OpsLens

The Federal Communications Commission Doesn’t Care About Cybersecurity

On March 26, 2018 the Department of Homeland Security (DHS) acknowledged that it had identified cell-site simulators in the nation’s capital that do not belong to any United States entities. The suspected spying devices, referred to by a common brand name variant of ‘Stingray,’ could be utilized by both foreign spies and criminals to both track individuals by their cell phones as well as intercept phone calls and text messages. It is important to acknowledge, for reasons that will be obvious shortly, that the devices that are used by U.S. law enforcement and intelligence agencies have to be approved by the Federal Communications Commission (FCC).

The cell phone surveillance devices are officially known as “IMSI catchers” (International Mobile Subscriber Identity) and operate by pretending to be a cell phone tower and force cell phones within range to connect to them before passing on all cell phone traffic to a real tower. By acting in this fashion, they are able to collect data from connected devices and listen-in on conversations and scan all text messages. Additionally, these devices can also track a cell phone’s location and even prevent a device from being able to connect to a legitimate cell phone network.

“Use of IMSI catchers by malicious actors to track and monitor cellular users is unlawful and threatens the security of communications, resulting in safety, economic, and privacy risks,” said Christopher Krebs, acting DHS undersecretary.

(Credit: Facebook/Junius Scott)

The Department of Homeland Security initially detected the rogue devices in January 2017 while conducting a three-month sweep of unspecified scope and range. According to DHS, it does not have the technology to track down all of the devices, nor does it have the funding to acquire the required capabilities to do so. For his part, FCC Chairman Ajit Pai has promised to “continue to strictly limit the distribution of such devices with the United States.” Gee, thanks Chairman Pai. That does absolutely nothing to address the fact that foreign governments are spying on both our governmental leaders and private citizens.

“Despite repeated warnings and clear evidence that our phone networks are being exploited by foreign governments and hackers, FCC Chairman Pai has refused to hold the industry accountable and instead is prioritizing the interests of his wireless carrier friends over the security of Americans’ communications,” Senator Ron Wyden (D – OR) wrote in a statement.

After DHS had admitted that they were unable to properly pursue this vital issue, the government began looking towards the FCC to assist. In case you are unaware, the FCC is the regulatory body that has the authority over the commercial communications sector.

In a telling exposure of ignorance on Pai’s part, he insisted that “The Department of Homeland Security has taken the lead in assessing the potential threat from certain uses of cell-site simulators,” despite DHS having turned the issue over to other more capable and responsible agencies like the FCC.  Lawmakers and experts have weighed in on the fact that relying on cell phone manufacturers to protect user’s private information has proven disastrous.

It is important to note that law enforcement agencies enjoy the gray-area legality of their employment of such devices, sometimes without warrant, but don’t want this capability to leak to other agencies and entities. Additionally, Pai also has some quite profitable ties to cell phone manufacturers and carriers, including his former employer, Verizon Wireless.