3 ms·
One I can think of is operator providing you a software package to make use of his special services (and whatnot). Did you know your simcard contains Java Runt
by comboy 5y ago
One I can think of is operator providing you a software package to make use of his special services (and whatnot).
Did you know your simcard contains Java Runtime Environment?
- rajasimon 5y agoWhere can I find those details?
- comboy 5y agoThere was one really good talk about from black hat or defcon [1] but there's also this [2] which seems more thorough so I'm gonna watch it too later. I happen to have a friend who writes software for simcards so that's what really was my main source. 1. https://www.youtube.com/watch?v=scArc93XXWw https://www.youtube.com/watch?v=scArc93XXWw 2. https://www.youtube.com/watch?v=31D94QOo2gY https://www.youtube.com/watch?v=31D94QOo2gY
- olliej 5y agoOh JavaCard, you have succeeded despite being horrific. It's also used for ATM cards, credit cards, etc. And Apple Pay :D I wonder if any environment uses log4j? (jk I hope. The JavaCard spec is fairly limited so maybe it's accidentally safe :D )
- deleted 5y ago[deleted]
- kaba0 5y agoWhy do you think it is horrific? Haven’t had the chance to look into it so all I know about it is that it uses Java ME which is a very limited subset of Java SE.
- olliej 5y agoI would much rather a defined protocol rather than arbitrary code. It also means you can require multiple distinct applets on your phone for each card provider.