4 ms·

GSM-450 is pretty much right there at the top end of the 70cm, and GSM-950 is right in the middle of 33cm, but here in the US at least the FCC is pretty nuts ab

by dunmalg 12y ago

GSM-450 is pretty much right there at the top end of the 70cm, and GSM-950 is right in the middle of 33cm, but here in the US at least the FCC is pretty nuts about insisting that stuff sold here is locked out of other devices' yards. They'd flip out if you tried to import an HT that could hit GSM freqs.

tlrobinson 12y ago
> They'd flip out if you tried to import an HT that could hit GSM freqs. How did Chris Paget's IMSI catcher demo at Defcon a few years ago work then? http://blog.marinetelecom.net/2010/08/01/ham-radio-operator-chris-paget-kj6gcg-spoofs-as-900mhz-gsm-tower-and-15-phones-in-defcon-hacker-convention-log-onto-his-network/ http://blog.marinetelecom.net/2010/08/01/ham-radio-operator-...
- madengr 12y ago
  He is not using ham transceivers (i.e push a button and talk), rather test equipment (a Universal Software Radio Peripheral with Open BTS firmware). The FCC does not regulate test equipment since it's not laymen's use.
- dunmalg 12y ago
  >How did Chris Paget's IMSI catcher demo at Defcon a few years ago work then? Oh, it's actually not too difficult to modify transceivers to work outside their regional prescribed bands. There are usually internal jumpers or, more recently, firmware modifications to expand their tuning ranges to include bands normally only allowed in other regions. Some of the software defined radios are surprisingly malleable. I was actually mostly just thinking about the possibility of getting a GSM phone to hit an amateur band freq or vice-versa without a lot of hacking.