Live data from Hacker News

Tell HN: Your Android carrier can remotely turn settings on

news.ycombinator.com

161–170 of 299 posts

Re: Tell HN: Your Android carrier can remotely turn settings on

#161
post #150

Earlier quoted context omitted.

I break into Tiffany's at midnight. Do I go for the vault? No, I go for the chandelier. It's priceless. As I'm taking it down, a woman catches me. She tells me to stop. It's her father's business. She's Tiffany. I say no. We make love all night. In the morning, the cops come and I escape in one of their uniforms. I tell her to meet me in Mexico, but I go to Canada. I don't trust her. Besides, I like the cold. Thirty…

What on earth does this have to do with the parent post? Please enlighten me.

It's a monologue from The Office which uses similarly extremely short sentence structure as seen in the GGP comment.

It's also possible GP is referencing GGPs arguably paranoid position on phones, relating it to similar paranoias held by Dwight (the character who delivers the monologue).

https://youtu.be/PlIzKaGBeHk

Re: Tell HN: Your Android carrier can remotely turn settings on

#162
post #150

Earlier quoted context omitted.

I break into Tiffany's at midnight. Do I go for the vault? No, I go for the chandelier. It's priceless. As I'm taking it down, a woman catches me. She tells me to stop. It's her father's business. She's Tiffany. I say no. We make love all night. In the morning, the cops come and I escape in one of their uniforms. I tell her to meet me in Mexico, but I go to Canada. I don't trust her. Besides, I like the cold. Thirty…

What on earth does this have to do with the parent post? Please enlighten me.

They're both wild tales. /s

Re: Tell HN: Your Android carrier can remotely turn settings on

#163
post #150

Earlier quoted context omitted.

I break into Tiffany's at midnight. Do I go for the vault? No, I go for the chandelier. It's priceless. As I'm taking it down, a woman catches me. She tells me to stop. It's her father's business. She's Tiffany. I say no. We make love all night. In the morning, the cops come and I escape in one of their uniforms. I tell her to meet me in Mexico, but I go to Canada. I don't trust her. Besides, I like the cold. Thirty…

What on earth does this have to do with the parent post? Please enlighten me.

[deleted]

Re: Tell HN: Your Android carrier can remotely turn settings on

#164

Earlier quoted context omitted.

I rotate burner SIM's. I never make calls with the SIM. Instead I use jmp.chat if I need to use OTA calls or SMS. I am in airplane mode 99% of the time and use WIFI instead of cellular. I never activate cellular near my home. I am always connected to VPN so that the traffic cannot be analyzed. My phone is anonymous without any identifiers. I think all this mitigates the baseband attacks, but tell me if I am missing s…

I break into Tiffany's at midnight. Do I go for the vault? No, I go for the chandelier. It's priceless. As I'm taking it down, a woman catches me. She tells me to stop. It's her father's business. She's Tiffany. I say no. We make love all night. In the morning, the cops come and I escape in one of their uniforms. I tell her to meet me in Mexico, but I go to Canada. I don't trust her. Besides, I like the cold. Thirty…

[flagged]

Re: Tell HN: Your Android carrier can remotely turn settings on

#165

Earlier quoted context omitted.

I rotate burner SIM's. I never make calls with the SIM. Instead I use jmp.chat if I need to use OTA calls or SMS. I am in airplane mode 99% of the time and use WIFI instead of cellular. I never activate cellular near my home. I am always connected to VPN so that the traffic cannot be analyzed. My phone is anonymous without any identifiers. I think all this mitigates the baseband attacks, but tell me if I am missing s…

Your location data. Tower associations can still happen with data "off", since there's plenty of "listen" components. All your home wifi connections are well Geo-located, thanks to other Android users picking up the ESSID as they walk / ride / drive past your house. Your shopping / outings? Forget it, fully known. VPNs hide the content of connections, at least from MITM / eavesdroppers, but server-side data scrapes a…

In my country, this one girl is buying prepaid SIMs and selling them on darknet. Which is fully legal. Still she got notified from our intelligence agency, lol. They're butt-hurt a lot from this.

Re: Tell HN: Your Android carrier can remotely turn settings on

#166

Wait until your learn what a country or local government/police can do remotely to the baseband firmware of your phone with a court order... 10-20 years ago the FBI was regularly remotely programming firmware to listen in and record cell phone microphones to capture conversations of suspects. IIRC a mafia case hinged on data gathered in this way so it is not some abstract theoretical or crackpot theory ( https://www.…

I rotate burner SIM's. I never make calls with the SIM. Instead I use jmp.chat if I need to use OTA calls or SMS. I am in airplane mode 99% of the time and use WIFI instead of cellular. I never activate cellular near my home. I am always connected to VPN so that the traffic cannot be analyzed. My phone is anonymous without any identifiers. I think all this mitigates the baseband attacks, but tell me if I am missing s…

So you're detected just by Wifi. Ok. Your phone is transmitting every network you saved. As OSINT you can pretty much fingerprint everybody with just that. And even since phones are using randomized MACs, there are methods to leak true MAC.

Re: Tell HN: Your Android carrier can remotely turn settings on

#167

Earlier quoted context omitted.

So drug lords throwing mobile phones out of the car window after each call is just a movie trope?

I am a reporter, and I cover crime. Occasionally, I cover a story whose publication might endanger people. Think cases involving gang violence and/or individuals cooperating with law enforcement. Before I publish those stories, I contact the lead detective on the case to ask whether that concern has merit, and whether certain people’s names, for example, should be anonymized. In one of those conversations, I was aske…

> Perhaps drug lords are more careful than lower-level dealers

At a certain level you stop buying burner phones and simply buy the whole phone company.

https://www.npr.org/2011/12/09/143442365/mexico-busts-drug-c...

Re: Tell HN: Your Android carrier can remotely turn settings on

#168

Wait until your learn what a country or local government/police can do remotely to the baseband firmware of your phone with a court order... 10-20 years ago the FBI was regularly remotely programming firmware to listen in and record cell phone microphones to capture conversations of suspects. IIRC a mafia case hinged on data gathered in this way so it is not some abstract theoretical or crackpot theory ( https://www.…

Are you saying that a phone manufactured in 2022 can have its firmware remotely changed to record microphones? Specifically can your whatsapp/signal audio calls be recorded by FBI remotely in this manner?

> Are you saying that a phone manufactured in 2022 can have its firmware remotely changed to record microphones?

Yes, court records show the FBI has and continues to explicitly do this. Leaks from folks like Snowden show the NSA/CIA have done this too.

> Specifically can your whatsapp/signal audio calls be recorded by FBI remotely in this manner?

The baseband firmware is at a level 'below' the operating system of the phone. It can directly access peripherals and intercept them, so it could be reading your microphone and passing it along to the higher level OS at the same time. WhatsApp/Signal thinks it's secure, and if you look at its app signature or anything else it looks exactly like the normal app you expect. However your data is still getting intercepted at the lower level and recorded for a state/government actor.

Re: Tell HN: Your Android carrier can remotely turn settings on

#169

Wait until your learn what a country or local government/police can do remotely to the baseband firmware of your phone with a court order... 10-20 years ago the FBI was regularly remotely programming firmware to listen in and record cell phone microphones to capture conversations of suspects. IIRC a mafia case hinged on data gathered in this way so it is not some abstract theoretical or crackpot theory ( https://www.…

I rotate burner SIM's. I never make calls with the SIM. Instead I use jmp.chat if I need to use OTA calls or SMS. I am in airplane mode 99% of the time and use WIFI instead of cellular. I never activate cellular near my home. I am always connected to VPN so that the traffic cannot be analyzed. My phone is anonymous without any identifiers. I think all this mitigates the baseband attacks, but tell me if I am missing s…

I’ve always assumed that behaviour like this is so unusual is would motivate a closer look by security services.

Re: Tell HN: Your Android carrier can remotely turn settings on

#170

These are emergency broadcast alerts. Different countries have different laws on these - and in some countries you might not even be able to disable them. Just because its listed under "Apps & notifications"/"Wireless emergency alerts", it doesn't mean they are "user settings". Its not necessarily the local "carrier" that turned the settings on, its more that connecting to a cell tower in a particular jurisdiction ca…

It doesn't really matter what the laws say. When I tell my computer to do something, I expect it to be done, no questions asked. If I tell it to violate a law, I expect that law to be violated. I have free will and the computer must obey that will, not impose somebody else's will on me.
Post reply on HN