Hacked mobile phone encryption system

[Объединенное Детективное Бюро]

The German engineer announced that he was able to break into the encryption system of the GSM cellular standard and was able to listen to any phone calls. A computer security specialist said that GSM phones, which are used by most mobile owners around the world, can be tapped without much difficulty. This was announced by researcher Karsten Nohl at the Chaos Communication Conference in Berlin, PC World reports. According to him, for listening to anyone, you only need equipment worth several thousand dollars and some software tools that are freely available on the Web. Karsten Noll collected about 2 terabytes of special tables that can be used to determine the encryption keys used in telephone calls or SMS messages in the GSM system. The researcher noted that he did not release a device for hacking GSM, as it is illegal in many countries, but the data he used was in the public domain. The link is not valid

 

[Матушкин Андрей Николаевич]

Thank!

 

[Игорь Коракс]

GSM security system is out of date

A group of German experts on security of transmission of encoded information from Security Research Labs has published interesting information about the real vulnerability of all telephone devices that work with the GSM digital mobile standard GSM worldwide. Billions of mobile phone users are convenient carriers of confidential information, which can be accessed by hijacking technology. A German company reported on a study of the capabilities of these technologies at a convention on network security. The results of the report were alarming.

The motive for detailed studies of the vulnerabilities of GSM technology is the huge prevalence of the latter, as well as outdated security standards for voice and text messages, which formed the basis for the existence of GSM communications in its current state. And this state in the modern developing world of information technologies no longer meets the needs of users, because they consciously do not want to be listened to or read by someone else.

This was succeeded by the head of Security Research Labs, Karsten Nohl, in an experimental “conversation” of users. Nol intercepted voice and text conversations, posing as another user in order to continue the dialogue and transmit text information. But the main feature of the director’s ability to “eavesdrop” is the use of a seven-year-old Motorola mobile phone for these purposes in conjunction with decryption software that is freely available on the Internet.

From the decrypted standard electronic signal of A5 / 1 format between the phone and the mobile operator, the received information can be instructions like “Wait,” “I have a call for you,” and so on. In addition, GSM data can be recorded in open space using, for example, a specially programmed radio, such as USRP. One of the programs of this type can be considered GnuRadio. The system provides all the necessary tools for recording channels, while the Airprobe GSM receiver decodes scenarios in which encryption is not used or where this key to encrypt voice traffic is known.

Mobile carriers could solve the security problems of the encryption algorithm by updating their software. And while this does not happen, the exchange protection mechanism, in the opinion of the expert, has been treading water and has not undergone significant changes for the better for several years now. This tendency to maintain insecurity will continue until the operators move away from the conservative course of standard technological installations.

Already, there are patches that complicate attempts to use protocol weaknesses for other purposes. And the actions to implement the update should be perceived by GSM-operators as priority tasks. If we talk about the long term, then, according to researchers, even developing all kinds of patches, GSM (2G) will not provide a higher level of security in comparison with UMTS (3G) and LTE (4G) technology, and therefore the latter may be preferable .

Source [DLMURL] https://www.3dnews.ru [/ DLMURL]

 

[Частный детектив Севастополь ОДБ]

Thanks, interesting and useful.

 

[Евгений СБ]

Thank.

 

[Детективное агентство Тула]

Curious and informative.

 

[Орлан]

thanks for the stuff.

 

[Частный детектив Оренбург]

In my opinion, this material is of particular interest. Many thanks to Igor "Corax" for the information.