Feeds

back to article Dubai mobe cracking demo barred by Heathrow boffin bust

A mobile phone security researcher has been left baffled by UK government airport authorities, who impounded basic equipment while claiming that he could be illegally exporting high-end code breaking technology. The action meant he had to cancel a demonstration of a groundbreaking exploit of GSM encryption in the Middle East. …

COMMENTS

This topic is closed for new posts.
Black Helicopters

intelligence

> "all our work is intelligence-based"

brings a whole new meaning to the word, doesn't it?

0
0
Anonymous Coward

So...

... Like i'd do with any kind of data I wanted kept out of HM / US customs hands (Like bank statements, contact lists, personal emails etc), mail it to yourself at the destination, under a pseudonym if necessary, and pick it up on arrival. USB memory stick with a TrueCrypt partition seems like a good plan, or just sending any electronics as a Gift.

If they're going to make it a fucking hassle to get through customs with inocuous gadgets or work-required aparatus, they should expect regular people to start subverting the system.

No, i'm NOT prepared to miss flights so they can PRETEND they're stopping terrorism. The only issue is that too many people ARE willing.

0
0
Silver badge

they really just wanted to see how he did it ...

... so they can do it to us.

> Their undetectable method impressed by being up to 10,000 times faster than the brute force number crunching it's thought government agencies use

If this really does what it says on the tin then it'll be very useful. Maybe cutting research budgets and spending the money on security efforts like this is more cost effective after all.

I wonder if he stands any chance of getting his kit back after the govt. have reverse-engineered it? ...... nah!

0
0
Silver badge

oooops, didn't read the whole story

so he did get the parts back.

Sounds like when my company sent a server for BT type approval in the 80's. Out went a nice new £10,000 box. Back came a crate full of pieces.

The marketing guy just cried.

0
0
Anonymous Coward

intelligence services

Oxy and moron come to mind.

AC because I can see the Black Helicopters circling 8-)

0
0

intelligence my backside

Intelligence is getting experts to do this, and to put back together dismantled gear properly obviously - techs aren't known for their customer service, but they should have got an expert with the customs guy to examine it. I'd call that a claim for loss of earnings, especially as GHCQ seemingly approved the disclosure of this!

Having said that, how big are these things? I'd have taken it in hand luggage personally, in the way that if I was DJing abroad my laptop + key CDs would be with me in the cabin and a change of clothes/undies.

0
0

Re: intelligence

Well anyone who's seen Yes Minister will know why.

The Ministry is named for the opposite of who it works for. So MoD works for arms dealers, Ministry of Education works for the teachers.

Intelligence teams are thick as pigshit.

0
0

Re: intelligence

Next-time I hear about something being intelligence-based, I'm calling Trading Standards...

...that or ask the government to change to idiocy-based policies as they have greater potential to accidentally do something sensible for a change.

0
0
E

Comment

This'll be your Brit surveillance state usin' it's cameras and microphones to identify a threat, innit?

0
0
Silver badge
Black Helicopters

Ha.

More than likely HM Gov just wanted a copy of the source code that's 10,000 times faster than the version they have.

I bet next time he'll send the PC + phone via DHL a week in advance!

Given the physical size of MicroSD cards these days, you could smuggle who knows how much "restricted" material on something you could hide in your ear!

0
0
Anonymous Coward

So...

...they knew what he did for a living, they knew he was leaving the country and what he was taking with him. He'd had prior contact with the SigInt branch. And they still couldn't be bothered to do the homework necessary to check that what he was taking was what he said it would be, or fill out the paperwork properly.

It has been obvious for some time that HMRC have too many discretionary powers. While they need an amount of freedom to act to do the job with which they are tasked, they have to be held accountable for their SNAFUs. At the very least they should be liable for replacement of items damaged in their searches when no charges are brought, but that is really only the tip of the iceberg. If they were accountable they'd take a wee bit more care when dealing with the people they're supposed to be *protecting*.

0
0
Black Helicopters

Govenrment extravagance

Not content with vast personal allowance and expense budgets and designer wallpaper in their offices it seems the Biritsh government are embracing the true spirit of hedonism and requesting copies of the Magna Carta to replace their regular double-quilted toilet paper.

0
0
Alert

@intelligence

or lack of. Of course, if they had intelligence they'd have a real job that pays real money, rather than work for our wonderful govt getting payed monopoly money

0
0
Silver badge
Alien

Spooky Business Angels .......Knock knock. Mum's the Word.

""all our work is intelligence-based"

Also perfect for "loose" Affiliates, Sebastian. And with Darling Alastair pimping £50Bn to generate Cash/Cache Flow, what a jolly good time to put in a Bill for Services Rendered 42 Energise Services yet to be Rendered.

Normally, although some might think it somewhat Alien, One could be really bold again and render them a NI number to XReference for AI Working Current Account which they could Credit with the Hypermanic Quantum Seven Sevens Seven figure Sum, which renders to them Magical Mystery Turing Tips and Trips, but the System doesn't recognise it. ....... which is quite Clever by IntelAIgent Design .... or just the Normal Sub-Prime, Below Par Performance from a Government System lost at C.

How do you prevent the export/third party proxy export of any cryptanalytic technology or information that you don't own/haven't paid for/don't know? And that question to Donald of Rumsfeldism for he'll have a dodgy answer, I'm sure .

The simple answer would be to purchase it with a wad of cash which will never disappear and keeps everything ship shape and Bristol fashion..... for that AI Mutual Benefit thing which gives Virtual Reality ITs Kick Start and Go.

0
0

sigh

My guess? Some big company exec, scared that they might have to spend some money fixing their product, complains to their school chum in government, who calls his mate at the appropriate bureau, who then arranges for this utterly ludicrous attempt to intimidate and silence yet another security researcher.

I see that the UK is well on its way to being a police state if they can arbitrarily confiscate anything while admitting they don't know what it is. I guess they don't even need warrants or anything else anymore.

Getting happier I left really. I still miss home, but the more I look back at the place the less I want to go back.

0
0
Bronze badge
Black Helicopters

Remember Datong Electronics, anyone?

Some 20++ years ago, a company, Datong, made a product that would (IIRC) by means of multiple (8?) antennas and a damnded smart analog FET profiling scheme, accurately pinpoint the compass bearing of a radio signal. Brilliant. But, the UK Gov. got wind of it, and for awhile stamped on it, quoting "Official Secrets" ("Terrorism" would've been shorter, but we didn't have them bastards in those days). Almost put the company out of business. When the spooks relented, I think the company got about a quid in compensation. Gov. probably stole the invention, but I'll never know in my lifetime.

Fill in the blanks, someone. I think I've got Alzeimers, but I can't remember quite what it is. Or how to spell it.

Like "Yeah, right" above, I've no intention to ever return to that wretched 3rd world Stazi training ground called UK.

0
0
Anonymous Coward

His best riposte would have been to...

...say they could keep the phone and the scanner as they weren't worth anything.

0
0
Black Helicopters

@yeah right

"I see that the UK is well on its way to being a police state if they can arbitrarily confiscate anything while admitting they don't know what it is. I guess they don't even need warrants or anything else anymore."

I think HMRC have had draconian powers for a very long time.

0
0
Black Helicopters

"approached by official"

Hmmm... no doubt the official was a spook. After all, why bother tasking GCHQ / CESG to knock out one of these went you can just go and pinch it.

Next time he should encrypt it AES-style on an SD card. They'll probably get in, but it'll make the sods work for it ;-)

Ironically I tried to read his blog from my Vodafone 3G-enabled laptop, and have been denied due to "Content Control - Restricted Access".

So no doubt I'll be getting a visit from the Men in Black soon...

0
0
Anonymous Coward

You guys didn't read the article

They didn't take his software, nor the FPGA which was probably programmed to assist the process, instead they confiscated an electronic circuit board, the schematics and layout of which is available under an open source license and which can be purchased freely by mail order for about 700 USD. This circuit board contains no software, it is a general purpose radio transceiver which can do any kind of radio tasks for any kind of radio system (including GSM) by way of software programming (the software for which resides on the laptop computer to which the circuit board needs to be connected via USB).

If they had wanted to "steal" the cryptanalysis method, they would have needed the software which was on the laptop (and probably the FPGA too) which they didn't confiscate. Definite proof that they were indeed totally clueless.

0
0
Bronze badge

All our work is intelligence based.

According to Word Web the definition of intelligence is.-

1. The ability to comprehend; to understand and profit from experience.

2. A unit responsible for gathering and interpreting information about an enemy.

3. Secret information on an enemy.

4. Information about recent and important events.

5.The operation of gathering information about an enemy.

It doesn't look as though any of those apply to HMRC in this case.

0
0
Heart

Actually, its a systemantic law.

"The Ministry is named for the opposite of who it works for." should just read

"The ministry is named the opposite of what it does."

Ministries never do anything "for" anyone. They develop their own priorities upon their creation.

The first directive is "self-preservation".

The second directive is "self-perpetuation."

The third directive is to oppose the function of whatever their actually charged with.

Thus we have a department or ministry of defense which makes us attack, not defend anything.

Thus we have a CIA or MI-# which makes us behave stupidly.

Thus we have a House of Representatives (US congress) or a House of Commons (UK parliament) which is not representative nor common.

In the 'States, we have you beat though. We have an extremely expensive health (don't) care system which is in the process of killing us all by denying us coverage when we need it.

You've got the National Health.

0
0
Anonymous Coward

@Andus McCoatover, @yeah, right

Looking for advice here, where {would you go|have you gone} instead?

0
0

@Steve Evans

"who knows how much "restricted" material on something you could hide in your ear!" Not unless you are a bleeding elephant, mate !! Now, I wouldn't dispute what you might hide at the other end but they are going to deploy millimetric-waveband radar at airports soon !! Alternatively, you could try taping a memory stick to your todger !!

0
0
Alert

Re: "cheap" USRP

I'm sorry, I'm so out of touch with exchange rates.

When did $700 qualify as "cheap"?

0
0

BAE

Should of had BAE stamped on his stuff

0
0
Coat

@mark

Actually as I remember it yes minister said Ministries were tombstones,

The Ministry of Education marks the grave of education,

The Ministry of industry the grave of Industry, etc

What a great show it was!

0
0
Alert

Police State

Didn't Britain fight a rather big war some years ago? Wasn't the whole idea of the war to stop the bad guys from being nasty to the citizens and to stop unwarranted spying on people, etc? Although, the uniforms were quite snazzy!

0
0
Anonymous Coward

Interested in moving

Canada's still a pretty good place to live. Lots of room, comparatively cheap housing and fuel, good quality of life, reasonable health care, etc...

If we could only get rid of our politicians and those of our southern cousins.

0
0

David "DJ" Perry

Real men use vinyl, you know that ;)

Cutting secret files onto 12" dubplates... now THAT would be a good idea.

0
0
Ash
Pirate

@Mark, Re Encrypted SD Cards

It's a criminal offence in the UK to not hand over encryption keys when requested by court order, penalty of 2 years in prison for most cases, 10 years if involving terrorism or child pornography.

"I can't remember" gets you 2 years.

"There's no hidden volume" gets you 2 years, even if there isn't one.

Come one, come all, into 1984.

0
0
Bronze badge

@AC @Andus McCoatover, @yeah, right

Finland!!! Paradise!

Monty Python - "Mountains so lofty", etc...Except we don't have any. Just Tunturit - "Fells" e.g. lake district in UK is closest.

And hardly any fuc*king CCTV cameras. Not much crime either. Correlation???

0
0
Coat

When did $700 qualify as "cheap"?

It's about 50p in today's money, isn't it?

0
0
Happy

HMRC?

He should have just promised to send them all the source code on a couple of unencrypted CDs. They're used to dealing with stuff like that.

0
0
Alert

Checked luggage?

What sort of grade 1 utter idiot leaves, in this day and age, his phone, laptop and other gear in his CHECKED luggage?

... IN HEATHROW????

The mind boggles.

Jolyon

0
0
Paris Hilton

Steg

It’s gems like this that makes me love the Reg. How many thousands more people know about this now?? If aiming to limit the knowledge was the aim, then it’s a spectacular Riise-like own goal.

As for the researcher – I’m not convinced on his indignation. His g/f is pregnant – and he bemoans the fact his sim was nabbed! Eh?? WTF?? How many in the IT/security industry rely on only one place to keep essential info? I for one keep an old fashioned piece of paper with numbers on it in my wallet (and possibly diary in luggage if going for a while). Anything with a battery is liable to either break, run out of juice at exactly the worst moment, be nicked, be confiscated by idiot customs stasi etc. Zero marks for common sense.

Given the other story in the Reg about laptops/USB keys etc being “open season” at Customs – then I’ll make sure I always have a hefty TrueCrypted disk filled with thousands of (clothed) photos of our Beloved Paris and a text file saying “Paris loves Steg”. I will obligingly decrypt the volume of course. They might suspect that Steg stood for Steganography, but I would of course claim that Steg was a reference to sex with dinosaurs ;-)

Or, I could just use something like this:

http://www.evilmadscientist.com/article.php/usbkey

0
0
Go

Canada's still a pretty good place to live.

Canada's still a pretty good place to live. Lots of room, comparatively cheap housing and fuel, good quality of life, reasonable health care, etc...

"Go" icon because I am collecting our visa's next week from CHC London. :D

0
0
Black Helicopters

This was disruption, pure and simple

I'm sure that GCHQ/CESG knew exactly what was on the various items he had with him, but that taking the phone and the software defined radio would make his demonstration impossible to carry out.

Remember that various countries in that area use A5/2, the weaker of the two GSM cipher algorithms, and I'm sure that various agencies get suitable intelligence from cracking this on an as-needed basis.

You don't want the locals being alerted to how poor their air interface security is, they might then decide to improve it.

No demo, no worry, no changes to the cosy status quo.

0
0
Unhappy

Robot Wars...

There was that series of Robot Wars where Team Diotior were frantically trying to rebuild their robot after Customs forced them to dismantle most of it. I was wondering at the time whether they really had no idea what Diotior was, or whether Customs were just trying to give the home teams a leg up.

Thanks but no thanks, Excise guys.

0
0
Alert

Intelligence "Mindless twits" ??

They may appear to be twits. They might even employ clueless minions to interact with the public. But they are *much* sharper that you give them credit for. You see the personna they want to expose. Keep thinking of them as idiots, and you won't be nearly as careful as you should be with your secrets.

Reminds me of the line from "The Usual Suspects". "he greatest feat the devil ever pulled off was convincing people he didn't exist"..

0
0
Happy

Re Customs & Excize

A frien of mine has a brother that worked for this outfit and one of the interview questions was apparenly you recive a doccument with a paper clip on it what do you do with the paper clip?Huh I ask you????? Obvious realy you make a paper clip chain ROTFLMAO

0
0
This topic is closed for new posts.