this post was submitted on 16 Oct 2026
99 points (99.0% liked)

Canada

12553 readers
1094 users here now

What's going on Canada?



Related Communities


🍁 Meta


πŸ—ΊοΈ Provinces / Territories


πŸ™οΈ Cities / Local Communities

Sorted alphabetically by city name.


πŸ’ Sports

Baseball

Basketball

Curling

Hockey

Soccer


πŸ’» Schools / Universities

Sorted by province, then by total full-time enrolment.


πŸ’΅ Finance, Shopping, Sales


πŸ—£οΈ Politics


🍁 Social / Culture


🌐 Other Relevant Communities


Rules

  1. Keep the original title when submitting an article. You can put your own commentary in the body of the post or in the comment section.

  2. Provide sources when making a claim. Do your research or google it doesn't cut it. The one making the claim is responsible for backing it.

Reminder that the rules for lemmy.ca also apply here. See the sidebar on the homepage: lemmy.ca


founded 5 years ago
MODERATORS
all 20 comments
sorted by: hot top controversial new old
[–] Rentlar@lemmy.ca 7 points 3 days ago

In a way then you can say online advertisement agencies are an arm of the Israeli spy agency.

[–] DeadEndLink@lemmy.ca 12 points 5 days ago* (last edited 5 days ago) (1 children)

"Zero-click" means that users don't need to click on a link or actively do anything for their devices to be targeted with spyware.

"The moment [the ad] is rendered, their device can be hacked, so there's really no defence against this, short of not using a smart phone or [not] connecting to the internet," . Such infections can be hard to detect.

When spyware is implanted, the operator behind the hack can take control of the device. "They can turn on the camera, turn on the microphone, and track someone's geolocation, so it's kind of like God-like capabilities,"

----------------------------------

Discussion on grapheneos forum regarding this. Posted 5 days ago:

https://discuss.grapheneos.org/d/42850-gosvanadium-vs-zero-click-malware-from-targeted-ads-via-javascript

[–] Rat_in_a_hat@lemmy.ca 2 points 3 days ago

The moment [the ad] is rendered, their device can be hacked, so there's really no defence against this, short of not using a smart phone or [not] connecting to the internet

I've looked at the discussion at the GOS but I'm still confused on whether AdBlocker would work. They say that if there is a persistent new ad, that it can take the ad blocker sometime to add it to the filter.

Maybe I'm not 100% how an ad blocker works then because I thought it prevents the ad window from loading entirely and ad windows are correctly labelled as ads? Or do they work by filtering what the ad window is trying to load data from?

[–] Rat_in_a_hat@lemmy.ca 2 points 3 days ago

It's not just Canadian researchers either and Israeli exploiting zero-click malware is common (they've done the same with WhatsApp and Meta still hasn't closed that gap).

[–] betanumerus@lemmy.ca 2 points 3 days ago* (last edited 3 days ago) (3 children)

People should have the option to remain on their own country's internet (Canadian websites and downloads only), or to allow foreign and alien websites and companies. I want this option each time I turn on my computer.

[–] Rat_in_a_hat@lemmy.ca 5 points 3 days ago* (last edited 3 days ago) (1 children)

That's not how ads work on the internet. You have local advertising companies that are paid by Israel to push them based on whatever algorithm is held on you (and that's if Israel wants to use the algorithm or just blast the ad to everyone like they do on Google oftentimes).

Websites don't have a "country" unless it's specified at the domain level, but that's hardly an obstacle because a local domain or .com domain could be bought very easily.

Considering that this is a zero-click malware, it means that it just has to show up on the website you're using and has nothing to do with the originating country.

[–] betanumerus@lemmy.ca 2 points 3 days ago (1 children)

Yep, all websites and ads should be screened.

[–] Rat_in_a_hat@lemmy.ca 1 points 3 days ago (1 children)

Ads shouldn't be allowed considering that they're a security risk by bad actors

[–] yes_this_time@lemmy.world 2 points 3 days ago

Or they can just be first party served images. they don't need to be 3rd party served Javascript.

[–] BillyTheKid2@lemmy.ca 2 points 3 days ago (1 children)

I do this with several of my websites. Either geofence or block non Canadian ips.

It's not perfect, but it keeps the spam away from me.

[–] betanumerus@lemmy.ca 1 points 2 days ago (1 children)

Why not create a post explaining to everyone (not just me) your method to reduce spam.

[–] BillyTheKid2@lemmy.ca 1 points 1 day ago

Sure! I geofence the users. Technically I don't reduce spam, but only people from the spammers country can see it. I treat VPNs as their own country.

[–] nik282000@lemmy.ca 3 points 3 days ago (1 children)

So do it. Get a list of the IP ranges assigned to Canada and whitelist them, block connections to all other IPs.

[–] betanumerus@lemmy.ca 3 points 3 days ago (1 children)

I suspect that number is too large for a guy to do this alone.

[–] nik282000@lemmy.ca 2 points 3 days ago (1 children)

No, it's really not. You can get lists of which IP ranges are assigned to which country (helps with blocking bots). Haveing a whitelist of only Canadian IPs is pretty trivial.

[–] betanumerus@lemmy.ca 2 points 3 days ago (1 children)

Alright then, I’ll ask Grandma.

[–] nik282000@lemmy.ca 2 points 3 days ago (2 children)

https://ipinfo.io/countries/ca

Grab the CSV and use it as a whitelist for your firewall. If you're on lemmy it's well within your wheelhouse. Even if it's not, grany could ask chatgpt to slop it together for you.

[–] TheSecondVariety@lemmy.ca 2 points 2 days ago

If you're on lemmy it's well within your wheelhouse.

Sigh... ya probably.

[–] Metris@lemmy.ca 2 points 5 days ago

Headline is working so hard... Obviously they did it or the research wouldn't be in the CBC.