Live data from Hacker News

Stingrays and Dirtboxes: how cops can secretly track your phone

theintercept.com

81–90 of 215 posts

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#81

> stingrays can force phones to downgrade to 2G, a less secure protocol, and tell the phone to use either no encryption or use a weak encryption that can be cracked. Can android, iOS, or an open phone os prevent 2g communication?

On Android, on most phones you can do ##4636##, then get access to the service menu and configure the modem to act how you want it to.

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#82

Earlier quoted context omitted.

> How can we improve general technological literacy? Fund schools. Provide mandatory technical and privacy education. > I'd also like for people to have the basic knowledge required to Fund schools.

> Fund schools. Hire tech capable teachers that care. Funding only works if it's toward this specific end.

> Hire tech capable teachers that care.

I know teachers who make and have to pay out-of-pocket for supplies. Good luck attracting tech talent with that salary.

So, again: fund schools.

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#83
post #63
post #30

Earlier quoted context omitted.

Thank you for walking away. I hope more people will follow your example and question their work. Not only at Harris Corporation, but in every part of what is called surveillance capitalism.

Is it enough that a few people like this simply turn their backs and walk away to different work? I would think their vacancies would be quickly and easily filled. Is there really a shortage of people willing and able to do this kind of work for these companies and government agencies? I'm asking because I truly don't know. And if not, could we think of some other ways people in these positions could exert some influ…

You can't change rape by being a good rapist. All that serves IMO is to normalize being an accomplice and doing evil things with good intentions.

> People have a series of rationalizations. People say for example that science and technology have their own logic, that they are in fact autonomous. This particular rationalization is profoundly false. It is not true that science marches on in defiance of human will, independent of human will, that just is not the case. But it is comfortable, as I said: it leads to the position that "if I don't do it, someone else will."

> Of course if one takes that as an ethical principle then obviously it can serve as a license to do anything at all. "People will be murdered; if I don't do it, someone else will." "Women will be raped; if I don't do it, someone else will." That is just a license for violence.

- http://tech.mit.edu/V105/N16/weisen.16n.html

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#84

I remember this being described in Bruce Schneier's book. When I first read it, I was terrified. Now, seeing them in action, I'm closer to dejected. Most methods of avoiding them aren't easy or practical enough to be used by the layman, hell, most laymen don't even know what stingrays are. These are incredibly tough to protect against on a mass scale.

What happens when they are used in countries with fewer protections to individuals than the US?

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#85
post #11
post #10

Earlier quoted context omitted.

Well, why not? How can we improve general technological literacy? I don't want people to memorize the protocols, but I do want them to have the foundation of knowledge that would allow them to conclude that if the phone company can connect calls to your mobile handset, then they can also figure out roughly where it is. I'd also like for people to have the basic knowledge required to understand that GPS does not track…

Abstracting away all of the details underlying the tech is a double edged sword. On one side, you get massively higher adoption due to a lower barrier to entry. On the other, you now have a massive population of folks who don’t understand the the “fundamentals”. I’m not sure we “need” to improve the general understanding. I mean how many ppl know how to change their own car tires or oil? If anything you just keep cre…

"Why does anyone need to know" is a restrictive premise.

In my experience, what follows it are less rights, less ability, greater compliance & increased malleability (eg: susceptibility to "election meddling").

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#86
post #69

Pro-tip: If you want fairly good OPSEC when going to a protest, get a burner Android phone, put it on airplane mode with WIFI only. Then purchase a couple of Comcast / Xfiniti logins off the web, and use those to connect to "xfiniti-wifi" hotspots. Most cities have them, the speeds are fairly decent too. We're truly living in the panopticon

Maybe I'm being overly paranoid, but if you're arrested, what's stopping the cops from matching the phones MAC to public wifi connections?

This might be helpful: https://support.apple.com/en-us/HT211227

> To reduce this privacy risk, iOS 14, iPadOS 14, and watchOS 7 include a feature that periodically changes the MAC address your device uses with each Wi-Fi network. This randomized MAC address is your device's private Wi-Fi address for that network—until the next time it joins with a different address.

iOS 14 is in beta, but has been pretty solid for me. https://beta.apple.com/sp/betaprogram/

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#87

> stingrays can force phones to downgrade to 2G, a less secure protocol, and tell the phone to use either no encryption or use a weak encryption that can be cracked. Can android, iOS, or an open phone os prevent 2g communication?

On Android, on most phones you can do # #4636# # , then get access to the service menu and configure the modem to act how you want it to.

[deleted]

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#88
post #43

It's even possible for phones to be tracked while turned off: http://www.washingtonpost.com/world/national-security/nsa-gr... https://slate.com/technology/2013/07/nsa-can-reportedly-trac...

How is this possible?

Unless you can physically disconnect the battery, your phone may not actually be fully off.

For example, on my Android phone should I drain the battery into oblivion ( let the phone die ) and let it sit for about a week in that state, takes about 90 seconds to become fully functional to the lock screen from the moment it is plugged into a charger.

On the other hand if I do hard power off of a phone followed by powering it on, it takes ~35-40 seconds for a phone to get to the lock screen. Out of curiosity I tested several more handsets with similar results. I can only explain that difference by phone not being completely powered off when the battery is inserted unless it does not have any juice at all.

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#89
post #69

Pro-tip: If you want fairly good OPSEC when going to a protest, get a burner Android phone, put it on airplane mode with WIFI only. Then purchase a couple of Comcast / Xfiniti logins off the web, and use those to connect to "xfiniti-wifi" hotspots. Most cities have them, the speeds are fairly decent too. We're truly living in the panopticon

Maybe I'm being overly paranoid, but if you're arrested, what's stopping the cops from matching the phones MAC to public wifi connections?

Since Android 9 there is an option to use randomized MACs for the actual connection (not just probing).

Re: Stingrays and Dirtboxes: how cops can secretly track your phone

#90
post #43

It's even possible for phones to be tracked while turned off: http://www.washingtonpost.com/world/national-security/nsa-gr... https://slate.com/technology/2013/07/nsa-can-reportedly-trac...

How is this possible?

You can use a non-linear junction detector, and triangulate on the signal it forces the target radio to give off. They are not very selective, so it’s easier to track when there are very few radios in the area under illumination.

The easier way is to compromise the phone and have it pretend to be off.

Post reply on HN