Follow-up (-ish) to #1087756 in the case of eSIMs
Paper from Usenix 34: eSIMplicity or eSIMplification? Privacy and Security Risks in the eSIM Ecosystem
Convenient tech brings big bundle of security and privacy risks.
A security study has unearthed security concerns for travel embedded subscriber identity modules (eSIMs), showing that many providers route user data through foreign telecommunications networks without disclosing to customers that this is happening.
The list:
Provider Origin Public IP Geoloc ISP Airalo US/Singapore 206.0.71.14 Texas, US WEBBING USA, INC. AIRSIMe Hong Kong 38.86.196.203 Texas, US Telecom North America Inc Alosim Canada 147.28.187.8 Texas, US Equinix Services, Inc. Better Roaming UK 146.88.208.55 NY, US Truephone Inc BNESIM Hong Kong 38.86.196.254 Texas, US Telecom North America Inc BreatheSIM Isle of Man 195.10.99.99 Isle of Man Manx Telecom CMLink eSIM China 223.118.51.111 China China Mobile International Limited DENT British Virgin Islands 37.248.246.98 Poland SPARKS eSIM Access China 206.0.69.143 Texas, US WEBBING USA, INC. Eskimo Singapore 111.65.35.51 Singapore SingTel Mobile Flexiroam Malaysia 206.0.69.106 Texas, US Webbing USA Gigsky US 193.88.50.248 Denmark TDC NET GoogleFi US 172.56.199.56 User Location T-Mobile Holafly Ireland 223.118.51.96 China China Mobile International Limited Maya Mobile US 38.86.196.229 Texas, US Telecom North America Inc MTX Connect Luxembourg 45.153.104.4 Oslo, Norway Nexthop AS Nomad US 192.178.240.193 VA, US Google LLC Numero Spain 154.54.12.114 Germany Cogent Communications RedTeaGo China 91.223.100.68 England O2 (UK) Saily Lithuania 94.156.229.223 NY, US Saily Inc. T-mobile US 172.59.9.77 US T-Mobile Ubigi France 140.174.33.144 NY, US Transatel USIMS Switzerland 140.174.33.128 NY, US Transatel Voye Israel 206.0.69.170 Texas, US WEBBING USA, INC. Yesim Switzerland 37.248.248.86 Poland SPARKS
There are many providers in here that I've been seeing ads for, most notably: Holafly is extensively marketed on European airlines and routes all traffic through China (!!!).
This looks like a surveillance nightmare!
Perhaps stackers can collaborate, as some of us use different providers not in scope of this research (I do so myself too) and we might be able to add valuable information.
PS: Cool eSIM comms capture device from the PDF:
Setup for capturing proactive communication: (a) iPhone 13, (b) sysmoEUICC1 for downloading the eSIM, (c) SIMtrace2 for capturing communication between the phone and the eSIM profile.
Gigsky, a US company, for your vacay to Mexico, because prepaid T-Mobile US is super-expensive outside of the US. Gigsky routes all traffic through Denmark. Now the EU logs all your metadata because that's an EU directive.skybroadband.com(UK)