<oembed><type>rich</type><version>1.0</version><title>SimplifiedPrivacy.com Podcast wrote</title><author_name>SimplifiedPrivacy.com Podcast (npub14s…jt5d6)</author_name><author_url>https://yabu.me/npub14slk4lshtylkrqg9z0dvng09gn58h88frvnax7uga3v0h25szj4qzjt5d6</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>What is Pegasus?&#xA;&#xA;Pegasus is targeted cellphone malware by the NSO Group sold to governments.&#xA;It&#39;s regularly used against human rights activists.&#xA;&#xA;How can you stop Pegasus?&#xA;&#xA;Well, you can&#39;t stop it per say (except step 6 below). But you can reduce risk with SOME of the steps below:&#xA;&#xA;1) GrapheneOS reduces buffer overflows with a hardened memory malloc&#xA;&#xA;2) Always use a VPN for the DNS.  Avoid trusting ISP DNS&#xA;&#xA;3) Don&#39;t activate SMS from cell towers and use VoIP only via WiFi&#xA;&#xA;4) Avoid a SIM card, then use an external WiFi FOSS router that you own such as:&#xA;&#xA;In your home: DD-WRT, Open-WRT, (w/) OPNSense or pfSense&#xA;Tiny on the go: Rasberry Pi with OpenWRT, or GL.inet,&#xA;&#xA;You can put a USB modem on GLinet then you&#39;d have portable WiFi access, but with physical isolation from the internet source.   Then you only flow encrypted VPN traffic through the router.&#xA;&#xA;If you&#39;re too lazy to do this, then an external ISP-provided hotspot over in-phone SIM.&#xA;&#xA;5) Pegasus can work off being sent a link.  When your friends send you random website links on mobile, then look at it without JavaScript.  Privacy Browser &amp; Tor mobile both have a good toggle switches.  (or look at it on PC)&#xA;&#xA;6) You could consider a tiny PC w/ WiFi such as LattePanda or Rasberry Pi INSTEAD of a phone because these have no internal cell tower baseband modem.  The default Pi distro can do Signal, or for example:&#xA;lattepanda.com/lattepanda-sigma&#xA;&#xA;Some will think this is extreme, but you can only do SOME of the choices depending on your situation&#xA;</html></oembed>