Four to five years after the hacks happened, Gemalto says it was all not so bad, they really really checked this time and they have super duper server logs they grepped twice to be sure.
That's a bit unfair. Gemalto say:
- "The risk of the data being intercepted as it was shared with our customers was greatly reduced with the generalization of highly secure exchange processes that we had put in place well before 2010."
- "The report... also states that when operators used secure data exchange methods the interception technique did not work."
- "Gemalto has never sold SIM cards to four of the twelve operators listed in the documents, in particular to the Somali carrier where a reported 300,000 keys were stolen."
- "A list claiming to represent the locations of our personalization centers shows SIM card personalization centers in Japan, Colombia and Italy. However, we did not operate personalization centers in these countries at the time."
There's a lot of valid points in Gemalto's report, and it seems dishonest to write it off so pettily.
> There's a lot of valid points in Gemalto's report, and it seems dishonest to write it off so pettily.
I agree they have valid points that are worth setting the record straight on. But conveniently for Gemalto they distract from the core issue, which in my opinion is that they have been owned and are in denial of it.
Hopefully it's just PR and they are scrambling internally to keep spies out.
That's a bit unfair. Gemalto say:
- "The risk of the data being intercepted as it was shared with our customers was greatly reduced with the generalization of highly secure exchange processes that we had put in place well before 2010."
- "The report... also states that when operators used secure data exchange methods the interception technique did not work."
- "Gemalto has never sold SIM cards to four of the twelve operators listed in the documents, in particular to the Somali carrier where a reported 300,000 keys were stolen."
- "A list claiming to represent the locations of our personalization centers shows SIM card personalization centers in Japan, Colombia and Italy. However, we did not operate personalization centers in these countries at the time."
There's a lot of valid points in Gemalto's report, and it seems dishonest to write it off so pettily.