Privacy commissioner calling on wireless networks to plug security gap

Canada's privacy watchdog is sounding the alarm about the threat of hackers intercepting mobile phone communications from a single phone number.

In his annual report, Privacy Commissioner Daniel Therrien responded to an investigative report by Radio-Canada-CBC.

"Thanks to a report broadcast last November by the CBC and the Radio Canada, we became aware of a security vulnerability related to the SS7", the commissioner wrote in his report tabled Thursday.

SS7 Signaling System # 7 is the global system for mobile telephone traffic. Any network that does not adopt adequate security measures is vulnerable to hacking through SS7.

With the help of a hacker in Germany, Radio-Canada-CBC was able to intercept calls from a federal MP and geotag his every move. His cellphone used the Rogers network, but the Bell Canada network also was successfully tested and hacked.

"Hackers are targeting the SS7 to obtain subscriber information, hear calls, steal money, conduct denial of service attacks and geotag their movements," warned the commissioner's report.

The commissioner notes that some European countries appear to be ahead of Canada in when it comes to protecting the communications of cellphone users.

"In some countries, it seems that the government intervenes a little more actively in regard to the requirements that are made to telecommunications companies," said Therrien in an interview with Radio-Canada.

"In the current state of affairs in Canada, obviously the CSE (Communications Security Establishment) has clear legal responsibilities for the protection of government systems, but not for the protection of privately managed systems. I do not have definite answer on this, but that could be an explanation."

When the Radio-Canada-CBC report was aired, Bell, Rogers, the Canadian Wireless Telecommunications Association and the federal government all refused to give interviews.

The Office of the Commissioner contacted all of these stakeholders to get them to explain the flaws in the systemand said it received what Therriencalled "encouraging commitments."

Who is vulnerable to SS7 cell phone attacks?

7 years ago

Duration 5:30

Lex Gill, Research Fellow at the University of Torontos Citizen Lab, weighs in

Therrien made three recommendations to them to strengthen the security of Canada's cellular networks.

"Everyone recognizes that the system is vulnerable," he said.

"As you have shown, it is vulnerable to, among other things, the hacking of communications that the cell phone uses. There is reason to be concerned. We will continue to have a dialogue with the government and the companies to try to reduce the scope of the problem as much as possible."