prschmitt

5 ms·

1.
by prschmitt 4y ago
By decoupling the user identity from a permanent, globally unique IMSI, we make IMSI catcher / Stingray attacks less "useful" as the IMSI is changing and isn't tied to the user. They can attack your IMSI, but it won&#x27
2.
by prschmitt 4y ago
Yes. With a traditional VPN you are trusting that VPN provider with all of your traffic. They know your identity and everything you do. The two hop architecture we use decouples that information such that neither hop has both the user'
3.
by prschmitt 4y ago
As with all mobile service it really depends on coverage in your area. The baseline service is LTE.
4.
by prschmitt 4y ago
This was a research project that we undertook while at our respective universities. We decided to spin it out as we think it's useful. We are not funded by the government or Princeton (while Princeton owns the IP).
5.
by prschmitt 4y ago
Absolutely, we're working on this currently.
6.
by prschmitt 4y ago
IMEIs are definitely a challenge, but they're also different from these other identifiers because the IMEI is not a network identifier. When you attach to a mobile network, the attach process uses the IMSI to authenticate you and then
7.
by prschmitt 4y ago
Biased opinion (author of PGPP https://www.usenix.org/system/files/sec21-schmitt.pdf ). These types of attacks are numerous and easy across multiple generations of cellular. I'd argue the best solution is to s
8.
Show HN: Cost-aware network traffic analysis(traffic-refinery.github.io)
35 points by prschmitt 5y ago|4 comments
9.
by prschmitt 5y ago
The regular attach procedure is unchanged. In the simplest version we give every SIM the identical IMSI and key. However, their use is to only gain IP connectivity - the equivalent of an allow list on the backend db (AUSF) which gives you I
10.
by prschmitt 5y ago
Yes, in a perfect world, they would simply choose to not track. We (I'm a co-author on the research) chose to change things such that we don't need to rely on carrier benevolence. Our fix changes the architecture to nullify an ide