The EU has quietly provided Morocco with powerful phone hacking systems [French](disclose.ngo)
disclose.ngo
The EU has quietly provided Morocco with powerful phone hacking systems [French]
https://disclose.ngo/fr/article/union-europeenne-a-discretement-fourni-au-maroc-de-puissants-systemes-de-piratage-des-telephones
24 comments
I'm not surprised, morocco is a source of migrants and drug problems, this cooperation to strengthen security at EU's border makes sense
> source of migrants and drug problems
Wow. Sounds like someone is on an agenda.
Wow. Sounds like someone is on an agenda.
It's the only African country with a land border to the EU so there's a point. There was a major incident with almost 40 dead at one of these borders only months ago.
I also don't like the framing of migrants and drugs in the same sentence as both issues are ethically very different. But both are driven by organized crime groups and the migrants are victims too. The traffickers take them for all they're worth. It's a problem that needs to be fought.
I also don't like the framing of migrants and drugs in the same sentence as both issues are ethically very different. But both are driven by organized crime groups and the migrants are victims too. The traffickers take them for all they're worth. It's a problem that needs to be fought.
>It's the only African country with a land border to the EU so there's a point.
By "land" you mean "only a few miles of sea", I believe.
There are three spanish islets (exclaves): https://en.wikipedia.org/wiki/Enclave_and_exclave in Morocco, but they don't really count, even if inside Melilla, Ceuta or Peñón de Vélez de la Gomera
https://en.wikipedia.org/wiki/Morocco%E2%80%93Spain_border
you are on Spanish territory, you still need to cross the Gibraltar straight to get to Spain, they are among the few "special territories" of the EU:
https://en.wikipedia.org/wiki/Special_member_state_territori...
By "land" you mean "only a few miles of sea", I believe.
There are three spanish islets (exclaves): https://en.wikipedia.org/wiki/Enclave_and_exclave in Morocco, but they don't really count, even if inside Melilla, Ceuta or Peñón de Vélez de la Gomera
https://en.wikipedia.org/wiki/Morocco%E2%80%93Spain_border
you are on Spanish territory, you still need to cross the Gibraltar straight to get to Spain, they are among the few "special territories" of the EU:
https://en.wikipedia.org/wiki/Special_member_state_territori...
I was talking about the enclaves yes. Why don't they count? They are regular targets for human trafficking and drug activity. Many people have died in trafficker-incited border incidents.
https://en.wikipedia.org/wiki/2021_Morocco%E2%80%93Spain_bor...
https://www.theguardian.com/world/2022/jun/26/calls-investig...
I know they can't readily travel to Spain from there but I guess the idea is that they apply for refugee status once they're in. And they are part of the EU.
https://en.wikipedia.org/wiki/2021_Morocco%E2%80%93Spain_bor...
https://www.theguardian.com/world/2022/jun/26/calls-investig...
I know they can't readily travel to Spain from there but I guess the idea is that they apply for refugee status once they're in. And they are part of the EU.
They are physically separated from EU mainland, they are exclaves.
As said once you manage to get inside one of these extra-territories you are technically on Spain teritory, but you have NO access (without a boat) to Spain (or the EU).
As an example, if you manage (from Morocco) to enter one of these you cannot be chased by the Morocco Police (that will stop at the border) and you can - say - ask/apply for asylum, but if this is denied the Spanish Police will bring you back to the border and put you in the hands of the Morocco border police.
And it is not like any "mainland" border that you can escape anywhere, these territories are tiny and you have no ways to go other than sea or Morocco.
Same goes for drugs, congratulations, you managed to bring some hashish in Melilla, if you manage to sell it there, good, otherwise you won't be able (easily) to bring it to Spain.
Most of the "drug activity" is on the beaches of Spain, around La Linea, Campo de Gibraltar and Algeciras:
https://estaticos-cdn.prensaiberica.es/epc/resourcescas/info...
speedboats leave the coasts of Morocco and quickly unload the drugs on the beaches, then they are loaded on cars and distributed in Spain.
The rest is attempts to smuggle drugs (and tobacco/cigarettes) hidden inside trucks or cars boarded onto regular ferries.
As said once you manage to get inside one of these extra-territories you are technically on Spain teritory, but you have NO access (without a boat) to Spain (or the EU).
As an example, if you manage (from Morocco) to enter one of these you cannot be chased by the Morocco Police (that will stop at the border) and you can - say - ask/apply for asylum, but if this is denied the Spanish Police will bring you back to the border and put you in the hands of the Morocco border police.
And it is not like any "mainland" border that you can escape anywhere, these territories are tiny and you have no ways to go other than sea or Morocco.
Same goes for drugs, congratulations, you managed to bring some hashish in Melilla, if you manage to sell it there, good, otherwise you won't be able (easily) to bring it to Spain.
Most of the "drug activity" is on the beaches of Spain, around La Linea, Campo de Gibraltar and Algeciras:
https://estaticos-cdn.prensaiberica.es/epc/resourcescas/info...
speedboats leave the coasts of Morocco and quickly unload the drugs on the beaches, then they are loaded on cars and distributed in Spain.
The rest is attempts to smuggle drugs (and tobacco/cigarettes) hidden inside trucks or cars boarded onto regular ferries.
I know it's not so useful to be there but technically it is a land border between Africa and the EU. And clearly it still attracts a lot of organised crime. Which warrants this collaboration with Morocco, which was what the discussion started with. I only wanted to say that it makes sense for Spanish/EU authorities (who do control these exclaves) to collaborate with Moroccan police. Much more than any other country.
I don't really understand why Spain insists on keeping them. They're more trouble than they're worth IMO. Also, it's just a little bit hypocritical of Spain to want Gibraltar back from the UK but wanting to keep these areas in Morocco.
Personally I think both should be done, Ceuta/Melilla to Morocco and Gibraltar to Spain.
I don't really understand why Spain insists on keeping them. They're more trouble than they're worth IMO. Also, it's just a little bit hypocritical of Spain to want Gibraltar back from the UK but wanting to keep these areas in Morocco.
Personally I think both should be done, Ceuta/Melilla to Morocco and Gibraltar to Spain.
I don't have any agenda, but i see the problem, i made a mistake, i said Morocco instead of "at the borders"
I apologies for the mistake, i can't edit the comment anymore unfortunately
I apologies for the mistake, i can't edit the comment anymore unfortunately
However you spin and paint things - you can not ignore incidents like this:
https://www.theguardian.com/world/2022/jun/27/moroccan-autho...
https://www.theguardian.com/world/2022/jun/27/moroccan-autho...
The primary distinction between Pegasus software and other software is that in order to hack a mobile device, the hacker must have direct, physical access to the device. Pegasus software does not provide remote surveillance.
I am reading in the airport after leaving Morocco. A couple of days ago I received a weird spam SMS message (coming from an iCloud account) that i’ve never seen before. I didn’t open the messages as I know about Pegasus and my senses started to tingle.
I guess it’s time to reset my phone.
I guess it’s time to reset my phone.
DeepL Translation: According to documents obtained by Disclose and Der Spiegel from European institutions, the Swedish company MSAB has provided the Moroccan police with a software called XRY capable of unlocking all types of smartphones to extract data from calls, contacts, location, but also messages sent and received by SMS, WhatsApp and Signal. As for Oxygen forensic, domiciled in the United States, it has delivered a data extraction and analysis system called "Detective". What makes it special? Bypassing screen locks on mobile devices in order to extract information stored in the cloud (Google, Microsoft or Apple) or secure applications on any phone or computer. The notable difference with Pegasus software is that both software require physical access to the mobile device to be hacked, and do not allow remote monitoring.
Both XRY and Oxigen are AFAIK "common" and "established" forensics tools, unless the versions provided to Morocco are "special" there is nothing particularly "alarming" or "new/revolutionary", let alone "secret" about them,
https://www.msab.com/
https://www.oxygen-forensic.com/en/
Some products may be reserved to Law Enforcement or Licensed investigators, but I believe that's all.
https://www.msab.com/
https://www.oxygen-forensic.com/en/
Some products may be reserved to Law Enforcement or Licensed investigators, but I believe that's all.
Which is fair play.
I fully expect authorities from any countries to try to get evidences from physical access to electronic devices in the case of criminal investigation. Just like they can go into ones house and open safes with a torch if a judge allows it.
The problem is mass surveillance, not getting data about someone under arrest.
Of course, I unfortunatly also fully expect them to abuse that and use it outside of criminal investigations, without the knowledge of said person.
I fully expect authorities from any countries to try to get evidences from physical access to electronic devices in the case of criminal investigation. Just like they can go into ones house and open safes with a torch if a judge allows it.
The problem is mass surveillance, not getting data about someone under arrest.
Of course, I unfortunatly also fully expect them to abuse that and use it outside of criminal investigations, without the knowledge of said person.
No, the problem is backdoors and misleading information.
That as well.
Apple may state that their enclave is secure, the existance of such tools and the fact they were part of PRISM hints that they are like all others: open to those with a lot of resources.
Apple may state that their enclave is secure, the existance of such tools and the fact they were part of PRISM hints that they are like all others: open to those with a lot of resources.
So does that mean that all phone manufacturers are essentially selling snake oil when it comes to device security?
Yes and no.
The manufacturers do their best to protect the users, but when it comes to criminal investigations there are tools[0] that can often make access to smartphone (or computers) data possible.
These tools are often prohibitively expensive and/or only licensed to LEO's (Law Enforcement Officers) and cannot unlock/access "everything", so there is no real "privacy risk" connected to them unless you are charged with a criminal offence and/or arrested.
To give you an example there are cases where an iPhone can be unlocked by two (AFAIK) different tools, one is made by Cellebrite that charges an awful amount of money for each unlock, and the other is Graykey that wants as well a lot of money but you can buy the "unlimited" option:
https://www.forensicfocus.com/forums/mobile-forensics/grayke...
both are only given to authorized investigators (Police/Government) only.
Of course it is possible - in theory - that someone malicious manages to get their hands on one of them and then proceeds to steal the phone from you, and then can afford to spend anything between 3,000 and 10,000 US$ to unlock it and access your data, but I find it improbable.
[0] until the manufacturer patches (if patchable) the vulnerability, and then the race starts to find a new one
The manufacturers do their best to protect the users, but when it comes to criminal investigations there are tools[0] that can often make access to smartphone (or computers) data possible.
These tools are often prohibitively expensive and/or only licensed to LEO's (Law Enforcement Officers) and cannot unlock/access "everything", so there is no real "privacy risk" connected to them unless you are charged with a criminal offence and/or arrested.
To give you an example there are cases where an iPhone can be unlocked by two (AFAIK) different tools, one is made by Cellebrite that charges an awful amount of money for each unlock, and the other is Graykey that wants as well a lot of money but you can buy the "unlimited" option:
https://www.forensicfocus.com/forums/mobile-forensics/grayke...
both are only given to authorized investigators (Police/Government) only.
Of course it is possible - in theory - that someone malicious manages to get their hands on one of them and then proceeds to steal the phone from you, and then can afford to spend anything between 3,000 and 10,000 US$ to unlock it and access your data, but I find it improbable.
[0] until the manufacturer patches (if patchable) the vulnerability, and then the race starts to find a new one
Kinda. But physical access is a big barrier.
I am really surprised they don't do much against Pegasus though. I'm sure the agencies involved know what exploits it uses by now.
I guess because western powers use these tools too is why they don't lock them out.
I am really surprised they don't do much against Pegasus though. I'm sure the agencies involved know what exploits it uses by now.
I guess because western powers use these tools too is why they don't lock them out.
Peagasus is an evolving product. Probably the early versions are useless these days.
https://en.wikipedia.org/wiki/Pegasus_(spyware)#Development_...
I wouldn't be surprised if it hasn't always been at full effectiveness on all platforms, as vulnerabilities are patched and others discovered.
https://en.wikipedia.org/wiki/Pegasus_(spyware)#Development_...
I wouldn't be surprised if it hasn't always been at full effectiveness on all platforms, as vulnerabilities are patched and others discovered.
[deleted]
Of course, even if the article make it sound like a scandal, exchange of anti-privacy software for catching human traffickers [1] is not announced in a worldwide press release, it would defeat its purpose
[1] from the article
Objective of this technology transfer financed from the budget of the EU's "border management program for the Maghreb region": to fight against irregular immigration and human trafficking at the gates of the EU.