Slashdot Mirror


Gaining Root Access On Linux-Based Femtocells

viralMeme writes "According to the Register, 'Security researchers have turned their attention to femtocells, and have discovered that gaining root on the tiny mobile base stations isn't as hard as one might hope.' One of the researchers said, 'After hours of sniffing traffic, changing IP address ranges, guessing passwords and investigating hardware pinouts, we had obtained root access on these Linux-based cellular-based devices, which piqued our curiosity [about] the security implications.' Whoever designed these devices should be sent back to computer school. An authentication device that can be bypassed is a contradiction in terms. Or, as some pen-pusher would put it in a report: an unantipicated security excursion.

3 of 102 comments (clear)

  1. Re:Jedi Mind Trick, actually by davester666 · · Score: 5, Insightful

    The very concept of Femtocell's is bass-ackwards. You pay a carrier for wireless access, then pay again for a device to actually provide you with the wireless access, along with monthly fee's for the device and also pay for internet access so the device can connect to the carrier over the internet.

    It's like "we couldn't be bothered to actually provide you with coverage at your home/office, so would you mind building out our network for us, and pay us extra for the privilege of doing so".

    --
    Sleep your way to a whiter smile...date a dentist!
  2. Re:Jedi Mind Trick, actually by ScentCone · · Score: 5, Informative

    so would you mind building out our network for us, and pay us extra for the privilege of doing so

    Nonsense. I bought a unit to extend Verizon's coverage into the areas of my house that the local tower just can't handle. Like, down in the basement - a level of service that no carrier is going to say they'll promise. Verizon doesn't charge me anything for using it, other than the cost of the hardware - a one-time purchase that I gladly, gladly made. And I can sell the unit any time I want, and any other Verizon customer can use it - and there's no account-related paperwork involved. The devices just work. They look for a DHCP server on your LAN, and off you go. You do need to fire them up near a window until they get their GPS bearings, though. But they don't have to stay there.

    You know what else is nice? The household mobile phones now only have to talk to a transciever that's a stone's throw away, instead of a quarter of a mile or more away. That means much better battery life when they're not tethered to a charger.

    --
    Don't disappoint your bird dog. Go to the range.
  3. Re:Jedi Mind Trick, actually by 140Mandak262Jamuna · · Score: 5, Funny

    Verizon's ad campaign featuring an army of tower workers following customers around was hyperbolic. Sorry if you got confused.

    The joke's on you pal. All those cell towers use Yagi dipole antennae. They are neither parabolic not hyperbolic.

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact