News for hackers. Stuff that matters.

A comment on Huawei reassesses goal to be world’s bestselling smartphone vendor. Parent comment

Re:Huawei reassesses goal to be world’s bestselling smartpho... by fulafel on Tuesday June 04, 2019 @12:46AM (#20091970)
This is obviously not good, but is there evidence that they are broadly worse than the competition? I always thought telco internal networks were full of stuff like this (out of date and misconfigured crap everywhere, with heavy reliance on firewalls/vpns).
[ Parent | on HN ]
Re:Huawei reassesses goal to be world’s bestselling smartpho... by metildaa on Tuesday June 04, 2019 @12:49PM (#20096801)
VPNs and firewalls can't help when the cellular basestation is the issue. How would you prevent a malicious LTE client fron running these exploits?

Telcom security is a mess, but the frontline gear is usually the saving grace of the network.

[ Parent | on HN ]
Re:Huawei reassesses goal to be world’s bestselling smartpho... by fulafel on Wednesday June 05, 2019 @03:28PM (#20108225)
Is there really SSL communication between terminals and base station in the LTE protocol? This seems unlikely because it's below the IP layer. They could of course use openssl for the crypto primitives in implementing LTE but are there vulnerabilities in those primitives that would be fixed by updating openssl?

There could be TLS involved in higher level protocols like IMS though. Or not. Does anyone know if eg VoLTE relies on the network for security or does it run SIP over DTLS or something?

[ Parent | on HN ]