Thread by @RonDeibert

NEW: @apple announces #LockdownMode, a major change to iPhone security that promises to help high risk users + other actions to hold the mercenary spyware industry to account nr.apple.com/d2I3Q1s4s0

My thread w context & details 👇

The @citizenlab has been undertaking evidence-based research on targeted espionage against civil society for close to 15 years

citizenlab.ca/category/resea…

We published the first report on NSO Group’s Pegasus spyware in 2016

citizenlab.ca/2016/08/millio…

Since then, @AmnestyTech, @FbdnStories, @ForensicArchi, and many others have joined the effort

There is now undeniable evidence from this work that the mercenary spyware industry is helping spread authoritarian practices & massive human rights abuses worldwide 👇

lawfareblog.com/effects-digita…

Last fall, (led by @billmarczak) we captured Pegasus in the wild, (the ForcedEntry exploit), and undertook a responsible disclosure to @apple, which led to many of the subsequent actions being undertaken by @apple today

citizenlab.ca/2021/09/forced…

There is no single silver bullet that will solve the mercenary spyware problem

We need governments, civil society, and tech platforms to all take concerted action. See my recommendations 👇

issues.org/surveillance-s…

To be sure, all tech platforms have problems - @apple included (more below)

But today @apple is setting an example of what tech platforms can do to positively impact this space & reduce harms

.@apple’s newly released #LockdownMode will reduce the attack surface, increase costs for spyware firms, & thus make it much harder for repressive govts to hack high risk users

Let’s hope that it also helps cut down on real-life harms…

Meanwhile, @apple’s threat notifications have alerted otherwise unwitting victims & has precipitated numerous new & ongoing investigations worldwide by @citizenlab & others

They shook a tree and victims have fallen into ours and others’ laps

.@apple’s donation to the Dignity and Justice fund is very positive

The @FordFoundation managed fund will help nurture the growing community of researchers & advocacy orgs holding mercenary spyware vendors accountable…

…while preserving our independence to undertake impartial, evidence-based research –

including research holding @Apple itself accountable

(as we have done twice since last fall 👇 )

citizenlab.ca/2021/08/engrav… and citizenlab.ca/2022/03/engrav…

Apple took a gamble, knowing groups like @citizenlab will continue to do this type of independent research holding them to account

Other tech companies should now step up and match

Here is @josephmenn's report on today's developments: washingtonpost.com/technology/202…

Apple’s Lockdown Mode Aims to Counter Spyware Threats wired.com/story/apple-io… via @wired

"The announcement is a recognition that spyware is a global problem that pits the top engineering talent at surveillance firms like NSO Group and tech giants against each other," says @snlyngaas @CNN

cnn.com/2022/07/06/tec…

Apple ramps up war on spyware, a growing digital scourge cyberscoop.com/apple-nso-grou… by @TonyaJoRiley

It cannot be overstated just how much thought and effort my @citizenlab colleague @jsrailton has put into advocating for these type of actions from tech companies.

Here's his thread with some thoughts and reactions 👇

https://twitter.com/jsrailton/status/1544736992340099084?s=20&t=gEWDV3t1oyfBt7N83z_8yg