Re: Openmoko GTA06

2014-04-13 Thread Norayr Chilingarian

04/12/14 01:41 -ում, Michael Spacefalcon-ը գրել է:

Joerg R. and others on this list have already explained quite well the
pointlessness of those IMEI changes when it comes to privacy.

If you mean this

call numbers that are getting called by 0.5mio users per day).
Simply compare who called number A during last year, and who also called
number B during last year already reduces number of individuals to max 
10.
Then check which of those 10 individuals doesn't use her/his old IMEI 
anymore
and here you are: old IMEI linked to new fake IMEI. With only 2 calls 
done
from your new SIM and IMEI to your wife and your mother (or any other 
 arbitrary two normal phone numbers you called before)


then this doesn't relate to me, if I don't use calls/sms and I use only 
Internet. Then they need to filter who uses same Internet services as 
me. This case it's much harder to make sure that me is me, right?


___
Openmoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: Openmoko GTA06

2014-04-13 Thread joerg Reisenweber
On Sun 13 April 2014 15:26:34 Norayr Chilingarian wrote:
 Then they need to filter who uses same Internet services as 
 me. This case it's much harder to make sure that me is me, right?

Nope, since your internet traffic is a way better richer fingerprint of you 
than 
the numbers you could call (or don't, according to your planned use)
Logging in on a single forum or webmail-service or polling your mail via POP3 
or registering with a VoIP registrar already suffices. Heck even a more or less 
arbitrary cookie left in your browser suffices.
And as already explained a IMEI popping up out of nowhere is *always* highly 
suspicious and will usually already suffice to put you into the group of those 
20 subjects that currently frequently use fake changing IMEIs. For the rest a 
rough geolocation will do to identify you as subject #8 of those 20 subjects.
It's like you running the streets wearing a gorilla mask, and then changing 
your gorilla mask to a pig mask and then 100m further you swap that for a 
donkey mask. *Everybody* will look at you and there's not much doubt who you 
are, despite you never showing your real face.
OOOH, I almost forgot: tell me which internet service you may use without a 
SIM you paid for. They will probably die from laughing about you when you 
constantly swap your IMEI without constantly swapping your SIM *and your 
geolocation* exactly same time.

/j
-- 
()  ascii ribbon campaign - against html e-mail 
/\  www.asciiribbon.org   - against proprietary attachments
(alas the above page got scrapped due to resignation(!!), so here some 
supplementary links:)
http://www.georgedillon.com/web/html_email_is_evil.shtml  
http://www.nonhtmlmail.org/campaign.html
http://www.georgedillon.com/web/html_email_is_evil_still.shtml
http://www.gerstbach.at/2004/ascii/ (German)


signature.asc
Description: This is a digitally signed message part.
___
Openmoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community


Re: Openmoko GTA06

2014-04-13 Thread Norayr Chilingarian

04/13/14 03:50 -ում, joerg Reisenweber-ը գրել է:

On Sun 13 April 2014 15:26:34 Norayr Chilingarian wrote:

Then they need to filter who uses same Internet services as
me. This case it's much harder to make sure that me is me, right?


Nope, since your internet traffic is a way better richer fingerprint of you than
the numbers you could call (or don't, according to your planned use)
Logging in on a single forum or webmail-service or polling your mail via POP3
or registering with a VoIP registrar already suffices. Heck even a more or less
arbitrary cookie left in your browser suffices.
And as already explained a IMEI popping up out of nowhere is *always* highly
suspicious and will usually already suffice to put you into the group of those
20 subjects that currently frequently use fake changing IMEIs. For the rest a
rough geolocation will do to identify you as subject #8 of those 20 subjects.
It's like you running the streets wearing a gorilla mask, and then changing
your gorilla mask to a pig mask and then 100m further you swap that for a
donkey mask. *Everybody* will look at you and there's not much doubt who you
are, despite you never showing your real face.
OOOH, I almost forgot: tell me which internet service you may use without a
SIM you paid for. They will probably die from laughing about you when you
constantly swap your IMEI without constantly swapping your SIM *and your
geolocation* exactly same time.

/j



Okay, I agree with all you written.
No doubt, when doing IMEI change, many details should be considered. And 
no doubt, if mail/chat etc service providers cooperate with your local 
intelligence agency, then you are even more vulnerable.


___
Openmoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community