight - Eric Clapton (Boyce Avenue acoustic cover)
China is opening up for foreign investors.
Mean Blues
Tesla reported record profits and record revenues for 2022
La Chansonnette
Germany confirms it will provide Ukraine with Leopard 2 tanks
Pattaya Addicts
Prince Andrew and Virginia Giuffre Photo Is Fake: Ghislaine Maxwell
Franz Liszt - Liebestraum - Love Dream
Opinion | Israel’s Supreme Court Claims a Veto on Democracy
Dream a little dream of me
Moonwalker Buzz Aldrin Gets Married On His 93rd Birthday
Tu Vuo' Fa' L'Americano - Hetty & the Jazzato Band
Who’s Threatening Israeli Democracy?
Unchained Melody sung like you've NEVER heard!
Federal Reserve Probes Goldman’s Consumer Business
Dave Brubeck - Take Five
China's first population drop in six decades
Édith Piaf - Non, Je Ne Regrette Rien (Sofie)
Microsoft is finalising plans to become the latest technology giant to reduce its workforce during a global economic slowdown
Rondo Alla Turca
Israelis rally in three cities against Netanyahu legal reforms
Kiss of fire
China's foreign ministry branch in Hong Kong urges British gov't to stop the biased and double standards Hong Kong report
Ed Sheeran - Perfect (Amadeus violin cover instrumental)
Tesla slashes prices globally by as much as 20 percent
Tom Jones - I´ll Never Fall In Love Again 1967, 1989, 2001
Japan prosecutors indict man for ex-PM Shinzo Abe murder
Israel Cachao López - Guajira Clásica
1.4 Million Copies Of Prince Harry's Memoir 'Spare' Sold On 1st Day In UK
Edward Maya - Stereo Love (feat. Vika Jigulina) (Extended Mix)
After Failing To Pay Office Rent, Twitter May Sell User Names
Strauss - Radetzky March - Karajan
Lisa Marie Presley, singer and daughter of Elvis, dies aged 54
La vie en rose
FIFA president questioned by prosecutors
Despacito (Piano Cover) - Peter Bence
Britain's Sunak breaks silence and admits using private healthcare
The Temptations - My Girl (Smokey Robinson Tribute) 2006 Kennedy Cent
Dirty bomb fears as URANIUM is found in cargo at Heathrow
Orlando Cachaito Lopez Redencion
Hype and backlash as Harry's memoir goes on sale. Unnamed royal source says prince 'kidnapped by cult of psychotherapy and Meghan'
Edith Piaf - NON, JE NE REGRETTE RIEN
Saudi Arabia set to overtake India as fastest-growing major economy this year 
RADETZKY MARCH-2008-Wien, New Year Concert
Google and Facebook’s dominance in digital ads challenged by rapid ascent of Amazon and TikTok
Only you (And you alone)
FTX fraud investigators are digging deeper into Sam Bankman-Fried's inner circle – and reportedly have ex-engineer Nishad Singh in their sights
Beautiful in White x Canon in D (Piano Cover by Riyandi Kusuma)
TikTok CEO Plans to Meet European Union Regulators
Strangers In The Night
UK chaos: Hong Kong emigrants duped by false prospectus
Charles Aznavour - La Boheme
France has banned the online sale of paracetamol until February, citing ongoing supply issues
Summer time
Japan reportedly to give families 1 million yen per child to move out of Tokyo
Sting and Stevie Wonder - Fragile (from Sting's 60th birthday concert)
Saudi Arabia’s female ambassadors: Who are the five women representing the Kingdom?
Aux Champs Elysees
Will Canada ever become a real democracy?
Stand By Me - Ben E. King (Boyce Avenue acoustic cover)
Hong Kong property brokerages slash payrolls in choppy market
La Mer (Beyond the Sea) – Avalon Jazz Band
U.S. Moves to Seize Robinhood Shares, Silvergate Accounts Tied to FTX
She
Effect of EU sanctions on Moscow is ‘less than zero’ – Belgian MEP
Nathalie Song by Enzo Petrachi Stjepan Hauser Cello
Coinbase to Pay $100 Million in Settlement With New York Regulator
Shape of My Heart - Sting (Boyce Avenue acoustic cover)
FTX assets worth $3.5bn held by Bahamas securities regulator
Radiohead - Creep
A Republican congressman-elect is under investigation in New York after he admitted he lied about his education and work experience.
Quizás,Quizás,Quizás - Andrea Bocelli - Jennifer Lopez
Brazilian football legend Pele, arguably the greatest player ever, has died at the age of 82.
Perhaps, Perhaps, Perhaps - Multi-Couples
Hong Kong to scrap almost all its Covid rules
Pentatonix Havana
EU calls screening of travellers from China unjustified
Paula Cole - Autumn Leaves
US imposes Covid testing for visitors from China
Oscar Benton Bensonhurst Blues
Clashes erupt in central Paris after shooting at a Kurdish cultural center
OH NANANA vs ABUSADAMENTE
Nina Simone - ”I Put A Spell On You”. Vezi aici cum cântă Jeremy Ragsd
NIGHTWISH - The Phantom Of The Opera
Motorshow 2016 Tanjay Negros Oriental
Monica Bellucci - Ti Amo
Michael Jackson - Billie Jean Milena The Voice France 2018
Michael Buble (Help Me Make It Through The Night) feat Loren Allred
Memories Canon In D - Maroon 5 (Boyce Avenue piano acoustic cover)
Matteo Simoni - Marina
Maroon 5 - One More Night
Maroon 5 - Memories
Mark Knopfler - Brothers In Arms (Berlin 2007 Live)
Mark Knopfler & Emmylou Harris - Romeo And Juliet (Real Live Roadrunni
Marina, Marina - The LUCKY DUCKIES intimist live concert at Guimarães
Major Lazer & DJ Snake – Lean On Mauranne The Voice France 2016
Love Theme from Romeo and Juliet - Joslin - Henri Mancini, Nino Rota
LoLa & Hauser - Love Story
Linkin Park Jay-Z - Numb Encore (Live 8 2005)
Hallelujah Mennel Ibtissem, The Voice France Leonard Cohen
Leonard Cohen - Dance Me to the End of Love
Leonard Cohen & Natasha Rostova - Dance me to the end of love
La casa de papel - Bella Ciao
La Camisa Negra
L'italiano (Toto Cutugno) - The Gypsy Queens
Juanes - La Camisa Negra
Jonathan and Charlotte - Britain's Got Talent 2012 Live Semi Final - U
John Powell - Assassin's Tango
Joe Cocker - You Can Leave Your Hat On (LIVE in Dortmund)
Joe Cocker - Unchain My Heart 2002 Live
Joe Cocker - A Whiter Shade Of Pale
Jay Z & Alicia Keys - Empire State of Mind LIVE
Jason Mraz - Im Yours (live)
Jarrod Radnich - Bohemian Rhapsody - Virtuosic Piano Solo
James Blunt - You're Beautiful
James Blunt - You're Beautiful & Bonfire Heart (Live at The Nobel Peac)
If You Go Away - Helen Merrill & Stan Getz (Tribute to Virna Lisi)
I'LL BE MISSING YOU
I Say a Little Prayer
Hotel California ( Eagles ) 1994 Live
Historia de un amor - Luz Casal. Vezi interpretarea Biancăi Sumanariu
Here Comes The Sun - The Beatles (Boyce Avenue acoustic cover) on Spot
Heart - Stairway to Heaven Led Zeppelin - Kennedy Center Honors
HAVANA by Camila Cabello Zumba Pre Cooldown TML Crew Kramer Pastra
HAUSER and Señorita - I Will Always Love You
HAUSER - Waka Waka
HAUSER - Sway
HAUSER - Lambada
HAUSER - Historia de un Amor
HAUSER - Despacito
Great Pretender
Georgia May Foote & Giovanni Pernice Samba to 'Volare' - Strictly Come
Gary Moore - Still Got The Blues
GIPSY KINGS VOLARE Penelope Cruz
Fugees - Killing Me Softly With His Song
French Latino - Historia de un Amor
For A Few Dollars More The Danish National Symphony Orchestra (Live)
Flashdance • What a Feeling • Irene Cara
Filip Rudan - “Someone You Loved” Audicija 4 The Voice Hrvatska Sez
Eric Clapton - Wonderful Tonight
Enya - Only Time
Enrique Iglesias - Bailando (English Version) ft. Sean Paul
Enrique Iglesias - Bailamos
Elena Yerevan Historia de un amor
Ed Sheeran - Shape of You (Official Music Video)
Ed Sheeran - Perfect Symphony [with Andrea Bocelli]
Ed Sheeran - Perfect (Official Music Video)
Easy On Me - Adele (Boyce Avenue 90’s style piano acoustic cover) on S
ERA - Ameno
ELENA YEREVAN- Cancion Del Mariachi-IN STUDIO-2017 DPR
Dust In The Wind - Kansas (Boyce Avenue acoustic cover)
Don't Let Me Be Misunderstood
Despacito x Shape Of You - Pentatonix
Deep Purple - Child In Time - Live (1970)
David Foster When A Man Loves A WomanIt's A Mans World (SealMichael Bo
Dance me to the end of Love ( Pi-Air Design )
Coolio - Gangsta's Paradise (feat. L.V.) [Official Music Video]
Conquest Of Paradise (Vangelis), played on Böhm Emporio organ
Cielito Lindo
Chico & The Gypsies - Bamboleo
Canción Del Mariachi - Antonio Banderas, Los Lobos • Desperado
Camila Cabello - Havana (Audio) ft. Young Thug
Camila Cabello - Havana ( cover by J.Fla )
California Dreamin' - The Mamas & The Papas José Feliciano (Boyce Ave
Buster Benton - Money Is The Name of The Game
Hallelujah Pentatonix
Bobby McFerrin - Don't Worry Be Happy (Official Music Video)
Bob Dylan - Knockin' On Heaven's Door Emilia The Voice Kids France
Besame Mucho - Cesaria Evora
Ben E. King - Stand by Me Sax Cover Alexandra Ilieva Thomann
Bella Ciao
Bella Ciao - INSTRUMENTAL
Beautiful in White x Canon in D (Piano Cover by Riyandi Kusuma)
Bad Romance - Vintage 1920's Gatsby Style Lady Gaga Cover ft. Ariana Savalas & Sarah Reich(1)
BELLA CIAO 2020 - KARAOKE ITALIANO
BAMBOLEO - Gipsy Kings • Antonio Banderas, Katya Virshilas
BAILANDO (original)
Awesome Ukrainian yodeler - SOFIA SHKIDCHENKO (with English subtitles)
Avicii - The Nights
Atom - The Great Gig in the Sky
Aretha Franklin - (You Make Me Feel Like) A Natural Woman (Official Ly
Antonio Banderas - Cancion del Mariachi (Desperado)
André Rieu - Zorba's Dance (Sirtaki)
André Rieu - Can't Help Falling In Love
André Rieu & Mirusia - Ave Maria
Andrew Reyes Elton John - Don't Let The Sun Go Down The Voice 2020 (
Andreas Kümmert Whiter Shade Of Pale The Voice of Germany 2013 Showd
And I Love You So
All About That Bass - Postmodern Jukebox European Tour Version
Alan Walker - Faded (Piano Cover)
Ain't No Sunshine -- Bill Withers (cover by Canen 12 y.o.)
African music
Adriana Vidović - “Creep” Audicija 4 The Voice Hrvatska Sezona 3
Adriana Vidović - “Believer” Nokaut 3 The Voice Hrvatska Sezona 3
A Fistful of Dollars - The Danish National Symphony Orchestra and Tuva
4 Beautiful Soundtracks Relaxing Piano [10min]
2CELLOS - Whole Lotta Love vs. Beethoven 5th Symphony [OFFICIAL VIDEO]
2CELLOS - Smooth Criminal (Live at Suntory Hall, Tokyo)
2CELLOS - Smells Like Teen Spirit [Live at Sydney Opera House]
2CELLOS - Despacito [OFFICIAL VIDEO]
13 Year Old Girl Playing Il Silenzio (The Silence) - André Rieu
094.All About That Bass
00 - SADNESS PART 1
(Ghost) Riders In the Sky (American Outlaws Live at Nassau Coliseum, 1
(Everything I Do) I Do It For You - Bryan Adams (Boyce Avenue ft. Conn
What a wonderful world
Moon river
×