{"id":91429,"date":"2020-08-13T13:42:00","date_gmt":"2020-08-13T11:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte"},"modified":"2020-08-13T13:42:00","modified_gmt":"2020-08-13T11:42:00","slug":"ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","title":{"rendered":"ReVoLTE r\u00fcnnak, mis v\u00f5imaldab salajasi k\u00f5nesid LTE-s pealt kuulata","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Rohkete teadlaste r\u00fchm Ruhr'i \u00fclikoolist Bochumis (Saksamaa) tutvustas k\u00e4itusmeetodit r\u00fcnnakuks ReVoLTe<\/a><\/noindex> (PDF<\/a><\/noindex>), mis v\u00f5imaldab pealt kuulata salajasi h\u00e4\u00e4lek\u00f5nesid 4G\/LTE mobiiliv\u00f5rkudes, mis kasutavad h\u00e4\u00e4le edastamiseks VoLTE tehnoloogiat (H\u00e4\u00e4l LTE kaudu<\/a><\/noindex>).
\n.<\/p>\n

Pealtkuulamise kaitseks VoLTE k\u00f5nedes kasutatakse klient ja operaator kasutavad \u0161ifreerimist, mis p\u00f5hineb voog\u0161ifril<\/a><\/noindex>. Spetsifikatsioon n\u00f5uab, et igaks seansiks genereeritaks ainulaadne v\u00f5tmevoog, kuid nagu teadlased on leidnud, 12 15 testitud baasjaamast ei j\u00e4rgi seda n\u00f5uet ja kasutavad kahte j\u00e4rjestikust k\u00f5net \u00fche raadio kanali kaudu sama v\u00f5tmevoogu v\u00f5i kasutavad ennustatavaid meetodeid uue j\u00e4rjestuse genereerimiseks.<\/p>\n

V\u00f5tmevoo taaskasutamine v\u00f5imaldab r\u00fcndajal de\u0161ifreerida salvestatud salajase edastuse r\u00e4\u00e4kimiseks. K\u00f5nede sisu de\u0161ifreerimise teostamiseks peab r\u00fcndaja esmalt pealt kuulama ja salvestama salastatud raadioliiklust ohvri ja haavatava baasjaama vahel. K\u00f5ne l\u00f5ppedes helistab r\u00fcndaja ohvrile tagasi ja p\u00fc\u00fcab vestlust v\u00f5imalikult kaua j\u00e4tkata, keelates ohvril t\u00f5sta toru. Selle vestluse ajal, lisaks salastatud raadioliikluse salvestamisele, salvestatakse ka de\u0161ifreerimata algne helisignaal.<\/p>\n

Esimese k\u00f5ne de\u0161ifreerimiseks saab r\u00fcndaja, tuginedes teise k\u00f5ne ajal pealtkuulatud salastatud liiklusele ja r\u00fcndaja telefonis salvestatud algsetele h\u00e4\u00e4ldataile, arvutada v\u00f5tmevoo v\u00e4\u00e4rtuse, mis m\u00e4\u00e4ratakse avatud ja salastatud andmete vahelise XOR-operatsiooni abil. Kuna v\u00f5tmevoogu kasutatakse taaskasutamiseks, rakendades teise k\u00f5ne jaoks arvutatud v\u00f5tmevoogu esimese k\u00f5ne salastatud andmetele, v\u00f5ib r\u00fcndaja p\u00e4\u00e4seda selle algsetele sisule. Mida t\u00fckk aega teine vestlus r\u00fcndaja ja ohvri vahel kestis, seda rohkem teavet v\u00f5ib esimese k\u00f5ne kohta de\u0161ifreerida. N\u00e4iteks kui r\u00fcndaja suutis vestlust venitada 5 minutiks, siis saab ta de\u0161ifreerida 5 minutit.<\/p>\n

LTE-v\u00f5rkudes edastatud kr\u00fcpteeritud liikluse salvestamiseks kasutasid teadlased signaalianal\u00fcsaatorit AirScope<\/a><\/noindex>, ja r\u00fcndaja h\u00e4\u00e4lteabe saamiseks k\u00f5nede ajal kasutati Android-smartphone'e, mida juhiti ADB kaudu ja SCAT<\/a><\/noindex>. R\u00fcnnaku teostamiseks vajaliku varustuse maksumus on hinnanguliselt 7000 dollarit. <\/p>\n


\n
\r\n \"M\u00e4ngi\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Baasjaamade tootjad said probleemist teada eelmise aasta detsembris ning enamik on juba avaldanud v\u00e4rskendused haavatavuse k\u00f5rvaldamiseks. Sellegipoolest v\u00f5ivad m\u00f5ned teenusepakkujad ignoreerida uuendusi. LTE- ja 5G-v\u00f5rkude haavatavuse kontrollimiseks on ette valmistatud<\/a><\/noindex> on spetsiaalne mobiilirakendus Android 9 platvormile (n\u00f5uab root-juurdep\u00e4\u00e4su ja Qualcommi kiibiga nutitelefoni, n\u00e4iteks Xiaomi Mi A3, One Plus 6T ja Xiaomi Mix 3 5G). Lisaks haavatavuse m\u00e4\u00e4ramisele saab rakendust kasutada ka liikluse salvestamiseks ja teenuseteate vaatamiseks. Salvestatud liiklus talletatakse PCAP formaadis ja v\u00f5ib saadetud olla kasutaja m\u00e4\u00e4ratud HTTP-serverisse edasiseks anal\u00fc\u00fcsiks standardsete t\u00f6\u00f6riistade abil. <\/p>\n

\"ReVoLTE<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re­VoL­TE (PDF), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 \u0441\u0435\u0442\u044f\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 4G\/LTE, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VoLTE (Voice over LTE). . \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0445 \u0437\u0432\u043e\u043d\u043a\u043e\u0432 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0432 VoLTE \u0434\u043b\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u0430. \u0421\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91430,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91429","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47R\u00fcnnak ReVoLTE, mis v\u00f5imaldab kr\u00fcpteeritud k\u00f5nesid LTE-v\u00f5rkes pealt kuulata | ProHoster","description":"Ruhri \u00dclikooli teadlaste meeskond Bochumis (Saksamaa) esitas r\u00fcnnaku ReVoLTE tehnika (","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 ReVoLTE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 LTE | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re\u00adVoL\u00adTE (","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-13T11:42:00+00:00","article:modified_time":"2020-08-13T11:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91429","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:28:26","updated":"2022-09-30 10:24:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/91429","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=91429"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/91429\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/91430"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=91429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=91429"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=91429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}