News for hackers. Stuff that matters.

A comment on ACLU sues Homeland Security over 'stingray' cell phone surveillance. Parent comment

Re:ACLU sues Homeland Security over 'stingray' cell phone su... by blotter_paper on Wednesday December 11, 2019 @06:38PM (#21767958)
> Why can't we encrypt calls and texts in a way which doesn't let all this stuff get read? Like (handwaving) either trust the network and encrypt with a key they provide, or else some form end-to-end encryption (where maybe generating keys is part of what happens when you activate a sim card or something)?

We can have E2E encryption on cellphones today, just make calls and send texts over Signal (with other people who also have Signal installed).

Here's an article on using SIM cards as a secure element: https://nelenkov.blogspot.com/2013/09/using-sim-card-as-secu...

I would really like a hardware interface for changing a key, or a mechanism where you flip the card over to expose a separate set of contact plates which have write permissions. Stock Android will allow carriers to fuck with your SIM card sans user permissions.

[ Parent | on HN ]
Re:ACLU sues Homeland Security over 'stingray' cell phone su... by 0x0aff374668 on Wednesday December 11, 2019 @08:24PM (#21768528)
Interestingly, at DefCon last year, a presentation was talking about how in Africa there are interposer SIM shims that slip over the top of the simcard and provide additional functionality. Citation needed, but I was impressed they could fit a small MCU in such a thin form factor!
[ Parent | on HN ]
Re:ACLU sues Homeland Security over 'stingray' cell phone su... by blotter_paper on Wednesday December 11, 2019 @10:16PM (#21768984)
Oooh, I like that idea. I've seen those used to bypass carrier locks, but never considered the possibility of restricting write access with one.
[ Parent | on HN ]