Hacker News new | ask | show | jobs
by gonehome 4508 days ago
There's already an easy way to do this (that I remember reading somewhere is already being done in Australia).

When a phone is reported stolen the carriers just need to blacklist the IMEI so it doesn't work - removes the incentive to steal devices. I don't remember where I originally read this (probably here), but the US carriers were not interested in doing this because they don't see stolen phones as a problem that hurts them (arguably it gives them more business).

4 comments

IMEI blocking hasn't stopped phone thefts in Europe.

Possible reasons:

1. IMEI numbers can be changed.

2. Thief can still use phone for many hours until block.

3. Stolen phones can be shipped to countries that don't implement block.

4. A blocked phone can still be used to run apps, play games, make VOIP calls on wifi etc.

The Apple system seems much more sensible. You can't use an iPhone without the pincode, and even if you get that the owner can remotely lock the phone as soon as you connect it to any network. The way to avoid that used to be to wipe the phone and reinstall the OS, but now you can't do that without the Apple ID and password of the owner. I don't know if this has reduced iPhone thefts, but unless the thief has an exploit in Apple's security I don't see why anyone would steal an iPhone nowadays. I wish Android would implement something similar.

Apple theft exploit:

- steal phone - break phone - return to Apple store for warranty replacement (minor social engineering may be required here)

Theif gets a working phone with a different IMEI. The worst part is, the friend of mine who this happened to found out about it because it invalidated her theft insurance.

While that exploit may work - it doesn't scale too well.
Phones will still be stolen for spare parts.
5. The stolen phone can be sold to a hapless buyer shortly after it is stolen, before the theft is realized or reported and therefore before the IMEI is blocked.
We can do that in the US too. I don't believe there is coöperation between international carriers, though.
This and the fact that they can sell phones for a fortune (~retail price) in emergent markets, instead of local black market prices (30%) means robbers will organize shipping lots of phones overseas. That's what happens in France already.
You're probably right - I think that's more valuable to coordinate rather than a mandatory kill switch.
But how? I can't see any realistic chance of a broad international agreement. Remember that it works both ways, too. What would you do if your phone stopped working because a telecoms company in (say) Nigeria accidentally asserted that your IMEI was stolen?

Saying "wouldn't it be great if the world could co-ordinate" is not the answer as it isn't realistic. It's avoiding the problem and the need to come up with practical solutions. Or even an honest "it can't be done" answer.

Surely carrier A wouldn't let carrier B be able to block an imei belonging to their customers. If carrier B did block it though, you, customer of carrier A, wouldn't be able to roam in the network of carrier B - but still work fine in your home network of carrier A.

However, that results in carriers needing to assert ownership over an imei, which would be come quite a mess - so it very well could not be done.

I do believe national blacklisting registers of imeis, as already done for many years in certain european countries is much better than not doing it though.

That makes sense - an earlier response to my comment about how apple handles things with user PINs is probably a better approach.
I whole-heartedly agree.
I lost my iphone some time back so when I called AT&T to report it, they kept on insisting me - please wait for few days as you may find it. They also told me once we report the phone as lost and block it using IMEI then this change can't be undone incase you find your phone then it can't be activated again. And, the block using IMEI does not work across carriers which means if its blocked in AT&T then the person carrying that lost phone can activate the phone on any other network like verizon, spring, t-mobile etc.

Carriers can maintain a centralised database to keep list of stolen phones and can also undo the change incase the owner finds it. They can also track the people who are calling using stolen phones but they dont do it. The best reason I can guess for not doing that is as you said - why they will do something which will hurt their own business

That situation seems a bit poorly implemented to me. The irreversible block only applies to AT&T's network, and is under AT&T's control... Wouldn't it make sense for AT&T to simply place the IMEI on watch, so that the next time AT&T's network sees it come online, an "alert" is triggered and AT&T can contact the owner to confirm whether or not it's in their possession?
Yes, they should have this feature but I don't know what is holding them from it
aren't we doing this in Canada?