Skip to content
0:00 / 0:00

#ss7#telecomsecurity#tracking

Tobias Engel: SS7: Locate. Track. Manipulate.

media.ccc.de

274K subscribers • 56 videos on Hallway • Conference channel

YouTube
  • Recommended by 1 person: 1 on Hacker News.
  • Presented by Tobias Engel, security researcher

Intermediate. Assumes working knowledge.

84K views11 years ago1 recommendation

SecurityDistributed systemsNetworking and protocolsExploits and vulnerabilitiesPrivacy and surveillance

Tobias Engel demonstrates how vulnerabilities in the SS7 signaling network allow attackers to locate, track, and manipulate mobile phones worldwide.

media.ccc.de/browse/congress/2014/31c3_-_6249_-_en_-_saal_1_… Companies are now selling the ability to track your phone number whereever you go. With a precision of up to 50 meters, detailed movement profiles can be compiled by somebody from the other side of the world without you ever knowing about it. But that is just the tip of the iceberg. Tobias Engel Help us caption & translate this video! amara.org/v/FuHS/

Why it's here

1 person recommends this

What people say. Recommended as a classic demonstration of the severe security flaws inherent in the global SS7 telecom network.

Hasknewbieon Hacker News • Recommends

On “Telecom Lobbyists Downplayed Security Flaws in Mobile Data Backbone”

…g downplayed here) was not designed with security in mind, and so has been the subject of infosec research for a few years now. This is a CCC talk from 2014 (there are older ones) where Tobias Engel demonstrates among other things tracking down a test subject over two continents for about a month, via his non-tempered mobile phone, using only SS7: link to this video In the same talk he mentions that he is working with a German telecom operator to resolve some of these issues. So as opposed to the US, it appears SS7 has been hardened in the EU since at least 2014 for the type of attacks mentioned in the Vice article... I really wonder why the US MNO are unwilling to act on this, since it's (1) a well kn…

Zekioon Hacker News • Mentions

On “Your WiFi is using a stronger encryption than the tech behind 2 factor auth”

If I remember correctly SS7 was proved ridiculously insecure ages ago by a guy who did a talk at DefCon it was quite the interesting talk, will see if I can find it and add it to my comment EDIT: wasn't a defcon talk I remembered, but a 25c3 talk: link from 2010 :) EDIT2: link to this video newer version of the talk

mindcrimeon Hacker News • Mentions

On “I made 50k calls to explore the telephone network”

…a good, fun book is Understanding Telephone Electronics 8 by Carr, Winder, and Bigelow. Another interesting one is Digital Telephony 9 by Bellamy. Another "oldie but goodie" is Voice and Data Communications Handbook 10 by Bates and Gregory. Also, don't ask me how or why I know any of this stuff... :-) 0: link 1: link 2: link 3: link to this video 4: link 5: link 6: link 7: link 8: link 9: link 10: link…