3 ms·
> Why can't we encrypt calls and texts in a way which doesn't let all this stuff get read? Like (handwaving) either trust the network and encrypt with a key the
by blotter_paper 7y ago
> Why can't we encrypt calls and texts in a way which doesn't let all this stuff get read? Like (handwaving) either trust the network and encrypt with a key they provide, or else some form end-to-end encryption (where maybe generating keys is part of what happens when you activate a sim card or something)?
We can have E2E encryption on cellphones today, just make calls and send texts over Signal (with other people who also have Signal installed).
Here's an article on using SIM cards as a secure element: https://nelenkov.blogspot.com/2013/09/using-sim-card-as-secure-element.html https://nelenkov.blogspot.com/2013/09/using-sim-card-as-secu...
I would really like a hardware interface for changing a key, or a mechanism where you flip the card over to expose a separate set of contact plates which have write permissions. Stock Android will allow carriers to fuck with your SIM card sans user permissions.
- 0x0aff374668 7y agoInterestingly, at DefCon last year, a presentation was talking about how in Africa there are interposer SIM shims that slip over the top of the simcard and provide additional functionality. Citation needed, but I was impressed they could fit a small MCU in such a thin form factor!
- blotter_paper 7y agoOooh, I like that idea. I've seen those used to bypass carrier locks, but never considered the possibility of restricting write access with one.