Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
DEAL: For $25 - Add A Second Phone Number To Your Smartphone for life! Use promo code SLASHDOT25. Also, Slashdot's Facebook page has a chat bot now. Message it for stories and more. Check out the new SourceForge HTML5 internet speed test! ×

Submission + - AT&T breach worse than initially thought? (tombom.co.uk)

ChrisPaget writes: I'm somewhat of an authority on GSM security, having given presentations on it at Shmoocon and CCC (I'm also scheduled to talk about GSM at this year's Defcon). This is my take on the iPad ICCID disclosure — the short version is that (thanks to a bad decision by the US cell companies, not just AT&T) ICCIDs can be trivially converted to IMSIs, and the disclosure of IMSIs leads to some very severe consequences such as name and phone number disclosure, global tower-level tracking, and making live interception a whole lot easier. My recommendation? AT&T have 114,000 SIM cards to replace and some nasty architectural problems to fix.
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

AT&T breach worse than initially thought?

Comments Filter:

Top Ten Things Overheard At The ANSI C Draft Committee Meetings: (7) Well, it's an excellent idea, but it would make the compilers too hard to write.

Working...