Did you know that the vast majority of calls carried out on the 3.5 billion GSM connections in the world today are protected by a 21-year old 64-bit encryption algorithm? You should now, given that the A5/1 privacy algorithm, devised in 1988, has been deciphered by German computer engineer Karsten Nohl and published as a torrent for fellow code cracking enthusiasts and less benevolent forces to exploit. Worryingly, Karsten and his crew of merry men obtained the binary codes by simple brute force -- they fed enough random strings of numbers in to effectively guess the password. The GSM Association -- which has had a 128-bit A5/3 key available since 2007, but found little takeup from operators -- has responded by having a whinge about Mr. Nohl's intentions and stating that operators could just modify the existing code to re-secure their networks. Right, only a modified 64-bit code is just as vulnerable to cracking as the one that just got cracked. It's important to note that simply having the code is not in itself enough to eavesdrop on a call, as the cracker would be faced with just a vast stream of digital communications -- but Karsten comes back to reassure us that intercepting software is already available in customizable open source varieties. So don't be like Tiger, keep your truly private conversations off the airwaves, at least for a while.
The A5/1 privacy algorithm, a code which is used to protect the privacy of about 80 percent of all mobile calls worldwide, has been deciphered and made public. It remains to be seen whether it’s time to panic just yet.
The algorithm in question has been used to encrypt GSM calls since 1988, but this past week, at the Chaos Communication Congress, a four-day computer hackers’ conference, an encryption specialist by the name of Karsten Nohl disclosed how he and about 24 other people cracked the code. He also revealed that the resulting two terabyte “code book” which is “a vast log of binary codes that could theoretically be used to decipher GSM phone calls” is available on various BitTorrent websites.
Whether you should begin to worry about this news depends on whom you listen to. The telephone companies are proclaiming that the A5/1 algorithm, a 64-bit binary code, will soon be phased out for its successor, the 128-bit A5/3 algorithm, and that even just a simple modification to the existing code would be enough to thwart any attempts to intercept calls.
Some security experts on the other hand are saying that the “hardware and software needed for digital surveillance were available free as an open-source product” and that this new development could “reduce the time to break a GSM call from weeks to hours.”
Either way, it doesn’t seem like it’s time to shout about yet another breach of privacy just yet, so let’s go back to focusing on crotch pat downs once again. [NY Times]
We know, we know -- AT&T's 3G MicroCell isn't even out nationwide yet, but for those select markets that have access, we're hoping you'll chime in on the pros and cons as to enlighten the other folks before their time comes. By and large, the GSM femotocell works exactly like the Airave for Sprint, though this one does fully support 3G data as well as simultaneous voice and data usage. For those that have taken the plunge: are you satisfied with the value proposition? Is reception really any better? Have you ditched your landline yet? What would you change about the service or billing? Voice your opinion on the matter below, and remember, life doesn't present you with many chances such as this. Wouldn't want to waste it, now would we?
T-Mobile (along with a number of overseas carriers) have had RIM's BlackBerry Bold 9700 for some time now, and while we knew that the handset was shipping to those who AT&T considers "special" and "irreplaceable," the rest of the collective masses have simply had to sit on the sidelines and wait. Thankfully, that whole bout with patience is over, as the Bold 9700 is now available to order directly from the operator's website for $199.99 after a $100 mail-in rebate and your John Henry on a 2-year agreement. So, anyone forcing Santa to come early this year, or what?
The GSM flavor of Motorola's DROID, or Milestone as it will be known in Europe, has multitouch built-in to the UI. For reasons we can only assume have something to do with an unspoken intellectual property agreement between Google and Apple, the US version of the user interface lacks multi-touch features like pinch-to-zoom even though the underlying 2.0 OS supports multitouch events. However, the video of a GSM DROID headed to Europe clearly shows this feature at the 3 minute mark. No really, see for yourselves after the break.
There's just something about Apple that makes people go crazy whenever the company's lawyers do even the simplest things -- whether it's filing routine trademark oppositions, getting patents granted, or, uh, defending allegations that the company is in league with the Mafia, Steve and friends just seem to inspire some strong reactions whenever they end up in the courtroom. So of course things got a little wild last Thursday when Nokia announced it was suing Apple over ten patents related to GSM, UMTS (what you know as 3G) and WiFi -- the pundit class immediately set upon the idea that the lawsuit was some sort of reaction to Nokia's diminishing cellphone marketshare and the perceived dominance of the iPhone, perhaps best exemplified by John Gruber's flippant "If you can't beat 'em, sue 'em." Nokia can't compete against Apple, so obviously it's abusing the hopelessly-broken patent system get a little payback, Espoo-style -- right?
Well, wrong. As usual, the race to hype this dispute as a bitter standoff between two tech giants desperate to destroy one another has all but ignored the reality of how patents -- especially wireless patents -- are licensed, what Nokia's actually asking for, and how it might go about getting it. And as you know, we just don't do things that way, so we've asked our old friendMathew Gavronski, a patent attorney in the Chicago office of Michael Best & Friedrich, to help us sort things out and figure out what's really going on here -- read on for more.
As we said in our hands on yesterday, Motorola's Droid phone deserves the positive attention it's getting. So what about that AT&T and GSM-compatible version we heard about? No update on availability, but here's video proof it exists:
The video is from Vietnamese site, Tinhte.com, (no freaky extra finger this time), so is likely an engineering sample. That'd also explain the sluggish response it seems to have. [YouTube via SlashGear]
We've been led to believe in the past that there'd be a GSM version of Motorola's mighty Sholes for markets outside the US, but this particular version that passed the FCC this week -- ID IHDP56KC5, if you must know -- has us particularly interested. Why? Well, it's packing WCDMA on the 850 and 1900MHz bands, which means it'd work on AT&T, Rogers, and HSPA newcomers Bell and Telus. We've been led to believe, though, that this particular device is destined for Latin America where 850 / 1900 is also used in favor of the 2100MHz spectrum more prevalent in Europe. That doesn't rule out Canada, but our instincts tell us that Verizon has every intention of locking up the Sholes as a US exclusive, which means AT&T is a likely no-go -- the carrier's been strangely silent on Android, anyhow, and we haven't heard a peep of recent intel suggesting they're prepping Google-powered gear in time for the holidays. Of course, enterprising individuals will probably figure out how to unlock and import this bad boy, so if you're an American and the thought of switching to Big Red for a Droid makes you physically ill, take heart that there might yet be hope.
Among recent FCC filings is one for a Motorola Sholes aka Droid listing the bands used by AT&T (WCDMA 850/1900/2100) as well as GSM 850/900/1800/1900. This makes the phone compatible with both AT&T and Rogers. [FCC via Mobile Crunch]