Why SMS Text Messages Aren't Private or Secure
If you want to change messaging
service on your mobile phone and think of going with SMS text messaging for
privacy, think a little about your decision. Because SMS text messaging isn't
as secure as you think. Let's see how traditional text messaging isn't
secure.
The cellular carrier can see your
message
The cellular carrier can see the SMS
you send to your friends or family as they don't follow end-to-end encryption
technology. Your sent messages are stored by the network service provider using
their systems. That means your text messages are no longer secure as the
network provider can see them. In addition to it, network service providers
collect the SMS contents according to various amounts of time. However, they
keep messages for some days, but they keep metadata for a long time. Metadata
includes the numbers of sender and recipient with sending and receiving time.
Someone can use such records as evidence in taking legal action.
If we talk about other messaging
services like Signal, it uses end-to-end encryption technology. That means it
doesn't keep records of your communications like the contents of messages. In
terms of privacy, Signal doesn't know about the individuals who are
communicating with you. Even you don't need to worry about your communication
records as your device keeps everything you communicate through Signal instead
of other locations.
After all, it is your decision
whether you want a secure and private service or something like SMS text
messaging where your service provider stores your data.
Criminals can intercept your messages
You can think that if many platforms,
including banks, financial institutions, and businesses, use SMS messaging for
identity confirmation purposes, then how is it not secure? Ok. You are right
from your side. But here is a reason why they use traditional messaging. The
reason is that many people still use simple cell phones with a phone number.
And simple cell phones don't have features and settings like smartphones. So,
an internet-based app can't be run on that. But one thing that can happen is
sending traditional text messages. That is why banks and financial institutions
use SMS messaging services for identity confirmation purposes to add an extra
layer of privacy in customer services.
With the positive side of SMS
messaging, we can't ignore its downside, which is its interception by
criminals. Mobile phone networks use a networking system to establish a
connection to others. This networking system is called Signaling System No 7
(SS7) protocol. Intruders and hackers often target this SS7 system to keep an
eye on messages. With the interception technique, cybercriminals hack bank
accounts by finding verification codes sent by banks. Therefore, security
experts recommend not to use SMS for two-factor
authentication.
SMS monitoring by authorities
There is surveillance technology
called a stingray used by Governments from all over the world to track cell
phones. This tool encourages mobile phone towers to influence cell phones to
connect to it. In that way, a mobile phone is tracked by authorities so it can
share data, including SMS messages and more. On the other hand, your SMS
message can also be gained by other surveillance systems.
Go for iMessage and RCS instead of
SMS
An iPhone is compatible with Apple's
developed iMessage along with the Messages app. iMessage uses Apple's servers
to transmit messages and also follow end-to-end encryption. On the other hand,
many Android devices also support RCS or Rich Communication Services. But as of
January 2021, RCS doesn't have support for end-to-end encryption. However,
Google is working on it to add end-to-end encryption.
Finally, we are going to conclude this
article. After the above explanation about why SMS messages are not secure, you
may think that what can be used? So, below is your answer.
The Signal is considered the best
private chat app as it uses always-on end-to-end encryption. If you are an
iPhone user, you can go with iMessage, which works privately and securely
compared to traditional messaging systems. If you are an Android device user,
you will be able to take advantage of RCS once it gets improved. If we look at
other chat apps, Telegram is also popular without end-to-end encryption. But
Whatsapp follows end-to-end encryption.
Comments
Post a Comment