A Samsung femtocell offered by Verizon Wireless.

The wireless industry’s push to offload wireless traffic to microcells and other short-range femtocell base stations has opened the door for hackers to intercept voice calls, SMS text messages and collect enough identifying information to clone your phone.

Researchers from iSec Partners demonstrated femtocell vulnerability last month at the Black Hat conference in Las Vegas, successfully recording phone calls, messages, and even certain web traffic using a compromised $250 Samsung “network extender” sold to consumers by Verizon Wireless.

Once anyone gets within 15-20 feet of a femtocell using compatible network technology (CDMA or GSM), their device will automatically attempt to connect and stay connected to a potentially rogue cell signal repeater as long as the person remains within 50 feet of the base station. Many phone owners will never know their phone has been compromised.

“Your phone will associate to a femtocell without your knowledge,” said Doug DePerry from iSEC Partners. “This is not like joining a Wi-Fi network. You don’t have a choice. You might be connected to ours right now.”

During the demonstration, the presenters were able to record both sides of phone conversations and compromise the security of Apple’s iMessage service. All that was required was to trick Apple’s encrypted messaging service to default to exchanging messages by plain text SMS. Phones were also successfully cloned by capturing device ID numbers over Verizon’s cell network. Once cloned, when the cloned phone and the original are connected to a femtocell of any kind, at any location, the cloned unit can run up a customer’s phone, text, and data bill.

“Eavesdropping was cool and everything, but impersonation is even cooler,” DePerry said.

Although the very limited range of femtocells make them less useful to track a particular person’s cell phone over any significant distance, installing a compromised femtocell base station in a high traffic area like a restaurant, mall, or entertainment venue could allow hackers to quietly accumulate a large database of phone ID numbers as people pass in and out of range. Those ID numbers could be used to eventually clone a large number of phones.

iSEC Partners believe femtocells, as designed, are a bad idea and major security risk. Although Verizon has since patched the vulnerability discovered by the security group, DePerry believes other vulnerabilities will eventually be found. He worries future exploits could be used to activate networks of compromised femtocells controlled by unknown third parties used to snoop and steal from a larger user base.

iSEC says network operators should drop femtocells completely and depend on implementing security at the network level, not on individual devices like phones and cell phone extenders.

AT&T’s femtocells support an extra layer of security, so they are now unaffected by hacking. But that could change eventually.

“It’d be easy to think this is all about Verizon,” said Tom Ritter, principal security engineer at iSec Partners. “But this really is about everybody. Remember, there are 30 carriers worldwide who have femtocells, and [that includes] three of the four U.S. carriers.”

iSec Partners is working on “Femtocatch,” a free tool that will allow security-conscious users to automatically switch wireless devices to “airplane mode” if they ever attempt to connect to a femtocell. The app should be available by the end of August.

Wireless Industry: We’re running out of spectrum!
Wireless Industry: We’ve got plenty to room for unlimited ESPN!

America is on the verge of a wireless traffic data jam so bad, it could bring America to its knees.

Or not.

Stop the Cap! notices with some interest that while wireless carriers continue to sound the alarm about a spectrum crisis so serious it necessitates further compressing the UHF television dial and forces other spectrum users to become closer neighbors, the same giant phone companies warning of impending doom are negotiating with online video producers to offer customers “toll-free,” all-you-cat-eat streaming video of major sports events that won’t count against your usage allowance.

ESPN is in talks with at least one major carrier (AT&T or Verizon Wireless) to subsidize some of the costs of its streamed video content so that customers can watch as much as they want without running into a provider’s usage limit. Both Verizon and AT&T have signaled their interest in allowing content producers to pay for subscribers’ data usage. In fact, they don’t seem to care who pays for the enormous bandwidth consumed by streaming video, so long as someone does.

At a recent investment bank conference Verizon Wireless chief executive Dan Mead explained the next chapter in monetizing data usage will allow the company to rake in more revenue from third parties instead of customers already struggling with high wireless bills.

“We are actively exploring those opportunities and looking at every way to bring value to our customers,” said Mead.

Content producers are increasingly frustrated with the stingy caps on offer at AT&T and Verizon Wireless because customers stop accessing that content once they near their monthly usage limit. One large provider admitted to ESPN that “significant numbers” of customers are already reaching their cap before the end of their billing cycle, after which their online usage plummets to limit the sting of overlimit charges.

Offering “toll-free” data could dramatically increase the use of high bandwidth applications and increase profits at wireless providers based on new fees they could collect from content producers. Customers would still be subject to usage limits for all non-preferred content, a clear violation of Net Neutrality principles.

The buffet is open.

But in case you forgot, wireless carriers won exemption from Net Neutrality, arguing their networks lack the capacity to sustain a Net Neutral Internet experience. These same companies claim without more frequencies to handle the massive, potentially unsustainable amount of wireless traffic, the wireless data apocalypse could be at hand in just a few years. It was also the most-cited reason AT&T and Verizon discontinued their unlimited use data plans.

But unlimiting ESPN video? No problem.

In January 2010, Verizon Wireless was singing a very different tune to the FCC about the need to control and manage high bandwidth applications like the “toll-free” streaming video service ESPN proposes (underlining ours):

Wireless broadband services face technological and operational constraints arising from the need to manage spectrum sharing by a dynamically varying number of mobile users at any time. Thus, unlike, for example, cable broadband networks, where a known and relatively fixed number of subscribers share capacity in a given area, the capacity demand at any given cell site is much more variable as the number and mix of subscribers constantly change in sometimes highly unpredictable ways.

Are wireless carriers now part of the problem?

For example, as a subscriber using a high-bandwidth application such as streaming video moves from range of one cell site to another, the network must immediately provide the needed capacity for that subscriber, while not disrupting other subscribers using that same cell site. Of course, the problem is magnified many times over as multiple subscribers can be moving in and out of range of a cell site at any given moment. Moreover, the available bandwidth can fluctuate due to variations in radio frequency signal strength and quality, which can be affected by changing factors such as weather, traffic, speed, and the nearby presence of interfering devices (e.g., wireless microphones).

These problems compound those resulting from limited spectrum. As the Commission has repeatedly recognized in proclaiming an upcoming spectrum crisis, “as wireless is increasingly used as a platform for broadband communications services, the demand for spectrum bandwidth will likely continue to increase significantly, and spectrum availability may become critical to ensuring further innovation.”

A wireless carrier cannot readily increase capacity once it has exhausted its spectrum capacity. Thus, wireless broadband providers are left to acquire additional spectrum (to the extent available) or take measures that use their existing spectrum as efficiently as possible, which they do through a combination of investing in additional cell sites and network management practices that optimize network usage and address congestion so as to provide consumers with the quality of service they expect.

Regulators need to ask why wireless companies are telling the FCC there is a bandwidth crisis of epic proportions that requires the Commission to exempt them from important Net Neutrality principles while telling investment banks, shareholders and content producers the more traffic the merrier, as long as someone pays. Customers also might ask why their unlimited use data plans were discontinued while carriers seek deals to allow unlimited viewing with their preferred content partners.

What is the real motivation? The Wall Street Journal suggests one:

“Creating a second revenue stream for mobile broadband is the holy grail for wireless operators but collecting fees from content companies would probably make the FCC take a close look into the policy implications,” said Paul Gallant, managing director at Guggenheim Securities. An FCC spokesman declined to comment.

[flv width=”512″ height=”308″]http://www.phillipdampier.com/video/WSJ ESPN Toll Free Data 5-9-13.flv[/flv]

The Wall Street Journal takes a closer look at a plan to manage an end run around Net Neutrality by allowing preferred content partners to offer streaming video services exempt from your usage cap. (4 minutes)

A new report critical of broadband providers’ implementation of usage-based billing and data caps finds providers are not using them to handle traffic congestion, instead implementing them to monetize broadband usage and protect pay television from online video competition.

The New America Foundation and the Open Technology Institute today released its report, “Capping the Nation’s Broadband Future?,” which takes a hard look at the increasingly common practice of limiting subscribers’ broadband usage.

The paper finds that provider arguments for limiting broadband traffic don’t make sense, but do earn more dollars from customers forced to upgrade their service to win a larger monthly usage allowance.

“Although traffic on U.S. broadband networks is increasing at a steady rate, the costs to provide broadband service are also declining, including the cost of Internet connectivity or IP transit as well as equipment and other operational costs,” the reports argues. “The result is that broadband is an incredibly profitable business, particularly for cable ISPs. Tiered pricing and data caps have also become a cash cow for the two largest mobile providers, Verizon and AT&T, who already were making impressive margins on their mobile data service before abandoning unlimited plans.”

The study finds providers are attempting to invent a climate of broadband scarcity, particularly on the nation’s wired networks, to defend the introduction of various forms of Internet Overcharging, including data caps, usage-based billing, and overlimit fees.

The New America Foundation is calling on policymakers to take a more active role in defending online innovation and controlling provider zeal to cap the nation’s broadband future.

The False Argument of Network Congestion

Providers’ tall tales.

The most common defense for usage caps providers put forward is that they curb “excessive use” and impact almost none of their customers. The report points out many of the providers implementing usage caps have left them largely unchanged, despite ongoing usage growth patterns. In 2008, the report notes Comcast measured the average monthly usage of each broadband customer at around 2.5GB. Just four years later that number has quadrupled to 8-10GB. While many customers rely on Comcast’s broadband service for basic e-mail and web browsing, the cable operator has begun to entice customers into utilizing its online video platform, which in certain cases can dramatically eat into a customer’s monthly usage allowance, which remained unchanged until earlier this year.

Many broadband providers are less generous than Comcast, some imposing caps as low as 5GB of usage per month.

“Data caps encourage a climate of scarcity in an increasingly data-driven world,” the report concludes. “Broadband appears to be one of few industries that seek to discourage their customers from consuming more of their product. Thus, even as the economic and engineering rationale for data caps on wireline broadband does not hold up given the declining costs of providing service and rapid technological advancement, the proliferation of data caps is increasing. The trend is driven in large part by a woefully uncompetitive market that allows the nation’s largest providers to generate enormous profits as well as protect legacy business models from new services and innovators.”

The argument that increased usage puts an undeniable burden on providers is untenable when one examines the financial reports of providers.

The study found, for example, Time Warner Cable’s latest 10-K report shows that connectivity costs as a percentage of revenue have decreased by half, from an already modest 1.20% in 2008 to a little over 0.60% in 2011.

In 2012, the company is again exploring ways to introduce usage caps on at least some of its customers, in return for a modest discount.

Upgrade? Spend Less and Charge Customers More Instead!

The report notes cable companies like Time Warner Cable and Comcast, whose networks were originally built for television services and have now been repurposed for broadband as well, are enjoying lucrative profits on
networks that have long been paid off. In fact, Time Warner Cable recently disclosed it earns more than 95 percent in gross margins on its broadband service, with additional rate increases for consumers likely in the near future. The company recently began charging its customers a modem rental fee as well.

Shammo

At these margins, the report concludes selling broadband service to “data hogs” who consume hundreds of gigabytes of traffic per month are still profitable for providers.

As financial reports disclose capital spending on network upgrades continue to fall, operators are instead content imposing usage limits on customers to control traffic growth and further monetize an already enormously-profitable business.

The nation’s largest phone companies also come in for criticism. The report quotes from Stop the Cap!’s coverage of Verizon’s chief financial officer openly admitting it is investing most of its available capital in the highly profitable wireless sector.

“It is clear that in shifting a greater percent of their overall capital expenditures to their wireless segments, Verizon and AT&T are more interested in expanding their dominance in the wireless industry than they are in upgrading DSL or expanding fiber connectivity to provide aggressive competition for residential broadband service,” the report found.

Verizon’s chief financial officer recently made the following statement at an investor relations event:

“The fact of the matter is wireline capital — and I won’t give the number but it’s pretty substantial — is being spent on the wireline side of the house to support wireless growth,” [Verizon CFO Fran Shammo] said. “So the IP backbone, the data transmission, fiber to the cell, that is all on the wireline books but it‖s all being built for the wireless company.”

Wall Street Educates Providers on How to Lead the Way With Data Caps

Although the majority of subscribers loathe usage restrictions on their already-expensive broadband accounts, a vocal group on Wall Street strongly favors them, and routinely browbeats providers on the issue.

Helping educate cable companies how usage caps can protect against cord cutting and further monetize broadband.

The report’s authors discovered some Wall Street banks even invest time and money developing presentations advocating usage caps and consumption billing to protect video revenue. A 2011 Credit Suisse presentation outlined ways usage-based billing can protect cable operators’ video revenues:

“…over the longer term, consumption based billing could reduce the attractiveness of over the top video options (e.g., Netflix and Hulu), as the economic attractiveness of such over the top options could be partially offset by a [broadband] bill that is higher, due to [broadband] overage charges that would be driven by large amounts of data being streamed via a customer’s [broadband] connection.”

Yet most cable operators vehemently deny usage caps and consumption billing are designed to decrease usage or protect video revenue. Credit Suisse and other Wall Street banks and analysts say otherwise, and express little concern over network congestion.

The report finds compelling evidence that data caps have effectively stopped new competitors and online innovation already, noting a Sony executive stated that the company was putting the development of its own online video service on hold, citing Comcast’s monthly usage cap.

The Wireless Cap Shell Game: Caps Protect Scarce Airwaves While Companies Promote More Usage, For a Price

The report also found suggestions of a forthcoming wireless traffic tsunami are greatly exaggerated. AT&T and Verizon Wireless have issued repeated alarmist rhetoric claiming that wireless data’s exponential growth is threatening to overwhelm available network capacity.

But both carriers recently changed pricing models to encourage consumers to bring more devices to their networks, along with suggestions customers upgrade to higher allowance plans to handle the additional traffic generated by those devices. In fact, both AT&T and Verizon Wireless see profitable futures in forthcoming “machine to machine” wireless traffic that will allow cars, appliances and medical devices to communicate over their respective mobile networks. AT&T’s security and home automation system also relies on its own wireless network, offering customers remote access to their homes, chewing up wireless bandwidth as they go.

Despite suggestions from both providers their new wireless data plans would save customers money, it has brought overall increases in the average revenue earned from each subscriber instead.

Will be available to 8.5 million additional customers by the end of 2015

AT&T will spend $6 billion over the next three years to upgrade broadband speeds across its 22 state operating service area and further expand its U-verse broadband platform to reach suburban and exurban customers stuck in the DSL broadband slow lane.

AT&T today announced existing U-verse customers will be able to buy upgraded speeds as high as 75Mbps by the end of 2013, with speeds increasing to around 100Mbps further out. AT&T’s current U-verse platform is currently constrained with maximum speeds of around 24Mbps.

Customers currently bypassed by AT&T U-verse may still have a chance to get the service in their community. AT&T announced plans to expand the fiber to the neighborhood service by more than one-third, with an additional 8.5 million customers able to sign up by the end of 2015.

AT&T also announced an eventual replacement for its existing ADSL platform, which currently offers speeds ranging from 768kbps to around 12-15Mbps in certain areas. The company’s lighter version of U-verse, dubbed U-verse IPDSLAM, will be introduced to 24 million AT&T customers in smaller communities by the end of 2013. Customers will be offered phone and Internet service over the network — but not television — with broadband speeds up to 45Mbps.

About 25% of AT&T’s rural customers will not see any upgrade to their current landline service. Instead, AT&T announced it will seek to gradually decommission rural landline networks and transfer those customers to its 4G LTE wireless service for both broadband and voice service, pending regulator approval.

Short on specifics, AT&T did not say whether rural customers will face the same broadband usage caps that are familiar to other AT&T wireless customers.

AT&T plans to upgrade its broadband speeds using a combination of technologies:

• Pair bonding existing copper wiring to get additional bandwidth;
• 17MHz: Devoting six frequency bands to broadband, up from the current four;
• Vectoring: Using technology to reduce or eliminate speed-robbing crosstalk noise on existing lines;
• Additional Copper Wire Reductions: Bringing fiber further into neighborhoods to reduce the distance of copper wiring between your home and AT&T’s network;
• Using “rate-adaptive” technology to let equipment select the fastest possible speeds with a tolerable error rate.

Looking for new revenue opportunities

More than half (52 percent) of all U.S. consumers say Internet service is their home’s most important utility, according to a survey conducted by Verizon Communications as part of their Verizon FiOS Innovation Index project.

But Verizon’s research surveys go well beyond simply identifying who loves Internet access. Verizon’s real interest is identifying so-called “borderless consumers,” — customers who are seeking a seamless online experience and connectivity both inside and out of the home.

The convergence of wired and wireless broadband networks is a potentially enormous money-maker for Verizon, especially if you happen to be a Verizon Wireless customer.

“As the borderless consumer segment continues to grow, so will the need to identify, understand and anticipate what consumers truly want in their increasingly connected lives – today and in the future,” said Eric Bruno, vice president of FiOS strategy and development for Verizon.

Fran Shammo, Verizon’s chief financial officer, has previously told investors that monetizing data usage goes beyond text messaging and web browsing. The next frontier for enhanced revenue will come from the machine-to-machine segment. As consumers strive for a more connected future, enabling wireless connectivity for home appliances, automobiles, medical equipment, and other devices will create new revenue streams for the company.

Verizon’s new research surveys help the company target its future marketing to consumers most likely to be living the “borderless lifestyle.” Are you? Here are some key attributes:

• Above average income: Most are college educated, own their home, and nearly half earn $75,000 or more annually, so they can afford higher broadband bills;
• They are 18-34: Generation X and Millenials grew up in an increasingly connected world. Baby boomers are not far behind, but seniors are;
• Women somewhat outnumber men in their need to remain connected;
• You already have a computer, smartphone, or tablet and are connected to high speed Internet. Most of you want faster speed, if you can get it.

Verizon’s study becomes murkier over the issue of cord cutting. Verizon found that video streaming continues to drive Internet traffic growth, but at least 89% still prefer watching shows on their televisions. Verizon defines that as live TV, DVR, or on-demand from “TV/Cable service.”

But they did not ask whether consumers are watching more or less television provided by their cable, satellite, or phone company or if a larger proportion of viewing now comes from Netflix or other streamed content. That is a key indicator of whether a customer is gradually shifting viewing habits, which could ultimately make it easier to dump cable television.

With 90 percent of those surveyed looking forward to the day when every connectable device in their house can seamlessly interconnect and work together, Verizon’s potential revenue opportunities are enormous, if customers use Verizon Wireless for connectivity and not free Wi-Fi. Machine-to-machine wireless traffic can boost profits without costing the company much, especially under Verizon Wireless’ new Share Everything pricing. The impact of short data exchanges likely from home appliances and other similar devices is expected to be negligible. The profits from charging at least $10 a month to add each of those devices to a Verizon Wireless account are not.