I really want to know more about how they're accomplishing this technically, and what kind of carrier cooperation is required. If all they're doing is putting

I really want to know more about how they're accomplishing this technically, and what kind of carrier cooperation is required. If all they're doing is putting up Rx antennas and using them to intercept subscriber IDs from the non-encrypted part of the handshakes with the towers, without any cooperation from the carriers themselves, I guess I'm not too concerned, as a subscriber ID alone is meaningless without carrier records. If they're doing something that requires carrier cooperation, however, that's something different entirely. Suddenly we go from "anonymous by nature" to "trust us, we're anonymizing it." Any wireless engineers want to weigh in on this?