Found 21 bookmarks
Newest
How to: Get to Know iPhone Privacy and Security Settings
How to: Get to Know iPhone Privacy and Security Settings
Open up your iPhone’s Settings app and you’ll find dozens of different options with little guidance on what those options do. Some of these settings have a serious impact on your privacy and security, altering what data gets shared automatically with apps, data brokers, and Apple itself. What sorts of...
·ssd.eff.org·
How to: Get to Know iPhone Privacy and Security Settings
Forensic Methodology Report: How to catch NSO Group’s Pegasus
Forensic Methodology Report: How to catch NSO Group’s Pegasus
NSO Group claims that its Pegasus spyware is only used to “investigate terrorism and crime” and “leaves no traces whatsoever”. This Forensic Methodology Report shows that neither of these statements are true. This report accompanies the release of the Pegasus Project, a collaborative investigation that involves more than 80 journalists from 17 media organizations in 10 countries coordinated by Forbidden Stories with technical support of Amnesty International’s Security Lab. Amnesty International’s Security Lab has performed in-depth forensic analysis of numerous mobile devices from human rights defenders (HRDs) and journalists around the world. This research has uncovered widespread, persistent and ongoing unlawful surveillance and human rights abuses perpetrated using NSO Group’s Pegasus spyware.
In our October 2019 report, we detail how we determined these redirections to be the result of network injection attacks performed either through tactical devices, such as rogue cell towers, or through dedicated equipment placed at the mobile operator.
free247downloads[.]com
, but also when using other apps.
WebKit local storage, IndexedDB folders, and more.
Safari’s Session Resource logs provide additional traces that do not consistently appear in Safari’s browsing history.
Maati Monjib visited https://yahoo.fr, and a network injection forcefully redirected the browser to documentpro[.]org before further redirecting to free247downloads[.]com and proceed with the exploitation.
iOS maintains records of process executions and their respective network usage in two SQLite database files called “DataUsage.sqlite” and “netusage.sqlite”
network usage databases contained records of a suspicious process called “bh”.
leveraged a vulnerability in the iOS JavaScriptCore Binary (jsc) to achieve code execution on the device
persistence on the device after reboot
“bh.c – Loads API functions that relate to the decompression of next stage payloads and their proper placement on the victim’s iPhone by using functions such as BZ2_bzDecompress, chmod, and malloc
herefore, we suspect that “bh” might stand for “BridgeHead”, which is likely the internal name assigned by NSO Group to this component of their toolkit.
The bh process first appeared on Omar Radi’s phone on 11 February 2019. This occurred 10 seconds after an IndexedDB file was created by the Pegasus Installation Server
At around the same time the file com.apple.CrashReporter.plist file was written in /private/var/root/Library/Preferences/, likely to disable reporting of crash logs back to Apple.
roleaboutd and msgacntd processes are a later stage of the Pegasus spyware which was loaded after a successful exploitation and privilege escalation with the BridgeHead payload.
Network injection is an effective and cost-efficient attack vector for domestic use especially in countries with leverage over mobile operators
iOS keeps a record of Apple IDs seen by each installed application in a plist file located at /private/var/mobile/Library/Preferences/com.apple.identityservices.idstatuscache.plist
·amnesty.org·
Forensic Methodology Report: How to catch NSO Group’s Pegasus
GrapheneOS usage guide
GrapheneOS usage guide
Usage instructions for GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.
·grapheneos.org·
GrapheneOS usage guide
Find your AirPods
Find your AirPods
Use Find My to find your AirPods. You can also set alerts to warn you if you’ve left your AirPods behind, or mark them as lost if you can’t find them.
When the Find My network is on, you can see the location of AirPods 3, AirPods 4 with Active Noise Cancellation (ANC), AirPods Pro, or AirPods Max in the Find My app for up to 24 hours after they last connect to your device, even if they’re not nearby.
Note: If your AirPods 3, AirPods 4 (ANC), AirPods Pro, or AirPods Max are used with multiple Apple Accounts (for example, if you lend or share AirPods), only the person who turned on the Find My network can see them in the Find My app.
You can see the current or last known location of your AirPods in the Find My app.
If you have AirPods 4 (ANC), AirPods Pro 2, or AirPods Pro 3, you can also play a sound on the charging case.
If your AirPods aren’t connected to your device and you don’t have the Find My network turned on, the sound plays the next time they connect to a Wi-Fi or cellular network.
·support.apple.com·
Find your AirPods
Step 1? Send your location via satellite in Find My on iPhone, even when Airplane Mode is on. Possible to have airplane mode on and still share via satellite...?
Step 1? Send your location via satellite in Find My on iPhone, even when Airplane Mode is on. Possible to have airplane mode on and still share via satellite...?
In Find My on iPhone, send your location via satellite if you're outside cellular or Wi-Fi coverage.
open the Find My app, tap Me at the bottom of the screen, then make sure Share My Location is turned on. If your iPhone isn’t currently sharing your location, tap Use This iPhone as My Location.
To share your location with a friend via satellite, you must already be sharing your location with that friend in Find My.
Go to the Find My app on your iPhone.
Tap Me at the bottom of the screen.
Tap Send My Location (below My Location via Satellite), then follow the onscreen instructions.
·support.apple.com·
Step 1? Send your location via satellite in Find My on iPhone, even when Airplane Mode is on. Possible to have airplane mode on and still share via satellite...?
Step 1? Make an emergency call or text on iPhone or Apple Watch
Step 1? Make an emergency call or text on iPhone or Apple Watch
Quickly call for help on iPhone by using Emergency SOS or by tapping Emergency on the Passcode screen.
Go to Settings  > Emergency SOS. Do any of the following: Turn Call with Hold on or off: Press and hold the side and volume buttons to start a countdown to call emergency services. Turn Call with 5 presses on or off: Rapidly press the side button five times to start a countdown to call emergency services. Manage your emergency contacts: In Health, tap Set Up Emergency Contacts or Edit Emergency Contacts. See Set up and view your Medical ID in the iPhone User Guide.
Note: If you have iPhone 14 or later (any model), you may be able to contact emergency services through satellite if cell service isn’t available. See Use Emergency SOS via satellite on your iPhone.
Or you can enable iPhone to start Emergency SOS when you quickly press the side button five times. Go to Settings  > Emergency SOS, then turn on Call with 5 Presses.
·support.apple.com·
Step 1? Make an emergency call or text on iPhone or Apple Watch
Step 1? "Find My and location sharing" is distinct from Emergency SOS mode. Will confirm.
Step 1? "Find My and location sharing" is distinct from Emergency SOS mode. Will confirm.

If you need to get to a safe location and you want to turn off your device, but you’re concerned that someone else may use this feature to find your location, you can temporarily turn off the Find My Network when you power off the device by tapping iPhone Findable After Power Off (under Slide to Power Off) and following the onscreen instructions. Use the task below if you want to disable this feature.

CAUTION: When you turn off Find My [device] and Find My network, you aren’t able to locate, lock, or erase your device if it’s lost or stolen.

On your iPhone or iPad: Go to Settings > [your name] > Find My > Find My iPhone > Find My network.

Disabling this feature means you can’t use it if your device is lost or stolen and powered down.

A's note: I'm researching whether turning off Find My iPhone impacts location sharing with 911 and Emergency Contacts. I don't believe it does but I will get back with answer.

If you need to get to a safe location and you want to turn off your device, but you’re concerned that someone else may use this feature to find your location, you can temporarily turn off the Find My Network when you power off the device by tapping iPhone Findable After Power Off (under Slide to Power Off) and following the onscreen instructions. Use the task below if you want to disable this feature.
CAUTION: When you turn off Find My [device] and Find My network, you aren’t able to locate, lock, or erase your device if it’s lost or stolen.
I am double checking now to ensure turning this off doesn't impact Emergency SOS location sharing.
·support.apple.com·
Step 1? "Find My and location sharing" is distinct from Emergency SOS mode. Will confirm.
Step 3. Temporarily toggle on Location Services -- System Services -- Find My iPhone to do a tacker sweep. Detect unwanted trackers
Step 3. Temporarily toggle on Location Services -- System Services -- Find My iPhone to do a tacker sweep. Detect unwanted trackers
Keep your Location Use AirTag and the Find My network to discourage unwanted tracking on iPhone, iPad, and Mac.
Go to Settings > Privacy & Security > Location Services, and turn Location Services on. Go to Settings > Privacy & Security > Location Services > System Services, and turn Find My iPhone on. Go to Settings > Bluetooth, and turn on Bluetooth. Go to Settings > Notifications > scroll down to Tracking Notifications, then turn on Allow Notifications.
I would recommend keeping these services toggled off until you are ready to do a commercial bug sweep.
·support.apple.com·
Step 3. Temporarily toggle on Location Services -- System Services -- Find My iPhone to do a tacker sweep. Detect unwanted trackers
Infosec 101 for Activists
Infosec 101 for Activists
Website: https://infosecforactivists.org/ Introduction America has a strong tradition of activism, dating back to slave revolts and indigenous uprisings even before the founding of the United States. Today, activism in the US remains critical. Street protests are an essential tool that activists use to raise awareness and push for institutional change. That being said, challenging existing power structures carries an element of risk - exposure can lead to harassment, arrest, or doxxing.
·infosecforactivists.org·
Infosec 101 for Activists