3 ms·

this is crazy because i bet pager encryption isn't particularly strong

ipython 3y ago
The encryption isn't too much of an issue, you're usually just paging a phone number or a code like '911' from your family who otherwise have no other way to reach you.
- ape4 3y ago
  Still might be useful to an adversary.
- klyrs 3y ago
  Unfortunately they're used in hospital settings where patient information inevitably winds up getting transmitted in the clear. https://www.trendmicro.com/vinfo/au/security/news/vulnerabilities-and-exploits/unsecure-pagers-in-vancouver-expose-sensitive-patient-data-what-this-means-for-enterprises https://www.trendmicro.com/vinfo/au/security/news/vulnerabil...
- nextaccountic 3y ago
  I'm talking about this > Pagers are also popular among people who work in secure areas (in the sense of national security, e.g., at national labs)
  - ipython 3y ago
    That’s what I was talking about as well. A pager is the only mobile communication device allowed in those spaces so it’s impossible for a family member to contact you when you’re walking around otherwise.
pc86 3y ago
The biggest concern in these environments isn't information reaching the people inside - it's those people extricating that information (intentionally or otherwise). So having a system where e.g. some scientist's family can tell them they need to call right away is super helpful and not a huge security risk because they have to go through the process of leaving before they can actually contact them. There's no [obvious] way to MITM the pager and get it to extricate any data.
Rebelgecko 3y ago
You might be interested in the 9/11 pager intercepts (https://911.wikileaks.org/ https://911.wikileaks.org/)
hobobaggins 3y ago
"The T5 supports message encryption using the industry standard AES?128* encryption algorithm. Each device is programmed with a unique key. Messages are encrypted as they enter the Spok network and are sent over the air to the device where they are decrypted for display to the user." https://pagersdirect.net/collections/alpha-numeric-pagers/products/sun-telecom-t5-encrypted-brand-new-1-way-alpha-numeric-secure-pager_sun-telecom-t5 https://pagersdirect.net/collections/alpha-numeric-pagers/pr... However, there seem to be other weaker links in that chain (like the email that's being sent to the host).

The encryption isn't too much of an issue, you're usually just paging a phone number or a code like '911' from your family who otherwise have no other way to reach you.

ape4 3y ago
Still might be useful to an adversary.
klyrs 3y ago
Unfortunately they're used in hospital settings where patient information inevitably winds up getting transmitted in the clear. https://www.trendmicro.com/vinfo/au/security/news/vulnerabilities-and-exploits/unsecure-pagers-in-vancouver-expose-sensitive-patient-data-what-this-means-for-enterprises https://www.trendmicro.com/vinfo/au/security/news/vulnerabil...
nextaccountic 3y ago
I'm talking about this > Pagers are also popular among people who work in secure areas (in the sense of national security, e.g., at national labs)
- ipython 3y ago
  That’s what I was talking about as well. A pager is the only mobile communication device allowed in those spaces so it’s impossible for a family member to contact you when you’re walking around otherwise.

pc86 3y ago

The biggest concern in these environments isn't information reaching the people inside - it's those people extricating that information (intentionally or otherwise). So having a system where e.g. some scientist's family can tell them they need to call right away is super helpful and not a huge security risk because they have to go through the process of leaving before they can actually contact them. There's no [obvious] way to MITM the pager and get it to extricate any data.

Rebelgecko 3y ago

You might be interested in the 9/11 pager intercepts (https://911.wikileaks.org/ https://911.wikileaks.org/)

hobobaggins 3y ago

"The T5 supports message encryption using the industry standard AES?128* encryption algorithm. Each device is programmed with a unique key. Messages are encrypted as they enter the Spok network and are sent over the air to the device where they are decrypted for display to the user." https://pagersdirect.net/collections/alpha-numeric-pagers/products/sun-telecom-t5-encrypted-brand-new-1-way-alpha-numeric-secure-pager_sun-telecom-t5 https://pagersdirect.net/collections/alpha-numeric-pagers/pr... However, there seem to be other weaker links in that chain (like the email that's being sent to the host).