re: [Full-Disclosure] Insecurity in Finnish parlament (computers)

Olli Haukkovaara cruzan at gmail.com
Mon Feb 20 08:52:01 GMT 2006
>Or can someone point me some GSM base station model that supports A5/3
>? At least I googled a lot, but could not find any...

Its not about base stations. The encryption/decryption is not done in base stations, but in message centers. Sometimes, true, they are located in same spot. But they are still not the same thing, but two different components of the GSM network.

BTW. Talking about insecurity of Finnish parlament and TeliaSonera:s GSM, take a look at these (sorry, only in Finnish) latest issues about TeliaSonera having no idea about security whatsoever. Luckily, they are moving to their GSM:s on Elisa networks... :)
http://www.digitoday.fi/showPage.php?page_id=14&news_id=53413
http://www.digitoday.fi/showPage.php?page_id=14&news_id=53434



--
My computer security & privacy related homepage
http://www.markusjansson.net
Use HushTools or GnuPG/PGP to encrypt any email
before sending it to me to protect our privacy.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Relevant Pages

  • Re: [Full-Disclosure] Insecurity in Finnish parlament (computers)
    ... >authorities switched GSM crypto off from base stations ... >in GSM is done in between MS and BS ... Sometimes MC is in same location as BS, but sometimes not (for example, in countryside where there are fewer BS and its impossible to physically secure them so tightly, so the encryption/decryption is done in more secure enviroment in message center, behind some datalinks). ...
    (Full-Disclosure)
  • Re: Auto update of time and date (Vodafone)
    ... :: itself if your handset supports it. ... In the USA GSM networks send a GSM NITZ ... GSM base stations don't need to know what time it is to operate, ...
    (uk.telecom.mobile)
  • RE: Questions on GSM Penetration test
    ... as not many people on this planet know how exactly GSM network works, and those people are building it.. ... Penetration test of GSM net should be done as a normal pen-test, but I suppose insider attack is where can be done a lot. ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: What the FUCK???
    ... It's too bad VZW ... isn't GSM that way people would have the best GSM network here in the US and ... > can't speak for other places, but here, Verizon is THE best. ...
    (alt.cellular.verizon)
  • Re: using American Palm Treo 600 with O2 sim card
    ... If the phone is CDMA then you defnitely won't be able to use it with O2 or ... any other GSM network. ... Hmm...in that case then the phone is definitely GSM and most likely ... Peter <X-Files fan> ...
    (uk.telecom.mobile)