SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Technology Stocks : Ericsson overlook? -- Ignore unavailable to you. Want to Upgrade?


To: jetcityrandy who wrote (1478)4/13/1998 10:52:00 AM
From: Jim Oravetz  Read Replies (2) | Respond to of 5390
 
Any comments on this article from WSJ($) on GSM security?

April 13, 1998

Experts Report Flaw in Technology
For Digital Wireless Phone Systems

By JARED SANDBERG
Staff Reporter of THE WALL STREET JOURNAL

Computer-security engineers said they have found a weakness in the world's most pervasive digital cellular-phone technology, a flaw some fear could eventually allow unscrupulous hackers to obtain free service by impersonating legitimate customers.

A software developer and two graduate students said they can extract key security information from so-called GSM digital cellular phones, a technology in use by almost 80 million people world-wide. The breach is notable because such phone systems, unlike older analog cellular networks, were believed to be practically tamper-proof.

The security information is contained in a "subscriber identification module," or SIM card, a credit card-like device inserted into digital cellular phones that identifies each customer to the telephone system. The engineers said they could copy the card and store its information on a computer or a device as simple as a hand-held electronic organizer. When the computer is connected to a phone, the cellular network believes it is being used by an authentic customer.

Key Unlocks Security

"Once you've recovered the key, all of the security in the system has been compromised," said one of the security experts, David Wagner, a 23-year-old graduate student at the University of California at Berkeley. "What else will be found if other people looked at it?"

But some industry observers said the weakness will have negligible impact. The three experts haven't found a way to extract the security codes as they are being transmitted through the airwaves from a telephone to the network -- the "cloning" problem of analog phone systems -- though such a system may someday be devised. Instead, their technique requires that they be in possession of a SIM card.

"It doesn't damage the integrity of the system nor does it put customers or operators at risk," said George Schmitt, president of Omnipoint Communications Inc., one of this country's GSM operators.

Still, cryptography experts at universities make a sport of cracking some of the most popular technologies. Microsoft Corp., Netscape Communications Corp. and Sun Microsystems Inc. have all been strafed by campus cryptographers. "There's a lot of glee at poking holes in the overblown statements" of corporations, said Eric Hughes, founder of Simple Access Inc., an electronic-commerce company in San Francisco that hosted the announcement by the three who cracked the GSM code.

Track Record of Poking Holes

The latest hacking handiwork marks at least a hat trick for Mr. Wagner and his cohort Ian Goldberg, who have become famous for cracking purportedly secure code. In the fall of 1996, the duo discovered a flaw in the technology of Netscape's Web browser software that protects the privacy of credit-card purchases. Then Mr. Goldberg followed by breaching the relatively weak encryption code that the U.S. government lets companies export.

Marc Briceno, 36 years old, director of the Smart Card Developers Association, which represents companies that write software for cards similar to those used in GSM phones, began trying to piece together one of the GSM technology's secret algorithms in January. Mr. Briceno received a document detailing part of the so-called COMP128 algorithm that had been leaked by a researcher, he said.

After spending several months filling the holes in the algorithm, he took it to Messrs. Wagner and Goldberg. Within two hours, the two had found a flaw in the algorithm, and they developed software that would challenge the algorithm to see if it could produce other keys to the security system. Using a computer and a jerry-built smart-card reader, they discovered that they could challenge the algorithm and deduce a cryptographic key. That would allow them to use a hand-held computer to emulate the subscriber identification module and place calls with it.

The engineers didn't rule out that their technique could lead someone to devise a device that would steal this information from the airwaves, so that having the card in the first place wouldn't be necessary.

On Saturday, the engineers gathered in San Francisco to demonstrate their findings. But, said Mr. Briceno: "We have been informed by counsel that mere possession of this software might be a federal offense. Unfortunately, there will be no demo today."

Return to top of page Copyright c 1998 Dow Jones & Company, Inc. All Rights Reserved.



To: jetcityrandy who wrote (1478)4/13/1998 4:08:00 PM
From: Alex  Read Replies (1) | Respond to of 5390
 
Ericsson Mobile Phones Announces Major Sponsorship of Celine Dion's North
American Tour

NEW YORK--(BUSINESS WIRE)--April 13, 1998--Ericsson Mobile Phones, a world leading supplier in telecommunications, today
announced their exclusive presenting sponsorship of international singing sensation and Grammy Award winner Celine Dion for her
1998-1999 North American concert tour, ''Let's Talk About Love.'' With this sponsorship, Ericsson is the first corporation to sponsor a Celine
Dion concert tour in the United States.

Dion kicks off her ''Let's Talk About Love'' tour in Boston on August 21. For the first time, Dion will be performing in the round on a
specially designed set that promises to be her most dramatic and spectacular to date. The ''Let's Talk About Love'' Tour presented by
Ericsson Mobile Phones is scheduled to run in 25 U.S. and Canadian cities through October 25, 1998 and will then resume from March 15,
1999 through April 30, 1999. Tickets go on sale in most markets April 17 - April 20.

In conjunction with her tour, Celine Dion will be appearing in a new Ericsson broadcast advertising campaign and Ericsson will also be
incorporating this campaign in promotional, point-of-purchase and other marketing activities.

''The Ericsson brand represents many of the same core values that are important to me -- one of which is bringing people together through
the sound of a human voice,'' said Celine Dion.

With her Titanic hit, ''My Heart Will Go On,'' having recently won an Academy Award, Dion is one of the world's most sought after
performers today. Dion won the 1997 World Music Award for Biggest Selling Artist in the World and received two Grammy Awards in 1997
for Album Of The Year and Pop Album Of The Year for ''Falling Into You.''

''Celine Dion and Ericsson each share a deep commitment and concern for making the human connection -- whether it's through music or
technology,'' said David Korb, vice president of sales and marketing, North America, Ericsson Mobile Phones. ''We're especially proud that
Celine's organization has been using Ericsson phones for several years. Our partnership is testament to our common belief in the power of the
human voice.''

Information about Ericsson mobile phones and accessories is also available on the World Wide Web at ericsson.com.

Ericsson's 100,000 employees are active in more than 130 countries. Their combined expertise in fixed and mobile networks, mobile phones
and infocom systems makes Ericsson a world-leading supplier in telecommunications.

Contact:

Daryl Toor, 919/472-7953
Mobile: 919/271-2165
or
Additional Contact after 4/14:
Kathy Egan, 212/685-4030
Mobile: 917/754-6525

More Quotes and News:
LM ERICS TEL (Nasdaq:ERICY - news)
Related News Categories: computers, entertainment, telecom

Help

Copyright c 1998 Business Wire. All rights reserved. All the news releases provided by Business Wire are copyrighted. Any forms of copying other than
an individual user's personal reference without express written permission is prohibited. Further distribution of these materials is strictly forbidden,
including but not limited to, posting, emailing, faxing, archiving ina public database, redistributing via a computer network or in a printed form.
See our Important Disclaimers and Legal Information.
Questions or Comments?