[2521] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: TIME Magazine on GSM cell phone crack

daemon@ATHENA.MIT.EDU (Eric Blossom)
Wed Apr 15 19:23:21 1998

Date: Wed, 15 Apr 1998 14:53:32 -0700
From: Eric Blossom <eb@comsec.com>
To: daw@cs.berkeley.edu
Cc: cryptech@Mcs.Net, cryptography@c2.net
In-Reply-To: <199804150122.SAA02021@joseph.cs.berkeley.edu> (message from David Wagner on Tue, 14 Apr 1998 18:22:46 -0700 (PDT))

> So it's not clear if there are any circumstances under which two
> identical phones could be on the network at the same time; but I
> don't think that's really relevant to fraud management.
>   
> For fraud, the critical question is whether any ``giant red flashing
> lights'' go off in the provider's fraud center when two duplicate phones
> are in use -- and it's not clear whether any GSM providers actually
> have such alarms in place.
> 
> Remember that the GSM system was *designed* so you could use your
> SIM with multiple different handsets, as you travelled.  This doesn't
> rule out the possibility of fraud-detection; but it makes it slightly
> more plausible that a cloned SIM might be able to escape detection.
> 
> Maybe someone who knows more about GSM networks can help us figure
> out whether the above speculations are accurate.

Why don't you just try it out?

I assume that you've got a SIM emulator that you can use to emulate
the cloned SIM.  See what happens.  Shouldn't take too long to find out.

Eric

home help back first fref pref prev next nref lref last post