> Enjoy unlimited high-speed data; after 50GB, speeds may slow to 256 kbps.<p>Last I checked 256 Kbps is not high speed. You can advertise this as unlimited data, or you can advertise it as 50 GB of high-speed data, but you can't call it unlimited high-speed data.
>Identifier Rotation<p>>Protect yourself from persistent tracking by rotating your IMSI every 24 hours, so you appear as a new subscriber each day.<p>But nothing for IMEI, which is fixed for a given device. Unless you got a new phone to use with this service, it can instantly be linked back to whatever previous service you're using. If we assume that whatever carrier they partner with keeps both IMEI and IMSI logs (why wouldn't they?) it basically makes any privacy benefits questionable.<p>The other benefits also seem questionable. "Disappearing Call Logs" don't really help when the person you're calling has a carrier that keeps logs, and if both of you care about privacy, why not just use signal?<p>They're asking $99/month for this, which is a bit steep. If you only care about the rotating IMSI, don't care about PSTN access (ie. no calls/texting), you can replicate it with some sort of data esim for much cheaper. The various e-shops that sell esims don't do KYC either.
From their "Features" drop-down:<p>> Minimal Data Collection<p>> Identifier Rotation<p>> Secondary Numbers<p>> Disappearing Call Logs<p>> SIM Swap Protection<p>> Network Lock<p>> Encrypted Voicemail<p>> Private Payment<p>> Last-Mile Encrypted Texting<p>> Secure Global Roaming<p>"Identifier (IMSI) Rotation", "Secure Global Roaming" and "Network Lock" do look interesting *<i>IF</i>* they can <i>actually</i> address some of the baseband vulnerabilities that plague all modern devices. That's a Big If.<p>SIM Swap Protection you already get by using a VoIP number rather than a cell number.<p>And the other features are irrelevant if you're using over-the-top end-to-end encrypted messaging, like Signal, rather than Plain Old Telephone Service and SMS.
>do look interesting <i>IF</i> they can actually address some of the baseband vulnerabilities that plague all modern devices. That's a Big If.<p>Baseband vulnerabilities are overhyped, imo. On proper phones (eg. pixels), their access to memory is restricted by IOMMU, which protects the rest of the phone from being compromised if there's some sort of an exploit. Once that's factored in, most exploits you can think of are "on the other side of the airtight hatchway[1]". For instance if you can hack the baseband to steal traffic, you should probably be more worried about your carrier being hacked or getting a lawful intercept order. Or if you're worried about the phone triangulating itself, you should probably be more worried about your carrier getting hacked and/or selling your location data.<p>[1] <a href="https://devblogs.microsoft.com/oldnewthing/20060508-22/?p=31283" rel="nofollow">https://devblogs.microsoft.com/oldnewthing/20060508-22/?p=31...</a>
They built their own mobile core, does that help with resolving your "Big If"? I'm not a cellular guy, I don't know which pieces of the stack cover which attack vectors: I'm genuinely asking.<p>Also, the 50 foreign countries seems interesting.
Not sure what IMSI rotation has to do with baseband vulnerabilities?
You might check out who the CEO is here and how he runs the company and then consider whether you'd trust them. And look at the infra providers they use. Not what I would call the most upstanding bunch.
...care to elaborate?
This probably doesn't cover what OP said, but after reading the CEO's intro post, I left a little more depressed. Make money off surveillance, and then make money off selling a privacy product.<p>> At Palantir, where I started in technical roles more than 10 years ago, I learned about a wide array of vulnerabilities in the cellular network that present a threat not only to mission-focused organizations in government, but also to everyday people. I came to see mobile phones — and the networks that power them — as perhaps the largest risks to our privacy and security.<p>> If you told Americans twenty years ago that corporations and governments would conspire to attach powerful tracking devices to nearly every adult worldwide, it would’ve sounded like science fiction. And yet, that’s not far from where we are today.<p><a href="https://www.cape.co/blog/building-the-future-of-mobile-privacy?g=int" rel="nofollow">https://www.cape.co/blog/building-the-future-of-mobile-priva...</a>
Palentier and A16Z connections...
Will not pass muster with FCC. Know Your Customer regulations require the company to … know the customer. They will not last.
If anyone uses this and could tell us about your experience, please do!
I use Cape every day on my iPhone. The service is excellent, and the security features haven't ever interfered with my use of the phone. They have a convenient mobile app for setting up extra features like the IMSI rotation and getting support. As a tech savvy user, it matches what I want.<p>I'm a target for a variety of things, and knowing that no one can SIM swap me is worth the subscription alone. The SS7 protections, encrypted voicemail, secondary numbers, IMSI rotation, etc are all a bonus.
I’m a skeptic. It’s only been a handful of years since Anom was backdoored by the Feds. The surveillance data provided by cell phones is simply too good to let someone work around it<p><a href="https://www.vice.com/en/article/anom-backdoor-fbi-years-of-arrests/" rel="nofollow">https://www.vice.com/en/article/anom-backdoor-fbi-years-of-a...</a>
If you're not doing "fed" level shit and just don't wanna make your petty shit trivial for the locals to dredge up that's probably fine.<p>Like they're not gonna burn that kind of capability over tax evasion, state civil law violations, etc.
How does this compare to Phreeli [1]? Has anyone here used either of the services?<p>1: <a href="https://www.phreeli.com" rel="nofollow">https://www.phreeli.com</a>
Secondary numbers sounds neat:<p><a href="https://www.cape.co/blog/product-feature-secondary-numbers" rel="nofollow">https://www.cape.co/blog/product-feature-secondary-numbers</a><p>I've been using my Google Voice number for something similar. But Cape doesn't specify if/when these numbers are rotated in any way - you have three numbers to track now, and you can't retain these numbers if you switch services.
Do not fall for a word of this. If you've spent any time dealing with actual SIP providers (ie not the shit you'd hook an app up to, the ones debt collectors use), you'll know exactly how much you can trust them. Same difference
I have a conflict of interest here (I am an advisor to Cape, also a security expert, and my company has done security audits for Cape), you should absolutely look more deeply into what Cape has created. Their service is fundamentally different than other "security-focused cell providers" (mostly snake oil IMHO) because Cape wrote their own mobile core, nearly from scratch. They control the whole software stack and have done really innovative things with it.<p>Here are a few things you might want to look at more closely:<p>Encrypted voicemail uses public key crypto:
<a href="https://www.cape.co/blog/product-feature-encrypted-voicemail" rel="nofollow">https://www.cape.co/blog/product-feature-encrypted-voicemail</a><p>How they use full control of the mobile core to detect SS7 signaling attacks
<a href="https://www.cape.co/blog/product-feature-network-lock" rel="nofollow">https://www.cape.co/blog/product-feature-network-lock</a><p>Swapping SIMs is done via digital signatures, not customer support
<a href="https://www.cape.co/blog/cape-product-feature-secure-authentication" rel="nofollow">https://www.cape.co/blog/cape-product-feature-secure-authent...</a><p>They're the only provider that can rotate your IMSI, and do it continuously for you
<a href="https://www.cape.co/blog/product-feature-identifier-rotation" rel="nofollow">https://www.cape.co/blog/product-feature-identifier-rotation</a><p>They're also one of very few organizations doing original research on cell network security:<p>Collaborating with the EFF to release software for detecting cell site simulators (e.g, imsi catchers et al)
<a href="https://www.cape.co/blog/how-eff-and-cape-collaborated-to-improve-detection" rel="nofollow">https://www.cape.co/blog/how-eff-and-cape-collaborated-to-im...</a><p>Identifying novel weaknesses for physically tracking people on cell networks
<a href="https://dl.acm.org/doi/pdf/10.1145/3636534.3690709" rel="nofollow">https://dl.acm.org/doi/pdf/10.1145/3636534.3690709</a>
I’m curious if you’re able to comment on the IMEI question raised above - rotating the IMSI is good, but are the towers still collecting IMEIs?
Is it free and open source software?
I hope this succeeds and isn’t backdoored