Fake Software Updates Could Be Spyware

From the Wall Street Journal

A surveillance company, Gamma International UK, LTD has bragged that they can infect a target's computer with their spyware called FinFisher that acts just like an iTunes update or other software updates.  They say they can make a website claim that the target's computer doesn't have the right version of whatever software (like Flash or whatever) and then the target will download their fake update and infect their own computer.

They are selling this software to law enforcement.

I would just assume you're being spied on, and keep your private communication as unelectronic as possible.  i.e. take the battery out of your cell phone, or leave it behind, etc. and just have an in-person conversation far from street lamps, cars, buildings, etc.  Then all you have to worry about is if the person you are speaking to is wired, or if there's someone else or some battery powered surveillance equipment hiding in the bushes nearby.

For when you can't avoid the electronics, you can encrypt stuff, but if there's a key logger on your computer, encryption won't do you much good.  In one of your unelectronic moments you could agree on a few code words with your friends.  Or you could switch to Linux on a different computer for all your private stuff, and you might get around a lot of that spyware crap.  Especially if you are running your OS from a CD-Rom instead of the hard drive.  That way every time you boot up, you've got the original OS with no updates or other moss it might have gathered.  I recommend SLAX. It's small enough to fit on a CD-Rom.

If you don't want hackers to get your private files, keep them on a computer that is never on the Internet.  You can certainly walk or mail a hard copy of your bookkeeping program backup to your accountant's place a couple times a year.  There is no good reason to have your financial information on anything that can go online.  Same with your secret plans for world domination.  Of course your accountant might be online.