The successor of SMS has already been hacked

#1

Post by kerm1t » Fri, Nov 29, 2019, 10:43 AM UTC

The successor of SMS has already been hacked
vice.com

Re: The successor of SMS has already been hacked

#2

Post by kerm1t » Fri, Nov 29, 2019, 10:44 AM UTC

Disclosure: I work for SRLabs, the company who did this research.

You can find more infos on our blog release: https://srlabs.de/bites/rcs-hacking/

Re: The successor of SMS has already been hacked

#3

Post by notlukesky » Fri, Nov 29, 2019, 11:00 AM UTC

When did carriers ever get anything tech based right? In fact to expect them is wrong as their business model is very different to a tech company. They are beneficiaries of law-bound limited duopolies or oligopolies. In most countries the only audience they care for are the regulators, and not consumers or their security and safety. Regulatory capture is a wonderful thing for these companies and not for consumers.

Re: The successor of SMS has already been hacked

#4

Post by m-p-3 » Fri, Nov 29, 2019, 6:42 PM UTC

And of course, RCS is not even end-to-end-encrypted so there is no reason whatsoever to use it over SMS or any other messaging platform.

I hope we'll see a good and federated instant-messaging platform that respects privacy and is easy to adopt.

Re: The successor of SMS has already been hacked

#5

Post by panpanna » Sat, Nov 30, 2019, 1:18 PM UTC

kerm1t wrote: post #2

Disclosure: I work for SRLabs, the company who did this research. You can find more infos on our blog release: https://srlabs.de/bites/rcs-hacking/

Great work!

So this is mostly on Google's implementation? Or is RCS insecure in general?

Re: The successor of SMS has already been hacked

#6

Post by sojmq » Sat, Nov 30, 2019, 7:36 PM UTC

panpanna wrote: post #5

kerm1t wrote: post #2

Disclosure: I work for SRLabs, the company who did this research. You can find more infos on our blog release: https://srlabs.de/bites/rcs-hacking/

Great work! So this is mostly on Google's implementation? Or is RCS insecure in general?

TFA:

>SRLabs didn't find an issue in the RCS standard itself, but rather how it is being implemented by different telecos

Re: The successor of SMS has already been hacked

#7

Post by adzm » Sat, Nov 30, 2019, 7:39 PM UTC

m-p-3 wrote: post #4

And of course, RCS is not even end-to-end-encrypted so there is no reason whatsoever to use it over SMS or any other messaging platform. I hope we'll see a good and federated instant-messaging platform that respects privacy and is easy to adopt.

Well, it's still an easier way to share higher resolution images and videos with other non-technical users.

Re: The successor of SMS has already been hacked

#8

Post by Sami_Lehtinen » Sat, Nov 30, 2019, 7:42 PM UTC

I thought MMS. Did someone miss something?

Re: The successor of SMS has already been hacked

#9

Post by srgpqt » Sat, Nov 30, 2019, 7:55 PM UTC

m-p-3 wrote: post #4

And of course, RCS is not even end-to-end-encrypted so there is no reason whatsoever to use it over SMS or any other messaging platform. I hope we'll see a good and federated instant-messaging platform that respects privacy and is easy to adopt.

Such as.... email?

Re: The successor of SMS has already been hacked

#10

Post by michaelt » Sat, Nov 30, 2019, 8:01 PM UTC

srgpqt wrote: post #9

m-p-3 wrote: post #4

And of course, RCS is not even end-to-end-encrypted so there is no reason whatsoever to use it over SMS or any other messaging platform. I hope we'll see a good and federated instant-messaging platform that respects privacy and is easy to adopt.

Such as.... email?

E-mail doesn't have end-to-end encryption either. PGP doesn't count.