51–58 of 58 posts
Earlier quoted context omitted.
Okay, thanks for the explanation. Meanwhile, setting my Samsung Galaxy S9 to no-2G gives me a warning message that cannot be dismissed: "This setting turns off 2G service. If 2G service is off, some app..." (the remainder can't be viewed).
> (the remainder can't be viewed). Sounds like terrific UI design
When sincerely concerned about stingray devices it might be a better idea to either invest in a professional detection appliance or to install applications such as AIMSICD. ( foss/free) If you only deny 2g connectivity; it provides no certainty against being stung and you won't know if you are a target. https://github.com/CellularPrivacy/Android-IMSI-Catcher-Dete...
Earlier quoted context omitted.
I can't speak for Google devices but per Apple's iOS security whitepaper (page 41) [1]: "To protect the device from vulnerabilities in network processor firmware, network interfaces including Wi-Fi and baseband have limited access to application processor memory. When USB or SDIO is used to interface with the network processor, the network processor can’t initiate Direct Memory Access (DMA) transactions to the applic…
PS4 PCI-E accesses were protected with an IO MMU too, but they managed to screw it up. So that doesn't necessarily mean that it's safe.
Earlier quoted context omitted.
PS4 PCI-E accesses were protected with an IO MMU too, but they managed to screw it up. So that doesn't necessarily mean that it's safe.
Indeed even Apple's MMU was bypassed by Google Project Zero [1], but it still significantly increases the cost of exploitation. [1]: https://googleprojectzero.blogspot.com/2017/10/
Earlier quoted context omitted.
Okay, thanks for the explanation. Meanwhile, setting my Samsung Galaxy S9 to no-2G gives me a warning message that cannot be dismissed: "This setting turns off 2G service. If 2G service is off, some app..." (the remainder can't be viewed).
> (the remainder can't be viewed). Sounds like terrific UI design
Maybe it saves a few milliseconds of battery life every charge.
What might me important for some reader: shutting off 2G services means that you won't have telephone voice services, if your operator doesn't support voLTE.
Earlier quoted context omitted.
"What exactly are the practical consequences of being spied on by GMAF, compared to law enforcement?" Should law enforcement order them to relinquish all data about someone wrapped in a gag order, they get all information they need without that someone even noticing.
You believe you are not of interest to LE, and therefore have no need to protect yourself from a Stingray. I disagree, but if we were to accept that premise, then you shouldn't really concern yourself with NSLs, either. So, besides LE taking an interest in you, what are the actual consequences of FAMG spying on you?
Earlier quoted context omitted.
It does mean that SDIO or USB-only access is safe. Of course, it's not 100% safe, but the lack of DMA moves the control over safety from the modem firmware to the application processor.
You'd be surprised how unsafe those are too, even though they aren't RDMA protocols. USB and SDIO stacks aren't really designed with malicious input in mind; it's like the 90s all over again if you think of those as the network protocols they are.