4 ms·
That sounds plausible. One problem I still see is that if $agency gets the authentication key, they can impersonate the user and possibly hijack their traffic.
by scintill76 12y ago
That sounds plausible. One problem I still see is that if $agency gets the authentication key, they can impersonate the user and possibly hijack their traffic. Maybe not as bad as passive decryption in some ways.
- lucaspiller 12y agoI think that is actually worse. Say a person isn't liked by the current regime, but they haven't got any solid (i.e. legally useable in court) evidence to put them away. The agency could log onto the GSM network and impersonate that person performing an illegal act they know will be picked up by law enforcement.
- Spooky23 12y agoIt's a good thing that phone metadata is protected by the telephone carrier and requires a warrant to access. Oh, wait...