logoalt Hacker News

dlenskiyesterday at 11:27 PM4 repliesview on HN

From their "Features" drop-down:

> Minimal Data Collection

> Identifier Rotation

> Secondary Numbers

> Disappearing Call Logs

> SIM Swap Protection

> Network Lock

> Encrypted Voicemail

> Private Payment

> Last-Mile Encrypted Texting

> Secure Global Roaming

"Identifier (IMSI) Rotation", "Secure Global Roaming" and "Network Lock" do look interesting *IF* they can actually address some of the baseband vulnerabilities that plague all modern devices. That's a Big If.

SIM Swap Protection you already get by using a VoIP number rather than a cell number.

And the other features are irrelevant if you're using over-the-top end-to-end encrypted messaging, like Signal, rather than Plain Old Telephone Service and SMS.


Replies

grueztoday at 12:31 AM

>do look interesting IF they can actually address some of the baseband vulnerabilities that plague all modern devices. That's a Big If.

Baseband vulnerabilities are overhyped, imo. On proper phones (eg. pixels), their access to memory is restricted by IOMMU, which protects the rest of the phone from being compromised if there's some sort of an exploit. Once that's factored in, most exploits you can think of are "on the other side of the airtight hatchway[1]". For instance if you can hack the baseband to steal traffic, you should probably be more worried about your carrier being hacked or getting a lawful intercept order. Or if you're worried about the phone triangulating itself, you should probably be more worried about your carrier getting hacked and/or selling your location data.

[1] https://devblogs.microsoft.com/oldnewthing/20060508-22/?p=31...

show 2 replies
0xWTFyesterday at 11:40 PM

They built their own mobile core, does that help with resolving your "Big If"? I'm not a cellular guy, I don't know which pieces of the stack cover which attack vectors: I'm genuinely asking.

Also, the 50 foreign countries seems interesting.

show 1 reply
qingcharlestoday at 12:57 AM

Are there solid VoIP providers that aren't detected by 2FA SMS services? I can't use my Google Voice for a decent chunk of sign-ups because it is detected (and rejected) too easily. I hate getting spam, so I try to keep my primary phone number only for friends and family.

show 6 replies
bryancoxwellyesterday at 11:45 PM

Not sure what IMSI rotation has to do with baseband vulnerabilities?

show 1 reply