Re: regarding the 'data security' thread recently
On Tue, 10 Jun 2008, Dave O'Connor wrote: > see the look on his face when cops walk up to him :) For this reason I look forward to the GTA03's proposed camera. -- Asheesh. -- Think honk if you're a telepath. ___ Openmoko community mailing list community@lists.openmoko.org http://lists.openmoko.org/mailman/listinfo/community
Re: regarding the 'data security' thread recently
> Having said that, why wait for an incoming text?
> Why not just have the phone wipe itself when the SIM card changes?
Not by default!! People that travel between North America and Europe
often maintain two (or more!!) SIMs to take advantage of cheaper calling
in different {countries,continents} by having a local number.
___
Openmoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community
Re: regarding the 'data security' thread recently
For bonus marks, have it send gps coordinates charged against the
new sim card's account every few minutes and see the look on his face
when cops walk up to him :)
On Tue, 10 Jun 2008, Stroller wrote:
>
> On 10 Jun 2008, at 14:08, Benedikt Schindler wrote:
>> Ilja O. schrieb:
>>> About data wipe:
>>>
>>> I was thinking -- doesn't eny SIM card have some kind of ID number?
>>> And if they do, do we have software way to obtain it?
>>>
>>> Phone could wipe itself if another SIM card is inserted AND upon SMS
>>> message receiving.
>>
>> ... by the way : to what phonenumber will you send a sms when the
>> thief
>> has replaced the sim card?
>
> LOL.
>
> This was my first reaction, too, and was just about to post to the
> list and ask the same question when I realised the answer.
>
> The new phonenumber doesn't matter, because it'll wipe the phone when
> the thief's friend sends them a text message.
>
> Having said that, why wait for an incoming text?
> Why not just have the phone wipe itself when the SIM card changes?
> You just need to store the original SIM ID in flash memory and check
> against it at start-up. The software can add an additional function
> for "change SIM card" which will allow the user to do so safely ("add
> SIM card" is probably better - if it allows the phone to check
> against a whitelist of multiple SIM cards then users can swap between
> two tariffs easily, without having to worry about activating this
> function EVERY time they do so).
>
> The erasing of personal data can be done silently without alerting
> the user (thief), and doesn't need to interfere with an additional
> feature of "phoning home" its details in the event of theft www.guardian.co.uk/business/feedarticle/7565813>.
>
> Stroller.
>
> ___
> Openmoko community mailing list
> community@lists.openmoko.org
> http://lists.openmoko.org/mailman/listinfo/community
>
>
___
Openmoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community
Re: regarding the 'data security' thread recently
Ilja O. wrote: >> Why not just have the phone wipe itself when the SIM card changes? > > That's what i was proposing from the beginning. But for users like me with multiple valid SIM cards, I think being able to run a script/app on the phone that says "this SIM is valid, don't do a wipe" would be necessary -- keep a 'catalog' of allowed SIM's. If an unknown SIM is inserted, send an Email to some central location with the phone number of the SIM that IS inserted, so you now have the phone number for which to send the 'wipe' SMS message. Just my $0.02. -id ___ Openmoko community mailing list community@lists.openmoko.org http://lists.openmoko.org/mailman/listinfo/community
Re: regarding the 'data security' thread recently
On Tue, Jun 10, 2008 at 7:26 PM, Stroller <[EMAIL PROTECTED]> wrote: > > Having said that, why wait for an incoming text? > Why not just have the phone wipe itself when the SIM card changes? > > That's what i was proposing from the beginning. ___ Openmoko community mailing list community@lists.openmoko.org http://lists.openmoko.org/mailman/listinfo/community
Re: regarding the 'data security' thread recently
On 10 Jun 2008, at 14:08, Benedikt Schindler wrote:
> Ilja O. schrieb:
>> About data wipe:
>>
>> I was thinking -- doesn't eny SIM card have some kind of ID number?
>> And if they do, do we have software way to obtain it?
>>
>> Phone could wipe itself if another SIM card is inserted AND upon SMS
>> message receiving.
>
> ... by the way : to what phonenumber will you send a sms when the
> thief
> has replaced the sim card?
LOL.
This was my first reaction, too, and was just about to post to the
list and ask the same question when I realised the answer.
The new phonenumber doesn't matter, because it'll wipe the phone when
the thief's friend sends them a text message.
Having said that, why wait for an incoming text?
Why not just have the phone wipe itself when the SIM card changes?
You just need to store the original SIM ID in flash memory and check
against it at start-up. The software can add an additional function
for "change SIM card" which will allow the user to do so safely ("add
SIM card" is probably better - if it allows the phone to check
against a whitelist of multiple SIM cards then users can swap between
two tariffs easily, without having to worry about activating this
function EVERY time they do so).
The erasing of personal data can be done silently without alerting
the user (thief), and doesn't need to interfere with an additional
feature of "phoning home" its details in the event of theft .
Stroller.
___
Openmoko community mailing list
community@lists.openmoko.org
http://lists.openmoko.org/mailman/listinfo/community
Re: regarding the 'data security' thread recently
On Tue, Jun 10, 2008 at 4:08 PM, Benedikt Schindler <[EMAIL PROTECTED]> wrote: > Ilja O. schrieb: > > About data wipe: > > > > I was thinking -- doesn't eny SIM card have some kind of ID number? > > And if they do, do we have software way to obtain it? > > > > Phone could wipe itself if another SIM card is inserted AND upon SMS > > message receiving. > > > > > > If you have several SIM cards, than we could create simple SIM card > > whilelist. > > > > > > ___ > > Openmoko community mailing list > > community@lists.openmoko.org > > http://lists.openmoko.org/mailman/listinfo/community > > > ... by the way : to what phonenumber will you send a sms when the thief > has replaced the sim card? > > > you could also test, if there is the selected SIM card in the phone. > and if not, you send the GPS-Data of the phone every 10 minutes per sms > to a pre given phonenumber. > so you could find your phone. (and you have the phonenumber of the thief > :) ) > If i think about it, we should just send every 30min. because it would > be annoying to recive a sms every 10 min. > This have already been discussed. > > but all these things are just functional if you are the only one who > have implimented that feature. > That's the bad side of the open source thing. If you put it in the > general source tree, everyone > knows where he had to put his SIM card numbers, so the phone think > everthing is allright. > If phone will wipe itself if no authorized SIM is present (and program starts as daemon, of course), than it won't be real security hole. ___ Openmoko community mailing list community@lists.openmoko.org http://lists.openmoko.org/mailman/listinfo/community
Re: regarding the 'data security' thread recently
Ilja O. schrieb: > About data wipe: > > I was thinking -- doesn't eny SIM card have some kind of ID number? > And if they do, do we have software way to obtain it? > > Phone could wipe itself if another SIM card is inserted AND upon SMS > message receiving. > > > If you have several SIM cards, than we could create simple SIM card > whilelist. > > > ___ > Openmoko community mailing list > community@lists.openmoko.org > http://lists.openmoko.org/mailman/listinfo/community > ... by the way : to what phonenumber will you send a sms when the thief has replaced the sim card? you could also test, if there is the selected SIM card in the phone. and if not, you send the GPS-Data of the phone every 10 minutes per sms to a pre given phonenumber. so you could find your phone. (and you have the phonenumber of the thief :) ) If i think about it, we should just send every 30min. because it would be annoying to recive a sms every 10 min. but all these things are just functional if you are the only one who have implimented that feature. That's the bad side of the open source thing. If you put it in the general source tree, everyone knows where he had to put his SIM card numbers, so the phone think everthing is allright. but it will work for quite a while, because i don't think that so many street thiefs are receving this list.:) And maybe it will take a long time until they realise why always the police stands in front of their door when they had stolen a Freerunner. :) i like the idea of the self sending GPS data. It costs the thief money, that we know where he is :) ... you could say, he paied for getting arrested :) ___ Openmoko community mailing list community@lists.openmoko.org http://lists.openmoko.org/mailman/listinfo/community
Re: regarding the 'data security' thread recently
On Tue, Jun 10, 2008 at 1:21 PM, Federico Lorenzi <[EMAIL PROTECTED]> wrote: > I suppose the cell phone number should be more then unique enough. > > Yup. But I don't know if we're able to obtain it (don't see reason to RTFM before obtaining of Freerunner). ___ Openmoko community mailing list community@lists.openmoko.org http://lists.openmoko.org/mailman/listinfo/community
Re: regarding the 'data security' thread recently
I suppose the cell phone number should be more then unique enough. On 6/10/08, Ilja O. <[EMAIL PROTECTED]> wrote: > About data wipe: > > I was thinking -- doesn't eny SIM card have some kind of ID number? > And if they do, do we have software way to obtain it? > > Phone could wipe itself if another SIM card is inserted AND upon SMS message > receiving. > > > If you have several SIM cards, than we could create simple SIM card > whilelist. > ___ Openmoko community mailing list community@lists.openmoko.org http://lists.openmoko.org/mailman/listinfo/community
Re: regarding the 'data security' thread recently
About data wipe: I was thinking -- doesn't eny SIM card have some kind of ID number? And if they do, do we have software way to obtain it? Phone could wipe itself if another SIM card is inserted AND upon SMS message receiving. If you have several SIM cards, than we could create simple SIM card whilelist. ___ Openmoko community mailing list community@lists.openmoko.org http://lists.openmoko.org/mailman/listinfo/community
regarding the 'data security' thread recently
I see that the 3G iPhone will now have a 'remote wipe' feature similar to what we've all been discussing. Other highlights in a poorly-formatted list: http://blogs.zdnet.com/Apple/?p=1839&tag=nl.e589 ___ Openmoko community mailing list community@lists.openmoko.org http://lists.openmoko.org/mailman/listinfo/community
