Live data from Hacker News

Signs of Secret Phone Surveillance Across London

news.vice.com

71–80 of 104 posts

Re: Signs of Secret Phone Surveillance Across London

#71
post #64

Earlier quoted context omitted.

Technically, IMSI is not a device identifier. MT has IMEI and SIM (or more precisely ICC) has ICCID (which is normally never transmitted over the network). And the legislation probably specifically targets spoofing the IMEI, as spoofing IMSI does not gain you anything other than absence of service (on normal GSM/3GPP network).

The fact the Government is using it as an identifier likely means they can argue legally you are attempting to change the identifier. Technically correct for technical discussions is not the same as contextually correct in a court room.

That's why I prefixed that with "technically". :)

From legal standpoint, device that spams IMSI catcher with registrations with random IMSIs is mostly same thing as the IMSI catcher itself, ie. device that requires it's own broadcast license to operate, as such device certainly does not meet legal (and technical) requirements for it to be an cellular phone.

On the other hand, generating random IMSI, burning that into ICC and thus producing unusable SIM is probably perfectly legal even when you put that inside normal GSM phone (from network standpoint it will behave mostly same as phone without any SIM). In practice SIMs with completely made-up IMSIs are even commercially available (idea there is that some phones will not fully boot without SIM).

Re: Signs of Secret Phone Surveillance Across London

#72

Earlier quoted context omitted.

The fact the Government is using it as an identifier likely means they can argue legally you are attempting to change the identifier. Technically correct for technical discussions is not the same as contextually correct in a court room.

IMSI is not a mobile phone identifier, it literally means International Mobile Subscriber Identity and is provisioned in the SIM card. You will change your IMSI by simply changing the SIM card.

And to be somewhat more pedantic, it even is not "unique device identifier" of the SIM, as SIM is not an device, but software application (typically one of applications) running on some hardware platform (usually an ICC, which is what is colloquially called "SIM card")

Re: Signs of Secret Phone Surveillance Across London

#73
post #58
post #17

Same thing found in Oslo about a year ago. Police Security Service denied they existed though. If I remember correctly these were mostly located around parliament and other government institutions as well as in the embassy area. Report in english: http://www.aftenposten.no/nyheter/iriks/New-report-Clear-sig...

Hopefully there will be some action on this in Norway. Unless they want to ignore unconstitutional police and agency activity, just like in .. so many other major countries.

It took 40+ years of illegal surveillance of left-wing politicians before they finally took the allegations seriously and investigated it, and the result of extensive evidence of breaking the law was renaming the agency and some slaps on the wrist, so I have no reason to believe they've improved.

Re: Signs of Secret Phone Surveillance Across London

#74
post #4

Richard from Privacy International pointed me at these: http://www.amazon.co.uk/dp/B00RRL4XLW It's a faraday cage for you phone. Pop it in and you disappear instantly.

Does it work? I bought an RFID-blocking wallet for my passport a while ago, but when I put my work access badge in it, I could open doors just fine.

Here's a different one with a few more reviews

http://www.amazon.com/Mengshen%C2%AE-3-Pack-Blocker-Shieldin...

Re: Signs of Secret Phone Surveillance Across London

#75

Do IMSI catchers have any way of verifying the intercepted IMSIs are legitimate? If not, would it be possible to build a device to flood them with fake/spoofed IMSIs?

Like anything, it is technically possible to do this. As a defensive mechanism, I think it would make sense to perhaps hang out at city call and collects a bunch of IMSI's worth spoofing, and then rebroadcast those while you were being subject to surveillance, the goal being to force the adversary to follow down a bunch of leads which are bogus. That said, this is completely illegal (unlike the actual surveillance wh…

SDRs are no longer that expensive - even an Ettus or BladeRF device is within the range of the average middle-class engineer - and can be programmed completely in software to act as a cellular baseband device.

Re: Signs of Secret Phone Surveillance Across London

#76
post #8

Interestingly enough, during last trip to London, my phone (Nexus 5 running Cyanogenmod 12.1) was able to somehow detect something fishy and warned me several times "Network may be monitored by an unknown 3rd party". Among others, I've seen this warning two times out of two when passing by Cheapside/St Martin's corner - next to the St Paul's Cathedral. At the time I just dismissed this as some tinfoil hat developer a…

Is it completely legal to warn users of suspicious network activity like this? If for example Apple built detection into iOS and gave all users a warning that could do a lot for raising awareness and maybe some support for change. "The network you are using is likely being surveilled. Your identity, online activity, and phone calls may be monitored by government or criminal equipment"

Re: Signs of Secret Phone Surveillance Across London

#77
post #23

Earlier quoted context omitted.

"IMSI catcher" is a device: https://en.wikipedia.org/wiki/IMSI-catcher It doesn't have to "verify" what it collects.

Yes, but the value of the collected data is much reduced if you can't distinguish between legitimate IMSIs and spoofed IMSIs of devices that were never actually there.

If you attach to a network successfully, it means the its secret key stored in the SIM card matches that of the network.

Since your IMSI catcher is basically just a proxy between the mobile phone and the real network, you can therefore easily detect that the IMSI is who it says it is.

Re: Signs of Secret Phone Surveillance Across London

#78
post #13

Recommended app for phones not doing this by default: https://f-droid.org/repository/browse/?fdfilter=SnoopSnitch&...

also https://f-droid.org/repository/browse/?fdfilter=imsi&fdid=co... (does not need root)

and also does not detect anything. It's placebo.

Re: Signs of Secret Phone Surveillance Across London

#79

I stayed in The City during the holidays and at one point walked close by the Police hq. After continuing on I enabled gps for a moment and even though I was half a mile a way my gps was showing me smack dab in the center of the police hq for about 15 minutes... I realized then what was happening and that I should have known better, but I had forgotten to ask a friend to take his faraday cage laptop bag and phone bag…

Sorry if I'm being a bit slow here, but what was happening? Why was your gps showing you in the middle of the police hq?

A bug in the imsi catcher not properly relaying the info, so I was seeing the imsi catcher's location data temporarily instead of my own.

Re: Signs of Secret Phone Surveillance Across London

#80
post #8

Interestingly enough, during last trip to London, my phone (Nexus 5 running Cyanogenmod 12.1) was able to somehow detect something fishy and warned me several times "Network may be monitored by an unknown 3rd party". Among others, I've seen this warning two times out of two when passing by Cheapside/St Martin's corner - next to the St Paul's Cathedral. At the time I just dismissed this as some tinfoil hat developer a…

Is it completely legal to warn users of suspicious network activity like this? If for example Apple built detection into iOS and gave all users a warning that could do a lot for raising awareness and maybe some support for change. "The network you are using is likely being surveilled. Your identity, online activity, and phone calls may be monitored by government or criminal equipment"

Can you stifle free speech when it's informed by public information and not knowledge of secret activities? That is, if all it's doing is flagging signals it's antenna receives, is it even possible for that to be illegal?

Also, how do laws treat waves in public (radio, light) - do they get the same "privacy" treatment as people (that is, no expectation of if in public)?

Edit: actually since joining/browsing an open WIFI network can be considered criminal...

Post reply on HN