zlacker

Is there a way of legitimately detecting Stingrays? I understand this is the kind of situation where they are actively deployed despite all the social awareness.

>>kennxf+(OP)
You can look up where the towers are and perform triangulation on the ones that you are connected to given multiple antennae. It'll cost you some hardware and you'll probably be writing some software also.

Another option can be just seeding a few phones around the area and have them report moving (or transient) towers.

>>kennxf+(OP)
I guess if you were to build a map of static cell towers, it would be easy to see if a new one suddenly pops up.

>>kennxf+(OP)
I remember a few apps that you could watch the towers in your area and be alerted or warned when new ones popped up. But one app needed to be trained to remember the towers in your area.

Something like this maybe? https://f-droid.org/en/packages/info.zamojski.soft.towercoll...

>>kennxf+(OP)
University of Washington researchers are working on this, their technique has used roaming car sharing vehicles and anomaly analysis:

https://seaglass.cs.washington.edu/

>>kennxf+(OP)
Sweet talk a cellular network engineer into giving you the engineering firmware for your phone and a list of all the cell ID's.

>>swebs+s6
additional temporary "towers" are sometimes added when very high but transient network loads are anticipated (such as a music festival, or county fair, etc.). not all new towers are sniffers.

>>LinuxB+mi1
stingrays can't spoof cell ids?

>>gruez+2k1
They can and do, but they and the other cell sites can't up and move around. All cell sites have multiple transceivers that are directional. Each site has a unique cell ID and each transceiver has a unique ID. Your phone has GPS. If you drive around, you can find out who doesn't belong. Be careful about publicly disclosing this information.

>>LinuxB+mk1
The disclosure of facts is protected by the First Amendment.

>>LinuxB+mk1
>Be careful about publicly disclosing this information.

Why, what do I have to fear about that in the United States?

>>callal+rq1
I suppose that depends on your tolerance for drama and legal cartooney. One of my former employers and a three letter agency would go after people publicly disclosing such things and the people always backed down. The cooperation between nations can blur the lines depending on what nation you are in. That said, I am not a lawyer so it is probably best to get their input rather than mine.

>>ISL+Tp1
There are sometimes non-legal reasons to be careful.

>>ISL+Tp1
That isn't universally true.

>>ISL+Tp1
I dunno if you noticed, but the law doesn't always exactly mean much in terms of what actually happens.

>>ISL+Tp1
Does that work for DRM encryption keys? I think sony went after a few people who leaked either the blu-ray encryption keys, or the signing keys for one of their consoles.

>>ISL+Tp1
https://en.wikipedia.org/wiki/Illegal_number

>>jackha+1k1
If anyone is interested in trying to work around this, I have a few ideas for how to try distinguish a real and fake cell. Temporary event "pop-up" networks should announce valid neighbouring cells.

Your baseband (radio) might expose neighbour cell data - iPhone field test menu shows the announced neighbour data.

Hypothesis is that a rogue tower will not have valid neighbour cells announced. They could try listen in for valid ones and advertise those.

A lot of the ways to detect will depend on the generation of network being spoofed - 4G networks will also advertise signalling for legacy 2G and 3G circuit switched networks. Rogue sites might not.

>>callal+rq1
The creator of CryptoCat was targeted by the FBI. Not because he was suspected of committing a crime, just because they didn't like him creating open source encryption software. They actually had Hector Monsegur (Sabu) try to entrap him multiple times to try and come up with some trumped up reason to convict him.

https://nadimkobeissi.tumblr.com/page/29

Moxie Marlinspike can't even fly domestically without jumping through hoops and travelling internationally means they try to seize his electronics and demand the passwords.