Live data from Hacker News

Stingrays and Dirtboxes: how cops can secretly track your phone

theintercept.com

71–80 of 215 posts

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#71
post #19

Hey. Someone who briefly worked on the Stingray team here. I left the company that develops the stingray (who’s name is mentioned in the article but I shall not say it) because I didn’t feel comfortable with the ethics of how it could potentially be easily abused without legal permission and/or repercussion. I fear these technologies will become more commonly used against Americans by low level law enforcement withou…

Any reason to think usage is limited to law enforcement?

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#72

Pro-tip: If you want fairly good OPSEC when going to a protest, get a burner Android phone, put it on airplane mode with WIFI only. Then purchase a couple of Comcast / Xfiniti logins off the web, and use those to connect to "xfiniti-wifi" hotspots. Most cities have them, the speeds are fairly decent too. We're truly living in the panopticon

You should not have to be good at opsec or economically advantaged to be able to demonstrate.

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#73
post #18
post #2

TL;DR it's a radio in your pocket that constantly announces its identity. I'm quite interested in the fact that people don't realize this. Is it a generational split between people who can remember when we did not all have radios in our pockets and those who can't, or ??? The fact that an always-on radio you carry everywhere can be used to track you seems like the #1 most obvious thing about the technology.

I feel like you're ignoring a key point here, which is that these stingray devices can MitM your phone by forcing it to send essentially unencrypted messages. That's both more technically complicated and more serious than passive tracking.

> these stingray devices can MitM your phone by forcing it to send essentially unencrypted messages.

Earlier Harris equip did that by forcing 2g mode but 2g is being turned off: https://1ot.mobi/resources/blog/a-complete-overview-of-2g-3g...

I'm less familiar with the capabilities of current IMEI catchers tho.

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#74

Pro-tip: If you want fairly good OPSEC when going to a protest, get a burner Android phone, put it on airplane mode with WIFI only. Then purchase a couple of Comcast / Xfiniti logins off the web, and use those to connect to "xfiniti-wifi" hotspots. Most cities have them, the speeds are fairly decent too. We're truly living in the panopticon

In Portland hundreds of demonstrators used the mesh-networking app Bridgefy, and some affinity groups used goTennas which even served streaming movies, music, and documentaries that spoke to the revolutionary tenor.

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#75
post #10

Earlier quoted context omitted.

Well, why not? How can we improve general technological literacy? I don't want people to memorize the protocols, but I do want them to have the foundation of knowledge that would allow them to conclude that if the phone company can connect calls to your mobile handset, then they can also figure out roughly where it is. I'd also like for people to have the basic knowledge required to understand that GPS does not track…

> How can we improve general technological literacy? Fund schools. Provide mandatory technical and privacy education. > I'd also like for people to have the basic knowledge required to Fund schools.

> Fund schools.

Hire tech capable teachers that care. Funding only works if it's toward this specific end.

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#76
post #65

Earlier quoted context omitted.

Through the pandemic, Xfinity is offering anyone free guest access, so for at least the next few months, you don't need to even buy logins. https://corporate.comcast.com/press/releases/comcast-extends...

Note, this only works on the xfinity "public wifi stations" rather than the xfinity ssid's from home routers. If you want to access the home router networks, you still need to pay for an account.

Yup thanks for the clarification

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#77
post #56

Earlier quoted context omitted.

Every professional, expert, specialist, or technician feels this way about the stuff they know. "Why don't people know [basic thing about their work]? What a bunch of uneducated morons." The answer is because if they knew all the basic stuff about all those fields to be what those experts judge to be informed consumers, and took the time to apply that knowledge, they wouldn't have any time left to 1) actually buy pro…

I guess we will disagree on what is or should be obviously illegal. What your phone does is the functional equivalent of you walking down the street shouting your phone number. It does not strike me as obviously wrong for people to hear it.

I just mean that it's the kind of thing many people who have some concept of how cell phones work might assume is illegal because tracking a bunch of people and storing all that info, or broad, non-tightly-targeted-and-regulated use of things like stingrays, and the various other things service providers and law enforcement do to spy on people really do seem pretty similar to stalking and warrantless search and various other activities that are illegal (so, obviously that would be too, how could it not be, one might reason), and so they might be surprised that a capability they know or suspect exists in the technology is used the way it is and to the extent that it is by both private parties and law enforcement. Their not thinking about their cell phone as a device that spies on them or is otherwise very untrustworthy might not be because they don't know what the tech might do but because they've assumed exercising those capabilities would be illegal.

I suppose similar reasoning is how we arrive at our judgements on most questions of legality, personally, when deciding how to behave and what to worry about others doing day-to-day. Like, I definitely can't show you the statute that says driving the wrong way on the highway is illegal, rather than just a very bad idea, and I'm not sure I've even ever been told specifically that that is illegal let alone done the research to makes sure it's illegal—but nonetheless, I'm pretty sure it is. So, I would guess some people surprised that their cell phones spy on them in certain ways are more surprised that they are being used that way and not that they could be used that way.

[EDIT] to stretch the analogy further, if I were surprised to learn that some delivery company had found a way to reduce delivery times by driving the wrong way on the highway, the fact that vehicles are technically capable of driving the wrong way on the highway wouldn't be the part that I found surprising.

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#78
post #56

Earlier quoted context omitted.

Every professional, expert, specialist, or technician feels this way about the stuff they know. "Why don't people know [basic thing about their work]? What a bunch of uneducated morons." The answer is because if they knew all the basic stuff about all those fields to be what those experts judge to be informed consumers, and took the time to apply that knowledge, they wouldn't have any time left to 1) actually buy pro…

I guess we will disagree on what is or should be obviously illegal. What your phone does is the functional equivalent of you walking down the street shouting your phone number. It does not strike me as obviously wrong for people to hear it.

In a general sense, our problem isn't surveillance but disproportional surveillance. It's generally appropriate for LEO to have access to the same data that all of us do. The problem is when 'privacy' or security laws restrict you and I from data but not the people who regularly exercise their exclusive powers to ruin lives.

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#79
post #43

It's even possible for phones to be tracked while turned off: http://www.washingtonpost.com/world/national-security/nsa-gr... https://slate.com/technology/2013/07/nsa-can-reportedly-trac...

How is this possible?

Your phone is never really off.

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#80

Wi-Fi Calling while in Airplane mode would not be subject to Stingray interception, and would protect IMEI data from airborne bulk capture. Authorities can still set up open SSIDs to capture limited information about phones, but the "fly an airplane over" capture model doesn't work well with Wi-Fi.

You may be underestimating people's lack of care about what open access point people connect to. The traffic itself may be encrypted, but DNS queries, phone hardware addresses, and background traffic might not be.

I’m not trying to offer a comprehensive solution for avoiding government monitoring. I’m just offering a solution for avoiding cellular Stingrays while retaining cellular service.

For a more comprehensive solution, you would need to at minimum not carry any electronic devices (signal detection), wear a mask and IR-blocking glasses (face detection), and wear shoe inserts (gait detection) — and even then, they can still seize you and overcome those obstacles at will.

Post reply on HN