Is there some kind of device that can detect bugs like this? (I'm thinking of the "bug sweepers" I've seen in films)
A low budget consumer hardware espionage implant (2018)
11–20 of 99 posts
Re: A low budget consumer hardware espionage implant (2018)
#12Is there some kind of device that can detect bugs like this? (I'm thinking of the "bug sweepers" I've seen in films)
The article has a section on that very topic: https://ha.cking.ch/s8_data_line_locator/#detection
Re: A low budget consumer hardware espionage implant (2018)
#13Using SMS as the control protocol seems like a bad idea. You are generating evidence with each command sent that may or may not be stored practically forever by the telcos.
Note that SMS is the protocol advertised to buyers but the unadvertised login credentials for the web portal let you manage the device without SMS
If I understand correctly you need atleast one sms to know the credentials to the web portal. that's probably enough to get caught if someone finds the device.
Re: A low budget consumer hardware espionage implant (2018)
#14If not already out there, soon there possibly will be compromised cables with 801.11ah built-in. Given its low cost, low power requirements and the considerable range of the technology, it will be difficult to protect against unfortuantely.
Re: A low budget consumer hardware espionage implant (2018)
#15Is there some kind of device that can detect bugs like this? (I'm thinking of the "bug sweepers" I've seen in films)
The article covers that under the section "detection".
TL;DR: You can easily detect it while it communicates via GSM, and the device is also shielded quite badly, resulting in lots of easily detectable RF interference while it works.
All you need is a cheap RF detector. Having access to a full spectrum analyzer or a SDR will make this even easier.
All this gets much harder while the thing lies dormant, waiting for noise activation or commands. So the "quick bug sweeps" you see in the movies are more difficult.
Re: A low budget consumer hardware espionage implant (2018)
#16Using SMS as the control protocol seems like a bad idea. You are generating evidence with each command sent that may or may not be stored practically forever by the telcos.
Wouldn't someone using this sort of thing also buy a cheap burner phone and throw-away sim card? They're easy to buy with cash and you don't need to register them or anything to use them. Supermarkets in the UK even sell sims with credit already loaded onto them.
Re: A low budget consumer hardware espionage implant (2018)
#17Earlier quoted context omitted.
Note that SMS is the protocol advertised to buyers but the unadvertised login credentials for the web portal let you manage the device without SMS
If I understand correctly you need atleast one sms to know the credentials to the web portal. that's probably enough to get caught if someone finds the device.
If you can get an unidentifiable SIM for the tracker, you can also get one + a burner phone for yourself. And if someone is stupid enough to not do that or to turn on either device in an identifiable location, they're beyond help.
Re: A low budget consumer hardware espionage implant (2018)
#18I’ve been playing with the idea of eye prosthetics for that purpose. At this point, a camera, battery, storage, and radio can all fit inside an aesthetic prosthesis and give it some functionality in itself or augmented by a smartphone.
Re: A low budget consumer hardware espionage implant (2018)
#19Is there some kind of device that can detect bugs like this? (I'm thinking of the "bug sweepers" I've seen in films)
The article covers that under the section "detection". TL;DR: You can easily detect it while it communicates via GSM, and the device is also shielded quite badly, resulting in lots of easily detectable RF interference while it works. All you need is a cheap RF detector. Having access to a full spectrum analyzer or a SDR will make this even easier. All this gets much harder while the thing lies dormant, waiting for no…
We used to have keychain lights that would start to blink whenever a nearby phone went off, I can imagine it could be set off by a device like this lol.
Re: A low budget consumer hardware espionage implant (2018)
#20An even easier one would be a modified keyboard.
Anyone could fit an esp32 into a keyboard, swap it out, leave it lying around, sniff keystrokes, access with Bluetooth or WiFi, could have it only have the radio on for certain windows in time etc.