Connect with us

Telecom

Hackers Could Decrypt Your GSM Phone Call

Published

on

Kindly share this post

Researchers have discovered a flaw in the GSM standard used by AT&T and T-Mobile that would allow hackers to listen in.

 

Researchers from BlackBerry at DefCon security conference in Las Vegas, USA, presented an attack that can intercept GSM calls as they’re transmitted over the air and decrypt them to listen back to what was said.

 

And the vulnerability has been around for decades.

 

Most mobile calls around the world are made over the Global System for Mobile Communications standard; in the US, GSM underpins any call made over AT&T or T-Mobile’s network.

 

Regular GSM calls aren’t fully end-to-end encrypted for maximum protection, but they are encrypted at many steps along their path, so random people can’t just tune into phone calls over the air like radio stations.

 

The researchers found, though, that they can target the encryption algorithms used to protect calls and listen in on basically anything.

 

“GSM is a well documented and analyzed standard, but it’s an aging standard and it’s had a pretty typical cybersecurity journey,” says Campbell Murray, the global head of delivery for BlackBerry Cybersecurity.

 

“The weaknesses we found are in any GSM implementation up to 5G. Regardless of which GSM implementation you’re using there is a flaw historically created and engineered that you’re exposing.”

 

The problem is in the encryption key exchange that establishes a secure connection between a phone and a nearby cell tower every time you initiate a call.

 

This exchange gives both your device and the tower the keys to unlock the data that is about to be encrypted. In analyzing this interaction, the researchers realized that the way the GSM documentation is written, there are flaws in the error control mechanisms governing how the keys are encoded. This makes the keys vulnerable to a cracking attack.

 

“It’s a really good example of how the intention is there to create security, but the security engineering process behind that implementation failed.”

 

As a result, a hacker could set up equipment to intercept call connections in a given area, capture the key exchanges between phones and cellular base stations, digitally record the calls in their unintelligible, encrypted form, crack the keys, and then use them to decrypt the calls.

 

The findings analyze two of GSM’s proprietary cryptographic algorithms that are widely used in call encryption—A5/1 and A5/3.

 

The researchers found that they can crack the keys in most implementations of A5/1 within about an hour. For A5/3 the attack is theoretically possible, but it would take many years to actually crack the keys.

 

“We spent a lot of time looking at the standards and reading the implementations and reverse engineering what the key exchange process looks like,” BlackBerry’s Murray said.

 

“You can see how people believed that this was a good solution. It’s a really good example of how the intention is there to create security, but the security engineering process behind that implementation failed.”

 

The researchers emphasize that because GSM is such an old and thoroughly analyzed standard, there are already other known attacks against it that are easier to carry out in practice, like using malicious base stations, often called stingrays, to intercept calls or track a cellphone’s location.

 

Additional research into the A5 family of ciphers over the years has turned up other flaws as well. And there are ways to configure the key exchange encryption that would make it more difficult for attackers to crack the keys. But Murray says that the theoretical risk always remains.

 

Short of totally overhauling the GSM encryption scheme, which seems unlikely, the documentation for implementing A5/1 and A5/3 could be revised to make key interception and cracking attacks even more impractical. The researchers say that they are in the early phases of discussing the work with the standards body GSMA.

 

The trade association said in a statement to WIRED that, “Details have not been submitted to the GSMA under our coordinated vulnerability (CVD) programme. When the technical details are known to the GSMA’s Fraud and Security Group we will be better placed to consider the implications and the necessary mitigation actions.”

 

Though it may not be that surprising at this point that GSM has security issues, it’s still the cellular protocol used by the vast majority of the world. And as long as it’s around, real call privacy issues remain, too.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Telecom

Defending the Foundations for Connectivity

Published

on

Kindly share this post

By Engr. Gbenga Adebayo

In 2001, when the first GSM call was made in Nigeria, how many of us would have envisaged the digital world that we live in today?

Defending the Foundations for Connectivity

Gbenga Adebay, chairman, ALTON

The pace of growth and the rate of adoption of telecoms solutions in Nigeria has been revolutionary. It is a globally acknowledged case study that we should be proud of and a clear demonstration of what can be achieved.

Almost all of us today are reliant on the network connectivity that it has enabled in different shapes and forms. From the simple need to communicate with loved ones, to the digital platforms that enable our access to and consumption of entertainment, financial products and other critical services.

Our reliance on these systems is becoming more and more acute, whether it is citizens, governments, or corporations.

System downtime is increasingly disruptive and offline manual redundancies are often in the advanced stages of being phased out. The pace of this transition is not slowing down. With the core infrastructure in place, innovation is driving the exponential growth of services that ride on it. From the fully adopted social media that has changed the way we interact, to the emerging Artificial Intelligence (AI) revolution.

While this innovation is enabling exciting new possibilities, there is a tendency to focus on those opportunities, to the detriment of the core infrastructure on which it rides.

It is imperative that we retain a focus on the optimisation of that infrastructure and enable continued investment in its development.

We have seen how the transition from 2G, through to 3G, 4G and 5G have each enabled the development of more and more sophisticated solutions.

The continued development of core infrastructure has to be sustainable, and over the last few months we have begun to see the challenges that the operators that provide it are facing.

Both MTN and Airtel have declared significant foreign exchange (FX) losses in Nigeria, and the stress is not linked to them alone.

The entire ecosystem is battling with a range of challenges that must be addressed. If we fail to do so, the downstream impact on innovation will be severe. Telecoms infrastructure requires a base level of investment to maintain its current capabilities, and significant additional investment to expand and grow. It is capital intensive and that capital has to be generated through sustainable business models.

At the heart of the challenge the industry faces is the issue of rising costs.

Recent financial losses are directly linked to the cost of operating towers that rely on inputs like diesel, which have increased significantly as the Naira has depreciated.

The provisions large telecom companies have had to make, and the consequent losses and impact on their reserves is a red flag.

It tells us that business as usual is not sustainable. If we continue as we are, then those companies will struggle to continue to invest in and maintain existing services.

But those costs are not the only challenge. General cost inflation, multiple taxation, regular and damaging vandalisation of infrastructure and the costs associated with regulatory compliance all help contribute to the high cost of operations.

We cannot continue to follow a path that asks those companies to simply accept those rising costs. It is no longer sustainable, and we have reached an inflection point.

This is a critical moment for the industry.

How we approach and resolve it will define the future of Nigeria’s digital economy.

If you want to be able to enjoy the benefits that digitisation brings. If we want the infrastructure that enables AI and helps us drive growth, then we must take action now.

Cost-reflective tariffs, like it or not, are simply non-negotiable. We have seen the impact of price controls in other segments of the economy, like power.

If providers cannot operate sustainable business models, then they stop investing. When that happens, the existing infrastructure starts to crumble.

For power, a consumer can choose to take ownership of the solution by buying a generator, or a solar panel.

For fuel, the government can step in as the provider of last resort and manage a subsidy regime that mitigates the impact on the population. Those options are not available in the telecoms sector. There is no self-help solution.

We fully understand and appreciate the financial stress that Nigerians are experiencing today. The cost of living is the single most significant factor in most people’s daily lives.

But those people are still able to enjoy the benefits that connectivity brings, at the price they paid before these challenges became so acute.

Imagine a future in which the gains of the last twenty years are reversed. Nigeria, and Nigerians simply cannot afford it. The pain that we would feel under those circumstances would be exponentially worse.

We need to find a long-term, sustainable and manageable solution to this problem. Prices will need to rise, but action needs to be taken in a measured way, through sustainable conversations and partnership with the government. It is time to address this head on.

 

Engr. Gbenga Adebayo is chairman, Association of Licensed Telecom Operators of Nigeria (ALTON).


Kindly share this post
Continue Reading

Telecom

ALTON, ATCON Urge FG to Address Telecoms Industry Challenges

Published

on

Kindly share this post

The Association of Licensed Telecom Operators of Nigeria (ALTON) and The Association of Telecommunication Companies of Nigeria (ATCON), representing Mobile Network Operators and telecommunication companies in Nigeria, are calling upon the government to take decisive action in addressing the numerous challenges confronting the telecommunications industry.

In a statement jointly signed by Engr. Gbenga Adebayo, chairman of ALTON and Engr. Tony Izuagbe Emoekpere, ATCON President, the associations underscored the urgent need for collaborative efforts between the public and private sectors to overcome obstacles hindering the sector’s growth and development.

Infrastructure Deficits: ALTON & ATCON members still lack access to essential telecommunication services due to a myriad of challenges, including multiple taxation and regulations and prohibitive Right of Way (RoW) charges, inadequate electric power supply and vandalism of telecommunications infrastructure.

 Protection of Assets and Network Infrastructure: Advocating for legislation that

designates telecommunications infrastructure as Critical National Infrastructure (“CNI”): Both Associations expressed deep concern over the escalating security threats facing telecommunications infrastructure in Nigeria.

Telecommunications infrastructure undisputedly plays a pivotal role in Nigeria’s national security and socioeconomic growth, especially as the country currently contends with multiple security challenges that require urgent and immediate actions in response to these threats.

Attacks on cell towers, fibre optic cables, and other critical assets disrupt telecommunications services and result in significant financial losses for operators.

The associations urge the government to prioritize the security of telecommunications infrastructure and collaborate with law enforcement agencies to enhance protection measures and combat vandalism and sabotage effectively.

Cost-Reflective Tariff of Services: ALTON and ATCON respectfully reiterate that telecommunications infrastructure development requires substantial investments in network expansion, maintenance, and technology upgrades.

Despite the adverse economic headwinds, the telecommunications industry remains the only industry yet to review its general service pricing framework upward in the last (11) years, primarily due to regulatory constraints.

For a fully liberalized and deregulated sector, the current price control mechanism, which is not aligned with economic realities, threatens the industry’s sustainability and can erode investors’ confidence.

ATCON and ALTON call upon the government to facilitate a constructive dialogue with industry stakeholders to address pricing challenges and establish a framework that balances consumers’ affordability with operators’ financial viability.

Regulatory Independence: ALTON & ATCON advocates for the sustenance of a culture of independence in the regulatory landscape to safeguard against undue influence and unwholesome incursion into the Nigerian Communications Commission’s (NCC) or (Commission) domain, which will inspire trust in the telecommunications sector and encourage investment.

Regulatory neutrality and independence are crucial to ensuring a thriving telecommunications sector. Statutory provisions lend credence to this notion, as a lack of an impartial regulator will lead to a failure to maintain public confidence in the objectivity and independence of its decisions.

ALTON and ATCON reaffirms its commitment to working collaboratively with the government to address the challenges facing the telecommunications industry in Nigeria.

By fostering a conducive regulatory environment, prioritizing infrastructure development, enhancing security measures, and facilitating pricing adjustments, the government can unlock the full potential of Nigeria’s telecommunications sector, driving economic growth and societal development.

 


Kindly share this post
Continue Reading

Telecom

Qualcomm Shortlists Startups for Qualcomm Make in Africa 2024 and Awards 2023 Wireless Reach Social Impact Fund

Published

on

Kindly share this post

Qualcomm Incorporated today announced the shortlisted startups for Qualcomm Make in Africa 2024, as well as the winner of the 2023 Wireless Reach Social Impact Fund.

The Qualcomm Africa Innovation Platform, now in its second year, aims to work with and support the development of Africa’s emerging technology ecosystem by providing mentorship, education, and training programs with a focus on 5G, Edge-AI/ML, Compute, and IoT. This year, Qualcomm received an overwhelming response, with approximately 250 applications from 30 countries.

Highlights: 

  • Startup cohort announced for 2024 Qualcomm Make in Africa startup incubation program featuring technologies.
  • Announcement of the awardee of the 2023 Wireless Reach Social Impact Fund, supporting startups in scaling their societal and market impact.
  • Development of L2Pro Africa website content nears completion, providing free online training on intellectual property protection.

As the first initiative of its kind in Africa, Qualcomm Make in Africa is an equity-free mentorship program that identifies promising early-stage startups keen on applying advanced connectivity and processing technologies such as 5G, Edge-AI/ML, Compute, and IoT to innovative end-to-end systems solutions, including hardware.

These startups have demonstrated exceptional potential in applying advanced connectivity and processing technologies to innovative end-to-end systems solutions.

The selected startups will receive free mentorship, business coaching, access to engineering consultation for product development, and guidance on protecting intellectual property. The 2024 cohort includes the following startups (listed in alphabetical order):

  • Aurora Health from Kenya provides AI-based cardiovascular health care tools
  • CropScan from Kenya uses solar-powered smart farming IoT devices
  • Cure Bionics from Tunisia makes smart 3D printed prosthetic arms
  • DevisionX from Egypt provides AI-based low-code computer vision tools
  • Kalio from Cameroon is building AI tools for Agricultural IoT
  • Kitovu from Nigeria provides tools and software for smart agricultural warehouse management
  • NextAI Studios from Kenya builds AI-based emotion detection into toys for children’s mental healthcare
  • RIM Nextgen from Kenya, uses smart tools for monitoring propane consumption
  • Sparcx from South Africa uses AI for enhancing radar signal processing
  • Vizmerald from Tunisia, is working on AI-based textile industry inspection

Qualcomm is also proud to announce the awardee of the 2023 Wireless Reach Social Impact Fund. This fund, provided by Qualcomm through its Qualcomm® Wireless Reach™ Initiative, aims to support startups in scaling their societal and market impact.

Ecorich Solutions Limited, a female-founded organization based in Nairobi, Kenya, will be awarded funding to help scale the impact of their smart organic food composter.

Wireless Reach funding will support Ecorich to address the dual challenge of organic waste management and the need for sustainable agricultural practices, with the goal of reducing environmental pollution, improving crop yields for farmers, and mitigating waste-related health risks for communities.

The other nine startups from the 2023 cohort will also receive valuable stipends to continue fueling their growth. These startups have showcased innovative uses of wireless technology to address pressing needs in their communities.

In addition, Qualcomm is excited to highlight the progress of the L2Pro Africa IP e-learning Platform, a free online training program designed to empower startups, SMEs, and researchers in Africa to protect, secure, and maximize their innovations. This program has been created in collaboration with Adams and Adams, Africa’s leading intellectual property (IP) law firm.

The education content has been updated with individual filing procedures for patents, industrial designs, and trademarks in the countries of Kenya, Nigeria, Uganda, Ghana, Rwanda and within the two African patent organizations, ARIPO and OAPI.

These step-by-step descriptions of per-country filing requirements empower inventors to interact effectively with IP professionals such as an IP attorney and their respective IP offices.

“I am thrilled with the overwhelming response to the Africa Innovation Platform this year,” said Alex Rogers, President, QTL & Global Affairs, Qualcomm Incorporated.

“The quality and diversity of the applications received reflect the immense talent and potential within Africa’s technology ecosystem.

“We are excited to work with the shortlisted startups and provide them with the necessary resources and support to drive innovation and create a positive impact in their communities.”

“We applaud Qualcomm for launching the second year of its Innovate in Africa Platform, which not only equips the upcoming generation of African entrepreneurs with expertise in pivotal areas like AI/ML, healthcare, agri-tech, smart cities, and communications but also empowers them to safeguard their intellectual property through the complimentary L2ProAfrica program.”, said John Omo, secretary general, African Telecommunications Union (ATU).

Mr. Omo also emphasized that the ATU remains steadfast in its commitment to fostering innovation and entrepreneurship across the continent. “Our youth innovation program, among other initiatives, plays a crucial role in cultivating the talents and aspirations of Africa’s young visionaries,” he affirmed. “We are ready to collaborate with additional partners to realize this objective.”


Kindly share this post
Continue Reading

Trending