HOPE Wiki - User contributions [en]

Pegasus Detection and Analysis 26 Workshop

2026-08-07T02:11:31Z

Steveb:

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB '''''DATA''''' cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, male micro to male A, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== '''Recommended Videos''' ==

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

== Presenter ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 

'''Steven S.''': Steve is a cybersecurity researcher who has a lot of Linux experience.

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

==== '''Android''' ====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

==== '''iOS''' ====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

=== '''Hardware-based Data Recovery''' ===

'''NOTE: Not an endorsement! Research these labs on your own.'''

[https://mdrepairs.com/cell-phone-data-recovery-palo-alto-california '''MD Repairs''']

==== '''Android''' ====
* [https://www.youtube.com/watch?v=nXDUhhyY2rE '''HDD Recovery Services: recover data Samsung Galaxy directly from phone memory (video)''']

* [https://www.datarecovery.net/android-data-recovery.aspx '''Ace Data Recovery''']

* [https://www.datarescuelabs.com/data-recovery-toronto/android-data-recovery '''DRL Data Rescue Labs''']

* [https://www.gillware.com/data-recovery-lab '''Gillware''']

Pegasus Detection and Analysis 26 Workshop

2026-08-07T00:47:59Z

Steveb: /* Links */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB '''''DATA''''' cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, male micro to male A, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 

'''Steven S.''': Steve is a cybersecurity researcher who has a lot of Linux experience.

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

==== '''Android''' ====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

==== '''iOS''' ====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

=== '''Hardware-based Data Recovery''' ===

'''NOTE: Not an endorsement! Research these labs on your own.'''

[https://mdrepairs.com/cell-phone-data-recovery-palo-alto-california '''MD Repairs''']

==== '''Android''' ====
* [https://www.youtube.com/watch?v=nXDUhhyY2rE '''HDD Recovery Services: recover data Samsung Galaxy directly from phone memory (video)''']

* [https://www.datarecovery.net/android-data-recovery.aspx '''Ace Data Recovery''']

* [https://www.datarescuelabs.com/data-recovery-toronto/android-data-recovery '''DRL Data Rescue Labs''']

* [https://www.gillware.com/data-recovery-lab '''Gillware''']

=== '''Recommended Videos''' ===

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-07T00:44:40Z

Steveb: /* Links */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB '''''DATA''''' cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, male micro to male A, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 

'''Steven S.''': Steve is a cybersecurity researcher who has a lot of Linux experience.

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

==== '''Android''' ====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

==== '''iOS''' ====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

=== '''Hardware-based Data Recovery''' ===

'''NOTE: Not an endorsement! Research these labs on your own.'''

[https://mdrepairs.com/cell-phone-data-recovery-palo-alto-california '''MD Repairs''']

==== '''Android''' ====
* [https://www.youtube.com/watch?v=nXDUhhyY2rE '''HDD Recovery Services: recover data Samsung Galaxy directly from phone memory (video)''']

* [https://www.datarecovery.net/android-data-recovery.aspx '''Ace Data Recovery''']

* [https://www.datarescuelabs.com/data-recovery-toronto/android-data-recovery '''DRL Data Rescue Labs''']

* [https://www.gillware.com/data-recovery-lab '''Gillware''']

=== '''Recommended Videos''' ===

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-07T00:42:02Z

Steveb: /* Android */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB '''''DATA''''' cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, male micro to male A, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 

'''Steven S.''': Steve is a cybersecurity researcher who has a lot of Linux experience.

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

==== '''Hardware-based Data Recovery''' ====

'''NOTE: Not an endorsement! Research these labs on your own.'''

[https://mdrepairs.com/cell-phone-data-recovery-palo-alto-california '''MD Repairs''']

===== '''Android''' =====
* [https://www.youtube.com/watch?v=nXDUhhyY2rE '''HDD Recovery Services: recover data Samsung Galaxy directly from phone memory (video)''']

* [https://www.datarecovery.net/android-data-recovery.aspx '''Ace Data Recovery''']

* [https://www.datarescuelabs.com/data-recovery-toronto/android-data-recovery '''DRL Data Rescue Labs''']

* [https://www.gillware.com/data-recovery-lab '''Gillware''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-07T00:40:16Z

Steveb: /* Links */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB '''''DATA''''' cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, male micro to male A, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 

'''Steven S.''': Steve is a cybersecurity researcher who has a lot of Linux experience.

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

==== '''Hardware-based Data Recovery''' ====

'''NOTE: Not an endorsement! Research these labs on your own.'''

[https://mdrepairs.com/cell-phone-data-recovery-palo-alto-california '''MD Repairs''']

===== '''Android''' =====
* [https://www.youtube.com/watch?v=nXDUhhyY2rE '''recover data Samsung Galaxy directly from phone memory''']

* [https://www.datarecovery.net/android-data-recovery.aspx '''Ace Data Recovery''']

* [https://www.datarescuelabs.com/data-recovery-toronto/android-data-recovery '''DRL Data Rescue Labs''']

* [https://www.gillware.com/data-recovery-lab '''Gillware''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-07T00:38:31Z

Steveb: /* Android */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB '''''DATA''''' cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, male micro to male A, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 

'''Steven S.''': Steve is a cybersecurity researcher who has a lot of Linux experience.

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

==== '''Hardware-based Data Recovery''' ====

'''NOTE: Not an endorsement! Research these labs on your own.'''

[https://mdrepairs.com/cell-phone-data-recovery-palo-alto-california '''MD Repairs''']

===== '''Android''' =====
* [https://www.youtube.com/watch?v=nXDUhhyY2rE '''recover data Samsung Galaxy directly from phone memory''']

* [https://www.datarecovery.net/android-data-recovery.aspx '''Ace Data Recovery''']

* [https://www.datarescuelabs.com/data-recovery-toronto/android-data-recovery '''DRL Data Rescue Labs''']

* [https://www.gillware.com/data-recovery-lab '''Gillware''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-05T23:32:34Z

Steveb: /* Required Software and Hardware / What to bring */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB '''''DATA''''' cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, male micro to male A, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 

'''Steven S.''': Steve is a cybersecurity researcher who has a lot of Linux experience.

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-05T23:31:44Z

Steveb: /* Required Software and Hardware / What to bring */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB '''''DATA''''' cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, male micro to mail A, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 

'''Steven S.''': Steve is a cybersecurity researcher who has a lot of Linux experience.

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-03T23:53:02Z

Steveb: /* Presenters */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB '''''DATA''''' cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 

'''Steven S.''': Steve is a cybersecurity researcher who has a lot of Linux experience.

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-03T15:29:31Z

Steveb: /* Assistants */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB '''''DATA''''' cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenters ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 

'''Steven S.''': Steve is a cybersecurity researcher who has a lot of Linux experience.

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-03T15:28:27Z

Steveb: /* Assistants */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB '''''DATA''''' cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenters ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 

'''Steven S.''': Steve is a cybersecurity researcher who has a lot of linux experience.

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-03T15:12:40Z

Steveb: /* Assistants */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB '''''DATA''''' cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenters ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 

'''Steve S.''': Steve is a cybersecurity researcher who has a lot of linux experience.

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-03T00:37:02Z

Steveb: /* Required Software and Hardware / What to bring */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB '''''DATA''''' cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenters ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T22:11:12Z

Steveb: /* Required Software and Hardware / What to bring */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus uses a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenters ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T21:35:41Z

Steveb: /* Required Software and Hardware / What to bring */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. Updates should have been applied before the lab and the laptop's personal firewall (like "ufw"...) should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenters ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T21:22:46Z

Steveb: /* Presenters */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. The laptop's personal firewall (like "ufw") should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenters ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 

== Assistants ==
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T21:07:24Z

Steveb: /* Required Software and Hardware / What to bring */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. The laptop's personal firewall (like "ufw") should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''the unbound documentation''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenters ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T21:06:00Z

Steveb: /* Links */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. The laptop's personal firewall (like "ufw") should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''''the unbound documentation''''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenters ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

* '''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

* [https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

* [https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

* [https://libimobiledevice.org '''libimobiledevice''']

* [https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T21:04:01Z

Steveb: /* Presenter(s) */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. The laptop's personal firewall (like "ufw") should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''''the unbound documentation''''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenters ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

'''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

[https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

[https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

[https://libimobiledevice.org '''libimobiledevice''']

[https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T20:59:55Z

Steveb: /* Links */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. The laptop's personal firewall (like "ufw") should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''''the unbound documentation''''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter(s) ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

'''Hope Pegasus Detection and Analysis Lab git'''

===== '''Android''' =====

[https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

[https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

[https://libimobiledevice.org '''libimobiledevice''']

[https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T20:58:59Z

Steveb: /* Links */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. The laptop's personal firewall (like "ufw") should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''''the unbound documentation''''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter(s) ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

===== '''Android''' =====

[https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

[https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

===== '''iOS''' =====

[https://libimobiledevice.org '''libimobiledevice''']

[https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

'''Hope Pegasus Detection and Analysis Lab git'''

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T20:57:24Z

Steveb: /* Links */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. The laptop's personal firewall (like "ufw") should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''''the unbound documentation''''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter(s) ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

[https://github.com/mvt-project/mvt '''Mobile Verification Toolkit''']

[https://github.com/mvt-project/androidqf/releases/latest '''Android Quick Forensics''']

[https://libimobiledevice.org '''libimobiledevice''']

[https://github.com/securitywithoutborders/guide-to-quick-forensics/blob/master/ios/extract.md '''Guide to iOS quick Forensics''']

'''Hope Pegasus Detection and Analysis Lab git'''

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T20:43:35Z

Steveb: /* Required Software and Hardware / What to bring */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for. The laptop's personal firewall (like "ufw") should be enabled.

* DNS for the laptop operating system should be using either '''DNS over https''' ("'''DoH'''") or "'''unbound'''" using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''''the unbound documentation''''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter(s) ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T20:40:48Z

Steveb: /* Required Software and Hardware / What to bring */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* DNS for the laptop operating system should be using either DNS over https ("DoH") or unbound using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux'''''] or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''''the unbound documentation''''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter(s) ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T20:39:21Z

Steveb: /* Required Software and Hardware / What to bring */

= Pegasus Detection and Analysis Lab =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This lab will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The lab will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this lab do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Expected Skill Level or Experience ==
Open to all skill levels, provided you are comfortable navigating your Linux or BSD laptop. There will be assistants present to provide help.

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* DNS for the operating system should be using either DNS over https ("DoH") or unbound using a trusted DNS server. C.f., [https://oneuptime.com/blog/post/2026-03-20-setup-dns-over-https-linux/view '''''How to Set Up DNS over HTTPS (DoH) on Linux''''' or [https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html '''''the unbound documentation''''']

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter(s) ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T20:25:45Z

Steveb:

Pegasus Detection and Analysis 26 Workshop

2026-08-02T20:19:14Z

Steveb:

= Pegasus Detection and Analysis workshop =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This workshop will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* Installation of python 3.X and pip 3 (or an equivalent python module installer that works for you...) on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Presenter(s) ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T20:15:47Z

Steveb: /* Presenter(s) */

= Pegasus Detection and Analysis workshop =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This workshop will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering his services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* Installation of python 3.X on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T20:15:02Z

Steveb: /* Presenter(s) */

= Pegasus Detection and Analysis workshop =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This workshop will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

'''Steve B.:''' Steve is a software developer of over 30 years and has a fair amount of experience with Linux (including Linux firewalls...). A friend who is an activist came to him with their phone and asked if he could use Amnesty International's Mobile Verification Toolkit (MVT) to see if it was compromised -and it was! And that's why he is offering my services to conduct this lab.
 
'''Jonathan Stribling-Uss:''' 
'''Matt H.:''' Matt is currently a comp sci major at CUNY Brooklyn, and has a fair amount of experience with python and django (the MVT is written in python...) 
'''Gabe R.:''' Gabe spends much of his time exploring the latest distros. He also loves meshtastic, which offers superior privacy to android. He feels it is a promising alternative to traditional text messaging as it's a decentralized platform that can be used with no registration and has a strong potential to not have personal information tied to senders and recipients. 

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* Installation of python 3.X on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T20:05:23Z

Steveb: /* Full Description */

= Pegasus Detection and Analysis workshop =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This workshop will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

Stephen Boriotti 
Jonathan Stribling-Uss 
Matthew Hopard 
Gabriel Ruiz 

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* Installation of python 3.X on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T20:01:17Z

Steveb: /* Required Software and Hardware / What to bring */

= Pegasus Detection and Analysis workshop =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This workshop will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Full Description ==

[optional: put your longer description here]

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

Stephen Boriotti 
Jonathan Stribling-Uss 
Matthew Hopard 
Gabriel Ruiz 

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* Installation of python 3.X on the laptop to be used.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T19:59:11Z

Steveb: /* Pegasus Detection and Analysis workshop */

= Pegasus Detection and Analysis workshop =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This workshop will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short overview on mobile spyware and general principles of communications security. Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Full Description ==

[optional: put your longer description here]

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

Stephen Boriotti 
Jonathan Stribling-Uss 
Matthew Hopard 
Gabriel Ruiz 

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T19:57:32Z

Steveb: /* Pegasus Detection and Analysis workshop */

= Pegasus Detection and Analysis workshop =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This workshop will be using Amnesty International’s '''Mobile Verification Toolkit''' (MVT) to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short talk on mobile spyware and general principles of communications security. To learn more about Pegasus, there are many videos, including: 60 Minutes Archive: “NSO Group’s Pegasus.” Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Full Description ==

[optional: put your longer description here]

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

Stephen Boriotti 
Jonathan Stribling-Uss 
Matthew Hopard 
Gabriel Ruiz 

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T19:56:27Z

Steveb: /* Pegasus Detection and Analysis workshop */

= Pegasus Detection and Analysis workshop =

[[File:Amnesty-international.png|thumb]]
[[File:Mvt.png|thumb]] 

== Abstract ==

This workshop will be using Amnesty International’s Mobile Verification Toolkit to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short talk on mobile spyware and general principles of communications security. To learn more about Pegasus, there are many videos, including: 60 Minutes Archive: “NSO Group’s Pegasus.” Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Full Description ==

[optional: put your longer description here]

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

Stephen Boriotti 
Jonathan Stribling-Uss 
Matthew Hopard 
Gabriel Ruiz 

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

File:Amnesty-international.png

2026-08-02T19:55:47Z

Steveb:

Amnesty International Logo

Pegasus Detection and Analysis 26 Workshop

2026-08-02T19:54:17Z

Steveb:

= Pegasus Detection and Analysis workshop =

[[File:Mvt.png|thumb]] 

== Abstract ==

This workshop will be using Amnesty International’s Mobile Verification Toolkit to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short talk on mobile spyware and general principles of communications security. To learn more about Pegasus, there are many videos, including: 60 Minutes Archive: “NSO Group’s Pegasus.” Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Full Description ==

[optional: put your longer description here]

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

Stephen Boriotti 
Jonathan Stribling-Uss 
Matthew Hopard 
Gabriel Ruiz 

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

File:Mvt.png

2026-08-02T19:51:42Z

Steveb:

Mobile Verification Toolkit

Pegasus Detection and Analysis 26 Workshop

2026-08-02T19:47:53Z

Steveb: /* Materials */

= Pegasus Detection and Analysis workshop =

== Abstract ==

This workshop will be using Amnesty International’s Mobile Verification Toolkit to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short talk on mobile spyware and general principles of communications security. To learn more about Pegasus, there are many videos, including: 60 Minutes Archive: “NSO Group’s Pegasus.” Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Full Description ==

[optional: put your longer description here]

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

Stephen Boriotti 
Jonathan Stribling-Uss 
Matthew Hopard 
Gabriel Ruiz 

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T19:46:23Z

Steveb: /* Required Software and Hardware / What to bring */

= Pegasus Detection and Analysis workshop =

== Abstract ==

This workshop will be using Amnesty International’s Mobile Verification Toolkit to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short talk on mobile spyware and general principles of communications security. To learn more about Pegasus, there are many videos, including: 60 Minutes Archive: “NSO Group’s Pegasus.” Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Full Description ==

[optional: put your longer description here]

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

Stephen Boriotti 
Jonathan Stribling-Uss 
Matthew Hopard 
Gabriel Ruiz 

== Materials ==

Any materials needed to participate in this workshop will be available at-cost. 
Observers are welcome at no cost. 
'''To do the hands-on portion for this workshop: 
'''Materials Cost: none''' 

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc.) '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone before attending.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T19:43:33Z

Steveb: /* Required Software and Hardware / What to bring */

= Pegasus Detection and Analysis workshop =

== Abstract ==

This workshop will be using Amnesty International’s Mobile Verification Toolkit to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short talk on mobile spyware and general principles of communications security. To learn more about Pegasus, there are many videos, including: 60 Minutes Archive: “NSO Group’s Pegasus.” Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Full Description ==

[optional: put your longer description here]

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

Stephen Boriotti 
Jonathan Stribling-Uss 
Matthew Hopard 
Gabriel Ruiz 

== Materials ==

Any materials needed to participate in this workshop will be available at-cost. 
Observers are welcome at no cost. 
'''To do the hands-on portion for this workshop: 
'''Materials Cost: none''' 

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source operating system (Linux or BSD...) that you have the root password for.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc. '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone.'''

'''Note: Since pegasus is a "zero-click" attack vector, aluminum foil will be provided for the more paranoid attendees, allowing them to construct a makeshift Faraday cage for their phones.''' Of course if you are a pro and have a Faraday bag, you are welcome to bring that.

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T19:38:57Z

Steveb: /* Required Software / What to bring */

= Pegasus Detection and Analysis workshop =

== Abstract ==

This workshop will be using Amnesty International’s Mobile Verification Toolkit to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short talk on mobile spyware and general principles of communications security. To learn more about Pegasus, there are many videos, including: 60 Minutes Archive: “NSO Group’s Pegasus.” Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Full Description ==

[optional: put your longer description here]

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

Stephen Boriotti 
Jonathan Stribling-Uss 
Matthew Hopard 
Gabriel Ruiz 

== Materials ==

Any materials needed to participate in this workshop will be available at-cost. 
Observers are welcome at no cost. 
'''To do the hands-on portion for this workshop: 
'''Materials Cost: none''' 

== '''Required Software and Hardware / What to bring''' ==

* A fully-charged laptop that uses an open source laptop (Linux or BSD...) that you have the root password for.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc. '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone.'''

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T19:38:12Z

Steveb: /* Required Software / What to bring */

= Pegasus Detection and Analysis workshop =

== Abstract ==

This workshop will be using Amnesty International’s Mobile Verification Toolkit to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short talk on mobile spyware and general principles of communications security. To learn more about Pegasus, there are many videos, including: 60 Minutes Archive: “NSO Group’s Pegasus.” Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Full Description ==

[optional: put your longer description here]

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

Stephen Boriotti 
Jonathan Stribling-Uss 
Matthew Hopard 
Gabriel Ruiz 

== Materials ==

Any materials needed to participate in this workshop will be available at-cost. 
Observers are welcome at no cost. 
'''To do the hands-on portion for this workshop: 
'''Materials Cost: none''' 

== '''Required Software / What to bring''' ==

* A fully-charged laptop that uses an open source laptop (Linux or BSD...) that you have the root password for.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc. '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone.'''

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T19:36:34Z

Steveb: /* Required Software / What to bring */

= Pegasus Detection and Analysis workshop =

== Abstract ==

This workshop will be using Amnesty International’s Mobile Verification Toolkit to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short talk on mobile spyware and general principles of communications security. To learn more about Pegasus, there are many videos, including: 60 Minutes Archive: “NSO Group’s Pegasus.” Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Full Description ==

[optional: put your longer description here]

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

Stephen Boriotti 
Jonathan Stribling-Uss 
Matthew Hopard 
Gabriel Ruiz 

== Materials ==

Any materials needed to participate in this workshop will be available at-cost. 
Observers are welcome at no cost. 
'''To do the hands-on portion for this workshop: 
'''Materials Cost: none''' 

== '''Required Software / What to bring''' ==

* A fully-charged laptop that uses an open source laptop (Linux or BSD...) that you have the root password for.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc. '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone.'''

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T19:34:27Z

Steveb: /* Required Software / What to bring */

= Pegasus Detection and Analysis workshop =

== Abstract ==

This workshop will be using Amnesty International’s Mobile Verification Toolkit to see if your Android or iOS has been compromised by Pegasus. The workshop will open with a short talk on mobile spyware and general principles of communications security. To learn more about Pegasus, there are many videos, including: 60 Minutes Archive: “NSO Group’s Pegasus.” Note: The presenters of this workshop do not consent to mechanical recording of their presentation, but feel free to take notes.

== Day / Time / Location ==

Day 3, Sunday, 16-August-2026, 12:30pm - 3:30pm 
Workshop A (Sutton Place, third floor)

== Full Description ==

[optional: put your longer description here]

== Registration -- NOT required ==

'''NOTE: You do NOT need to register to take this workshop -- please show up early to ensure a seat at the WORKSHOP A room (in Sutton Place, on the third floor).''' 

== Presenter(s) ==

Stephen Boriotti 
Jonathan Stribling-Uss 
Matthew Hopard 
Gabriel Ruiz 

== Materials ==

Any materials needed to participate in this workshop will be available at-cost. 
Observers are welcome at no cost. 
'''To do the hands-on portion for this workshop: 
'''Materials Cost: none''' 

== Required Software / What to bring ==

* A fully-charged laptop that uses an open source laptop (Linux or BSD...) that you have the root password for.

* A fully-charged Android or iOS phone that you want to diagnose and that you have the password for.

* A USB DATA cable (not a charging one...) of '''''KNOWN PROVENANCE!''''' (a commercial brand you bought from microcenter, etc.) Check that the gender and USB types will be appropriate for connecting the laptop to the phone (e.g., male A to male C, male C to male C, etc. '''It is recommended that you make sure you have a ''data'' cable by attempting a file transfer to/from your laptop to the phone.'''

== Links ==

===== '''Recommended Videos''' =====

* [https://www.youtube.com/watch?v=Pc-rWN-k4Xo '''60 Minutes Archive: NSO Group's "Pegasus"''']

* [https://www.youtube.com/watch?v=lfOgm1IcBd0 '''Al Jazeera: How Israeli technology became one of the world’s most feared spyware''']

* [https://www.youtube.com/watch?v=6ZVj1_SE4Mo '''Frontline: Exposing Pegasus Part One''']

* [https://www.youtube.com/watch?v=xYMWTXIkANM '''Frontline: Exposing Pegasus Part Two''']

* [https://www.youtube.com/watch?v=I5WjTTi67BE '''Snowden on Pegasus spyware: 'This is an industry that should not exist'''']

Pegasus Detection and Analysis 26 Workshop

2026-08-02T19:20:30Z

Steveb: