Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

In 2011, both AT&T and Sprint were hit with a man-in-the-middle on 4G GSM & CDMA bands. https://www.reddit.com/r/netsec/comments/jeis7/full_disclosu...


Interesting reading; thank you. Though after following the threads for a while and going through the original fulldisclosure posts, I've come to the following thoughts:

Generally seems a bit of a grandiose story with no real evidence backing it up and likes of which have never been repeated, either (though if you know of other 3/4G hacks please say). This was also the same year Karsten Nohl was cracking GPRS [1] (which was extremely novel) and I wonder if the these two events have gotten conflated.

The little bit of evidence given on the FD post [2] and the comments on your reddit link seem to imply this was very much a hack against WiMAX, which whilst called a 4th Generation technology, bears little or no resemblance (or history) to the 3GPP standard known as LTE/4G. I think this is where the confusion comes about and the reason why 3G wasn't broken as a side-effect. We're both using the term "4G"/"LTE" but we mean different technologies.

[1] http://www.itproportal.com/2011/08/11/gprs-can-be-hacked-eas...

[2] http://seclists.org/fulldisclosure/2011/Aug/92




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: