Re: Cell Phone Encryption/Security in The USA

From: Lassi Hippeläinen (lahippel_at_ieee.orgasm-research.invalid)
Date: 05/30/03 

Date: Fri, 30 May 2003 09:50:13 GMT

clem wrote:
>
> Cell phone security: Non-existent or pretty good?
>
> This is a basic question that has me baffled after doing some googling
> around the net... yeah and its probably OT, too...

Security is a complex thing. It also depends on which phone technology
you happen to use. I don't know of any compilations of security issues
that would cover the field :-(

As a rule, anything older than GSM is broken, because authentication is
broken. GSM introduced the SIM card that separates phone and user
identities, and that provides an extra layer of security.

But GSM isn't secure either, if the enemy is determined. You have to run
an ecrypted session over it, which in practice excludes voice over IP,
because there is no standard way of doing it with only 14400 kbps.

-- Lassi

Relevant Pages

  • RE: Questions on GSM Penetration test
    ... The pentest of a GSM network does involve "normal" security work (e.g. ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: GPRS vulnerabilities
    ... >there are documented cases of the GPRS backbone being ... There are documented cases of GPRS security exposure seen from the MS, ... GSM operators are like banks, ... The vulnerabilities we exposed were not GPRS-specific, ...
    (Pen-Test)
  • Re: RE: Questions on GSM Penetration test - Security Associates
    ... GSM secuirity has improved alot since the early 90's when the analog ... >GSM security is generally not very well understood by your average ... >The pentest of a GSM network does involve "normal" security work (e.g. ... >>automatically alerts you to the latest security vulnerabilities please see: ...
    (Pen-Test)
  • Re: Cell Phone Encryption/Security in The USA
    ... I don't know of any compilations of security issues ... GSM introduced the SIM card that separates phone and user ... >But GSM isn't secure either, ... phone conversations are not secure and that it is trivial to listen to ...
    (sci.crypt)
  • RE: Penetration test of 1 IP address
    ... basic question that should have gone to security-basics or some other ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Up to 75% of cyber attacks are ...
    (Pen-Test)