12 Facts About Karsten Nohl

Karsten Nohl was born on 11 August 1981 and is a German cryptography expert and hacker.

Karsten Nohl grew up in the Rhineland area of Germany and studied electrical engineering at the Heidelberg University of applied sciences from 2001 to 2004.

Since 2010 Karsten Nohl has served as the Managing Director and Chief Scientist of the Berlin-based consultancy and think tank, Security Research Labs.

Karsten Nohl has served as interim CISO for the Indian corporation Jio from 2014 to 2017, as well as, for the Malaysian corporation Axiata in 2017.

Together with Henryk Plotz, Karsten Nohl gave a presentation in December 2009 documenting the flawed security of Legic Prime RFID security.

Related searches

At SIGINT-2013, Karsten Nohl gave a presentation on the insecurity of electronic car immobilizers used to prevent vehicle theft, documenting vulnerabilities in the three most widely used systems: DST40, Hitag 2 and Megamos .

At both Black Hat 2013 and OHM 2013, Karsten Nohl demonstrated that many SIM cards use the outdated and insecure DES encryption, undermining the privacy and security of mobile phone users.

Karsten Nohl generated a Rainbow Table for 56-bit DES within a year based a on specially signed error message with known plain text.

Karsten Nohl found that the Java sandbox implementations of at least two major SIM card manufacturers, including market leader Gemalto, are insecure and it is possible for a Java app to escape the sandbox environment and thus gain access to the entire SIM card.

At the 31C3 in December 2014, Karsten Nohl presented the Android app "SnoopSnitch" as a possible countermeasure against various mobile network security attacks.

Also at the 31C3, Karsten Nohl presented a side channel attack using Signaling System 7 on UMTS communication and described other SS7-based attacks that can allow the reading of text messages, the determination of location coordinates, and various scenarios for fraud.

Karsten Nohl released an updated version of the open source “Snoopsnitch” app with new features to allow users to run tests on their Android phones to check for a "patch gap" on their device.