Researchers Demo New GSM Attacks at Chaos Communications Congress

First time accepted submitter aeturnus writes "A new attack on the GSM mobile communications protocol has been demonstrated by Karsten Nohl and Luca Melette of Security Research Labs, based off their previously published attacks around vulnerabilities in the GSM A5/1 encryption protocol. This new attack, which Nohl indicates already in use by criminals, allows an attacker to simulate a GSM mobile and use it to make calls and send text messages. Nohl also discussed protective measures users should take against these attacks, and others in use by intelligence communities around the world." This was just one of many presentations at the 28th Chaos Communications Congress.

Comments

protective measures

[Trepidity]

Nohl also discussed protective measures users should take against these attacks, and others in use by intelligence communities around the world.

From the summary, it doesn't sound like there are actually particularly feasible protective measures to use on a routine basis. All I see is some discussion of the "Catcher Catcher" software, which can be used to estimate the likelihood of an "IMSI catcher" being used in the vicinity. But this isn't something most users can practically use on a routine basis.

Re:Congress

[Anonymous Coward]

when you demonstrate any kind of technology to Congress they furrow their brows in confused frustration and seek advice from the nice people that give them things.

That's what happens when they're vaguely concerned. When they're scared, they pass horrible acts of legislation that do nothing productive, but ruin the lives of millions.

Do you want them to do that to your cell phones?