31 March 2015

Dean Procter

Dean Procter - Transinteract

328Posts 938,179Views 467Comments


A place to share stuff that isn't at all fintec related but is amusing, absurd or scary.

Mobile Phone Banking vs IMSI Catchers

03 August 2010  |  5451 views  |  0

Real Title: Mobile & Phone Banking in the Age Of The $1500 IMSI catcher.

Without getting all techo, you may have read where I reported last year that GSM encryption was kaput. Before you get all excited and congratulate yourself that your are on 3g, you may not always be and most of the rest of the world including about 3 billion of your customers are still in the GSM boat.

IMSI catchers basically trick your phone into placing the call through their network, allowing you to make your call but enabling the catcher to eavesdrop or record your call on the way. Enterprising Chris Paget demonstrated one at a hackers convention and it is probably worse than Barnaby Jack's old spew the cash from the ATM hack which he demonstrated up the street at another convention. The ATM's can be fixed by the operators. The mobile's can't be fixed quite as easily.

You probably have a few ideas by now. The demonstrated exploit was a little rough round the edges but represents a serious issue for mobile/phone banking and  corporate communications. 

Of course someone will (or may have already..) come up with a solution for banking.

TagsSecurityDealing rooms

Comments: (0)

Comment on this story (membership required)
Log in to receive notifications when someone posts a comment

Latest posts from Dean

In case you wondered...

02 March 2015  |  513 views  |  0  |  Recommends 0 TagsInnovationGroupWhatever...

Coal is a dirty business.

02 March 2015  |  922 views  |  0  |  Recommends 0 TagsRisk & regulationGroupGoing green

It makes perfect sense of course, to have a Plan

03 October 2013  |  2517 views  |  0  |  Recommends 0 TagsMobile & onlinePaymentsGroupInnovation in Financial Services

iPhone fingerprint scanner broken by Chaos

22 September 2013  |  3135 views  |  3  |  Recommends 0 TagsSecurityMobile & onlineGroupInformation Security

Did I mention, 'your dongle dongle is impotent'?

22 September 2013  |  2472 views  |  0  |  Recommends 0 TagsSecurityMobile & onlineGroupInformation Security

Dean's profile

job title CEO
location Sydney
member since 2008
Summary profile See full profile »
Ubiquitous mobile phone based payments, ID, transaction authentication, mobile wallet and transport ticketing.

Dean's expertise

Who's commenting on Dean's posts