Everyone has known this was possible for some time, it is now official

The white paper (HowTo)of the professor is here http://cryptome.org/gsm-crack-bbk.pdf

The article from Reuters is here
http://www.reuters.com/newsArticle.jhtml;jsessionid=DD2CATBPW33HQCRBAELCFEY?type=technologyNews&storyID=3380775
(with quote below)

The register also has an article here http://www.theregister.co.uk/content/55/32653.html

Don't say we did not warn you!  Big Brother is listening!!!

TEL AVIV (Reuters) - An Israeli scientist said on Wednesday his team had found a way to break into mobile phone calls on ubiquitous GSM networks, potentially allowing eavesdroppers to listen in on conversations and even take on a caller's identity.

The GSM Association, representing companies which depend on the world's largest mobile system, which is used by more than 860 million consumers in 197 countries, confirmed the security hole but said it would be expensive and complicated to exploit.

Professor Eli Biham of the Technion Institute in Haifa said he was shocked when doctoral student Elad Barkan told him he had found a fundamental error in the GSM (Global System for Mobile communications) code.

"We can listen in to a call while it is still at the ringing stage and within a fraction of a second know everything about the user," Biham said. "Then we can listen in to the call."

"Using a special device it's possible to steal calls and impersonate callers in the middle of a call as it's happening," he said. GSM code writers made a mistake in giving high priority to call quality, correcting for noise and interference, and only then encrypting, Biham said.....


-- 
****************                          *****************************
Kiggundu Mukasa                          # Computer Network Consultancy###
KYM-NET LTD.                             # Intranets & Internet Solutions#
Plot 80 Kanjokya Street
P.O. Box 173 Kampala, Uganda             
Tel:     +256 77 972255
         +256 71 221141
Fax:     +256 31 262122
*************************************************************************

Reply via email to