Mobile Security » gprs http://blog.m-sec.net When security is not enough Tue, 13 Nov 2012 20:58:39 +0000 en-US hourly 1 http://wordpress.org/?v=3.4.2 GPRS is broken http://blog.m-sec.net/2011/gprs-is-broken/ http://blog.m-sec.net/2011/gprs-is-broken/#comments Fri, 12 Aug 2011 19:14:25 +0000 m-sec.net http://blog.m-sec.net/?p=43 Researcher Karsten Nohl has recently presented at Chaos Communication Camp 2011 a way of intercepting GPRS traffic. What that means is that now you can read the traffic that your neighbor is doing on his phone, at least if he uses GPRS/EDGE.

 

 

 

 

 

Karsten Nohl - Gprs Intercept

Along with Luca Melette, Karsten was able to decrypt the GPRS data by using a modified phone, loaded with OsmocomBB baseband software. What’s interesting is that, during the research, they discovered some operators that do not use encryption at all because it would be easier to block content like VoIP, Skype and so on.
If you want to read the slides, here they are: click
My advice: set you phone to use 3G as a preferred network, not only because of the GPRS issue, but due to other GSM security issues.

UPDATE: See the videos here: CCC 2011 videos

]]> http://blog.m-sec.net/2011/gprs-is-broken/feed/ 1