4 ms·
> SMS Interception: Attackers can intercept SMS messages by exploiting vulnerabilities in mobile carrier networks. This can allow them to read the contents of S
by TheHappyOddish 3y ago
> SMS Interception: Attackers can intercept SMS messages by exploiting vulnerabilities in mobile carrier networks. This can allow them to read the contents of SMS messages, including sensitive information such as two-factor authentication codes, passwords, and credit card numbers due to the lack of encryption offered by SMS.
True... But only if you can force a device to 2G. From the article:
> First it is noted that there are vulnerabilities in the security functions of 2G, which makes practical attacks possi-ble. It is, however, important to point out that the attacks are not restricted to 2G, but applies to all generations of mobile networks that have implemented a fallback solution to 2G. For example, an attacker can relatively easily perform a downgrade attack to change 5G service to 2G service, which makes the user vulnerable to the threat scenarios for 2G.
Many countries shut down their 2G networks years ago. I was baffled it took us so long in Australia. No idea what everyone else is doing. But regardless, for many users this is not a concern.
> SMS texting is both a large and weak link in the chain largely because texts between iPhones and Androids revert to SMS.
> It’s a shame that a problem like texting security remains as prominent as it is, particularly when new protocols like RCS (https://www.gsma.com/futurenetworks/rcs/the-rcs-ecosystem/ https://www.gsma.com/futurenetworks/rcs/the-rcs-ecosystem/) are well-esta
blished and would drastically improve security for everyone.
Ah ok, it's a thinly veiled attack against Apple from Google, the kings of interoperability ¿
- Nextgrid 3y agoA much more practical attack is to social-engineer/bribe the idiots who handle customer "support" into swapping the SIM to an attacker-controlled one. Significantly easier and cheaper than mobile protocol/infrastructure -level attacks.