[2521] in cryptography@c2.net mail archive
Re: TIME Magazine on GSM cell phone crack
daemon@ATHENA.MIT.EDU (Eric Blossom)
Wed Apr 15 19:23:21 1998
Date: Wed, 15 Apr 1998 14:53:32 -0700
From: Eric Blossom <eb@comsec.com>
To: daw@cs.berkeley.edu
Cc: cryptech@Mcs.Net, cryptography@c2.net
In-Reply-To: <199804150122.SAA02021@joseph.cs.berkeley.edu> (message from David Wagner on Tue, 14 Apr 1998 18:22:46 -0700 (PDT))
> So it's not clear if there are any circumstances under which two
> identical phones could be on the network at the same time; but I
> don't think that's really relevant to fraud management.
>
> For fraud, the critical question is whether any ``giant red flashing
> lights'' go off in the provider's fraud center when two duplicate phones
> are in use -- and it's not clear whether any GSM providers actually
> have such alarms in place.
>
> Remember that the GSM system was *designed* so you could use your
> SIM with multiple different handsets, as you travelled. This doesn't
> rule out the possibility of fraud-detection; but it makes it slightly
> more plausible that a cloned SIM might be able to escape detection.
>
> Maybe someone who knows more about GSM networks can help us figure
> out whether the above speculations are accurate.
Why don't you just try it out?
I assume that you've got a SIM emulator that you can use to emulate
the cloned SIM. See what happens. Shouldn't take too long to find out.
Eric