[hn8788]

It could mean that NSO controls the infrastructure that manages the tool, but that they don't actually collect the data themselves. So what they said could technically be true if all they do is manage the infrastructure that enables their clients to do the collection of data.

[esens]

But do they have access to the phone numbers that their customers are targeting? That seems by itself to contradict their statement ("nor has any access to any kind of data of its customers") right there.

Something isn't adding up.

[JumpCrisscross]

> Something isn't adding up

It's bullshit at best.

If we assume they aren't lying, which is generous given their track record, it could be that they provide the tools and infrastructure to collect the data, but don't instruct the software to collect the data. Sort of like if I had a loaded gun and told you I would point and shoot it where you told me to, and then argued that I didn't technically make the decision. It's technically true and complete bullshit.

[lupire]

But then where did the list of numbers come from, if there is no "access"?

[hn8788]

They could be lying, or they could just be trying to use weasel words. "Data" could be referring to collected data, and they consider phone numbers "metadata". I haven't been following the story though, so I don't know which is more likely.

[srswtf123]

Seems more likely they’re lying.

[breakingcups]

How does that clear with "NSO does not operate its technology" though?