2

The title says it all basically. Even now, why is tampering IMEI possible at all? Shouldn't manufactures be using one time writable memory to embed IMEI into phones? Why don't they?

  • Why would they? What would they gain from the extra cost of the hardware? – forest Jan 14 '19 at 3:45
  • Wouldn't the cost be eventually transferred to the customer anyway? And which customer won't prefer such a system? Also, GSMA states that the IMEI should be implemented in a manner such that it can't be changed, and obviously current implementations aren't that secure, so why aren't manufactures taking some action? – Nikhil Jan 14 '19 at 3:47
  • Most customers wouldn't even know that it was implemented, much less actively prefer it. And the requirements only state that reasonable measures be taken to prevent the end-user from changing it, which is usually implemented as restrictions in software. Why would they go further when they aren't legally required and when it would not make them further profit? – forest Jan 14 '19 at 3:50
  • imeidb.gsma.com/imei/resources/documents/… Doesn't principle 6 here tell the manufacturers to use appropriate technique to prevent unauthorized tampering of IMEI? – Nikhil Jan 14 '19 at 3:59
  • So it's best practices, but it would still be cheaper for them to do the bare minimum. – forest Jan 14 '19 at 4:02