How Secure is DECT (Part II)
Two weeks ago, the DECT Forum issued a statement saying that the technology was secure, despite a demonstration by hackers to the opposite effect.
Now, Heise Online is reporting that the notebook card used by said hackers is suddenly in high demand:
At the CCC-25C3 Congress in late December 2008 it was announced that notebooks running Linux could be converted into portable listening systems for cordless telephones by using the Com-On-Air cards. At the time the dying PCMCIA Type II card standard wasn’t very popular, but now these Com-On-Air cards are hard to find. A few days ago the cards were available on eBay for about 20 Euros, now the cards have starting, and "Buy Now" prices, of around 200 Euros. A look at the closed auctions show that these high prices are actually being paid as the demand increases.
Now the upside is that there doesn’t appear to be any U.S.-based groups dedicated to hacking into DECT signals to prove a point. So talk away…
Rick Krupka commented:
The activity around the change in costing for the cards may be due
to responsibly manufacturing companies taking this issue seriously
and buying the cards for internal evaluation of the threat. In
reviewing the blog on the hackers’ web site, it seems that
they did it just to prove it could be done. As an active member of
the DECT forum and on the board of UTAM, I would state that the
chance of someone being affected in the US using their new DECT6.0
cordless phone is remote but none the less a possibility. The DECT
forum has been working on a new standard called “CAT-IQ" that
among other features outlines the ability to support software
upgrades to the home phone system. In this age of too many
intelligent people having too much time on their hands, a
methodology to upgrade our home phone system has become a
requirement as it is with our home computers. We should look for
this new standard to hit the retails shelves soon.
Rick Krupka commented:
The activity around the change in costing for the cards may be due
to responsibly manufacturing companies taking this issue seriously
and buying the cards for internal evaluation of the threat. In
reviewing the blog on the hackers’ web site, it seems that
they did it just to prove it could be done. As an active member of
the DECT forum and on the board of UTAM, I would state that the
chance of someone being affected in the US using their new DECT6.0
cordless phone is remote but none the less a possibility. The DECT
forum has been working on a new standard called “CAT-IQ" that
among other features outlines the ability to support software
upgrades to the home phone system. In this age of too many
intelligent people having too much time on their hands, a
methodology to upgrade our home phone system has become a
requirement as it is with our home computers. We should look for
this new standard to hit the retails shelves soon.
Rick Krupka commented:
Rick Krupka commented:















