3 ms·
I have a conflict of interest here (I am an advisor to Cape, also a security expert, and my company has done security audits for Cape), you should absolutely lo
by dguido 7mo ago
I have a conflict of interest here (I am an advisor to Cape, also a security expert, and my company has done security audits for Cape), you should absolutely look more deeply into what Cape has created. Their service is fundamentally different than other "security-focused cell providers" (mostly snake oil IMHO) because Cape wrote their own mobile core, nearly from scratch. They control the whole software stack and have done really innovative things with it.
Here are a few things you might want to look at more closely:
Encrypted voicemail uses public key crypto:
https://www.cape.co/blog/product-feature-encrypted-voicemail https://www.cape.co/blog/product-feature-encrypted-voicemail
How they use full control of the mobile core to detect SS7 signaling attacks
https://www.cape.co/blog/product-feature-network-lock https://www.cape.co/blog/product-feature-network-lock
Swapping SIMs is done via digital signatures, not customer support
https://www.cape.co/blog/cape-product-feature-secure-authentication https://www.cape.co/blog/cape-product-feature-secure-authent...
They're the only provider that can rotate your IMSI, and do it continuously for you
https://www.cape.co/blog/product-feature-identifier-rotation https://www.cape.co/blog/product-feature-identifier-rotation
They're also one of very few organizations doing original research on cell network security:
Collaborating with the EFF to release software for detecting cell site simulators (e.g, imsi catchers et al)
https://www.cape.co/blog/how-eff-and-cape-collaborated-to-improve-detection https://www.cape.co/blog/how-eff-and-cape-collaborated-to-im...
Identifying novel weaknesses for physically tracking people on cell networks
https://dl.acm.org/doi/pdf/10.1145/3636534.3690709 https://dl.acm.org/doi/pdf/10.1145/3636534.3690709
- anonymous541908 7mo agoIs it free and open source software?
- roughly 7mo agoI’m curious if you’re able to comment on the IMEI question raised above - rotating the IMSI is good, but are the towers still collecting IMEIs?
- bsstoner 7mo agoDetails on what the tower sees are at the table in the bottom of this blog post: https://www.cape.co/blog/product-feature-identifier-rotation?slug=blog https://www.cape.co/blog/product-feature-identifier-rotation...
- monster_truck 7mo agoI read the website you really didn't need to go through this trouble. In fact it has only redoubled my doubts. Very aware of who you are, and have done plenty of security work myself. Here's what I want from you: How can you prove this isn't just Anom 2.0