News for hackers. Stuff that matters.

A comment on France passes bill to allow police remotely activate phone camera, microphone. Parent comment

Re:France passes bill to allow police remotely activate phon... by orangepurple on Thursday July 06, 2023 @10:17AM (#36616172)
"...the cellular carrier can send blobs of FORTH code right to the radio. The radio firmware also seems to have an IP stack (with TCP) so it can do its own interesting things (both bad and good)..." https://boston.conman.org/2013/01/22.2

"...easily spotted loads and loads of bugs, scattered all over the place, each and every one of which could lead to exploits – crashing the device, and even allowing the attacker to remotely execute code. Remember: all over the air. One of the exploits he found required nothing more but a 73 byte message to get remote code execution. Over the air..." https://www.osnews.com/story/27416/the-second-operating-syst... (archive: https://archive.is/FOR5V)

https://news.ycombinator.com/item?id=6722539

https://news.ycombinator.com/item?id=6722732

https://news.ycombinator.com/item?id=6722648

https://news.ycombinator.com/item?id=6738066

https://news.ycombinator.com/item?id=6724034 <-- Seems to be higher risk with Qualcomm basebands where everything is integrated

-------------------

SIM card reader chips have their own operating system https://en.wikipedia.org/wiki/SIM_card#Design

https://news.ycombinator.com/item?id=6722896

https://news.ycombinator.com/item?id=6724215

https://news.ycombinator.com/item?id=6723236

-------------------

[ Parent | on HN ]
Re:France passes bill to allow police remotely activate phon... by KennyBlanken on Thursday July 06, 2023 @11:23AM (#36617447)
It's insecure by design because the NSA has for decades purposefully degraded the security of everything they can get their hands on to make it easier for them and law enforcement to spy on.

They don't want you listening in on John Q. Senator's phone calls, but they sure do...

[ Parent | on HN ]
Re:France passes bill to allow police remotely activate phon... by orangepurple on Thursday July 06, 2023 @11:32AM (#36617573)
The workaround is to carry around a small insulated faraday cage for your phone which blocks cellular reception, transmits bogus GPS signals locating yourself as a random wanderer, and plays television series reruns 24/7 at low volume into the microphone.
[ Parent | on HN ]
Re:France passes bill to allow police remotely activate phon... by PawgerZ on Friday July 07, 2023 @10:22AM (#36632194)
Replying so I can read all of these later.
[ Parent | on HN ]