FYI, a factory reset would NOT fix your issue if in fact you were targeted using an NSA selector. This is because of the following:
1) Your SIM card runs code that is blindly trusted by Android and not audited by Google. The code is in the SIM card, not on the phone. 2) If you remain selected, you will be popped every time your mobile provider identified you on the network, even if you replace the SIM and even purchase a new phone. On Tue, Jul 29, 2014 at 12:10 PM, Kristian Erik Hermansen <[email protected]> wrote: > Mobile network attack evolution [30c3] > > Attacking SIM card vulnerabilities via specially crafted SMS messages... > > https://www.youtube.com/watch?v=5B7XyVWgoxg#t=2m04s > > On Tue, Jul 29, 2014 at 10:20 AM, Jeremy Bothan <[email protected]> wrote: >> Thanks for your reply. R u serious on this? What would mean to be tagged by >> them and would a factory reset do any good? And finally - do you have any >> stuff to read from that CCC-meeting you were mentioning? >> >> thx a lot and regards, >> je >> >> Am Dienstag, 29. Juli 2014 18:24:40 UTC+2 schrieb Kristian Hermansen: >>> >>> NSA tagged you, probably via a SIM card vulnerability. At CCC this year in >>> Germany, there were numerous such vectors discussed publicly... >>> >>> -- >>> Regards, >>> >>> Kristian Erik Hermansen >>> https://www.linkedin.com/in/kristianhermansen >>> >>> On Jul 29, 2014 6:07 AM, "Jeremy Bothan" <[email protected]> wrote: >>>> >>>> Hi everyone, >>>> >>>> I've gotta Nexus 4 with Android 4.4 running. My phone is encrypted which >>>> means - when I turn it on, I have to enter my encryption code in order to >>>> unlock the phone and start the booting process. After that has finished, I >>>> am asked to type in my SIM-PIN. So much for the *usual* way. >>>> >>>> Couple of month ago (guess under Android 4.1) my phone started acting >>>> oddly: sometimes, when I put it on, it shows me a dialog to type in my >>>> SIM-PIN - that BEFORE I am asked to enter the code to unlock the phone. >>>> I've >>>> attached a screenshot. I find that strange since I was under the impression >>>> that nothing can really run until the phone has been unlocked via the >>>> correct encryption/decryption-code. The dialog almost looks like the one >>>> presented after the booting-process is over. The background however is >>>> completely black and one can only put in the code or shut the phone down. >>>> >>>> So I am wondering - whats wrong with my phone? Is this just a bug or >>>> might it be something serious - like spy software or anything else? How to >>>> find out anyways? Any hint and help would be appreciated. >>>> >>>> Thx a lot, >>>> Jeremy >>>> >>>> -- >>>> You received this message because you are subscribed to the Google Groups >>>> "Android Security Discussions" group. >>>> To unsubscribe from this group and stop receiving emails from it, send an >>>> email to [email protected]. >>>> To post to this group, send email to [email protected]. >>>> >>>> Visit this group at >>>> http://groups.google.com/group/android-security-discuss. >>>> For more options, visit https://groups.google.com/d/optout. >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Android Security Discussions" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To post to this group, send email to >> [email protected]. >> Visit this group at http://groups.google.com/group/android-security-discuss. >> For more options, visit https://groups.google.com/d/optout. > > > > -- > Regards, > > Kristian Erik Hermansen > https://www.linkedin.com/in/kristianhermansen > https://google.com/+KristianHermansen -- Regards, Kristian Erik Hermansen https://www.linkedin.com/in/kristianhermansen https://google.com/+KristianHermansen -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/android-security-discuss. For more options, visit https://groups.google.com/d/optout.
