Slashdot Mirror
New LTE Attacks Can Snoop On Messages, Track Locations, and Spoof Emergency Alerts (zdnet.com)
An anonymous reader quotes a report from ZDNet: A slew of newly discovered vulnerabilities can wreak havoc on 4G LTE network users by eavesdropping on phone calls and text messages, knocking devices offline, and even spoofing emergency alerts. Ten attacks detailed in a new paper by researchers at Purdue University and the University of Iowa expose weaknesses in three critical protocol operations of the cellular network, such as securely attaching a device to the network and maintaining a connection to receive calls and messages. Those flaws can allow authentication relay attacks that can allow an adversary to connect to a 4G LTE network by impersonating an existing user -- such as a phone number. Although authentication relay attacks aren't new, this latest research shows that they can be used to intercept message, track a user's location, and stop a phone from connecting to the network. By using common software-defined radio devices and open source 4G LTE protocol software, anyone can build the tool to carry out attacks for as little as $1,300 to $3,900, making the cost low enough for most adversaries. The researchers aren't releasing the proof-of-concept code until the flaws are fixed, however.
Securely joining a network isn't easy. Doing it over a protocol that needs agreement from a large number of people is almost impossible. 3/4 of the people in the meeting will think all you need is privacy. Those who understand authentication will then insist on something that only authenticates the network or the joining phones but not both. Then you get the push back against having any kind of centralized trust authority, so every one signs certs and validating them becomes a waste of time (the new passport system). Even if you avoid all that, someone will try and add more and more features because, insert stupid reason, or protocol X does it (Even if protocol X doesn't ever use it or protocol X is solving a completely different problem). Then you will get two features that can't be used securely at the same time and the group will vote that interoperability is more important than security. All this and more before we even get to the individual implementations.
Security is the red haired step child. Everyone pretends to care about him but he gets shafted every time.
(Yes, I have red hair, and for some reason a lot of security protocol people seem to as well)
Reminds me of the old GSM Encryption debacle.
This is going to be good!
Kriston
Apple and Samsung report the first slide in handset sales last year, and now researchers find major flaws in the protocols that will require handset upgrades for everyone because "We can't update that version of iOS/Android to the latest version" or "We don't support your handset model anymore." and without updates you won't be able to connect to LTE services anymore.
Just sayin sometimes a cigar is a penis.
Given that police are able to use Stingrays for monitoring and intercepting traffic, why would anyone believe the protocol was otherwise secure? ... anyone other than members of Congress, I mean.
#DeleteChrome
More like 4.0 but you get the point. Something about this smells, like it was intentional.
You guys keep making fun of me for sticking with 3G CDMA... that shit is rock solid.... and doesn't drain my battery in an hour.
after a given date, so companies are forced to fix the flaws. You have to ask yourself if they were put there on purpose to begin with,
SEEK IMMEDIATE SHELTER
BeauHD's scorecard isn't that great...He should try something else for change.
But I'm still on a 3G smartphone.
Being thrifty with an obsolete handset has its merits!
...is that the software is full of bugs. If you thought 3g was insecure, and LTE is beginning to show its flaws, just wait till 5g.
And that is without worrying about deliberate back doors and the like...
Now that 5G is a thing that is being sold we will now hear about all of the 4G vulnerabilities, There never was a standard so there are likely many, but if you get a 5G phone it won't have THOSE...
Pre-authentication identification or DoS attacks.
You can do much of the same with a $50 jammer.
Nothing new, please move on.