The Great SIM Heist: How Spies Stole the Keys to the Encryption Castle
Shouldn't TLS/GPG/OTR/etc have our backs on this anyway (at least on the data-side of it)?
I mean, they can now intercept and read any mobile data traffic, but that traffic usually has layer-specific encryption as well (eg: TLS for banking). Doesn't that cover us? Am I missing something?