Android app: https://opensource.srlabs.de/projects/snoopsnitch/wiki/FAQ#W... > SnoopSnitch offers tests to assess whether a device is exposed to attacks or surveillance from the mobile network. Here, the primary goal is to help mobile users detect network originated attacks, such as via SS7, SMS, or ISMI catchers. Our secondary goal is to provide a fact-based incentive to Mobile Network Operators to better improve th…
Devices Which Track Cellphones, Intercept Calls Found All Over DC, MD, VA
41–50 of 112 posts
Re: Devices Which Track Cellphones, Intercept Calls Found All Over DC, MD, VA
#42Related article, "Feds: There are hostile stingrays in DC, but we don’t know how to find them" [0], and discussion [1] from 45d ago. [0]: https://arstechnica.com/tech-policy/2018/04/dhs-to-senator-m... [1]: https://news.ycombinator.com/item?id=16748971
My guess would be that the situation isn't that they can't find the stringrays but that they can't distinguish between "hostile" and "friendly" stringrays. After all, each agency deploying such devices does so as secretly as possible, naturally not alerting other agencies, and so there's no list of friendly stingrays.
Re: Devices Which Track Cellphones, Intercept Calls Found All Over DC, MD, VA
#43Does this apply to iPhones? So someone could put this outside my house and listen to all my iPhone calls?
Re: Devices Which Track Cellphones, Intercept Calls Found All Over DC, MD, VA
#44It was the responsibility of the FCC to have never allowed these devices to manufactured, but as typical they fell for the police exemption excuse. Now they'll be abused more and more.
The protocol should have required enough authentication to make it impossible to manufacture these devices without also having a blessed, revocable key from the carrier you're snooping on. The FCC could have easily had their police exemption without also providing access to your average HAM, any reasonably competent hobbyist, and the security services of every other nation on the planet. Security on cellular networks…
Re: Devices Which Track Cellphones, Intercept Calls Found All Over DC, MD, VA
#45Any foreign embassy running one, has no right to radiate beyond the border of the embassy, where it is US soil and not foreign.
Re: Devices Which Track Cellphones, Intercept Calls Found All Over DC, MD, VA
#46It was the responsibility of the FCC to have never allowed these devices to manufactured, but as typical they fell for the police exemption excuse. Now they'll be abused more and more.
Control of 'manufacturing' was never going to happen. They would literally have to prohibit the sale of high-speed DACs and ADCs to civilians. If you think the War on Drugs was an expensive boondoggle, try keeping LTC2216s out of my hands. :-P However, it is the responsibility of the FCC to not throw up their hands and say "Duh, we don't know how to find 'em." They have one job -- regulating the use of the RF spectru…
Of course the funny part is, it’s designed so pirates can only send HDMI output to approved screens (=not recording devices), but for backwards comparibility, they has to allow HDMI-to-SVGA adapter with decoding, so the breach is wide open. But you get the intent: HDMI was supposed to bea fully-encrypted standard with only preapproved devices.
Re: Devices Which Track Cellphones, Intercept Calls Found All Over DC, MD, VA
#47Android app: https://opensource.srlabs.de/projects/snoopsnitch/wiki/FAQ#W... > SnoopSnitch offers tests to assess whether a device is exposed to attacks or surveillance from the mobile network. Here, the primary goal is to help mobile users detect network originated attacks, such as via SS7, SMS, or ISMI catchers. Our secondary goal is to provide a fact-based incentive to Mobile Network Operators to better improve th…
Bah, looks like SnoopSnitch requires root access (and a Qualcomm chipset in the phone) for most/all of the interesting mobile network tests, which is a shame.
Re: Devices Which Track Cellphones, Intercept Calls Found All Over DC, MD, VA
#48Earlier quoted context omitted.
The protocol should have required enough authentication to make it impossible to manufacture these devices without also having a blessed, revocable key from the carrier you're snooping on. The FCC could have easily had their police exemption without also providing access to your average HAM, any reasonably competent hobbyist, and the security services of every other nation on the planet. Security on cellular networks…
Does that mean network quality will significantly go down if we shut down the stingrays? I mean when you have 5 nation states deploying a network of stingrays in DC, all trying to compete on being the relay nodes, that does add quite a lot of bandwidth.
Re: Devices Which Track Cellphones, Intercept Calls Found All Over DC, MD, VA
#49I don't understand the assertion that the US Gov't can't do anything to prevent the foreign governments from doing this... The FCC has broad powers to regulate the public airwaves. This technology clearly disturbes authorized and licensed utilizaton of the airwaves OUTSIDE of the bounds of the Embassies. FCC should have the power to prevent this.
The situation discussed in the article was with regard to Stingray-type devices placed at foreign embassies which are considered foreign soil. The FCC doesn't regulate embassies any more than it regulates Beijing or Moscow. The Stingrays found on K Street (far from Embassy Row) and some bridges were more likely US government operations. So the question comes back to are there non-embassy, non-US government Stingrays…
However, in practice diplomacy is impossible without affording Ambassadors, their staff, the places where they live and work and so on, broad immunity to normal civil law enforcement. Eventually this was formalised as the Vienna Convention, and the current iteration of that convention is the state of the art as far as relations between most countries are concerned.
As a result Convention signatories do NOT on the whole search embassies of other signatories in their country. But it's not because the embassy in any sense isn't in their country.
For example the US government absolutely could tell the Russian mission to all shove off back home, they would be entitled to a "reasonable" amount of time to leave, and then the Ambassador (if he has foolishly remained) is just a Russian citizen in the US without immigration papers, the same for all staff and families. The embassy, the homes, and other facilities are all just ordinary buildings able to be searched by police, parcels sent to the embassy become just ordinary parcels which may be opened, examined, redirected or destroyed as appropriate by the USPS. The Americans would never choose to do this, because diplomatic contact with Russia remains essential, in anything short of total war, but legally they absolutely could.
Re: Devices Which Track Cellphones, Intercept Calls Found All Over DC, MD, VA
#50Earlier quoted context omitted.
My guess would be that the situation isn't that they can't find the stringrays but that they can't distinguish between "hostile" and "friendly" stringrays. After all, each agency deploying such devices does so as secretly as possible, naturally not alerting other agencies, and so there's no list of friendly stingrays.
It's all very Kim Stanley Robinsonesque in his climate-change trilogy where there are so many US Shadow agencies that they are constantly getting in each other's way.