3 ms·
That is not true. Stingray's are cell towers and phones trust them. The device just downgrades to A5/2 (export grade) encryption, or broadcasts that it does not
by dsl 8y ago
That is not true. Stingray's are cell towers and phones trust them. The device just downgrades to A5/2 (export grade) encryption, or broadcasts that it does not support encryption at all.
- kalleboo 8y agoSeems like a huge oversight to not let SIM cards disable certain types of encryption (that it knows the home network will never use). IIRC this is how downgrade attacks are prevented in EMV - the chip card will reject known-broken auth methods.
- supertrope 8y agoThe FCC takes a dim view on 911 call failures. All phones must support disabling GSM encryption as a fail safe. Never disabling encryption would be “fail secure” (like door locks that remain locked during a power outage).
- kalleboo 8y agoEmergency calls already have a bunch of exceptions that don't apply to regular traffic (e.g. you can use any network, heck you don't even need a SIM card) so allowing only those to be unencrypted shouldn't be too much of a stretch