Paragon accidentally uploaded a photo of its spyware control panel

https://twitter.com/DrWhax/status/2021608609595945442

56•CGMthrowaway•1h ago

Comments

recursivecaveat•52m ago

This company btw for anyone else who had not heard of them before (there are a lot of companies by that name): https://en.wikipedia.org/wiki/Paragon_Solutions

phendrenad2•21m ago

It's too bad that "The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized" has become "we can download a full copy of all of your files at any time, or continually, if we feel like it, even if we don't suspect you of a crime".

moralestapia•29m ago

Awesome.

Moxie's "unbreakable" end-to-end communication protocol.

thmsths•19m ago

The message can't be intercepted in transit, since we are talking about spyware, I assume they get it from the device, hard to defend against that if they have access to your process' memory space.

Hamuko•18m ago

Surprising that end-to-end encryption doesn't really matter when you get into one of the ends.

akimbostrawman•12m ago

not at all. there is no encryption that can save you when one of the legitimate participants is somehow compromised. doesn't even need to be a sophisticated device compromise, literal shoulder surfing does that too.

moralestapia•11m ago

Thanks GPT, but that's exactly what GP was saying.

ASalazarMX•6m ago

Even if you had to input your private key every time you wanted to read or send a message, having malware in your phone voids practically any form of encryption, because it has to be decrypted eventually to be used.

moralestapia•16m ago

>The message can't be intercepted in transit

Lol, so like ... all encryption schemes since the 70s?

sowbug•7m ago

They do have stronger schemes, which are called hash functions.

moralestapia•5m ago

What?

Hashing is not encrypting.

You can learn more about the topic here, https://www.okta.com/identity-101/hashing-vs-encryption/

Insanity•19m ago

How is this related?

moralestapia•14m ago

I see there's some room for ambiguity.

See, https://en.wikipedia.org/wiki/Moxie_Marlinspike

rtaylorgarlock•28m ago

Looks like image was removed and maybe only a demo?

phendrenad2•26m ago

Non-X link: https://archive.is/kqvnH

ronsor•14m ago

From one Twitter user:

> It's just a demo instance, but, these front ends are barely revealed to the public

This genuinely doesn't look any different from the control panels of commercial infostealers and RATs sold on Russian hacking forums. Those usually sell for between $200 and $20,000 depending on features and pricing model (one-time vs. ongoing subscription).

These spyware companies hype themselves up, but they're really not any different from Ivan's RAT-as-a-Service, besides having extra exploits to burn and wealthier customers.

Show HN: Know Before You Vote – O/S tool linking candidates to Epstein documents

Dawson's Creek star James Van Der Beek dies aged 48

Apple at 50

Covering electricity price increases from our data centers

Show HN: bunx quran.sh

Instagram head questioned in social media addiction trial

Q&A: New UK onshore wind and solar is '50% cheaper' than new gas

Columbia Admitted Epstein's Girlfriend via 'Irregular' Process

AI-DLC Solves the Wrong Bottleneck

Daemon (Novel) [2006]

Transforming a Clojure Database into a Library with GraalVM Native Image and FFI

New Shakti (K/APL) Website

Show HN: AIST – 950-token protocol for preserving AI session state

I built P2P network where every CPU becomes an AI inference node 89 tks/s no GPU

Chemical or Digital: What treatment is right for who, when?

New Siri Runs into Problems, Features Could Be Pushed to iOS 26.5 and iOS 27

Show HN: Globlin – 3x faster Glob, written by Opus 4.5

VS Code Polyglot Notebooks for .NET Going Away

Google recovers "deleted" Nest video in high-profile abduction case

Document your never ending midlife crisis (IT infrastructure / home lab)

Linux 7.0 Confirmed by Linus Torvalds: Stable Version Due Mid-April

Python forum thread about (mis)use of PyPI for non-Python binaries

Half-Earth Socialism: The Game

James Van Der Beek, 'Dawson's Creek' and 'Varsity Blues' Star, Dies at 48

Ecma Technical Committee 57: Standardization of the High-Level Shading Language

OpenAI Executive Who Opposed 'Adult Mode' Fired for Sexual Discrimination

Show HN: Matching people based on their saved places, not their profiles

Reviving a CIDCO MailStation – the last Z80 computer

Bringing a Warhammer to a Knife Fight

Show HN: Brood,image-first AI visual canvas for devs