[28869] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: Greek cellular wiretapping scandal

daemon@ATHENA.MIT.EDU (Florian Weimer)
Sun Jun 25 10:19:34 2006

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
From: Florian Weimer <fw@deneb.enyo.de>
To: "Steven M. Bellovin" <smb@cs.columbia.edu>
Cc: cryptography@metzdowd.com
Date: Sat, 24 Jun 2006 09:49:02 +0200
In-Reply-To: <20060621144208.8ae6e99c.smb@cs.columbia.edu> (Steven
	M. Bellovin's message of "Wed, 21 Jun 2006 14:42:08 -0400")

* Steven M. Bellovin:

> I have more than a passing aquaintance with the complexity of phone
> switch software; doing that was *hard* for anyone, especially anyone
> not a switch developer.

Isn't Ericsson's switching software written in Erlang, is highly
modular and officially supports run-time code replacement (like many
COBOL systems, but unlike, say, traditional IOS)?  This means that at
least no "rootkit" is needed.  You just replace the parts of the
system you are interested in using the standard system interfaces
intended for this purpose.  Of course, the complexity of the attack is
still significant.

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post