7 ms·
Is there a way of legitimately detecting Stingrays? I understand this is the kind of situation where they are actively deployed despite all the social awareness
by kennxfl 6y ago
Is there a way of legitimately detecting Stingrays? I understand this is the kind of situation where they are actively deployed despite all the social awareness.
- millzlane 6y agoI remember a few apps that you could watch the towers in your area and be alerted or warned when new ones popped up. But one app needed to be trained to remember the towers in your area. Something like this maybe? https://f-droid.org/en/packages/info.zamojski.soft.towercollector/ https://f-droid.org/en/packages/info.zamojski.soft.towercoll...
- oasisbob 6y agoUniversity of Washington researchers are working on this, their technique has used roaming car sharing vehicles and anomaly analysis: https://seaglass.cs.washington.edu/ https://seaglass.cs.washington.edu/
- krageon 6y agoYou can look up where the towers are and perform triangulation on the ones that you are connected to given multiple antennae. It'll cost you some hardware and you'll probably be writing some software also. Another option can be just seeding a few phones around the area and have them report moving (or transient) towers.
- swebs 6y agoI guess if you were to build a map of static cell towers, it would be easy to see if a new one suddenly pops up.
- jackhack 6y agoadditional temporary "towers" are sometimes added when very high but transient network loads are anticipated (such as a music festival, or county fair, etc.). not all new towers are sniffers.
- g_p 6y agoIf anyone is interested in trying to work around this, I have a few ideas for how to try distinguish a real and fake cell. Temporary event "pop-up" networks should announce valid neighbouring cells. Your baseband (radio) might expose neighbour cell data - iPhone field test menu shows the announced neighbour data. Hypothesis is that a rogue tower will not have valid neighbour cells announced. They could try listen in for valid ones and advertise those. A lot of the ways to detect will depend on the generation of network being spoofed - 4G networks will also advertise signalling for legacy 2G and 3G circuit switched networks. Rogue sites might not.
- LinuxBender 6y agoSweet talk a cellular network engineer into giving you the engineering firmware for your phone and a list of all the cell ID's.
- gruez 6y agostingrays can't spoof cell ids?
- LinuxBender 6y agoThey can and do, but they and the other cell sites can't up and move around. All cell sites have multiple transceivers that are directional. Each site has a unique cell ID and each transceiver has a unique ID. Your phone has GPS. If you drive around, you can find out who doesn't belong. Be careful about publicly disclosing this information.
- ISL 6y agoThe disclosure of facts is protected by the First Amendment.
- lawnchair_larry 6y agoThere are sometimes non-legal reasons to be careful.
- elihu 6y agoThat isn't universally true.
- vertex-four 6y agoI dunno if you noticed, but the law doesn't always exactly mean much in terms of what actually happens.
- gruez 6y agoDoes that work for DRM encryption keys? I think sony went after a few people who leaked either the blu-ray encryption keys, or the signing keys for one of their consoles.