Feeds

Handset makers, the criminal's friend

See no evil, speak no evil

Internet Security Threat Report 2014

Don't care to share

Network operators probably wouldn't share if they weren't legally obliged to, and compensated for their costs. But while a network operator will be subject to national laws, a handset manufacturer will likely be located outside such a jurisdiction.

International agreements cover national security issues, and you can be sure that the more secret services have tools at their disposal. But that's no use to a cop trying to work out the identity of the corpse he is putting into the body bag.

The manufacturers don't want to share security models, or codes, for fear that once shared they're unlikely to stay secret for long. Miscreants getting hold of such codes might be bad publicity, for starters. But manufacturers are even more worried about what their competitors will think.

There are no standards for device security. One handset might yield to simple command, while another will stay secure against any attack: legally authorized or otherwise. The industry is very reticent to talk about specific models, but we understand that the police Phone Examination Units particularly dread receiving handsets from Sony Ericsson.

A few years ago the Metropolitan Police tried to set up a working group with the manufacturers, to define some common-access standards that would allow legitimate law enforcement access to mobile-phone handsets. With no motivation and no legal threats to make against them, the manufacturers saw no advantage in taking part and the project was stalled.

SIMs remain secure, within a legal framework that allows law enforcement to break that security. But until the same thing can be applied to mobile phones, the manufacturers will create more secure systems. The UK taxpayer, meanwhile, will continue to fund police forces and private companies in order to break that security, to the enormous frustration of everyone involved.®

Business security measures using SSL

More from The Register

next story
Brit telcos warn Scots that voting Yes could lead to HEFTY bills
BT and Co: Independence vote likely to mean 'increased costs'
Phones 4u slips into administration after EE cuts ties with Brit mobe retailer
More than 5,500 jobs could be axed if rescue mission fails
New 'Cosmos' browser surfs the net by TXT alone
No data plan? No WiFi? No worries ... except sluggish download speed
Radio hams can encrypt, in emergencies, says Ofcom
Consultation promises new spectrum and hints at relaxed licence conditions
Blockbuster book lays out the first 20 years of the Smartphone Wars
Symbian's David Wood bares all. Not for the faint hearted
Bonking with Apple has POUNDED mobe operators' wallets
... into submission. Weve squeals, ditches payment plans
This flashlight app requires: Your contacts list, identity, access to your camera...
Who us, dodgy? Vast majority of mobile apps fail privacy test
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.