Just wondering if 3G networks can be sniffed like public wifi networks, via wireshark for example (I'm almost sure this is not possible due to encryption, but I just want to make sure?)
Asked
Active
Viewed 9,594 times
2 Answers
7
Sure - any network can be sniffed, as long as the sniffer can be connected in the right place.
Communications between the phone and the cell antenna are encypted, though, so without some specialized equipment and processes, data is relatively safe on that path. After getting decrypted at the cell antenna site, though, it could be sniffed at one of hundreds of places inside the telco's network.
EEAA
- 108,414
- 18
- 172
- 242
-
2I'll just leave this here http://www.engadget.com/2010/01/15/3g-gsm-encryption-cracked-in-less-than-two-hours/ – Zypher Sep 15 '11 at 17:49
-
You can always create your own network: http://openbsc.osmocom.org/trac/ – Gerald Combs Sep 16 '11 at 22:13
3
As in most things, define your threat model. Most people out wardriving are not going to have the equipment to decode 3G data into packets. But, if you're sending information worth $1 billion dollars over 3G, someone would easily spend $5 million dollars to be able to do it. Nothing is secure, and as long as you define your threat and have "sufficient" security for that, then you're OK.
Aaron
- 2,968
- 1
- 22
- 36
-
2$5mil is way more than it'd take, real number is probably several thousand, at most. Many of the ciphers used have been broken; the chipsets to receive cell signals are very cheap; etc. – derobert Sep 15 '11 at 20:14