Yup, its all good advice in general, but we should avoid needlessly panicing about things that won't realistically be used against us.
I'm much more concerned about shoddy vpns and ad tech tracking.
Yup, its all good advice in general, but we should avoid needlessly panicing about things that won't realistically be used against us.
I'm much more concerned about shoddy vpns and ad tech tracking.
A zero click zero day is worth 10s to 100s of millions of dollars. They guard these very carefully, to avoid burning them, like what happened here.
You aren't that important to anyone.
to add, running their compromised hardware and software won't do you any favors and changing a simple setting won't disable their backdoors or fundamentally fix the nightmare we are in.
running stuff graphene and ditching google software is only the beginning of it.
i never felt a difference. the way they promise it, it's supposed to track you less and it does show less "relevant" ads, but i bet they keep collecting the data anyway.
they've been shown not to care about user settings in court before.
It is a catch 22 situation, if you block ads (which is a no-brainer), you can't see the ads repeatedly selling the same item you just bought.
Im personally happy if they simply cannot monetise tracking me. They can track all they want, but if I never see any ads, it's m much harder for them to manipulate me.
Of course turning off personalised ads is good for privacy, but this post seems to imply it could help protect against this spyware as well. That's not true, is it? To me those things sound totally unrelated.
Android 12 or later:
99% of ads we see are malware payload and the few are legitimate business. Always has been
I hear the argument that we are not worth the effort of being hacked but nobody should be living knowing that they are vulnerable to being hacked. While full security may be an illusion, especially with AI around, we ought to still be attempting to have the most secure devices possible. I've seen a lot about these zero day ads but little about how to fight against them. Throwing away ur mobile is not the solution in todays complex world, but rethinking its usage certainly is ... i.e. spending hours each day on social networks i guess is no good idea as it increases your attack surface? What else ca we do about this?
I already had all of these. I found that the free version of AdGuard was still letting through messages saying “please allow ads on this site”, so I had to get the paid version with DNS protection through their VPN.
thanks for using Leebra!
go to feed...
This is a nation state level actor using a public ad network.
If your one of the targets of this, none of those measures will help. At best, the adblock will work for the publically known ad networks, but they'll get you with an ad served from a fresh domain. And if they are using zero-click exploits, they likely have a persistence mechanism as well, and even if they don't, they will probably exfil all your data as soon as they can anyway.
The good news is that most people aren't actually useful targets to nation state actors, so all of us are likely safe. We aren't worth risking a zero-click zero day on (or the persistence exploit). Journalists/politicians/military personnel though should be a lot more concerned, but they already have solutions like airgapped networks and other opsec tools.
save