Re: GSMA statement on media reports relating to the breaking of GSM encryption

[Gadi Evron <ge () linuxbox org>]

On 1/2/10 7:28 AM, Dan Kaminsky wrote:
> Pay no attention to the relatively large number of open source GSM base
> stations in development and preliminary deployment.

The statement is just funny as GSM was completely broken years ago, I am 
proud to say, largely by Israeli researchers at the Technion institute, 
Elad Barkan and Eli Biham, as far as I know, as they share credit with 
some others for previous work.

http://tx.technion.ac.il/~barkan/academic/index.html

This guy at CCC made it practical for the layman.

So them saying it hasn't been explained in details is ridiculous.

        Gadi.


> On Fri, Jan 1, 2010 at 8:46 PM, Les Bell <lesbell () lesbell com au
> <mailto:lesbell () lesbell com au>> wrote:
>
>
>     Juha-Matti Laurio <juha-matti.laurio () netti fi
>     <mailto:juha-matti.laurio () netti fi>> wrote:
>
>      >>
>     GSM Association has posted their statement
>     <<
>
>      From the statement:
>
>     "So far, this aspect of the methodology has not been explained in any
>     detail and we strongly suspect that the teams attempting to develop an
>     intercept capability have underestimated its practical complexity."
>
>     So, it's business as usual for the telecommunications industry, then:
>     security by obscurity. Yep, that'll work.
>
>     Best,
>
>     --- Les Bell
>     [http://www.lesbell.com.au]
>     Tel: +61 2 9451 1144
>
>
>     _______________________________________________
>     Fun and Misc security discussion for OT posts.
>     https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
>     Note: funsec is a public and open mailing list.
>
>
>
>
> _______________________________________________
> Fun and Misc security discussion for OT posts.
> https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
> Note: funsec is a public and open mailing list.


-- 
Gadi Evron,
ge () linuxbox org.

Blog: http://gevron.livejournal.com/
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.