Message-ID:

"If truth is beauty, how come no one has their hair done in the library?" -- Lily Tomlin

computers / comp.os.linux.misc / Pegasus and Linux in general...pH

Pegasus and Linux in general...pH

<tpt2gm$1opla$1@dont-email.me>

https://www.rocksolidbbs.com/computers/article-flat.php?id=11134&group=comp.os.linux.misc#11134

copy link Newsgroups: comp.os.linux.misc

Path: i2pn2.org!i2pn.org!eternal-september.org!reader01.eternal-september.org!.POSTED!not-for-mail
From: wNOSPAMp@gmail.org (pH)
Newsgroups: comp.os.linux.misc
Subject: Pegasus and Linux in general...pH
Date: Sat, 14 Jan 2023 02:03:02 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 13
Message-ID: <tpt2gm$1opla$1@dont-email.me>
Injection-Date: Sat, 14 Jan 2023 02:03:02 -0000 (UTC)
Injection-Info: reader01.eternal-september.org; posting-host="9249bc3899c07fc28d94fac030eebbbb";
logging-data="1861290"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/WX54bPokV+q1b01elG4DXlCtGHSw2W/U="
User-Agent: slrn/1.0.3 (Linux)
Cancel-Lock: sha1:K4lNb+mRdESsAbPk0k7DUhnCthA=

by: pH - Sat, 14 Jan 2023 02:03 UTC

Hi Folks.
An Israeli program called "Pegasus" has been in the news of late as an
'infection' which can affect Android based cellular phones.

It's my understanding that Android is essentially Linux for cellular phones.
(Let me know when there's a CP/M based cellular phone and maybe I'll
consider it....)

My question:
Do we need to worry about this Pegasus thingie for Linux operating systems
in general?

pH in Aptos

Re: Pegasus and Linux in general...pH

<op.1yqsbheka3w0dxdave@hodgins.homeip.net>

copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=11136&group=comp.os.linux.misc#11136

copy link Newsgroups: comp.os.linux.misc

Path: i2pn2.org!i2pn.org!eternal-september.org!reader01.eternal-september.org!.POSTED!not-for-mail
From: dwhodgins@nomail.afraid.org (David W. Hodgins)
Newsgroups: comp.os.linux.misc
Subject: Re: Pegasus and Linux in general...pH
Date: Fri, 13 Jan 2023 22:36:43 -0500
Organization: A noiseless patient Spider
Lines: 18
Message-ID: <op.1yqsbheka3w0dxdave@hodgins.homeip.net>
References: <tpt2gm$1opla$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes
Content-Transfer-Encoding: 8bit
Injection-Info: reader01.eternal-september.org; posting-host="29303ff5d902c273e29455923d11abbb";
logging-data="1971103"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18wY7CasZt9+fnpiwxOp09OWxnuLFYRpUo="
User-Agent: Opera Mail/12.16 (Linux)
Cancel-Lock: sha1:clXC5+hVsTkQ6OKOW0QzAQxPZsc=

by: David W. Hodgins - Sat, 14 Jan 2023 03:36 UTC

On Fri, 13 Jan 2023 21:03:02 -0500, pH <wNOSPAMp@gmail.org> wrote:

> Hi Folks.
> An Israeli program called "Pegasus" has been in the news of late as an
> 'infection' which can affect Android based cellular phones.
>
> It's my understanding that Android is essentially Linux for cellular phones.
> (Let me know when there's a CP/M based cellular phone and maybe I'll
> consider it....)
>
> My question:
> Do we need to worry about this Pegasus thingie for Linux operating systems
> in general?

No. Android is a stripped down derivative of linux with everything running as
root with most, if not all security removed, in order to make it easy to use.

Regards, Dave Hodgins

Re: Pegasus and Linux in general...pH

<tptjov$12i1b$1@solani.org>

copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=11141&group=comp.os.linux.misc#11141

copy link Newsgroups: comp.os.linux.misc

Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!reader5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: hugybear@gmx.ch (Joerg Lorenz)
Newsgroups: comp.os.linux.misc
Subject: Re: Pegasus and Linux in general...pH
Date: Sat, 14 Jan 2023 07:57:35 +0100
Message-ID: <tptjov$12i1b$1@solani.org>
References: <tpt2gm$1opla$1@dont-email.me>
<op.1yqsbheka3w0dxdave@hodgins.homeip.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Injection-Date: Sat, 14 Jan 2023 06:57:36 -0000 (UTC)
Injection-Info: solani.org;
logging-data="1132587"; mail-complaints-to="abuse@news.solani.org"
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.6.1
Cancel-Lock: sha1:154gtfSv5s4Y5UTmmKqd1U5fQIw=
Content-Language: de-CH
In-Reply-To: <op.1yqsbheka3w0dxdave@hodgins.homeip.net>
X-User-ID: eJwFwQkBwDAIA0BL4wuNnALDv4TehUHQ6Qh4bOyqK9sOSCfsijqudp2kdQ2T0IF0z59R3z4EaRC7

by: Joerg Lorenz - Sat, 14 Jan 2023 06:57 UTC

Am 14.01.23 um 04:36 schrieb David W. Hodgins:
> On Fri, 13 Jan 2023 21:03:02 -0500, pH <wNOSPAMp@gmail.org> wrote:
>
>> Hi Folks.
>> An Israeli program called "Pegasus" has been in the news of late as an
>> 'infection' which can affect Android based cellular phones.
>>
>> It's my understanding that Android is essentially Linux for cellular phones.
>> (Let me know when there's a CP/M based cellular phone and maybe I'll
>> consider it....)
>>
>> My question:
>> Do we need to worry about this Pegasus thingie for Linux operating systems
>> in general?
>
> No. Android is a stripped down derivative of linux with everything running as
> root with most, if not all security removed, in order to make it easy to use.

*ROTFLSTC*

--
Gutta cavat lapidem (Ovid)

Re: Pegasus and Linux in general...pH

<tptk76$12i1a$1@solani.org>

copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=11142&group=comp.os.linux.misc#11142

copy link Newsgroups: comp.os.linux.misc

Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!reader5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: hugybear@gmx.ch (Joerg Lorenz)
Newsgroups: comp.os.linux.misc
Subject: Re: Pegasus and Linux in general...pH
Date: Sat, 14 Jan 2023 08:05:10 +0100
Message-ID: <tptk76$12i1a$1@solani.org>
References: <tpt2gm$1opla$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Injection-Date: Sat, 14 Jan 2023 07:05:10 -0000 (UTC)
Injection-Info: solani.org;
logging-data="1132586"; mail-complaints-to="abuse@news.solani.org"
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.6.1
Cancel-Lock: sha1:2OhdfUW8cqZKvEJqJtl3TM4qC64=
Content-Language: de-CH, en-US
X-User-ID: eJwFwQkBwDAIA0BLZEBo5VAe/xJ250qwwug0X9/T3KztLLcnIT0qUQMQI/wAKddnc/fkTN8fMJIRsw==
In-Reply-To: <tpt2gm$1opla$1@dont-email.me>

by: Joerg Lorenz - Sat, 14 Jan 2023 07:05 UTC

Am 14.01.23 um 03:03 schrieb pH:
> Hi Folks.
> An Israeli program called "Pegasus" has been in the news of late as an
> 'infection' which can affect Android based cellular phones.

Is in the press for at least 2 years. It all started with the infection
of iPhones. These attacks were/are extremely sophisticated. The status
of Android seems to be still unclear.

> It's my understanding that Android is essentially Linux for cellular phones.
> (Let me know when there's a CP/M based cellular phone and maybe I'll
> consider it....)

Only the Kernel of Android is Linux. The whole rest is proprietary
insecure stuff.

> My question:
> Do we need to worry about this Pegasus thingie for Linux operating systems
> in general?

Difficult to judge. Servers could be of some interest.
On your desktop machine do not work as root/admin.

--
Gutta cavat lapidem (Ovid)

Re: Pegasus and Linux in general...pH

<tpujmn$215mf$1@dont-email.me>

copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=11151&group=comp.os.linux.misc#11151

copy link Newsgroups: comp.os.linux.misc

Path: i2pn2.org!i2pn.org!eternal-september.org!reader01.eternal-september.org!.POSTED!not-for-mail
From: 8c065a96@gmx.com (8c065a96)
Newsgroups: comp.os.linux.misc
Subject: Re: Pegasus and Linux in general...pH
Date: Sat, 14 Jan 2023 11:02:28 -0500
Organization: A noiseless patient Spider
Lines: 27
Message-ID: <tpujmn$215mf$1@dont-email.me>
References: <tpt2gm$1opla$1@dont-email.me>
<op.1yqsbheka3w0dxdave@hodgins.homeip.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sat, 14 Jan 2023 16:02:31 -0000 (UTC)
Injection-Info: reader01.eternal-september.org; posting-host="826ae14459e44e9d1928319aab26a781";
logging-data="2135759"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+c00DDDw7AFmiQREOfSwPdW6XHomtaklM="
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101
Thunderbird/102.6.1
Cancel-Lock: sha1:LqLjh+a7jh2DvJGRdBXshinmPZ0=
In-Reply-To: <op.1yqsbheka3w0dxdave@hodgins.homeip.net>
Content-Language: en-US

by: 8c065a96 - Sat, 14 Jan 2023 16:02 UTC

On 2023-01-13 10:36 PM, David W. Hodgins wrote:
> On Fri, 13 Jan 2023 21:03:02 -0500, pH <wNOSPAMp@gmail.org> wrote:
>
>> Hi Folks.
>> An Israeli program called "Pegasus" has been in the news of late as an
>> 'infection' which can affect Android based cellular phones.
>>
>> It's my understanding that Android is essentially Linux for cellular
>> phones.
>> (Let me know when there's a CP/M based cellular phone and maybe I'll
>> consider it....)
>>
>> My question:
>> Do we need to worry about this Pegasus thingie for Linux operating
>> systems
>> in general?
>
> No. Android is a stripped down derivative of linux with everything
> running as
> root with most, if not all security removed, in order to make it easy to
> use.
....bruh what?

Isn't Android, like, the one relevant distro/fork that actually uses
SELinux, and outright hostile to developers with how much it locks down
what apps can do (even something so mundane as touching
/storage/emulated/0/Download requires asking the user, for instance)?

Re: Pegasus and Linux in general...pH

<lYCcnaq27ZI61V7-nZ2dnZfqn_ednZ2d@earthlink.com>

copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=11155&group=comp.os.linux.misc#11155

copy link Newsgroups: comp.os.linux.misc

Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!border-2.nntp.ord.giganews.com!nntp.giganews.com!Xl.tags.giganews.com!local-1.nntp.ord.giganews.com!nntp.earthlink.com!news.earthlink.com.POSTED!not-for-mail
NNTP-Posting-Date: Sun, 15 Jan 2023 00:28:23 +0000
Subject: Re: Pegasus and Linux in general...pH
Newsgroups: comp.os.linux.misc
References: <tpt2gm$1opla$1@dont-email.me>
From: 26C.Z968@noaada.net (26C.Z968)
Date: Sat, 14 Jan 2023 19:27:04 -0500
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
Thunderbird/78.13.0
MIME-Version: 1.0
In-Reply-To: <tpt2gm$1opla$1@dont-email.me>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Message-ID: <lYCcnaq27ZI61V7-nZ2dnZfqn_ednZ2d@earthlink.com>
Lines: 46
X-Usenet-Provider: http://www.giganews.com
NNTP-Posting-Host: 68.222.41.46
X-Trace: sv3-zq7hORHsATDrjwBKNMIwjrMHiLeodMPWoZaVxlV4O5MlOXLkR5ZdnZcRljLOhvTlJTF9JV7IPVXGyCT!nF/eNvUxnwElXbyFVXPoY5fHh2qS4tnqQn9sXpl/HSVpAldxrkzZqCBZ7pTjcsFy7yQ7wy9+0tEQ!9YzOnSk1XH24dWeQKQY=
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly
X-Postfilter: 1.3.40

by: 26C.Z968 - Sun, 15 Jan 2023 00:27 UTC

On 1/13/23 9:03 PM, pH wrote:
> Hi Folks.
> An Israeli program called "Pegasus" has been in the news of late as an
> 'infection' which can affect Android based cellular phones.
>
> It's my understanding that Android is essentially Linux for cellular phones.
> (Let me know when there's a CP/M based cellular phone and maybe I'll
> consider it....)
>
> My question:
> Do we need to worry about this Pegasus thingie for Linux operating systems
> in general?
>
> pH in Aptos
>

Hey ... I like the idea of a CP/M phone :-)

(hmm ... a few early versions of Turbo Pascal came
with CP/M-tweaked versions - ideal for the project)

Android has had security issues - but then everything does.
It uses a Linux kernel, but almost everything on top of
that is custom. A good feature is that apps are run in a
"sandbox", largely isolated from the rest of the system,
but even that has been exploited to fool users/anti-virus
that an infected app is "safe". Usually apps are only
checked once for bad behavior, but time-delayed evil can
be hidden inside.

Modern Android seems kind of 'anal' - always asking
for user permissions for things - but 'anal' and
actually 'secure' are not always the same thing.
We remember Winders Vista - where the MS 'cure' for
all its security holes was to Make It YOUR Fault
by allowing apps and actions (or just disabling
that horrible stuff entirely).

The danger from Pegasus and the like kind of depends on
who you are and what you do. Normally Pegasus has been
used by governments to spy on enemies/rivals (and sometimes
its own). In theory it could be widely deployed, but that
would subject it to more detailed analysis and soon it
could be detected/blocked easily. Narrow deployment
extends the useful lifetime of spyware. Pegasus is
now too "exposed", and thus probably at end-of-life.

Re: Pegasus and Linux in general...pH

<tq7t1h$3jvvb$1@dont-email.me>

copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=11197&group=comp.os.linux.misc#11197

copy link Newsgroups: comp.os.linux.misc

Path: i2pn2.org!i2pn.org!eternal-september.org!reader01.eternal-september.org!.POSTED!not-for-mail
From: wNOSPAMp@gmail.org (pH)
Newsgroups: comp.os.linux.misc
Subject: Re: Pegasus and Linux in general...pH
Date: Wed, 18 Jan 2023 04:37:05 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 23
Message-ID: <tq7t1h$3jvvb$1@dont-email.me>
References: <tpt2gm$1opla$1@dont-email.me>
<op.1yqsbheka3w0dxdave@hodgins.homeip.net>
Injection-Date: Wed, 18 Jan 2023 04:37:05 -0000 (UTC)
Injection-Info: reader01.eternal-september.org; posting-host="75123332624236a7198b8320ff6b5e26";
logging-data="3801067"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/i8VgzLmjaB5ZsBL/TvkkmGFHv9pVX5A0="
User-Agent: slrn/1.0.3 (Linux)
Cancel-Lock: sha1:ft6yFu9QdZNqZ+x0++jjvqy+znE=

by: pH - Wed, 18 Jan 2023 04:37 UTC

On 2023-01-14, David W. Hodgins <dwhodgins@nomail.afraid.org> wrote:
> On Fri, 13 Jan 2023 21:03:02 -0500, pH <wNOSPAMp@gmail.org> wrote:
>
>> Hi Folks.
>> An Israeli program called "Pegasus" has been in the news of late as an
>> 'infection' which can affect Android based cellular phones.
>>
>> It's my understanding that Android is essentially Linux for cellular phones.
>> (Let me know when there's a CP/M based cellular phone and maybe I'll
>> consider it....)
>>
>> My question:
>> Do we need to worry about this Pegasus thingie for Linux operating systems
>> in general?
>
> No. Android is a stripped down derivative of linux with everything running as
> root with most, if not all security removed, in order to make it easy to use.
>
> Regards, Dave Hodgins

Okay, thank-you for the info.

Subject	Author
Pegasus and Linux in general...pH	pH
Re: Pegasus and Linux in general...pH	David W. Hodgins
Re: Pegasus and Linux in general...pH	Joerg Lorenz
Re: Pegasus and Linux in general...pH	8c065a96
Re: Pegasus and Linux in general...pH	pH
Re: Pegasus and Linux in general...pH	Joerg Lorenz
Re: Pegasus and Linux in general...pH	26C.Z968