Feeds

Handset makers, the criminal's friend

See no evil, speak no evil

The Power of One Infographic

Don't care to share

Network operators probably wouldn't share if they weren't legally obliged to, and compensated for their costs. But while a network operator will be subject to national laws, a handset manufacturer will likely be located outside such a jurisdiction.

International agreements cover national security issues, and you can be sure that the more secret services have tools at their disposal. But that's no use to a cop trying to work out the identity of the corpse he is putting into the body bag.

The manufacturers don't want to share security models, or codes, for fear that once shared they're unlikely to stay secret for long. Miscreants getting hold of such codes might be bad publicity, for starters. But manufacturers are even more worried about what their competitors will think.

There are no standards for device security. One handset might yield to simple command, while another will stay secure against any attack: legally authorized or otherwise. The industry is very reticent to talk about specific models, but we understand that the police Phone Examination Units particularly dread receiving handsets from Sony Ericsson.

A few years ago the Metropolitan Police tried to set up a working group with the manufacturers, to define some common-access standards that would allow legitimate law enforcement access to mobile-phone handsets. With no motivation and no legal threats to make against them, the manufacturers saw no advantage in taking part and the project was stalled.

SIMs remain secure, within a legal framework that allows law enforcement to break that security. But until the same thing can be applied to mobile phones, the manufacturers will create more secure systems. The UK taxpayer, meanwhile, will continue to fund police forces and private companies in order to break that security, to the enormous frustration of everyone involved.®

The Essential Guide to IT Transformation

More from The Register

next story
Yorkshire cops fail to grasp principle behind BT Fon Wi-Fi network
'Prevent people that are passing by to hook up to your network', pleads plod
Major problems beset UK ISP filth filters: But it's OK, nobody uses them
It's almost as though pr0n was actually rather popular
Apple orders huge MOUNTAIN of 80 MILLION 'Air' iPhone 6s
Bigger, harder trouser bulges foretold for fanbois
Google Nest, ARM, Samsung pull out Thread to strangle ZigBee
But there's a flaw in Google's IP-based IoT system
Microsoft unsheathes cheap Android-killer: Behold, the Lumia 530
Say it with us: I'm King of the Landfill-ill-ill-ill
US freemium mobile network eyes up Europe
FreedomPop touts 'free' calls, texts and data
'Two-speed internet' storm turns FCC.gov into zero-speed website
Deadline for comments on net neutrality shake-up extended to Friday
Oh girl, you jus' didn't: Level 3 slaps Verizon in Netflix throttle blowup
Just hook us up to more 10Gbps ports, backbone biz yells in tit-for-tat spat
prev story

Whitepapers

Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.