cdma evdo

Mobile network cracked by hackers Source: http://www.telegraph.co.uk/technology/news/8233748/Mobile-network-cracked-by-hackers.html Reported on 03 January 2011, by Matt Warman, Consumer Technology Editor, The Telegraph, UK Simple technology can be used to eavesdrop on the network used for most mobile phone calls and texts, security researchers have shown Security researchers have shown that the network used to make 80 per cent of the world’s phone calls is vulnerable to hacking, building on work demonstrated in previous years. Karsten Nohl and Sylvain Munaut demonstrated their “toolkit” at the Chaos Computer Club Congress (CCC) in Berlin. They showed off an "end-to-end" hack, from identifying a phone to stealing its data, which completes work they showed last year indicating that it was easy to crack the GSM network’s security codes. Simon Bransfield-Garth, chief executive of mobile phone security firm Cellcrypt, said that "Businesses must plan now for the eventuality that their mobile voice calls will come under increasing attack. A ‘policy of hope’ towards mobile phone security is not adequate." He said that voice services should be treated with the same caution as emails. Most mobile phone calls worldwide are made using the GSM standard. GSM calls are protected by a 22-year-old encryption algorithm, known as A5/1. The algorithm, which was first cracked in 1999, is designed to prevent mobile phone calls from being intercepted by eavesdroppers. It works by forcing mobile phones and base stations to continually change frequencies. A typical phone conversation changes frequencies around 60 times. The GSM Association has had a stronger algorithm, called A5/3, available since 2007 but few mobile network providers have made the upgrade. Although the pair are not publishing every step of their work, Mr Nohl also said that it would be easy for an amateur to emulate. According to analysts, it raises the prospect of hackers targeting wealthy individuals. Stan Schatt, of ABI Research, added, that “Effective email security has become routine but our research shows most businesses do not apply anything like the same level of robust security to cell phone calls. Those that do not respond are exposing themselves to attack". The methods used rely on taking a phone and swapping its basic software to a new version. Mr Nohl told BBC News, "We used the cheap Motorola telephones because a description of their firmware leaked to the internet.” This allowed hackers to adapt it to reveal all data broadcast. GSM’s encryption system can be defeated using a key, called a rainbow table, generated by Mr Nohl’s other work. The GSMA, which represents operators and phone makers, estimates that there are more than five billion GSM mobiles in use around the world. It has not responded to requests for comment about the research, but last year they said that although Mr Nohl’s research made it theoretically possible to eavesdrop on a call, in practice such eavesdropping would be unlikely. Mr Nohl said that commercial equipment to spy on calls currently cost upwards of £35,000. The kit demonstrated at the Berlin event cost far less than that, he told the BBC. For instance, the Motorola phones used to grab data cost only 10 euros (£9) each. Mr Nohl added the motivation for carrying out the research was to create awareness around the problem and perhaps prompt operators to improve security. A few simple steps could make it much harder for eavesdroppers, he said. "Raising their awareness is the most likely outcome, but the technical changes would be better."

Thanks for the info Rajan.

@rajanmehta: Thanks for your efforts in getting the news from the horses mouth ! Something not gelling with those statistics in the news report. The total population of Haryana in 2001 was about 21 million. Even with a decadal growth of about 25%, it should be a maximum of 25 Million in 2011. How come it has 19 Million subscribers ? = Aprox mobile penetration of 79%

Thanks for this very useful article.

Yes, it never stopped them...but they lost complete interest. That is why the small variety of non RUIM handsets you see in the Indian market are all high end and exhorbitant prices. Even the OMH handsets being sold in the market are all RUIM based.

That is completely true.... TTSL was the first one to launch CDMA (based on IS-95 A/B platform) in Hyderabad. CDMA 1X came about 2 or 3 years later. They (and Reliance) had something called a "WLL" (Wireless in Local Loop) license. License conditions meant that they were treated just like extended landline providers ....incoming was free and outgoing was1.80 per 3 minutes. That was the time when GSM was charging something like16 per minute outgoing and8 per minute incoming ! Every Mohammed, Ram and D'Souza went for it. Only drawback was that it had "limited mobility" - that means it would work only in a Short Distance Calling Area (SDCA) - lets say only in Hyderabad. That is probably why, in the early days, CDMA was said to be the (C )haiwalla, (D)hobi, (M)istri and (A)yah network. That image probably sticks till today and has been reinforced with the operators themselves, by providing only low end, low featured handsets. And then came the master stroke (influenced by Reliance).....when those licences were converted to full mobility, virtually free of charge. But that is another SCAM and another long story. BTW, all CDMA Operators the world over sell cobranded network locked handsets - so don't blame only the Indian CDMA operators. The major mistake made by Indian CDMA operators was to go for the RUIM based handsets. Since India and China are the only major markets where RUIM is popular, the choice of models/manufacturers gets limited. They lose out on the vast majority of Non RUIM models which are available in markets like S Korea, USA, etc. The author of the article is correct - the only major way ahead for the CDMA operators to survive in the long term, is to encourage data usage in their networks. CDMA is more efficient in terms of spectrum usage and their networks are not that clogged like the GSM ones. That is why you see all of them pushing Data to no extent and trying their best to give their brand a "youngster" image.

Mobile users are no different than any other type of consumers in India....we just get treated like junk ! And do not expect the regulators (in this case TRAI) to do anything.

Bharat Berry Indian firm launches an alternative to BlackBerry services Fri, Oct 29 06:46 PM Jaipur, Oct 29 (PTI) An Indian firm today launched a software service saying that it provides an alternative to the controversial BlackBerry services that have run into rough weather with the government over interception of its data. The new service, called ''Bharat Berry'', was on testing mode for the past few days and the state Chief Minister Ashok Gehlot formally launched it here today. "The issue that the online usage of BlackBerry phones cannot be monitored by the government will be fully-solved with our service ''Bharat Berry'', a country made compliant product designed keeping in consideration with all necessary Indian laws and works with all BlackBerry and other phones," Data Infosys Ltd founder and CEO Ajay Data told PTI here. He said in order to enable access to the services, including emails, users will be charged100 per month, and to ensure access and synchronization of calendar and contacts, they will have to pay50 per month. The Bharat Berry software can be purchased online and downloaded from the website. "The service provides advanced push-mail on BlackBerry handsets and ensures that the user remains connected to email, calendar and contacts through the servers hosted in India," said Data. "It also provides over-the-air (OTA) synchronization of calendar and contacts to outlook, so there will be no need to take backup of attach with the computer," he said, adding that the unique service was developed with months of hard work. Bharat Berry works through a mix of its very advanced email server known as XGeNPlus and open source technologies. Besides, unlike BlackBerry, which has servers outside the country making interception difficult, Bharat Berry''s servers are hosted in India, in compliance with security demands. "Unchecked terrorist activities are the major concern of security agencies, as it can escape detection by using BlackBerry''s coded services. We are providing a concrete solution to the problem that has left lakhs of BlackBerry phone users in limbo," Data said. The conflict between BlackBerry and the government has created uncertainty for users. The government has given RIM, the Canadian firm that provides BlackBerry services, time until end of January 2011 to give its intelligence agencies full access to all the its services. There are around one million BlackBerry subscribers in India. RIM offers the BlackBerry services in 175 countries. PTI SDA TA SA.

Only on BB devices. Visit their homepage - link is available right at the top of the first post. Secure or not - but at least a temporary relief/solution for CDMA BB users.

and when i tried *228 it told me my handset was blocked, after asking language preference ,and then postpaid or prepaid plan? Having same problem. Any solutions as yet ?