Sim card tracker found on all orange sim cards.

sends location, IMEI to operator, without your knowledge.

http://blog.m-sec.net/2012/about-sim-card-tracker-app/

As I am a little bit suspicious about this kind of things, I have asked to define “all” and “without your knowledge”. Immediately came the reply which confirmed my feeling: “the smart card sends it via SMS to the operator from the OS on the card”.

This tweet came during a great speech of Behrang Fouladi at 44con conference regarding .NET smart cards. His research is great and I want to make it clear from the beginning that I appreciate his work. The only thing that I don’t like is that generally people are trying to make a mountain out of a molehill from the fact that SIM sends a message to the operator.

What is it about? SIM card has an app written on it and, when put into a different phone, it will automatically send a message to the operator informing it that now the customer uses another phone. Why this? Well the operator will automatically send you the MMS/Internet settings for this new phone so that you will not have to struggle with manual setup.

Where is the tracking? Or how can we think about tracking when you are actually using the operator’s network and that at anytime the operator knows where you are, with a few meters precision, specially in a big city where they have more BTSs?

Finally I would like again to underline that I have nothing personal with Behrang, I appreciate all his findings, but this Orange SIM card tracker thing went a little bit too far.

Advertisements
This entry was posted in Uncategorized. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s