4 ms·
It was the responsibility of the FCC to have never allowed these devices to manufactured, but as typical they fell for the police exemption excuse. Now they'll
by guelo 8y ago
It was the responsibility of the FCC to have never allowed these devices to manufactured, but as typical they fell for the police exemption excuse. Now they'll be abused more and more.
- nyolfen 8y agoyou can manufacture one in your bedroom with an sdr and an rpi: https://julianoliver.com/output/stealth-cell-tower https://julianoliver.com/output/stealth-cell-tower
- CamperBob2 8y agoControl of 'manufacturing' was never going to happen. They would literally have to prohibit the sale of high-speed DACs and ADCs to civilians. If you think the War on Drugs was an expensive boondoggle, try keeping LTC2216s out of my hands. :-P However, it is the responsibility of the FCC to not throw up their hands and say "Duh, we don't know how to find 'em." They have one job -- regulating the use of the RF spectrum -- and that's it.
- tajen 8y agoOr have private-key encoding. That’s the case for HDMI: No-one can manufacture devices that aren’t approved. Of course the funny part is, it’s designed so pirates can only send HDMI output to approved screens (=not recording devices), but for backwards comparibility, they has to allow HDMI-to-SVGA adapter with decoding, so the breach is wide open. But you get the intent: HDMI was supposed to bea fully-encrypted standard with only preapproved devices.
- AlexCoventry 8y ago> HDMI was supposed to bea fully-encrypted standard with only preapproved devices. Interesting. Where can I read more about this intent, and how it was compromised?
- slashink 8y agohttps://en.m.wikipedia.org/wiki/High-bandwidth_Digital_Content_Protection https://en.m.wikipedia.org/wiki/High-bandwidth_Digital_Conte... The standard is called HDCP
- AlexCoventry 8y agoThanks. I found that before I asked the question. It doesn't indicate the intent of HDMI, or that HDCP compliance is mandated for HDMI devices.
- maltalex 8y agoThe encryption is a legal issue, not a technical one. Of course it can be circumvented like all forms if drm. The point is that by going around the drm, even if it’s by doing something trivial, you are committing a crime.
- toomuchgov 8y agoI thought that was HDCP?
- pjc50 8y agoUntil the key was extracted in 2010: https://arstechnica.com/civis/viewtopic.php?t=1122247 https://arstechnica.com/civis/viewtopic.php?t=1122247
- ohazi 8y agoThe protocol should have required enough authentication to make it impossible to manufacture these devices without also having a blessed, revocable key from the carrier you're snooping on. The FCC could have easily had their police exemption without also providing access to your average HAM, any reasonably competent hobbyist, and the security services of every other nation on the planet. Security on cellular networks is even more of a joke than on consumer-grade wifi... it's basically a pinky promise not to look at stuff you're not supposed to look at. No fucking wonder there's a mountain of stingray clones in DC. Are they planning to fix this on 5g networks? Because there's no reason to be so concerned over backdoors in Chinese cellular modems as long as we're happily letting them in through the front door.
- tajen 8y agoDoes that mean network quality will significantly go down if we shut down the stingrays? I mean when you have 5 nation states deploying a network of stingrays in DC, all trying to compete on being the relay nodes, that does add quite a lot of bandwidth.
- StudentStuff 8y agoStingrays don't add bandwidth in normal operation, as they act as a repeater. Most will have the bandwidth halving effect incurred by single transceiver mesh nodes or relay stations: http://www.strixsystems.com/products/datasheets/strixwhitepaper_multihop.pdf http://www.strixsystems.com/products/datasheets/strixwhitepa...
- AndrewKemendo 8y agoEven repeater is not really accurate. Like you say, in normal operation these systems are not working in collaboration with a wireless provider for the data passthrough/handoff. In my experience running these, it's more like the user briefly connects with a service with no connectivity and IMSI/IMEI connection logging only. So in practice it would look like briefly, usually imperceptibly, losing cell service.
- 8y ago