Hidden Phone Tracking

Easy Prey

1 day ago

“Cell phone service should, by default, not collect as much information about you as possible and should not be selling your information to third parties.” - Ruddy Wang Share on X

Your phone gives off a surprising amount of information just by being connected to a cellular network. Things like your location, who you communicate with, and your daily patterns can all become part of the data tied to your mobile service. While some of that information is necessary to keep a cellular network functioning, questions remain about how much data carriers really need to collect, how long they should keep it, and what happens when that information ends up in the wrong hands.

My guest today is Ruddy Wang, head of consumer growth at CAPE, a privacy-first mobile carrier designed to collect as little customer information as possible. Ruddy began his career as a U.S. diplomat before moving into the technology world, including roles at Facebook and Uber, where he helped launch more than 100 cities across Brazil. His experience in government and technology gave him an early look at how much information our phones can reveal and how that data can be used, which eventually led him to CAPE and its effort to rethink mobile service with privacy and security built in from the start.

In our conversation, we discuss how cellular networks track phones, why identifiers such as IMSI and IMEI numbers matter, and how signaling attacks can potentially intercept calls or text messages without the user realizing anything has happened. We also get into SIM swaps, some of the weaknesses in traditional carrier security, and what CAPE is doing differently to make mobile service more private. We also talk about practical steps people can take to reduce unnecessary data sharing and strengthen the security of their accounts, even if they have no plans to change mobile carriers.

“With a signaling attack, you actually wouldn’t see anything at all. In that respect, it’s a particularly invisible kind of attack.” - Ruddy Wang Share on X

Show Notes:

[01:02] Ruddy Wang shares his background and how his work as a diplomat and in technology shaped his interest in mobile privacy.
[04:36] We discuss why cellular carriers retain customer data and how that information can be monetized or shared.
[07:19] We break down IMSI and IMEI numbers and how these identifiers can be used to recognize and track phones.
[10:13] We explore signaling attacks and how someone may be able to track a phone or intercept communications through the global telecom system.
[12:22] We compare signaling attacks with SIM swaps and explain why some attacks can happen without the phone owner noticing anything unusual.
[14:42] We discuss why vulnerabilities built into the global telecommunications system can be difficult to prevent and what users can do to reduce their exposure.
[18:56] We look at the differences between traditional mobile network operators and MVNOs and how those relationships affect service and security.
[20:26] We discuss how CAPE uses its own mobile core and SIM technology to add privacy protections while still relying on other carriers' towers.
[23:19] We explore the limits of cellular privacy, including why traditional phone calls cannot offer the same end-to-end encryption as some messaging apps.
[26:32] We discuss how CAPE approaches SIM swap protection by giving customers control through a recovery phrase rather than relying on customer support.
[28:35] We talk about who is most interested in privacy-focused mobile service and why demand has expanded beyond people with high-risk security concerns.
[32:55] We discuss how much personal information mobile carriers actually need from customers and CAPE's approach to collecting less data.
[36:18] We look at the cost of privacy-focused mobile service and how CAPE's pricing and referral model compares with traditional carriers.
[40:20] We discuss Ruddy's experience with a convincing fake crowdfunding site and how the scam managed to fool him.
[43:10] We share practical ways to improve mobile privacy and account security, including opting out of data sharing and moving away from SMS authentication.

“There is no technical reason for collecting as much data as the main carriers collect unless there’s some other purpose for that.” - Ruddy Wang Share on X

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

Hidden Phone Tracking

Show Notes:

Links and Resources:

Transcript: