eSIMplicity or eSIMplification? Privacy and Security Risks in the eSIM...
summary
Researchers buy over 20 travel eSIMs and use trace route, Wireshark, a private LTE testbed and sysmo EUICC1 and SIMtrace2 to observe behavior. One European vendor routes all user traffic and assigned IPs through China Mobile; traces and geolocation show traffic tunneled home via HRR tunneling. Some profiles open silent channels to servers in Singapore, reseller dashboards (obtainable with just a card and email) expose user location and can enable public IP assignment, and profile deletion can fail or be made non‑deletable, causing denial of service.
AI-written summary · about
chapters (6)
- 0:00eSIM technology and risks
- 1:57Travel eSIMs routing exposure
- 5:26Proactive eSIM profile communication
- 7:13eSIM reseller security risks
- 9:39eSIM profile management challenges
- 11:26eSIM security recommendations
related talks
22mDemystifying the New eSIMs for IoT Security
53mSIMs, eSIMs and Secure Elements: Dynamic Security for Connected Devices
14mLessons from eSIM, LPWAN and Satellite IoT
01h 06mLTE & IMSI Catcher Myths
44mLTE And IMSI Catchers: Then And Now
41mReal Time Communication to Simplify Your Life
39mSecure Your Data
05mAn Empirical Study of Wireless Carrier Authentication for SIM Swaps