How do they get it on the phone
post
Good luck making that stand up in court. They may as well be handing out "get-out-of-jail-free" cards.
They don't use it as admissible evidence, they use it to find out whether someone is worth pursuing in legitimate ways that are more time and effort intensive.
That type of investigation would still require a warrant or exigent circumstances at the minimum. Otherwise it's just fishing...which is a violation of Canada's privacy laws. They can't just go rooting through someone's phone looking for a reason to pursue further investigation.
The article itself mentions how it is a loophole in the privacy laws
If you turn your phone off when being pulled over would it make any difference or does the spyware still do its thing?
More than likely yes. It disables biometrics and forces the use of a passcode if you have one enabled.
On Apple devices and Android devices go into lockdown mode when they are restarted.
Both of them will when left idle for a select period of time it will reboot. This is called Inactivity reboot. This basically forces the phone into lockdown mode.
These are new features that have been implemented on Apple and Android respectively fairly recently.
Apple phones also have the ability to wipe themselves away when left off for too long. You can do this with some versions of android but for the most part the one I know of is Graphene OS.
Not buying it.
Buying what? Like you don't believe the police can, will, or has done this?
How could they load software on the phone? They could use stingray systems possibly or any man in the middle but what if your network traffic is behind a vpn, what if your device is secured. I doubt they can simply CONTROL your device and how it operates from a distance reliably and en mass.
Zero day backdoors without any interaction from the user are proven possible. Look at Pegasus spyware. The majority of data breaches are due to zero day hacks.
So there are two ways they can get this so called spyware on your phone. Zero click exploit in some app or through the os itself or the carrier uploads it through the network.
The latter is probably not going to happen... But the former... Is kinda illegal and would expose multiple corporations in malfeasance.
Seems like a puff piece. I call bullshit.
Time for grapheneOS.
As an iOS user on the fence about switching, can we definitively say that GrapheneOS would protect against this sort of threat? I have a general sense of the containerization, but I'm curious if anything like this specifically has been addressed? If the spyware gives "god mode" access to your device, who's to say Graphene wouldn't fall victim as well?
I admittedly haven't done my own research, but my best guess is assuming that Google allowed for some sort of backdoor to LE... and that would have been (hopefully) discovered and plugged by the Graphene devs?
(GrapheneOS project member here) We are not aware of any organization or software that can hack into GrapheneOS.
It would be harder for a few reasons. In this case, it would be harder because the baseband is isolated on supported devices so hacking remotely would be harder. GrapheneOS also ports to new Android versions very quickly, which means security patches are applied that other devices/OSes are always far behind on. We also have security preview releases so even more patches are applied for users who enable that. And, finally, there are lots of other hardening things that have been done protect against unknown vulnerabilities. See the website for info about that, but basically the hardened memory allocator + enabling MTE for 8th generation devices and later will catch the most common classes of bugs.
No i can't say it will protect you. But grapheneOS makes it a lot harder. And way more secure than stock android. a working exploit on OS level is still a risk.
My phone is just too slow and shitty to support clandestine surveillance
all 30 comments