begood Posted August 1, 2010 Report Posted August 1, 2010 We previously discussed security researcher Chris Paget's plans to demonstrate practical cell phone interception at DefCon. Paget completed his talk yesterday, and reader suraj.sun points out coverage from Wired. Quoting: "A security researcher created a $1,500 cell phone base station kit (including a laptop and two RF antennas) that tricks cell phones into routing their outbound calls through his device, allowing someone to intercept even encrypted calls in the clear. Most of the price is for the laptop he used to operate the system. The device tricks the phones into disabling encryption and records call details and content before they are routed on their proper way through voice-over-IP. The low-cost, home-brewed device ... mimics more expensive devices already used by intelligence and law enforcement agencies — called IMSI catchers — that can capture phone ID data and content. The devices essentially spoof a legitimate GSM tower and entice cell phones to send them data by emitting a signal that's stronger than legitimate towers in the area. Encrypted calls are not protected from interception because the rogue tower can simply turn it off. Although the GSM specifications say that a phone should pop up a warning when it connects to a station that does not have encryption, SIM cards disable that setting so that alerts are not displayed. Even though the GSM spec requires it, this is a deliberate choice on the cell phone makers, Paget said."Slashdot Mobile Story | Hacker Builds $1,500 Cell Phone Tapping Device Quote
prodil89 Posted August 1, 2010 Report Posted August 1, 2010 Eu as spune ca preturiile astea mari , sunt mari cu un scop.(xD)Sa fim seriosi un hacker amarat care nu castiga nimic din ce face nu are cum sa cumpere asa ceva.In schimb guvernul american(NSA,CIA,FBI blalalb)ar cumpara , daca nu cumva au deja....Ar mai cumpara Pentesterii care castiga ceva din ceea ce fac si folosesc "aparatul" intr-un scop "etic".Poate ar mai cumpara si unele firme importante care vor sa supravegheze apeluriile.Dar hackerii niciodata...nu daca nu au un tata dotat Pana si cursuriile de securitate sunt al dreq de scumpe... Quote