News for hackers. Stuff that matters.

A comment on SIM Vulnerability leads to information disclosure via malicious SMS. Parent comment

Re:SIM Vulnerability leads to information disclosure via mal... by 0b0001 on Thursday September 12, 2019 @02:48PM (#20954937)
That's not the case. SIM cards hold the permanent key for authentication and perform key derivation. Mobile data doesn't pass the SIM card; it does not perform the encryption and decryption.
[ Parent | on HN ]
Re:SIM Vulnerability leads to information disclosure via mal... by zenexer on Thursday September 12, 2019 @03:42PM (#20955559)
Good point--I tend to forget that. The rather vague article seems to indicate the actual SMS content is being sent to the SIM, though. Why is that?
[ Parent | on HN ]
Re:SIM Vulnerability leads to information disclosure via mal... by opless on Thursday September 12, 2019 @08:16PM (#20957844)
Dumb/feature phones saved SMS messages to the SIM card as simple cards have a limited amount of memory that is dedicated to a crude phonebook and SMS store. Smartphones and smarter feature phones (can) use their own storage for that. You could disable/enable the phonebook/save to SIM features on feature phones and early smartphones.

(I'm talking about win CE and symbian phones being early smartphones here)

[ Parent | on HN ]