In a way then you can say online advertisement agencies are an arm of the Israeli spy agency.
“Zero-click” means that users don’t need to click on a link or actively do anything for their devices to be targeted with spyware.
“The moment [the ad] is rendered, their device can be hacked, so there’s really no defence against this, short of not using a smart phone or [not] connecting to the internet,” . Such infections can be hard to detect.
When spyware is implanted, the operator behind the hack can take control of the device. “They can turn on the camera, turn on the microphone, and track someone’s geolocation, so it’s kind of like God-like capabilities,”
----------------------------------
Discussion on grapheneos forum regarding this. Posted 5 days ago:
The moment [the ad] is rendered, their device can be hacked, so there’s really no defence against this, short of not using a smart phone or [not] connecting to the internet
I’ve looked at the discussion at the GOS but I’m still confused on whether AdBlocker would work. They say that if there is a persistent new ad, that it can take the ad blocker sometime to add it to the filter.
Maybe I’m not 100% how an ad blocker works then because I thought it prevents the ad window from loading entirely and ad windows are correctly labelled as ads? Or do they work by filtering what the ad window is trying to load data from?
It’s not just Canadian researchers either and Israeli exploiting zero-click malware is common (they’ve done the same with WhatsApp and Meta still hasn’t closed that gap).
deleted by creator
That’s not how ads work on the internet. You have local advertising companies that are paid by Israel to push them based on whatever algorithm is held on you (and that’s if Israel wants to use the algorithm or just blast the ad to everyone like they do on Google oftentimes).
Websites don’t have a “country” unless it’s specified at the domain level, but that’s hardly an obstacle because a local domain or .com domain could be bought very easily.
Considering that this is a zero-click malware, it means that it just has to show up on the website you’re using and has nothing to do with the originating country.
deleted by creator
Ads shouldn’t be allowed considering that they’re a security risk by bad actors
Or they can just be first party served images. they don’t need to be 3rd party served Javascript.
I do this with several of my websites. Either geofence or block non Canadian ips.
It’s not perfect, but it keeps the spam away from me.
deleted by creator
Sure! I geofence the users. Technically I don’t reduce spam, but only people from the spammers country can see it. I treat VPNs as their own country.
So do it. Get a list of the IP ranges assigned to Canada and whitelist them, block connections to all other IPs.
deleted by creator
No, it’s really not. You can get lists of which IP ranges are assigned to which country (helps with blocking bots). Haveing a whitelist of only Canadian IPs is pretty trivial.
deleted by creator
https://ipinfo.io/countries/ca
Grab the CSV and use it as a whitelist for your firewall. If you’re on lemmy it’s well within your wheelhouse. Even if it’s not, grany could ask chatgpt to slop it together for you.
If you’re on lemmy it’s well within your wheelhouse.
Sigh… ya probably.
deleted by creator
Headline is working so hard… Obviously they did it or the research wouldn’t be in the CBC.
