What is Pegasus?
Pegasus is targeted cellphone malware by the NSO Group sold to governments.
It's regularly used against human rights activists.
How can you stop Pegasus?
Well, you can't stop it per say (except step 6 below). But you can reduce risk with SOME of the steps below:
1) GrapheneOS reduces buffer overflows with a hardened memory malloc
2) Always use a VPN for the DNS. Avoid trusting ISP DNS
3) Don't activate SMS from cell towers and use VoIP only via WiFi
4) Avoid a SIM card, then use an external WiFi FOSS router that you own such as:
In your home: DD-WRT, Open-WRT, (w/) OPNSense or pfSense
Tiny on the go: Rasberry Pi with OpenWRT, or GL.inet,
You can put a USB modem on GLinet then you'd have portable WiFi access, but with physical isolation from the internet source. Then you only flow encrypted VPN traffic through the router.
If you're too lazy to do this, then an external ISP-provided hotspot over in-phone SIM.
5) Pegasus can work off being sent a link. When your friends send you random website links on mobile, then look at it without JavaScript. Privacy Browser & Tor mobile both have a good toggle switches. (or look at it on PC)
6) You could consider a tiny PC w/ WiFi such as LattePanda or Rasberry Pi INSTEAD of a phone because these have no internal cell tower baseband modem. The default Pi distro can do Signal, or for example:
lattepanda.com/lattepanda-sigma
Some will think this is extreme, but you can only do SOME of the choices depending on your situation
SimplifiedPrivacy.com
npub14s…jt5d6
2023-12-17 17:33:59
Author Public Key
npub14slk4lshtylkrqg9z0dvng09gn58h88frvnax7uga3v0h25szj4qzjt5d6Published at
2023-12-17 17:33:59Event JSON
{
"id": "c3c6a4e55beaa9e1e841223970af056ae433cd9c83da2e12a72e0c01d0e15149",
"pubkey": "ac3f6afe17593f61810513dac9a1e544e87b9ce91b27d37b88ec58fbaa9014aa",
"created_at": 1702830839,
"kind": 1,
"tags": [
[
"r",
"GL.inet"
],
[
"r",
"lattepanda.com/lattepanda-sigma"
]
],
"content": "What is Pegasus?\n\nPegasus is targeted cellphone malware by the NSO Group sold to governments.\nIt's regularly used against human rights activists.\n\nHow can you stop Pegasus?\n\nWell, you can't stop it per say (except step 6 below). But you can reduce risk with SOME of the steps below:\n\n1) GrapheneOS reduces buffer overflows with a hardened memory malloc\n\n2) Always use a VPN for the DNS. Avoid trusting ISP DNS\n\n3) Don't activate SMS from cell towers and use VoIP only via WiFi\n\n4) Avoid a SIM card, then use an external WiFi FOSS router that you own such as:\n\nIn your home: DD-WRT, Open-WRT, (w/) OPNSense or pfSense\nTiny on the go: Rasberry Pi with OpenWRT, or GL.inet,\n\nYou can put a USB modem on GLinet then you'd have portable WiFi access, but with physical isolation from the internet source. Then you only flow encrypted VPN traffic through the router.\n\nIf you're too lazy to do this, then an external ISP-provided hotspot over in-phone SIM.\n\n5) Pegasus can work off being sent a link. When your friends send you random website links on mobile, then look at it without JavaScript. Privacy Browser \u0026 Tor mobile both have a good toggle switches. (or look at it on PC)\n\n6) You could consider a tiny PC w/ WiFi such as LattePanda or Rasberry Pi INSTEAD of a phone because these have no internal cell tower baseband modem. The default Pi distro can do Signal, or for example:\nlattepanda.com/lattepanda-sigma\n\nSome will think this is extreme, but you can only do SOME of the choices depending on your situation\n",
"sig": "6725962484e56444c975fc2903c0ef1791485c5db265399cd33aa322a017ee88c4e7b4807220ec306b6f1f975d0974484dc0fc4f6707b30773639c138ae93bbd"
}