Viewing profile — prschmitt

By decoupling the user identity from a permanent, globally unique IMSI, we make IMSI catcher / Stingray attacks less "useful" as the IMSI is changing and isn't tied to the user. Th…

Yes. With a traditional VPN you are trusting that VPN provider with all of your traffic. They know your identity and everything you do. The two hop architecture we use decouples th…

As with all mobile service it really depends on coverage in your area. The baseline service is LTE.

This was a research project that we undertook while at our respective universities. We decided to spin it out as we think it's useful. We are not funded by the government or Prince…

Absolutely, we're working on this currently.

IMEIs are definitely a challenge, but they're also different from these other identifiers because the IMEI is not a network identifier. When you attach to a mobile network, the att…

Biased opinion (author of PGPP https://www.usenix.org/system/files/sec21-schmitt.pdf ). These types of attacks are numerous and easy across multiple generations of cellular. I'd ar…

The regular attach procedure is unchanged. In the simplest version we give every SIM the identical IMSI and key. However, their use is to only gain IP connectivity - the equivalent…

Yes, in a perfect world, they would simply choose to not track. We (I'm a co-author on the research) chose to change things such that we don't need to rely on carrier benevolence. …