Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How a Hacker Proved Cops Used a Stingray to Find Him

politico.com

Post reply on HN
Print view View original

161–164 of 164 posts

Re: How a Hacker Proved Cops Used a Stingray to Find Him

#161

Post by taejo »

greggarious wrote: post #141
bbrian wrote: post #55

Earlier quoted context omitted.

I remember reading an article years ago: FBI taps cell phone mic as eavesdropping tool (2006). > the eavesdropping technique "functioned whether the phone was powered on or off." https://www.cnet.com/news/fbi-taps-cell-phone-mic-as-eavesdr...

Thanks, that seems to apply to older phones. I would hope that the FBI would not override airplane mode on a smart phone... what if they did so while a suspect was actually on a plane? A warrant doesn't give police the right to endanger others IIRC...

> what if they did so while a suspect was actually on a plane?

Nothing would happen. Just like nothing happens to the thousands of people who forget to switch their phones to airplane mode every day.

Re: How a Hacker Proved Cops Used a Stingray to Find Him

#162

Post by grkvlt »

xyzzyz wrote: post #150
grkvlt wrote: post #143

Earlier quoted context omitted.

2048 bits of RSA key is the same amount of security as 112 bits of symmentric key, though.

Yes, that’s my point — you need to use 2048 bits for key to get 128 bits of security, so there is no way to fit the public key in the IPv6 address.

Can't you do something with a key-stretching system [0] maybe, to turn 112 bits of IPV6 into 2048 bits of RSA input, though, since you definitely have the right amount of entropy?

0. https://en.wikipedia.org/wiki/Key_stretching

Re: How a Hacker Proved Cops Used a Stingray to Find Him

#163

Post by hueving »

ikiris wrote: post #115
hueving wrote: post #107

Earlier quoted context omitted.

Putting the return IP encrypted in the payload breaks NAT (see FTP helpers). You do understand that the IP that the return traffic is destined for has to initially be addressed to the IP of the NAT device, not what the client thinks its IP is, right?

And nothing of value was lost :)

Well except nat doesn't work and the ipv4 internet (which is the vast majority of it) is broken. I wouldn't call the vast majority of the internet something without value.
Post reply on HN