top | item 45875002

(no title)

welder | 3 months ago

I wish govt would put a condition on the mobile carriers to fix SS7 vulnerabilities.

discuss

order

_ink_|3 months ago

Yeah, but how could their secret services then snoop on everyone?

Iolaum|3 months ago

update to the latest software

adrr|3 months ago

Carriers will never fix issues that they have a revenue stream off of. They sell services to detect call forwarding attacks, sim swap attacks etc to banks and other services.

Its like robocalling, fraud texts and calls you received. Carriers can't sell services to filter them if they fix the issues that allow these to happen in the first place.

Way to fix it is to make the carrier liable. It will be fixed instantly.

UltraSane|3 months ago

I get 20 to 30 spam calls a day now.

srg0|3 months ago

At some point this year I was getting 14-20 spam calls per hour. I'm in Italy.

Mashimo|3 months ago

In EU? Where are you located?

kristofferR|3 months ago

Isn't that simply fixed by shutting down the old 2G and 3G networks, like is happening in a lot of countries now?

supertrope|3 months ago

No. SS7 predates cellphones. It's the legacy control plane for the PSTN (public switched telephone network). It was never designed for security since it originally never crossed corporate boundaries as everyone had to use the monopoly provider. (Except for international calls).

alerighi|3 months ago

You can't shut down 2G, because there are a lot of devices, mainly embedded systems like alarms, lift emergency call button, GPS trackers, etc. that still use 2G. Also 2G is the only reliable network connection in a lot of areas that are not otherwise reached by 3G/4G/5G, mainly because a 2G connection is more tolerant to low signal and noise, and also is low frequency, thus 2G is the only option available in situations such as on top of mountains and stuff. And finally there is still a lot of people, maybe elders, that don't have/want a smartphone (mainly because they are more complex to use etc.) and still use an old Nokia with 2G networks (they only need to call or send SMS in the end).

Also: VoLTE is not a thing since a lot of years, and probably there are even a ton of smartphones out there that does not support it (and thus switch back to 2G/3G to place voice calls).

defraudbah|3 months ago

this would require some encryption and still can be intercepted. Any ideas how to fix that?