Slashdot Mirror


Russians Order Mobile Phone Encryption Removed

PenguinRadio writes "The Moscow Times is reporting that Russian security officers (The FSB, formerly the KGB) ordered all mobile phone providers to switch off their encryption systems for 24 hours, so the police could eavesdrop on all calls. An alert, either an exclamation point or an unlocked padlock, was sent to the phones in question. This is the second time such an order was given - the last time was after the hostage crisis involving Chechnya fighters in a Moscow theater. At least the Russian has the courtesy to warn all their phone users that this was going on. Not sure what the standard FBI procedure is on something like this..."

36 of 302 comments (clear)

  1. Standard FBI procedure is.. by Anonymous Coward · · Score: 5, Funny

    to deny, deny, deny.

  2. The official FBI policy... by bc90021 · · Score: 5, Funny

    ...is probably to have every undercover agent in Russia drop what they're doing and man some listening devices. ;)

  3. The FBI by vought · · Score: 4, Interesting
    Don't the NSA and FBI have access to the keys to unlock encryption per user here, or did I just see that in a bad movie* at some point?

    *Mercury Rising/Consipracy Theory/That horrible movie with Denzel, etc.

    1. Re:The FBI by Beryllium+Sphere(tm) · · Score: 5, Interesting

      The session key used by the A5 cipher in the GSM standard is 64 bits. Interestingly, ten of those bits are not used. Suspicious people have claimed that the key length was reduced to facilitate eavesdropping. Carriers hotly deny this (http://jya.com/gsm042098.txt).

      Looking at it from first principles, there'd be little reason to disable encryption for a single user. Law enforcement could tap the phone network downstream of the tower, and intelligence services would want to listen to everybody. (I'm speculating 'cause I don't know).

    2. Re:The FBI by bhimaji · · Score: 5, Interesting

      The clipper chip was most assuredly implemented. In fact, Clipper chips sold more PCMCIA interfaces for desktop computers than just about any other application. Clipper chips were sealed modules, and PCMCIA seemed like the best way to package them.

      Interestingly, there was an attack for the Clipper chip which would let you encrypt your messages such that they would appear to be decryptable by the government, but if they tried to decrypt them they'd fail.

      Clipper worked as well as having government agents dressed in nazi-esque outfits in locksmith stores asking for voluntary copies of your house keys would work. That's to say, government agencies used it, but nobody else.

    3. Re:The FBI by photon317 · · Score: 4, Insightful


      The difference is the general level of hassle and red tape, as well as accountability. Of course if you're up there in intelligence I'm sure you can unaccountably "tap" the land phone network at will using more advanced systems (Echelon and whatever's come since come to mind) - but if you're just part of some FBI field office trying to handle an immediate situation akin to the Chechnya incident the landline option means you have to get authorization and go on record for doing it, and you have to be precise about what you're tapping, and you could be delayed by all the BS. If you can tap the airwaves easily (supposing you have a laptop that can crack the effectively 54-bit encryption of a GSM call on the air), you can do it without the fuss and without being accountable.

      Don't forget also that finding the right landline call to tap might be a needle in a haystack problem, but finding the right cellular call can be fairly easy if you're on-site near the caller, since you can just look for strong enough signal strength to be within a given radius of you physically, and furthermore even triangulate the signals' positions.

      --
      11*43+456^2
    4. Re:The FBI by asynchronous13 · · Score: 4, Interesting

      Do US cell phones even use encryption? I few years ago I worked at a company that made high-speed A/D and D/A converters. One of our test setups picked out the strongest 10 cell phone signals and we could listen in to whichever one we chose. all for, uhh, testing purposes, of course. I know that we weren't breaking any 64 bit (or 54 bit) encryptions on 10 different channels in real-time.

  4. In Soviet Russia by Anonymous Coward · · Score: 4, Funny

    The KGB unencrypts YOU!

    1. Re:In Soviet Russia by Dr+Reducto · · Score: 5, Funny

      This is the one time when I think Soviet Russia jokes are on topic.

  5. scary by MrLint · · Score: 4, Interesting

    It kind of concerns me that the encryption isnt hardwired into the phone, and that it can be turned on an off at a whim. I wonder if the russian or US govt's allow the encryption on their stuff be turned off, or is this a lowly citizen thing only.

  6. Huh? by pv2b · · Score: 5, Interesting

    The only thing GSM encryption prevents is eavesdropping on GSM calls with radio receivers. Law enforcement can still wiretap where the GSM call hits the copper, after all the call has to be decrypted by the phone network.

    I don't really see why they'd have to do this, technically.

    Perhaps they just wanted to "appease" the public by showing them that they are invading their privacy to search for Chechyen terrorists? After all, this is pretty visible.

    1. Re:Huh? by pv2b · · Score: 5, Interesting

      A Swedish company named Sectra among other things sell mobile phones with non-standard strong encryption, that only works between two of the same phones.

      But with normal GSM, not really. The GSM encryption, from what I've understood, is only intended to stop normal people from building equipment to eavesdrop on calls, not to stop law enforcement wiretaps.

  7. Re:Government isn't tracking YOU by craigtay · · Score: 5, Insightful

    So should we just resort to random police raids? I'm sure they would find plenty of illegal stuff, but at the same time I really don't want some police person coming over to my house when I'm trying to have dinner with my family. This is pretty much the same thing. I don't want to have to worry constantly that I'm doing something slightly illegal and will get in trouble on a technicality.

  8. It's foil-hat-tastic by Faust7 · · Score: 4, Funny

    Not sure what the standard FBI procedure is on something like this...

    Isn't it obvious? They originate the signal from their secret base on the dark side of the moon, route it through ECHELON, then through the chip in your cerebellum, off the relay in the piece of fried chicken you're eating, through your computer just on general principles, then to your cell phone where it summarily cracks the encryption and displays the letters "BB." Then it kills you.

  9. This is not the second time by srk · · Score: 5, Informative

    The same had been done also in St.Petersburg (2nd largest city in Russia). it was not a terrorist attack but rather Bush visit there last May. Security of the summit had been cited as a reason to turn off encryption.

    Russian laws require judge approval to eavesdrop on a communication. It is not known if such approvals had been granted in all these three cases.

  10. FBI Procedure? by browse · · Score: 4, Funny
    Not sure what the standard FBI procedure is on something like this..."
    You mean what was the procedure the last time they did it, or what will be the procedure the next time?
  11. In Soviet Russia.... by Dynedain · · Score: 5, Funny

    a) cell phone encryption turns on you! (how appropriate)

    b) cell phone encryption turns you on! (only on /.)

    --
    I'm out of my mind right now, but feel free to leave a message.....
  12. Crypto? What crypto? by Anonymous Coward · · Score: 4, Interesting

    The FBI procedure might be to use equipment that can crack worthless cellular encryption in real time.

  13. Re:Government isn't tracking YOU by NanoGator · · Score: 4, Insightful

    "o one cares about you and your puny little life and conversations. But you would certainly care if someone was planning on blowing up your train station or office building."

    I agree with you here. The Gov't isn't going to blackmail you. However, if the gov't can get in, why couldn't somebody else?

    I think the privacy moans and groans are overrated, but I did have a nice little scare when the RIAA announced it would start to sue P2P users. I want my privacy to protect myself from them. I'm not worried about the USA knowing about my personal life (they do anyway, duh.), but when encryption is ordered to be turned off, suddenly I'm open to the world.

    --
    "Derp de derp."
  14. Re:Government isn't tracking YOU by mackstann · · Score: 4, Insightful

    NICE troll. I also love how it's moderated "insightful." People are so fucking stupid sometimes.

    Let's get cameras put in our houses too. I mean, if you're not doing anything wrong, then who cares? Your life is normal and boring, the FBI won't care about you! So it's all ok! Don't worry your pretty little head about it.

  15. Re:Government isn't tracking YOU by grimani · · Score: 4, Insightful

    Quote: "They certainly don't care that you are having a fight with your wife and calling your girlfriend to make arrangements to stay over tonight."

    What if I were some fledging politician rapidly gaining popularity for my almost rabid support for privacy and constitutional rights, young enough to still be idealistic and uncompromised by lobbying?

    Then my fight with the wife and subsequent visit to the girlfriend become quite relevant to The Powers That Be (TM).

    Don't laugh, this is the kind of stuff the FBI dabbled in under Hoover.

    Privacy is privacy. There must be checks and balances to ensure that powers are not abused. These checks now do not seem to be sufficient (or existent, in some cases).

    There's a reason we call it "erosion" of rights. It's a slow, insidious process - but that doesn't make it any less threatening.

    At the risk of sound trite, the price of freedom is eternal vigilance.

  16. Polite KGB by retto · · Score: 5, Funny

    I hope Ashcroft doesn't get any ideas from this. We may wind up getting little text alerts on our cell phones when the Bill Of Rights is, and is not, in affect.

    Civil Rights On....Civil Rights Off...Civil Rights On...Civil Rights Off...

  17. GSM encryption is unsafe anyway by lylum · · Score: 5, Interesting
  18. Polute to the extreme? by geek · · Score: 4, Funny

    "At least the Russian has the courtesy to warn all their phone users that this was going on"

    Yo Al Qaeda, we'll be listening to your phone calls on September 16th from 4am to 5am. Just FYI, so go about your day as usual.

    Just brilliant isn't it? Next we'll be mailing crack houses letters informing them of the raid 3 weeks later.

  19. Overt versus covert by Ghoser777 · · Score: 4, Interesting

    I'm wondering if there's anything proventing the ex-KGB from doing this eavesdropping without doing this type of warning. The interesting thing in this policy is that it lulls people into thinking that they know overtly when they're being monitored, which may keep people from wondering when they maybe monitored covertly i.e. without a friendly reminder.

    Matt Fahrenbacher

    --
    James Tiberius Kirk: "Spock, the women on your planet are logical. No other planet in the galaxy can make that claim."
  20. This is suspicious by ugen · · Score: 5, Interesting

    The russian authorities have a law (SORM) which requires any communications provider to have special equipment tapped by FSB. This law is well implemented and therefore FSB has access to all phone conversation regardless of the encryption.

    The true purpose of this action is any one of the following in order of highest to lowest probability:

    1) Draw public attention to the bombing/terrorist act and drum up support for whatever it is the government is planning next. Good way to do it as anyone and their dog carries a cell phone. Bad way to really tap conversations since now everyone knows they are being tapped.

    2) Draw a lot of attention to current interior minister Gryzlov and his tough and honest men tactics (that and the current cleaning of "dishonest" policement from less important police units). He's probably getting promoted to
    head up some political party so that will help.

    3) Put the terrorists/chechens/whoever on the run - scare them etc. This sure is a big dynamite in a small pond though - so i doubt it.

    4) Have other units not equipped with SORM uplink do the tapping, using scanners or some such. Unlikely since GSM even when unencrypted still can't be listened in on without expensive equipment. I doubt this one even more, but i had to put it here for the sake of balanced options:)

  21. Re:Government isn't tracking YOU by Doomdark · · Score: 5, Informative
    "Government isn't tracking YOU".

    Right. And you are one of those loonies that send all their mail in postcards and cares not about privacy. Good for you.

    Problem though is, if and when goverment officials have access, they (some of them) will use it. For their main job, perhaps; for their entertainment, certainly, for other enterprises, quite possibly. Not just to listen to "really really bad guys", but gradually smaller fish, down to figuring out if their wifes are cheating them, or what their neighbours are talking about. Or for more enterprenially oriented peons, ways to blackmail people, or to get to some other useful information; be it for job or for personal businesses.

    Never underestimate possibilities that open, or blindly assume everyone uses those powers responsibly. Grow up, use your brains, learn more about basic human nature, and corruption power causes.

    --
    I like paying taxes. With them I buy civilization -- Oliver Wendell Holmes
  22. Maybe not about tapping phones at all... by Goonie · · Score: 5, Insightful
    Let's think laterally for a minute here. The point of this may not be to listen to cellphones at all.

    By announcing publicly that they're going to be tapping everyone's cellphone for the next day or two, they will have denied Al-Queda or whomever it is they are worried about the ability to make secure phonecalls. So maybe, if the organisation was about to pull a terrorist attack, they wouldn't be able to coordinate their actions and would have to abandon the attack. Alternatively, maybe the point of the exercise is that the people of concern would be forced to use alternative, more vulnerable means of communication (landlines or face-to-face meetings).

    What do you guys think?

    --

    Any sufficiently advanced technology is indistinguishable from a rigged demo
    --Andy Finkel (J. Klass?)
  23. Hey analog-boy... by Anonymous Coward · · Score: 4, Funny

    1998 called, it wants its cell phone back.

    Modern (digital) cellphones cannot be tapped with a radio. You are the weakest link, goodbye.

  24. Re:Courtesy Warning - Pointless? by tbdean · · Score: 5, Informative

    They didn't really "issue" a warning. They turned off the encyrption - making the antenea act like it wasn't capable of performing encyrption. Then all of the phones, noticing they don't have their normal encyrption, just added one more icon to the screen.

    They only issued a warning in the sense that Iowa issues a warning to all cell phone users that you are currently roaming. It's a function of the phone, not the KGB.

    --
    tbdean
  25. Re:Government isn't tracking YOU by sixdotoh · · Score: 4, Informative
    I did have a nice little scare when the RIAA announced it would start to sue P2P users. I want my privacy to protect myself from them.

    Yeah, I just read an article by John Dvorak that claimed that the whole stink with the RIAA is making privacy and anonimity forefront issues for many internet users. He says that all this is only going to make it harder for the RIAA/government to catch downloaders, and it will aid in things like child porn rings and ... I dunno I forget his other examples ;].

    It's a good article, check it out Not sure if /. already posted it, but its relevant and worth it.

    --

    This post was brought to you by the number 584811 and the characters / and .

  26. Re:Government isn't tracking YOU by sixdotoh · · Score: 4, Funny
    It is exactly because of myopic idiots like this that we have a constitution.

    The Supreme Court is taking care of that....

    --

    This post was brought to you by the number 584811 and the characters / and .

  27. Re:Government isn't tracking YOU by Loki_1929 · · Score: 5, Insightful

    " So should we just resort to random police raids?"

    But why stop there? Such a half-ass effort will surely miss far too much illegality. The only good solution is to have daily (or even more often) police inspections of every home, office, person, vehicle, etc. And just as an added precaution, we should install video cameras on every street, in every ally, and in every room of every home, office, or other such structure. From there, all the visual information could be fed into a lovely Oracle database, having been sorted by an advanced AI system. That way, any and all illegal acts are caught on tape, and the law-breaker can simply be put in jail, or perhaps even more simply, to death. Since we have it right on tape, there's obviously no need for a trial. And since those who break the law deserve to be caught and punished, no one should have any problem with this. After all, you're not doing anything illegal, immoral, or undesirable, right?

    --
    -- "Government is the great fiction through which everybody endeavors to live at the expense of everybody else."
  28. No warning needed in GSM by Vendekkai · · Score: 4, Informative

    At least the Russian has the courtesy to warn all their phone users that this was going on

    No courtesy or warning is needed. GSM handsets automatically display the no-encryption icon when OTA (Over The Air) security is turned off by the operator.

    V

  29. Old Russian Adage... by tspauld98 · · Score: 4, Funny

    Funny, this reminds me of a joke that a Russian friend told me...

    Both of us are of the age that we grew up during the Cold War and remember what it was like having nukes pointed at each other day and night...

    Anyway, we were on the phone and the connection was really bad. At one point, we heard a click similar to someone picking up the phone. So, Dmitri paused and said, "Wait a second..." After a few seconds, he began to speak again and I asked what had happened. He explained that, in Russian, it is considered polite to pause the conversation when you hear the FSB changing the tapes recording your conversation. :)

    I laughed my ass off.... Yes, people, I'm now ass-less....

    --
    "Ahhhh, best laid plans of mice and men... and Cookie Monster." -- Cookie Monster, Sesame Street
  30. Document Describing Standard Procedure. by Elvisisdead · · Score: 4, Interesting

    This document will tell you exactly what procedure is for wiretap.

    It also lists that: "In 2002, no federal wiretap reports indicated that encryption was encountered. State and local jurisdictions reported that encryption was encountered in 16 wiretaps terminated in 2002; however, in none of these cases was encryption reported to have prevented law enforcement officials from obtaining the plain text of communications intercepted. In addition, state and local jurisdictions reported that encryption was encountered in 18 wiretaps that were terminated in calendar year 2001 or earlier, but were reported for the first time in 2002; in none of these cases did encryption prevent access to the plain text of communications intercepted.

    --

    "Want in one hand and spit in the other and see which one fills up first." - My Dad