Hacker News Reader

Comment by tablespoon | Hacker News Reader

>> Having a physical object the embodies your phone's identity

> The SIM is more like your iPhone’s credentials for accessing one network.

That's what I meant. Anyone with any familiarity with SIM cards knows it's no personality chip that brings everything over with it, and if it were such a thing it would probably be pretty annoying.

View on HN

Actually, the SIM card use to be a “personality chip” in the 1990s. It stored your phone number and your contacts. There’s a scene in The Wire where a drug dealer confuses the police by changing the sim card of his phone when talking about criminal activity, which evades electronic surveillance (changing the phone’s ID on the network) and physical surveillance (sims are very small and concealable). I was specifically calling out how the use of a cell has grown in the last 30 years specifically as it related to identity.

I’ve spent a lot of time engineering login pages and thinking about questions of user identity.

But the phone hardware also has an IMEI, which it also tells the network: https://weartotrack.com/imei-number-blocked/

So it might be you're basing your knowledge from some fictional show where the writers got it wrong.

I don't know the story, but I'm wondering if IMEI wasn't introduced because of that. If SIM offered an identity in the network, why would phone need to have an unique number?

IMEI identifies the device, SIM identifies the subscriber. IMEI is used to block stolen phones, but it's also how phones are locked into specific carriers (which used to be a much bigger part of the business model, "$0 phones" and all).

Imei can be changed on some phones, and are not secure. The sim card needs to be logged to from the phone (usin PIN for uset-level login), contains non readable secrets and provides a completely separate execution environment with its own memory and cpu.

What I was saying is that it doesn't look like IMEI is essential part of the protocol and perhaps was added because of that and similar cases? Without any identifiable ID of the phone, you wouldn't need a burner phone, just a burner SIM.

SIM stands for "Subscriber Identity Module". IMEI stands for "International Mobile Equipment Identity". One identifies the account/person connecting (your plan, usage, etc.) while the other identifies the phone (and its capabilities on the network).

What I was trying to say, I don't believe IMEI would be needed for the phone to call/receive calls, and perhaps was invented after the incident.

Reply on news.ycombinator.com