31–40 of 104 posts
Earlier quoted context omitted.
Some details regarding the message here: http://security.stackexchange.com/questions/61750/android-ki...
This is not the message I've seen. There was nothing about TLS, trusted CA installation, emails, apps, or websites. I wish I've taken a screenshot of it!
Earlier quoted context omitted.
I wouldn't feel safe until the battery is removed (which unfortunately isn't possible on most phones anymore) The baseband still has access to your battery when your phone is off.
> The baseband still has access to your battery when your phone is off. Citation needed? Because the definition of off, for most phones, is exactly that.
Earlier quoted context omitted.
> The baseband still has access to your battery when your phone is off. Citation needed? Because the definition of off, for most phones, is exactly that.
Good point, asking for a citation. It's an extraordinary claim and so requires something to back it up. A quick search turns up this quote from a 2013 Washington Post story "By September 2004, a new NSA technique enabled the agency to find cellphones even when they were turned off. JSOC troops called this “The Find,” and it gave them thousands of new targets, including members of a burgeoning al-Qaeda-sponsored insur…
http://blog.erratasec.com/2013/07/no-nsa-cant-track-phones-e...
There is NSA method called 'implant', but it requires installation of software (possibly in the firmware). It's not so easy and it can't be used in large scale.
Earlier quoted context omitted.
I wouldn't feel safe until the battery is removed (which unfortunately isn't possible on most phones anymore) The baseband still has access to your battery when your phone is off.
> The baseband still has access to your battery when your phone is off. Citation needed? Because the definition of off, for most phones, is exactly that.
'Dreamy Smurf handles power management, which according to The Guardian includes "an ability to stealthily activate a phone that is apparently turned off"'
Do IMSI catchers have any way of verifying the intercepted IMSIs are legitimate? If not, would it be possible to build a device to flood them with fake/spoofed IMSIs?
Technical ability wise, yes.
Legally, no. The Mobile Telephones (Re-Programming) Act 2002 [0] makes spoofing IMSI, even that of your own, illegal in the UK.
[0] https://www.staffordshire.police.uk/info_advice/crime_preven...
Disclaimer: I am not a lawyer.
Richard from Privacy International pointed me at these: http://www.amazon.co.uk/dp/B00RRL4XLW It's a faraday cage for you phone. Pop it in and you disappear instantly.
Big city with millions of people. Two or more cellphones disappear when they approach the same part of the city. When this happens few times, you might get flagged.
Interestingly enough, during last trip to London, my phone (Nexus 5 running Cyanogenmod 12.1) was able to somehow detect something fishy and warned me several times "Network may be monitored by an unknown 3rd party". Among others, I've seen this warning two times out of two when passing by Cheapside/St Martin's corner - next to the St Paul's Cathedral. At the time I just dismissed this as some tinfoil hat developer a…
I'm not getting these warning on my Nexus 4 running the default Android build. The only time I see them is when I use my own VPN connection. Do you think it might get triggered on your phone by the presence of the anti-porn filter that UK mobile provider have? For instance, when trying to access "adult" website (I use quotes as sometimes, even non porno website gets filtered out) you end up on your mobile provider pa…
No exotic measures are required to do this.
Watched the documentary last night. Given that these things are cheap, would any fellow Brits be interested in clubbing together and acquiring one and installing it in or around parliament? I'm sure there would be plenty of buyers for the call records of MPS.
Isn't it illegal to have one and run one in the UK if not licensed?
It doesn't really comes as a surprise, but it's good to see the news coming out. Now we need a legal framework to ensure this form of power isn't abused.
Same thing found in Oslo about a year ago. Police Security Service denied they existed though. If I remember correctly these were mostly located around parliament and other government institutions as well as in the embassy area. Report in english: http://www.aftenposten.no/nyheter/iriks/New-report-Clear-sig...
Given that Police Security Service has a decades long history of illegal political surveillance what shocked me is how muted the political reaction was.
