Slashdot Mirror

← Back to Stories (view on slashdot.org)

Embedded SIM Design Means No More Swapping Cards

Posted by timothy on from the but-watch-for-the-new-skimmers dept.

judgecorp writes "A new remotely-programmable embedded SIM design from the GSMA operators' group means that devices can be operated on the Internet of things and won't have to be opened up to have their SIM card changed if they move to a different operator. The design could speed up embedded applications."

4 of 192 comments (clear)

  1. What could possibly go wrong. by jellomizer · · Score: 3, Interesting

    Compared to a hard wired chip, we got something controlled by software. And a lot of Devices that likes to be jail braked.

    --
    If something is so important that you feel the need to post it on the internet... It probably isn't that important.
  2. Re:why? by viperidaenz · · Score: 4, Interesting

    waterproof phones? My Motorola Defy is good and all, but those rubber plugs and the seal around the battery cover can only take 1M of water pressure.

  3. Re:Would not be a problem at all by Anonymous Coward · · Score: 5, Interesting

    a SIM contains a cryptographic signature and some other things.

    It's basically a watered down TPM that has a unique ID, a few kilobytes of storage, and a cryptographic key set.
    A physical device like that makes it difficult to replicate the functionality of the SIM card, making it harder to make one device use the credentials and system identity of another device. (EG, it makes it harder for an attacker to steal your network identity and make lots of 1-900 number calls, which will then show up on YOUR bill, amongst other things-- like framing you in a murder by making all his calls with your number, etc.)

    Making this an easily reprogrammed internal chip makes that physical level of security go away.

    That's a bad thing.

    Sometimes being inconvenienced is really in your best interest.

  4. Re:why? by VernonNemitz · · Score: 4, Interesting

    I'd say it is not needed. Because anything described as "remotely programmable" means "remotely abuse-able". Botnet operators will love it.