Live data from Hacker News

How to Detect IMSI Catchers

armadillophone.com

11–12 of 12 posts

Re: How to Detect IMSI Catchers

#11

Earlier quoted context omitted.

Do you plan to upload your kernel sources? This site seems ambiguous considering the open source nature of the product...

Yes, although the code needs to be updated you can view our kernel code here : https://github.com/pacificresearchalliance/kernel_google_cro... The only changes to the kernel required for our Radio Sentinel app are DIAG_CHAR=y when building.

Crosshatch is the pixel 3xl which is EOL. Any sources for your devices in stock?

Re: How to Detect IMSI Catchers

#12

The article focuses heavily on why existing solutions are bad, but doesn’t seem to propose novel detection techniques - or at least glosses a bit over the details of the detection algorithm. Would the approach be able to detect an AdaptOver/LTrack style attack?

The Radio Sentinel app is our new solution, a combination of several offline heuristic detection methods designed to minimize false positives. It can detect not only IMSI catchers but also binary SMS, silent SMS and some SS7 attacks. You can read more in our followup article: https://armadillophone.com/blog/radio-sentinel LTrack is one of the stealthiest IMSI catchers I'm aware of, because it's almost entirely passiv…

Nice, thanks for the link. I‘m the author of AdaptOver, and I‘m in process to release a new version (paper is under submission atm) that removes the range limitations almost entirely by overshadowing the uplink instead of the downlink. It works by coercing the legitimate base station to transmit the attack message as response (i.e., Identity Request, Attach Reject, …).

I‘m interested to see if Radio Sentinel could/will detect the new improved version! Would you be willing to provide us with a test version/device?

Post reply on HN