The "readability" of this book is more a "3"... but the importance is a "five"... so I guess that evens out to a four star rating.
Chasing Shadows is almost an autobiography of "Citizen Lab", which the author helped to found, which is based at U of T in Toronto.
The "Citizen Lab" is a non-profit organization which tries to fight the use of spyware to illegally hack or tap the phones of people around the world. On page 152 Deibert writes:
I wanted to pursue and expose clandestine operations that undermine human rights and public accountability, no matter where they are found or however powerful those behind them may be.
Although other private companies do the same thing (and most also have roots in Israel), a company called NSO group sells their "Pegasus" spyware to (almost) any horrendous government (or company) in the world, that wants to spy on dissenters, journalists, lawyers, rebel rousers, or even Saudi princesses attempting to run away from their fathers . I say "almost" because on page 322 the author notes that Israel would NOT allow the sale of Pegasus to the Russians, but up until that point in the book, seeing that NSO seemed to be selling their product to every dictatorship in the world, I was thinking "is there ANYONE these people won't sell their spyware to?"
Citizen Lab is now one of a few groups, including one out of Amnesty International, which people will turn to when they feel like they've been hacked, and Citizen Lab will analyze their phone and be able to say things like "yes you were hacked on Oct. 5 2017 by this type of spyware attack, and ever since then the Saudi government has seen every single text message you've sent and that's why all your friends back in Saudi Arabia have been arrested."
And the "hacking" is getting insane. As described on page 306, John Scott-Railton from Citizen Lab, stated in 2022 to a U.S. House Intelligence Committee hearing that this isn't about sitting in a cafe and connecting to an unsecured wifi. Your phone can be on your bedside table at two in the morning. One minute your phone is clean; the next minute the data is silently streaming to an adversary a continent away. You see nothing.
So... picture a world where any individual, company, or government, who wishes to spy on someone, can purchase spyware basically off the shelf from a company like NSO. And then... accept that this spyware is being turned on lawyers, investigative journalists, the Dalai Llama (not joking!), i.e. people fighting for democracy and "the truth"... and then this spyware allows these repressive governments to arrest and imprison these people, or, in the case of Jamal Khashoggi, the Saudi journalist, strangle him to death in Turkey and then dismember him, and then also hack his fiancee's phone to see what she gets up to.
I mean... good God. :(
I have to admit, I find the work that the Citizen Lab does, in trying to protect us all from this level of cyber warfare, to be heroic. These are simply horrendous attacks on civil liberty and on democracy itself, so I would encourage anyone to learn more about Citizen Lab and it's allies in this war.
As far as this book goes - I hate to say it, and I can't quite put my finger on why this is true - but it is close to unreadable. It's just too much stuff and even though in hindsight, you can see why the chapters are organized the way they are, as you read the book, it just seems like the same old mess being regurgitated over and over and over again endlessly.
It's almost as though this should be a tight one-hour film documentary - not a full book?
Having said that, I'll finish with some notes I made here and there:
- the Saudi government spied on and hacked female activist Loujain al-Hathloul, furious at her for various things, but one being her attempts to prove that Saudi females should be allowed to drive cars. After capturing her, partly with the Pegasus software, she was eventually imprisoned:
She was repeatedly tortured and subjected to intense interrogation, including the use of electric shocks, waterboarding, flogging, and threats of rape and death (page 233).
- in El Salvador, strongman Nayib Bukele uses Pegasus against anyone who shows resistance to his tyrannical rule. As far as media in general, in El Salvador , his strategy (as documented in a 2022 US State Department Assessment) is to flood El Salvador with propaganda, demonize the institutions charged with debunking that propaganda - the free press and civil society - dominant public narratives, and repress dissent (page 246).
- Spain has had a long-term espionage campaign against Catalan.
In all our years studying cyber espionage, what we found in Spain was among the most audacious spying operations in scope and scale - an attempt to subject a large cross-section of Catalan civil society to targeted surveillance. [ ] Every Catalan president since 2010 had been hacked while in office, before election, or after retiring (pages 264/65).
- this is a good one! in Mexico, three obesity-prevention officials, who were supportive of a national tax on soda (pop) were hacked due to their work to reduce the consumption of sugary drinks in Mexico! And as far as Deibert could tell, the "hacks" of these three officials happened right after the President of Coca Cola called the Mexican president to complain about the soda tax (Page 187).
- the UK in general, and Tony Blair in particular, come off really badly as "butlers to the world" and sell outs to Saudi princes: the establishment has profited by serving the interests of dictators, kleptocrats, and oligarchs who take advantage of the country's favorable tax laws, exorbitant real estate market, and entourage of costly lawyers and PR consultants to launder their assets and enhance their public image (page 205)
Okay - I gotta stop somewhere... I guess I'll stop here... but the list is endless.
I didn't even mention the Saudi princess!