5 ms·

https://www.eff.org/sls/tech/cell-site-simulators/faq#faq-How-does-it-work https://www.eff.org/sls/tech/cell-site-simulators/faq#faq-Ho...?

• lend000 10y ago
  "It should be noted that, while cell phones do use encryption for content, the encryption can be turned off easily by a cell-site simulator itself, and there’s no notification that encryption is no longer operating." The incompetence of telecom companies / chipmakers knows no bounds. Of course, it could be by design.
  • Kalium 10y ago
    I don't think this is malice. This is more likely an artifact of a history where encryption was not initially part of the protocol, and seamless fall back had to be supported.
    • revelation 10y ago
      No production basestation ever used the "no encryption" mode. No handset should ever accept using it, just as no browser will accept to using the NULL cipher. So what is the justification 25 years on?
      • userbinator 10y ago
        I remember seeing "lawful intercept" being mentioned somewhere in the GSM standards, and it seemed they were certainly not opposed to it...
        • deleted 10y ago
          [deleted]
        • tastythrowaway2 10y ago
          they don't have the option to oppose (in the US, at least): https://en.m.wikipedia.org/wiki/Communications_Assistance_for_Law_Enforcement_Act https://en.m.wikipedia.org/wiki/Communications_Assistance_fo...
          • ptaipale 10y ago
            And the same has been true in practically all countries, democratic or not, developed or not, ever.
      • ams6110 10y ago
        Perhaps many phones don't, hence the many complaints that "phones stopped working" when the surveillance vehicle was nearby.
        • funnyfacts365 10y ago
          They stop working maybe because the stingray is only collecting identifiers instead if conducting a true MITM attack and forwarding any calls por SMS's. In any case, I suspect they could only do a MITM to outgoing traffic, so any incoming traffic/data would not be delivered, like the phone is out of service/no network.
    • throwawayish 10y ago
      GSM crypto was designed to not be strong (in the late 80s).
  • deleted 10y ago
    [deleted]
  • justinjlynn 10y ago
    It is absolutely by design. The GSM standard recommends that, if encryption is disabled, the user be notified. This feature is called the "chiphering indicator". However, practically none of the available handsets do so.
    • justinjlynn 10y ago
      oops, "ciphering" ... also, even if the handset supports ciphering indication the SIM can disable it. Oh, and you're not permitted to reconfigure that part of the SIM either.
  • analogmemory 10y ago
    Does it affect the data connection, like a SSL connection to my bank? Can it see that data stream as well?