5 ms·
Kind of concerning what other uses this could be put to. Doesn't seem like a big jump from here to a DIY stingray, soaking up all of the data from every cell ph
by excalibur 8y ago
Kind of concerning what other uses this could be put to. Doesn't seem like a big jump from here to a DIY stingray, soaking up all of the data from every cell phone within range.
Of course, vacuuming up everything is probably a great way to get caught quickly. For nefarious purposes it would probably more useful to selectively target individual devices.
- vorpalhex 8y agoThose are definitely already a thing, unfortunately. https://hackaday.com/tag/cell-site-simulator/ https://hackaday.com/tag/cell-site-simulator/ https://www.evilsocket.net/2016/03/31/how-to-build-your-own-rogue-gsm-bts-for-fun-and-profit/ https://www.evilsocket.net/2016/03/31/how-to-build-your-own-...
- excalibur 8y ago> I’m not writing this post to help script kiddies breaking the law, my point is that GSM is broken by design and it’s about time vendors do something about it considering how much we’re paying for their services. Unfortunately they're unlikely to do much about it until the consequences of NOT securing their networks hit them in the wallet, which is maybe where the script kiddies come in.
- monocasa 8y agoIIRC, in LTE the devices verify the identity of the towers with a signature check now too.
- mrb 8y agoNo, LTE devices will happily connect to any random DIY base station, without any visual indication that this is taking place...
- gsich 8y agoMaybe with GSM, not with LTE.
- iwiririwo 8y agoLTE handsets connect to any base station, at least on physical layer and management protocols. This is required for mutual authentication. Some attacks abuse error indication prior authentication for location leaks and denial of service. Once the connection is established, you're good.
- jwilk 8y agoHow? Which keys do they trust?
- iwiririwo 8y agoLTE uses symmetric crypto with a pre-shared key stored in your SIM-card and in a database of your provider. Base stations receive a derivated key. If the base station is not connected to your provider's network, you cannot establish a connection due to the lack of a common key.
- crististm 8y agoI understand why you might be concerned but really, you should not. All technology can be used by the bad guys. Did you know that simply owning a _typewriter_ was illegal without reporting it to communist authorities in east Europe? Just to have a clear note here. Ham radio is regulated and there is certain traffic that you can run on free bands. That won't stop bad actors from ignoring these regulations.