News for hackers. Stuff that matters.

A comment on PGPP (Pretty Good Phone Privacy) Beta Launch.

Re:PGPP (Pretty Good Phone Privacy) Beta Launch by jimhi on Thursday August 11, 2022 @04:29PM (#32431310)
You assign users a temporary IMSI which is done in the cloud right?

How does this protect against IMSI catchers and Stingrays if they are done local to you? Local cell tower spoofing?

Also, this is just for data? So if you have another SIM for voice/SMS this is completely negated?

[ Parent | on HN ]
Re:PGPP (Pretty Good Phone Privacy) Beta Launch by prschmitt on Thursday August 11, 2022 @04:32PM (#32431347)
By decoupling the user identity from a permanent, globally unique IMSI, we make IMSI catcher / Stingray attacks less "useful" as the IMSI is changing and isn't tied to the user. They can attack your IMSI, but it won't be tied to you and it is ephemeral.
[ Parent | on HN ]