4 ms·
the sim is no piece of plastic. SIM cards are computers! they have a CPU. they have memory, a file system. they run applets, yes Java applets. sims are one of t
by foolfoolz 9y ago
the sim is no piece of plastic. SIM cards are computers! they have a CPU. they have memory, a file system. they run applets, yes Java applets. sims are one of the most secure pieces of technology out there, part of the Secure Element standard. the sim is responsible for a lot of your phones security. lots of encryption keys live on the sim and nothing can access them at all. I am much much happier to trust the hardware than software for some of this. smaller form factors are always coming out for sim, but it's worth the space
- dannyw 9y agoOn a dumb phone yes contacts are stored on your SIM maybe using some kind of weak crypto, yes. On an iPhone X, it’s completely unused for crypto or security, or for any other purpose other than carrier authentication.
- foolfoolz 9y agocarrier authentication is huge! do you want someone to be able to subscribe to a network with your phone number? receive your calls? texts? or call or text as if they are you? yes the sim has little relevance to device security for most smartphones. contacts on sim are a great example of supporting legacy features for BC only. but the network is still very important to secure. sims are used for more than just phones. the chip on your credit card is a Secure Element. the chip in your passport is too. these are some of the most physically and technically secure pieces of hardware ever made
- woah 9y agoCarrier authentication is not huge. The vast majority of communications services today are secure without a SIM, even ones that are tied to your number. Ever notice that iMessage keeps working without a SIM? The SIM card is mostly a relic that is useful to the carrier oligopoly because it increases network switching friction.
- kevinchen 9y agoIf someone is able to authenticate as your phone number, they can set up iMessage and receive a copy of your future messages.
- sgrove 9y agoWouldn't they need to at least need to log in with your iCloud credentials?
- foolfoolz 9y agonope iMessage does not require iCloud
- dkonofalski 9y agoThis is wrong. iMessage uses your Apple ID and is definitely iCloud based. That's how it can tell the state of messages from device to device.
- foolfoolz 9y agoyou wouldn't be able to authenticate on the data network without a sim. unless you exclusively use wifi the carrier network is still a huge part of everyone daily phone use
- Aloha 9y agoThe onboard crypto is still used to secure voice calls.
- josu 9y ago>I am much much happier to trust the hardware than software for some of this Most SIMs I know are black boxes, with 0 public documentation. Taking into account that they are issued by telecom companies I don't trust them at all.
- foolfoolz 9y agothe reason there are multiple sim manufacturers and SIM cards interop seamlessly into any device is because they are built entirely on published standards. there is tons documentation, usually in the form of giant specifications. look for Secure Element. Java card. global platform. UICC.
- Aloha 9y agoThe standard is out there if you're willing to pay ETSI (or whomever - though the CDMA2000 specs are open and online) the money to get at it. They're not black boxes by any measure of the word.