Slashdot Mirror
Open Source GSM Cracking Software Released
angry tapir writes "The GSM technology used by the majority of the world's mobile phones will get some scrutiny at next week's Black Hat security conference. An open source effort to develop GSM-cracking software has released software that cracks the A5/1 encryption algorithm used by some GSM networks. Called Kraken, this software uses new, very efficient, encryption cracking tables that allow it to break A5/1 encryption much faster than before."
TFA also points out that eavesdropping as 'easy' as making a fake tower, getting phones to connect to it, commanding them to drop encryption, and having enough disk space to save the conversations. Not very expensive, and not very difficult.
So this would work well if you brought a fake tower with you to an event, like a convention or even a press conference, and just gather conversations at will. Setting up a tower near the White House would not be impossible, unless they already understand this and have an onsite tower they can secure. The Secret Service is no doubt already working with this, if not already in place. If VZW or Sprint is their most common carrier, well, those are different standards so this is not the problem.
All said and done, it is not impractical to be able to eavesdrop on GSM phones, though it is nontrivial. Data intercept I don't know a lot about.
deleting the extra space after periods so i can stay relevant, yeah.
You do realize that net neutrality is the _absence_ of filtering, right?
See, the whole idea is that an ISP that also owns other companies, or is affiliated somehow, can't step in and decide what is and isn't viewable, charge more, etc.
If I wanted a flame war I'd say you know nothing about what a common carrier is.
That however would leave me open to not knowing the concepts of giving an inch and them taking a mile.
Regulation by telling a corporation they can't self-regulate communication based on content will be a sticky issue since it has to be constantly defended against the government saying, YOU corporations can't regulate content but WE can. But at least there are some mechanisms in place that allow the people to control the government. The only mechanisms that allow people to have control over corporations is the market, and if the corporation has a monopoly on the physical lines, there is no market.
A libertarian shat on my carpet once. Claimed the free market would sort it out. -Ford Prefect(8777)
Again, you actually believe the government regulating internet traffic is going to be the absence of filtering? Government--the most corrupt organization in the world--is somehow going to be more neutral than a private organization that is beholden to customer satisfaction? That lobby groups like the RIAA won't petition for special restrictions on torrent traffic?
On top of that, an ISP should absolutely be allowed to decide how its network is run and what traffic goes across it. Internet access isn't a constitutional right. It's their network--they can run it however they want to, and if you don't like it, that's life. I don't like the color of my office, but that doesn't mean the government has the right to restrict what colors offices are painted in.
Stop bringing more and more government into our lives!
It would be nice to know exactly which GSM carriers use A5/1 encryption, and to what extent it is used. Is it a de facto standard, or a fallback algorithm?